diff --git a/docs/en/server/_toc.yaml b/docs/en/server/_toc.yaml index 8a231a5ed615722eff5e67bca2f146a838023fec..1718e20a9d335b55d265ba35039ebb092b856f5e 100644 --- a/docs/en/server/_toc.yaml +++ b/docs/en/server/_toc.yaml @@ -15,7 +15,9 @@ sections: - href: ./administration/compa_command/_toc.yaml - label: O&M sections: - - href: ./maintenance/aops/_toc.yaml + - href: + upstream: https://gitee.com/openeuler/aops-zeus/blob/master/docs/en/24.03_lts_sp2/_toc.yaml + path: ./aops - href: ./maintenance/gala/_toc.yaml - href: ./maintenance/sysmonitor/_toc.yaml - href: ./maintenance/kernel_live_upgrade/_toc.yaml diff --git a/docs/en/server/administration/compa_command/_toc.yaml b/docs/en/server/administration/compa_command/_toc.yaml index 672975b096bbd39dde9631dbf52842528ff7f597..ae30012622de4197d7fe4ca8c40ad497980e0e47 100644 --- a/docs/en/server/administration/compa_command/_toc.yaml +++ b/docs/en/server/administration/compa_command/_toc.yaml @@ -1,6 +1,6 @@ label: Compatibility Commands isManual: true -description: The shell and Linux commands, rebuilt using Rust, maintain compatibility with native Linux commands. +description: The shell and Linux commands, rebuilt using Rust, maintain compatibility with native Linux commands sections: - label: Compatibility Commands href: ./overview.md diff --git a/docs/en/server/installation_upgrade/upgrade/_toc.yaml b/docs/en/server/installation_upgrade/upgrade/_toc.yaml index e65b42a317afd29358abb3f24a85abbc1f144280..3b40a7d605f4509bca6ca2378799d6467472f6e0 100644 --- a/docs/en/server/installation_upgrade/upgrade/_toc.yaml +++ b/docs/en/server/installation_upgrade/upgrade/_toc.yaml @@ -1,6 +1,6 @@ label: Upgrade Guide isManual: true -description: Upgrade openEuler. +description: Upgrade openEuler sections: - label: Upgrade and Downgrade Guide href: ./openEuler_22.03_lts_upgrade_and_downgrade_guide.md diff --git a/docs/en/server/maintenance/aops/_toc.yaml b/docs/en/server/maintenance/aops/_toc.yaml deleted file mode 100644 index 6475598203aa422c78f4f689c13e1d03d4d1997d..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/_toc.yaml +++ /dev/null @@ -1,22 +0,0 @@ -label: A-Ops User Guide -isManual: true -description: A-Ops enables quick fault identification and centralized configuration management. -sections: - - label: A-Ops Deployment - href: ./deploying_aops.md - - label: A-Ops Intelligent Location Framework User Guide - href: ./aops_intelligent_positioning_framework_user_manual.md - - label: A-Ops Vulnerability Management Module User Guide - href: ./aops_vulnerability_management_module_user_manual.md - - label: Hot Patch DNF Plugin Command Usage - href: ./dnf_command_usage.md - - label: Configuration Tracing User Guide - href: ./configuration_tracing_service_user_manual.md - - label: Community Hot Patch Creation and Release Process - href: ./community_hotpatch_creation_and_release_process.md - - label: A-Ops Asset Management User Guide - href: ./aops_asset_management_user_manual.md - - label: Quick Deployment of A-Ops - href: ./quick_deployment_of_aops.md - - label: gala-ragdoll User Guide - href: ./configuration_tracing_service_user_manual.md \ No newline at end of file diff --git a/docs/en/server/maintenance/aops/aops_asset_management_user_manual.md b/docs/en/server/maintenance/aops/aops_asset_management_user_manual.md deleted file mode 100644 index 304c6db2dc064b73a960d38b7fb5193f3a31dd73..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/aops_asset_management_user_manual.md +++ /dev/null @@ -1,3 +0,0 @@ -# A-Ops Asset Management User Guide - -This document is currently not available in English. diff --git a/docs/en/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md b/docs/en/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md deleted file mode 100644 index 0b3c1cf7e390a4a41955c7bb09f4df2891634005..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md +++ /dev/null @@ -1,3 +0,0 @@ -# A-Ops Intelligent Location Framework User Guide - -This document is currently not available in English. diff --git a/docs/en/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md b/docs/en/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md deleted file mode 100644 index 8e1e596136dd1ccd6f542724c30db33311afe280..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md +++ /dev/null @@ -1,3 +0,0 @@ -# A-Ops Vulnerability Management Module User Guide - -This document is currently not available in English. diff --git a/docs/en/server/maintenance/aops/community_hotpatch_creation_and_release_process.md b/docs/en/server/maintenance/aops/community_hotpatch_creation_and_release_process.md deleted file mode 100644 index ac8d71798cd8a8251aec0275a7377753484aa4f6..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/community_hotpatch_creation_and_release_process.md +++ /dev/null @@ -1,3 +0,0 @@ -# Community Hot Patch Creation and Release Process - -This document is currently not available in English. diff --git a/docs/en/server/maintenance/aops/configuration_tracing_service_user_manual.md b/docs/en/server/maintenance/aops/configuration_tracing_service_user_manual.md deleted file mode 100644 index a7e7d1c56a51dabffa7d8f9684197a1709590d9a..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/configuration_tracing_service_user_manual.md +++ /dev/null @@ -1,3 +0,0 @@ -# gala-ragdoll User Guide - -This document is currently not available in English. diff --git a/docs/en/server/maintenance/aops/deploying_aops.md b/docs/en/server/maintenance/aops/deploying_aops.md deleted file mode 100644 index 52c7d048be6e9746263979034017be9534da479e..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/deploying_aops.md +++ /dev/null @@ -1,943 +0,0 @@ -# Deploying A-Ops - -## 1 Introduction to A-Ops - -A-Ops is a service used to improve the overall security of hosts. It provides functions such as asset management, vulnerability management, and configuration source tracing to identify and manage information assets, monitor software vulnerabilities, and rectify system faults on hosts, ensuring stable and secure running of hosts. - -The following table describes the modules related to the A-Ops service. - -| Module | Description | -| ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| aops-ceres | Client of the A-Ops service.
Collects host data and manages other data collectors (such as gala-gopher).
Responds to the commands delivered by the management center and processes the requirements and operations of the management center. | -| aops-zeus | A-Ops basic application management center, which interacts with other modules. The default port number is 11111.
Provides the basic host management service externally, such as adding and deleting hosts and host groups. | -| aops-hermes | Provides a visualized operation interface for A-Ops to display data information to users, improving service usability. | -| aops-apollo | Vulnerability management module of A-Ops. The default port number is 11116.
Identifies clients, and periodically obtains security notices released by the openEuler community and updates them to the vulnerability database.
Detects vulnerabilities in the system and software by comparing the vulnerabilities with those in the vulnerability database. | -| aops-vulcanus | Basic tool library of A-Ops. **Except aops-ceres and aops-hermes, modules must be installed and used together with this module.** | -| aops-tools | Provides the basic environment deployment script and database table initialization. The script is available in the **/opt/aops/scripts** directory after A-Ops is installed. | -| gala-ragdoll | Configuration source tracing module of A-Ops.
Uses Git to monitor and record configuration file changes. The default port number is 11114. | -| dnf-hotpatch-plugin | DNF plug-in, which allows DNF to recognize hot patch information and provides hot patch scanning and application. | - -## 2 Environment Requirements - -You are advised to use four hosts running openEuler 24.03 LTS for deployment. Use three as the server and one as the managed host managed by A-Ops. **Configure the update repository** ([Q6: update Repository Configuration](#q6-update-repository-configuration)). The deployment scheme is as follows: - -- Host A: For MySQL, Redis, and Elasticsearch deployment. It provides data service support. The recommended memory is more than 8 GB. -- Host B: For the A-Ops asset management service (zeus), frontend display, and complete service function support. The recommended memory is more than 6 GB. -- Host C: For the A-Ops configuration source tracing service (gala-ragdoll) and vulnerability management. The recommended memory is 4 GB or more. -- Host D: As an A-Ops client and is used as a host managed and monitored by A-Ops. (aops-ceres can be deployed on hosts that need to be managed.) - -| Host | IP Address | Module | -| ------ | ----------- | ------------------------------------- | -| Host A | 192.168.1.1 | MySQL, Elasticsearch, Redis | -| Host B | 192.168.1.2 | aops-zeus, aops-hermes, aops-diana | -| Host C | 192.168.1.3 | aops-apollo, gala-ragdoll, aops-diana | -| Host D | 192.168.1.4 | aops-ceres, dnf-hotpatch-plugin | - ->Before deployment, disable the **firewall and SELinux** on each host. - -- Disable the firewall. - -```shell -systemctl stop firewalld -systemctl disable firewalld -systemctl status firewalld -setenforce 0 - -``` - -- Disable SELinux. - -```shell -# Change the status of SELinux to disabled in /etc/selinux/config. - -vi /etc/selinux/config -SELINUX=disabled - -# After changing the value, press ESC and enter :wq to save the modification. -``` - -Note: SELinux will be disabled after a reboot. - -## 3. Server Deployment - -### 3.1 Asset Management - -To use the asset management function, you need to deploy the aops-zeus, aops-hermes, MySQL, and Redis services. - -#### 3.1.1 Node Information - -| Host | IP Address | Module | -| ------ | ----------- | ------------------------------------- | -| Host A | 192.168.1.1 | MySQL, Redis | -| Host B | 192.168.1.2 | aops-zeus, aops-hermes | - -#### 3.1.2 Deployment Procedure - -##### 3.1.2.1 Deploying MySQL - -- Install MySQL. - -```shell -yum install mysql-server -``` - -- Modify the MySQL configuration file. - -```bash -vim /etc/my.cnf -``` - -- Add **bind-address** and set it to the IP address of the local host in the **mysqld** section. - -```ini -[mysqld] -bind-address=192.168.1.1 -``` - -- Restart the MySQL service. - -```bash -systemctl restart mysqld -``` - -- Set the MySQL database access permission for the **root** user. - -```mysql -$ mysql - -mysql> show databases; -mysql> use mysql; -mysql> select user,host from user; -- If the value of host is localhost, only the local host can connect to the MySQL database. The external network and local software client cannot connect to the MySQL database. - -+---------------+-----------+ -| user | host | -+---------------+-----------+ -| root | localhost | -| mysql.session | localhost | -| mysql.sys | localhost | -+---------------+-----------+ -3 rows in set (0.00 sec) -``` - -```mysql -mysql> update user set host = '%' where user='root'; -- Allow the access of the root user using any IP address. -mysql> flush privileges; -- Refresh the permissions. -mysql> exit -``` - -##### 3.1.2.2 Deploying Redis - -- Install Redis. - -```shell -yum install redis -y -``` - -- Modify the Redis configuration file. - -```shell -vim /etc/redis.conf -``` - -Bind IP addresses. - -```ini -# It is possible to listen to just one or multiple selected interfaces using -# the "bind" configuration directive, followed by one or more IP addresses. -# -# Examples: -# -# bind 192.168.1.100 10.0.0.1 -# bind 127.0.0.1 ::1 -# -# ~~~ WARNING ~~~ If the computer running Redis is directly exposed to the -# internet, binding to all the interfaces is dangerous and will expose the -# instance to everybody on the internet. So by default we uncomment the -# following bind directive, that will force Redis to listen only into -# the IPv4 lookback interface address (this means Redis will be able to -# accept connections only from clients running into the same computer it -# is running). -# -# IF YOU ARE SURE YOU WANT YOUR INSTANCE TO LISTEN TO ALL THE INTERFACES -# JUST COMMENT THE FOLLOWING LINE. -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -bind 127.0.0.1 192.168.1.1# Add the actual IP address of host A. -``` - -- Start the Redis service. - -```shell -systemctl start redis -``` - -##### 3.1.2.3 Deploying Prometheus - -- Install Prometheus. - -```shell -yum install prometheus2 -y -``` - -- Modify the Prometheus configuration file. - -```shell -vim /etc/prometheus/prometheus.yml -``` - -- Add the gala-gopher IP addresses of the managed client to the monitored targets of Prometheus. - -> In this document, host D is the client. Add the gala-gopher address of host D. - -- Modify the **targets** configuration item. - -```yaml -# A scrape configuration containing exactly one endpoint to scrape: -# Here it's Prometheus itself. -scrape_configs: - # The job name is added as a label `job=` to any timeseries scraped from this config. - - job_name: 'prometheus' - - # metrics_path defaults to '/metrics' - # scheme defaults to 'http'. - - static_configs: - - targets: ['localhost:9090', '192.168.1.4:8888'] -``` - -Start the Prometheus service. - -```shell -systemctl start prometheus -``` - -##### 3.1.2.4 Deploying aops-zeus - -- Install aops-zeus. - -```shell -yum install aops-zeus -y -``` - -- Modify the configuration file. - -```shell -vim /etc/aops/zeus.ini -``` - -- Change the IP address of each service in the configuration file to the actual IP address. In this document, aops-zeus is deployed on host B. Therefore, you need to set the IP address to the IP address of host B. - -```ini -[zeus] -ip=192.168.1.2 // Change the IP address to the actual IP address of host B. -port=11111 - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/zeus.log -http-timeout=600 -harakiri=600 -processes=2 // Generate a specified number of workers or processes. -gevent=100 // Number of gevent asynchronous cores - -[mysql] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[agent] -default_instance_port=8888 - -[redis] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=6379 - -[apollo] -ip=192.168.1.3 // Change the IP address to the actual IP address of the apollo service deployment. It is recommended that apollo and zeus be deployed separately. This section is not required if apollo is not used. -port=11116 -``` - -> **Set the MySQL database mode to password mode**. For details, see [Q5: MySQL Password Mode](#q5-mysql-password-mode) - -- Start the aops-zeus service. - -```shell -systemctl start aops-zeus -``` - -**Note: [Initialize the aops-zeus database](#3125-initializing-the-aops-zeus-database) before starting the service.** - -> If the zeus service fails to be started and the error message indicates that the MySQL database cannot be connected, check if a MySQL password is set. If yes, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -#### 3.1.2.5 Initializing the aops-zeus Database - -- Initialize the database. - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init zeus -``` - -**Note: If aops-tools is not installed, run the SQL script to initialize. The script path is /opt/aops/database/zeus.sql** - -[Q5: MySQL Password Mode](#q5-mysql-password-mode) - -[Q7: Nonexisting /opt/aops/scripts/deploy](#q7-nonexisting-optaopsscriptsdeploy) - -##### 3.1.2.6 Deploying aops-hermes - -- Install aops-hermes. - -```shell -yum install aops-hermes -y -``` - -- Modify the configuration file. - -```shell -vim /etc/nginx/aops-nginx.conf -``` - -- Some service configurations: - - > As the services are deployed on host B, configure the Nginx proxy to set the services addresses to the actual IP address of host B. - -```ini - # Ensure that Nginx still uses index.html as the entry when the front-end route changes. - location / { - try_files $uri $uri/ /index.html; - if (!-e $request_filename){ - rewrite ^(.*)$ /index.html last; - } - } - # Change it to the actual IP address of the host where aops-zeus is deployed. - location /api/ { - proxy_pass http://192.168.1.2:11111/; - } - # Enter the IP address of gala-ragdoll. IP addresses that involve port 11114 need to be configured. - location /api/domain { - proxy_pass http://192.168.1.3:11114/; - rewrite ^/api/(.*) /$1 break; - } - # Enter the IP address of gala-apollo. - location /api/vulnerability { - proxy_pass http://192.168.1.3:11116/; - rewrite ^/api/(.*) /$1 break; - } -``` - -- Enable the aops-hermes service. - -```shell -systemctl start aops-hermes -``` - -### 3.2 Vulnerability Management - -The CVE management module is implemented based on the [asset management](#31-asset-management) module. Therefore, you need to [deploy the module](#312-deployment-procedure) before deploying aops-apollo. - -The running of the aops-apollo service requires the support of the **MySQL, Elasticsearch, and Redis** databases. - -#### 3.2.1 Node Information - -| Host | IP Address | Module | -| ------ | ----------- | ------------- | -| Host A | 192.168.1.1 | Elasticsearch | -| Host C | 192.168.1.3 | aops-apollo | - -#### 3.2.2 Deployment Procedure - -See [Asset Management](#312-deployment-procedure). - -##### 3.2.2.1 Deploying Elasticsearch - -- Configure the repository for Elasticsearch. - -```shell -echo "[aops_elasticsearch] -name=Elasticsearch repository for 7.x packages -baseurl=https://artifacts.elastic.co/packages/7.x/yum -gpgcheck=1 -gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch -enabled=1 -autorefresh=1 -type=rpm-md" > "/etc/yum.repos.d/aops_elasticsearch.repo" -``` - -- Install Elasticsearch. - -```shell -yum install elasticsearch-7.14.0-1 -y -``` - -- Modify the Elasticsearch configuration file. - -```shell -vim /etc/elasticsearch/elasticsearch.yml -``` - -```yml -# ------------------------------------ Node ------------------------------------ -# -# Use a descriptive name for the node: -# -node.name: node-1 -``` - -```yml -# ---------------------------------- Network ----------------------------------- -# -# By default Elasticsearch is only accessible on localhost. Set a different -# address here to expose this node on the network: -# -# Change the value to the actual IP address of host A. -network.host: 192.168.1.1 -# -# By default Elasticsearch listens for HTTP traffic on the first free port it -# finds starting at 9200. Set a specific HTTP port here: -# -http.port: 9200 -# -# For more information, consult the network module documentation. -# -``` - -```yml -# --------------------------------- Discovery ---------------------------------- -# -# Pass an initial list of hosts to perform discovery when this node is started: -# The default list of hosts is ["127.0.0.1", "[::1]"] -# -#discovery.seed_hosts: ["host1", "host2"] -# -# Bootstrap the cluster using an initial set of master-eligible nodes: -# -cluster.initial_master_nodes: ["node-1"] -# Cross-domain configurations -http.cors.enabled: true -http.cors.allow-origin: "*" -# -``` - -- Restart the Elasticsearch service. - -```shell -systemctl restart elasticsearch -``` - -##### 3.2.2.2 Deploying aops-apollo - -- Install aops-apollo. - -```shell -yum install aops-apollo -``` - -- Modify the configuration file. - -```shell -vim /etc/aops/apollo.ini -``` - -- Change the IP address of each service in the **apollo.ini** to the actual IP address. - -```ini -[apollo] -ip=192.168.1.3// Change it to the actual IP address of host C. -port=11116 -host_vault_dir=/opt/aops -host_vars=/opt/aops/host_vars - -[zeus] -ip=192.168.1.2 // Change it to the actual IP address of host B. -port=11111 - -# hermes info is used to send mail. -[hermes] -ip=192.168.1.2 // Change it to the actual IP address of aops-hermes, for example, the IP address of host B. -port=80 // Change it to the actual port of the hermes service. - -[cve] -cve_fix_function=yum -# value between 0-23, for example, 2 means 2:00 in a day. -cve_scan_time=2 - -[mysql] -ip=192.168.1.1 // Change it to the actual IP address of host A. -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[elasticsearch] -ip=192.168.1.1 // Change it to the actual IP address of host A. -port=9200 -max_es_query_num=10000000 - -[redis] -ip=192.168.1.1 // Change it to the actual IP address of host A. -port=6379 - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/apollo.log -http-timeout=600 -harakiri=600 -processes=2 -gevent=100 -``` - -> **Set the MySQL database to the password mode**. For details, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -- Start the aops-apollo service. - -```shell -systemctl start aops-apollo -``` - -**Note: [Initialize the aops-apollo database](#3223-initializing-the-aops-apollo-database) before starting the service.** - -> If the apollo service fails to be started and the error message indicates that the MySQL database cannot be connected, check if a MySQL password is set. If yes, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -#### 3.2.2.3 Initializing the aops-apollo Database - -- Initialize the apollo database. - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init apollo -``` - -**Note: If aops-tools is not installed, run the SQL script to initialize. The script path is /opt/aops/database/apollo.sql** - -[Q5: MySQL Password Mode](#q5-mysql-password-mode) - -[FAQs: Nonexisting /opt/aops/scripts/deploy](#q7-nonexisting-optaopsscriptsdeploy) - -### 3.3 Configuring Source Tracing - -A-Ops configuration source tracing depends on gala-ragdoll. Therefore, you need to complete the deployment of [Asset Management](#31-asset-management) and then deploy gala-ragdoll. - -#### 3.3.1 Node Information - -| Host | IP Address | Module | -| ------ | ----------- | ------------ | -| Host C | 192.168.1.3 | aops-ragdoll | - -#### 3.3.2 Deployment Procedure - -See [Asset Management](#31-asset-management). - -##### 3.3.2.1 Deploying gala-ragdoll - -- Install gala-ragdoll. - -```shell -yum install gala-ragdoll python3-gala-ragdoll -y -``` - -- Modify the configuration file. - -```shell -vim /etc/ragdoll/gala-ragdoll.conf -``` - -> **Change the IP address in collect_address of the collect section to the IP address of host B, and change the values of collect_api and collect_port to the actual API and port number.** - -```ini -[git] -git_dir = "/home/confTraceTest" -user_name = "user_name" -user_email = "user_email" - -[collect] -collect_address = "http://192.168.1.2" // Change it to the actual IP address of host B. -collect_api = "/manage/config/collect" // The value is an example. Change it to the actual value. -collect_port = 11111 // Change it to the actual port number of the aops-zeus service. - -[sync] -sync_address = "http://192.168.1.2" -sync_api = "/manage/config/sync" // The value is an example. Change it to the actual value. -sync_port = 11111 - -[objectFile] -object_file_address = "http://192.168.1.2" -object_file_api = "/manage/config/objectfile" // The value is an example. Change it to the actual value. -object_file_port = 11111 - -[ragdoll] -port = 11114 -``` - -- Start the gala-ragdoll service. - -```shell -systemctl start gala-ragdoll -``` - -## 3.4 Exception Detection - -The exception detection function is implemented based on the aops-zeus service. Therefore, you need to deploy aops-zeus and then aops-diana. - -Considering distributed deployment, the aops-diana service must be deployed on both host B and host C to act as the producer and consumer in the message queue, respectively. - -The running of the aops-diana service requires the support of MySQL, Elasticsearch, Kafka, and Prometheus. - -### 3.4.1 Node Information - -| Host | IP Address | Module | -| ------ | ----------- | ---------- | -| Host A | 192.168.1.1 | Kafka | -| Host B | 192.168.1.2 | aops-diana | -| Host C | 192.168.1.3 | aops-diana | - -### 3.4.2 Deployment Procedure - -[Asset Management](#312-deployment-procedure) - -[Deploying Elasticsearch](#3221-deploying-elasticsearch) - -#### 3.4.2.1 Deploying Kafka - -Kafka uses ZooKeeper to manage and coordinate agents. Therefore, you need to deploy ZooKeeper when deploying Kafka. - -- Install ZooKeeper. - -```shell -yum install zookeeper -y -``` - -- Start the ZooKeeper service. - -```shell -systemctl start zookeeper -``` - -- Install Kafka. - -```shell -yum install kafka -y -``` - -- Modify the Kafka configuration file. - -```shell -vim /opt/kafka/config/server.properties -``` - -Change the value of **listeners** to the IP address of the local host. - -```yaml -############################# Socket Server Settings ############################# - -# The address the socket server listens on. It will get the value returned from -# java.net.InetAddress.getCanonicalHostName() if not configured. -# FORMAT: -# listeners = listener_name://host_name:port -# EXAMPLE: -# listeners = PLAINTEXT://your.host.name:9092 -listeners=PLAINTEXT://192.168.1.1:9092 -``` - -- Start the Kafka service. - -```shell -cd /opt/kafka/bin -nohup ./kafka-server-start.sh ../config/server.properties & - -# Check all the outputs of nohup. If the IP address of host A and the Kafka startup success INFO are displayed, Kafka is started successfully. -tail -f ./nohup.out -``` - -#### 3.4.2.2 Deploying diana - -- Install aops-diana. - -```shell -yum install aops-diana -``` - -Modify the configuration file. -> The aops-dianas on host B and host C play different roles, which are **distinguished based on the differences in the configuration file**. - -```shell -vim /etc/aops/diana.ini -``` - -(1) Start aops-diana on host C in executor mode. It functions as the consumer in the Kafka message queue. The configuration file to be modified is as follows: - -```ini -[diana] -ip=192.168.1.3 // Change the IP address to the actual IP address of host C. -port=11112 -mode=executor // This mode is the executor mode. It is used as the executor in common diagnosis mode and functions as the consumer in Kafka. -timing_check=on - -[default_mode] -period=60 -step=60 - -[elasticsearch] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=9200 -max_es_query_num=10000000 - - -[mysql] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=10000 -pool_recycle=7200 - -[redis] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=6379 - - -[prometheus] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=9090 -query_range_step=15s - -[agent] -default_instance_port=8888 - -[zeus] -ip=192.168.1.2 // Change the IP address to the actual IP address of host B. -port=11111 - -[consumer] -kafka_server_list=192.168.1.1:9092 // Change the IP address to the actual IP address of host C. -enable_auto_commit=False -auto_offset_reset=earliest -timeout_ms=5 -max_records=3 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID -result_name=CHECK_RESULT - -[producer] -kafka_server_list = 192.168.1.1:9092 // Change the IP address to the actual IP address of host C. -api_version = 0.11.5 -acks = 1 -retries = 3 -retry_backoff_ms = 100 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/diana.log -http-timeout=600 -harakiri=600 -processes=2 -threads=2 -``` - -> **Set the MySQL database to the password mode**. For details, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -(2) Start aops-diana on host B in configurable mode. It functions as the producer in the Kafka message queue. The aops-diana port configuration in the aops-hermes file is subject to the IP address and port number of this host. The configuration file to be modified is as follows: - -```ini -[diana] -ip=192.168.1.2 // Change the IP address to the actual IP address of host B. -port=11112 -mode=configurable // This mode is the configurable mode. It is used as a scheduler in common diagnosis mode and functions as the producer. -timing_check=on - -[default_mode] -period=60 -step=60 - -[elasticsearch] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=9200 -max_es_query_num=10000000 - -[mysql] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[redis] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=6379 - -[prometheus] -ip=192.168.1.1 // Change the IP address to the actual IP address of host A. -port=9090 -query_range_step=15s - -[agent] -default_instance_port=8888 - -[zeus] -ip=192.168.1.2 // Change the IP address to the actual IP address of host B. -port=11111 - -[consumer] -kafka_server_list=192.168.1.1:9092 // Change the IP address to the actual IP address of host A. -enable_auto_commit=False -auto_offset_reset=earliest -timeout_ms=5 -max_records=3 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID -result_name=CHECK_RESULT - -[producer] -kafka_server_list = 192.168.1.1:9092 // Change the IP address to the actual IP address of host A. -api_version = 0.11.5 -acks = 1 -retries = 3 -retry_backoff_ms = 100 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/diana.log -http-timeout=600 -harakiri=600 -processes=2 -threads=2 -``` - -> **Set the MySQL database to the password mode**. For details, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -Start the aops-diana service. - -```shell -systemctl start aops-diana -``` - -**Note: [Initialize the aops-diana database](#3423-initializing-the-aops-diana-database) before starting the service.** - -> If the diana service fails to be started and the error message indicates that the MySQL database cannot be connected, check if a MySQL password is set. If yes, see [Q5: MySQL Password Mode](#q5-mysql-password-mode). - -#### 3.4.2.3 Initializing the aops-diana Database - -- Initialize the diana database. - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init diana -``` - -**Note:If aops-tools is not installed, run the SQL script to initialize. The script path is /opt/aops/database/diana.sql** - -[Q5: MySQL Password Mode](#q5-mysql-password-mode) - -[FAQs: Nonexisting /opt/aops/scripts/deploy](#q7-nonexisting-optaopsscriptsdeploy) - -## 3.5 Client Installation - -aops-ceres functions as the client of A-Ops. It communicates with the A-Ops management center through SSH and provides functions such as host information collection and command response. - -### 3.5.1 Node Information - -| Host | IP Address | Module | -| ------ | ----------- | ---------- | -| Host D | 192.168.1.4 | aops-ceres | - -### 3.5.2 Client Deployment - -```shell -yum install aops-ceres dnf-hotpatch-plugin -y -``` - -## FAQs - -### Q1: Max Number of Connections - -When host interfaces are added in batches, due to the max number of SSH connections (**MaxStartups**) of the host where aops-zeus is installed, some hosts may fail to be connected. You can temporarily increase **MaxStartups** as required. For details, see the [SSH documentation](https://www.man7.org/linux/man-pages/man5/sshd_config.5.html). - -### Q2: 504 Gateway Timeout - -Some HTTP interfaces may take a long time to execute, resulting in error 504 on the web client. You can reduce the probability of error 504 by adding **proxy_read_timeout** to the Nginx configuration or increase its value. - -### Q3: Firewall - -If firewall cannot be disabled, open the ports involved in service deployment on the firewall. Otherwise, services may be inaccessible and A-Ops cannot be used properly. - -### Q4: Elasticsearch Access Denied - -If Elasticsearch is deployed on multiple nodes in a distributed manner, set the cross-domain access configurations properly to enable the access of the nodes. - -### Q5: MySQL Password Mode - -- **Configure the mysql section in the service configuration.** - -To set the password mode for the MySQL database connection (for example, the user is **root**, and the password is **123456**), change the value of **engine_format** in the **\[mysql]** section in apollo and zeus configurations. - -```ini -[mysql] -engine_format=mysql+pymysql://root:123456@%s:%s/%s -``` - -- **Modify the aops-basedatabase.sh initialization script.** - -Modify the 145th line of **aops-basedatabase.sh**. - -> Before modification: - -```shell -database = pymysql.connect(host='$mysql_ip', port=$port, database='mysql', autocommit=True,client_flag=CLIENT.MULTI_STAT EMENTS) -``` - -> After modification: - -```shell -database = pymysql.connect(host='$mysql_ip', port=$port, database='mysql', password='password', user='user', autocommit=True, client_flag=CLIENT.MULTI_STATEMENTS) -``` - -- **Database connection error upon service startup** - -Modify the 178th line in **/usr/bin/aops-vulcanus**. - -> Before modification: - -```shell -connect = pymysql.connect(host='$mysql_ip', port=$port, database='$aops_database') -``` - -> After modification: - -```shell -connect = pymysql.connect(host='$mysql_ip', port=$port, database='$aops_database', password='password', user='user') -``` - -**Note: If a non-root user is used for logging in to the server, add user ="root" or a user allowed by MySQL.** - -### Q6: update Repository Configuration - -```shell -echo "[update] -name=update -baseurl=http://repo.openeuler.org/openEuler-24.03-LTS/update/$basearch/ -enabled=1 -gpgcheck=0 -[update-epol] -name=update-epol -baseurl=http://repo.openeuler.org/openEuler-24.03-LTS/EPOL/update/main/$basearch/ -enabled=1 -gpgcheck=0" > /etc/yum.repos.d/openEuler-update.repo -``` - -> Note: Change **openEuler-24.03-LTS** to the actual OS version. You can also refer to the repository description in the openEuler official documentation. - -### Q7: Nonexisting /opt/aops/scripts/deploy - -During database initialization, if **/opt/aops/scripts/deploy** does not exits, install the aops-tools package. - -```shell -yum install aops-tools -y -``` diff --git a/docs/en/server/maintenance/aops/dnf_command_usage.md b/docs/en/server/maintenance/aops/dnf_command_usage.md deleted file mode 100644 index 490e01068364054dfd54e580e949c5d91c147571..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/dnf_command_usage.md +++ /dev/null @@ -1,757 +0,0 @@ -# DNF Command Usage - -Af ter installing dnf-hotpatch-plugin, you can run `dnf` commands to use Ceres functions related to hot/cold patches, such as hot patch scanning (`dnf hot-updateinfo`), setting and querying (`dnf hotpatch`), applying (`dnf hotupgrade`), and kabi check before kernel upgrade (`dnf upgrade-en`). This document describes the usage of the commands. - -> Hot patches include ACC (accumulate) and SGL (single) types. -> -> - ACC: A hot patch of the higher version fixes all problems that can be fixed by lower-version hot patches. -> - SGL_xxx: A hot patch fixes the problems related to issue _xxx_. Multiple issue IDs are concatenated by underscores (\_). - -## Hot Patch Scanning - -`dnf hot-updateinfo` can scan hot patches and query hot patches for specified CVEs. - -```shell -$ dnf hot-updateinfo list cves [--available(default) | --installed] [--cve [cve_id]] -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates -Hot-updateinfo command-specific options: - --available - cves about newer versions of installed packages - (default) - --installed - cves about equal and older versions of installed packages -``` - -- `list cves` - - 1. Query the CVEs on the host that can be fixed and their related cold and hot patches. - - ```shell - $ dnf hot-updateinfo list cves - # cve-id level cold-patch hot-patch - Last metadata expiration check: 2:39:04 ago on Fri 29 Dec 2023 07:45:02. - CVE-2022-30594 Important/Sec. kernel-4.19.90-2206.1.0.0153.oe1.x86_64 patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - CVE-2023-1111 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 - CVE-2023-1112 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 - CVE-2023-1111 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-SGL_CVE_2023_1111_CVE_2023_1112-1-1.x86_64 - ``` - - 2. Query hot and cold patches corresponding to fixed CVEs. - - ```shell - $ dnf hot-updateinfo list cves --installed - # cve-id level cold-patch hot-patch - Last metadata expiration check: 2:39:04 ago on Fri 29 Dec 2023 07:45:02. - CVE-2022-36298 Important/Sec. - patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_36298-1-1.x86_64 - ``` - - 3. Query hot and cold patches for specified CVEs. - - ```shell - $ dnf hot-updateinfo list cves --cve CVE-2022-30594 - # cve-id level cold-patch hot-patch - Last metadata expiration check: 2:39:04 ago on Fri 29 Dec 2023 07:45:02. - CVE-2022-30594 Important/Sec. kernel-4.19.90-2206.1.0.0153.oe1.x86_64 patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - ``` - - 4. An empty list will be displayed if the CVE does not exist. - - ```shell - $ dnf hot-updateinfo list cves --cve CVE-2022-3089 - # cve-id level cold-patch hot-patch - Last metadata expiration check: 2:39:04 ago on Fri 29 Dec 2023 07:45:02. - ``` - -## Hot Patch Statuses - -- A hot patch can be in the following statuses: - - - NOT-APPLIED: The hot patch is not applied. - - - DEACTIVED: The hot patch is not activated. - - - ACTIVED: The hot patch is activated. - - - ACCEPT: The hot patch has been activated and will be applied after a reboot. - - ![Hot patch statuses](./figures/syscare_hot_patch_statuses.png) - -## Querying and Changing Hot Patch Statuses - -`dnf hotpatch` can be used to query and convert hot patch statuses. - -```shell -$ dnf hotpatch -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates - -Hotpatch command-specific options: - --list [{cve, cves}] show list of hotpatch - --apply APPLY_NAME apply hotpatch - --remove REMOVE_NAME remove hotpatch - --active ACTIVE_NAME active hotpatch - --deactive DEACTIVE_NAME - deactive hotpatch - --accept ACCEPT_NAME accept hotpatch -``` - -- Using `dnf hotpatch` to query hot patch statuses. - - - `dnf hotpatch --list` lists available hot patches in the system. - - ```shell - $ dnf hotpatch --list - Last metadata expiration check: 0:09:25 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - `dnf hotpatch --list cves` queries hot patches related to CVEs. - - ```shell - $ dnf hotpatch --list cves - Last metadata expiration check: 0:09:25 ago on Fri 29 Dec 2023 10:26:45. - CVE-id base-pkg/hotpatch status - CVE-2022-30594 kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - `dnf hotpatch --list cves --cve ` queries hot patches for specified CVEs. - - ```shell - $ dnf hotpatch --list cves --cve CVE-2022-30594 - Last metadata expiration check: 0:09:25 ago on Fri 29 Dec 2023 10:26:45. - CVE-id base-pkg/hotpatch status - CVE-2022-30594 kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - An empty list will be displayed if the specified CVE does not exist when running `dnf hotpatch --list cves --cve `. - - ```shell - $ dnf hotpatch --list cves --cve CVE-2023-1 - Last metadata expiration check: 0:09:25 ago on Fri 29 Dec 2023 10:26:45. - ``` - -- `dnf hotpatch --apply ` applies a hot patch. You can run `dnf hotpatch --list` to query the hot patch status after applying the hot patch. For details about hot patch statuses, see the previous section. - - ```shell - $ dnf hotpatch --list - Last metadata expiration check: 0:13:55 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - $ dnf hotpatch --apply kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - Last metadata expiration check: 0:15:37 ago on Fri 29 Dec 2023 10:26:45. - Gonna apply this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - apply hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed - $ dnf hotpatch --list - Last metadata expiration check: 0:16:20 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACTIVED - ``` - -- `dnf hotpatch --deactive ` deactivates a hot patch. You can run `dnf hotpatch --` to query the hot patch status after deactivating the hot patch. For details about hot patch statuses, see the previous section. - - ```shell - $ dnf hotpatch --deactive kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - Last metadata expiration check: 0:19:00 ago on Fri 29 Dec 2023 10:26:45. - Gonna deactive this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - deactive hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed - $ dnf hotpatch --list - Last metadata expiration check: 0:19:12 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux DEACTIVED - ``` - -- `dnf hotpatch --remove ` removes a hot patch. You can run `dnf hotpatch --list` to query the hot patch status after removing the hot patch. For details about hot patch statuses, see the previous section. - - ```shell - $ dnf hotpatch --remove kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - Last metadata expiration check: 0:20:12 ago on Fri 29 Dec 2023 10:26:45. - Gonna remove this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - remove hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed - $ dnf hotpatch --list - Last metadata expiration check: 0:20:23 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - -- `dnf hotpatch --active ` activating a hot patch.You can run `dnf hotpatch --list` to query the hot patch status after activating the hot patch. For details about hot patch statuses, see the previous section. - - ```shell - $ dnf hotpatch --active kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - Last metadata expiration check: 0:15:37 ago on Fri 29 Dec 2023 10:26:45. - Gonna active this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - active hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed - $ dnf hotpatch --list - Last metadata expiration check: 0:16:20 ago on Fri 29 Dec 2023 10:26:45. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACTIVED - ``` - -- `dnf hotpatch --accept ` accepts a hot patch. You can run `dnf hotpatch --list` to query the hot patch status after accepting the hot patch. For details about hot patch statuses, see the previous section. - - ```shell - $ dnf hotpatch --accept kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - Last metadata expiration check: 0:14:19 ago on Fri 29 Dec 2023 10:47:38. - Gonna accept this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 - accept hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed - $ dnf hotpatch --list - Last metadata expiration check: 0:14:34 ago on Fri 29 Dec 2023 10:47:38. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACCEPTED - ``` - -## Applying Hot Patches - -The `hotupgrade` command is used to apply hot patches to fix specified or all CVEs. - -```shell -$ dnf hotupgrade [--cve [cve_id]] [PACKAGE ...] [--takeover] [-f] - - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates - -command-specific options: - --takeover - kernel cold patch takeover operation - -f - force retain kernel rpm package if kernel kabi check fails - PACKAGE - Package to upgrade -``` - -- Using `dnf hotupgrade PACKAGE` to install target hot patches. - - - Using `dnf hotupgrade PACKAGE` to install target hot patches. - - ```shell - $ dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - Last metadata expiration check: 0:26:25 ago on Fri 29 Dec 2023 10:47:38. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - Using `dnf hotupgrade PACKAGE` to install target hot patches when target hot patches have been activated. - - ```shell - $ dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - Last metadata expiration check: 0:28:35 ago on Fri 29 Dec 2023 10:47:38. - The hotpatch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'vmlinux' - Package patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 is already installed. - Dependencies resolved. - Nothing to do. - Complete! - ``` - - - Using `dnf hotupgrade PACKAGE` to install target hot patches and automatically uninstall hot patches that fail to be activated. - - ```shell - $ dnf hotupgrade patch-redis-6.2.5-1-ACC-1-1.x86_64 - Last metadata expiration check: 0:30:30 ago on Fri 29 Dec 2023 10:47:38. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch failed: redis-6.2.5-1/ACC-1-1. - Error: Operation failed - - Caused by: - 1. Transaction "Apply patch 'redis-6.2.5-1/ACC-1-1'" failed - - Caused by: - Cannot match any patch named "redis-6.2.5-1/ACC-1-1" - - Gonna remove unsuccessfully activated hotpatch rpm. - Remove package succeed: patch-redis-6.2.5-1-ACC-1-1.x86_64. - ``` - -- Using `--cve ` to install hot patches for a CVE. - - - Using `--cve ` to install hot patches for a CVE. - - ```shell - $ dnf hotupgrade --cve CVE-2022-30594 - Last metadata expiration check: 0:26:25 ago on Fri 29 Dec 2023 10:47:38. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - Using `dnf hotupgrade --cve CVE-2022-2021` to install hot patches for the CVE, which does not exist. - - ```shell - $ dnf hotupgrade --cve CVE-2022-2021 - Last metadata expiration check: 1:37:44 ago on Fri 29 Dec 2023 13:49:39. - The cve doesn't exist or cannot be fixed by hotpatch: CVE-2022-2021 - No hot patches marked for install. - Dependencies resolved. - Nothing to do. - Complete! - ``` - - - Using `dnf hotupgrade --cve ` to install and apply a hot patch of a higher version for a CVE that has an ACC hot patch of a lower version. The hot patch of the lower version is uninstalled. - - ```shell - $ dnf hotupgrade --cve CVE-2023-1070 - Last metadata expiration check: 0:00:48 ago on Tue 02 Jan 2024 11:21:55. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx (Install messages and process upgrade) - Complete! - Apply hot patch succeed: kernel-5.10.0-153.12.0.92.oe2203sp2/ACC-1-3. - $ - ``` - - - Installing and applying a hot patch for a CVE that already has the latest hot patch. - - ```shell - $ dnf hotupgrade --cve CVE-2023-1070 - Last metadata expiration check: 1:37:44 ago on Fri 29 Dec 2023 13:49:39. - The cve doesn't exist or cannot be fixed by hotpatch: CVE-2023-1070 - No hot patches marked for install. - Dependencies resolved. - Nothing to do. - Complete! - ``` - -- Using `dnf hotupgrade` to install all hot patches. - - When no hot patch is installed, running `dnf hotupgrade` will install all available hot patches. - - - When some of the hot patches are installed, running `dnf hotupgrade` will install the remaining hot patches. - -- Using `--takeover` to take over kernel hot patches. - - - Using `dnf hotupgrade PACKAGE --takeover` to install hot patches and take over the related kernel hot patches. If a target kernel cold patch fails to pass the kabi check, it will be automatically uninstalled. The hot patches will be accepted and remain in effect after a reboot. The default kernel boot options will be restored. - - ```shell - $ dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 --takeover - Last metadata expiration check: 2:23:22 ago on Fri 29 Dec 2023 13:49:39. - Gonna takeover kernel cold patch: ['kernel-4.19.90-2206.1.0.0153.oe1.x86_64'] - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - Gonna remove kernel-4.19.90-2206.1.0.0153.oe1.x86_64 due to Kabi check failed. - Rebuild rpm database succeed. - Remove package succeed: kernel-4.19.90-2206.1.0.0153.oe1.x86_64. - Restore the default boot kernel succeed: kernel-4.19.90-2112.8.0.0131.oe1.x86_64. - No available kernel cold patch for takeover, gonna accept available kernel hot patch. - Accept hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - Using `dnf hotupgrade PACKAGE --takeover -f` to install hot patches. If a kernel cold patch fails to pass the kabi check, the `-f` option forcibly keeps the cold patch. - - ```shell - $ dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 --takeover - Last metadata expiration check: 2:23:22 ago on Fri 29 Dec 2023 13:49:39. - Gonna takeover kernel cold patch: ['kernel-4.19.90-2206.1.0.0153.oe1.x86_64'] - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - ``` - -## kabi Check before Kernel Upgrade - -`dnf upgrade-en` supports the kabi check before kernel cold patch upgrade. - -```shell -dnf upgrade-en [PACKAGE] [--cve [cve_id]] - -upgrade with KABI(Kernel Application Binary Interface) check. If the loaded -kernel modules have KABI compatibility with the new version kernel rpm, the -kernel modules can be installed and used in the new version kernel without -recompling. - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates -Upgrade-en command-specific options: - PACKAGE - Package to upgrade -``` - -- Using `dnf upgrade-en PACKAGE` to install target cold patches. - - - Using `dnf upgrade-en` to install target cold patches. If the kabi check is not passed, the kabi difference report will be generated, and the target kernel upgrade package will be uninstalled. - - ```shell - $ dnf upgrade-en kernel-4.19.90-2206.1.0.0153.oe1.x86_64 - Last metadata expiration check: 1:51:54 ago on Fri 29 Dec 2023 13:49:39. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - kvm_apic_write_nodecode : 0x56c989a1 != 0x24c9db31 - kvm_complete_insn_gp : 0x99c2d256 != 0xcd8014bd - Gonna remove kernel-4.19.90-2206.1.0.0153.oe1.x86_64 due to kabi check failed. - Rebuild rpm database succeed. - Remove package succeed: kernel-4.19.90-2206.1.0.0153.oe1.x86_64. - Restore the default boot kernel succeed: kernel-4.19.90-2112.8.0.0131.oe1.x86_64. - ``` - - - Using `dnf upgrade-en` to install target cold patches and the kabi check is passed. - - ```shell - $ dnf upgrade-en kernel-4.19.90-2201.1.0.0132.oe1.x86_64 - Last metadata expiration check: 2:02:10 ago on Fri 29 Dec 2023 13:49:39. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Kabi check for kernel-4.19.90-2201.1.0.0132.oe1.x86_64: - [Success] Here are 81 loaded kernel modules in this system, 81 pass, 0 fail. - ``` - -- Using `dnf upgrade-en` to install all cold patches. - - If the target kernel upgrade is included in the cold patches, the output is the same as `dnf upgrade-en PACKAGE` according to the kabi check result. - -## Usage Example - -Assume that the repositories of hot and cold patches on this host have been enabled. - -- Hot patches - -Scan CVEs that can be fixed on the host. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on Sat 25 Mar 2023 11:53:46. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-1 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-11 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -CVE-2021-1, CVE-2021-11, CVE-2021-2, and CVE-2021-22 can be fixed by hot patches. - -Start the Redis service based on the **redis.conf** configuration file. - -```shell -$ sudo redis-server ./redis.conf & -[1] 285075 -$ 285076:C 25 Mar 2023 12:09:51.503 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo -285076:C 25 Mar 2023 12:09:51.503 # Redis version=255.255.255, bits=64, commit=00000000, modified=0, pid=285076, just started -285076:C 25 Mar 2023 12:09:51.503 # Configuration loaded -285076:M 25 Mar 2023 12:09:51.504 * Increased maximum number of open files to 10032 (it was originally set to 1024). -285076:M 25 Mar 2023 12:09:51.504 * monotonic clock: POSIX clock_gettime - _._ - _.-``__ ''-._ - _.-`` `. `_. ''-._ Redis 255.255.255 (00000000/0) 64 bit - .-`` .-```. ```\/ _.,_ ''-._ - ( ' , .-` | `, ) Running in standalone mode - |`-._`-...-` __...-.``-._|'` _.-'| Port: 6380 - | `-._ `._ / _.-' | PID: 285076 - `-._ `-._ `-./ _.-' _.-' - |`-._`-._ `-.__.-' _.-'_.-'| - | `-._`-._ _.-'_.-' | https://redis.io - `-._ `-._`-.__.-'_.-' _.-' - |`-._`-._ `-.__.-' _.-'_.-'| - | `-._`-._ _.-'_.-' | - `-._ `-._`-.__.-'_.-' _.-' - `-._ `-.__.-' _.-' - `-._ _.-' - `-.__.-' - -285076:M 25 Mar 2023 12:09:51.505 # Server initialized -285076:M 25 Mar 2023 12:09:51.505 # WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect. -285076:M 25 Mar 2023 12:09:51.506 * Ready to accept connections - -``` - -Test the function before applying the hot patch. - -```shell -$ telnet 127.0.0.1 6380 -Trying 127.0.0.1... -Connected to 127.0.0.1. -Escape character is '^]'. - -*100 - --ERR Protocol error: expected '$', got ' ' -Connection closed by foreign host. -``` - -Specify CVE-2021-1 and ensure that the related hot patch is associated and applied. - -```shell -$ dnf hotupgrade patch-redis-6.2.5-1-ACC-1-1.x86_64 -Last metadata expiration check: 0:01:39 ago on Tue 02 Jan 2024 20:16:45. -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-benchmark' -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-cli' -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-server' -Package patch-redis-6.2.5-1-ACC-1-1.x86_64 is already installed. -Dependencies resolved. -Nothing to do. -Complete! -``` - -Run `dnf hotpatch --list` to check whether the hot patch has been applied (the status is **ACTIVED**). - -```shell -$ dnf hotpatch --list -Last metadata expiration check: 0:04:43 ago on Tue 02 Jan 2024 20:16:45. -base-pkg/hotpatch status -redis-6.2.5-1/ACC-1-1/redis-benchmark ACTIVED -redis-6.2.5-1/ACC-1-1/redis-cli ACTIVED -redis-6.2.5-1/ACC-1-1/redis-server ACTIVED -``` - -Check whether the CVE has been fixed. Because the **patch-redis-6.2.5-1-ACC-1-1.x86_64** hot patch also fixes CVE-2021-11, CVE-2021-1 and CVE-2021-11 no longer exists. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:08:48 ago on Sat 25 Mar 2023 11:53:46. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-1076 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26607 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -Test the function after applying the hot patch. - -```shell -$ telnet 127.0.0.1 6380 -Trying 127.0.0.1... -Connected to 127.0.0.1. -Escape character is '^]'. - -*100 - --ERR Protocol error: unauthenticated multibulk length -Connection closed by foreign host. -``` - -Run `dnf hotpatch --remove` and specify the patch name to manually remove the hot patch. - -```shell -$ dnf hotpatch --remove redis-6.2.5-1 -Last metadata expiration check: 0:11:52 ago on Tue 02 Jan 2024 20:16:45. -Gonna remove this hot patch: redis-6.2.5-1 -remove hot patch 'redis-6.2.5-1' succeed -$ dnf hotpatch --list -Last metadata expiration check: 0:12:00 ago on Tue 02 Jan 2024 20:16:45. -base-pkg/hotpatch status -redis-6.2.5-1/ACC-1-1/redis-benchmark NOT-APPLIED -redis-6.2.5-1/ACC-1-1/redis-cli NOT-APPLIED -redis-6.2.5-1/ACC-1-1/redis-server NOT-APPLIED -``` - -Scan the CVEs to be fixed on the host. CVE-2021-1 and CVE-2021-11 are displayed. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on Sat 25 Mar 2023 11:53:46. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-1 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-11 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- installing an ACC patch of a higher version. - -Apply hot patch **patch-redis-6.2.5-1-HP002-1-1.x86_64**. - -```shell -$ dnf hotupgrade patch-redis-6.2.5-1-ACC-1-2.x86_64 -Last metadata expiration check: 0:36:12 ago on Tue 02 Jan 2024 20:16:45. -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-benchmark' -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-cli' -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-server' -Package patch-redis-6.2.5-1-ACC-1-2.x86_64 is already installed. -Dependencies resolved. -Nothing to do. -Complete! -``` - -Scan the CVEs to be fixed on the host. Because **patch-redis-6.2.5-1-ACC-1-2.x86_64** is of a higher version than **patch-redis-6.2.5-1-ACC-1-1.x86_64**, **patch-redis-6.2.5-1-ACC-1-2.x86_64** also fixes CVE-2021-1, CVE-2021-11, CVE-2021-2, and CVE-2021-22. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on Sat Mar 25 11:53:46 2023. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- Version of the software package fixed by the hot patch higher than that of the installed one. - -Open the **xxx-updateinfo.xml.gz** file in the **repodata** directory of the hot patch repository. Check the information related to CVE-2021-33 and CVE-2021-3. - -```xml - - openEuler-HotPatchSA-2023-3 - An update for mariadb is now available for openEuler-22.03-LTS - Important - openEuler - - - - - - patch-redis-6.2.5-2-ACC.(CVE-2021-3, CVE-2021-33) - - - openEuler - - patch-redis-6.2.5-2-ACC-1-1.aarch64.rpm - - - patch-redis-6.2.5-2-ACC-1-1.x86_64.rpm - - - - -``` - -The format of the **name** field of **package** (**patch-redis-6.2.5-2-ACC**) is **patch-\-\-\-\**. In the example, **patch-redis-6.2.5-2-ACC** requires the source code version of redis-6.2.5-2 to be installed. Check the version of Redis on the host. - -```shell -$ rpm -qa | grep redis -redis-6.2.5-1.x86_64 -``` - -The installed Redis version is lower than 6.2.5-2. Therefore, the hot patch will not be displayed. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on Sat 25 Mar 2023 11:53:46. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- Version of the software package fixed by the hot patch lower than that of the installed one. - -Open the **xxx-updateinfo.xml.gz** file in the **repodata** directory of the hot patch repository. Check the information related to CVE-2021-44 and CVE-2021-4. - -```xml - - openEuler-HotPatchSA-2023-4 - An update for mariadb is now available for openEuler-22.03-LTS - Important - openEuler - - - - - - patch-redis-6.2.4-1-ACC.(CVE-2021-44, CVE-2021-4) - - - openEuler - - patch-redis-6.2.4-1-ACC-1-1.aarch64.rpm - - - patch-redis-6.2.4-1-ACC-1-1.x86_64.rpm - - - - -``` - -The format of the **name** field of **package** (**patch-redis-6.2.4-1-ACC**) is **patch-\-\-\-\**. In the example, **patch-redis-6.2.4-1-ACC** requires the source code version of redis-6.2.4-1 to be installed. Check the version of Redis on the host. - -```shell -$ rpm -qa | grep redis -redis-6.2.5-1.x86_64 -``` - -The installed Redis version is higher than 6.2.4-1. Therefore, the CVE will not be displayed. - -```shell -$ dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on Sat 25 Mar 2023 11:53:46. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` diff --git "a/docs/en/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" "b/docs/en/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" deleted file mode 100644 index 047c6f1bfe3e38c66d34285563d910f6f3bd07e1..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/chakanyuqi.png b/docs/en/server/maintenance/aops/figures/chakanyuqi.png deleted file mode 100644 index bbead6a91468d5dee570cfdc66faf9a4ab155d7c..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/chakanyuqi.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/chaxunshijipeizhi.png b/docs/en/server/maintenance/aops/figures/chaxunshijipeizhi.png deleted file mode 100644 index d5f6e450fc0e1e246492ca71a6fcd8db572eb469..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/chaxunshijipeizhi.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/chuangjianyewuyu.png b/docs/en/server/maintenance/aops/figures/chuangjianyewuyu.png deleted file mode 100644 index 4f5b8de2d2c4ddb9bfdfba1ac17258a834561e2d..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/chuangjianyewuyu.png and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" "b/docs/en/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" deleted file mode 100644 index ab16e9d3661db3fd4adc6c605b2d2d08e79fdc1c..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" "b/docs/en/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" deleted file mode 100644 index c5a0768be63a98ef7ccc4a56996a8c715f7090af..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" "b/docs/en/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" deleted file mode 100644 index f151965a21d11dd7a3e215cc4ef23d70d059f4b1..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/group.PNG b/docs/en/server/maintenance/aops/figures/group.PNG deleted file mode 100644 index 584fd1f7195694a3419482cace2a71fa1cd9a3ec..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/group.PNG and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/icon-note.gif b/docs/en/server/maintenance/aops/figures/icon-note.gif deleted file mode 100644 index 6314297e45c1de184204098efd4814d6dc8b1cda..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/icon-note.gif and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/shanchupeizhi.png b/docs/en/server/maintenance/aops/figures/shanchupeizhi.png deleted file mode 100644 index cfea2eb44f7b8aa809404b8b49b4bd2e24172568..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/shanchupeizhi.png and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" "b/docs/en/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" deleted file mode 100644 index 5823a116f384801e1197350f151b4d04ef519ac4..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/syscare_hot_patch_statuses.png b/docs/en/server/maintenance/aops/figures/syscare_hot_patch_statuses.png deleted file mode 100644 index bbd0600fc5c913198dfe1e1bf2aba9c652576a98..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/syscare_hot_patch_statuses.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/tianjianode.png b/docs/en/server/maintenance/aops/figures/tianjianode.png deleted file mode 100644 index d68f5e12a62548f2ec59374bda9ab07f43b8b5cb..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/tianjianode.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/xinzengpeizhi.png b/docs/en/server/maintenance/aops/figures/xinzengpeizhi.png deleted file mode 100644 index 18d71c2e099c19b5d28848eec6a8d11f29ccee27..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/xinzengpeizhi.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/figures/zhuangtaichaxun.png b/docs/en/server/maintenance/aops/figures/zhuangtaichaxun.png deleted file mode 100644 index a3d0b3294bf6e0eeec50a2c2f8c5059bdc256376..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/figures/zhuangtaichaxun.png and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" deleted file mode 100644 index bd179be46c9e711d7148ee44dc56f4a7a02f56bf..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" deleted file mode 100644 index 23ff4e5fddb87ac157b1002a70c47d9b4c76b873..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" deleted file mode 100644 index 1a2b45e860914a1ac0cfb6908b02fb5cad4cbd60..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" deleted file mode 100644 index 89ac88e154275d4be8179d773e7093f2357f425f..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" deleted file mode 100644 index 57844f772853c541f7a1328b007a9b6ae4d5caf0..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" deleted file mode 100644 index 5b4830b47897a0d51be28238a879a70b1de9ca3b..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" deleted file mode 100644 index 17fb5b13034e1fc5276c68583fed1952415b0b5f..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" deleted file mode 100644 index 458e023847bb2ad1f198f5a2dd1691748038137e..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" "b/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" deleted file mode 100644 index aa34bb909ee7c86a95126c13fa532ce93410a931..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" deleted file mode 100644 index 05859540cb88e11bd8dedaeb8e03253254574c40..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" deleted file mode 100644 index f556e0e7e3c4096a89597cb08ba29133375aab07..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" deleted file mode 100644 index 801c7f917d717499c86708b419101be3773348ac..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" deleted file mode 100644 index 0719bb8c0b71d0503d5d3a7d8e9e83da71169c64..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" deleted file mode 100644 index 21c9468ce4378bcadf537e543c756cf7a1347499..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" deleted file mode 100644 index 9cfd080d1a658544c559e83429a14b35dc931fc6..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" deleted file mode 100644 index 7ca43b0a82b7c4dd3e43a5e46cf3b4a79d55d033..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" deleted file mode 100644 index b9acfbcd7d8e3b2b551c8bb9700142dfba681afe..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" deleted file mode 100644 index 6bc8cc31e05d06dbd5ee4c0f62f281683db048da..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" deleted file mode 100644 index 3bf992f586f7fb4d87bc01cc29f961755a315c9d..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" deleted file mode 100644 index f73ccaf984e8ab55f8b78f7da5a570ce43685221..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" deleted file mode 100644 index b183298d96b8ced8954852540c891310aeda05be..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" deleted file mode 100644 index c8aa813bc228326b3e8db19e303e03507873a893..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" deleted file mode 100644 index 8ccebe84f60b21737414b2cb3f972472114a40c5..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" deleted file mode 100644 index 619cc6d42b646df3d9c4e601f40a6ec452712668..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" "b/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" deleted file mode 100644 index 34b1d4095b8c017f3c66ebfb3c44d114bc8d6ca7..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" "b/docs/en/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" deleted file mode 100644 index f5f8a3a95705145787e7aaf9c8d1fff404892240..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" deleted file mode 100644 index b8f0a87e00d73961907167fcbe43d82b60caf445..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" deleted file mode 100644 index ce25657a0627e9dfc3dc9ebf323e086103c2ecdf..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" deleted file mode 100644 index 2f2e2e67a98a16e1ad464c794a8ef45ebb229d7f..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" deleted file mode 100644 index 94c9b65719050b79d2cdb9d1e8f67c459925cda7..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" deleted file mode 100644 index 7e4f0da4e88da6f18495a4fb23bd400d0da0a8da..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" deleted file mode 100644 index 1ee8f7bb2456efe6318074f46f5008da355a2cb1..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" deleted file mode 100644 index a916eebf306cca9ffa54f733143a0ac2c44313a4..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" deleted file mode 100644 index 31684136510cfe6248adf9b8cd086140ab5b26ef..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" deleted file mode 100644 index df3991eb16d32d9f2296fbb36873ff26bc82fa18..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" deleted file mode 100644 index c83daeeb5f8a4d9ab4f40e3debbe7a96f427ce74..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" deleted file mode 100644 index 5ab697c8f9c292097356a26140750f7f615c5d81..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" deleted file mode 100644 index 4bde1fd7330491fda6f4ed73a2be2e8c0bfabc8d..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" deleted file mode 100644 index 2890e4934ba903324ea134d3ebee85307665270e..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" "b/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" deleted file mode 100644 index 24f94c0a9ff05897b01786aa4bc8adfe4bc8db09..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" deleted file mode 100644 index bbead6a91468d5dee570cfdc66faf9a4ab155d7c..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" deleted file mode 100644 index d5f6e450fc0e1e246492ca71a6fcd8db572eb469..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" deleted file mode 100644 index 8849a2fc81dbd14328c6c66c53033164a0b67b52..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" deleted file mode 100644 index e1e518157f8def332adfa5516b37fdb89768499c..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" deleted file mode 100644 index c8c229bf41b27f1fe6629106957fd5e47851096d..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" deleted file mode 100644 index cfea2eb44f7b8aa809404b8b49b4bd2e24172568..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" deleted file mode 100644 index d68f5e12a62548f2ec59374bda9ab07f43b8b5cb..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" deleted file mode 100644 index 18d71c2e099c19b5d28848eec6a8d11f29ccee27..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" "b/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" deleted file mode 100644 index a3d0b3294bf6e0eeec50a2c2f8c5059bdc256376..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png b/docs/en/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png deleted file mode 100644 index c810b26ad0c052960dfdf4bfd78e9224ce465318..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" "b/docs/en/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" deleted file mode 100644 index 790df6fd5781ca008124cff14635165a71abf126..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png b/docs/en/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png deleted file mode 100644 index 6ef6ef9bd126e6c2007389065bbecc1cfdd97f5b..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png b/docs/en/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png deleted file mode 100644 index a2a29d2e1b62f7df409e87d03f2525ba8355f77e..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/hotpatch-fix-pr.png b/docs/en/server/maintenance/aops/image/hotpatch-fix-pr.png deleted file mode 100644 index d10fd1ec44416f6b59cfd21cca8721d001f7ed19..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/hotpatch-fix-pr.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/hotpatch-pr-1.png b/docs/en/server/maintenance/aops/image/hotpatch-pr-1.png deleted file mode 100644 index 1dc5269655c51b355d3cd89b71c6688fbb0d8d5d..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/hotpatch-pr-1.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/hotpatch-pr-success.png b/docs/en/server/maintenance/aops/image/hotpatch-pr-success.png deleted file mode 100644 index 48ea807e03c0f8e6efbceacbbc583c6ac3b3c865..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/hotpatch-pr-success.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/hotpatch-pr.png b/docs/en/server/maintenance/aops/image/hotpatch-pr.png deleted file mode 100644 index 159fd2b7bc76e002554722d1f0f12070a2bd2e19..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/hotpatch-pr.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/hotpatch-xml.PNG b/docs/en/server/maintenance/aops/image/hotpatch-xml.PNG deleted file mode 100644 index f1916620d3cc7b1c29059bcc5513fdc7ee94127b..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/hotpatch-xml.PNG and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230525193235084.png b/docs/en/server/maintenance/aops/image/image-20230525193235084.png deleted file mode 100644 index 9850a11a0dcfeed69099635f3147a2230fe6faa5..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230525193235084.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230525193254541.png b/docs/en/server/maintenance/aops/image/image-20230525193254541.png deleted file mode 100644 index 73bfbaa15a2584611ac06839965eca2869b89991..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230525193254541.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527165206707.png b/docs/en/server/maintenance/aops/image/image-20230527165206707.png deleted file mode 100644 index 7d7f0992fc048777340678974d38b3c193269385..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527165206707.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527165700642.png b/docs/en/server/maintenance/aops/image/image-20230527165700642.png deleted file mode 100644 index 2c4500cb54ba0225704020160d72b4aaf265d3f7..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527165700642.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527165823568.png b/docs/en/server/maintenance/aops/image/image-20230527165823568.png deleted file mode 100644 index 7b26b545bc7d37f09eca7736f30d2eb3a6062890..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527165823568.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527165845170.png b/docs/en/server/maintenance/aops/image/image-20230527165845170.png deleted file mode 100644 index 9719210a961a18b639d56cbf88b8586370930b4c..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527165845170.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527165922876.png b/docs/en/server/maintenance/aops/image/image-20230527165922876.png deleted file mode 100644 index 56ff3380d12b9c1002881eca98e32a49cc292b9a..