Using the download plug-in for Amazon Linux

The Amazon Linux sites uses CentOS Plug-in R2 for downloading the packages from the internet and caches it on BigFix server. CentOS Plug-in R2, is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.

For the Fixlet to be able to use the protocol, register the download plug-in on the BigFix server. Use the Manage Download Plug-ins dashboard to register the appropriate plug-in.
Notes:
  • Download plug-ins support basic authentication only.
  • The BigFix server and the BigFix client must be on the same version to avoid a null error.
Table 1. Amazon Linux Patches Download Plug-ins
Download Plug-in Name Applicable Sites
CentOS Plug-in R2

Patches for Amazon Linux 2

Patches for Amazon Linux 2 Graviton

Patches for Amazon Linux 2023

Patches for Amazon Linux 2023 Graviton

The CentOS Plug-in R2 downloads and caches patches directly from the vendor's website to the BigFix server, improving the accuracy and reliability of package dependency resolution and repository support.

Note: The CentOS Plug-in R2 does not work when the Require SHA-256 Downloads option in the BigFix Administration tool is enabled. When this option is enabled, all download verification use only the SHA-256 algorithm. However, there are certain repository metadata from the vendor, which do not contain SHA-256 values for packages in the repository that are used by the plug-in.

Consider disabling the Require SHA-256 Downloads option to successfully deploy a patch. Security and package integrity is not compromised as another layer of checking and verification is done using the GPG signature of the package. For more information about the download option, see BigFix Platform Installation Guide at https://help.hcl-software.com/bigfix/10.0/platform/Platform/Installation/c_security_settings.html.

The download plug-in is highly extensible and robust, enabling such possibilities:
  • Customize available repositories through a user extensible repository list.
  • Installation and dependency resolution can easily be extended to all repositories, not just those that are shipped out of the box.
  • Functionalities can easily be extended by customers and service teams.
It also improves performance related to downloading large numbers of packages, which consequently shortens the turnaround time for patching.
The CentOS Plug-in accesses the following mirror list to get the URLs: