Remove QCSA Packages
Once the QCSA packages are installed, their rpms are no longer needed. When Containerized scanner checks for updates. It also checks for rpms older than 90 and removes them. You can manually remove rpms as per requirement.
The rpms are stored in <Path to shared/common directory>/admin/packages.
Sample
[root@localhost ~]# ls -l /usr/qualys/common/admin/packages/* /usr/qualys/common/admin/packages/backup: total 824100 -rw-------. 1 66 66 24113841 May 4 20:42 ML-12.10.25-1.i586_26.rpm -rw-------. 1 66 66 24611759 May 4 20:42 ML-12.11.37-1.i586_26.rpm -rw-------. 1 66 66 24589449 May 4 20:42 ML-12.12.48-1.i586_26.rpm -rw-------. 1 66 66 24688572 May 4 20:42 ML-12.13.38-1.i586_26.rpm -rw-------. 1 66 66 24773525 May 4 20:42 ML-12.14.24-1.i586_26.rpm -rw-------. 1 66 66 24793029 May 4 20:42 ML-12.15.59-1.i586_26.rpm -rw-------. 1 66 66 25309547 May 4 20:42 ML-12.16.52-1.i586_26.rpm -rw-------. 1 66 66 25438209 Aug 3 2024 ML-12.17.39-1.i586_26.rpm -rw-------. 1 66 66 25437551 Aug 3 2024 ML-12.17.40-1.i586_26.rpm -rw-------. 1 66 66 23422331 May 4 20:42 ML-12.8.23-1.i586_26.rpm -rw-------. 1 66 66 24070958 May 4 20:42 ML-12.9.26-1.i586_26.rpm -rw-------. 1 66 66 211839073 May 4 20:42 QCORE2-3.7.1-1.i386_26.rpm -rw-------. 1 66 66 211829796 May 4 20:42 QCORE2-3.8.3-1.i386_26.rpm -rw-------. 1 66 66 70539734 May 4 20:42 VULNSIGS-2.6.20-3.i586_26.rpm -rw-------. 1 66 66 78389091 May 4 20:42 WAS-8.29.69-1.i586_26.rpm /usr/qualys/common/admin/packages/incoming: total 0 /usr/qualys/common/admin/packages/prod: total 0 /usr/qualys/common/admin/packages/rejected: total 0 [root@localhost ~]#
In the above example /usr/qualys/common/ is docker shared/common directory.
-
The sample commands utilize Docker Engine as the container runtime, but they can also be executed using Podman.
-
The default PID limit (total number of processes and threads to run inside a container) for Podman is 2048. If the Docker host already has active processes, this limit may prevent the QCSA containerized scanner from running larger scans. To avoid this restriction when using Podman, we recommend running the QCSA containerized scanner with the --pid-limit -1 option.
For detailed information on the QCSA command parameters used in examples, refer to Containerized Command Components.