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527165922876.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230527170343909.png b/docs/en/server/maintenance/aops/image/image-20230527170343909.png deleted file mode 100644 index 57c343360f278b2f67b77d37114a1f567a3ce63a..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230527170343909.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230607161425282.png b/docs/en/server/maintenance/aops/image/image-20230607161425282.png deleted file mode 100644 index d2fbca2a23e80edff661d05065987ede1cc7e8af..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230607161425282.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230607163358749.png b/docs/en/server/maintenance/aops/image/image-20230607163358749.png deleted file mode 100644 index 191c36b65058ce8dea6bb2f1fe10a85b0177f2cf..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230607163358749.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230607172021782.png b/docs/en/server/maintenance/aops/image/image-20230607172021782.png deleted file mode 100644 index d25c3ebfb1aefe5d8f36b0b153afa64efd88dd63..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230607172021782.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230612113428096.png b/docs/en/server/maintenance/aops/image/image-20230612113428096.png deleted file mode 100644 index 48b59b5e6cb4043703de96066c8d67e85eed4f16..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230612113428096.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230612113626330.png b/docs/en/server/maintenance/aops/image/image-20230612113626330.png deleted file mode 100644 index 9d3621022deb02b267c3eb29315a7fe33c1f095e..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230612113626330.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230908163402743.png b/docs/en/server/maintenance/aops/image/image-20230908163402743.png deleted file mode 100644 index c17667178689c6384a039bf0f8025ea7eb360236..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230908163402743.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230908163914778.png b/docs/en/server/maintenance/aops/image/image-20230908163914778.png deleted file mode 100644 index a06c7e49b32286ceec9ff0e9a08f73a76c179daf..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230908163914778.png and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/image-20230908164216528.png b/docs/en/server/maintenance/aops/image/image-20230908164216528.png deleted file mode 100644 index 15fbc694603837095244451d4f5d7e7af70789be..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/image-20230908164216528.png and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" "b/docs/en/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" deleted file mode 100644 index 29223cbddc39f8fcc0b725a3ed83495709e05f78..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/image/patch-file.PNG b/docs/en/server/maintenance/aops/image/patch-file.PNG deleted file mode 100644 index f587a48c2be945beaadecf44a6d711da14be50c6..0000000000000000000000000000000000000000 Binary files a/docs/en/server/maintenance/aops/image/patch-file.PNG and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" "b/docs/en/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" deleted file mode 100644 index ba3a44433117f0a23fc6048cd3b093fe6af7250c..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" "b/docs/en/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" deleted file mode 100644 index 2c2e2dd78242f538c21809614e917bef769256ba..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" "b/docs/en/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" deleted file mode 100644 index 2914c3eef44bb3d3528686b44157a5f9276da9c6..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" deleted file mode 100644 index 044be7ccd001ddc2bb69ba53b34f3c2a72511f39..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" deleted file mode 100644 index 779c2fddcb02968358492e70f6aa9261be26fe48..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" deleted file mode 100644 index d97fbd1fbb5a20b97ec88989f3c7a0776bb9cdc0..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" deleted file mode 100644 index 3acf2e93550e4962d0a5f927fd6fd0460a64b889..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" deleted file mode 100644 index 5b167be8a40762823223ccdd700d5b62f7e1aa38..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" deleted file mode 100644 index a96a4d229b54b301bbf4e7f7a2c41ea1e9faf43d..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" deleted file mode 100644 index d77335d0097f7504f0c37dd8aca1691d9f1f0a23..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" deleted file mode 100644 index aa74c2859588ff2a49d6341dd2a2ac6fe2049eac..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" deleted file mode 100644 index 404ac733fae66bda9ceac2d6c2fa18897c58dc70..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" and /dev/null differ diff --git "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" "b/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" deleted file mode 100644 index 6d32e8874e8e5e7f7fb5c350fca0063da9a77176..0000000000000000000000000000000000000000 Binary files "a/docs/en/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" and /dev/null differ diff --git a/docs/en/server/maintenance/aops/quick_deployment_of_aops.md b/docs/en/server/maintenance/aops/quick_deployment_of_aops.md deleted file mode 100644 index 0c87a366b2fa87fe91bab6e86e450ee1a4a4efd1..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/aops/quick_deployment_of_aops.md +++ /dev/null @@ -1,102 +0,0 @@ -# One-Click Deployment of A-Ops - -One-click deployment of A-Ops is based on Docker and docker-compose to simply deployment and implement one-click start and stop. - -## Environment Requirements - -You are advised to use two or more machines with 8 GB or more memory running openEuler 22.03 LTS SP1 or later. Assume that the machines are host A and B. - -- MySQL, Elasticsearch, Kafka, Redis, and Prometheus are deployed on host A, which provides data services. -- The A-Ops server and A-Ops frontend are deployed on host B to provide service functions as well as display and operations. - -| Host | IP Address | Services | -| -------- | ----------- | -------------------------------------------- | -| Host A | 192.168.1.1 | MySQL, Elasticsearch, Redis, Kafka, Prometheus | -| Host B | 192.168.1.2 | aops-zeus, aops-diana, aops-apollo, aops-hermes | - -## Environment Configuration - -### Disabling the Firewall on Host A - -```shell -systemctl stop firewalld -systemctl disable firewalld -systemctl status firewalld -``` - -### Installing Docker and docker-compose - -```shell -dnf install docker docker-compose -# Set Docker to start upon system startup. -systemctl enable docker -``` - -### Installing aops-vulcanus and aops-tools - -```shell -dnf install aops-vulcanus aops-tools -``` - -### Perform One-Click Deployment - -- Execute the deployment script. - -```shell -cd /opt/aops/scripts/deploy/container -# Execute run.sh. -bash run.sh -``` - -> Enter the interactive CLI. -> -> ```console -> 1. Build the docker container (build). -> 2. Start the container orchestration service (start-service/start-env). -> 3. Stop all container services (stop-service/stop-env). -> run.sh: line 74: read: `Enter to exit the operation (Q/q).': not a valid identifier -> Select an operation procedure to continue: -> -> ``` -> -> **build**: Deployment of basic services (such as MySQL and Kafka) does not need the build operation. -> -> **start-service**: Start the service and frontend of A-Ops. -> -> **start-env**: Start basic service including MySQL, Redis, and Kafka. -> -> **stop-service**: Stop the service and frontend of A-Ops. -> -> **stop-env**: Stop basic services. The data is retained. -> -> **Q/q**: Exit the interactive CLI. - -- Deploy the A-Ops server. - -```shell -# Execute the deployment script on host B. -cd /opt/aops/scripts/deploy/container -bash run.sh -# Run start-service in the interactive CLI. -``` - -- Modify service configuration files. - -> **Note: If the A-Ops service and basic services are deployed on the same host, you do not need to modify the configuration files. In this example, set the IP addresses for connecting to basic services to the IP address of host A in all configuration files.** -> -> **Password-free mode is used in the default MySQL connection string. The MySQL basic service is configured with the default password "123456". Change the configurations as required.** - -```shell -# Modify the IP addresses for connecting to mysql, elasticsearch, kafka, and redis in apollo.ini, diana.ini, and zeus.ini. -cd /etc/aops/ -``` - -- **FAQ** - -**1. The Elasticsearch basic service cannot be started normally.** - -Check whether the permission on the **/opt/es** directory is **777**. You can run `chmod -R 777 /opt/es` to modify the permission. - -**2. The Prometheus basic service cannot be started normally.** - -Check whether the configuration file **prometheus.yml** exists in **/etc/prometheus**. If not, create it. diff --git a/docs/en/server/maintenance/gala/using_gala_gopher.md b/docs/en/server/maintenance/gala/using_gala_gopher.md index 85c7cbf144811f6e89eaec79ec4f0b167c896768..7972d754af79287f2c100edce097ea3d23465dd0 100644 --- a/docs/en/server/maintenance/gala/using_gala_gopher.md +++ b/docs/en/server/maintenance/gala/using_gala_gopher.md @@ -185,7 +185,7 @@ If the following information is displayed, the service is started successfully: ## How to Use -## Deployment of External Dependent Software +### Deployment of External Dependent Software ![](./figures/gopher-arch.png) @@ -193,7 +193,7 @@ As shown in the preceding figure, the green parts are external dependent compone > Note: Obtain the installation packages of Kafka and Prometheus from the official websites. -## Output Data +### Output Data - **Metric** diff --git a/docs/en/server/maintenance/kernel_live_upgrade/_toc.yaml b/docs/en/server/maintenance/kernel_live_upgrade/_toc.yaml index 9f99686c0502e0acf75339a28c552da99fd60573..9036b5bfcfa42dbdf6b362cbfc08844a8c096f89 100644 --- a/docs/en/server/maintenance/kernel_live_upgrade/_toc.yaml +++ b/docs/en/server/maintenance/kernel_live_upgrade/_toc.yaml @@ -1,13 +1,12 @@ label: Kernel Live Upgrade Guide isManual: true description: User-space automation tool that facilitates rapid kernel restarts and program live migration, enabling kernel hot-swapping functionality -sections:sections: +sections: - label: Kernel Live Upgrade Guide href: ./kernel_live_upgrade.md - sections:sections: + sections: - label: Installation and Deployment href: ./installation_and_deployment.md - label: Usage Guide href: ./usage_guide.md - - label: Common Issues and Solutions - href: ./faqs_and_solutions.md + diff --git a/docs/en/server/maintenance/kernel_live_upgrade/faqs_and_solutions.md b/docs/en/server/maintenance/kernel_live_upgrade/faqs_and_solutions.md deleted file mode 100644 index 909e9628c789fcf30dec904c8bba7d97cef4beb8..0000000000000000000000000000000000000000 --- a/docs/en/server/maintenance/kernel_live_upgrade/faqs_and_solutions.md +++ /dev/null @@ -1,29 +0,0 @@ -# Common Issues and Solutions - -## Issue 1: After the `nvwa update` Command Is Executed, the System Is Not Upgraded - -Cause: An error occurs when the running information is retained or the kernel is replaced. - -Solution: View logs to find the error cause. - -## Issue 2: After the Acceleration Feature Is Enabled, the `nvwa` Command Fails to Be Executed - -Cause: NVWA provides many acceleration features, including quick kexec, pin memory, and cpu park. These features involve the cmdline configuration and memory allocation. When selecting the memory, run cat /proc/iomemory to ensure that the selected memory does not conflict with that of other programs. If necessary, run the dmesg command to check whether error logs exist after the feature is enabled. - -## Issue 3: After the Hot Upgrade, the Related Process Is Not Recovered - -Cause: Check whether the nvwa service is running. If the nvwa service is running, the service or process may fail to be recovered. - -Solution: Run the service `nvwa status` command to view the nvwa logs. If the service fails to be started, check whether the service is enabled, and then run the `systemd` command to view the logs of the corresponding service. Further logs are stored in the process or service folder named after the path specified by **criu_dir**. The dump.log file stores the logs generated when the running information is retained, and the restore.log file restores the logs generated for process recovery. - -## Issue 4: The Recovery Fails, and the Log Displays "Can't Fork for 948: File Exists." - -Cause: The kernel hot upgrade tool finds that the PID of the program is occupied during program recovery. - -Solution: The current kernel does not provide a mechanism for retaining PIDs. Related policies are being developed. This restriction will be resolved in later kernel versions. Currently, you can only manually restart related processes. - -## Issue 5: When the `nvwa` Command Is Used to Save and Recover a Simple Program (Hello World), the System Displays a Message Indicating That the Operation Fails or the Program Is Not Running - -Cause: There are many restrictions on the use of CRIU. - -Solution: View the NVWA logs. If the error is related to the CRIU, check the dump.log or restore.log file in the corresponding directory. For details about the usage restrictions related to the CRIU, see [CRIU WiKi](https://criu.org/What_cannot_be_checkpointed). diff --git a/docs/en/server/maintenance/sysmonitor/_toc.yaml b/docs/en/server/maintenance/sysmonitor/_toc.yaml index 3420297c6b037af047c5c0f8889f143b7151fd76..5b7219dffa4c048cdf9f3a3823fe17e45c070669 100644 --- a/docs/en/server/maintenance/sysmonitor/_toc.yaml +++ b/docs/en/server/maintenance/sysmonitor/_toc.yaml @@ -1,6 +1,6 @@ label: sysmonitor User Guide isManual: true -description: sysmonitor tracks exceptions in the OS during runtime. +description: sysmonitor tracks exceptions in the OS during runtime sections: - label: sysmonitor User Guide href: ./sysmonitor_user_guide.md diff --git a/docs/en/server/memory_storage/gmem/_toc.yaml b/docs/en/server/memory_storage/gmem/_toc.yaml index 49b2def515716e5bdfe27c780d5785ae5b762a8c..4e0ffecb3fcba39f478e7084a91ab6a07ad058c9 100644 --- a/docs/en/server/memory_storage/gmem/_toc.yaml +++ b/docs/en/server/memory_storage/gmem/_toc.yaml @@ -1,4 +1,4 @@ -label: GMEM User Guide +label: GMem User Guide isManual: true description: Centralized management for heterogeneous memory interconnections sections: diff --git a/docs/en/server/memory_storage/gmem/introduction_to_gmem.md b/docs/en/server/memory_storage/gmem/introduction_to_gmem.md index 1841bc0ee7362b1c6a6020a23391215b389f4529..629306173fb83637fbd605a2166244d5d0994f23 100644 --- a/docs/en/server/memory_storage/gmem/introduction_to_gmem.md +++ b/docs/en/server/memory_storage/gmem/introduction_to_gmem.md @@ -1,4 +1,4 @@ -# Introduction to GMEM +# Introduction to GMem ## Introduction diff --git a/docs/en/server/quickstart/quickstart/_toc.yaml b/docs/en/server/quickstart/quickstart/_toc.yaml index 8a273517ddff9f78527a4db9efd2bc7c2e186a55..11feb50e865b55990f41aa914aee6d8fc1130db3 100644 --- a/docs/en/server/quickstart/quickstart/_toc.yaml +++ b/docs/en/server/quickstart/quickstart/_toc.yaml @@ -1,6 +1,6 @@ label: Quick Start isManual: true -description: Quickly install and use openEuler. +description: Quickly install and use openEuler sections: - label: Quick Start href: ./quick_start.md diff --git a/docs/en/server/releasenotes/releasenotes/_toc.yaml b/docs/en/server/releasenotes/releasenotes/_toc.yaml index 8fa01cd55d3a7e0eadc0426160777449ad4842ae..2a9225df952e04a51a2721f4439ac7ae36c50bad 100644 --- a/docs/en/server/releasenotes/releasenotes/_toc.yaml +++ b/docs/en/server/releasenotes/releasenotes/_toc.yaml @@ -1,6 +1,6 @@ label: Release Notes isManual: true -description: Release notes for openEuler 24.03 LTS SP1 +description: Release notes for openEuler 24.03 LTS SP2 sections: - label: Introduction href: ./introduction.md diff --git a/docs/en/tools/cloud/cpds/_toc.yaml b/docs/en/tools/cloud/cpds/_toc.yaml index f66f49efab6f03cfd01e92dfa3b73dccd071c090..a791de543ebf4dcb94cab3877bf854e8c50ecc79 100644 --- a/docs/en/tools/cloud/cpds/_toc.yaml +++ b/docs/en/tools/cloud/cpds/_toc.yaml @@ -1,6 +1,6 @@ label: CPDS User Guide isManual: true -description: CPDS for container fault and sub-health status monitoring +description: CPDS for container fault and sub-health status monitoring. sections: - label: CPDS Introduction href: ./cpds_introduction.md diff --git a/docs/en/tools/cloud/ctinspector/_toc.yaml b/docs/en/tools/cloud/ctinspector/_toc.yaml index 97cda4ea490c194d9d948303c1327e089f8a78d4..e77606bd2281899e37eaac6a989f4ac7c219fd37 100644 --- a/docs/en/tools/cloud/ctinspector/_toc.yaml +++ b/docs/en/tools/cloud/ctinspector/_toc.yaml @@ -1,4 +1,4 @@ -label: CTinspector Introduction +label: CTinspector User Guide isManual: true description: CTinspector enables precise diagnosis of runtime performance bottlenecks and system faults. sections: diff --git a/docs/en/tools/cloud/pilotgo/_toc.yaml b/docs/en/tools/cloud/pilotgo/_toc.yaml index 5ba2a8aa9fa61f248a742490ab066e2b5208843c..6063390c1c7df2a6e008ad0bf90946de1c2860e1 100644 --- a/docs/en/tools/cloud/pilotgo/_toc.yaml +++ b/docs/en/tools/cloud/pilotgo/_toc.yaml @@ -1,6 +1,6 @@ label: PilotGo User Guide isManual: true -Description: Manage hosts, permissions, alarms, and other tasks using PilotGo. +description: Manage hosts, permissions, alarms, and other tasks using PilotGo. sections: - label: Overview href: ./pilotgo_introduction.md diff --git a/docs/en/tools/community_tools/migration_tools/migration_tools_user_guide.md b/docs/en/tools/community_tools/migration_tools/migration_tools_user_guide.md index 6f1fa3ca15ec790c2eb25746b5705af99a56c2f4..e278eaac0830af1b9ce5414abe7f48be0fc37d12 100644 --- a/docs/en/tools/community_tools/migration_tools/migration_tools_user_guide.md +++ b/docs/en/tools/community_tools/migration_tools/migration_tools_user_guide.md @@ -5,11 +5,11 @@ This document outlines the usage of server migration software (migration-tools) for seamless migration from CentOS 7 and CentOS 8 systems to UnionTech OS Server (UOS). The software features a web-based interface that simplifies the migration process through an intuitive graphical environment. -### Deployment Method +## Deployment Method Install the server component on an openEuler 23.09 server and deploy the agent component on CentOS 7/CentOS 8 servers targeted for migration. -#### Supported Systems for Migration +### Supported Systems for Migration 1. Migration from AMD64 and AArch64 CentOS systems to UOS is supported. You need to prepare a complete repository for the target system before migration. @@ -23,11 +23,11 @@ Install the server component on an openEuler 23.09 server and deploy the agent c | CentOS 7.0 to 7.7 | UOS 1002a | UOS 1002a (complete repository) | | CentOS 8.0 to 8.2 | UOS 1050a | UOS 1050a (complete repository) | -### Usage Instructions +## Usage Instructions -#### Installation and Configuration +### Installation and Configuration -##### Installing migration-tools-server +#### Installing migration-tools-server - Disable the firewall. @@ -71,7 +71,7 @@ Install the server component on an openEuler 23.09 server and deploy the agent c scp -r /usr/lib/migration-tools-server/agent-rpm/el8 root@xx.xx.xx.xx:/root ``` -#### Migrating to openEuler +### Migrating to openEuler > **Note:** openEuler migration currently supports only standalone script-based migration. @@ -98,9 +98,9 @@ Install the server component on an openEuler 23.09 server and deploy the agent c ![openEuler Migration Complete](./figures/openeuler-migration-complete.png) -#### Migrating to UOS +### Migrating to UOS -##### Installing migration-tools-agent +#### Installing migration-tools-agent On the CentOS machine to be migrated, follow these steps: @@ -148,7 +148,7 @@ On the CentOS machine to be migrated, follow these steps: systemctl restart migration-tools-agent ``` -##### UOS Migration Steps +#### UOS Migration Steps - Access the web interface. @@ -214,7 +214,7 @@ Repository Configuration Page: - After migration, manually restart the agent machine and verify the migration status. -###### Verification Steps +##### Verification Steps Run the following command to verify if the OS has been successfully migrated to the target version. diff --git a/docs/zh/edge_computing/k3s/k3s_deployment_guide.md b/docs/zh/edge_computing/k3s/k3s_deployment_guide.md index 6671cf170d9ac19c37e8c8e8abb1bfe75e3d0166..1a641b8188835d58aacb52c6acff26ea630367a3 100644 --- a/docs/zh/edge_computing/k3s/k3s_deployment_guide.md +++ b/docs/zh/edge_computing/k3s/k3s_deployment_guide.md @@ -1,7 +1,9 @@ # K3s部署指南 -### 什么是K3s +## 什么是K3s + K3s 是一个轻量级的 Kubernetes 发行版，它针对边缘计算、物联网等场景进行了高度优化。K3s 有以下增强功能： + - 打包为单个二进制文件。 - 使用基于 sqlite3 的轻量级存储后端作为默认存储机制。同时支持使用 etcd3、MySQL 和 PostgreSQL 作为存储机制。 - 封装在简单的启动程序中，通过该启动程序处理很多复杂的 TLS 和选项。 @@ -10,7 +12,8 @@ K3s 是一个轻量级的 Kubernetes 发行版，它针对边缘计算、物联 - 所有 Kubernetes control-plane 组件的操作都封装在单个二进制文件和进程中，使 K3s 具有自动化和管理包括证书分发在内的复杂集群操作的能力。 - 最大程度减轻了外部依赖性，K3s 仅需要 kernel 和 cgroup 挂载。 -### 适用场景 +## 适用场景 + K3s 适用于以下场景： - 边缘计算-Edge @@ -22,9 +25,9 @@ K3s 适用于以下场景： 由于运行 K3s 所需的资源相对较少，所以 K3s 也适用于开发和测试场景。在这些场景中，如果开发或测试人员需要对某些功能进行验证，或对某些问题进行重现，那么使用 K3s 不仅能够缩短启动集群的时间，还能够减少集群需要消耗的资源。 -### 部署K3s +## 部署K3s -#### 准备工作： +### 准备工作 - 确保server节点及agent节点主机名不一致： @@ -38,20 +41,21 @@ K3s 适用于以下场景： ![1661830441538](./figures/yum-install.png) -#### 部署server节点 +### 部署server节点 如需在单个服务器上安装 K3s，可以在 server 节点上执行如下操作： -``` + +```shell INSTALL_K3S_SKIP_DOWNLOAD=true k3s-install.sh ``` ![1661825352724](./figures/server-install.png) -#### 检查server部署情况 +### 检查server部署情况 ![1661825403705](./figures/check-server.png) -#### 部署agent节点 +### 部署agent节点 首先查询server节点的token值，该token可在server节点的/var/lib/rancher/k3s/server/node-token查到。 @@ -63,7 +67,7 @@ INSTALL_K3S_SKIP_DOWNLOAD=true k3s-install.sh 选择添加其他 agent，请在每个 agent 节点上执行以下操作。 -``` +```shell INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken k3s-install.sh ``` @@ -73,7 +77,7 @@ INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetok ![1661829392357](./figures/agent-install.png) -#### 检查agent节点是否部署成功 +### 检查agent节点是否部署成功 安装完毕后，回到 **server** 节点，执行 `kubectl get nodes`，可以看到agent节点已注册成功。 @@ -81,6 +85,6 @@ INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetok 至此，一个基础的k3s集群搭建完成。 -#### 更多用法 +### 更多用法 -K3s的更多用法可以参考K3s官网，https://rancher.com/docs/k3s/latest/en/ ，https://docs.rancher.cn/k3s/ +K3s的更多用法可以参考K3s官网， ， diff --git a/docs/zh/server/_toc.yaml b/docs/zh/server/_toc.yaml index 7c8474b7ecde599ae946207f6e505ca428e56a80..6c1958ea1fd5242dc48e6252d67b56955281bdac 100644 --- a/docs/zh/server/_toc.yaml +++ b/docs/zh/server/_toc.yaml @@ -15,7 +15,9 @@ sections: - href: ./administration/compa_command/_toc.yaml - label: 系统运维 sections: - - href: ./maintenance/aops/_toc.yaml + - href: + upstream: https://gitee.com/openeuler/aops-zeus/blob/master/docs/zh/24.03_lts_sp2/_toc.yaml + path: ./aops - href: ./maintenance/gala/_toc.yaml - href: ./maintenance/sysmonitor/_toc.yaml - href: ./maintenance/kernel_live_upgrade/_toc.yaml diff --git a/docs/zh/server/maintenance/aops/_toc.yaml b/docs/zh/server/maintenance/aops/_toc.yaml deleted file mode 100644 index 76327c859fd0f117b2596c71ed8ae9be71808fdd..