Components of Public Image System

Products

Virtual Machines

2022-02-25 14:40:34

Components of Public Image System

The following system components are installed by default in the Public Image to provide complete features and security monitoring in conjunction with corresponding services or products. It is recommended not to uninstall or disable the boot operation, otherwise it will cause partial feature loss.

Due to the objective factors of system upgrade and component upgrade, the following components may not be installed in the early Public Image. It is recommended that you check the current system installation status and complete the installation one by one.

Notification: ifrit can automatically install and update JCS-Agent. In the scenario of importing image/image component update, it is recommended that you refer to the following instructions and install ifrit directly on the premise that the cloud-init and QGA in the Virtual Machines have been uninstalled. After the installation, wait up to 10 minutes for the installation or update of JCS-Agent.

Component Name Relevant Process Name Main Feature Influence if not installed
JCS-Agent JCSAgentCore
MonitorPlugin-‘Version Number’
UpgradePlugin-‘Version Number’
General core components provide password key injection, customized script injection, monitoring data reporting and other features in cooperation with metadata service It is impossible to set passwords, keys and customized user data through JD Cloud Console or openAPI, and some VM Monitoring data cannot be obtained
Ifrit ifrit-agent
ifrit-supervise
Universal deployment plug-in to realize automatic upgrade of JCS-Agent Unable to obtain the ability to automatically upgrade JCS-Agent, if you want to use new functions developed based on JCS-Agent in the future, you need to manually upgrade JCS-Agent
Jcloudhids jcloudhids
jcloudhidsupdate
Early security components, gradually going offline No installation is required
Jdog-Monitor jdog-monitor.' Version No.'
jdog-watchdog
jdog-kunlunmirror
Security core Plug-in provide security protection capability Unable to monitor the security hazards and abnormal behavior of Virtual Machines through "Endpoint Security" products

JCS-Agent

Component Introduction

JCS-Agent is the core component of Virtual Machines developed by JD Cloud, which can provide features such as basic information (password, key) injection of Virtual Machines, user data injection, KMS activation of Windows system, monitoring data report.

Public Image was upgraded from August to December 2018, completing the default installation of JCS-Agent. cloud-init and qemu-guest-agent were installed in the early Public Image. Such images still have the features such as the basic endpoint information injection, monitoring and reporting, but the user data injection, KMS activation in Windows system and the following additional features are not supported. If you are currently using the early agent, it is recommended that you change it to JCS-Agent (if the version of JCS-Agent you are currently using is lower than 1.0.728, it is recommended that you follow the steps below to install the new version, so as to obtain the automatic upgrade management feature of Ifrit).

JCS-Agent of Cloud Marketplacet Image Installation depends on the release time of the image (Public Image production based on which version) and the production status of the service provider. If you rely on some special features provided by JCS-Agent, please consult the Cloud Marketplace to confirm the status of agent in image before using.

Installation Preparation

Uninstall conflicting software

If the image you are using is the imported image of JD Cloud’s external environment, and cloud-init or qemu-guest-agent has been installed before the import, please be sure to install after uninstalling!

If there is a prompt that the software is not installed when uninstalling, it means that the current system is not installed with the software, and there is no need for subsequent configuration files and log cleaning. It is also recommended to run 'ps-ef' to see if the service has been cleaned up after uninstalling.

① cloudinit uninstall clean:

  • CentOS:rpm -e cloud-initrm -rf /etc/conf/cloud/*rm -rf /var/lib/cloud/*
  • Ubuntu: apt-get purge cloud-init
  • Windows: [Control Panel] — [Program], find Cloudbase-Init, and right-click Uninstall

② qemu-guest-agent uninstall clean:

  • CentOS:rpm -e qemu-guest-agentrm -fr /var/log/qemu-ga
  • Ubuntu:apt-get purge qemu-guest-agent
  • Windows: [Control Panel] — [Program], find qemu-guest-agent and right-click Uninstall

View Current Software Revision

Get JCS-Agent version number by viewing the version of the monitoring plug-in.
Linux:ps -ef|grep MonitorPlugin
Windows:wmic process where caption="MonitorPlugin.exe" get caption,commandline /value

Installation method

(It is recommended that you should Install ifrit which will automatically pull up JCS-Agent. You can skip the following installation steps by this way.)

Linux:

  1. Download the following installation package and installation script to the same directory (for example: /root/jcloud).
    If the machine is not associated with any EIP, it is necessary to download it in the Intranet environment. Please replace bucket address "bj" and the region parameter "cn-north-1" in the link with codes of region where the machine is located: "gz", "cn-south-1", "sq", "cn-east-1", "sh" and “cn-east-2”, and change "s3" in the domain to "s3-internal".
    https://bj-jcs-agent-linux.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-linux-deploy.py
    https://bj-jcs-agent-linux.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-linux.zip

  2. Execute the following command in the download directory to detach the old version. (This step is used to update JCS-Agent, skip it if it is not installed currently)

python jcloud-jcs-agent-linux-deploy.py uninstall
  1. Execute the following command in the download directory to install the latest version.
python jcloud-jcs-agent-linux-deploy.py install
  1. Execute the ps -ef command and see the two processes of JCSAgentCore and MonitorPlugin, which means the installation is successful. After successful installation, you can delete the installation package and the installation script.

