CN106970811A - A kind of patch file installation method and its equipment - Google Patents
A kind of patch file installation method and its equipment Download PDFInfo
- Publication number
- CN106970811A CN106970811A CN201710138456.8A CN201710138456A CN106970811A CN 106970811 A CN106970811 A CN 106970811A CN 201710138456 A CN201710138456 A CN 201710138456A CN 106970811 A CN106970811 A CN 106970811A
- Authority
- CN
- China
- Prior art keywords
- patch
- installation
- service server
- information
- file
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/61—Installation
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Stored Programmes (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The embodiment of the present invention discloses a kind of patch file installation method and its equipment, and wherein method includes：The patch URL obtained in the patch bulletin updated in advance in the patch information for updating patch, and the patch information based on the renewal patch obtains the installation file for updating patch；Obtain the patch information of mounted first patch of each service server in service server group, and the patch information and the patch information of the renewal patch according to first patch obtain the patch information of uninstalled second patch in each service server respectively；The installation file of corresponding second patch of patch information of second patch is obtained in the installation file of the renewal patch, and uses the installation file of second patch to carry out the patch installation process of the second patch to each service server.Using the present invention, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.
Description
Technical field
The present invention relates to Internet technical field, more particularly to a kind of patch file installation method and its equipment.
Background technology
Data center is made up of service server group, including the service server of magnanimity, and these service servers
The operating system of installation is usually the Windows operating system of Microsoft.Microsoft would generally regularly issue on
The patch bulletin of Windows operating system, in order to improve the security of data center, after Microsoft's issue patch bulletin,
Each service server of data center needs to install corresponding patch to repair the leak of the operating system.
At present, the patch for magnanimity Windows servers is installed many using Windows more new demand servicing (Windows
Server Update Services, WSUS), generally service server is installed before patch, it is necessary to manage each business service
The patch information for the patch that device has been installed, so that it is determined that the patch information of patch to be mounted is needed, and WSUS takes for magnanimity
The patch management of business device can only be realized carries out patch state monitoring to the service server normally accessed, can not but cover all
Service server, so as to reduce patch installation effectiveness.
The content of the invention
The embodiment of the present invention provides a kind of patch file installation method and its equipment, enriches the benefit of magnanimity service server
Fourth mounting means, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.
First aspect of the embodiment of the present invention provides a kind of patch file installation method, it may include：
The patch information for updating patch is obtained in the patch bulletin updated in advance, and based on the patch of the renewal patch
Patch URL (Uniform Resource Locator, URL) in information obtains the peace for updating patch
Fill file；
The patch information of mounted first patch of each service server in service server group is obtained, and according to institute
State the patch information of the first patch and the patch information of the renewal patch obtains do not pacify in each service server respectively
The patch information of second patch of dress；
The patch information corresponding described second that second patch is obtained in the installation file of the renewal patch is mended
The installation file of fourth, and use the installation file of second patch to carry out the benefit of the second patch to each service server
Fourth installation process.
Second aspect of the embodiment of the present invention provides a kind of patch file and installs equipment, it may include：
File acquisition module, the patch information of patch is updated for being obtained in the patch bulletin updated in advance, and is based on
Patch URL in the patch information for updating patch obtains the installation file for updating patch；
Data obtaining module, for obtaining mounted first patch of each service server in service server group
Patch information, and patch information and the patch information of the renewal patch according to first patch obtains described each respectively
The patch information of uninstalled second patch in service server；
Patch installs module, the patch information for obtaining second patch in the installation file of the renewal patch
The installation file of corresponding second patch, and the installation file of second patch is used to each service server
Carry out the patch installation process of the second patch.
In embodiments of the present invention, the patch information in being announced by the patch updated in advance obtains the installation for updating patch
File, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, corresponding installation file in the installation file for updating patch is respectively adopted patch installation is carried out to each service server
Processing.It is managed by the patch information to each service server in service server group, enriches magnanimity business service
The patch mounting means of device, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.
Brief description of the drawings
In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing
There is the accompanying drawing used required in technology description to be briefly described, it should be apparent that, drawings in the following description are only this
Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with
Other accompanying drawings are obtained according to these accompanying drawings.
Fig. 1 is a kind of schematic flow sheet of patch file installation method provided in an embodiment of the present invention；
Fig. 2 is a kind of interface schematic diagram of patch information provided in an embodiment of the present invention；
Fig. 3 is the schematic flow sheet of another patch file installation method provided in an embodiment of the present invention；
Fig. 4 is a kind of interface schematic diagram of patch installation status provided in an embodiment of the present invention；
Fig. 5 is the structural representation that a kind of patch file provided in an embodiment of the present invention installs equipment；
Fig. 6 is the structural representation for the patch installation module that patch file provided in an embodiment of the present invention installs equipment；
Fig. 7 is the structural representation that another patch file provided in an embodiment of the present invention installs equipment；
Fig. 8 is the structural representation that another patch file provided in an embodiment of the present invention installs equipment.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete
Site preparation is described, it is clear that described embodiment is only a part of embodiment of the invention, rather than whole embodiments.It is based on
Embodiment in the present invention, it is every other that those of ordinary skill in the art are obtained under the premise of creative work is not made
Embodiment, belongs to the scope of protection of the invention.