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/_toc.yaml +++ /dev/null @@ -1,20 +0,0 @@ -label: A-Ops用户指南 -isManual: true -description: 使用 A-Ops 智能运维框架进行故障快速定位、配置项统筹管理等 -sections: - - label: 部署A-Ops - href: ./deploying_aops.md - - label: 使用A-Ops智能定位框架 - href: ./aops_intelligent_positioning_framework_user_manual.md - - label: A-Ops漏洞管理模块使用手册 - href: ./aops_vulnerability_management_module_user_manual.md - - label: 使用热补丁dnf插件 - href: ./dnf_command_usage.md - - label: 配置溯源服务 - href: ./configuration_tracing_service_user_manual.md - - label: 社区热补丁制作发布流程 - href: ./community_hotpatch_creation_and_release_process.md - - label: A-Ops资产管理使用手册 - href: ./aops_asset_management_user_manual.md - - label: 一键化部署介绍 - href: ./quick_deployment_of_aops.md diff --git a/docs/zh/server/maintenance/aops/aops_asset_management_user_manual.md b/docs/zh/server/maintenance/aops/aops_asset_management_user_manual.md deleted file mode 100644 index 0a9986a1c5fb862f7405863980448962743e7fec..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/aops_asset_management_user_manual.md +++ /dev/null @@ -1,111 +0,0 @@ -# AOps资产管理使用手册 - -参照[AOps部署指南](deploying_aops.md)部署AOps前后端服务后，即可使用AOps资产管理功能，纳管集群主机。 - -主机纳管是使用AOps进行智能运维的第一步，后续用户按需部署的漏洞管理、配置溯源及故障诊断服务均面向纳管的主机进行操作。 - -下文将为大家介绍如何使用资产管理功能，逐步纳管集群主机。 - -## 1. 登录 - -首先使用默认的admin账号进行登录，密码为changeme - -![登陆界面](./figures/资产管理/登陆界面.png) - -这里也支持用户注册新账号，或是用gitee账号第三方登录。 - -登录后会直接切入数据看板界面，后续纳管主机并漏洞扫描后，可以在右侧页面主窗口右上角内看到CVE整体数量的分布统计。 - -![工作台详情](./figures/资产管理/工作台.png) - -## 2. 纳管集群主机 - -资产管理界面用于对集群中服务器的纳管（添加、编辑和删除），支持单台主机和批量主机的添加操作。 - -当前资产管理模块分为以下两个界面： - -- 主机管理 -- 主机组管理 - -纳管时需先创建主机组，再将主机添加至对应主机组中，便于后续对主机分组查看和管理。 - -### 2.1 添加主机组 - -进入资产管理的主机组管理子页面，点击右侧添加主机组按钮，即可添加主机组的名称和描述。 - -![主机组管理](./figures/资产管理/主机组管理列表.png) - -![添加主机组](./figures/资产管理/添加主机组.png) - -后续添加主机后，可以查看该主机组的主机列表： - -![主机组内主机查看](./figures/资产管理/主机组内主机查看.png) - -### 2.2 添加主机 - -进入主机管理页面，可以看到当前所有纳管的主机。其中也可以看到各主机的在线状态。 - -![主机列表查看](./figures/资产管理/主机列表.png) - -此页面支持如下操作： - -- 添加单台主机 -- 批量添加主机 -- 主机的批量删除 -- 支持使用所属主机组、管理节点的主机过滤，同时可满足对主机名称的排序 - -#### 2.2.1 添加单台主机 - -点击“添加主机”按钮，即可对单台主机进行添加。 - -![主机管理-添加](./figures/资产管理/主机管理-添加.png) - -支持如下操作： - -- 快捷添加主机组（同主机组管理中的添加功能） -- 登录认证方式支持主机密码模式（需提供账号和密码）和主机密钥模式（需提供可登录的密钥，**注意此处的密钥为私钥**） - -注：管理节点/监控节点暂无本质区别，用户可按需指定。 - -#### 2.2.2 批量添加主机 - -针对大集群的场景，一个个添加主机过于麻烦。这里我们提供了上传excel的方式，将主机批量添加。 - -![主机管理-批量添加](./figures/资产管理/批量添加主机.png) - -下载模板并按照格式填写主机注册所需信息后，选择文件进行上传。 - -![主机管理-批量添加](./figures/资产管理/批量添加-文件解析.png) - -格式解析无误后，点击提交，即可看到添加结果。若添加失败会有相应提示。 - -![主机管理-批量添加](./figures/资产管理/批量添加-添加结果.png) - -支持如下操作： - -- 在线下载批量导入主机模板，支持的类型有xls、xlsx、csv三种格式的文件 -- 通过新增上传解析文件内容，数据回显至前端展示 -- 支持单主机的数据调整或删除 -- 点击提交后，可查看主机添加的结果 - -## 3 编辑主机 - -添加主机完毕后，若密码或密钥不对导致连接失败，或其他信息需要变更，可以点击主机列表中的编辑按钮进行编辑： - -![主机管理-批量添加](./figures/资产管理/主机编辑界面.png) - -## 4 查看主机详情 - -客户端部署了aops-ceres命令行工具后，在主机列表点击主机可以查看该主机的一些基础信息。 - -![主机详情](./figures/资产管理/主机详情.png) - -若部署了prometheus服务以及客户端的采集器（node-exporter或gala-gopher等），可以在下方选择并展示主机的指标波形。 - -![指标波形](./figures/资产管理/指标波形.png) - -点击插件页签，可以看到node-exporter插件的各采集探针，按需开启或关闭。 - -点击场景识别后，系统会根据客户端的应用生成该主机的场景，并推荐检测该场景所需开启的插件以及采集项。 - -![插件开关](./figures/资产管理/插件开关.png) \ No newline at end of file diff --git a/docs/zh/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md b/docs/zh/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md deleted file mode 100644 index d052e9aacd205fe50a5b0b794ab0bd9e91f28d3b..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/aops_intelligent_positioning_framework_user_manual.md +++ /dev/null @@ -1,109 +0,0 @@ -# AOps 智能定位框架使用手册 - -参照[AOps部署指南](deploying_aops.md)部署AOps前后端服务，并参照[AOps资产管理使用手册](./aops_asset_management_user_manual.md)纳管了主机后，即可使用AOps智能定位框架。 - -智能定位框架包含了**智能定位**和**配置溯源**两部分，下文会从页面的维度进行AOps智能定位框架功能的介绍。 - -## 1. 智能定位 - -AOps项目的智能定位策略采用内置网络诊断应用作为模板，生成个性化工作流的策略进行检测和诊断。 - -“应用”作为工作流的模板，描述了检测中各步骤的串联情况，内置各步骤中使用的检测模型的推荐逻辑。用户在生成工作流时，可根据各主机的采集项、场景等信息，定制出工作流的详细信息。 - -### 1.1 工作流列表页面 - -![工作流](./figures/故障诊断/工作流.jpg) - -支持操作： - -- 查看当前工作流列表，支持按照主机组、应用和状态进行筛选，并支持分页操作 -- 查看当前应用列表 - -### 1.2 工作流详情页面 - -![工作流详情](./figures/故障诊断/工作流详情.jpg) - -支持操作： - -- 查看工作流所属主机组、主机数量、状态等基础信息 -- 查看单指标检测、多指标检测、集群故障诊断各步骤的详细算法模型信息 -- 修改检测各步骤应用的模型 -- 执行、暂停和删除工作流 - -修改某检测步骤的模型时，用户可根据模型名或标签搜索系统内置的模型库，选中模型后点击右下角“应用”按钮进行更改。 - -![修改模型](./figures/故障诊断/修改模型.png) - -### 1.3 应用详情页面 - -![app详情](./figures/故障诊断/应用.png) - -支持操作： - -- 查看应用的整体流程 -- 基于应用创建工作流 - -创建工作流时，点击右上角的“创建工作流”按钮，并在右侧弹出的窗口中输入工作流的名称和描述，选择要检测的主机组。选中主机组后，下方会列出该主机组的所有主机，用户可选中部分主机后移到右侧的列表，最后点击创建，即可在工作流列表中看到新创建的工作流。 - -![app详情](./figures/故障诊断/app详情.jpg) - -![创建工作流](./figures/故障诊断/创建工作流.jpg) - -### 1.4 告警 - -启动工作流后，会根据工作流的执行周期定时触发诊断，每次诊断结果若为异常，则会作为一条告警存入数据库，同时也会反映在前端告警页面中。 - -![告警](./figures/故障诊断/告警.jpg) - -支持操作： - -- 查看当前告警总数 -- 查看各主机组的告警数量 -- 查看告警列表 -- 告警确认 -- 查看告警详情 -- 下载诊断报告 - -点击操作列“确认”可进行告警确认，告警确认后，将不在列表中显示 - -![告警确认](./figures/故障诊断/告警确认.jpg) - -点击操作列“异常详情”后，可以根据主机维度查看告警详情，包括异常数据项的展示以及根因节点、根因异常的判断等。 - -![告警详情](./figures/故障诊断/告警详情.jpg) - -## 2. 配置溯源 - -AOps项目的配置溯源用于对目标主机配置文件内容的变动进行检测记录，对于文件配置错误类引发的故障起到很好的支撑作用。 - -### 2.1 创建业务域 - -![](./figures/chuangjianyewuyu.png) - -### 2.2 添加业务域纳管node - -![](./figures/tianjianode.png) - -### 2.3 添加业务域配置 - -![](./figures/xinzengpeizhi.png) - -### 2.4 查询预期配置 - -![](./figures/chakanyuqi.png) - -### 2.5 删除配置 - -![](./figures/shanchupeizhi.png) - -### 2.6 查询实际配置 - -![](./figures/chaxunshijipeizhi.png) - -### 2.7 配置校验 - -![](./figures/zhuangtaichaxun.png) - -### 2.8 配置同步 - -暂未提供 diff --git a/docs/zh/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md b/docs/zh/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md deleted file mode 100644 index 3e481798fff00b8250063a05253da8b027ec33dd..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/aops_vulnerability_management_module_user_manual.md +++ /dev/null @@ -1,286 +0,0 @@ -# AOps漏洞管理模块使用手册 - -参照[AOps部署指南](deploying_aops.md)部署AOps前后端服务，并参照[AOps资产管理使用手册](aops_asset_management_user_manual.md)纳管了主机后，即可使用AOps漏洞管理模块。 - -A-Ops智能运维工具的智能补丁管理模块(**apollo**)主要集成了**漏洞扫描、CVE修复、任务回退**、**热补丁移除**等核心功能： - -- 支持对openEuler已修复并发布的漏洞进行手动/定时扫描。漏洞的详细信息通过**在线/离线**同步社区发布的安全公告进行获取。当前聚焦于内核漏洞的处理，后续支持用户态软件包漏洞。 - -- 支持漏洞批量修复。修复过程中，客户端会命令行调用基于dnf原生框架的dnf hotpatch插件，实现**冷补丁（需重启）/热补丁（免重启）**的修复。此插件将底层冷、热补丁的管理封装成统一的入口，方便单机用户的使用和集群的调用。 - -- 支持通过任务粒度回退或移除热补丁的形式，将系统恢复至原状态。 - -下文将按照漏洞修复的工作流来进行A-Ops智能补丁管理功能的介绍。 - -## 1. 配置repo源 - -openEuler的漏洞信息通过安全公告对外发布，同时在update源中发布修复所用的软件包及相应元数据。配置了update源后即可在命令行通过dnf updateinfo list cves命令或dnf hot-updateinfo list cves（需安装A-Ops的dnf热补丁插件）进行漏洞的扫描。 - -默认的openEuler系统安装后自带对应OS版本的冷补丁update源。对于自定义或离线场景，用户可以通过设置repo来自行配置冷/热补丁的update源。 - -### 1.1 Repo源添加 - -漏洞管理界面用于对目标主机存在的CVE进行监控与修复。 - -当前漏洞管理模块分为以下三个界面： - -- 主机列表界面 -- CVEs界面 -- 任务列表界面 - -进入漏洞管理的主机管理子页面，可以从主机粒度看到当前纳管的所有主机的**已修复和未修复漏洞**情况： - -![主机列表界面](./figures/漏洞管理/主机列表界面.png) - -点击下方CVE REPO的加号框，随后在弹出界面中，输入REPO源名称与REPO内容，点击右下角“确定”按钮即可进行repo源的添加： - -![添加REPO源](./figures/漏洞管理/添加repo源.png) - -若不清楚格式，可以点击下载模板按钮查看。注意baseurl和gpgkey要配置为客户端OS版本的对应地址。用户也可以直接上传编辑好的repo文件。 - -新建repo完毕后，即可在CVE REPO列表中进行查看或删除。 - -### 1.2 Repo设置 - -新建repo源后，点击右上角“设置repo”的按钮，可以创建一个任务，为勾选的主机进行批量的repo设置。 - -![设置repo](./figures/漏洞管理/设置repo源.png) - -点击“创建”或“立即执行”后会生成一个repo设置任务，执行完毕后即可在主机列表界面看到已设置好该repo源。 - -## 2. 漏洞扫描 - -确认好主机上已配置好repo源（或使用默认安装时自带的repo源）后，我们就可以为主机进行批量扫描了。直接点击右侧的漏洞扫描，默认扫描全部主机。用户也可以勾选部分主机进行扫描。 - -除了手动扫描，用户也可以配置后台定时任务，进行每日定时扫描。 - -![漏洞扫描](./figures/漏洞管理/漏洞扫描.png) - -扫描完毕后，若用户在创建用户时配置了邮箱信息，apollo会将漏洞情况邮件发送给用户。 - -![邮件通知](./figures/漏洞管理/邮件通知.png) - -## 3. 漏洞查看 - -### 3.1 主机详情信息界面 - -扫描完毕后，除了上文的主机列表可以看到每个主机的已修复和未修复的CVE数量，还可以点击某台主机查看详细的CVE信息： - -![主机详情](./figures/漏洞管理/主机详情.png) - -支持如下操作： - -- 查看主机基本信息与CVE个数 -- 查看该主机未修复CVE和已修复CVE列表，支持导出。未修复CVE展开后可以看到受影响的RPM包及支持的修复方法，已修复CVE展开后可以看到修复使用的RPM。 -- 生成CVE修复任务（切换至“未修复”时，才可支持CVE修复任务创建），可支持CVE粒度的任务创建，同时也可具体到特定的rpm包修复 -- 生成热补丁移除任务（切换至“已修复”时，才可支持生成热补丁移除任务） -- 单机漏洞扫描 - -### 3.2 CVE列表界面 - -上文介绍了从主机维度查看漏洞情况，我们也可以从**漏洞维度**去查看我们重点关注的漏洞。 - -点击CVEs子页面，可以看到未修复和已修复两个页签，下方详细介绍了每个CVE的发布时间、影响软件包、严重性等信息，展开后则能看到描述信息及受影响的rpm包和支持的修复方式。 - -![CVEs列表](./figures/漏洞管理/cve列表.png) - -支持如下操作： - -- 查看所有CVE信息（CVE严重性进行筛选、CVE ID、发布时间、CVSS分数、主机数量进行排序，可根据CVE ID或软件包名称进行检索） -- 切换至“未修复”列表 - - 展开某CVE可以看到受影响的RPM包和支持的修复方法，以及该组合对应的主机 - - 右侧按钮为“生成修复任务”，支持生成**CVE修复任务** - -- 切换至“已修复”列表 - - 展开某CVE可以看到修复使用的RPM及对应的主机 - - 右侧按钮为“热补丁移除”，针对热补丁修复的CVE，可生成**热补丁移除任务** - -- 上传安全公告 - -这里对安全公告的上传简单说明： - -apollo支持定时从openEuler官网下载安全公告信息，针对无法连接外网的环境，提供了安全公告的手动上传功能。当前社区仅对社区软件包受影响的CVE发布了安全公告，用户可以从以下地址下载安全公告并上传压缩包：[https://repo.openeuler.org/security/data/cvrf/](https://gitee.com/link?target=https%3A%2F%2Frepo.openeuler.org%2Fsecurity%2Fdata%2Fcvrf%2F) - -![上传安全公告](./figures/漏洞管理/上传安全公告.png) - -社区也提供了安全公告订阅，订阅后会收到邮件通知：[https://mailweb.openeuler.org/postorius/lists/sa-announce.openeuler.org/](https://mailweb.openeuler.org/postorius/lists/sa-announce.openeuler.org/) - -### 3.3 CVE详情信息 - -和主机详情界面类似，在CVE列表界面点击某一个CVE即可进入CVE详情界面。可以看到此漏洞影响的所有主机和已修复这个漏洞的主机。 - -![CVE详情](./figures/漏洞管理/CVE详情界面.png) - -支持如下操作： - -- 查看CVE基本信息 -- 查看关联CVE数量，即影响同样源码包（如kernel）的CVE -- 查看受此CVE影响的主机列表以及单个主机上受此CVE影响的rpm包列表 -- 支持点击主机名称跳转至**主机详情页** -- 选择“未修复”列表，右侧按钮为“生成修复任务，支持**生成CVE修复任务** -- 选择“已修复”列表，右侧按钮为“热补丁移除任务”，支持**生成热补丁移除任务** - -## 4. 漏洞修复 - -### 4.1 生成修复任务 - -在CVE列表、CVE详情、主机详情界面均可进行漏洞的批量修复。这里以CVE列表界面为示例，选中CVE点击“生成修复任务”按钮，右侧会出现弹窗。不选中CVE则默认修复全部CVE。 - -其中针对热补丁，有2个按钮： - -- 是否accept：勾选后会在重启后自动激活此次修复使用的热补丁 - -- 冷补丁收编：勾选后，会同步生成热补丁对应的冷补丁的修复任务 - -![生成修复任务](./figures/漏洞管理/生成修复任务.png) - -需额外注意： - -- 为了方便执行以及后续的任务回滚，生成任务时会自动将冷、热补丁的修复动作拆分成两个任务，可以通过任务名进行分辨。 - -### 4.2 执行修复任务 - -生成任务后可以点击立即跳转到该任务详情，或点击左侧的任务子页面，进入任务列表界面： - -![任务列表](./figures/漏洞管理/任务列表.png) - -点击刚才生成的修复任务，可以看到此任务的基础信息，以及下方的主机以及该主机要修复的软件包信息。点击右侧的执行按钮即可执行。 - -![任务详情界面](./figures/漏洞管理/任务详情.png) - -**注意**：针对同一台主机，**热补丁任务应优先与冷补丁任务执行**。由于内核热补丁只能应用在指定版本内核，若先安装冷补丁再安装热补丁，aops客户端会报错，以防重启后内核切换、热补丁失效导致的漏洞重新暴露。而先安装热补丁再安装冷补丁时，客户端调用的dnf upgrade-en 命令会确保冷补丁包含了当前热补丁修复的漏洞。 - -### 4.3 任务报告查看 - -执行完毕后，可以看到任务的“上次执行时间”发生更新，并出现“查看报告”按钮。点击查看报告，即可查看各主机的执行情况，如执行结果、执行失败的原因等： - -![修复任务报告](./figures/漏洞管理/修复任务报告.png) - -## 5. 修复任务回滚 - -进入修复任务详情，点击生成回滚任务，即可对该修复任务进行回退： - -![生成回滚任务](./figures/漏洞管理/生成回滚任务.png) - -进入回滚任务详情，与修复任务相反，可以看见当前已安装的软件包（修复时安装的rpm），以及回退后的目标软件包（修复前的rpm）。执行时点击“执行”按钮即可。 - -![回滚任务详情](./figures/漏洞管理/回滚任务详情.png) - -## 6. 热补丁移除任务 - -若对已安装的热补丁不满意，可以在任意“已修复”的列表，勾选使用热补丁修复的CVE或主机，生成热补丁移除任务。 - -与回滚任务相比，热补丁移除任务只针对热补丁，且不支持对热补丁的升降级处理，只通过dnf操作将热补丁rpm进行移除。 - -![生成热补丁移除任务](./figures/漏洞管理/生成热补丁移除任务.png) - -## 7.定时任务配置 - -主体的漏洞处理过程在前台完成之后，用户还可以在apollo服务端针对后台的定时任务进行编辑，修改后`systemctl restart aops-apollo`重启服务生效。 - -定时任务主要包含3种类型任务，定时任务配置文件位于 /etc/aops/apollo_crontab.ini，内容如下： - -```ini -[cve_scan] -# timed task name -id = cve scan -# value between 0-6, for example, 0 means Monday, 0-6means everyday. -day_of_week = 0-6 -# value between 0-23, for example, 2 means 2:00 in a day. -hour = 2 -# value is true or false, for example, true means with service start. -auto_start = true - -[download_sa] -id = download sa -day_of_week = 0-6 -hour = 3 -auto_start = true -cvrf_url = https://repo.openeuler.org/security/data/cvrf - -[correct_data] -id = correct data -day_of_week = 0-6 -hour = 4 -auto_start = true -service_timeout_threshold_min = 15 -``` - -### 7.1 定时巡检，执行漏洞扫描 - -**定时扫描cve任务的参数** - -- id - - > 定时任务的名称，不能与其他定时任务名称重复，不建议修改。 - -- day_of_week - - > 定时任务在一周中的第几天启动，取值范围0-6，0-6表示每天，0表示周一，以此类推。 - -- hour - - > 任务启动的时间，取值范围0-23，与24小时制时间格式一致。 - -- auto_start - - > 任务是否跟随服务启动，true表示同时启动，false表示不同时启动。 - -- 其他 - - > 如果要精确到分钟，秒，需要添加minute（取值范围0-59）和second（取值范围0-59）。 - > - > **示例** - > - > ```ini - > minute = 0 - > second = 0 - > ``` - -**修改配置文件示例** - -> 打开配置文件 - -```shell -vim /etc/aops/apollo_crontab.ini -``` - -> 修改定时任务执行时机 - -```ini -[cve_scan] -id = cve scan -day_of_week = 5 -hour = 2 -auto_start = true -``` - -### 7.2 定时下载安全公告 - -相同字段含义和使用与[cve_scan]一样。 - -- cvrf_url - - > 获取安全公告详细信息的基础url，**暂不支持修改。** - -### 7.3 定时校正异常数据 - -相同字段含义和使用与[cve_scan]一样。 - -- service_timeout_threshold_min - - > 判断异常数据的阈值，取值为正整数，建议最小值为15。 - -**修改配置文件示例** - -> 打开配置文件 - -```shell -vim /etc/aops/apollo_crontab.ini -``` - -> 设置异常数据阈值 - -```ini -service_timeout_threshold_min = 15 -``` diff --git a/docs/zh/server/maintenance/aops/community_hotpatch_creation_and_release_process.md b/docs/zh/server/maintenance/aops/community_hotpatch_creation_and_release_process.md deleted file mode 100644 index d51a70181c598d840b1247f39370ed67bcae2918..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/community_hotpatch_creation_and_release_process.md +++ /dev/null @@ -1,274 +0,0 @@ -# 社区热补丁制作发布流程 - -## 制作内核态/用户态热补丁 - -> 热补丁仓库： - -### 场景1. 在src-openEuler/openEuler仓下评论pr制作新版本热补丁 - -> 制作内核态热补丁需在**openEuler/kernel**仓评论pr。 -> -> 制作用户态热补丁需在src-openEuler仓评论pr，现在支持**src-openEuler/openssl，src-openEuler/glibc，src-openEuler/systemd**。 - -#### 1. 在已合入pr下评论制作热补丁 - -- 从src-openeuler仓【支持openssl, glibc, systemd】评论已合入pr制作新版本热补丁。 - -```shell -/makehotpatch [软件包版本号] [ACC/SGL] [patch list] [cve/bugfix/feature] [issue id] [os_branch] -``` - -命令说明：使用多个patch用','分隔，需注意patch的先后顺序。 - -![image-20230629114903593](./image/src-openEuler仓评论.png) - -- 从openeuler仓【支持kernel】评论已合入pr制作新版本热补丁。 - -```shell -/makehotpatch [软件包版本号] [ACC/SGL] [cve/bugfix/feature] [issue id] [os_branch] -``` - -![image-20230816105443658](./image/src-openEuler仓评论.png) - -评论后，门禁触发hotpatch_meta仓创建热补丁issue以及同步该pr。 - -#### 2. hotpatch_metadata仓自动创建热补丁issue、同步该pr - -pr评论区提示启动热补丁制作流程。 - -![image-20230816105627657](./image/启动热补丁工程流程.png) - -随后，hotpatch_meta仓自动创建热补丁issue，并在hotpatch_meta仓同步该pr。 - -> 热补丁issue用于跟踪热补丁制作流程。 -> -> hotpatch_meta仓用于触发制作热补丁。 - -![image-20230816105850831](./image/热补丁issue链接和pr链接.png) - -点击查看热补丁issue链接内容。 - -![image-20230816110430216](./image/热补丁issue初始内容.png) - -点击查看在hotpatch_meta仓自动创建的pr。 - -![image-20230816110637492](./image/hotpatch-fix-pr.png) - -#### 3. 触发制作热补丁 - -打开hotpatch_meta仓自动创建的pr，评论区可以查看热补丁制作信息。 - -![image-20230816110919823](./image/热补丁pr触发流程.png) - -查看热补丁制作结果。 - -如果热补丁制作失败，可以根据相关日志信息、下载chroot环境自行修改patch进行调试，重新修改pr提交后或者评论 /retest直到热补丁可以被成功制作。 - -![image-20230816111330743](./image/热补丁pr制作失败.png) - -![image-20230816111452301](./image/热补丁pr的chroot环境.png) - -如果热补丁制作成功，可以通过Download link下载热补丁进行自验。 - -![image-20230816111007667](./image/热补丁pr制作结果.png) - -打开Download link链接。 - -![image-20230816112118423](./image/热补丁自验下载链接.png) - -进入Packages目录，可以下载制作成功的热补丁。 - -![image-20230816112420115](./image/热补丁自验包下载链接.png) - -**若热补丁制作成功，可以对热补丁进行审阅**。 - -### 场景2、从hotpatch_meta仓提pr制作新版本热补丁 - -> hotpatch_meta仓地址： - -#### 1. 提pr - -在hotpatch_metadata仓提pr。 - -（1）阅读readme，根据热补丁issue模版和元数据文件hotmetadata_ACC.xml/hotmetadata_SGL.xml模板创建热补丁。 - -![image-20230817095228204](./image/热补丁仓提pr说明.png) - -pr内容： - -- patch文件。 -- 如果没有相应热补丁元数据hotmetadata_ACC.xml/hotmetadata_SGL.xml文件，则手动创建；否则修改热补丁元数据hotmetadata_ACC.xml/hotmetadata_SGL.xml文件。 - -#### 2. 触发制作热补丁 - -**若热补丁制作成功，可以对热补丁进行审阅**。 - -### 场景3、从hotpatch_metadata仓提pr修改热补丁 - -> hotpatch_meta仓地址： -> -> 从hotpatch_meta仓提pr只能修改还未正式发布的热补丁。 - -#### 1. 提pr - -在hotpatch_meta仓提pr。 - -（1）如果修改过程涉及元数据文件hotmetadata_ACC.xml/hotmetadata_SGL.xml文件内容变动，请阅读readme，按照元数据文件hotmetadata_ACC.xml/hotmetadata_SGL.xml模板进行修改。 - -![image-20230817095228204](./image/热补丁仓提pr说明.png) - -> 如果需要修改元数据文件中的热补丁issue字段内容，请确保添加的热补丁Issue已经存在。 -> 用户不允许修改热补丁元数据文件中已被正式发布的热补丁的相关内容。 - -pr内容： - -- patch文件。 -- 修改热补丁元数据hotmetadata_ACC.xml/hotmetadata_SGL.xml文件。 - -#### 2. 触发制作热补丁 - -**若热补丁制作成功，可以对热补丁进行审阅**。 - -## 审阅热补丁 - -### 1. 审阅热补丁pr - -确认可发布，合入pr。 - -![image-20230816112957179](./image/同意合入pr.png) - -### 2. pr合入，回填热补丁issue - -自动在热补丁issue页面补充热补丁路径，包含src.rpm/arm架构/x86架构的rpm包，以及对应hotpatch.xml，用于展示热补丁信息。 - -> 如果一个架构失败，强行合入，也可只发布单架构的包。 - -![image-20230816115813395](./image/热补丁issue回填.png) - -- 查看热补丁元数据内容。 - -> 热补丁元数据用于管理查看热补丁相关历史制作信息。 - -hotmetadata_ACC.xml格式示例： - -```xml - - - Managing Hot Patch Metadata - - - - 源码包下载路径（需要reealse正式路径） - x86_64架构debuginfo包下载路径（需要reealse正式路径） - aarch64架构debuginfo包下载路径（需要reealse正式路径） - 本次需要制作热补丁的patch包名1 - 本次需要制作热补丁的patch包名2 - ... - - - - 热补丁issue链接 - - - - -``` - -hotmetadata_SGL.xml格式示例： - -```xml - - - Managing Hot Patch Metadata - - - - 源码包下载路径（需要realse正式路径） - x86_64架构debuginfo包下载路径（需要reealse正式路径） - aarch64架构debuginfo包下载路径（需要reealse正式路径） - 本次需要制作热补丁的patch包名1 - 本次需要制作热补丁的patch包名2 - ... - - - - 热补丁issue链接 - - - - -``` - -> 注意：src_rpm的download_link均来自openeuler的repo仓下正式发布的rpm包。 - -![image-20230817100308392](./image/ACC的hotpatchmetadata文件示例.png) - -### 3. 修改热补丁Issue - -- 将热补丁issue状态修改为”已完成“。 -- 为热补丁issue添加hotpatch标签。 - -## 发布热补丁 - -### 1、收集热补丁发布需求 - -在release-management仓库每周update需求收集的issue下方，手动评论start-update命令，此时会收集待发布的热补丁和待发布的修复cve的冷补丁。后台会在hotpatch_meta仓库根据hotpatch标签查找已完成的热补丁issue。 - -### 2、生成热补丁安全公告 - -社区根据收集到的热补丁issue信息，生成热补丁安全公告xml文件。 - -> 热补丁安全公告地址： - -- 在热补丁安全公告文件新增HotPatchTree字段，记录和公告相关漏洞的热补丁，每个补丁按架构和CVE字段区分（Type=ProductName 记录分支，Type=ProductArch 记录补丁具体的rpm包）。 - -![image-20230908163914778](./image/image-20230908163914778.png) - -### 3、Majun平台上传文件到openEuler官网，同步生成updateinfo.xml文件 - -社区将生成的安全公告上传到openEuler官网，同时基于所收集的热补丁信息生成updateinfo.xml文件。 - -![image-20230908164216528](./image/image-20230908164216528.png) - -updateinfo.xml文件样例： - -```xml - - - - openEuler-HotPatchSA-2023-1001 - An update for kernel is now available for openEuler-22.03-LTS-SP3 - Important - openEuler - - - - - A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation.Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer.We recommend upgrading past commit ef7dfac51d8ed961b742218f526bd589f3900a59 (4716c73b188566865bdd79c3a6709696a224ac04 for 5.10 stable and 0e388fce7aec40992eadee654193cad345d62663 for 5.15 stable).(CVE-2023-3389) - - - openEuler - - patch-kernel-5.10.0-153.12.0.92.oe2203sp3-ACC-1-1.aarch64.rpm - - - patch-kernel-5.10.0-153.12.0.92.oe2203sp3-ACC-1-1.x86_64.rpm - - - - - -``` - -### 4、openEuler官网可以查看更新的热补丁信息 - -> openEuler官网安全公告： - -以”HotpatchSA“关键词搜索热补丁安全公告，打开安全公告查看发布热补丁详细信息。 - -![image-20230908163402743](./image/image-20230908163402743.png) - -### 5、获取热补丁相关文件 - -社区将热补丁相关文件同步至openEuler的repo源下，可以在各个分支的hotpatch_update目录下获取相应文件。 -> openEuler的repo地址： diff --git a/docs/zh/server/maintenance/aops/configuration_tracing_service_user_manual.md b/docs/zh/server/maintenance/aops/configuration_tracing_service_user_manual.md deleted file mode 100644 index 75d6cc50263724998a78b7fb13795fc457aa8ae2..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/configuration_tracing_service_user_manual.md +++ /dev/null @@ -1,161 +0,0 @@ -# gala-ragdoll的使用指导 - -============================ - -## 安装 - -### 手动安装 - -- 通过yum挂载repo源实现 - - 配置yum源：openEuler-24.03-LTS 和 openEuler-24.03-LTS:Epol，repo源路径：/etc/yum.repos.d/openEuler.repo。 - - ```ini - [everything] # openEuler-24.03-LTS 官方发布源 - name=openEuler-24.03-LTS - baseurl=https://repo.openeuler.org/openEuler-24.03-LTS/everything/$basearch/ - enabled=1 - gpgcheck=1 - gpgkey=https://repo.openeuler.org/openEuler-24.03-LTS/everything/$basearch/RPM-GPG-KEY-openEuler - - [Epol] # openEuler-24.03-LTS:Epol 官方发布源 - name=Epol - baseurl=https://repo.openeuler.org/openEuler-24.03-LTS/EPOL/main/$basearch/ - enabled=1 - gpgcheck=1 - gpgkey=https://repo.openeuler.org/openEuler-24.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler - ``` - - 然后执行如下指令下载以及安装gala-ragdoll及其依赖。 - - ```shell - yum install gala-ragdoll # A-Ops 配置溯源 - yum install python3-gala-ragdoll - - yum install gala-spider # A-Ops 架构感知 - yum install python3-gala-spider - ``` - -- 通过安装rpm包实现。先下载gala-ragdoll-vx.x.x-x.oe1.aarch64.rpm，然后执行如下命令进行安装（其中x.x-x表示版本号，请用实际情况替代） - - ```shell - rpm -ivh gala-ragdoll-vx.x.x-x.oe1.aarch64.rpm - ``` - -### 使用Aops部署服务安装 - -#### 编辑任务列表 - -修改部署任务列表，打开gala_ragdoll步骤开关： - -```yaml ---- -step_list: - ... - gala_ragdoll: - enable: false - continue: false - ... -``` - -#### 编辑主机清单 - -具体步骤参见[部署管理使用手册]章节2.2.2.10章节gala-ragdoll模块主机配置 - -#### 编辑变量列表 - -具体步骤参见[部署管理使用手册]章节2.2.2.10章节gala-ragdoll模块变量配置 - -#### 执行部署任务 - -具体步骤参见[部署管理使用手册]章节3执行部署任务 - -### 配置文件介绍 - -```/etc/yum.repos.d/openEuler.repo```是用来规定yum源地址的配置文件，该配置文件内容为： - -```shell -[OS] -name=OS -baseurl=http://repo.openeuler.org/openEuler-24.03-LTS/OS/$basearch/ -enabled=1 -gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-24.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler -``` - -### yang模型介绍 - -`/etc/yum.repos.d/openEuler.repo`采用yang语言进行表示，参见`gala-ragdoll/yang_modules/openEuler-logos-openEuler.repo.yang`; -其中增加了三个拓展字段： - -| 拓展字段名称 | 拓展字段格式 | 样例 | -| ------------ | ---------------------- | ----------------------------------------- | -| path | OS类型：配置文件的路径 | openEuler:/etc/yum.repos.d/openEuler.repo | -| type | 配置文件类型 | ini、key-value、json、text等 | -| spacer | 配置项和配置值的中间键 | “ ”、“=”、“：”等 | - -附：yang语言的学习地址： - -### 通过配置溯源创建域 - -#### 查看配置文件 - -gala-ragdoll中存在配置溯源的配置文件 - -```shell -[root@openeuler-development-1-1drnd ~]# cat /etc/ragdoll/gala-ragdoll.conf -[git] // 定义当前的git信息：包括git仓的目录和用户信息 -git_dir = "/home/confTraceTestConf" -user_name = "user" -user_email = "email" - -[collect] // A-OPS 对外提供的collect接口 -collect_address = "http://192.168.0.0:11111" -collect_api = "/manage/config/collect" - -[ragdoll] -port = 11114 - -``` - -#### 创建配置域 - -![](./figures/配置溯源/chuangjianyewuyu.png) - -#### 添加配置域纳管node - -![](./figures/配置溯源/tianjianode.png) - -#### 添加配置域配置 - -![](./figures/配置溯源/xinzengpeizhi.png) - -#### 查询预期配置 - -![](./figures/配置溯源/chakanyuqi.png) - -#### 删除配置 - -![](./figures/配置溯源/shanchupeizhi.png) - -#### 查询实际配置 - -![](./figures/配置溯源/chaxunshijipeizhi.png) - -#### 配置校验 - -![](./figures/配置溯源/zhuangtaichaxun.png) - -#### 配置同步 - -![](./figures/配置溯源/peizhitongbu.png) - -#### 配置文件追溯 - -##### 打开监控开关 - -![](./figures/配置溯源/chuangjianyewuyu.png) - -##### 配置文件修改记录追溯 - -![](./figures/配置溯源/conf_file_trace.png) diff --git a/docs/zh/server/maintenance/aops/deploying_aops.md b/docs/zh/server/maintenance/aops/deploying_aops.md deleted file mode 100644 index 4cbc97890ee6940a1e6e703850d9f6924ca6a597..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/deploying_aops.md +++ /dev/null @@ -1,940 +0,0 @@ -# 一、A-Ops服务介绍 - -A-Ops是用于提升主机整体安全性的服务，通过资产管理、漏洞管理、配置溯源等功能，识别并管理主机中的信息资产，监测主机中的软件漏洞、排查主机中遇到的系统故障，使得目标主机能够更加稳定和安全的运行。 - -下表是A-Ops服务涉及模块的说明： - -| 模块 | 说明 | -| ---------- | ---------------------------------------------------- | -| aops-ceres | A-Ops服务的客户端。
提供采集主机数据与管理其他数据采集器（如gala-gopher）的功能。
响应管理中心下发的命令，处理管理中心的需求与操作。 | -| aops-zeus | A-Ops基础应用管理中心，主要负责与其他模块的中转站，默认端口：11111
对外提供基本主机管理服务，主机与主机组的添加、删除等功能依赖此模块实现。 | -| aops-hermes | A-Ops可视化操作界面，展示数据信息，提升服务易用性。 | -| aops-apollo | A-Ops漏洞管理模块相关功能依赖此服务实现，默认端口：11116
识别客户机周期性获取openEuler社区发布的安全公告，并更新到漏洞库中。
通过与漏洞库比对，检测出系统和软件存在的漏洞。 | -| aops-vulcanus | A-Ops工具库，**除aops-ceres与aops-hermes模块外，其余模块须与此模块共同安装使用**。 | -| aops-tools | 提供基础环境一键部署脚本、数据库表初始化，安装后在/opt/aops/scripts目录下可见。