Windows:

  1. Download the installation package, installation script and MD5 tools to the same directory (for example: C:\jcloud).
    If the machine is not associated with any EIP, it is necessary to download it in the Intranet environment. Please replace region parameter "cn-north-1" in the link with codes of region where the machine is located: "cn-south-1", "cn-east-1", "cn-east-2" and change "s3" in the domain to "s3-internal".
    https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-windows-manual.zip
    https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/jcloud-jcs-agent-win-deploy.ps1
    https://bj-jcs-agent-windows.s3.cn-north-1.jdcloud-oss.com/MD5.exe

  2. Use powershell to execute the following command in the download directory to detach the old version (**This step is used to update JCS-Agent, skip it if it is not installed currently **)

.\jcloud-jcs-agent-win-deploy.ps1 uninstall
3. Open powershll and go to the directory where the installation package is located (C:\jcloud), execute the following command to install
.\jcloud-jcs-agent-win-deploy.ps1 install
  1. Execute the ps -ef command and see the two processes of JCSAgentCore and MonitorPlugin, which means the installation is successful. After successful installation, you can delete the installation package, the installation script and MD5 tools.

Ifrit

Component Introduction

Ifrit is a lightweight and general deployment, operation and maintenance tool developed by JD Cloud, which can realize the deployment, upgrade, unload and other management operations of its managed components. Ifrit is cooperate with JCS-Agent to realize automatic upgrade of JCS-Agent.

The Public Image will be upgraded from May to July 2019 gradually to complete the default installation of Ifrit. Cloud Marketplacet Image Installation depends on the release time of the image (Public Image production based on which version) and the production status of the service provider. Please consult the Cloud Marketplace for details.

Installation method

Linux:

  • Execute the installation in the public network/external network environment:
wget -c http://devops-hb.s3.cn-north-1.jdcloud-oss.com/ifrit/ifrit-agent-external-v0.01.465.534ae3d.20190523181914.bin -O installer && sh installer -- -a jcs-agent-core,jcs-agent-script,jcs-agent-monitor /usr/local/share/jcloud/ifrit && rm -f installer
  • Execute the installation in the JD Cloud intranet environment:
curl -fsSL http://deploy-code-vpc.jdcloud.com/dl-ifrit-agents/install_jcs | bash

Windows:

  • Execute the installation in the public network/external network environment:
($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hb.s3.cn-north-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')
  • Execute the installation in the JD Cloud intranet environment:

① North China - Beijing:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hb.s3-internal.cn-north-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

② East China - Shanghai:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-hd.s3-internal.cn-east-2.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

③ East China-Suqian:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops-sq.s3-internal.cn-east-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

④ South China - Guangzhou:

($client = new-object System.Net.WebClient) -and ($client.DownloadFile('http://devops.s3-internal.cn-south-1.jdcloud-oss.com/ifrit/ifrit-external-v0.01.461.56ff760.20190517095556.exe', 'c:\ifrit.exe')) -or (Start-Process 'c:\ifrit.exe')

Click "Next" in the Installation Guide; in the configuration information page, you only need to fill in AGENTS configuration: jcs-agent-core-win,jcs-agent-script-win,jcs-agent-monitor-win, and need not to fill in other configurations, which should be use default values.

Customized installation path is not supported currently. Check "I agree to the terms and conditions of the license" and click "Next".

Click "Installation" to complete the ifrit installation.

Jdog-Monitor

Component Introduction

Jdog-Monitor is a self-developed security core component of JD Cloud. it is the core of the security monitoring and prevention functions realized by "Endpoint Security" products. it can provide security functions such as anti-brute force cracking, abnormal login detection, and high-risk vulnerability detection.

Installation method

Linux:

  1. Download installation package: (download after associating EIP for non-north China regional endpoint) https://iaas-cns-download.s3.cn-north-1.jdcloud-oss.com/JdogMonitor/jdog-op-agent-master-7a35746b-0709091136.tar

  2. Run the following instructions for installation.

mkdir -p /usr/local/share/jcloud/jdog-monitor
tar zxvf jdog-op-agent-master-7a35746b-0709091136.tar -C /usr/local/share/jcloud/jdog-monitor
/usr/local/share/jcloud/jdog-monitor/scripts/jdog_service install

Windows:

  1. Download installation package: (download after associating EIP for non-north China regional endpoint) https://iaas-cns-download.s3.cn-north-1.jdcloud-oss.com/JdogMonitor/jdog-monitor.exe

  2. Run jdog-monitor.exe with administrator privileges to install.

Feedback

开始与售前顾问沟通

可直接拨打电话 400-098-8505转1

我们的产品专家为您找到最合适的产品/解决⽅案

在线咨询 5*8⼩时

1v1线上咨询获取售前专业咨询

点击咨询
企微服务助手

专业产品顾问,随时随地沟通