Introduction
The patch management feature allows you to scan or install patches for Elastic Compute Service (ECS) instances based on default or custom patch baselines. You can also select updates such as security-related updates to automatically install patches for ECS instances.
Description
Most enterprises often have specific compliance requirements for IT assets, including Alibaba Cloud ECS instances. The system vulnerabilities of the instances need to be fixed at the earliest opportunity to prevent security attacks, or some software packages need to be kept up to date. In such cases, the patch management feature can be used. You can use the patch management feature to install patches for operating systems and applications. You can use the patch management feature to install a service pack on a Windows instance or update a minor version for a Linux instance. You can install patches for multiple ECS instances that run the same type of operating system at a time. The following types of operating systems are supported: Alibaba Cloud Linux, CentOS, Debian, Ubuntu, and Windows Server. You can scan instances only to view reports on missing patches, or scan instances and automatically install all missing patches. The following topics help you get started with the patch management feature:
1. Patch baseline: provides an overview of patch baselines and describes how to manage patch baselines.
2. Scheduled fix: describes the background information, required permissions, and procedure for configuring a scheduled fix.
3. Immediate fix: describes the background information, required permissions, and procedure for configuring an immediate fix.
Supported operating systems
Linux
Alibaba Cloud Linux 2 and 3
Red Hat Enterprise Linux 7, 8, and 9
CentOS 7 and CentOS Stream 9
Anolis OS 8
Debian 11 and 12
Ubuntu 16.04, 18.04, 20.04, and 22.04
AlmaLinux OS 8 and 9
Rocky Linux 8 and 9
Fedora 37, 38, and 39
openSUSE 15
Windows
Windows Server 2012
Windows Server 2016
Windows Server 2019
Windows Server 2022