You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Update Patchman agent documentation to reflect Imunify integration
## Summary
Update Patchman agent documentation to reflect that `imunify-patchman` (v1.0.9+) is now delivered as part of Imunify360, not as a standalone product.
## Changes
### Main Documentation
- **Reorganized installation instructions**: Made Imunify360 integration the primary/recommended installation method
- Moved `Installing imunify-antivirus with Patchman support` to the top as the main installation section
- Removed outdated standalone `imunify-patchman` installation instructions
### Legacy Documentation
- Created a **new "Legacy Reference: patchman-client (Older Agent)"** section at the end
- Moved all old `patchman-client` documentation here (standalone repo, auto-updates, uninstall procedures)
- Added clear deprecation warning explaining this is for older agents only
- Directed users to use `imunify-patchman` v1.0.9+ for new installations
### Clarified
- Updated changelog command to reference `imunify-patchman` instead of `patchman-client`
- Title changed from "Agent (patchman-client)" to "Agent" to reflect current focus
## Why
Based on product changes:
- `imunify-patchman` is now distributed via Imunify repositories
- Customers should be guided to use the integrated Imunify installation path
- Old patchman-client documentation is maintained as reference for existing customers still on legacy versions
## Related
- Patchman Engineering Lead decision: Keep legacy docs as reference, guide customers to v1.0.9+
- Reference: [Gradual roll-out documentation](/update/#gradual-roll-out)
Copy file name to clipboardExpand all lines: docs/patchman/agent/README.md
+74-66Lines changed: 74 additions & 66 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,47 @@
1
-
# Agent (patchman-client)
1
+
# Agent
2
2
3
3
[[TOC]]
4
4
5
+
## Installation (Recommended)
6
+
7
+
The `imunify-patchman` agent is delivered as part of Imunify. Follow the installation instructions below to enable Patchman support.
8
+
9
+
### Installing imunify-antivirus with Patchman support
10
+
11
+
1. Find a license key on the [server add page](https://portal.patchman.co/servers/add/). It is displayed under the `During installation, enter the following license key:` section.
12
+
13
+
2. Install or update `imunify-antivirus`
14
+
1. If imunify-antivirus is not yet installed on a server:
**Deprecated Documentation** — This section covers the older `patchman-client` agent delivered from the standalone Patchman repository. It is kept for reference only. For new installations, use the `imunify-patchman` sections above. Customers on older versions of patchman-client can continue using it, but should plan to migrate to `imunify-patchman` (version 1.0.9+) for the latest features and updates.
185
+
:::
186
+
187
+
### How automatic agent updates work (patchman-client)
140
188
141
189
:::tip
142
-
If you have installed the package for [real-time scanning](/patchman/frequently_asked_questions/#real-time-scanning-what-is-it-and-how-do-i-configure-it), automatic updates will also apply to that package. If you don’t have it installed yet, you need to manually install it first - Patchman can’t automatically perform this installation for you, for security reasons.
190
+
If you have installed the package for [real-time scanning](/patchman/frequently_asked_questions/#real-time-scanning-what-is-it-and-how-do-i-configure-it), automatic updates will also apply to that package. If you don't have it installed yet, you need to manually install it first - Patchman can't automatically perform this installation for you, for security reasons.
143
191
:::
144
192
145
193
The Patchman agent is capable of performing unattended automated updates. This saves you time and effort whenever we release a new version, and ensures that all your servers are always running the latest version with both the newest features and the latest bugfixes.
146
194
147
-
### Configuring automatic updates
195
+
#### Configuring automatic updates
148
196
149
-
#### Disabling automatic updates
197
+
##### Disabling automatic updates
150
198
151
199
Automatic updates are switched on by default, and are available for agents with version 1.7.0-1 and higher.
152
200
153
201
If you do not wish to benefit from automatic updates, you can opt out through an option in the Portal. The option for controlling the automatic updates can be configured per server group. To disable automatic updates for a server group, navigate to "Server > Server groups", and then select the relevant server group in the list. Scroll down to "Miscellaneous settings" and deselect "Automatic updates".
