Welcome to this presentation showing how to use the Oracle Cloud Infrastructure OS Management
service for Oracle Linux instances.
The purpose of the OS Management service is to simplify and automate updating and patching
the operating system environment on your Oracle Cloud Infrastructure instances.
The OS Management service can be implemented for individual managed instances, or a managed
instance group can be created to manage multiple instances running the same OS release and
version.
On our console, looking the navigation menu and have selected Compute.
We see the links to various OS Management resources listed here.
And if we click on the OS Management list title, it takes us to the OS Management resources
page.
The page defaults to look the Scheduled Jobs list, and we see there are no jobs currently
scheduled.
Scheduled jobs are used to add, remove or update packages on an instance or group.
Single or multiple work requests are created when an update related task is being performed.
The Work Requests list can be viewed to track progress of jobs and if they successfully
completed or failed.
The OS Management service maintains a history of scheduled jobs and their associated work
requests.
However, the service cleans up work requests older than 2 weeks which have completed successfully
or failed.
Managed Instance Groups enable us to group instances together for updates.
Software Sources can be configured and enabled on the instance, and then packages added from
the new software source.
We can search for and update instances with specific CVEs, or common vulnerabilities and
exposures, and view packages that are affected by the CVE and install related packages on
selectable instances.
Packages are provided by software sources which are yum repositories, and are enabled
for the managed instance.
The Packages tool allows us to search for packages by name, and we can then view package
details and install the package on selected instances.
The Metrics and Alarms allows us to view metrics on managed instances and to create alarms.
Now lets switch to an instance already created, called mor-demoinst-10.
Clicking on the Oracle Cloud Agent tab, we see that the OS Management Service Agent is
enabled. This is the default state for a new Oracle Linux instance.
Scrolling down to Resources we select OS Management.
We need to scroll down again to see the OS Management section.
This shows the number of available security, bug, and enhancement updates.
Clicking on the three dots menu we are given options for managing security updates, all
updates, and to go the OS Management details page for this instance.
Selecting install security updates, or install all updates, will give us a confirmation dialog
to install the updates immediately.
But for now lets view the OS management details for the instance instead.
We select the View OS Management Details link.
The page defaults to listing all available package updates for the instance.
There are multiple pages of updates in the list so scrolling down and selecting the second
page shows more to the list.
Clicking to return to the first page, we click on the three dots menu for the first entry
in the list.
We click Install Update to install this bug fix.
The Install Package Update dialog offers us to select to Install Now or choose a Custom
Schedule.
We can modify the offered scheduled job name, so I will make it Update Package new.
Clicking the date and time field allows us to choose a date and time.
I will choose today and set the time to 23:00.
We click Install Package Update to create the scheduled job.
This returns us to the Scheduled Jobs list, which now displays our new job in the list.
Clicking on the three dots menu beside our job, we can view the details or delete the
job.
We return to the list of available updates by selecting Available Package Updates.
We can choose to install all available updates by selecting the left column heading check
box, which selects all check boxes, then clicking the Install Updates button.
The dialog offers us the Install Now or Custom Schedule option.
We wont do this now so we click Cancel to exit the dialog.
We click on Available Packages to get a list of all packages for the instance.
The three dots menu offers options to view the details or install a package.
And we can use the checkbox and Install Updates button to install individually or install
all of the packages in a single job.
Once again we get the option to install now or to create a custom schedule.
We will cancel this and return to the list.
Clicking Installed Packages lists all packages installed on the instance.
The three dots menu allows us to view the package details or remove the package from
the instance.
Next we select Groups, which will list any managed instance group this instance belongs
to.
Currently it is not part of a group so lets create one by selecting OS Management in the
breadcrumbs to take us to the OS Management Resources page.
We click Create Instance Group, which opens the Create Instance Group dialog.
I'll select Linux as the OS family and give my group the name mike-group, and click Create
Group.
This takes us to the group details page for the new group.
Here we can add managed instances to the group by clicking Add Managed Instances.
The dialog confirms the compartment the instance belongs to, and creates a list of all Linux
instances in that compartment that have the OS Management agent enabled.
Managed instance groups must be composed of instances that are of the same OS family and
release.
You can find out more about this at the link provided.
I'll select two Oracle Linux 7 instances I want in the group and click Add Managed Instance.
The list of managed instances now appears as members of the group.
Lets return to OS Management of our instance by clicking on its name mor-demoinst-10 in
the group.
OS management uses software sources to provide packages to instances and to track the available
updates to those packages.
Selecting Software Sources we get a list of software sources, or repositories, that are
enabled in the instance.
Opening a terminal session to the instance and running the command yum repolist, shows
the same list of software sources as seen in the web console.
Returning to the console, and to add a new source, we click the Add button.
In the Add Software Sources dialog we get a list of available software source repositories.
We click the check box beside the Ksplice aware userspace packages for Oracle Linux
7 to select it as a new source, and then Add to add it as a source to our instance list.
It now appears in our list.
Returning to the instance terminal, we again run the command yum repolist, and now see
the source repository added to the list.
Returning to the console, we can also remove a software source here by selecting the check
box for our newly added source and clicking Remove.
In the confirmation dialog, we again click Remove.
The dialog updates to show it has been done, and we click Close to close the dialog.
The entry has been removed from the list.
Returning to the terminal we clear the screen and run the command yum repolist.
The repository entry is not listed anymore.
Returning to the console.
The three dots menu gives options for the individual software sources to view details
and remove.
Clicking View Details opens the source details page and lists the packages in the software
source.
Here we use the three dots menu again to view details of a specific package, to install
or remove a specific package.
By clicking on the column check boxes we can select multiple packages and use the Install
and Remove buttons to install or remove the selected packages.
The software source can also be removed by selecting the Delete button for the page.
We click the browser back arrow and return to the OS Management details page for the
selected instance.
Next we click Schedule Jobs.
Earlier we scheduled a job to install a package update.
The job is listed and clicking the three dots menu we have the options to view the job details
and delete the job.
We now click on Work Request.
The OS management service maintains a history of scheduled jobs and their associated work
requests.
Here we have five work requests which were package update install jobs, successfully
run.
Lets now look at the search function for these resources by first clicking on Installed Packages.
Many of the options under resources includes a search feature, for example with Installed
Packages there is a search by prefix option.
Entering the letter b and pressing enter, filters the list to display only package names
beginning with b.
The Available Package Updates, Available Packages, Installed Packages, Groups, Software Sources,
and Scheduled Jobs all have this search feature.
Work Requests does not.
Selecting OS Management from the breadcrumbs we can access the Packages and CVEs options.
For packages we can search by name.
Entering the letter b again, and pressing enter, we see the packages with names beginning
with b.
The list shows the version, the architecture, and the software sources it's available from.
We can click any of the links to get more information.
Now we click on CVEs.
As the text in the list states, we need to know the specific CVE identifier and search
for it in the search box.
We use the link shown to open a browser window to an Oracle Linux page where we can get information
on CVEs.
Selecting Search CVEs opens a page which shows us all CVEs.
As example, we copy the CVE identifier of the first entry and return to the web console.
We paste the CVE identifier into the search window.
Pressing return we get a list of packages that are affected by the CVE.
Clicking on the name of the first listed package, we see the package details screen and the
file list.
Clicking on the Dependencies tab, we see the list of required dependencies.
We can click the Install button and are provided with a dialog allowing us to select the relevant
instances the package will be installed to.
Oracle provides an extensive number of resources which you can use to learn about this subject
and others.
Use the links here to find more content about this video, as well as Oracle Linux and using
Linux on Oracle Cloud Infrastructure.
That's the end of this video.
Thanks for watching.