EasyUC
English
Aurora

Choose appearance

4.8.7

Installation, updates & backup

Applying operating system patches and restarting nodes

Apply signed operating system patches and release upgrades in the Manager and restart nodes.

EasyUC · Version 4.8.7

In EasyUC: Manager → System-Updates

What it is for

The appliance brings its own Linux. EasyUC supplies security fixes for this operating system as a signed patch file. You upload the file in the Manager, the Manager verifies the signature and applies the patch on all nodes. The appliance needs no internet access for this.

Only packages signed by the vendor are accepted. Each node verifies the signature again before applying. If a patch requires a restart, the page offers it per node.

Prerequisites

  • A login to the Manager.
  • The patch file (.patch) or the upgrade package (.osupg) from EasyUC.
  • For large files: an SFTP server that the Manager can reach.
  • Before a release upgrade: VM snapshots of all nodes and a test on a clone.
  • A maintenance window if the patch requires a restart.

Step by step: apply a patch

  1. Open the System-Updates page in the Manager.
  2. Under Aktuelles Betriebssystem, check the level of the nodes (operating system, kernel, Kubernetes, status).
  3. In the System Updates area, drag the file onto the area Patch-Datei hierher ziehen or click to select it.
  4. Wait for "Signatur gueltig". Below it you see Patch-ID, CVEs, Pakete, Zielsystem, Erstellt and Neustart noetig.
  5. Select Auf allen Nodes einspielen.
  6. Under Ergebnis, check the row of each node. "alle Nodes OK" confirms success.
  7. If a node shows Neustart noetig, select Node neustarten there. In a cluster, restart the nodes one after the other and wait each time until the node is Ready again.

Step by step: fetch a large file by SFTP

  1. On the System-Updates page, expand the area "…oder von einem SFTP-Server holen".
  2. Enter Host, Port, Benutzer, Passwort and Pfad zur Datei.
  3. Select Von SFTP holen & einspielen. The Manager downloads the file on the server side; no browser upload is needed.

Step by step: release upgrade of the operating system

  1. Create VM snapshots of all nodes.
  2. Upload the .osupg file or specify the SFTP path. The page shows "Release-Upgrade — EINWEG, NICHT umkehrbar".
  3. Tick Ich habe einen VM-Snapshot der Appliance angelegt.
  4. Type UPGRADE to confirm.
  5. Select Upgrade auf allen Nodes starten or Von SFTP holen & Upgrade starten. The nodes are upgraded and then restart by themselves.

Fields and options

Field / actionMeaning and use
Patch-IDIdentifier of the patch.
CVEsThe vulnerabilities that are fixed.
PaketeThe operating system packages included.
ZielsystemOperating system level and architecture the patch was built for.
Neustart noetig"Ja — Neustart erforderlich" or "Nein".
oder manuell am Node einspielenShows the command for applying the patch on the console of a node, with Kopieren.
Host / Port / Benutzer / Passwort / Pfad zur DateiAccess to the SFTP server. The default port is 22.
Reboot machine (console)Restart of a node through the console menu Administration, independent of a patch.

Check the result and troubleshoot

  • Under Aktuelles Betriebssystem all nodes show the new level and the status Ready.
  • "Signatur ungueltig" with the note "Kein vertrauenswuerdiges UBC-Patch-Bundle. Nicht einspielen.": the file is damaged or does not come from the vendor. Download it again.
  • "Fehler auf mind. einem Node": the output of the affected node is shown in its row. Fix the cause and apply the patch again.
  • After Node neustarten the node is briefly unreachable. K3s and EasyUC start again automatically.
  • The labels on this page are German and write umlauts as ae, oe and ue. This chapter quotes them as the interface shows them.

Related chapters