Hello, and welcome. In this lesson, we will talk about OS Management Services with Oracle Cloud Infrastructure. OS Management is an Oracle Cloud Infrastructure service that provides automated operating system patch and Package Management for a Oracle Linux, and Windows, and enables improved OS platform security and reliability. It is a fully integrated service in available to you within the Oracle Cloud Infrastructure to console. These are three service if you are subscribed to OCI. Why OS Management Service? Staying up-to-date on operating system patch management is critical for protecting systems from non vulnerabilities and preventing costly unplanned downtimes. Patching management is a complex task, especially, when you have larger deployments, soft instances in the Cloud or when you are managing mixing OS environments. The OS Management Services helped to reduce batch management complexity in errors by providing a single consolidated service on OCI. Automated patching in the ability to schedule bad jobs frees you from manual management desks. You and your developers can spend more time on more interesting software engineering desks. OS Management Service helps eliminate the cost of manual tests and reduce potentially costly errors. Cyber ethics and unplanned downtime. There is no charged for OCI customers to use OS Management Service. Also, for Linux instances, support is also provided for no additional cost to OCI subscribers. Let's take a look at OS Management Service for Oracle Linux. Oracle Linux Premier Support is provided at no additional cost for customers who subscribe to Oracle Cloud infrastructure. But what comes included with Oracle Linux support? Oracle bundles significant capabilities at no additional charge for OCI subscribers. We also include access to the latest Oracle Linux backends and updates and provide frequently updated Oracle Linux images built specifically for OCI. Before using OS Management Service, you need to create a dynamic group policy for the instances that will be managed. Otherwise, they will not have permissions to connect to the service. OS Management Service agent is enabled by default on Oracle Linux instances. If you have in the old that support the Oracle Linux image that predates OS Management Services, or important in the image, you can manually install the agent and have the same resources. Once you have the permission set and the agent installed at the instance, you can use OS Management Service to patch your OS and perform Package Management. We feed the instance details in the OCI console. There will be a section for OS Management on the resources. The initial view gives you a summer of OS Management for the instance, and from there, you can choose to see more details. In the available Package Updates section from the shortcut menu, you can see all available Package for the instance, social package and select one or more package updates to install which you can either apply immediately or schedule for future time or as a recurring scheduled job. OS Management uses this concept of software sources to provide packages to instances and to try to manage the available updates to those backends. OSMS, you can think of a software source as a collection of packages, soft resources, allow you to control which package can be installed on the instances. We're not having to manually log in configure the repositories on each instance. Managing larger deployments of Oracle Linux instances is a complex task. To reduce that complexity, save yourself time, and reduce human errors. You can use these service to perform flip management of your OS instances instead of managed groups of Oracle Linux instances. You can navigate to the OS Management from the main OCI menu under Compute and go to OS Management Service. Here, you can set up click management of OS instances by creating a grouping of instances to patch. You can think of these as a CVE lookup to which you can use to search for a CVE and drill down to a specific effected package. It'll provide for yield the finalist and dependencies information. If you drill down on the package, you can also install the CVE Package involved. Under the scheduled jobs link, here's where you can view the pet jobs, choose to run the job immediately or intervene and skip the next schedule job interactions are deleted. You can look at metrics such as how many managed instances, this includes all instance managed by OSMS. Linux and Windows were active and inactive over a timeframe, and how many instance have available security patches to get a general idea how compliant your wire with security patches in all the updates over time. You can set up alerts and alarms to let you know how many instance have pending security updates. Let's take a look at OS Management for Windows. OS Management support for a Windows server instances in OCI is able to look at the available updates for the instance and install them, view what updates have been installed, or that there's level of the instance, and apply updates to groups of Windows instances. It supports Windows Server 2012 R2, 2016, 2019, Standard and Datacenter edition of instances on OCI. Windows instance is based on images prior to April 2020, will require you to install the agents manually. Newer Windows instances already have it installed and enabled. Custom image of Windows Server are also supported provided you install the agent and those are supported Windows versions. Under available updates, you can see the available updates for the instance, expanding update and it leads us all to requirements and acknowledge base number that you can refer to and indicate whether every boot is required. You can select the update you want to apply, and you can either install them immediately or scuttled them for a later time and date. This concludes this lesson on OS Management with Oracle Cloud Infrastructure. Thanks for watching. See you in the next lesson.