Patch file installation method provided in an embodiment of the present invention can apply to the larger Windows of server data amount
The scene that system mend is installed, the installation text for updating patch is obtained by the patch information in the patch bulletin updated in advance
Part, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, is respectively adopted corresponding installation file in the installation file for updating patch and carries out patch installation place to each service server
Reason.It is managed by the patch information to each service server in service server group, enriches magnanimity service server
Patch mounting means, the patch file for covering all service servers can be in batches installed, patch installation effectiveness is lifted.
The present embodiments relate to patch file installation method execution depend on computer program, can based on patch text
Part is installed equipment and run on the computer system of Feng Ruoyiman systems.The patch file, which installs equipment, can include having depositing
The server of the functions such as storage, calculating and test, can also include tablet personal computer, personal computer (PC), smart mobile phone, palm
The terminal device such as computer and mobile internet device (MID).It can pass through the modes such as internet, wireless network and the present invention
Service server in embodiment is communicated.
Below in conjunction with accompanying drawing 1- accompanying drawings 4, patch file installation method provided in an embodiment of the present invention is situated between in detail
Continue.
Fig. 1 is referred to, is that the embodiments of the invention provide a kind of schematic flow sheet of patch file installation method.Such as Fig. 1
Shown, the methods described of the embodiment of the present invention may comprise steps of S101- steps S103.
S101, obtains the patch information for updating patch in the patch bulletin updated in advance, and based on the renewal patch
Patch information in patch URL obtain it is described update patch installation file；
Specifically, patch file installs equipment obtains the patch information for updating patch in the patch bulletin updated in advance,
It is understood that the patch information for updating patch is the patch information announced during monthly newest patch is announced, business
These patch informations are entered into the database (PATHINFO DB) of storage patch information by personnel in time, when patch file peace
Installing is for when detecting typing information, and the URL based on patch downloads patch installation file.The patch information includes patch title
(such as KB2619339), applicable operating system, patch severity level, installation duration, patch URL.
Wherein, the URL, it is to be understood that for the character string of description information resource, refers to standard resource on internet
Address, each file has a unique URL, therefore corresponding file can be obtained by URL.URL can use one kind
Unified form describes various information resources, including agreement (or being method of service), the host IP address for having the resource
(also including port numbers or server name sometimes) and the specific address of host resource, such as catalogue and filename.Agreement
Used between host IP address ":// " symbol is separated, and separated between host IP address and resource specific address with "/" symbol.
Therefore, it can be described as following form：scheme://host:Port/path, such as http：//www.sohu.com/domain/
HXWZ.Wherein, the most frequently used agreement is HTTP (Hypertext Transfer Protocol, HTTP), can be with
For accessing network.Other agreements, the HTTP (Hyper such as transmitted with security socket layer can also be included
Text Transfer Protocol over Secure Socket Layer, HTTPS), FTP (File
Transfer Protocol, FTP) etc..
For example, being illustrated in figure 2 the patch information in typing PATHINFO DB.Including patch number, system designator code,
Patch URL, the information such as severity level, estimated time-consuming and download state.After patch information is entered into PATHINFO DB,
Patch file installs equipment and is automatically performed patch download according to the URL of typing patch, so as to obtain the installation file of patch.
S102, obtains the patch information of mounted first patch of each service server in service server group, and
Each service server is obtained according to the patch information of the patch information of first patch and the renewal patch respectively
In uninstalled second patch patch information；
Specifically, the patch letter for obtaining mounted first patch of each service server in service server group
Breath, it is to be understood that for supporting all service servers of same target service to be referred to as service server group (in data
The heart), the service server group includes at least one service server.It is fitted with each service server identical or not
Same patch, because each service server can in real time or periodically report the patch information of mounted patch, therefore,
Information is reported to understand the patch installation situation in each service server by service server.Wherein, each business is taken
The patch that business device has currently been installed is as the first patch.
In specific embodiment, believed by the patch for obtaining the first patch of each service server in service server group
Breath, then the first patch of acquisition is compared with updating patch, so that it is determined that uninstalled in each service server mend
Fourth, regard the uninstalled patch as the second patch.
S103, obtains the patch information corresponding described the of second patch in the installation file of the renewal patch
The installation file of two patches, and the second patch is carried out to each service server using the installation file of second patch
Patch installation process.
Specifically, it is determined that after the second patch (needing patch to be mounted) of each service server, patch file is installed
Equipment obtains the patch installation file for the patch installed needed for each server, so respectively in the patch installation file of download
After call file distributing interface correspondence to be distributed to each service server, mended with controlling each service server to carry out second
The patch installation process of fourth.Wherein, each service server of control carries out the patch installation process of the second patch, Ke Yili
Solution, patch file installs equipment by calling the interface that effect dispatching platform (JOB) and configuration management platform (CC) are provided,
Patch perform script is pushed into corresponding server to control each server to complete the installation of the second patch.
In embodiments of the present invention, the patch information in being announced by the patch updated in advance obtains the installation for updating patch
File, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, corresponding installation file in the installation file for updating patch is respectively adopted patch installation is carried out to each service server
Processing.It is managed by the patch information to each service server in service server group, enriches magnanimity business service
The patch mounting means of device, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.
Fig. 3 is referred to, is that the embodiments of the invention provide the schematic flow sheet of another patch file installation method.As schemed
Shown in 2, the methods described of the embodiment of the present invention may comprise steps of S201- steps S207.
