Oracle Cloud Infrastructure Documentation

Managing Packages and Updates

OS Management Hub allows you to create one-time or recurring update jobs to update instances.

See also: Understanding Jobs.

How does OS Management Hub provide updates?

For Oracle Linux OCI instances, OS Management Hub provides package updates from the OCI regional yum server. For on-premises or third-party cloud instances, OS Management Hub provides package updates from software sources mirrored to the management station. The software sources receive updates from the OCI regional yum server, which are then mirrored on the station.

For Windows OCI instances, OS Management Hub identifies available updates on the instance and then the instance receives updates from Microsoft or an internal source such as a Windows Server Update Service (WSUS).

Updating Instances and Groups

OS Management Hub provides updates as they're made available by OS vendors. Available updates are subject to the vendor's OS lifecycle programs. Use custom software sources to control when updates are made to instances. Configure update job for individual instances, a group, or all standalone instances in a compartment.

Tip

Need to update instances in a lifecycle stage? Create and promote a new versioned custom software source to a stage. Any updates within the promoted source are installed on the instances in the stage.

Viewing Updates
Installing updates
Best Practices
Important

If you have enabled active hours on your Windows instances, don't schedule updates during active hours. OS Management Hub doesn't install updates that are scheduled during active hours.

Update Types

OS Management Hub categorizes updates into several types. The updates applied to the instance depend on the OS.

For more details on Windows update types, see Update Types Available for Windows Instances.

OS Management Hub Category Description
Security

An update that addresses security vulnerabilities found during development, testing, or reported by users.

For Linux, security fixes usually have one or more associated CVE (Common Vulnerabilities and Exposure) names to identify the vulnerabilities.

For Windows, this includes Definition and Security types.

Ksplice (Oracle Linux only)

An update used by Ksplice for installing zero-downtime security patches. Ksplice patches can include kernel updates, only userspace updates, or both.

See Using Ksplice for Oracle Linux for how to configure an instance to receive Ksplice updates.
Bug Fix

An update that fixes non-security-related issues reported by users or discovered during development or testing.

For Windows, this includes Critical, Drivers, and Updates types.
Enhancement

An update that introduces new features, improved functionality, or enhanced performance in the software.

For Windows, this includes Feature Packs and Tools types.
Other

An update that's not associated with any security, bug, or enhancement update.

For Windows, this includes Service packs, Update Rollups, and Microsoft types.