Upgrade Overview

Updates and maintenance are provided for HCE and the RPM packages, including RPM packages deployed on HCE and those related to security updates for vulnerability fixing. To ensure system security, always install updates in a timely manner.

You can upgrade HCE using either dnf, yum, or OSMT:

In Linux, you can use dnf or yum to upgrade or roll back RPM packages.
OSMT is a software tool from Huawei Cloud that you can use to upgrade or roll back HCE and RPM packages. OSMT allows you to customize the upgrade scope and configure scheduled checks and delayed restarts.

Differences between the two methods are described in the following table.

**Table 1** Differences between two methods
Item	dnf or yum	OSMT
RPM package upgrade	Upgrading all RPM packages, including those related to security updates for vulnerability fixing Upgrading only RPM packages related to security updates	Upgrading all RPM packages, including those related to security updates for vulnerability fixing Custom upgrades: Upgrading only RPM packages that do not need an OS restart Upgrading only RPM packages that need an OS restart Upgrading the RPM packages defined in a custom blacklist or whitelist Upgrading RPM packages related to security updates Fixing vulnerabilities Upgrading the RPM packages related to new functions Updating new RPM packages Automatically updating RPM package and delaying restarts until specified times
OS version upgrade	Not supported	Upgrade of HCE 2.0 or later
Supported upgrade version	RPM packages of HCE 1.1 or later	RPM packages of HCE 2.0 or later
Rollback	Rollback to any historical update	Rollback only to the last update