S201, obtains the patch information for updating patch in the patch bulletin updated in advance, and based on the renewal patch
Patch information in patch URL obtain it is described update patch installation file；
Specifically, patch file installs equipment obtains the patch information for updating patch in the patch bulletin updated in advance,
It is understood that the patch information for updating patch is the patch information announced during monthly newest patch is announced, business
These patch informations are entered into the database (PATHINFO DB) of storage patch information by personnel in time, when patch file peace
Installing is for when detecting typing information, and the URL based on patch downloads patch installation file.The patch information includes patch title
(such as KB2619339), applicable operating system, patch severity level, installation duration, patch URL.
Wherein, the URL, it is to be understood that for the character string of description information resource, refers to standard resource on internet
Address, each file has a unique URL, therefore corresponding file can be obtained by URL.URL can use one kind
Unified form describes various information resources, including agreement (or being method of service), the host IP address for having the resource
(also including port numbers or server name sometimes) and the specific address of host resource, such as catalogue and filename.Agreement
Used between host IP address ":// " symbol is separated, and separated between host IP address and resource specific address with "/" symbol.
Therefore, it can be described as following form：scheme://host:Port/path, such as http：//www.sohu.com/domain/
HXWZ.Wherein, the most frequently used agreement is HTTP, can be for access network.Other agreements, such as HTTPS, FTP can also be included
Deng.
For example, being illustrated in figure 2 the patch information in typing PATHINFO DB.Including patch number, system designator code,
The information such as patch URL, severity level, estimated time-consuming and download state.After patch information is entered into PATHINFO DB,
Patch file installs equipment and is automatically performed patch download according to the URL of typing patch, so as to obtain the installation file of patch.
S202, the installation file to the renewal patch carries out installation test；
Specifically, after the more installation file of row patch is downloaded, patch file installs equipment and the installation file is entered respectively
Row test, such as test the installation file whether can with normal mounting, install after whether need to restart system, the installation of each file
Duration is to be supplied to business personnel to estimate that corresponding server withdraws duration etc..In embodiments of the present invention, perform to installing text
Part install the operation of test.
S203, judges whether the installation file of the renewal patch can normal mounting；
S204, if so, then obtaining the patch of mounted first patch of each service server in service server group
Information, and patch information and the patch information of the renewal patch according to first patch obtains each business respectively
The patch information of uninstalled second patch in server；
Specifically, the patch letter for obtaining mounted first patch of each service server in service server group
Breath, it is to be understood that for supporting all service servers of same target service to be referred to as service server group, business clothes
Business device group includes at least one service server.Identical or different patch is fitted with each service server, by
The patch information of mounted patch can in real time or be periodically reported in each service server, therefore, is taken by business
The patch installation situation reported in each service server knowable to information of business device.Wherein, it is each service server is current
Patch through installation is used as the first patch.
In specific embodiment, believed by the patch for obtaining the first patch of each service server in service server group
Breath, then the first patch of acquisition is compared with updating patch, so that it is determined that uninstalled in each service server mend
Fourth, regard the uninstalled patch as the second patch.
For example, the first patch installed in existing business server A, B, C, wherein A includes patch 1,2,3；Installed in B
First patch includes patch 1,5,6,7,8；The first patch installed in C includes patch 1,3,5,7, and updating patch includes patch
1~10, determine that the second patch is patch 4~10 in A by comparing, the second patch is the in patch 2,3,4,8,9,10, C in B
Two patches are 2,4,6,8,9,10.
Optionally, if there is the patch installation file of part or all of abnormal mounting in test result, these are mended extremely
Fourth installation file is abandoned, and re-downloads installation file according to the URL of patch, and is detected again, until getting test result
For can be untill normal mounting.
Further, if repeatedly result is still abnormal after test, abnormal mounting prompt message is generated, with prompt service personnel
Carry out detection investigation.
S205, obtains the patch information corresponding described the of second patch in the installation file of the renewal patch
The installation file of two patches, corresponding service server is distributed to by the second patch installation file；
Specifically, according to the patch information of the second patch of each service server of determination, by calling file distributing
The installation file updated in patch is distributed to corresponding service server by interface respectively.
For example, the result in S204, the installation file of patch 4~10 is sent to A, mend by file distributing interface
The installation file of fourth 2,3,4,8,9,10 sends to B, and the installation file of patch 2,4,6,8,9,10 and sent to C.
S206, when receiving patch installation triggering command, obtains the patch installation script of each service server respectively,
And send the patch installation script to each service server, to control each service server to carry out second
The patch installation process of patch；
Specifically, the patch that receives installs triggering command, it is to be understood that business personnel triggers to generate manually
Triggering command, or performed according to automatic triggering is pre-configured with.
In specific implementation, due to each service server need patch installation file to be mounted different or system version,
The difference of running environment etc., then corresponding patch installation script be also not quite similar, therefore, receiving patch install triggering command
When, the corresponding patch installation script of the server is generated, and sent by default interface function to service server, to control
Patch installation script is performed on service server, script realizes that patch is installed by calling system wuauserv services.
Optionally, before the patch installation script that each service server is obtained respectively, in addition to：
The server info of each service server is obtained, the server info includes IP address, operating system version
Information, type of service and installation environment.
Further, the patch installation script that each service server is obtained respectively, including：
The patch installation script of the corresponding each service server of the server info is obtained respectively.
