Linux Contentless Patching

From V2024.1, a contentless method of Linux patching is being implemented. With this method, the repository for your Linux distribution is the direct source of all patch packages. This means that you have immediate access to all packages, giving you a more efficient and more complete patching mechanism, while maintaining the control and visibility of patching that Security Controls brings.

How do I migrate?

We recommend the following strategy to gain confidence in contentless patching for Linux:

1. Deploy patches to your test machines using the existing patch task, then re-examine the Health column in the Machine View.
2. Create or update an agent policy that includes a Linux Patch Task with the Deployments option disabled.
   This creates a scan all task using the new contentless functionality.
3. Install the agent with the new policy on your test Linux machines.
   A scan runs automatically after the engine installation.
4. After the scan has completed, check the Health column.
   Notice that new vulnerabilities have been discovered.
5. Enable the Deployments option in the new contentless patch task, and re-deploy patches.
6. Check the Health column again.
   The vulnerabilities have been remediated.