AWS Patch Manager 在 Ubuntu 22.04 上失败

Question

更新：\n截至 2023 年 2 月 1 日，我已付款并通过 AWS 开立了票证，这就是回复。请继续等待：

\n

在与 Ubuntu 22.04 补丁管理器方面的内部团队联系时，我们获悉，为补丁管理器添加 Ubuntu 22.04 目前是 \xe2\x80\x9cwork-in-progress\xe2\x80\x9d，并且正在进行中路线图将于近期发布。虽然目前还没有确切的预计到达时间，但您预计会在今年第一季度下半年看到此版本。我建议您密切关注我们的 SSM 文档 [1] 和 What\xe2\x80\x99s 新页面 [2] 以获取最新更新。\n对于由此给您带来的不便，我深表歉意。请耐心等待，SSM 团队将致力于在不久的将来发布此版本。

\n

SSM 文档 - https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-precessions.html \nWhat\xe2\x80\x99s 新增功能 - https://aws.amazon.com/新的/

\n

我已经在升级的 Ubuntu 22.04 主机以及来自官方 AWS - Canonical 映像的干净的新 Ubuntu 22.04 主机上对此进行了测试，并尝试使用 AWS SSM RunPatchBaseLine 修补任一主机失败。

\n

命令的标准输出正在报告：root [错误]：加载入口模块时出错。

\n

标准错误正在报告：“加载修补有效负载时出错，无法运行命令：退出状态 156

\n

/var/log/amazon/ssm/amazon-ssm-agent.log 中失败命令的输出如下所示：

\n

"/usr/bin/python3\n/usr/bin/apt-get\nReading package lists...\nBuilding dependency tree...\nReading state information...\npython3-apt is already the newest version (2.3.0ubuntu2).\n0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.\nUsing python binary: \'python3\'\nUsing Python Version: Python 3.10.4\n/usr/bin/curl\n/usr/bin/wget\n06/10/2022 16:52:49 root [INFO]: Downloading payload from https://s3.dualstack.us-east-2.amazonaws.com/aws-ssm-us-east-2/patchbaselineoperations/linux/payloads/patch-baseline-operations-1.87.tar.gz\n06/10/2022 16:52:49 root [INFO]: Attempting to import entrance file os_selector\n06/10/2022 16:52:49 root [ERROR]: Error loading entrance module.\nTraceback (most recent call last):\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/common_startup_entrance.py\\", line 164, in execute\n    entrance_module = __import__(module_name)\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/os_selector.py\\", line 11, in \\u003cmodule\\u003e\n    import common_os_selector_methods\n  File\\"/var/log/amazon/ssm/patch-baseline-operations/common_os_selector_methods.py\\", line 11, in \\u003cmodule\\u003e\n    from patch_common.baseline_override import load_baseline_override\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/patch_common/baseline_override.py\\", line 6, in \\u003cmodule\\u003e\n    from patch_common.downloader import download_file, load_json_file, is_access_denied\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/patch_common/downloader.py\\", line 1, in \\u003cmodule\\u003e\n    import boto3\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/boto3/__init__.py\\", line 16, in \\u003cmodule\\u003e\n    from boto3.session import Session\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/boto3/session.py\\", line 17, in \\u003cmodule\\u003e\n    import botocore.session\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/session.py\\", line 29, in \\u003cmodule\\u003e\n    import botocore.configloader\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/configloader.py\\", line 19, in \\u003cmodule\\u003e\n    from botocore.compat import six\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/compat.py\\", line 25, in \\u003cmodule\\u003e\n    from botocore.exceptions import MD5UnavailableError\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/exceptions.py\\", line 15, in \\u003cmodule\\u003e\n    from botocore.vendored import requests\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/__init__.py\\", line 58, in \\u003cmodule\\u003e\n    from . import utils\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/utils.py\\", line 26, in \\u003cmodule\\u003e\n    from .compat import parse_http_list as _parse_list_header\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/compat.py\\", line 7, in \\u003cmodule\\u003e\n    from .packages import chardet\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/__init__.py\\", line 3, in \\u003cmodule\\u003e\n    from . import urllib3\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/__init__.py\\", line 10, in \\u003cmodule\\u003e\n    from .connectionpool import (\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/connectionpool.py\\", line 38, in \\u003cmodule\\u003e\n    from .response import HTTPResponse\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/response.py\\", line 9, in \\u003cmodule\\u003e\n    from ._collections import HTTPHeaderDict\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/_collections.py\\", line 1, in \\u003cmodule\\u003e\n    from collections import Mapping, MutableMapping\nImportError: cannot import name \'Mapping\' from \'collections\' (/usr/lib/python3.10/collections/__init__.py)\n06/10/2022 16:52:49 root [ERROR]: cannot import name \'Mapping\' from \'collections\' (/usr/lib/python3.10/collections/__init__.py)\nTraceback (most recent call last):\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/common_startup_entrance.py\\", line 164, in execute\n    entrance_module = __import__(module_name)\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/os_selector.py\\", line 11, in \\u003cmodule\\u003e\n    import common_os_selector_methods\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/common_os_selector_methods.py\\", line 11, in \\u003cmodule\\u003e\n    from patch_common.baseline_override import load_baseline_override\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/patch_common/baseline_override.py\\", line 6, in \\u003cmodule\\u003e\n    from patch_common.downloader import download_file, load_json_file, is_access_denied\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/patch_common/downloader.py\\", line 1, in \\u003cmodule\\u003e\n    import boto3\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/boto3/__init__.py\\", line 16, in \\u003cmodule\\u003e\n    from boto3.session import Session\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/boto3/session.py\\", line 17, in \\u003cmodule\\u003e\n    import botocore.session\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/session.py\\", line 29, in \\u003cmodule\\u003e\n    import botocore.configloader\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/configloader.py\\", line 19, in \\u003cmodule\\u003e\n    from botocore.compat import six\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/compat.py\\", line 25, in\\u003cmodule\\u003e\n    from botocore.exceptions import MD5UnavailableError\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/exceptions.py\\", line 15, in \\u003cmodule\\u003e\n    from botocore.vendored import requests\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/__init__.py\\", line 58, in \\u003cmodule\\u003e\n    from . import utils\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/utils.py\\", line 26, in \\u003cmodule\\u003e\n    from .compat import parse_http_list as _parse_list_header\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/compat.py\\", line 7, in \\u003cmodule\\u003e\n    from .packages import chardet\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/__init__.py\\",line 3, in \\u003cmodule\\u003e\n    from . import urllib3\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/__init__.py\\", line 10, in \\u003cmodule\\u003e\n    from .connectionpool import (\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/connectionpool.py\\", line 38, in \\u003cmodule\\u003e\n    from .response import HTTPResponse\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/response.py\\", line 9, in \\u003cmodule\\u003e\n    from ._collections import HTTPHeaderDict\n  File \\"/var/log/amazon/ssm/patch-baseline-operations/botocore/vendored/requests/packages/urllib3/_collections.py\\", line 1, in \\u003cmodule\\u003e\n    from collections import Mapping, MutableMapping\nImportError: cannotimport name \'Mapping\' from \'collections\' (/usr/lib/python3.10/collections/__init__.py)\n",\n      "standardError": "Error loading patching payloadfailed to run commands: exit status 156"\n

\n

Answer 1

当前的问题 - 新的 SSM 补丁管理器仍然无法在 Ubuntu 22.04 上工作，这可能不是结论性的，但可能与添加到 Ubuntu 22.04 中的新的“服务需要重新启动”弹出窗口有关。

我的测试实例昨晚未能修补，补丁管理器，“详细状态”已“终止”。我无法进入该补丁运行的 SSM ui 的“查看输出”部分。

当我apt update在命令行上运行时，它起作用了。但是，我收到了一个“服务需要重新启动”弹出窗口，我可以交互式地响应该弹出窗口。我想知道这是否会扰乱正在修补的 python 脚本。 。

阅读： 如何在使用 apt 安装或更新软件包时阻止 ubuntu 弹出“使用过时库的守护进程”？

和：

https://askubuntu.com/questions/1367139/apt-get-upgrade-auto-restart-services

我已经更新了我的“测试”实例，并将进行监视以查看是否有帮助。

截至 2023 年 4 月 4 日，AWS 链接https://docs.aws.amazon.com/systems-manager/latest/userguide/prereqs-operating-systems.html 显示 SSM 补丁管理器支持 22.04。现在我需要测试它以确保这是真的..