Components of Public Image System

The following system components are installed by default in the Public Image to provide complete features and security monitoring in conjunction with corresponding services or products. It is recommended not to uninstall or disable the boot operation, otherwise it will cause partial feature loss.

Due to the objective factors of system upgrade and component upgrade, the following components may not be installed in the early Public Image. It is recommended that you check the current system installation status and complete the installation one by one.

Notification: ifrit can automatically install and update JCS-Agent. In the scenario of importing image/image component update, it is recommended that you refer to the following instructions and install ifrit directly on the premise that the cloud-init and QGA in the Virtual Machines have been uninstalled. After the installation, wait up to 10 minutes for the installation or update of JCS-Agent.

• JCS-Agent
• Ifrit
• Jdog-Monitor

JCS-Agent

Component Introduction

JCS-Agent is the core component of Virtual Machines developed by JD Cloud, which can provide features such as basic information (password, key) injection of Virtual Machines, user data injection, KMS activation of Windows system, monitoring data report.

Public Image was upgraded from August to December 2018, completing the default installation of JCS-Agent. cloud-init and qemu-guest-agent were installed in the early Public Image. Such images still have the features such as the basic endpoint information injection, monitoring and reporting, but the user data injection, KMS activation in Windows system and the following additional features are not supported. If you are currently using the early agent, it is recommended that you change it to JCS-Agent (if the version of JCS-Agent you are currently using is lower than 1.0.728, it is recommended that you follow the steps below to install the new version, so as to obtain the automatic upgrade management feature of Ifrit).

JCS-Agent of Cloud Marketplacet Image Installation depends on the release time of the image (Public Image production based on which version) and the production status of the service provider. If you rely on some special features provided by JCS-Agent, please consult the Cloud Marketplace to confirm the status of agent in image before using.

Installation Preparation

Uninstall conflicting software

If the image you are using is the imported image of JD Cloud’s external environment, and cloud-init or qemu-guest-agent has been installed before the import, please be sure to install after uninstalling!

If there is a prompt that the software is not installed when uninstalling, it means that the current system is not installed with the software, and there is no need for subsequent configuration files and log cleaning. It is also recommended to run 'ps-ef' to see if the service has been cleaned up after uninstalling.

① cloudinit uninstall clean:

• CentOS：rpm -e cloud-init、rm -rf /etc/conf/cloud/*、rm -rf /var/lib/cloud/*
  
• Ubuntu： apt-get purge cloud-init
  
• Windows: [Control Panel] — [Program], find Cloudbase-Init, and right-click Uninstall

② qemu-guest-agent uninstall clean:

• CentOS：rpm -e qemu-guest-agent、rm -fr /var/log/qemu-ga
  
• Ubuntu：apt-get purge qemu-guest-agent
  
• Windows: [Control Panel] — [Program], find qemu-guest-agent and right-click Uninstall

View Current Software Revision

Get JCS-Agent version number by viewing the version of the monitoring plug-in.
Linux：ps -ef|grep MonitorPlugin
Windows：wmic process where caption="MonitorPlugin.exe" get caption,commandline /value

Installation method

(It is recommended that you should Install ifrit which will automatically pull up JCS-Agent. You can skip the following installation steps by this way.)

Linux：

1. Download the following installation package and installation script to the same directory (for example: /root/jcloud).
   If the machine is not associated with any EIP, it is necessary to download it in the Intranet environment. Please replace bucket address "bj" and the region parameter "cn-north-1" in the link with codes of region where the machine is located: "gz", "cn-south-1", "sq", "cn-east-1", "sh" and “cn-east-2”, and change "s3" in the domain to "s3-internal".
   https://bj-jcs-agent-linux.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-linux-deploy.py
   https://bj-jcs-agent-linux.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-linux.zip
   

2. Execute the following command in the download directory to detach the old version. (This step is used to update JCS-Agent, skip it if it is not installed currently)
   

python jcloud-jcs-agent-linux-deploy.py uninstall

3. Execute the following command in the download directory to install the latest version.
   

python jcloud-jcs-agent-linux-deploy.py install

4. Execute the ps -ef command and see the two processes of JCSAgentCore and MonitorPlugin, which means the installation is successful. After successful installation, you can delete the installation package and the installation script.

