You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 11 Next »

Introduction

SOS provides JS7 - Patch Management in the event of severe bugs or Vulnerabilities.

Apply Patch to Agent On Premises

The Agent expects Java .jar libraries for patches in the following locations:

  • Unix
    • /opt/sos-berlin.com/js7/agent/lib/patches
  • Windows
    • C:\Program Files\sos-berlin.com\js7\agent\lib\patches

The paths noted above are specified during installation and can point to a different location. The lib/patches part of the path will be the same for all installations.

Apply Patch

Apply the following steps for an Agent instance. If an Agent cluster is operated then these steps are to be performed for all Agent cluster members.

The following example makes use of a patch available from https://download.sos-berlin.com/patches/patch-20220331-JS-1984-2.2.3.jar. This patch does not impact an Agent installation and is used for instructional purposes only - for details see JS-1984.


Example how to apply a patch to an Agent for Unix
# navigate to the target directory for patches
cd /opt/sos-berlin.com/js7/agent/lib/patches

# download the patch archive
curl https://download.sos-berlin.com/patches/patch-20220331-JS-1984-2.2.3.jar -O
Example how to apply a patch to an Agent for Windows
@rem navigate to the target directory for patches
cd %ProgramFiles%\sos-berlin.com\js7\agent\lib\patches

@rem download from URL https://download.sos-berlin.com/patches/patch-20220331-JS-1984-2.2.3.jar
@rem copy from download location (could be different from this example)
copy %USERPROFILE%\Downloads\patch-20220331-JS-1984-2.2.3.jar .


Note: The Agent instance has to be restarted to apply patches.

Hint: For automated rollout of patches see JS7 - Automated Update of Agent.

Remove Patch

Patches are automatically removed when an Agent release is installed using the JS7 - Agent - Installation Using the Windows Graphical Installer.

Patches can be manually removed by dropping the files in the patches sub-directory which holds the patch archives.

Note: The Agent has to be restarted to apply removal of patches.

Apply Patch to Agent Docker® Containers

The Agent container expects Java .jar libraries for patches in the following location:

  • /var/sos-berlin.com/js7/agent/config/patches
  • The directory /var/sos-berlin.com/js7/agent typically is mounted to a Docker var volume when running the container: for details see the JS7 - Agent Installation for Docker Containers article.
  • If the config/patches sub-directory does not exist then it should be created before storing the patch file.

Apply Patch

On start-up the Agent container checks the directory noted above for the existence of .jar files and applies the patches, for details see the On Premises section above.

Patches are not applied persistently to a container. Therefore patch files remain in place in the /var/sos-berlin.com/js7/agent/config/patches sub-directory (typically mounted to the config/lib volume directory) as long as the patch is to be applied.

Note: The Agent container has to be restarted before patches are applied.

Remove Patch

Patches are removed by dropping the files in the patches sub-directory.

Note: The Agent container has to be restarted to apply removal of patches.



  • No labels