`mdssc` command line
The mdssc command controls MetaDefender Software Supply Chain on Linux. Run it as root. It works from any directory.
To see all commands, run sudo mdssc help. To see the details of one command, run sudo mdssc <command> --help or sudo mdssc help <command>.
Press Tab after mdssc to complete command names and options.
Commands
Command | What it does |
|---|---|
| Start all services. |
| Stop all services. |
| Stop, then start all services. |
| Pull newer images and restart. |
| Show the state of each container, its restarts and memory kills, and disk use. |
| Show the running image of each service and mark a service that differs from the expected image. |
| Export all service logs to an archive. |
| Turn HTTPS for the web console on or off. See Configuring HTTPS. |
| Print a support report. See Troubleshooting. |
| Archive the recent logs and settings, with secrets masked. |
| Build the full support package. |
| Turn on debug logs for one service for a limited time. |
| Turn off debug logs now. |
| Save the database, settings and certificates to one file. |
| Restore a backup made with |
| Show the list of commands, or the details of one command. |
Options
Command | Option | Description |
|---|---|---|
|
| Archive logs newer than TIME, for example |
|
| Archive only the logs of services whose name contains NAME. |
|
| Keep debug logs on for TIME, for example |
|
| Write the backup file to DIR. Default: the current directory. |
|
| Read the passphrase from FILE instead of asking for it. |
|
| Write a plain tar file. See the warning in Backup and restore. |
|
| Read the passphrase from FILE instead of asking for it. |
Examples
Backup and restore
mdssc backup saves the database, .env, customer.env, the configuration files, the HTTPS certificates and the CA certificates to one file. By default it encrypts the file with a passphrase that you type.
Keep the passphrase. You cannot restore the file without it.
--no-encrypt writes a plain tar file. The file holds the tenant encryption key next to the encrypted connection secrets. Anyone who can read the file can recover every stored integration credential. Keep the file as safe as the host.
mdssc restore asks you to type RESTORE before it starts. It replaces the database and the settings with the ones in the backup, then restarts the product. It keeps the database passwords, the database URL and the memory settings of the current host.
You can restore a backup from the same version or from an older version. You cannot restore a backup from a newer version: upgrade first, then restore.
Older commands
The -c and -u options still work. The new commands do the same work:
New command | Older command |
|---|---|
|
|
|
|
|
|
|
|
|
|
mdssc -c status still runs the full readiness check. mdssc -u recreate <service> recreates only the services that you name, with the current settings, and does not pull images.
mdssc -u vacuum and mdssc -u export_settings are removed in v4.3.0.