| -| gala-ragdoll | A-Ops配置溯源模块，通过git监测并记录配置文件的改动，默认端口：11114 | -| dnf-hotpatch-plugin | dnf插件，使得dnf工具可识别热补丁信息，提供热补丁扫描及热补丁修复功能。 | - -# 二、部署环境要求 - -建议采用4台 openEuler 24.03-LTS 机器部署，其中3台用于配置服务端，1台用于纳管（aops服务纳管的主机），**且repo中需要配置update源**（[FAQ：配置update源](#Q6、配置update源)），具体用途以及部署方案如下： - -+ 机器A：部署mysql、redis、elasticsearch等，主要提供数据服务支持，建议内存8G+。 -+ 机器B：部署A-Ops的资产管理zeus服务+前端展示服务，提供完整的业务功能支持，建议内存6G+。 -+ 机器C：部署A-Ops的漏洞管理配置溯源（gala-ragdoll），提供漏洞管理服务，建议内存4G+。 -+ 机器D：部署A-Ops的客户端，用作一个被AOps服务纳管监控的主机（需要监管的机器中都可以安装aops-ceres）。 - -| 机器编号 | 配置IP | 部署模块 | -| -------- | ----------- | ------------------------------------- | -| 机器A | 192.168.1.1 | mysql，elasticsearch， redis | -| 机器B | 192.168.1.2 | aops-zeus，aops-hermes，aops-diana | -| 机器C | 192.168.1.3 | aops-apollo，gala-ragdoll，aops-diana | -| 机器D | 192.168.1.4 | aops-ceres，dnf-hotpatch-plugin | - -> 每台机器在部署前，请先**关闭防火墙和SELinux**。 - -- 关闭防火墙 - -```shell -systemctl stop firewalld -systemctl disable firewalld -systemctl status firewalld -setenforce 0 - -``` - -- 禁用SELinux - -```shell -# 修改/etc/selinux/config文件中SELINUX状态为disabled - -vi /etc/selinux/config -SELINUX=disabled - -# 更改之后，按下ESC键，键盘中输入 :wq 保存修改的内容 -``` - -注：此SELINUX状态配置在系统重启后生效。 - -# 三、服务端部署 - -## 3.1、 资产管理 - -使用资产管理功能需部署aops-zeus、aops-hermes、mysql、redis服务。 - -### 3.1.1、节点信息 - -| 机器编号 | 配置IP|部署模块| -| -------- | -------- | -------- | -| 机器A | 192.168.1.1 |mysql，redis| -| 机器B | 192.168.1.2 |aops-zeus，aops-hermes| - -### 3.1.2、部署步骤 - -#### 3.1.2.1、 部署mysql - -- 安装mysql - -```shell -yum install mysql-server -y -``` - -- 修改mysql配置文件 - -```bash -vim /etc/my.cnf -``` - -- 在mysqld配置节下新增bind-address，值为本机ip - -```ini -[mysqld] -bind-address=192.168.1.1 -``` - -- 重启mysql服务 - -```bash -systemctl restart mysqld -``` - -- 设置mysql数据库的root用户访问权限 - -```mysql -[root@localhost ~] mysql - -mysql> show databases; -mysql> use mysql; -mysql> select user,host from user; -- 此处出现host为localhost时，说明mysql只允许本机连接，外网和本地软件客户端则无法连接。 - -+---------------+-----------+ -| user | host | -+---------------+-----------+ -| root | localhost | -| mysql.session | localhost | -| mysql.sys | localhost | -+---------------+-----------+ -3 rows in set (0.00 sec) -``` - -```mysql -mysql> update user set host = '%' where user='root'; -- 设置允许root用户任意IP访问。 -mysql> flush privileges; -- 刷新权限 -mysql> exit -``` - -#### 3.1.2.2、 部署redis - -- 安装redis - -```shell -yum install redis -y -``` - -- 修改配置文件 - -```shell -vim /etc/redis.conf -``` - -- 绑定IP - -```ini -# It is possible to listen to just one or multiple selected interfaces using -# the "bind" configuration directive, followed by one or more IP addresses. -# -# Examples: -# -# bind 192.168.1.100 10.0.0.1 -# bind 127.0.0.1 ::1 -# -# ~~~ WARNING ~~~ If the computer running Redis is directly exposed to the -# internet, binding to all the interfaces is dangerous and will expose the -# instance to everybody on the internet. So by default we uncomment the -# following bind directive, that will force Redis to listen only into -# the IPv4 lookback interface address (this means Redis will be able to -# accept connections only from clients running into the same computer it -# is running). -# -# IF YOU ARE SURE YOU WANT YOUR INSTANCE TO LISTEN TO ALL THE INTERFACES -# JUST COMMENT THE FOLLOWING LINE. -# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -bind 127.0.0.1 192.168.1.1 # 此处添加机器A的真实IP -``` - -- 启动redis服务 - -```shell -systemctl start redis -``` - -#### 3.1.2.3、 部署prometheus - -- 安装prometheus - -```shell -yum install prometheus2 -y -``` - -- 修改配置文件 - -```shell -vim /etc/prometheus/prometheus.yml -``` - -- 被纳管的客户端**gala-gopher**地址添加至prometheus监控节点 - - > 本指南中机器D用于部署客户端，故添加机器D的gala-gopher地址 - > - > 修改**targets**配置项 - -```yml -# A scrape configuration containing exactly one endpoint to scrape: -# Here it's Prometheus itself. -scrape_configs: - # The job name is added as a label `job=` to any timeseries scraped from this config. - - job_name: 'prometheus' - - # metrics_path defaults to '/metrics' - # scheme defaults to 'http'. - - static_configs: - - targets: ['localhost:9090', '192.168.1.4:8888'] -``` - -- 启动prometheus服务 - -```shell -systemctl start prometheus -``` - -#### 3.1.2.4、 部署aops-zeus - -- 安装aops-zeus - -```bash -yum install aops-zeus -y -``` - -- 修改配置文件 - -```bash -vim /etc/aops/zeus.ini -``` - -- 将配置文件中各服务的地址修改为真实地址，本指南中aops-zeus部署于机器B，故需把IP地址配为机器B的ip地址 - -```ini -[zeus] -ip=192.168.1.2 // 此处ip修改为机器B真实ip -port=11111 - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/zeus.log -http-timeout=600 -harakiri=600 -processes=2 // 生成指定数目的worker/进程 -gevent=100 // gevent异步核数 - -[mysql] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[agent] -default_instance_port=8888 - -[redis] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=6379 - -[apollo] -ip=192.168.1.3 // 此处ip修改为部署apollo服务的真实ip（建议apollo与zeus分开部署）。若不使用apollo的漏洞管理功能则可以不配置 -port=11116 -``` - -> **mysql数据库设置为密码模式**，请参阅[FAQ：密码模式下mysql服务配置链接字符串](#Q5、mysql设置为密码模式) - -- 启动aops-zeus服务 - -```shell -systemctl start aops-zeus -``` - -**注意：服务启动前请确保已 [初始化aops-zeus数据库](#3125-初始化aops-zeus数据库)** - -> zeus服务启动失败，且报错内容包含mysql数据库连接失败，请排查是否设置mysql密码，如果是请参阅[FAQ：密码模式下mysql服务启动失败](#Q5、mysql设置为密码模式) - -#### 3.1.2.5、 初始化aops-zeus数据库 - -- 执行数据库初始化 - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init zeus -``` - -**注意：在未安装aops-tools工具包时，也可获取sql脚本通过mysql加载的方式初始化（sql脚本路径：/opt/aops/database/zeus.sql）** - -[FAQ：密码模式下mysql数据库初始化](#Q5、mysql设置为密码模式) - -[FAQ：/opt/aops/scripts/deploy目录不存在](#Q7、/opt/aops/scripts/deploy目录不存在) - -#### 3.1.2.6、 部署aops-hermes - -- 安装aops-hermes - -```shell -yum install aops-hermes -y -``` - -- 修改配置文件 - -```shell -vim /etc/nginx/aops-nginx.conf -``` - -- 服务配置展示 - - > 服务都部署在机器B，需将ngxin代理访问的各服务地址配置为机器B的真实ip - -```ini - # 保证前端路由变动时nginx仍以index.html作为入口 - location / { - try_files $uri $uri/ /index.html; - if (!-e $request_filename){ - rewrite ^(.*)$ /index.html last; - } - } - # 此处修改为aops-zeus部署机器真实IP - location /api/ { - proxy_pass http://192.168.1.2:11111/; - } - # 此处IP对应gala-ragdoll的IP地址,涉及到端口为11114的IP地址都需要进行调整 - location /api/domain { - proxy_pass http://192.168.1.3:11114/; - rewrite ^/api/(.*) /$1 break; - } - # 此处IP对应aops-apollo的IP地址 - location /api/vulnerability { - proxy_pass http://192.168.1.3:11116/; - rewrite ^/api/(.*) /$1 break; - } -``` - -- 开启aops-hermes服务 - -```shell -systemctl start aops-hermes -``` - -## 3.2、 漏洞管理 - -CVE管理模块在[资产管理](#31-资产管理)模块的基础上实现，在部署CVE管理模块前须完成[资产管理](#31-资产管理)模块的部署，然后再部署aops-apollo。 - -数据服务部分aops-apollo服务的运行需要**mysql、elasticsearch、redis**数据库的支持。 - -### 3.2.1、 节点信息 - -| 机器编号 | 配置IP | 部署模块 | -| -------- | ----------- | ------------- | -| 机器A | 192.168.1.1 | elasticsearch | -| 机器C | 192.168.1.3 | aops-apollo | - -### 3.2.2、 部署步骤 - -[部署步骤](#312部署步骤) - -#### 3.2.2.1、 部署elasticsearch - -- 生成elasticsearch的repo源 - -```shell -echo "[aops_elasticsearch] -name=Elasticsearch repository for 7.x packages -baseurl=https://artifacts.elastic.co/packages/7.x/yum -gpgcheck=1 -gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch -enabled=1 -autorefresh=1 -type=rpm-md" > "/etc/yum.repos.d/aops_elascticsearch.repo" -``` - -- 安装elasticsearch - -```shell -yum install elasticsearch-7.14.0-1 -y -``` - -- 修改elasticsearch配置文件 - -```shell -vim /etc/elasticsearch/elasticsearch.yml -``` - -```yml -# ------------------------------------ Node ------------------------------------ -# -# Use a descriptive name for the node: -# -node.name: node-1 -``` - -```yml -# ---------------------------------- Network ----------------------------------- -# -# By default Elasticsearch is only accessible on localhost. Set a different -# address here to expose this node on the network: -# -# 此处修改为机器A真实ip -network.host: 192.168.1.1 -# -# By default Elasticsearch listens for HTTP traffic on the first free port it -# finds starting at 9200. Set a specific HTTP port here: -# -http.port: 9200 -# -# For more information, consult the network module documentation. -# -``` - -```yml -# --------------------------------- Discovery ---------------------------------- -# -# Pass an initial list of hosts to perform discovery when this node is started: -# The default list of hosts is ["127.0.0.1", "[::1]"] -# -#discovery.seed_hosts: ["host1", "host2"] -# -# Bootstrap the cluster using an initial set of master-eligible nodes: -# -cluster.initial_master_nodes: ["node-1"] -# 跨域配置 -http.cors.enabled: true -http.cors.allow-origin: "*" -``` - -- 重启elasticsearch服务 - -```shell -systemctl restart elasticsearch -``` - -#### 3.2.2.2、 部署aops-apollo - -- 安装aops-apollo - -```shell -yum install aops-apollo -y -``` - -- 修改配置文件 - -```bash -vim /etc/aops/apollo.ini -``` - -- 将apollo.ini配置文件中各服务的地址修改为真实地址 - -```ini -[apollo] -ip=192.168.1.3//此处修改为机器C的真实IP -port=11116 -host_vault_dir=/opt/aops -host_vars=/opt/aops/host_vars - -[zeus] -ip=192.168.1.2 //此处修改为机器B的真实IP -port=11111 - -# hermes info is used to send mail. -[hermes] -ip=192.168.1.2 //此处修改为部署aops-hermes的真实IP,以机器B的IP地址为例 -port=80 //此处改为hermes服务实际使用端口 - -[cve] -cve_fix_function=yum -# value between 0-23, for example, 2 means 2:00 in a day. -cve_scan_time=2 - -[mysql] -ip=192.168.1.1 //此处修改为机器A的真实IP -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[elasticsearch] -ip=192.168.1.1 //此处修改为机器A的真实IP -port=9200 -max_es_query_num=10000000 - -[redis] -ip=192.168.1.1 //此处修改为机器A的真实IP -port=6379 - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/apollo.log -http-timeout=600 -harakiri=600 -processes=2 -gevent=100 - -``` - -> **mysql数据库设置为密码模式**，请参阅[密码模式下mysql服务配置链接字符串](#Q5、mysql设置为密码模式) - -- 启动aops-apollo服务 - -```shell -systemctl start aops-apollo -``` - -**注意：服务启动前请确保已 [初始化aops-apollo数据库](#3223初始化aops-apollo数据库)** - -> apollo服务启动失败，且报错内容包含mysql数据库连接失败，请排查是否设置mysql密码，如果是请参阅[密码模式下mysql服务启动失败](#Q5、mysql设置为密码模式) - -#### 3.2.2.3、初始化aops-apollo数据库 - -- apollo数据库初始化 - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init apollo -``` - -**注意：在未安装aops-tools工具包时，也可获取sql脚本通过mysql加载的方式初始化（sql脚本路径：/opt/aops/database/apollo.sql）** - -[FAQ：密码模式下mysql数据库初始化](#Q5、mysql设置为密码模式) - -[FAQ：/opt/aops/scripts/deploy目录不存在](#Q7、/opt/aops/scripts/deploy目录不存在) - -## 3.3、 配置溯源 - -A-Ops配置溯源在机器管理的基础上依赖gala-ragdoll实现，同样在部署gala-ragdoll服务之前，须完成[资产管理](#31-资产管理)部分的部署。 - -### 3.3.1、 节点信息 - -| 机器编号 | 配置IP | 部署模块 | -| -------- | ----------- | ------------ | -| 机器C | 192.168.1.3 | gala-ragdoll | - -### 3.3.2、 部署步骤 - -[部署步骤](#312部署步骤) - -#### 3.3.2.1、 部署gala-ragdoll - -- 安装gala-ragdoll - -```shell -yum install gala-ragdoll python3-gala-ragdoll -y -``` - -- 修改配置文件 - -```shell -vim /etc/ragdoll/gala-ragdoll.conf -``` - -> **将collect节点collect_address中IP地址修改为机器B的地址，collect_api与collect_port修改为实际接口地址** - -```ini -[git] -git_dir = "/home/confTraceTest" -user_name = "user_name" -user_email = "user_email" - -[collect] -collect_address = "http://192.168.1.2" //此处修改为机器B的真实IP -collect_api = "/manage/config/collect" //此处接口原为示例值，需修改为实际接口值/manage/config/collect -collect_port = 11111 //此处修改为aops-zeus服务的实际端口 - -[sync] -sync_address = "http://192.168.1.2" -sync_api = "/manage/config/sync" //此处接口原为示例值，需修改为实际接口值/manage/config/sync -sync_port = 11111 - -[objectFile] -object_file_address = "http://192.168.1.2" -object_file_api = "/manage/config/objectfile" //此处接口原为示例值，需修改为实际接口值/manage/config/objectfile -object_file_port = 11111 - -[ragdoll] -port = 11114 -``` - -- 启动gala-ragdoll服务 - -```shell -systemctl start gala-ragdoll -``` - -## 3.4、 异常检测 - -异常检测模块依赖[机器管理](#31-资产管理)服务，故在部署异常检测功能前须完成[机器管理](#31-资产管理)模块部署，然后再部署aops-diana。 - -基于分布式部署考虑，aops-diana服务需在机器B与机器C同时部署，分别扮演消息队列中的生产者与消费者角色。 - -数据服务部分aops-diana服务的运行需要**mysql、elasticsearch、kafka**以及**prometheus**的支持。 - -### 3.4.1、 节点信息 - -| 机器编号 | 配置IP | 部署模块 | -| -------- | ----------- | ---------- | -| 机器A | 192.168.1.1 | kafka | -| 机器B | 192.168.1.2 | aops-diana | -| 机器C | 192.168.1.3 | aops-diana | - -### 3.4.2、 部署步骤 - -[部署步骤](#312部署步骤) - -[部署elasticsearch](#3221-部署elasticsearch) - -#### 3.4.2.1、 部署kafka - -kafka使用zooKeeper用于管理、协调代理，在应用**kafka**服务时需要同步部署**zookeeper**服务。 - -- 安装zookeeper - -```shell -yum install zookeeper -y -``` - -- 启动zookeeper服务 - -```shell -systemctl start zookeeper -``` - -- 安装kafka - -```shell -yum install kafka -y -``` - -- 修改kafka配置文件 - -```shell -vim /opt/kafka/config/server.properties -``` - -- 修改**listeners**为本机ip - -```yaml -############################# Socket Server Settings ############################# - -# The address the socket server listens on. It will get the value returned from -# java.net.InetAddress.getCanonicalHostName() if not configured. -# FORMAT: -# listeners = listener_name://host_name:port -# EXAMPLE: -# listeners = PLAINTEXT://your.host.name:9092 -listeners=PLAINTEXT://192.168.1.1:9092 -``` - -- 后台运行kafka服务 - -```shell -cd /opt/kafka/bin -nohup ./kafka-server-start.sh ../config/server.properties & - -# 查看nohup所有的输出出现A本机ip 以及kafka启动成功INFO -tail -f ./nohup.out -``` - -#### 3.4.2.2、 部署diana - -- 安装aops-diana - -```shell -yum install aops-diana -y -``` - -- 修改配置文件 - - > 机器B与机器C中aops-diana分别扮演不同的角色，通过**配置文件的差异来区分两者扮演角色的不同** - -```shell -vim /etc/aops/diana.ini -``` - -（1）机器C中aops-diana以**executor**模式启动，**扮演kafka消息队列中的消费者角色**，配置文件需修改部分如下所示 - -```ini -[diana] -ip=192.168.1.3 // 此处ip修改为机器C真实ip -port=11112 -mode=executor // 该模式为executor模式，用于常规诊断模式下的执行器，扮演kafka中消费者角色。 -timing_check=on - -[default_mode] -period=60 -step=60 - -[elasticsearch] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=9200 -max_es_query_num=10000000 - -[mysql] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[redis] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=6379 - -[prometheus] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=9090 -query_range_step=15s - -[agent] -default_instance_port=8888 - -[zeus] -ip=192.168.1.2 // 此处ip修改为机器B真实ip -port=11111 - -[consumer] -kafka_server_list=192.168.1.1:9092 // 此处ip修改为机器A真实ip -enable_auto_commit=False -auto_offset_reset=earliest -timeout_ms=5 -max_records=3 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID -result_name=CHECK_RESULT - -[producer] -kafka_server_list = 192.168.1.1:9092 // 此处ip修改为机器A真实ip -api_version = 0.11.5 -acks = 1 -retries = 3 -retry_backoff_ms = 100 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/diana.log -http-timeout=600 -harakiri=600 -processes=2 -threads=2 -``` - -> **mysql数据库设置为密码模式**，请参阅[FAQ：密码模式下mysql服务配置链接字符串](#Q5、mysql设置为密码模式) - -（2）机器B中diana以**configurable**模式启动，**扮演kafka消息队列中的生产者角色**，aops-hermes中关于aops-diana的端口配置以该机器ip与端口为准，配置文件需修改部分如下所示 - -```ini -[diana] -ip=192.168.1.2 // 此处ip修改为机器B真实ip -port=11112 -mode=configurable // 该模式为configurable模式，用于常规诊断模式下的调度器，充当生产者角色。 -timing_check=on - -[default_mode] -period=60 -step=60 - -[elasticsearch] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=9200 -max_es_query_num=10000000 - -[mysql] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=3306 -database_name=aops -engine_format=mysql+pymysql://@%s:%s/%s -pool_size=100 -pool_recycle=7200 - -[redis] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=6379 - -[prometheus] -ip=192.168.1.1 // 此处ip修改为机器A真实ip -port=9090 -query_range_step=15s - -[agent] -default_instance_port=8888 - -[zeus] -ip=192.168.1.2 // 此处ip修改为机器B真实ip -port=11111 - -[consumer] -kafka_server_list=192.168.1.1:9092 // 此处ip修改为机器A真实ip -enable_auto_commit=False -auto_offset_reset=earliest -timeout_ms=5 -max_records=3 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID -result_name=CHECK_RESULT - -[producer] -kafka_server_list = 192.168.1.1:9092 // 此处ip修改为机器A真实ip -api_version = 0.11.5 -acks = 1 -retries = 3 -retry_backoff_ms = 100 -task_name=CHECK_TASK -task_group_id=CHECK_TASK_GROUP_ID - -[uwsgi] -wsgi-file=manage.py -daemonize=/var/log/aops/uwsgi/diana.log -http-timeout=600 -harakiri=600 -processes=2 -threads=2 -``` - -> **mysql数据库设置为密码模式**，请参阅[FAQ：密码模式下mysql服务配置链接字符串](#Q5、mysql设置为密码模式) - -- 启动aops-diana服务 - -```shell -systemctl start aops-diana -``` - -**注意：服务启动前请确保已 [初始化aops-diana数据库](#3423初始化aops-diana数据库)** - -> diana服务启动失败，且报错内容包含mysql数据库连接失败，请排查是否设置mysql密码，如果是请参阅[FAQ：密码模式下mysql服务启动失败](#Q5、mysql设置为密码模式) - -#### 3.4.2.3、初始化aops-diana数据库 - -- diana数据库初始化 - -```shell -cd /opt/aops/scripts/deploy -bash aops-basedatabase.sh init diana -``` - -**注意：在未安装aops-tools工具包时，也可获取sql脚本通过mysql加载的方式初始化（sql脚本路径：/opt/aops/database/diana.sql）** - -[FAQ：密码模式下mysql数据库初始化](#Q5、mysql设置为密码模式) - -[FAQ：/opt/aops/scripts/deploy目录不存在](#Q7、/opt/aops/scripts/deploy目录不存在) - -## 3.5、客户端安装 - -aops-ceres作为A-Ops模块的客户端，通过ssh协议与AOps管理中心进行数据交互，提供采集主机信息、响应并处理中心命令等功能。 - -### 3.5.1、 节点信息 - -| 机器编号 | 配置IP | 部署模块 | -| -------- | ----------- | ---------- | -| 机器D | 192.168.1.4 | aops-ceres | - -### 3.5.2、 部署客户端 - -```shell -yum install aops-ceres dnf-hotpatch-plugin -y -``` - -## FAQ - -### Q1、最大连接数（MaxStartups） - -批量添加主机接口服务执行过程中会受到aops-zeus安装所在主机sshd服务配置中最大连接数（MaxStartups）的限制，会出现部分主机不能连接的情况，如有大量添加主机的需求，可考虑临时调增该数值。关于该配置项的修改可参考[ssh文档](https://www.man7.org/linux/man-pages/man5/sshd_config.5.html)。 - -### Q2、504网关超时 - -部分http访问接口执行时间较长，web端可能返回504错误，可向nginx配置中添加proxy_read_timeout配置项，并适当调大该数值，可降低504问题出现概率。 - -### Q3、防火墙 - -若防火墙不方便关闭，请设置放行服务部署过程涉及的所有接口，否则会造成服务不可访问，影响A-Ops的正常使用。 - -### Q4、elasticasearch访问拒绝 - -elasticsearch分布式部署多节点时，需调整配置跨域部分，允许各节点访问。 - -### Q5、mysql设置为密码模式 - -- **服务配置mysql链接字符串** - -mysql数据库链接设置密码模式（例如用户名为**root**，密码为**123456**），则需要调整[mysql]配置节下engine_format配置项（apollo、zeus同步调整），数据格式如下： - -```ini -[mysql] -egine_format=mysql+pymysql://root:123456@%s:%s/%s -``` - -- **初始化脚本aops-basedatabase.sh修改** - -aops-basedatabase.sh脚本需要调整145行代码实现 - -> aops-basedatabase.sh调整前内容如下： - -```shell -database = pymysql.connect(host='$mysql_ip', port=$port, database='mysql', autocommit=True,client_flag=CLIENT.MULTI_STAT EMENTS) -``` - -> aops-basedatabase.sh调整后内容如下： - -```shell -database = pymysql.connect(host='$mysql_ip', port=$port, database='mysql', password='密码', user='用户名', autocommit=True, client_flag=CLIENT.MULTI_STATEMENTS) -``` - -- **服务启动时数据库连接错误** - -**/usr/bin/aops-vulcanus**脚本需要调整178行代码实现 - -> /usr/bin/aops-vulcanus调整前内容如下： - -```shell -connect = pymysql.connect(host='$mysql_ip', port=$port, database='$aops_database') -``` - -> /usr/bin/aops-vulcanus调整后内容如下： - -```shell -connect = pymysql.connect(host='$mysql_ip', port=$port, database='$aops_database', password='密码', user='用户名') -``` - -**注意：当服务器不是以root用户登录时，需添加user="root"或mysql允许链接的用户名** - -### Q6、配置update源 - -```shell -echo "[update] -name=update -baseurl=http://repo.openeuler.org/openEuler-24.03-LTS/update/$basearch/ -enabled=1 -gpgcheck=0 -[update-epol] -name=update-epol -baseurl=http://repo.openeuler.org/openEuler-24.03-LTS/EPOL/update/main/$basearch/ -enabled=1 -gpgcheck=0" > /etc/yum.repos.d/openEuler-update.repo -``` - -> 注意： 其中**openEuler-24.03-LTS** 根据部署的系统版本具体调整，或可直接参与openeuler官网中针对repo源配置介绍 - -### Q7、/opt/aops/scripts/deploy目录不存在 - -在执行数据库初始化时，提示不存在`/opt/aops/scripts/deploy`文件目录，执行安装aops-tools工具包 - -```shell -yum install aops-tools -y -``` diff --git a/docs/zh/server/maintenance/aops/dnf_command_usage.md b/docs/zh/server/maintenance/aops/dnf_command_usage.md deleted file mode 100644 index 2db281c1f4fcc865ae2553772dd729ed3ed33785..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/dnf_command_usage.md +++ /dev/null @@ -1,758 +0,0 @@ -# dnf插件命令使用手册 - -将dnf-hotpatch-plugin安装部署完成后，可使用dnf命令调用A-ops ceres中的冷/热补丁操作，命令包含热补丁扫描（dnf hot-updateinfo），热补丁状态设置及查询（dnf hotpatch ），热补丁应用（dnf hotupgrade），内核升级前kabi检查（dnf upgrade-en）。本文将介绍上述命令的具体使用方法。 - ->热补丁包括ACC/SGL（accumulate/single）类型 -> ->- ACC：增量补丁。目标高版本热补丁包含低版本热补丁所修复问题。 ->- SGL_xxx：单独补丁，xxx为issue id，如果有多个issue id，用多个'_'拼接。目标修复issue id相关问题。 - -## 热补丁扫描 - -`dnf hot-updateinfo`命令支持扫描热补丁并指定cve查询相关热补丁，命令使用方式如下： - -```shell -dnf hot-updateinfo list cves [--available(default) | --installed] [--cve [cve_id]] - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates -Hot-updateinfo command-specific options: - --available - cves about newer versions of installed packages - (default) - --installed - cves about equal and older versions of installed packages -``` - -- `list cves` - -1、查询主机所有可修复的cve和对应的冷/热补丁。 - -```shell -[root@localhost ~]# dnf hot-updateinfo list cves -# cve-id level cold-patch hot-patch -Last metadata expiration check: 2:39:04 ago on 2023年12月29日 星期五 07时45分02秒. -CVE-2022-30594 Important/Sec. kernel-4.19.90-2206.1.0.0153.oe1.x86_64 patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 -CVE-2023-1111 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2023-1112 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2023-1111 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-SGL_CVE_2023_1111_CVE_2023_1112-1-1.x86_64 -``` - -2、查询主机所有已修复的cve和对应的冷/热补丁 - -```shell -[root@localhost ~]# dnf hot-updateinfo list cves --installed -# cve-id level cold-patch hot-patch -Last metadata expiration check: 2:39:04 ago on 2023年12月29日 星期五 07时45分02秒. -CVE-2022-36298 Important/Sec. - patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_36298-1-1.x86_64 -``` - -2、指定cve查询对应的可修复冷/热补丁。 - -```shell -[root@localhost ~]# dnf hot-updateinfo list cves --cve CVE-2022-30594 -# cve-id level cold-patch hot-patch -Last metadata expiration check: 2:39:04 ago on 2023年12月29日 星期五 07时45分02秒. -CVE-2022-30594 Important/Sec. kernel-4.19.90-2206.1.0.0153.oe1.x86_64 patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 -``` - -3、cve不存在时列表为空。 - -```shell -[root@localhost ~]# dnf hot-updateinfo list cves --cve CVE-2022-3089 -# cve-id level cold-patch hot-patch -Last metadata expiration check: 2:39:04 ago on 2023年12月29日 星期五 07时45分02秒. -``` - -## 热补丁状态及转换图 - -- 热补丁状态图 - - NOT-APPLIED: 热补丁尚未应用。 - - DEACTIVED: 热补丁未被激活。 - - ACTIVED: 热补丁已被激活。 - - ACCEPTED: 热补丁已被激活，后续重启后会被自动应用激活。 - - ![热补丁状态转换图](./figures/syscare热补丁状态图.png) - -## 热补丁状态查询和切换 - -`dnf hotpatch`命令支持查询、切换热补丁的状态，命令使用方式如下： - -```shell -dnf hotpatch - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates - -Hotpatch command-specific options: - --list [{cve, cves}] show list of hotpatch - --apply APPLY_NAME apply hotpatch - --remove REMOVE_NAME remove hotpatch - --active ACTIVE_NAME active hotpatch - --deactive DEACTIVE_NAME - deactive hotpatch - --accept ACCEPT_NAME accept hotpatch -``` - -- 使用`dnf hotpatch`命令查询热补丁状态 - - - 使用`dnf hotpatch --list`命令查询当前系统中可使用的热补丁状态并展示。 - - ```shell - [root@localhost ~]# dnf hotpatch --list - Last metadata expiration check: 0:09:25 ago on 2023年12月29日 星期五 10时26分45秒. - base-pkg/hotpatch status - kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - 使用`dnf hotpatch --list cves`查询漏洞（CVE-id）对应热补丁及其状态并展示。 - - ```shell - [root@openEuler ~]# dnf hotpatch --list cves - Last metadata expiration check: 0:11:05 ago on 2023年12月29日 星期五 10时26分45秒. - CVE-id base-pkg/hotpatch status - CVE-2022-30594 kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - `dnf hotpatch --list cves --cve `筛选指定CVE对应的热补丁及其状态并展示。 - - ```shell - [root@openEuler ~]# dnf hotpatch --list cves --cve CVE-2022-30594 - Last metadata expiration check: 0:12:25 ago on 2023年12月29日 星期五 10时26分45秒. - CVE-id base-pkg/hotpatch status - CVE-2022-30594 kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED - ``` - - - 使用`dnf hotpatch --list cves --cve `查询无结果时展示为空。 - - ```shell - [root@openEuler ~]# dnf hotpatch --list cves --cve CVE-2023-1 - Last metadata expiration check: 0:13:11 ago on 2023年12月29日 星期五 10时26分45秒. - ``` - -- 使用`dnf hotpatch --apply `命令应用热补丁，可使用 `dnf hotpatch --list`查询应用后的状态变化，变化逻辑见上文的热补丁状态转换图。 - -```shell -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:13:55 ago on 2023年12月29日 星期五 10时26分45秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED -[root@openEuler ~]# dnf hotpatch --apply kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -Last metadata expiration check: 0:15:37 ago on 2023年12月29日 星期五 10时26分45秒. -Gonna apply this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -apply hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:16:20 ago on 2023年12月29日 星期五 10时26分45秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACTIVED -``` - -- 使用`dnf hotpatch --deactive `停用热补丁，可使用`dnf hotpatch --list`查询停用后的状态变化，变化逻辑见上文的热补丁状态转换图。 - -```shell -[root@openEuler ~]# dnf hotpatch --deactive kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -Last metadata expiration check: 0:19:00 ago on 2023年12月29日 星期五 10时26分45秒. -Gonna deactive this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -deactive hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:19:12 ago on 2023年12月29日 星期五 10时26分45秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux DEACTIVED -``` - -- 使用`dnf hotpatch --remove `删除热补丁，可使用`dnf hotpatch --list`查询删除后的状态变化，变化逻辑见上文的热补丁状态转换图。 - -```shell -[root@openEuler ~]# dnf hotpatch --remove kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -Last metadata expiration check: 0:20:12 ago on 2023年12月29日 星期五 10时26分45秒. -Gonna remove this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -remove hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:20:23 ago on 2023年12月29日 星期五 10时26分45秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux NOT-APPLIED -``` - -- 使用`dnf hotpatch --active `激活热补丁，可使用`dnf hotpatch --list`查询激活后的状态变化，变化逻辑见上文的热补丁状态转换图。 - -```shell -[root@openEuler ~]# dnf hotpatch --active kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -Last metadata expiration check: 0:15:37 ago on 2023年12月29日 星期五 10时26分45秒. -Gonna active this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -active hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:16:20 ago on 2023年12月29日 星期五 10时26分45秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACTIVED -``` - -- 使用`dnf hotpatch --accept `接收热补丁，可使用`dnf hotpatch --list`查询接收后的状态变化，变化逻辑见上文的热补丁状态转换图。 - -```shell -[root@openEuler ~]# dnf hotpatch --accept kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -Last metadata expiration check: 0:14:19 ago on 2023年12月29日 星期五 10时47分38秒. -Gonna accept this hot patch: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1 -accept hot patch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:14:34 ago on 2023年12月29日 星期五 10时47分38秒. -base-pkg/hotpatch status -kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1/vmlinux ACCEPTED -``` - -## 热补丁应用 - -`hotupgrade`命令根据cve id和热补丁名称进行热补丁修复，同时也支持全量修复。