Cron /usr/bin/kcarectl -q --auto-update
Answered
I receive the following email every since and while after the latest update. Why? I have not enable the KernelCare on the server so how disable this?
Traceback (most recent call last):
File "/usr/libexec/kcare/python/kcarectl/__main__.py", line 18, in <module>
sys.exit(main())
File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 2007, in main
do_update(freezer, mode=constants.UPDATE_MODE_AUTO)
File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 1461, in do_update
check_new_kc_version()
File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 1369, in check_new_kc_version
url = utils.get_patch_server_url('{0}-new-version'.format(EFFECTIVE_LATEST))
File "/usr/libexec/kcare/python/kcarectl/utils.py", line 194, in get_patch_server_url
return '/'.join(it.strip('/') for it in filter(None, (ipv6_support.get_patch_server(),) + parts))
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 130, in get_patch_server
return config.PATCH_SERVER_IPV6 if ip_proto_selector.is_ipv6_preferred() else config.PATCH_SERVER
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 72, in is_ipv6_preferred
ipv6_license = self._get_cln_license(ipv6=True)
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 113, in _get_cln_license
content = utils.nstr(http_utils.urlopen(url, retry_on_500=False).read()) # type: ignore[no-untyped-call]
File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 91, in urlopen
return utils.retry(check_urlopen_retry_factory(retry_on_500=retry_on_500), count=retry_count)(urlopen_base)(url, *args, **kwargs)
File "/usr/libexec/kcare/python/kcarectl/utils.py", line 115, in inner
return fn(*args, **kwargs)
File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 48, in urlopen_base
return std_urlopen(url, *args, **kwargs) # nosec B310
File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib64/python3.6/urllib/request.py", line 526, in open
response = self._open(req, data)
File "/usr/lib64/python3.6/urllib/request.py", line 544, in _open
'_open', req)
File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
result = func(*args)
File "/usr/lib64/python3.6/urllib/request.py", line 1392, in https_open
context=self._context, check_hostname=self._check_hostname)
File "/usr/lib64/python3.6/urllib/request.py", line 1349, in do_open
encode_chunked=req.has_header('Transfer-encoding'))
File "/usr/lib64/python3.6/http/client.py", line 1273, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1319, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1268, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1044, in _send_output
self.send(msg)
File "/usr/lib64/python3.6/http/client.py", line 982, in send
self.connect()
File "/usr/lib64/python3.6/http/client.py", line 1441, in connect
server_hostname=server_hostname)
File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket
_context=self, _session=session)
File "/usr/lib64/python3.6/ssl.py", line 810, in __init__
self.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 1070, in do_handshake
self._sslobj.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 653, in do_handshake
match_hostname(self.getpeercert(), self.server_hostname)
File "/usr/lib64/python3.6/ssl.py", line 287, in match_hostname
% (hostname, ', '.join(map(repr, dnsnames))))
ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/lib64/python3.6/runpy.py", line 193, in _run_module_as_main
"__main__", mod_spec)
File "/usr/lib64/python3.6/runpy.py", line 85, in _run_code
exec(code, run_globals)
File "/usr/libexec/kcare/python/kcarectl/__main__.py", line 29, in <module>
send_exc()
File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 141, in send_exc
url = utils.get_patch_server_url('/api/kcarectl-trace') + '?trace=' + encoded_trace
File "/usr/libexec/kcare/python/kcarectl/utils.py", line 194, in get_patch_server_url
return '/'.join(it.strip('/') for it in filter(None, (ipv6_support.get_patch_server(),) + parts))
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 130, in get_patch_server
return config.PATCH_SERVER_IPV6 if ip_proto_selector.is_ipv6_preferred() else config.PATCH_SERVER
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 72, in is_ipv6_preferred
ipv6_license = self._get_cln_license(ipv6=True)
File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 113, in _get_cln_license
content = utils.nstr(http_utils.urlopen(url, retry_on_500=False).read()) # type: ignore[no-untyped-call]
File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 91, in urlopen
return utils.retry(check_urlopen_retry_factory(retry_on_500=retry_on_500), count=retry_count)(urlopen_base)(url, *args, **kwargs)
File "/usr/libexec/kcare/python/kcarectl/utils.py", line 115, in inner
return fn(*args, **kwargs)