S207, receives the patch mount message that each service server is reported, and using the regular exhibition of default displaying
Show the patch mount message.
Specifically, described report reports and triggering property reports two ways including periodicity, the information reported can be wrapped
Include the IP address of service server, the patch state of mounted patch and on call time.Wherein, patch file installs equipment
Can be according to each business service recorded in patch information and CC all in the information, PATHINFO DB that periodically report
System type of device etc. calculate each service server need patch quantity to be mounted and shared by uninstalled patch hundred
Divide the information such as ratio, and store the information into PATHINFO DB for form displaying, alarm email notice and safe work order
Create etc..It is before service server carries out patch installation, currently most accurately to have pacified to obtain and triggering property is reported
The patch information of the patch of dress and perform.To avoid the occurrence of if server is after firm execution cycle property is reported, server is carried out
System refitting causes the generation of having installed situations such as patch information does not upgrade in time that platform is recorded.Simultaneously in service server
Complete after patch installation, triggering property reports a patch status information to update the record of the patch in CC immediately again for meeting.
In specific implementation, after patch file, which installs equipment, receives the patch information reported, patch information is united
Meter, storage, and be shown, so that business personnel analyzes, detected the patch state of each service server.Wherein it is possible to pre-
If displaying rule displaying patch information, such as list, chart.
By taking chart as an example, Fig. 4 illustrates the statistics knot according to " A applications " patch information in latest patch advertisement data storehouse
Really, total patch number, mounted patch number, the ratio shared by mounted patch number are respectively described and is not being mended in the same time
The information such as the health status of fourth, by this bandwagon effect, clearly show patch information, realize that patch state is monitored.
In embodiments of the present invention, the patch information in being announced by the patch updated in advance obtains the installation for updating patch
File, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, corresponding installation file in the installation file for updating patch is respectively adopted patch installation is carried out to each service server
Processing.It is managed by the patch information to each service server in service server group, enriches magnanimity business service
The patch mounting means of device, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.Separately
Outside, patch status information is shown using default bandwagon effect, enriches information exhibition method, can by this bandwagon effect
To realize the real-time monitoring to patch state, reduce to patch management and the complexity safeguarded.
Below in conjunction with accompanying drawing 5, equipment is installed to patch file provided in an embodiment of the present invention and described in detail.Need
Illustrate, the patch file installation equipment shown in accompanying drawing 5, the method for performing Fig. 1 of the present invention and embodiment illustrated in fig. 3,
For convenience of description, the part related to the embodiment of the present invention is illustrate only, particular technique details is not disclosed, refer to this hair
Embodiment shown in bright Fig. 1 and Fig. 3.
Fig. 5 is referred to, is that the embodiments of the invention provide the structural representation that a kind of patch file installs equipment.Such as Fig. 5
Shown, the patch file of the embodiment of the present invention, which installs equipment 1, to be included：File acquisition module 11, data obtaining module
12 and patch install module 13.
File acquisition module 11, the patch information of patch, and base are updated for being obtained in the patch bulletin updated in advance
Patch URL in the patch information of the renewal patch obtains the installation file for updating patch；
Specifically, file acquisition module 11 obtains the patch information for updating patch in the patch bulletin updated in advance, can
With understanding, the patch information for updating patch is the patch information announced during monthly newest patch is announced, business people
These patch informations are entered into the database (PATHINFO DB) of storage patch information by member in time, when file acquisition module
11 when detecting typing information, and the URL based on patch downloads patch installation file.The patch information includes patch title (such as
KB2619339), applicable operating system, patch severity level, installation duration, patch URL etc..
Wherein, the URL, it is to be understood that for the character string of description information resource, refers to standard resource on internet
Address, each file has a unique URL, therefore corresponding file can be obtained by URL.URL can use one kind
Unified form describes various information resources, including agreement (or being method of service), the host IP address for having the resource
(also including port numbers or server name sometimes) and the specific address of host resource, such as catalogue and filename.Agreement
Used between host IP address ":// " symbol is separated, and separated between host IP address and resource specific address with "/" symbol.
Therefore, it can be described as following form：scheme://host:Port/path, such as http：//www.sohu.com/domain/
HXWZ.Wherein, the most frequently used agreement is HTTP, can be for access network.Other agreements, such as HTTPS, FTP can also be included
Deng.
For example, being illustrated in figure 2 the patch information in typing PATHINFO DB.Including patch number, system designator code,
Patch URL, the information such as severity level, estimated time-consuming and download state.After patch information is entered into PATHINFO DB,
File acquisition module 11 is automatically performed patch according to the URL of typing patch and downloaded, so as to obtain the installation file of patch.
Data obtaining module 12, mounted first patch for obtaining each service server in service server group
Patch information, and patch information and the patch information of the renewal patch according to first patch obtains described every respectively
The patch information of uninstalled second patch in individual service server；
Specifically, the patch letter for obtaining mounted first patch of each service server in service server group
Breath, it is to be understood that for supporting all service servers of same target service to be referred to as service server group, business clothes
Business device group includes at least one service server.Identical or different patch is fitted with each service server, by
The patch information of mounted patch can in real time or be periodically reported in each service server, therefore, is taken by business
The patch installation situation reported in each service server knowable to information of business device.Wherein, it is each service server is current
Patch through installation is used as the first patch.
