KernelCare + yum?

[pekka.saarinen]

Im on CentOS 7.

KernelCare have updated to 3.10.0-693.21.1.el7 but yum wants to update it too.
Should I update kernel via yum, too? Does it do any harm?

You say in FAQ:
"We apply only security patches. Sometimes we might decide to apply patches for critical bugs as well."

Does that mean the kernel is not really updated to the latest version, only patched in part? So, after reboot, the kernel you think is there is not really the official kernel?

Also, does KernelCare update other kernel packages, like kernel-debug, kernel-devel, kernel-headers, kernel-tools, kernel-tools-libs?

-------

shell# /usr/bin/kcarectl --uname

3.10.0-693.21.1.el7

-------

yum check-update

kernel.x86_64 3.10.0-693.21.1.el7 updates
kernel-debug-devel.x86_64 3.10.0-693.21.1.el7 updates
kernel-devel.x86_64 3.10.0-693.21.1.el7 updates
kernel-headers.x86_64 3.10.0-693.21.1.el7 updates
kernel-tools.x86_64 3.10.0-693.21.1.el7 updates
kernel-tools-libs.x86_64 3.10.0-693.21.1.el7 updates

[ighertesco]

Hello,

It is completely safe to install the updates via yum. If you decide to reboot the server during maintenance hours, it will just use the latest kernel.

[pekka.saarinen]

Thanks.

Another question if you dont mind.

Now that CentOS 7.5 is out, I will not update my servers until I get "all clear" from other users. Will KernelCare update the Kernel to 7.5 version, even if I have not update any other software to 7.5? Should I disable KernelCare until I update it all?

(7.5 looks quite bad at the moment: https://www.centos.org/forums/viewforum.php?f=47 )

[apb]

You may continue using KernelCare as before - it will patch the vulnerabilities found in your current kernel version.