File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 48, in urlopen_base
return std_urlopen(url, *args, **kwargs) # nosec B310
File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
return opener.open(url, data, timeout)
File "/usr/lib64/python3.6/urllib/request.py", line 526, in open
response = self._open(req, data)
File "/usr/lib64/python3.6/urllib/request.py", line 544, in _open
'_open', req)
File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
result = func(*args)
File "/usr/lib64/python3.6/urllib/request.py", line 1392, in https_open
context=self._context, check_hostname=self._check_hostname)
File "/usr/lib64/python3.6/urllib/request.py", line 1349, in do_open
encode_chunked=req.has_header('Transfer-encoding'))
File "/usr/lib64/python3.6/http/client.py", line 1273, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1319, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1268, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "/usr/lib64/python3.6/http/client.py", line 1044, in _send_output
self.send(msg)
File "/usr/lib64/python3.6/http/client.py", line 982, in send
self.connect()
File "/usr/lib64/python3.6/http/client.py", line 1441, in connect
server_hostname=server_hostname)
File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket
_context=self, _session=session)
File "/usr/lib64/python3.6/ssl.py", line 810, in __init__
self.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 1070, in do_handshake
self._sslobj.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 653, in do_handshake
match_hostname(self.getpeercert(), self.server_hostname)
File "/usr/lib64/python3.6/ssl.py", line 287, in match_hostname
% (hostname, ', '.join(map(repr, dnsnames))))
ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'
-
Hey there! I don't think this is specifically related to KernelCare, but that just happens to be the point where the issue happens. The core issue is the line at the end of each block of text:
ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'
which indicates an issue with the CloudLinux mirrors. Can you let me know the subject line of the message that you received? Knowing that would help confirm this diagnosis.
0 -
Hank you cPRex for the update.
The subject line of this email message is:Cron <root@apollo> /usr/bin/kcarectl -q --auto-update
The content of the email message is what i have quoted above.
0 -
It might be best to try and just remove that package:
https://support.cpanel.net/hc/en-us/articles/360054085673-How-To-uninstall-KernelCare
Can you try that and see if you continue to receive those emails?
0 -
As it seems kernel care package has been removed now.
[root@~]# dnf remove kernelcare
Dependencies resolved.
================================================================================================================================================================
Package Architecture Version Repository Size
================================================================================================================================================================
Removing:
kernelcare x86_64 3.0-1.el8 @kernelcare 1.3 M
Transaction Summary
================================================================================================================================================================
Remove 1 Package
Freed space: 1.3 M
Is this ok [y/N]: y
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: kernelcare-3.0-1.el8.x86_64 1/1
Done.
Done.
Erasing : kernelcare-3.0-1.el8.x86_64 1/1
warning: file /var/lib/libcare: remove failed: No such file or directory
warning: file /var/cache/kcare: remove failed: No such file or directory
warning: /etc/sysconfig/kcare/kcare.conf saved as /etc/sysconfig/kcare/kcare.conf.rpmsave
warning: file /etc/pki/kcare-gpg: remove failed: No such file or directory
Running scriptlet: kernelcare-3.0-1.el8.x86_64 1/1
cp: cannot stat '/etc/selinux/targeted/contexts/files/file_contexts': No such file or directory
libsemanage.semanage_direct_remove_key: Unable to remove module libcare at priority 400. (No such file or directory).
/usr/sbin/semodule: Failed!
libsemanage.semanage_direct_remove_key: Unable to remove module kcare at priority 400. (No such file or directory).
/usr/sbin/semodule: Failed!
skipping the directory /sys
skipping the directory /proc
skipping the directory /dev
skipping the directory /run
skipping the directory /mnt
skipping the directory /var/tmp
skipping the directory /home
skipping the directory /tmp
skipping the directory /dev
Verifying : kernelcare-3.0-1.el8.x86_64 1/1
Removed:
kernelcare-3.0-1.el8.x86_64
Complete!I have received no emails so far.
Thank you.0 -
Glad to hear it!
0
Please sign in to leave a comment.
Comments
5 comments