In specific embodiment, believed by the patch for obtaining the first patch of each service server in service server group
Breath, then the first patch of acquisition is compared with updating patch, so that it is determined that uninstalled in each service server mend
Fourth, regard the uninstalled patch as the second patch.
Patch installs module 13, the patch letter for obtaining second patch in the installation file of the renewal patch
The installation file of corresponding second patch is ceased, and uses the installation file of second patch to each business service
Device carries out the patch installation process of the second patch.
Specifically, it is determined that after the second patch (needing patch to be mounted) of each service server, patch installs module
13 in the patch installation file of download, the patch installation file for the patch installed needed for each server is obtained respectively, then
File distributing interface correspondence is called to be distributed to each service server, to control each service server to carry out the second patch
Patch installation process.Wherein, each service server of control carries out the patch installation process of the second patch, it is possible to understand that
, patch install module 13 by call effect dispatching platform (JOB) and configuration management platform (CC) offer interface, will mend
Fourth perform script pushes to corresponding server to control each server to complete the installation of the second patch.
Optionally, as shown in fig. 6, patch installation module 13 includes：
File distribution unit 131, specifically for the second patch installation file is distributed into corresponding service server；
Patch installation unit 132, specifically for when receiving patch installation triggering command, each business clothes are obtained respectively
The patch installation script of business device, and the patch installation script is sent to each service server, it is described every to control
Individual service server carries out the patch installation process of the second patch.
Optionally, as shown in fig. 6, patch installation module 13 also includes：
Server info acquiring unit 133, the server info for obtaining each service server, the server letter
Breath includes IP address, operating system version information, type of service and installation environment.
Optionally, the patch installation unit 132 specifically for：
When receiving patch installation triggering command, the corresponding each service server of the server info is obtained respectively
Patch installation script, and the patch installation script is sent to each service server, to control each industry
Business server carries out the patch installation process of the second patch.
Optionally, as shown in fig. 7, the equipment 1 also includes installing test module 14, it is used for：
Installation file to the renewal patch carries out installation test；
Judge whether the installation file of the renewal patch can normal mounting；
If so, then triggering described information acquisition module 12 obtains the installation of each service server in service server group
The first patch patch information.
Specifically, after the more installation file of row patch is downloaded, installing 14 pairs of installation files of test module and carrying out respectively
Test, such as test the installation file whether can with normal mounting, install after whether need to restart system, the installation of each file when
It is long to be supplied to what business personnel estimated corresponding server to withdraw duration etc..In embodiments of the present invention, perform to installation file
Install the operation of test.
Optionally, as shown in fig. 7, the equipment 1 also includes information display module 15, it is used for：
The patch mount message that each service server is reported is received, and it is described using default displaying rule displaying
Patch mount message.
Specifically, described report reports and triggering property reports two ways including periodicity, the information reported can be wrapped
Include the IP address of service server, the patch state of mounted patch and on call time.Wherein, information display module 15 can
According to each service server recorded in patch information and CC all in the information, PATHINFO DB periodically reported
System type etc. calculate each service server and need patch quantity to be mounted and the percentage shared by uninstalled patch
Than etc. information, and store the information into PATHINFO DB be used for form displaying, alarm email notify and safe work order wound
Build.It is before service server carries out patch installation, currently most accurately to have been installed to obtain and triggering property is reported
Patch patch information and perform.To avoid the occurrence of if server is after firm execution cycle property is reported, server is carried out
System refitting causes the generation for having installed situations such as patch information does not upgrade in time that platform is recorded.It is simultaneously complete in service server
After being installed into patch, triggering property reports a patch status information to update the record of the patch in CC immediately again for meeting.
In specific implementation, after information display module 15 receives the patch information reported, patch information is counted,
Storage, and be shown, so that business personnel analyzes, detected the patch state of each service server.Wherein it is possible to default
Displaying rule displaying patch information, such as list, chart.
By taking chart as an example, Fig. 4 illustrates the statistics knot according to " A applications " patch information in latest patch advertisement data storehouse
Really, total patch number, mounted patch number, the ratio shared by mounted patch number are respectively described and is not being mended in the same time
The information such as the health status of fourth, by this bandwagon effect, clearly show patch information, realize that patch state is monitored.
In embodiments of the present invention, the patch information in being announced by the patch updated in advance obtains the installation for updating patch
File, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, corresponding installation file in the installation file for updating patch is respectively adopted patch installation is carried out to each service server
Processing.It is managed by the patch information to each service server in service server group, enriches magnanimity business service
The patch mounting means of device, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.Separately
Outside, patch status information is shown using default bandwagon effect, enriches information exhibition method, can by this bandwagon effect
To realize the real-time monitoring to patch state, reduce to patch management and the complexity safeguarded.
Fig. 8 is referred to, is that the embodiments of the invention provide the structural representation that another patch file installs equipment.As schemed
Shown in 8, the patch file, which installs equipment 1000, to be included：At least one processor 1001, such as CPU, at least one net
Network interface 1004, user interface 1003, memory 1005, at least one communication bus 1002.Wherein, communication bus 1002 is used for
Realize the connection communication between these components.Wherein, user interface 1003 can include display screen (Display), keyboard
(Keyboard), optional user interface 1003 can also include wireline interface, the wave point of standard.Network interface 1004 is optional
Can include wireline interface, the wave point (such as WI-FI interfaces) of standard.Memory 1005 can be high-speed RAM memory,
Can also be non-labile memory (non-volatile memory), for example, at least one magnetic disk storage.Memory
1005 optionally can also be at least one storage device for being located remotely from aforementioned processor 1001.As shown in figure 8, as a kind of
Operating system, network communication module, Subscriber Interface Module SIM and benefit can be included in the memory 1005 of computer-readable storage medium
Fourth file installs application program.