命令使用方式如下： - -```shell -dnf hotupgrade [--cve [cve_id]] [PACKAGE ...] [--takeover] [-f] - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates - -command-specific options: - --takeover - kernel cold patch takeover operation - -f - force retain kernel rpm package if kernel kabi check fails - PACKAGE - Package to upgrade -``` - -- 使用`dnf hotupgrade PACKAGE`安装目标热补丁。 - - - 使用`dnf hotupgrade PACKAGE`安装目标热补丁 - - ```shell - [root@openEuler ~]# dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - Last metadata expiration check: 0:26:25 ago on 2023年12月29日 星期五 10时47分38秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - 当目标热补丁已经应用激活，使用`dnf hotupgrade PACKAGE`安装目标热补丁 - - ```shell - [root@openEuler ~]# dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 - Last metadata expiration check: 0:28:35 ago on 2023年12月29日 星期五 10时47分38秒. - The hotpatch 'kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'vmlinux' - Package patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 is already installed. - Dependencies resolved. - Nothing to do. - Complete! - ``` - - - 使用`dnf hotupgrade PACKAGE`安装目标热补丁，自动卸载激活失败的热补丁。 - - ```shell - [root@openEuler ~]# dnf hotupgrade patch-redis-6.2.5-1-ACC-1-1.x86_64 - Last metadata expiration check: 0:30:30 ago on 2023年12月29日 星期五 10时47分38秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch failed: redis-6.2.5-1/ACC-1-1. - Error: Operation failed - - Caused by: - 0. Transaction "Apply patch 'redis-6.2.5-1/ACC-1-1'" failed - - Caused by: - Cannot match any patch named "redis-6.2.5-1/ACC-1-1" - - Gonna remove unsuccessfully activated hotpatch rpm. - Remove package succeed: patch-redis-6.2.5-1-ACC-1-1.x86_64. - ``` - -- 使用`--cve `指定cve_id安装CVE对应的热补丁 - - - 使用`dnf hotupgrade --cve CVE-2022-30594`安装CVE对应的热补丁 - - ```shell - [root@openEuler ~]# dnf hotupgrade --cve CVE-2022-30594 - Last metadata expiration check: 0:26:25 ago on 2023年12月29日 星期五 10时47分38秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - 使用`dnf hotupgrade --cve CVE-2022-2021`安装CVE对应的热补丁，对应的CVE不存在。 - - ```shell - [root@openEuler ~]# dnf hotupgrade --cve CVE-2022-2021 - Last metadata expiration check: 1:37:44 ago on 2023年12月29日 星期五 13时49分39秒. - The cve doesn't exist or cannot be fixed by hotpatch: CVE-2022-2021 - No hot patches marked for install. - Dependencies resolved. - Nothing to do. - Complete! - ``` - - - 使用`dnf hotupgrade --cve `指定cve_id安装时，该CVE对应的ACC低版本热补丁已安装时，删除低版本热补丁，安装高版本ACC热补丁包。 - - ```shell - [root@openEuler ~]# dnf hotupgrade --cve CVE-2023-1070 - Last metadata expiration check: 0:00:48 ago on 2024年01月02日 星期二 11时21分55秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx (Install messages and process upgrade) - Complete! - Apply hot patch succeed: kernel-5.10.0-153.12.0.92.oe2203sp2/ACC-1-3. - [root@openEuler tmp]# - ``` - - - 指定cve_id安装时，该CVE对应的最高版本热补丁包已存在 - - ```shell - [root@openEuler ~]# dnf hotupgrade --cve CVE-2023-1070 - Last metadata expiration check: 1:37:44 ago on 2023年12月29日 星期五 13时49分39秒. - The cve doesn't exist or cannot be fixed by hotpatch: CVE-2023-1070 - No hot patches marked for install. - Dependencies resolved. - Nothing to do. - Complete! - ``` - -- 使用`dnf hotupgrade`进行热补丁全量修复 - - 热补丁未安装时，使用`dnf hotupgrade`命令安装所有可安装热补丁。 - - - 当部分热补丁已经安装时，使用`dnf hotupgrade`命令进行全量修复，将保留已安装的热补丁，然后安装其他热补丁 - -- 使用`--takeover`进行内核热补丁收编 - - - 使用`dnf hotupgrade PACKAGE --takeover`安装热补丁，收编相应内核冷补丁；由于目标内核冷补丁kabi检查失败，进行自动卸载；accept热补丁，使热补丁重启后仍旧生效；恢复内核默认引导启动项。 - - ```shell - [root@openEuler ~]# dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 --takeover - Last metadata expiration check: 2:23:22 ago on 2023年12月29日 星期五 13时49分39秒. - Gonna takeover kernel cold patch: ['kernel-4.19.90-2206.1.0.0153.oe1.x86_64'] - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - Gonna remove kernel-4.19.90-2206.1.0.0153.oe1.x86_64 due to Kabi check failed. - Rebuild rpm database succeed. - Remove package succeed: kernel-4.19.90-2206.1.0.0153.oe1.x86_64. - Restore the default boot kernel succeed: kernel-4.19.90-2112.8.0.0131.oe1.x86_64. - No available kernel cold patch for takeover, gonna accept available kernel hot patch. - Accept hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - ``` - - - 使用`dnf hotupgrade PACKAGE --takeover -f`安装热补丁，如果内核冷补丁kabi检查未通过，使用`-f`强制保留内核冷补丁 - - ```shell - [root@openEuler ~]# dnf hotupgrade patch-kernel-4.19.90-2112.8.0.0131.oe1-SGL_CVE_2022_30594-1-1.x86_64 --takeover - Last metadata expiration check: 2:23:22 ago on 2023年12月29日 星期五 13时49分39秒. - Gonna takeover kernel cold patch: ['kernel-4.19.90-2206.1.0.0153.oe1.x86_64'] - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - xxxx(Install process) - Complete! - Apply hot patch succeed: kernel-4.19.90-2112.8.0.0131.oe1/SGL_CVE_2022_30594-1-1. - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - ``` - -## 内核升级前kabi检查 - -`dnf upgrade-en` 命令支持内核冷补丁升级前kabi检查，命令使用方式如下： - -```shell -dnf upgrade-en [PACKAGE] [--cve [cve_id]] - -upgrade with KABI(Kernel Application Binary Interface) check. If the loaded -kernel modules have KABI compatibility with the new version kernel rpm, the -kernel modules can be installed and used in the new version kernel without -recompling. - -General DNF options: - -h, --help, --help-cmd - show command help - --cve CVES, --cves CVES - Include packages needed to fix the given CVE, in updates -Upgrade-en command-specific options: - PACKAGE - Package to upgrade -``` - -- 使用`dnf upgrade-en PACKAGE`安装目标冷补丁 - - - 使用`dnf upgrade-en`安装目标冷补丁，kabi检查未通过，输出kabi差异性报告，自动卸载目标升级kernel包。 - - ```shell - [root@openEuler ~]# dnf upgrade-en kernel-4.19.90-2206.1.0.0153.oe1.x86_64 - Last metadata expiration check: 1:51:54 ago on 2023年12月29日 星期五 13时49分39秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Kabi check for kernel-4.19.90-2206.1.0.0153.oe1.x86_64: - [Fail] Here are 81 loaded kernel modules in this system, 78 pass, 3 fail. - Failed modules are as follows: - No. Module Difference - 1 nf_nat_ipv6 secure_ipv6_port_ephemeral : 0xe1a4f16a != 0x0209f3a7 - 2 nf_nat_ipv4 secure_ipv4_port_ephemeral : 0x57f70547 != 0xe3840e18 - 3 kvm_intel kvm_lapic_hv_timer_in_use : 0x54981db4 != 0xf58e6f1f - kvm_apic_write_nodecode : 0x56c989a1 != 0x24c9db31 - kvm_complete_insn_gp : 0x99c2d256 != 0xcd8014bd - Gonna remove kernel-4.19.90-2206.1.0.0153.oe1.x86_64 due to kabi check failed. - Rebuild rpm database succeed. - Remove package succeed: kernel-4.19.90-2206.1.0.0153.oe1.x86_64. - Restore the default boot kernel succeed: kernel-4.19.90-2112.8.0.0131.oe1.x86_64. - ``` - - - 使用`dnf upgrade-en`安装目标冷补丁，kabi检查通过 - - ```shell - [root@openEuler ~]# dnf upgrade-en kernel-4.19.90-2201.1.0.0132.oe1.x86_64 - Last metadata expiration check: 2:02:10 ago on 2023年12月29日 星期五 13时49分39秒. - Dependencies resolved. - xxxx(Install messgaes) - Is this ok [y/N]: y - Downloading Packages: - xxxx(Install process) - Complete! - Kabi check for kernel-4.19.90-2201.1.0.0132.oe1.x86_64: - [Success] Here are 81 loaded kernel modules in this system, 81 pass, 0 fail. - ``` - -- 使用`dnf upgrade-en` 进行全量修复 - -​ 全量修复如果包含目标kernel的升级，输出根据不同的kabi检查情况与`dnf upgrade-en PACKAGE`命令相同。 - -## 使用场景说明 - -本段落介绍上述命令的使用场景及顺序介绍，需要提前确认本机的热补丁repo源和相应冷补丁repo源已开启。 - -- 热补丁修复。 - -使用热补丁扫描命令查看本机待修复cve。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-1 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-11 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -找到提供热补丁的相应cve，发现CVE-2021-1、CVE-2021-11、CVE-2021-2和CVE-2021-22可用热补丁修复。 - -在安装补丁前测试功能，基于redis.conf配置文件启动redis服务。 - -```shell -[root@openEuler ~]# sudo redis-server ./redis.conf & -[1] 285075 -[root@openEuler ~]# 285076:C 25 Mar 2023 12:09:51.503 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo -285076:C 25 Mar 2023 12:09:51.503 # Redis version=255.255.255, bits=64, commit=00000000, modified=0, pid=285076, just started -285076:C 25 Mar 2023 12:09:51.503 # Configuration loaded -285076:M 25 Mar 2023 12:09:51.504 * Increased maximum number of open files to 10032 (it was originally set to 1024). -285076:M 25 Mar 2023 12:09:51.504 * monotonic clock: POSIX clock_gettime - _._ - _.-``__ ''-._ - _.-`` `. `_. ''-._ Redis 255.255.255 (00000000/0) 64 bit - .-`` .-```. ```\/ _.,_ ''-._ - ( ' , .-` | `, ) Running in standalone mode - |`-._`-...-` __...-.``-._|'` _.-'| Port: 6380 - | `-._ `._ / _.-' | PID: 285076 - `-._ `-._ `-./ _.-' _.-' - |`-._`-._ `-.__.-' _.-'_.-'| - | `-._`-._ _.-'_.-' | https://redis.io - `-._ `-._`-.__.-'_.-' _.-' - |`-._`-._ `-.__.-' _.-'_.-'| - | `-._`-._ _.-'_.-' | - `-._ `-._`-.__.-'_.-' _.-' - `-._ `-.__.-' _.-' - `-._ _.-' - `-.__.-' - -285076:M 25 Mar 2023 12:09:51.505 # Server initialized -285076:M 25 Mar 2023 12:09:51.505 # WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect. -285076:M 25 Mar 2023 12:09:51.506 * Ready to accept connections - -``` - -安装前测试功能。 - -```shell -[root@openEuler ~]# telnet 127.0.0.1 6380 -Trying 127.0.0.1... -Connected to 127.0.0.1. -Escape character is '^]'. - -*100 - --ERR Protocol error: expected '$', got ' ' -Connection closed by foreign host. -``` - -指定修复CVE-2021-1，确认关联到对应的热补丁包，显示安装成功。 - -```shell -[root@openEuler ~]# dnf hotupgrade patch-redis-6.2.5-1-ACC-1-1.x86_64 -Last metadata expiration check: 0:01:39 ago on 2024年01月02日 星期二 20时16分45秒. -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-benchmark' -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-cli' -The hotpatch 'redis-6.2.5-1/ACC-1-1' already has a 'ACTIVED' sub hotpatch of binary file 'redis-server' -Package patch-redis-6.2.5-1-ACC-1-1.x86_64 is already installed. -Dependencies resolved. -Nothing to do. -Complete! -``` - -使用dnf hotpatch --list确认该热补丁是否安装成功，确认Status为ACTIVED。 - -```shell -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:04:43 ago on 2024年01月02日 星期二 20时16分45秒. -base-pkg/hotpatch status -redis-6.2.5-1/ACC-1-1/redis-benchmark ACTIVED -redis-6.2.5-1/ACC-1-1/redis-cli ACTIVED -redis-6.2.5-1/ACC-1-1/redis-server ACTIVED -``` - -确认该cve是否已被修复，由于CVE-2021-1所使用的热补丁包patch-redis-6.2.5-1-ACC-1-1.x86_64同样修复CVE-2021-11，CVE-2021-1和CVE-2021-11都不予显示。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:08:48 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-1076 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26607 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -激活后测试功能，对比激活前回显内容。 - -```shell -[root@openEuler ~]# telnet 127.0.0.1 6380 -Trying 127.0.0.1... -Connected to 127.0.0.1. -Escape character is '^]'. - -*100 - --ERR Protocol error: unauthenticated multibulk length -Connection closed by foreign host. -``` - -使用dnf hotpatch --remove指定热补丁手动卸载。 - -```shell -[root@openEuler ~]# dnf hotpatch --remove redis-6.2.5-1 -Last metadata expiration check: 0:11:52 ago on 2024年01月02日 星期二 20时16分45秒. -Gonna remove this hot patch: redis-6.2.5-1 -remove hot patch 'redis-6.2.5-1' succeed -[root@openEuler ~]# dnf hotpatch --list -Last metadata expiration check: 0:12:00 ago on 2024年01月02日 星期二 20时16分45秒. -base-pkg/hotpatch status -redis-6.2.5-1/ACC-1-1/redis-benchmark NOT-APPLIED -redis-6.2.5-1/ACC-1-1/redis-cli NOT-APPLIED -redis-6.2.5-1/ACC-1-1/redis-server NOT-APPLIED -``` - -使用热补丁扫描命令查看本机待修复cve，确认CVE-2021-1和CVE-2021-11正常显示。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-1 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-11 Important/Sec. redis-6.2.5-2.x86_64 patch-redis-6.2.5-1-ACC-1-1.x86_64 -CVE-2021-2 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-22 Important/Sec. redis-6.2.5-3.x86_64 patch-redis-6.2.5-1-ACC-1-2.x86_64 -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- 安装高版本ACC热补丁 - -指定安装热补丁包patch-redis-6.2.5-1-ACC-1-2.x86_64。 - -```shell -[root@openEuler ~]# dnf hotupgrade patch-redis-6.2.5-1-ACC-1-2.x86_64 -Last metadata expiration check: 0:36:12 ago on 2024年01月02日 星期二 20时16分45秒. -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-benchmark' -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-cli' -The hotpatch 'redis-6.2.5-1/ACC-1-2' already has a 'ACTIVED' sub hotpatch of binary file 'redis-server' -Package patch-redis-6.2.5-1-ACC-1-2.x86_64 is already installed. -Dependencies resolved. -Nothing to do. -Complete! -``` - -使用热补丁扫描命令查看本机待修复cve，由于patch-redis-6.2.5-1-ACC-1-2.x86_64比patch-redis-6.2.5-1-ACC-1-1.x86_64的热补丁版本高，低版本热补丁对应的CVE-2021-1和CVE-2021-11，以及高版本热补丁对应的CVE-2021-2和CVE-2021-22都被修复。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- 热补丁目标软件包版本大于本机安装版本 - -查看热补丁repo源中repodata目录下的xxx-updateinfo.xml.gz，确认文件中的CVE-2021-33、CVE-2021-3相关信息。 - -```xml - - openEuler-HotPatchSA-2023-3 - An update for mariadb is now available for openEuler-22.03-LTS - Important - openEuler - - - - - - patch-redis-6.2.5-2-ACC.(CVE-2021-3, CVE-2021-33) - - - openEuler - - patch-redis-6.2.5-2-ACC-1-1.aarch64.rpm - - - patch-redis-6.2.5-2-ACC-1-1.x86_64.rpm - - - - -``` - -package中的name字段"patch-redis-6.2.5-2-ACC"的组成部分为：patch-源码包名-源码包version-源码包release-热补丁patch名，该热补丁包需要本机安装redis-6.2.5-2源码版本，检查本机redis安装版本。 - -```shell -[root@openEuler ~]# rpm -qa | grep redis -redis-6.2.5-1.x86_64 -``` - -由于本机安装版本不匹配，大于本机安装版本，该热补丁包名不显示，以'-'显示。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` - -- 热补丁目标软件包版本小于本机安装版本。 - -查看热补丁repo源中repodata目录下的xxx-updateinfo.xml.gz，确认文件中的CVE-2021-44、CVE-2021-4相关信息。 - -```xml - - openEuler-HotPatchSA-2023-4 - An update for mariadb is now available for openEuler-22.03-LTS - Important - openEuler - - - - - - patch-redis-6.2.4-1-ACC.(CVE-2021-44, CVE-2021-4) - - - openEuler - - patch-redis-6.2.4-1-ACC-1-1.aarch64.rpm - - - patch-redis-6.2.4-1-ACC-1-1.x86_64.rpm - - - - -``` - -package中的name字段"patch-redis-6.2.4-1-ACC"的组成部分为：patch-源码包名-源码包version-源码包release-热补丁patch名，该热补丁包需要本机安装redis-6.2.4-1源码版本，检查本机redis安装版本。 - -```shell -[root@openEuler ~]# rpm -qa | grep redis -redis-6.2.5-1.x86_64 -``` - -由于本机安装版本不匹配，小于本机安装版本，该CVE不予显示。 - -```shell -[root@openEuler ~]# dnf hot-updateinfo list cves -Last metadata expiration check: 0:00:38 ago on 2023年03月25日 星期六 11时53分46秒. -CVE-2023-22995 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2023-26545 Important/Sec. python3-perf-5.10.0-136.22.0.98.oe2203sp1.x86_64 - -CVE-2022-40897 Important/Sec. python3-setuptools-59.4.0-5.oe2203sp1.noarch - -CVE-2021-33 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2021-3 Important/Sec. redis-6.2.5-4.x86_64 - -CVE-2022-38023 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -CVE-2022-37966 Important/Sec. samba-client-4.17.2-5.oe2203sp1.x86_64 - -``` diff --git "a/docs/zh/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" "b/docs/zh/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" deleted file mode 100644 index 047c6f1bfe3e38c66d34285563d910f6f3bd07e1..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/a-ops\350\275\257\344\273\266\346\236\266\346\236\204.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/chakanyuqi.png b/docs/zh/server/maintenance/aops/figures/chakanyuqi.png deleted file mode 100644 index bbead6a91468d5dee570cfdc66faf9a4ab155d7c..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/chakanyuqi.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/chaxunshijipeizhi.png b/docs/zh/server/maintenance/aops/figures/chaxunshijipeizhi.png deleted file mode 100644 index d5f6e450fc0e1e246492ca71a6fcd8db572eb469..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/chaxunshijipeizhi.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/chuangjianyewuyu.png b/docs/zh/server/maintenance/aops/figures/chuangjianyewuyu.png deleted file mode 100644 index 4f5b8de2d2c4ddb9bfdfba1ac17258a834561e2d..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/chuangjianyewuyu.png and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" "b/docs/zh/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" deleted file mode 100644 index ab16e9d3661db3fd4adc6c605b2d2d08e79fdc1c..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/gala-gopher\346\210\220\345\212\237\345\220\257\345\212\250\347\212\266\346\200\201.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" "b/docs/zh/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" deleted file mode 100644 index c5a0768be63a98ef7ccc4a56996a8c715f7090af..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/gala-spider\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" "b/docs/zh/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" deleted file mode 100644 index f151965a21d11dd7a3e215cc4ef23d70d059f4b1..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/gopher\350\275\257\344\273\266\346\236\266\346\236\204\345\233\276.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/group.PNG b/docs/zh/server/maintenance/aops/figures/group.PNG deleted file mode 100644 index 584fd1f7195694a3419482cace2a71fa1cd9a3ec..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/group.PNG and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/icon-note.gif b/docs/zh/server/maintenance/aops/figures/icon-note.gif deleted file mode 100644 index 6314297e45c1de184204098efd4814d6dc8b1cda..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/icon-note.gif and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/shanchupeizhi.png b/docs/zh/server/maintenance/aops/figures/shanchupeizhi.png deleted file mode 100644 index cfea2eb44f7b8aa809404b8b49b4bd2e24172568..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/shanchupeizhi.png and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" "b/docs/zh/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" deleted file mode 100644 index 5823a116f384801e1197350f151b4d04ef519ac4..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/spider\346\213\223\346\211\221\345\205\263\347\263\273\345\233\276.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/syscare\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" "b/docs/zh/server/maintenance/aops/figures/syscare\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" deleted file mode 100644 index bbd0600fc5c913198dfe1e1bf2aba9c652576a98..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/syscare\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/tianjianode.png b/docs/zh/server/maintenance/aops/figures/tianjianode.png deleted file mode 100644 index d68f5e12a62548f2ec59374bda9ab07f43b8b5cb..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/tianjianode.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/xinzengpeizhi.png b/docs/zh/server/maintenance/aops/figures/xinzengpeizhi.png deleted file mode 100644 index 18d71c2e099c19b5d28848eec6a8d11f29ccee27..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/xinzengpeizhi.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/figures/zhuangtaichaxun.png b/docs/zh/server/maintenance/aops/figures/zhuangtaichaxun.png deleted file mode 100644 index a3d0b3294bf6e0eeec50a2c2f8c5059bdc256376..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/figures/zhuangtaichaxun.png and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" deleted file mode 100644 index bd179be46c9e711d7148ee44dc56f4a7a02f56bf..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/app\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" deleted file mode 100644 index 23ff4e5fddb87ac157b1002a70c47d9b4c76b873..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\344\277\256\346\224\271\346\250\241\345\236\213.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" deleted file mode 100644 index 1a2b45e860914a1ac0cfb6908b02fb5cad4cbd60..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\210\233\345\273\272\345\267\245\344\275\234\346\265\201.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" deleted file mode 100644 index 89ac88e154275d4be8179d773e7093f2357f425f..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" deleted file mode 100644 index 57844f772853c541f7a1328b007a9b6ae4d5caf0..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\347\241\256\350\256\244.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" deleted file mode 100644 index 5b4830b47897a0d51be28238a879a70b1de9ca3b..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\221\212\350\255\246\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" deleted file mode 100644 index 17fb5b13034e1fc5276c68583fed1952415b0b5f..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" deleted file mode 100644 index 458e023847bb2ad1f198f5a2dd1691748038137e..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\267\245\344\275\234\346\265\201\350\257\246\346\203\205.jpg" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" "b/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" deleted file mode 100644 index aa34bb909ee7c86a95126c13fa532ce93410a931..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\225\205\351\232\234\350\257\212\346\226\255/\345\272\224\347\224\250.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" deleted file mode 100644 index 05859540cb88e11bd8dedaeb8e03253254574c40..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/CVE\350\257\246\346\203\205\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" deleted file mode 100644 index f556e0e7e3c4096a89597cb08ba29133375aab07..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/cve\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" deleted file mode 100644 index 801c7f917d717499c86708b419101be3773348ac..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\212\344\274\240\345\256\211\345\205\250\345\205\254\345\221\212.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" deleted file mode 100644 index 0719bb8c0b71d0503d5d3a7d8e9e83da71169c64..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" deleted file mode 100644 index 21c9468ce4378bcadf537e543c756cf7a1347499..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" deleted file mode 100644 index 9cfd080d1a658544c559e83429a14b35dc931fc6..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" deleted file mode 100644 index 7ca43b0a82b7c4dd3e43a5e46cf3b4a79d55d033..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\273\273\345\212\241\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" deleted file mode 100644 index b9acfbcd7d8e3b2b551c8bb9700142dfba681afe..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\344\277\256\345\244\215\344\273\273\345\212\241\346\212\245\345\221\212.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" deleted file mode 100644 index 6bc8cc31e05d06dbd5ee4c0f62f281683db048da..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\345\233\236\346\273\232\344\273\273\345\212\241\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" deleted file mode 100644 index 3bf992f586f7fb4d87bc01cc29f961755a315c9d..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\267\273\345\212\240repo\346\272\220.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" deleted file mode 100644 index f73ccaf984e8ab55f8b78f7da5a570ce43685221..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\346\274\217\346\264\236\346\211\253\346\217\217.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" deleted file mode 100644 index b183298d96b8ced8954852540c891310aeda05be..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\344\277\256\345\244\215\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" deleted file mode 100644 index c8aa813bc228326b3e8db19e303e03507873a893..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\345\233\236\346\273\232\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" deleted file mode 100644 index 8ccebe84f60b21737414b2cb3f972472114a40c5..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\347\224\237\346\210\220\347\203\255\350\241\245\344\270\201\347\247\273\351\231\244\344\273\273\345\212\241.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" deleted file mode 100644 index 619cc6d42b646df3d9c4e601f40a6ec452712668..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\350\256\276\347\275\256repo\346\272\220.