Skip to main content

kernel care free patch set

WorkinOnIt

Circling back to this issue which is not resolved for me.

I am running Rocky 8.10.0 kvm and cPanel v 120.0.16 and kernel 4.18.0-553.16.1.el8_10.x86_64

 

In WHM I see:

1) Add KernelCare’s Free Symlink Protection.

But when I try to do so, it loads the new page, then reloads security advisor and just shows the same message - and does not add the free patch set.

 

2) A KernelCare update is available.

You must take one of the following actions to ensure the system is up-to-date:

  • Patch the kernel (run “kcarectl --update” on the command line).
  • Update the system (run “yum -y update” on the command line), and reboot the system.

But this results in 

[root@ ~]# kcarectl --update
Downloading updates
HTTP Error 401: Unauthorized: https://patches.kernelcare.com/patches/K20845645......98fe39ff0f3/1/kpatch.bin

 

Now when I check this on the kernel care website https://patches.kernelcare.com/ it says there a 0 cves.

So I assume by this, I don't need to add kernel care or the patch set as these are not available for my machine?

If that is the case, why does it continue to show the messages in WHM ?

Comments

3 comments

Date Votes
  • WorkinOnIt
    • Edited

    I should add that I also raised this a few months back:

    https://support.cpanel.net/hc/en-us/community/posts/20900516913815-Add-KernelCare-s-Free-Symlink-Protection

    with the answer here:

    https://support.cpanel.net/hc/en-us/articles/23094436295959-Security-Advisor-suggests-unavailable-free-patch-for-KernelCare-on-AlmaLinux-9

    However, as mentioned above, I am using Rocky 8 too, so I assume this issue pertains to both?

    0
  • cPRex Jurassic Moderator

    I'm not aware of any issues with Rocky 8 at this time, as the Security Advisor issue is specifically for version 9.  I have the CloudLinux team and our team looking into this and I'll let you know as soon as I have more details.

    0
  • cPRex Jurassic Moderator

    I spoke with the CloudLinux team they confirmed the install on AlmaLinux 9 works well at this time.  Here is some output from a test server showing this:

    root@hostname ~]# kcarectl --set-patch-type free
    'free' patch type selected
    [root@hostname ~]# uname -a
    Linux hostname.techfiles.org 5.14.0-427.20.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 10 08:04:28 EDT 2024 x86_64 x86_64 x86_64 GNU/Linux
    [root@hostname ~]# kcarectl --update
    Downloading updates
    Patch level 4 applied. Effective kernel version 5.14.0-427.28.1.el9_4
    Kernel is safe
    [root@hostname ~]# cat /etc/almalinux-release
    AlmaLinux release 9.4 (Seafoam Ocelot)

    I still wouldn't expect there to be any issue with RockyLinux 8 as that has been supported for some time.  We might need to see a ticket on this one in order to troubleshoot the issue, as I can't make that same error happen with my testing.

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post