Skip to main content

KernelCare: reboot still required

Comments

10 comments

  • 24x7server
    Hi, What do you see when you hit the below command: # cat /var/run/system_needs_reboot.cache Do you see the new kernel or the old kernel in it?
    0
  • coursevector
    Here is what I see when I run that (re-ran the same commands from earlier to make sure nothing changed): # cat /usr/local/cpanel/version 11.66.0.25 # kcarectl --uname 2.6.32-696.10.3.el6 # /usr/bin/kcarectl --info kpatch-state: patch is applied kpatch-for: Linux version 2.6.32-696.10.3.el6.x86_64 (mockbuild@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Tue Sep 26 18:14:22 UTC 2017 kpatch-build-time: Fri Sep 29 12:32:11 2017 kpatch-description: 1-;2.6.32-696.10.3.el6 # /usr/bin/kcarectl --update Kernel is safe # cat /var/run/system_needs_reboot.cache {"needs_reboot":1,"details":{"kernel":{"boot_version":"2.6.32-696.13.2.el6.x86_64","running_version":"2.6.32-696.10.3.el6"}}} But it is clearly showing a newer kernel will run after it boots. So is this a kernelcare bug at this point you think?
    0
  • linux4me2
    When you say:
    Yet I still see the same "You must reboot the server to apply kernel updates."

    are you seeing that in Security Advisor's output, or as a button in WHM's toolbar? If you're seeing the Security Advisor notice, I believe it is because you are running the latest Kernelcare patch as shown by the "--update" and "--info" output, but Kernelcare hasn't released a patch that is as new as the latest kernel. My understanding from the Kernelcare FAQ is that Kernelcare only applies security patches and occasional bug patches, so they may not release a patch for every kernel update. I've been seeing the Security Advisor warning too for a couple of weeks now, but there is no newer Kernelcare patch yet.
    0
  • coursevector
    When you say: are you seeing that in Security Advisor's output, or as a button in WHM's toolbar? If you're seeing the Security Advisor notice, I believe it is because you are running the latest Kernelcare patch as shown by the "--update" and "--info" output, but Kernelcare hasn't released a patch that is as new as the latest kernel. My understanding from the Kernelcare FAQ is that Kernelcare only applies security patches and occasional bug patches, so they may not release a patch for every kernel update. I've been seeing the Security Advisor warning too for a couple of weeks now, but there is no newer Kernelcare patch yet.

    I'm seeing the notice in the WHM toolbar. I disabled the Security Advisory notices because they were getting annoying since I know I have kernelcare installed on the servers. I thought it would go away, but it's been this way since v66 his the STABLE channel.
    0
  • sparek-3
    Something is wrong, because the latest kernel for CentOS 6 (RHEL 6?) is 2.6.32-696.13.2.el6 Your kcarectl --uname is showing 2.6.32-696.10.3.el6 And your kcarectl --update is showing that you are uo to date. Does kcarectl --check show you as also being up to date? What does kcarectl --version show?
    0
  • coursevector
    Something is wrong, because the latest kernel for CentOS 6 (RHEL 6?) is 2.6.32-696.13.2.el6 Your kcarectl --uname is showing 2.6.32-696.10.3.el6 And your kcarectl --update is showing that you are uo to date. Does kcarectl --check show you as also being up to date? What does kcarectl --version show?

    Logged into WHM and still see the notice in the top banner just to confirm. Below are your answers. # kcarectl --uname 2.6.32-696.10.3.el6 # kcarectl --update Kernel is safe # kcarectl --version 2.13-2 # kcarectl --check The latest patch is applied.
    0
  • sparek-3
    I would suggest opening a ticket with CloudLinux/Kernelcare about this. Something is wrong some where.
    0
  • cPanelMichael
    Hello, This should be fixed in cPanel version 68: WHM v66.0.14 - You must reboot the server to apply kernel updates Thank you.
    0
  • coursevector
    When should I expect that to hit the STABLE channel?
    0
  • cPanelMichael
    Hello, There's no specific time frame available at this time. It's currently in the "Current" build tier, and tentatively planned for publication to the "Release" build tier next week: Product Versions and the Release Process - cPanel Knowledge Base - cPanel Documentation Thank you.
    0

Please sign in to leave a comment.