Updated on 2024-11-20 GMT+08:00

Scanning a Patch

Patch Scanning allows you to scan patches on the target ECS, CCE, or BMS instances. The scan is executed based on the selected default baseline, instances, and batch execution policy.

Scenarios

Scan patches on the ECS, CCE, or BMS instances to generate patch compliance reports for analysis using COC.

Precautions

If an instance cannot be selected, check the following items:

  • Whether the UniAgent status of the instance is normal.
  • Whether the OS is supported by the COC patch management feature.
  • Whether the instance is shut down.

Procedure

  1. Log in to COC.
  2. In the navigation pane on the left, choose Resource O&M > Automated O&M. Click Patch management.
  3. On the displayed page, click Patch Scanning to view the compliance report list.

    Figure 1 Compliance report list

  4. Click Create Patch Scanning Task.

    Figure 2 Creating a patch scanning task

  5. Click + Add.

    Figure 3 Selecting instances

  6. Select the ECS, CCE, or BMS instances to scan.

    Figure 4 Selecting the target ECS instances
    Figure 5 Selecting the target CCE instances
    Figure 6 Select the target BMS instances.

  7. Set the batch policy.

    Batch policy
    • Automatic: The selected hosts are automatically divided into multiple batches based on the preset rule.
    • Manual: You can manually create multiple batches and add instances to each batch as required.
    • No batch: All hosts to be executed are in the same batch.
    Figure 7 Selecting batch policies

  8. Configure a suspension policy.

    Suspension threshold: You can set the execution success rate. When the number of failed hosts reaches the pre-set suspension threshold figure, the service ticket status becomes abnormal and the service ticket stops being executed.
    Figure 8 Suspension policy

  9. Click Submit.

    Figure 9 Execution page after clicking Submit

  10. Confirm the execution information. If the information is correct, click OK.
  11. After the service ticket is executed, click Compliance Reporting to go to the Compliance Reporting List to view the compliance status of the ECS instance.

    Figure 10 Service ticket details
    Figure 11 Compliance report list