Updating Kernel on a VPS

Jman

• August 17, 2024 14:12
• Edited

Hi, All,

 

AlmaLinux v8.10.0 STANDARD kvm

WHM: 120.0.16

 

Trying to get WHM's Security Advisor to stop complaining about a kernel discrepency.

 

The VPS is hosted at Linode and is configured to boot from its latest kernel.

 

Security Advisor shows

The system kernel is at version “6.8.9-x86_64-linode164”, but the system is configured to boot version “4.18.0-513.24.1.el8_9.x86_64”. 

 

"uname -r" shows

6.8.9-x86_64-linode164

 

"dnf check-update --security" shows

4.18.0-553.16.1.el8_10

 

"grubby --info=ALL | grep kernel=" shows

kernel="/boot/vmlinuz-4.18.0-513.24.1.el8_9.x86_64"

kernel="/boot/vmlinuz-0-rescue-72863e389b584a4dab36fae7f3bffda2"

 

The 4.18 kernel is in /boot, but not the 6.8 one.

 

Not sure if this is relevant, but /etc/default/grub has

GRUB_ENABLE_BLSCFG=true

 

The system is booting in legacy mode, from /boot/grub2/grub.cfg

 

Neither grub.cfg or anything in /etc/grub.d references either kernel, though /boot/grubenv shows

saved_entry=72863e389b584a4dab36fae7f3bffda2-4.18.0-513.24.1.el8_9.x86_64

boot_success=1

 

What is the procedure for updating grub so it shows the same kernel as what it's actually booting from in Linode?

 

Alternatively, since the system is actually booting from the VPS kernel, how can Security Advisor be told to ignore the alleged mismatch?

 

Please advise.  Thanks!

• 

  durangod

  • August 17, 2024 15:34
  • Edited

  I hate that as well, having to always worry about updating the kernel.   For me its worth it to get the kernelcare service.  They will update it automatically for you on a regular basis so you dont have to worry about it.  For me i have software and sites to build, i dont have time to be messing with that stuff.   

  Just in case you are interested here is their link  https://tuxcare.com/    i just installed mine, it was easy.  :)

  If you install it just remember dont include the $ at the beginning of their console command in their instructions, i thought that was part of the command, it was not lol   I ask them to change their instructions maybe they did. 

  Its called KernelCare SimplePatch and i think i paid about $45 a year for it. 

  0
• 

  Jman

  • August 17, 2024 16:03

  Thanks, was aware of KernelCare.  Am looking for documentation on how to DIY.

  0
• 

  durangod

  • August 17, 2024 22:24
  • Edited

  I have done it but it was 15 years ago so im sure it has changed.   But i do know that the people over at  webhostingtalk.com are pretty smart and im sure they can get you situated, they have lots of server admins over there with many years of experience.   If you do get an answer if you could share the link here would be great.   :)    best of luck 

  0
• 

  Jman

  • August 18, 2024 13:20

  'k, thanks, may do that, but since this is a cPanel forum thought I'd try here first.

  Anyone else know of a solution?

  0
• 

  cPRex Jurassic Moderator

  • August 19, 2024 14:20

  Some VPS providers have additional restrictions in place related to the kernel and how it changes and boots, so you may need to speak with Linode to see if they have any advice for changing that on their end.  I don't have any specific details to provide outside of what you've already tried in your initial post.

  0
• 

  Jman

  • August 19, 2024 15:29

  Thanks.  If I discover anything will reply back...

  1

Please sign in to leave a comment.