Windows:

1. Download the installation package, installation script and MD5 tools to the same directory (for example: C:\jcloud).
   If the machine is not associated with any EIP, it is necessary to download it in the Intranet environment. Please replace region parameter "cn-north-1" in the link with codes of region where the machine is located: "cn-south-1", "cn-east-1", "cn-east-2" and change "s3" in the domain to "s3-internal".
   https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-windows-manual.zip
   https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-win-deploy.ps1
   https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/MD5.exe
   

2. Use powershell to execute the following command in the download directory to detach the old version (**This step is used to update JCS-Agent, skip it if it is not installed currently **)
   

.\jcloud-jcs-agent-win-deploy.ps1 uninstall

.\jcloud-jcs-agent-win-deploy.ps1 install

4. Execute the ps -ef command and see the two processes of JCSAgentCore and MonitorPlugin, which means the installation is successful. After successful installation, you can delete the installation package, the installation script and MD5 tools.

Ifrit

Component Introduction

Ifrit is a lightweight and general deployment, operation and maintenance tool developed by JD Cloud, which can realize the deployment, upgrade, unload and other management operations of its managed components. Ifrit is cooperate with JCS-Agent to realize automatic upgrade of JCS-Agent.

The Public Image will be upgraded from May to July 2019 gradually to complete the default installation of Ifrit. Cloud Marketplacet Image Installation depends on the release time of the image (Public Image production based on which version) and the production status of the service provider. Please consult the Cloud Marketplace for details.

Installation method

Linux：

• Execute the installation in the public network/external network environment:
  

wget -c http://devops-hb.s3.cn-north-1.jdcloud-oss.com/ifrit/ifrit-agent-external-v0.01.465.534ae3d.20190523181914.bin -O installer && sh installer -- -a jcs-agent-core,jcs-agent-script,jcs-agent-monitor /usr/local/share/jcloud/ifrit && rm -f installer

• Execute the installation in the JD Cloud intranet environment:
  

curl -fsSL http://deploy-code-vpc.jdcloud.com/dl-ifrit-agents/install_jcs | bash

Windows:

• Execute the installation in the public network/external network environment:
  

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hb.s3.cn-north-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

• Execute the installation in the JD Cloud intranet environment:
  

① North China - Beijing:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hb.s3-internal.cn-north-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

② East China - Shanghai:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hd.s3-internal.cn-east-2.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

③ East China-Suqian:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-sq.s3-internal.cn-east-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

④ South China - Guangzhou:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops.s3-internal.cn-south-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

Click "Next" in the Installation Guide; in the configuration information page, you only need to fill in AGENTS configuration: jcs-agent-core-win,jcs-agent-script-win,jcs-agent-monitor-win, and need not to fill in other configurations, which should be use default values.

Customized installation path is not supported currently. Check "I agree to the terms and conditions of the license" and click "Next".

Click "Installation" to complete the ifrit installation.

Jdog-Monitor

Component Introduction

Jdog-Monitor is a self-developed security core component of JD Cloud. it is the core of the security monitoring and prevention functions realized by "Endpoint Security" products. it can provide security functions such as anti-brute force cracking, abnormal login detection, and high-risk vulnerability detection.

Installation method

Linux：

1. Download installation package: (download after associating EIP for non-north China regional endpoint) https://iaas-cns-download.s3.cn-north-1.jdcloud-oss.com/JdogMonitor/jdog-op-agent-master-7a35746b-0709091136.tar
   

2. Run the following instructions for installation.
   

mkdir -p /usr/local/share/jcloud/jdog-monitor
tar zxvf jdog-op-agent-master-7a35746b-0709091136.tar -C /usr/local/share/jcloud/jdog-monitor
/usr/local/share/jcloud/jdog-monitor/scripts/jdog_service install

Windows：

1. Download installation package: (download after associating EIP for non-north China regional endpoint) https://iaas-cns-download.s3.cn-north-1.jdcloud-oss.com/JdogMonitor/jdog-monitor.exe
   

2. Run jdog-monitor.exe with administrator privileges to install.