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" "b/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" deleted file mode 100644 index 34b1d4095b8c017f3c66ebfb3c44d114bc8d6ca7..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\346\274\217\346\264\236\347\256\241\347\220\206/\351\202\256\344\273\266\351\200\232\347\237\245.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" "b/docs/zh/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" deleted file mode 100644 index f5f8a3a95705145787e7aaf9c8d1fff404892240..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\347\203\255\350\241\245\344\270\201\347\212\266\346\200\201\345\233\276.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" deleted file mode 100644 index b8f0a87e00d73961907167fcbe43d82b60caf445..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" deleted file mode 100644 index ce25657a0627e9dfc3dc9ebf323e086103c2ecdf..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\256\241\347\220\206-\346\267\273\345\212\240.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" deleted file mode 100644 index 2f2e2e67a98a16e1ad464c794a8ef45ebb229d7f..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\345\206\205\344\270\273\346\234\272\346\237\245\347\234\213.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" deleted file mode 100644 index 94c9b65719050b79d2cdb9d1e8f67c459925cda7..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\273\204\347\256\241\347\220\206\345\210\227\350\241\250.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" deleted file mode 100644 index 7e4f0da4e88da6f18495a4fb23bd400d0da0a8da..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\347\274\226\350\276\221\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" deleted file mode 100644 index 1ee8f7bb2456efe6318074f46f5008da355a2cb1..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\344\270\273\346\234\272\350\257\246\346\203\205.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" deleted file mode 100644 index a916eebf306cca9ffa54f733143a0ac2c44313a4..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\345\267\245\344\275\234\345\217\260.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" deleted file mode 100644 index 31684136510cfe6248adf9b8cd086140ab5b26ef..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\226\207\344\273\266\350\247\243\346\236\220.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" deleted file mode 100644 index df3991eb16d32d9f2296fbb36873ff26bc82fa18..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240-\346\267\273\345\212\240\347\273\223\346\236\234.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" deleted file mode 100644 index c83daeeb5f8a4d9ab4f40e3debbe7a96f427ce74..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\211\271\351\207\217\346\267\273\345\212\240\344\270\273\346\234\272.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" deleted file mode 100644 index 5ab697c8f9c292097356a26140750f7f615c5d81..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\214\207\346\240\207\346\263\242\345\275\242.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" deleted file mode 100644 index 4bde1fd7330491fda6f4ed73a2be2e8c0bfabc8d..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\217\222\344\273\266\345\274\200\345\205\263.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" deleted file mode 100644 index 2890e4934ba903324ea134d3ebee85307665270e..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\346\267\273\345\212\240\344\270\273\346\234\272\347\273\204.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" "b/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" deleted file mode 100644 index 24f94c0a9ff05897b01786aa4bc8adfe4bc8db09..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\350\265\204\344\272\247\347\256\241\347\220\206/\347\231\273\351\231\206\347\225\214\351\235\242.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" deleted file mode 100644 index bbead6a91468d5dee570cfdc66faf9a4ab155d7c..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chakanyuqi.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" deleted file mode 100644 index d5f6e450fc0e1e246492ca71a6fcd8db572eb469..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chaxunshijipeizhi.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" deleted file mode 100644 index 8849a2fc81dbd14328c6c66c53033164a0b67b52..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/chuangjianyewuyu.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" deleted file mode 100644 index e1e518157f8def332adfa5516b37fdb89768499c..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/conf_file_trace.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" deleted file mode 100644 index c8c229bf41b27f1fe6629106957fd5e47851096d..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/peizhitongbu.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" deleted file mode 100644 index cfea2eb44f7b8aa809404b8b49b4bd2e24172568..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/shanchupeizhi.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" deleted file mode 100644 index d68f5e12a62548f2ec59374bda9ab07f43b8b5cb..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/tianjianode.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" deleted file mode 100644 index 18d71c2e099c19b5d28848eec6a8d11f29ccee27..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/xinzengpeizhi.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" "b/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" deleted file mode 100644 index a3d0b3294bf6e0eeec50a2c2f8c5059bdc256376..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/figures/\351\205\215\347\275\256\346\272\257\346\272\220/zhuangtaichaxun.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png b/docs/zh/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png deleted file mode 100644 index c810b26ad0c052960dfdf4bfd78e9224ce465318..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/45515A7F-0EC2-45AA-9B58-AB92DE9B0979.png and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" "b/docs/zh/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" deleted file mode 100644 index 790df6fd5781ca008124cff14635165a71abf126..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/ACC\347\232\204hotpatchmetadata\346\226\207\344\273\266\347\244\272\344\276\213.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png b/docs/zh/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png deleted file mode 100644 index 6ef6ef9bd126e6c2007389065bbecc1cfdd97f5b..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/E574E637-0BF3-4F3B-BAE6-04ECBD09D151.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png b/docs/zh/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png deleted file mode 100644 index a2a29d2e1b62f7df409e87d03f2525ba8355f77e..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/EF5E0132-6E5C-4DD1-8CB5-73035278E233.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/hotpatch-fix-pr.png b/docs/zh/server/maintenance/aops/image/hotpatch-fix-pr.png deleted file mode 100644 index d10fd1ec44416f6b59cfd21cca8721d001f7ed19..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/hotpatch-fix-pr.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/hotpatch-pr-1.png b/docs/zh/server/maintenance/aops/image/hotpatch-pr-1.png deleted file mode 100644 index 1dc5269655c51b355d3cd89b71c6688fbb0d8d5d..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/hotpatch-pr-1.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/hotpatch-pr-success.png b/docs/zh/server/maintenance/aops/image/hotpatch-pr-success.png deleted file mode 100644 index 48ea807e03c0f8e6efbceacbbc583c6ac3b3c865..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/hotpatch-pr-success.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/hotpatch-pr.png b/docs/zh/server/maintenance/aops/image/hotpatch-pr.png deleted file mode 100644 index 159fd2b7bc76e002554722d1f0f12070a2bd2e19..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/hotpatch-pr.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/hotpatch-xml.PNG b/docs/zh/server/maintenance/aops/image/hotpatch-xml.PNG deleted file mode 100644 index f1916620d3cc7b1c29059bcc5513fdc7ee94127b..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/hotpatch-xml.PNG and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230525193235084.png b/docs/zh/server/maintenance/aops/image/image-20230525193235084.png deleted file mode 100644 index 9850a11a0dcfeed69099635f3147a2230fe6faa5..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230525193235084.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230525193254541.png b/docs/zh/server/maintenance/aops/image/image-20230525193254541.png deleted file mode 100644 index 73bfbaa15a2584611ac06839965eca2869b89991..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230525193254541.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527165206707.png b/docs/zh/server/maintenance/aops/image/image-20230527165206707.png deleted file mode 100644 index 7d7f0992fc048777340678974d38b3c193269385..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527165206707.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527165700642.png b/docs/zh/server/maintenance/aops/image/image-20230527165700642.png deleted file mode 100644 index 2c4500cb54ba0225704020160d72b4aaf265d3f7..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527165700642.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527165823568.png b/docs/zh/server/maintenance/aops/image/image-20230527165823568.png deleted file mode 100644 index 7b26b545bc7d37f09eca7736f30d2eb3a6062890..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527165823568.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527165845170.png b/docs/zh/server/maintenance/aops/image/image-20230527165845170.png deleted file mode 100644 index 9719210a961a18b639d56cbf88b8586370930b4c..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527165845170.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527165922876.png b/docs/zh/server/maintenance/aops/image/image-20230527165922876.png deleted file mode 100644 index 56ff3380d12b9c1002881eca98e32a49cc292b9a..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527165922876.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230527170343909.png b/docs/zh/server/maintenance/aops/image/image-20230527170343909.png deleted file mode 100644 index 57c343360f278b2f67b77d37114a1f567a3ce63a..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230527170343909.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230607161425282.png b/docs/zh/server/maintenance/aops/image/image-20230607161425282.png deleted file mode 100644 index d2fbca2a23e80edff661d05065987ede1cc7e8af..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230607161425282.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230607163358749.png b/docs/zh/server/maintenance/aops/image/image-20230607163358749.png deleted file mode 100644 index 191c36b65058ce8dea6bb2f1fe10a85b0177f2cf..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230607163358749.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230607172021782.png b/docs/zh/server/maintenance/aops/image/image-20230607172021782.png deleted file mode 100644 index d25c3ebfb1aefe5d8f36b0b153afa64efd88dd63..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230607172021782.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230612113428096.png b/docs/zh/server/maintenance/aops/image/image-20230612113428096.png deleted file mode 100644 index 48b59b5e6cb4043703de96066c8d67e85eed4f16..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230612113428096.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230612113626330.png b/docs/zh/server/maintenance/aops/image/image-20230612113626330.png deleted file mode 100644 index 9d3621022deb02b267c3eb29315a7fe33c1f095e..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230612113626330.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230908163402743.png b/docs/zh/server/maintenance/aops/image/image-20230908163402743.png deleted file mode 100644 index c17667178689c6384a039bf0f8025ea7eb360236..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230908163402743.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230908163914778.png b/docs/zh/server/maintenance/aops/image/image-20230908163914778.png deleted file mode 100644 index a06c7e49b32286ceec9ff0e9a08f73a76c179daf..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230908163914778.png and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/image-20230908164216528.png b/docs/zh/server/maintenance/aops/image/image-20230908164216528.png deleted file mode 100644 index 15fbc694603837095244451d4f5d7e7af70789be..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/image-20230908164216528.png and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" "b/docs/zh/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" deleted file mode 100644 index 29223cbddc39f8fcc0b725a3ed83495709e05f78..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/openEuler\344\273\223\350\257\204\350\256\272.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/image/patch-file.PNG b/docs/zh/server/maintenance/aops/image/patch-file.PNG deleted file mode 100644 index f587a48c2be945beaadecf44a6d711da14be50c6..0000000000000000000000000000000000000000 Binary files a/docs/zh/server/maintenance/aops/image/patch-file.PNG and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" "b/docs/zh/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" deleted file mode 100644 index ba3a44433117f0a23fc6048cd3b093fe6af7250c..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/src-openEuler\344\273\223\350\257\204\350\256\272.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" "b/docs/zh/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" deleted file mode 100644 index 2c2e2dd78242f538c21809614e917bef769256ba..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\345\220\214\346\204\217\345\220\210\345\205\245pr.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" "b/docs/zh/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" deleted file mode 100644 index 2914c3eef44bb3d3528686b44157a5f9276da9c6..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\345\220\257\345\212\250\347\203\255\350\241\245\344\270\201\345\267\245\347\250\213\346\265\201\347\250\213.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" deleted file mode 100644 index 044be7ccd001ddc2bb69ba53b34f3c2a72511f39..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\210\235\345\247\213\345\206\205\345\256\271.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" deleted file mode 100644 index 779c2fddcb02968358492e70f6aa9261be26fe48..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\345\233\236\345\241\253.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" deleted file mode 100644 index d97fbd1fbb5a20b97ec88989f3c7a0776bb9cdc0..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201issue\351\223\276\346\216\245\345\222\214pr\351\223\276\346\216\245.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" deleted file mode 100644 index 3acf2e93550e4962d0a5f927fd6fd0460a64b889..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\345\244\261\350\264\245.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" deleted file mode 100644 index 5b167be8a40762823223ccdd700d5b62f7e1aa38..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\345\210\266\344\275\234\347\273\223\346\236\234.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" deleted file mode 100644 index a96a4d229b54b301bbf4e7f7a2c41ea1e9faf43d..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\347\232\204chroot\347\216\257\345\242\203.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" deleted file mode 100644 index d77335d0097f7504f0c37dd8aca1691d9f1f0a23..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201pr\350\247\246\345\217\221\346\265\201\347\250\213.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" deleted file mode 100644 index aa74c2859588ff2a49d6341dd2a2ac6fe2049eac..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\344\273\223\346\217\220pr\350\257\264\346\230\216.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" deleted file mode 100644 index 404ac733fae66bda9ceac2d6c2fa18897c58dc70..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\344\270\213\350\275\275\351\223\276\346\216\245.png" and /dev/null differ diff --git "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" "b/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" deleted file mode 100644 index 6d32e8874e8e5e7f7fb5c350fca0063da9a77176..0000000000000000000000000000000000000000 Binary files "a/docs/zh/server/maintenance/aops/image/\347\203\255\350\241\245\344\270\201\350\207\252\351\252\214\345\214\205\344\270\213\350\275\275\351\223\276\346\216\245.png" and /dev/null differ diff --git a/docs/zh/server/maintenance/aops/overview.md b/docs/zh/server/maintenance/aops/overview.md deleted file mode 100644 index 25c3aa9f994f68a7c56c22dd44d477005886761f..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/overview.md +++ /dev/null @@ -1,3 +0,0 @@ -# A-Ops用户指南 - -本文介绍A-Ops智能运维框架以及智能定位、配置溯源等服务的安装与使用方法，使用户能够快速了解并使用A-Ops。用户能够借由A-Ops降低系统集群的运维成本，实现系统故障快速定位、配置项统筹管理等功能。 diff --git a/docs/zh/server/maintenance/aops/quick_deployment_of_aops.md b/docs/zh/server/maintenance/aops/quick_deployment_of_aops.md deleted file mode 100644 index 8842d32874d097538d17bbaa4f9cd18579156610..0000000000000000000000000000000000000000 --- a/docs/zh/server/maintenance/aops/quick_deployment_of_aops.md +++ /dev/null @@ -1,104 +0,0 @@ -# 一、一键化部署介绍 - -Aops服务一键化部署采用docker容器技术，搭配docker-compose容器编排，简化部署难度，实现一键启动和暂停。 - -# 二、环境要求 - -建议使用2台openEuler 24.03-LTS及以上机器完成部署（单台机器内存8G+），具体用途及部署方案如下： - -- 机器A用于部署mysql、elasticsearch、kafka、redis、prometheus等，主要提供数据服务支持； -- 机器B用于部署A-Ops服务端，提供业务功能支持。部署A-Ops前端服务，提供展示、操作； - -| 机器编号 | 配置IP | 部署服务 | -| -------- | ----------- | -------------------------------------------- | -| 机器A | 192.168.1.1 | mysql elasticsearch redis kafka prometheus | -| 机器B | 192.168.1.2 | aops-zeus aops-diana aops-apollo aops-hermes | - -# 三、配置环境部署 - -## 1. 关闭机器A防火墙 - -```shell -systemctl stop firewalld -systemctl disable firewalld -systemctl status firewalld -``` - -## 2. 安装docker docker-compose - -```shell -dnf install docker docker-compose -# 设置docker开机启动 -systemctl enable docker -``` - -## 3. 安装aops-vulcanus aops-tools - -```shell -dnf install aops-vulcanus aops-tools -``` - -> **说明：安装aops相关组件需要配置[EPOL源](https://dl-cdn.openeuler.openatom.cn/openEuler-24.03-LTS-SP1/EPOL/)。** - -## 4. 执行一键化部署 - -- 执行部署脚本 - -```shell -cd /opt/aops/scripts/deploy/container -# 执行run.sh部署脚本 -bash run.sh -``` - -> 进入交互式命令行 -> -> ```shell -> 1. Build the docker container (build). -> 2. Start the container orchestration service (start-service/start-env). -> 3. Stop all container services (stop-service/stop-env). -> run.sh: line 74: read: `Enter to exit the operation (Q/q).': not a valid identifier -> Select an operation procedure to continue: -> -> ``` -> -> **build**: 部署基础服务（mysql、kafka等）不需要执行build操作 -> -> **start-service**: 启动A-Ops服务及前端应用 -> -> **start-env**: 启动基础服务，包括mysql、redis、kafka等 -> -> **stop-service**: 停止A-Ops服务及前端应用 -> -> **stop-env**: 停止基础服务（数据会依然保留） -> -> **Q/q**: 退出命令交互模式 - -- 部署A-Ops服务端 - -```shell -# 切换在机器B上执行部署脚本 -cd /opt/aops/scripts/deploy/container -bash run.sh -# 交互式命令中执行start-service -``` - -- 更改服务配置文件 - -> **注意：当A-Ops服务和基础服务在同一台机器上部署时，则无需调整配置文件即可使用。若部署方案与本文档中类似（机器A、B），则需要将所有的配置文件中连接基础服务的配置项更改为机器A的ip** -> -> **默认的mysql连接字符串中使用无密码模式，基础服务的mysql配置了默认密码“123456”，视具体情况调整** - -```shell -# 调整 apollo.ini diana.ini zeus.ini配置文件中连接mysql、elasticsearch、kafka、redis的ip地址 -cd /etc/aops/ -``` - -- **FAQ** - -​ **1. elasticsearch基础服务无法正常启动** - -查看/opt/es文件夹的权限，默认权限需要调整为777，可执行 "chmod -R 777 /opt/es" 。 - -​ **2. prometheus 基础服务无法正常启动** - -查看/etc/prometheus目录下是否存在prometheus.yml配置文件，如果不存在，请添加配置文件。 diff --git a/docs/zh/server/maintenance/gala/using_gala_gopher.md b/docs/zh/server/maintenance/gala/using_gala_gopher.md index 2028a562c270d948b8cb3babe1aff01c7aa51468..a502e3cf2a6268e7a6e674d0cc6398a903e1d161 100644 --- a/docs/zh/server/maintenance/gala/using_gala_gopher.md +++ b/docs/zh/server/maintenance/gala/using_gala_gopher.md @@ -1,10 +1,10 @@ -# **gala-gopher使用手册** +# gala-gopher使用手册 gala-gopher作为数据采集模块提供OS级的监控能力，支持动态加载 /卸载探针，可无侵入式地集成第三方探针，快速扩展监控范围。 本章介绍如何部署和使用gala-gopher服务。 -#### 安装 +## 安装 挂载repo源： @@ -37,9 +37,9 @@ priority=1 # yum install gala-gopher ``` -#### 配置 +## 配置 -##### 配置介绍 +### 配置介绍 gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置项说明如下(省略无需用户配置的部分)。 @@ -83,7 +83,7 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 - start_check：switch为auto时，需要根据start_check执行结果判定探针是否需要启动。 - switch：探针是否启动，支持配置on | off | auto，auto会根据start_check判定结果决定是否启动探针。 -##### 启动参数介绍 +### 启动参数介绍 | 参数项 | 含义 | | ------ | ------------------------------------------------------------ | @@ -103,7 +103,7 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 | -w | 筛选应用程序监控范围，如-w /opt/gala-gopher/task_whitelist.conf，用户可将需要监控的程序名写入task_whitelist.conf中，默认配置为NULL表示不筛选 | | -n | 指定某个网卡挂载tc ebpf，默认配置为NULL表示所有网卡均挂载，示例： -n eth0 | -##### 配置文件示例 +### 配置文件示例 - 配置选择数据输出通道： @@ -163,7 +163,7 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 ); ``` -#### 启动 +## 启动 配置完成后，执行如下命令启动gala-gopher。 @@ -183,9 +183,9 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 > 说明：gala-gopher部署和运行均需要root权限。 -#### 使用方法 +## 使用方法 -##### 外部依赖软件部署 +### 外部依赖软件部署 ![gopher软件架构图](./figures/gopher软件架构图.png) @@ -193,7 +193,7 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 > 说明：安装kafka、prometheus软件包时，需要从官网获取安装包进行部署。 -##### 输出数据 +### 输出数据 - **指标数据metrics** @@ -226,4 +226,3 @@ gala-gopher配置文件为`/opt/gala-gopher/gala-gopher.conf`，该文件配置 # 输出数据 {"timestamp": 1655888408000, "meta_name": "thread", "entity_name": "thread", "version": "1.0.0", "keys": ["machine_id", "pid"], "labels": ["hostname", "tgid", "comm", "major", "minor"], "metrics": ["fork_count", "task_io_wait_time_us", "task_io_count", "task_io_time_us", "task_hang_count"]} ``` - \ No newline at end of file diff --git a/docs/zh/server/memory_storage/gmem/_toc.yaml b/docs/zh/server/memory_storage/gmem/_toc.yaml index 36121ff4a872e60286a38b9cf5fc2437fc6e226a..654348950ef8a9a957a6ecb5e12173625cc6fe1a 100644 --- a/docs/zh/server/memory_storage/gmem/_toc.yaml +++ b/docs/zh/server/memory_storage/gmem/_toc.yaml @@ -1,4 +1,4 @@ -label: GMEM用户指南 +label: GMem用户指南 isManual: true description: 提供异构互联内存的中心化管理 sections: diff --git a/docs/zh/server/memory_storage/gmem/introduction_to_gmem.md b/docs/zh/server/memory_storage/gmem/introduction_to_gmem.md index 8befaf35369d916ab0a68c44721a2734592e100a..503e9b2d0eceeafdcfa72b23e1d8b083282db558 100644 --- a/docs/zh/server/memory_storage/gmem/introduction_to_gmem.md +++ b/docs/zh/server/memory_storage/gmem/introduction_to_gmem.md @@ -1,4 +1,4 @@ -# 认识GMEM +# 认识GMem ## 简介 diff --git a/docs/zh/server/releasenotes/releasenotes/_toc.yaml b/docs/zh/server/releasenotes/releasenotes/_toc.yaml index c72236f437eb3f479d3bc0f33f71b64787bebed8..6524b69b54374cc545668d832836d75eee386a84 100644 --- a/docs/zh/server/releasenotes/releasenotes/_toc.yaml +++ b/docs/zh/server/releasenotes/releasenotes/_toc.yaml @@ -1,9 +1,7 @@ label: 发行说明 isManual: true -description: openEuler 25.03 版本的发行说明 +description: openEuler 24.03 LTS SP2 版本的发行说明 sections: - - label: 发行说明 - href: ./release_notes.md - label: 简介 href: ./introduction.md - label: 法律声明 diff --git a/docs/zh/server/releasenotes/releasenotes/release_notes.md b/docs/zh/server/releasenotes/releasenotes/release_notes.md deleted file mode 100644 index 0647b3ba561ff00e261b8a0bc46438905a919c19..0000000000000000000000000000000000000000 --- a/docs/zh/server/releasenotes/releasenotes/release_notes.md +++ /dev/null @@ -1,3 +0,0 @@ -# 发行说明 - -本文档是 openEuler 24.03-LTS-SP1 版本的发行说明。