In the patch file shown in Fig. 8 installs equipment 1000, user interface 1003 is mainly used in providing the user input
Interface, obtain user input data；Network interface 1004 is mainly used in entering row data communication with user terminal；And processor
1001 can be used for calling the patch file stored in memory 1005 to install application program, and specifically perform following operate：
The patch information for updating patch is obtained in the patch bulletin updated in advance, and based on the patch of the renewal patch
Patch URL in information obtains the installation file for updating patch；
The patch information of mounted first patch of each service server in service server group is obtained, and according to institute
State the patch information of the first patch and the patch information of the renewal patch obtains do not pacify in each service server respectively
The patch information of second patch of dress；
The patch information corresponding described second that second patch is obtained in the installation file of the renewal patch is mended
The installation file of fourth, and use the installation file of second patch to carry out the benefit of the second patch to each service server
Fourth installation process.
In one embodiment, patch of the processor 1001 in the patch information based on the renewal patch is performed
URL is obtained after the installation file for updating patch, also performs following operate：
Installation file to the renewal patch carries out installation test；
Judge whether the installation file of the renewal patch can normal mounting；
If so, then performing the benefit of mounted first patch of each service server in the acquisition service server group
The step of fourth information.
In one embodiment, the processor 1001 also performs following operation：
The patch mount message that each service server is reported is received, and it is described using default displaying rule displaying
Patch mount message.
In one embodiment, the processor 1001 is performing the installation file using second patch to described every
It is specific to perform following operate when individual service server carries out the patch installation process of the second patch：
The second patch installation file is distributed to corresponding service server；
When receiving patch installation triggering command, the patch installation script of each service server is obtained respectively, and will
The patch installation script is sent to each service server, to control each service server to carry out the second patch
Patch installation process.
In one embodiment, the processor 1001 obtains the patch installation foot of each service server in execution respectively
Before this, following operate also is performed：
The server info of each service server is obtained, the server info includes IP address, operating system version
Information, type of service and installation environment.
In one embodiment, the processor 1001 obtains the patch installation foot of each service server in execution respectively
It is this when, specific to perform following operate：
The patch installation script of the corresponding each service server of the server info is obtained respectively.
In embodiments of the present invention, the patch information in being announced by the patch updated in advance obtains the installation for updating patch
File, it is then determined that each service server needs the patch information of patch to be mounted in service server group, based on the determination
Information, corresponding installation file in the installation file for updating patch is respectively adopted patch installation is carried out to each service server
Processing.It is managed by the patch information to each service server in service server group, enriches magnanimity business service
The patch mounting means of device, the patch file for covering all service servers can be installed in batches, lift patch installation effectiveness.Separately
Outside, patch status information is shown using default bandwagon effect, enriches information exhibition method, can by this bandwagon effect
To realize the real-time monitoring to patch state, reduce to patch management and the complexity safeguarded.
One of ordinary skill in the art will appreciate that realize all or part of flow in above-described embodiment method, being can be with
The hardware of correlation is instructed to complete by computer program, described program can be stored in a computer read/write memory medium
In, the program is upon execution, it may include such as the flow of the embodiment of above-mentioned each method.Wherein, described storage medium can be magnetic
Dish, CD, read-only memory (Read-Only Memory, ROM) or random access memory (Random Access
Memory, RAM) etc..
Above disclosure is only preferred embodiment of present invention, can not limit the right model of the present invention with this certainly
Enclose, therefore the equivalent variations made according to the claims in the present invention, still belong to the scope that the present invention is covered.
Claims (12)
1. a kind of patch file installation method, it is characterised in that including：
The patch information for updating patch is obtained in the patch bulletin updated in advance, and based on the patch information of the renewal patch
In patch uniform resource position mark URL obtain it is described update patch installation file；
Obtain the patch information of mounted first patch of each service server in service server group, and according to described the
The patch information of one patch and the patch information of the renewal patch obtain uninstalled in each service server respectively
The patch information of second patch；
Corresponding second patch of patch information of second patch is obtained in the installation file of the renewal patch
Installation file, and the patch of the second patch of each service server progress is pacified using the installation file of second patch
Dress processing.
2. the method as described in claim 1, it is characterised in that the patch in the patch information based on the renewal patch
URL is obtained after the installation file for updating patch, in addition to：
Installation file to the renewal patch carries out installation test；
Judge whether the installation file of the renewal patch can normal mounting；
If so, then performing the patch letter of mounted first patch of each service server in the acquisition service server group
The step of breath.
3. the method as described in claim 1, it is characterised in that methods described also includes：
The patch mount message that each service server is reported is received, and using the default displaying rule displaying patch
Mount message.
4. the method as described in claim 1, it is characterised in that the installation file using second patch is to described every
Individual service server carries out the patch installation process of the second patch, including：
The second patch installation file is distributed to corresponding service server；
When receiving patch installation triggering command, the patch installation script of each service server is obtained respectively, and will be described
Patch installation script is sent to each service server, to control each service server to carry out the benefit of the second patch
Fourth installation process.
