Description

Ensure Public Cloud instances run operating system versions that are still supported by their vendor and receive security updates. Instances on end-of-life versions, such as old Ubuntu, Debian, CentOS, or Windows Server releases, should be upgraded or rebuilt on a supported image.

Rationale

End-of-life operating systems no longer receive security patches, so new vulnerabilities stay open forever and are actively targeted by attackers. Running supported versions makes sure the instance can be patched and reduces the risk of compromise.

Impact

  • Instances keep receiving security patches

  • Reduces exposure to known vulnerabilities

  • Upgrading or rebuilding may require downtime and testing

Default Value

Instances keep the image they were created with. OVHcloud does not upgrade the operating system of running instances.

Pre-Requisites

  • Permission to manage instances in the Public Cloud project

  • A maintenance window and a backup of each instance

Test Plan

  1. Log in to the OVHcloud Control Panel at https://www.ovh.com/manager/.

  2. In the left-hand menu, select Public Cloud and choose your project.

  3. In the left-hand menu, select Instances and review the image (operating system) of each instance.

  4. Compare each version with OVHcloud's image life cycle page and the vendor's support dates.

  5. If any instance runs an end-of-life version, follow the implementation steps.

Implementation Steps

  1. Take a backup of the instance (see the automated backup check).

  2. Upgrade the operating system in place (see OVHcloud's Upgrading your operating system guide), or create a new instance with a supported image and migrate the workload.

  3. Test the application, then delete the old instance if it was replaced.

Backout Plan

  1. Restore the instance from the backup taken before the upgrade.

Reference