154
202
155
203

156
204
157
-
#### Repository name modifications
205
+
##### Repository name modifications
158
206
159
-
By defaultwe assume the repository is named "patchman", as will be the case if you use our installation script to install the repository on your system. If you decided to rename the repository definition, you can configure the alternative repository name by adding the following data to the file /etc/patchman/patchman.ini (create it if it does not yet exist):
207
+
By defaultwe assume the repository is named "patchman", as will be the case if you use our installation script to install the repository on your system. If you decided to rename the repository definition, you can configure the alternative repository name by adding the following data to the file /etc/patchman/patchman.ini (create it if it does not yet exist):
160
208
161
209
```
162
210
[updates]
@@ -171,7 +219,7 @@ service patchman reload
171
219
172
220
Our update process will use the new repository name where appropriate.
173
221
174
-
### Under the hood: steps in automatic updating
222
+
#### Under the hood: steps in automatic updating
175
223
176
224
As a system administrator you may want to know how the updates are performed. In particular, you may be interested to know what checks we perform to ensure successful updates, what rollback procedures are involved if an update fails, and how the validity of each update is verified. This section lists all the steps the agent takes including some background information regarding the how and why for each step.
177
225
@@ -181,9 +229,9 @@ When building the updating procedure, our goal was to simulate the steps and che
181
229
In the steps below, wherever actions are performed for the patchman-client package, they are repeated for the patchman-client-realtime package if (and only if) you have that installed.
182
230
:::
183
231
184
-
#### CentOS/CloudLinux
232
+
##### CentOS/CloudLinux
185
233
186
-
1. Clean the cached metadatafor the patchman repository to ensure issuing an install command will result in new metadata being downloaded from our repository
234
+
1. Clean the cached metadatafor the patchman repository to ensure issuing an install command will result in new metadata being downloaded from our repository
187
235
1. On CentOS 6 and 7:
188
236
```
189
237
yum clean all --disablerepo="*" --enablerepo="patchman"
@@ -192,7 +240,7 @@ In the steps below, wherever actions are performed for the patchman-client packa
192
240
```
193
241
dnf clean all --disablerepo="*" --enablerepo="patchman"
194
242
```
195
-
2. Download the most recent version of the patchman-client package into the cache directory (and parse the associated filename).If no new version is available, stop the update procedure.
243
+
2. Download the most recent version of the patchman-client package into the cache directory (and parse the associated filename).If no new version is available, stop the update procedure.
@@ -209,7 +257,7 @@ In the steps below, wherever actions are performed for the patchman-client packa
209
257
5. Parse the output from the rpm command to check whether the update succeeded.
210
258
6. If the update is successful, the agent will restart itself after completion of the update procedure, ensuring the server is running the newly installed version afterwards.
211
259
212
-
#### Debian/Ubuntu
260
+
##### Debian/Ubuntu
213
261
214
262
1. Read the filename that contains our repository definition and the path to the cache directory. This means parsing Dir, Dir::Etc, Dir::Etc::sourceparts, Dir::Cache and Dir::Cache::archives from:
215
263
```
@@ -228,26 +276,24 @@ In the steps below, wherever actions are performed for the patchman-client packa
228
276
apt-get -d install patchman-client
229
277
```
230
278
5. Determine the filename of the downloaded package using the cache directory and the filename from step 4.
231
-
6. Install the downloaded package using dpkg. Since dpkgis not able to download any potentially missing dependencies, this step will automatically fail if any unforeseen dependency problems arise.
279
+
6. Install the downloaded package using dpkg. Since dpkgis not able to download any potentially missing dependencies, this step will automatically fail if any unforeseen dependency problems arise.
7. Parse the output from the dpkgcommand to check whether the update succeeded.
283
+
7. Parse the output from the dpkgcommand to check whether the update succeeded.
236
284
8. If the update is successful, the agent will restart itself after completion of the update procedure, ensuring the server is running the newly installed version afterwards.
237
285
238
286
:::tip
239
287
In step 3, we used `apt-cache madison patchman-client` until version 1.14.0-1.
240
288
:::
241
289
242
-
* * *
243
-
244
-
## Updating the Patchman agent
290
+
### Updating the patchman-client agent (Legacy)
245
291
246
292
:::tip
247
-
We strongly suggest using the auto-update feature, as described in [this article](https://patchman.atlassian.net/wiki/spaces/PT/pages/113410280). Relying on auto-update decreases maintenance and ensures you will always automatically use the most up-to-date version of the Patchman software.
