1. 现版本:VMware ESXi, 6.5.0, 9298722
登录后,运行以下命令进入维护模式:
vim-cmd /hostsvc/maintenance_mode_enter
使用命令行安装 esxcli software vib install
[root@localhost:~] esxcli software vib install -d /vmfs/volumes/datastore_local_1.182/VMware-ESXi-6.7.0-Update2-13006603-HPE-Gen9plus-670.U2.10.4.1.8-Apr201
9-depot.zip
Installation Result
Message: The update completed successfully, but the system needs to be rebooted for the changes to be effective.
Reboot Required: true
[root@localhost:~] reboot
2. 升级完成
3. 服务器上安装了Esxi6.7,启动后仍然有CVE-2018-3646的警告
在“配置”中“系统”的“高级系统设置”中找到“VMkernel.Boot.hyperthreadingMitigation”,并将其值改为“true
以下命令退出维护模式:
vim-cmd /hostsvc/maintenance_mode_exit
警告消失
4、漏洞扫描
5、附ESXi后台强制关闭虚拟机
[root@localhost:/vmfs/volumes] esxcli vm process list
windowsXP_10.20.0.206
World ID: 1284001
Process ID: 0
VMX Cartel ID: 1284000
UUID: 42 36 c7 40 3d ae 34 f6-be 6f cc 1f 2a d3 09 61
Display Name: windowsXP_10.20.0.206
Config File: /vmfs/volumes/5b6c267e-44413d7e-ea4b-246e96a41948/windowsXP/windowsXP.vmx
[root@localhost:/vmfs/volumes] esxcli vm process kill --type hard --world-id 1284001
[root@localhost:/vmfs/volumes] esxcli vm process list
[root@localhost:/vmfs/volumes]
vim-cmd /hostsvc/maintenance_mode_enter