KernelCare: reboot still required

[coursevector]

Seems like the same issue that I see happening before in KernelCare: reboot still required and SOLVED - cPanel 66 - Reboot Message in WHM

Below are the results if I run the following:

# cat /usr/local/cpanel/version
11.66.0.25

# kcarectl --uname
2.6.32-696.10.3.el6

# /usr/bin/kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 2.6.32-696.10.3.el6.x86_64 ([email protected]) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Tue Sep 26 18:14:22 UTC 2017
kpatch-build-time: Fri Sep 29 12:32:11 2017
kpatch-description: 1-;2.6.32-696.10.3.el6

# /usr/bin/kcarectl --update
Kernel is safe

Yet I still see the same "You must reboot the server to apply kernel updates."

 

[24x7server]

Hi,

What do you see when you hit the below command:
# cat /var/run/system_needs_reboot.cache

Do you see the new kernel or the old kernel in it?

 

[coursevector]

Here is what I see when I run that (re-ran the same commands from earlier to make sure nothing changed):

# cat /usr/local/cpanel/version
11.66.0.25

# kcarectl --uname
2.6.32-696.10.3.el6

# /usr/bin/kcarectl --info
kpatch-state: patch is applied
kpatch-for: Linux version 2.6.32-696.10.3.el6.x86_64 ([email protected]) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Tue Sep 26 18:14:22 UTC 2017
kpatch-build-time: Fri Sep 29 12:32:11 2017
kpatch-description: 1-;2.6.32-696.10.3.el6

# /usr/bin/kcarectl --update
Kernel is safe

# cat /var/run/system_needs_reboot.cache
{"needs_reboot":1,"details":{"kernel":{"boot_version":"2.6.32-696.13.2.el6.x86_64","running_version":"2.6.32-696.10.3.el6"}}}

But it is clearly showing a newer kernel will run after it boots. So is this a kernelcare bug at this point you think?

 

[linux4me2]

When you say:

Yet I still see the same "You must reboot the server to apply kernel updates."

are you seeing that in Security Advisor's output, or as a button in WHM's toolbar?

If you're seeing the Security Advisor notice, I believe it is because you are running the latest Kernelcare patch as shown by the "--update" and "--info" output, but Kernelcare hasn't released a patch that is as new as the latest kernel. My understanding from the Kernelcare FAQ is that Kernelcare only applies security patches and occasional bug patches, so they may not release a patch for every kernel update. I've been seeing the Security Advisor warning too for a couple of weeks now, but there is no newer Kernelcare patch yet.

 

[coursevector]

When you say:

are you seeing that in Security Advisor's output, or as a button in WHM's toolbar?

If you're seeing the Security Advisor notice, I believe it is because you are running the latest Kernelcare patch as shown by the "--update" and "--info" output, but Kernelcare hasn't released a patch that is as new as the latest kernel. My understanding from the Kernelcare FAQ is that Kernelcare only applies security patches and occasional bug patches, so they may not release a patch for every kernel update. I've been seeing the Security Advisor warning too for a couple of weeks now, but there is no newer Kernelcare patch yet.

I'm seeing the notice in the WHM toolbar. I disabled the Security Advisory notices because they were getting annoying since I know I have kernelcare installed on the servers. I thought it would go away, but it's been this way since v66 his the STABLE channel.

 

[sparek-3]

Something is wrong, because the latest kernel for CentOS 6 (RHEL 6?) is 2.6.32-696.13.2.el6

Your kcarectl --uname is showing

2.6.32-696.10.3.el6

And your kcarectl --update is showing that you are uo to date.

Does kcarectl --check show you as also being up to date?

What does kcarectl --version show?

 

[coursevector]

Something is wrong, because the latest kernel for CentOS 6 (RHEL 6?) is 2.6.32-696.13.2.el6

Your kcarectl --uname is showing

2.6.32-696.10.3.el6

And your kcarectl --update is showing that you are uo to date.

Does kcarectl --check show you as also being up to date?

What does kcarectl --version show?

Logged into WHM and still see the notice in the top banner just to confirm. Below are your answers.

# kcarectl --uname
2.6.32-696.10.3.el6

# kcarectl --update
Kernel is safe

# kcarectl --version
2.13-2

# kcarectl --check
The latest patch is applied.

 

[sparek-3]

I would suggest opening a ticket with CloudLinux/Kernelcare about this. Something is wrong some where.

 

[cPanelMichael]

Hello,

This should be fixed in cPanel version 68:

WHM v66.0.14 - You must reboot the server to apply kernel updates

Thank you.

 

[coursevector]

When should I expect that to hit the STABLE channel?

 

[cPanelMichael]

Hello,

There's no specific time frame available at this time. It's currently in the "Current" build tier, and tentatively planned for publication to the "Release" build tier next week:

Product Versions and the Release Process - cPanel Knowledge Base - cPanel Documentation

Thank you.