5. method as claimed in claim 4, it is characterised in that the patch installation foot for obtaining each service server respectively
Before this, in addition to：
Obtain the server info of each service server, the server info include IP address, operating system version information,
Type of service and installation environment.
6. method as claimed in claim 5, it is characterised in that the patch installation foot for obtaining each service server respectively
This, including：
The patch installation script of the corresponding each service server of the server info is obtained respectively.
7. a kind of patch file installs equipment, it is characterised in that including：
File acquisition module, the patch information of patch is updated for being obtained in the patch bulletin updated in advance, and based on described
Update the patch URL in the patch information of patch and obtain the installation file for updating patch；
Data obtaining module, the patch for obtaining mounted first patch of each service server in service server group
Information, and patch information and the patch information of the renewal patch according to first patch obtains each business respectively
The patch information of uninstalled second patch in server；
Patch installs module, the patch information correspondence for obtaining second patch in the installation file of the renewal patch
Second patch installation file, and each service server is carried out using the installation file of second patch
The patch installation process of second patch.
8. equipment as claimed in claim 7, it is characterised in that the equipment also includes installing test module, is used for：
Installation file to the renewal patch carries out installation test；
Judge whether the installation file of the renewal patch can normal mounting；
If so, then triggering described information acquisition module obtains mounted first of each service server in service server group
The patch information of patch.
9. equipment as claimed in claim 7, it is characterised in that the equipment also includes information display module, is used for：
The patch mount message that each service server is reported is received, and using the default displaying rule displaying patch
Mount message.
10. equipment as claimed in claim 7, it is characterised in that the patch, which installs module, to be included：
File distribution unit, specifically for the second patch installation file is distributed into corresponding service server；
Patch installation unit, specifically for when receiving patch installation triggering command, each service server is obtained respectively
Patch installation script, and the patch installation script is sent to each service server, to control each business
Server carries out the patch installation process of the second patch.
11. equipment as claimed in claim 10, it is characterised in that the patch, which installs module, also to be included：
Server info acquiring unit, the server info for obtaining each service server, the server info includes
IP address, operating system version information, type of service and installation environment.
12. equipment as claimed in claim 11, it is characterised in that the patch installation unit specifically for：
When receiving patch installation triggering command, the benefit of the corresponding each service server of the server info is obtained respectively
Fourth installation script, and the patch installation script is sent to each service server, to control each business to take
Business device carries out the patch installation process of the second patch.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710138456.8A CN106970811A (en) | 2017-03-09 | 2017-03-09 | A kind of patch file installation method and its equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710138456.8A CN106970811A (en) | 2017-03-09 | 2017-03-09 | A kind of patch file installation method and its equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106970811A true CN106970811A (en) | 2017-07-21 |
Family
ID=59329273
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710138456.8A Pending CN106970811A (en) | 2017-03-09 | 2017-03-09 | A kind of patch file installation method and its equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106970811A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107562485A (en) * | 2017-07-31 | 2018-01-09 | 北京北信源软件股份有限公司 | A kind of method and device of automatic data collection patch data |
| CN109446161A (en) * | 2018-10-18 | 2019-03-08 | 网易（杭州）网络有限公司 | Information monitoring method, device, electronic equipment and storage medium |
| CN110489154A (en) * | 2019-06-25 | 2019-11-22 | 广州嘉为科技有限公司 | A kind of method for repairing and mending based on windows operating system patch |
| CN111857778A (en) * | 2020-07-17 | 2020-10-30 | 北京北信源软件股份有限公司 | Automatic installation method and system for Windows 7 extended security update |
| CN112947982A (en) * | 2021-03-01 | 2021-06-11 | 中国建设银行股份有限公司 | Patching method and related equipment thereof |
| CN115470495A (en) * | 2022-09-07 | 2022-12-13 | 北京沃东天骏信息技术有限公司 | Patch management method and device |
| CN115729595A (en) * | 2022-11-23 | 2023-03-03 | 浪潮通用软件有限公司 | Patch update method and device, medium, and equipment in cluster mode |
| CN116243938A (en) * | 2023-03-30 | 2023-06-09 | 中国工商银行股份有限公司 | Patch installation method, device, processor and electronic equipment |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN202758343U (en) * | 2012-04-20 | 2013-02-27 | 华东电网有限公司富春江水力发电厂 | Intranet operating system upgrading device |
| CN103413083A (en) * | 2013-08-15 | 2013-11-27 | 水利部水利信息中心 | Security defending system for single host |
| US20140359603A1 (en) * | 2013-05-30 | 2014-12-04 | The Boeing Company | Deployment of software across an enterprise system |
