Announcement

Collapse
No announcement yet.

AlmaLinux 8.10 / cPanel/WHM and Add KernelCare’s Free Symlink Protection

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • AlmaLinux 8.10 / cPanel/WHM and Add KernelCare’s Free Symlink Protection

    Hello,

    I have a fresh installation of AlmaLinux 8.10 running cPanel/WHM and in the WHM/cPanel Security Advisor interface I have clicked on "Add KernelCare’s Free Symlink Protection", which I think it had installed kernelcare and libcare (acording to the processes shown in top via SSH) without any confirmation, but returned a blank page. In the WHM/cPanel Security Advisor continues to suggest "Add KernelCare’s Free Symlink Protection" option.

    Below is the output from some commands that may be useful:

    Code:
    [root@host ~]# uname -a
    Linux host 4.18.0-553.el8_10.x86_64 #1 SMP Fri May 24 08:32:12 EDT 2024 x86_64 x86_64 x86_64 GNU/Linux
    
    [root@host ~]# kcarectl --uname
    4.18.0-553.el8_10.x86_64​
    
    [root@host ~]# kcarectl -i
    This kernel doesn't require any patches.
    
    [root@host ~]# kcarectl --patch-info
    This kernel doesn't require any patches.
    
    [root@host ~]# cat kcarectl.log
    2024-06-03 22:42:20,434 INFO: patchserver config override: USE_CONTENT_FILE with 0
    2024-06-03 22:42:20,434 INFO: patchserver config override: FORCE_JSON_SIG with 0
    2024-06-03 22:42:20,435 INFO: Probing patch URL: https://patches.kernelcare.com/patches/stubs/1664088f2926b8137ce97e3b26f76dd95aaabfac/0/kpatch.free.bin
    2024-06-03 22:42:20,992 INFO: https://patches.kernelcare.com/patches/stubs/1664088f2926b8137ce97e3b26f76dd95aaabfac/0/kpatch.free.bin is not available: 404
    2024-06-03 22:42:20,993 ERROR: 'free' patch type is unavailable for your kernel
    2024-06-03 22:42:31,279 INFO: patchserver config override: USE_CONTENT_FILE with 0
    2024-06-03 22:42:31,280 INFO: patchserver config override: FORCE_JSON_SIG with 0
    2024-06-03 22:42:39,315 INFO: patchserver config override: USE_CONTENT_FILE with 0
    2024-06-03 22:42:39,316 INFO: patchserver config override: FORCE_JSON_SIG with 0
    2024-06-03 22:43:46,713 INFO: patchserver config override: USE_CONTENT_FILE with 0
    
    ​
    The questions are:

    1. Should I consider that KernelCare is installed successfuly but the current kernel is not yet supported?

    2. Is it safe/sable to keep KernelCare installed on the server in these conditions or should I uninstall it?

    Thank you!

  • #2
    Hello,

    We are on a final stage to provide support for the 4.18.0-553 kernel, it could be done within a week or two.

    However, as soon as it will be released you would need to set the patch free first to get it e.g.:

    Code:
    kcarectl --set-patch-type free

    Comment

    Working...
    X