Best practices for ECS OS stability

更新时间:
复制 MD 格式

When selecting an operating system (OS), evaluate its hardware compatibility, software compatibility, and stability. Select a compatible OS image, apply patches, and configure crash dumps to prevent failures.

Select an image

  1. Choose an OS based on your application's tech stack.

    • Alibaba Cloud Linux: CentOS-compatible, optimized and security-hardened with official technical support. Recommended for Alibaba Cloud deployments.

    • Windows Server: Ideal for .NET applications, SQL Server databases, and other commercial Windows software. Provides a graphical user interface.

  2. Choose an image source based on your support needs.

    Commercial OS images incur license fees. Custom images created from them also incur these fees.
    • Public images: Officially provided and licensed by Alibaba Cloud. Recommended for general use.

    • Alibaba Cloud Marketplace images: Pre-installed with specific software or optimized for particular use cases. Published and supported by third-party providers or Alibaba Cloud.

    • Custom images: Created from instances, snapshots, or local files. Use custom images to migrate environments to the cloud or bulk-deploy identically configured instances.

Usage notes

OS End of Life (EOL)

Important

Do not select an OS that has reached its EOL. OS vendors no longer provide security patches or feature updates for EOL systems, so newly discovered vulnerabilities will not be fixed. Alibaba Cloud provides only limited technical support for EOL operating systems. Choose an OS in its Mainstream Support (MS) phase.

An OS lifecycle begins at general availability. The vendor's support policy defines these phases:

  1. MS: Full support including feature updates, security fixes, and technical assistance. Typically lasts until the product is no longer sold.

  2. Extended Life Support (ELS): Optional phase limited to critical security fixes with no new features. May require an additional fee.

  3. EOL: The OS vendor stops all security updates and technical support. The OS is officially retired.

image.svg

Image Issues

OS compatibility

Title

Description

Intel instance types and OS compatibility

Different ECS instance families use different processors, each with its own set of supported operating systems. Select an officially supported OS for optimal compatibility.

AMD instance types and OS compatibility

AMD instances require specific drivers and kernels. Select an officially supported OS to obtain the correct versions.

i4 instance types with local SSDs and OS compatibility

i4 instances with local SSDs are high-I/O instances. Ensure the selected OS includes the necessary drivers and kernel.

Perform OS maintenance

Manage patches

Fix known security vulnerabilities in the OS and application software to reduce the risk of attacks.

  1. Initial update: Vulnerabilities may be discovered after an image is released. Perform a full system update after creating an instance to install all available security patches.

  2. Ongoing updates: Regularly scan for and fix OS and application vulnerabilities to reduce the risk of attacks.

Configure kernel crash dump services

When a kernel error or crash occurs, a kernel crash dump service such as kdump or netdump saves a memory snapshot for troubleshooting, helping you identify the root cause faster.

Implement a backup and recovery strategy

ECS disaster recovery solutions help you recover services after failures such as configuration errors, data corruption, or system crashes.

Replace the OS

Replacing the system disk creates a new OS environment with more system options, but erases all data and requires redeployment. To replace the OS while preserving data, see OS migration.