Documentation

Can I use a single KernelCare key to register multiple servers? Yes. The KernelCare key can be used to deploy and register multiple servers at one time. KernelCare is often deployed on a large number of servers so adding these servers one by one would be a problem. In this case, the KernelCare key can be used to deploy and register multiple servers at one time. Registration is... Do I have to restart my server after installing KernelCare? Not necessarily. KernelCare can apply available security patches for a supported kernel while the server is running. This does not mean the server will never need another reboot, or that installing the agent is enough to confirm its protection. What live patching provides The patch acts on the running kernel. It can... Do you use the same technology as Oracle, Red Hat or Suse? KernelCare technology has been fully developed internally and uses different methods to generate patches and apply them. This method of patching is significantly more efficient than what we have seen or read to date from other vendors. For help with a Nuagerie service, open or follow up on a support request in your... Does KernelCare work with third-party drivers? The CloudLinux team is devoted to making their clients lives as easy as possible, therefore KernelCare is able to work with third-party drivers. However, you will have to update the drivers manually as KernelCare does not update them. For help with a Nuagerie service, open or follow up on a support request in your... Error: was already used for trialing on... If you see this message appearing on your screen: The IP 127.0.0.1 was already used for trialing on 2018-05-01 This message indicates that the IP address has already been used for a trial. It does not, by itself, establish the status of your current license or installed patches. Check that the license is assigned to... How KernelCare Works What is a kernel? A kernel is a computer program that runs at the core of a computer’s operating system. It connects the user space (the software a user can access) to the hardware of the computer through a protected area of memory. This area is one of the first things to start when a computer boots up and is kept... How to Force the Update of KernelCare In order to force the update of KernelCare you just have to use the command kcarectl --update as root An example of what it should look like: # kcarectl --update Kernel is safe For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. How to Implement Delayed Updates The deferred feed ensures that your servers will receive patches 24 hours after publication. To implement the delayed feed, add PREFIX = 24h to /etc/sysconfig/kcare/kcare.conf For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. How to Uninstall KernelCare You can uninstall KernelCare by using the following command: # yum remove kernelcare For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. How to install KernelCare KernelCare applies available live security patches to a supported running Linux kernel. Installation belongs to the server administrator: it is not a WordPress extension or a setting to enable from an ordinary hosting account. If Nuagerie manages the relevant service, ask us to confirm the existing configuration... How to migrate from Ksplice to KernelCare TuxCare documents a procedure for replacing Ksplice with KernelCare on a supported kernel. This is a server administration task: check kernel compatibility and licensing before changing its patching system. The official script uninstalls Ksplice and then installs KernelCare. Read the vendor prerequisites and arrange... I'm switching from Ksplice to KernelCare, should I restart? There is no need to restart - just uninstall Ksplice with: # yum uninstall ksplice For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. KernelCare and ePortal: patching an isolated network A server without direct Internet access can receive KernelCare patches through a suitable architecture. It still needs an accessible patch source, appropriate licensing and a maintained update process. Network isolation does not supply new patches by itself. This guide helps server and infrastructure owners plan... KernelCare: check connectivity, proxy settings and patch access A KernelCare communication error can prevent patch retrieval while the website remains accessible. Diagnosis depends on the delivery path: direct access to TuxCare services, a proxy or an internal ePortal. A rule limited to one server’s port 80 does not describe these configurations. These checks are for the... KernelCare: check the version, support and applied patches Check KernelCare in three stages: identify the kernel actually running, confirm the vendor’s coverage for that exact build, then inspect any applied live patches. These are different questions. A supported distribution, an installed agent and a successful licence activation do not by themselves prove that a... KernelCare: manage a temporary pause in automatic updates Pausing KernelCare automatic updates can be part of a documented maintenance intervention. It also leaves new patches pending, so the pause needs an owner, a deadline and a verified return to normal operation. It should not be used simply to make an error message disappear. This guide is for the server’s authorized... Official KernelCare Documentation KernelCare, offered by TuxCare, applies security patches to supported Linux kernels while they are running. Its documentation explains compatibility requirements and service limits; patch availability depends on the particular kernel. If you have questions about certain KernelCare features not discussed in our... What happens if I install KernelCare but my kernel is not supported? An “Unknown Kernel” or “Unsupported Kernel” message means that live-patch coverage for the running kernel needs investigation. Installing KernelCare does not make an unsupported kernel supported, and an active licence does not prove that patches have been applied. The message alone also does not establish that the... What is KernelCare? KernelCare is a service that provides important updates for your running kernel, eliminating the need to restart your server. KernelCare was developed by CloudLinux and therefore works intrinsically with any CloudLinux-run server, however, KernelCare is able to work with 3rd party drivers. The best part about it:... What kernels does KernelCare support? KernelCare support depends on the exact kernel running on a server, its distribution and architecture, and the maintenance status of that kernel branch. A familiar Linux distribution name or an installed KernelCare agent is not enough to confirm that the current system receives new live patches. Consult the... When does it check for updates? Keeping your servers up-to-date is KernelCare's biggest priority, therefore it automatically checks for updates every 4 hours. For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. Where can I get documentation or support? For help with a Nuagerie service, open or follow up on a support request in your Client Area. For general questions, use our contact form. You can also contact KernelCare official support by emailing [email protected]. You can find KernelCare's documentation at http://docs.kernelcare.com Who develops KernelCare patches? Hotfix creation requires a solid kernel development context as well as a powerful set of tools for preparing and testing patches. The KernelCare team consists of a group of highly skilled kernel developers working full time on monitoring security and kernel mailing lists and patch preparation. For help with a...