| CN105138920A (en) * | 2015-07-30 | 2015-12-09 | 浪潮电子信息产业股份有限公司 | A method for implementing security management of intranet terminals |
| CN105357318A (en) * | 2015-12-08 | 2016-02-24 | 浪潮电子信息产业股份有限公司 | A Design Method of Intranet Patch Distribution Management System |
| US9483248B2 (en) * | 2014-07-15 | 2016-11-01 | Oracle International Corporation | Automatic generation and execution of server update processes |
-
2017
- 2017-03-09 CN CN201710138456.8A patent/CN106970811A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN202758343U (en) * | 2012-04-20 | 2013-02-27 | 华东电网有限公司富春江水力发电厂 | Intranet operating system upgrading device |
| US20140359603A1 (en) * | 2013-05-30 | 2014-12-04 | The Boeing Company | Deployment of software across an enterprise system |
| CN103413083A (en) * | 2013-08-15 | 2013-11-27 | 水利部水利信息中心 | Security defending system for single host |
| US9483248B2 (en) * | 2014-07-15 | 2016-11-01 | Oracle International Corporation | Automatic generation and execution of server update processes |
| CN105138920A (en) * | 2015-07-30 | 2015-12-09 | 浪潮电子信息产业股份有限公司 | A method for implementing security management of intranet terminals |
| CN105357318A (en) * | 2015-12-08 | 2016-02-24 | 浪潮电子信息产业股份有限公司 | A Design Method of Intranet Patch Distribution Management System |
Non-Patent Citations (4)
| Title |
|---|
| CICNAVI: "https://www.utilizewindows.com/introduction-to-windows-server-update-services-wsus/", 《INTRODUCTION TO WINDOWS SERVER UPDATE SERVICES(WSUS)》 * |
| JARROD: "https://www.rootusers.com/configure-wsus-reporting-in-windows-server-2016/", 《CONFIGURE WSUS REPORTING IN WINDOWS SERVER 2016》 * |
| JOHN O"NEILL SR.: "https://www.petri.com/manage-windows-updates-with-powershell-module", 《MANAGING WINDOWS UPDATES WITH POWERSHELL》 * |
| TECHNET.MICROSOFT.COM: "https://gallery.technet.microsoft.com/scriptcenter/site/search?f%5B0%5D.Type=RootCategory&f%5B0%5D.Value=windowsupdate&f%5B0%5D.T%E2%80%A6%00%00", 《SCRIPT RESOURCES FOR IT PROFESSIONALS》 * |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107562485A (en) * | 2017-07-31 | 2018-01-09 | 北京北信源软件股份有限公司 | A kind of method and device of automatic data collection patch data |
| CN107562485B (en) * | 2017-07-31 | 2021-03-02 | 北京北信源软件股份有限公司 | Method and device for automatically collecting patch data |
| CN109446161A (en) * | 2018-10-18 | 2019-03-08 | 网易（杭州）网络有限公司 | Information monitoring method, device, electronic equipment and storage medium |
| CN110489154A (en) * | 2019-06-25 | 2019-11-22 | 广州嘉为科技有限公司 | A kind of method for repairing and mending based on windows operating system patch |
| CN111857778A (en) * | 2020-07-17 | 2020-10-30 | 北京北信源软件股份有限公司 | Automatic installation method and system for Windows 7 extended security update |
| CN112947982A (en) * | 2021-03-01 | 2021-06-11 | 中国建设银行股份有限公司 | Patching method and related equipment thereof |
| CN115470495A (en) * | 2022-09-07 | 2022-12-13 | 北京沃东天骏信息技术有限公司 | Patch management method and device |
| CN115729595A (en) * | 2022-11-23 | 2023-03-03 | 浪潮通用软件有限公司 | Patch update method and device, medium, and equipment in cluster mode |
| CN116243938A (en) * | 2023-03-30 | 2023-06-09 | 中国工商银行股份有限公司 | Patch installation method, device, processor and electronic equipment |
| CN116243938B (en) * | 2023-03-30 | 2025-12-23 | 中国工商银行股份有限公司 | Patch installation method and device, processor and electronic equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106970811A (en) | A kind of patch file installation method and its equipment | |
| EP2989543B1 (en) | Method and device for updating client | |
| US11334338B2 (en) | Operating system update management | |
| CN110149409B (en) | Cloud host metadata service management method, system, equipment and storage medium | |
| US9886256B2 (en) | Application download and link correlation | |
| CN112860277A (en) | Software deployment method, device and computer readable storage medium | |
| CN106911729A (en) | A kind of operating system remote installation method suitable for domestic processor | |
| CN110149298A (en) | A method and device for hijacking detection | |
| EP2546742A1 (en) | Method and device for upgrading cpe | |
| CN108268272A (en) | Patch update method and device based on WSUS | |
| CN111984520A (en) | Buried point testing method, computer device and computer-readable storage medium | |
| CN110109684A (en) | Block chain node administration agent services installation method, electronic device and storage medium | |
| CN104640105A (en) | Method and system for mobile phone virus analyzing and threat associating | |
| CN104504587A (en) | Advertisement monitoring method and device, electronic apparatus | |
| CN110069925A (en) | Software monitors method, system and computer readable storage medium | |
| CN111045695A (en) | WebLogic middleware deployment device, method, equipment and medium | |
| US9424552B2 (en) | Managing website registrations | |
| CN114238036A (en) | Method and device for monitoring abnormity of SAAS (software as a service) platform in real time | |
| US10394534B2 (en) | Framework for flexible logging of development environment deployment | |
| EP4163863A1 (en) | Program, information processing method, and information processing device | |
| KR102198789B1 (en) | Server for generating integrated usage log data and operating method thereof | |
| CN113127851B (en) | Data collection method and device | |
| CN102281326A (en) | Data automatically synchronizing and updating method based on WEB server procedures | |
| CN115543423B (en) | A method, apparatus, device and storage medium for generating benchmarks | |
| KR102368826B1 (en) | Cloud Server And Method of Thereof |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170721 |
|
| RJ01 | Rejection of invention patent application after publication |