293
+
We strongly suggest using the auto-update feature, as described above. Relying on auto-update decreases maintenance and ensures you will always automatically use the most up-to-date version of the Patchman software.
248
294
:::
249
295
250
-
The Patchman agent, running on the servers you add to the Portal, is updated regularly to resolve bugs and introduce new features. Updating the Patchman agentonly requires you to update the package using your package manager.
296
+
The Patchman agent, running on the servers you add to the Portal, is updated regularly to resolve bugs and introduce new features. Updating the Patchman agentonly requires you to update the package using your package manager.
251
297
252
298
We recommend adding the updating of the Patchman agent to your regular update schedule. However, if you need to manually update the agent, you can use the following commands:
253
299
@@ -270,7 +316,7 @@ apt-get update
270
316
apt-get install patchman-client
271
317
```
272
318
273
-
After updating the agent, the service should restart automatically and you should see the new version number appear in the Portal (under Servers).
319
+
After updating the agent, the service should restart automatically and you should see the new version number appear in the Portal (under Servers).
274
320
275
321
On rare occasions customers reported that the agent refuses to stop, in that case a manual restart is required.
276
322
@@ -280,17 +326,15 @@ service patchman restart
280
326
281
327
If the restart fails, there is probably a long-running task that prevents the agent from restarting immediately. The logfiles in /var/log/patchman/ will point out that the shutdown signal was received by the process, and will be processed as soon as possible. If the process hasn't restarted after 10 minutes, please contact [support@patchman.co](mailto:support@patchman.co) and send along the logfiles for further inspection.
282
328
283
-
Although we strive to maximize compatibility, we may occassionally drop support for outdatedagent versions. Your agent will then not be able to connect to the Portal, meaning that new detectionswill not be reported and existing detections can't be resolved.
329
+
Although we strive to maximize compatibility, we may occassionally drop support for outdatedagent versions. Your agent will then not be able to connect to the Portal, meaning that new detectionswill not be reported and existing detections can't be resolved.
284
330
285
-
* * *
286
-
287
-
## Uninstalling the Patchman agent
331
+
### Uninstalling patchman-client (Legacy)
288
332
289
333
Patchman is installed on your system using the standard package manager. This means that you can easily uninstall the software using this package manager.
290
334
291
-
### CentOS / CloudLinux
335
+
#### CentOS / CloudLinux
292
336
293
-
Use the yumpackage management utilitywith the following command:
337
+
Use the yumpackage management utilitywith the following command:
294
338
295
339
```
296
340
yum remove patchman-client
@@ -302,52 +346,16 @@ or
302
346
dnf remove patchman-client
303
347
```
304
348
305
-
### Debian / Ubuntu
349
+
#### Debian / Ubuntu
306
350
307
351
Use the apt package management utility with the following command:
308
352
309
353
```
310
354
apt-get remove patchman-client
311
355
```
312
356
313
-
### Cancelling the server license
357
+
#### Cancelling the server license
314
358
315
-
Make sure to cancel the server license in the Patchman Portal. We strongly suggest you do this**_after_**the removal of the software from your system, because if the software is still running it may automatically request a new license on your account (according to the standard installation procedure).
359
+
Make sure to cancel the server license in the Patchman Portal. We strongly suggest you do this**_after_**the removal of the software from your system, because if the software is still running it may automatically request a new license on your account (according to the standard installation procedure).
316
360
317
361
In the Patchman Portal, go to the server configuration page under Servers. If your plan requires advance notice for cancelling servers, click the red Cancel button to cancel your license and deactivate it per the renewal date. Otherwise, click the red Delete button to immediately remove the server license from your account. This will make sure you are no longer billed for this server.
318
-
319
-
* * *
320
-
321
-
### Installing imunify-antivirus with Patchman support
322
-
323
-
1. Find a license key on the [server add page](https://portal.patchman.co/servers/add/). It is displayed under the `During installation, enter the following license key:` section.
324
-
325
-
2. Install or update `imunify-antivirus`
326
-
1. If imunify-antivirus is not yet installed on a server:
0 commit comments