r/RockyLinux • u/No_Insurance8730 • 26d ago

Support Request Generic kernel vs Cloud kernel

Hi everyone,

Im a new admin and Im really confused with this problem I'am facing.

when I do:

dnf updateinfo list updates security - I get multiple patches that needs to be installed.

But when I do:

dnf update --security - It says nothing todo!

Im using GCP cloud kernel. Does that mean the cloud kernels are outdated?

2 Upvotes

75% Upvoted

6 comments sorted by

1

u/elatllat 25d ago edited 25d ago

Maybe insecure if 

uname -r

is not one of these

https://kernel.org/

1

u/No_Insurance8730 24d ago

yeah im using the .cloud kernel

1

u/elatllat 24d ago edited 24d ago

I told you how to find the version of the cloud kernel... check what repo you are using as it's likely not the normal one;

https://download.rockylinux.org/pub/rocky/10.2/BaseOS/x86_64/os/Packages/k/kernel-6.12.0-211.26.1.el10_2.x86_64.rpm

Which may or may not be way behind   6.12.94 ; hard to tell just from the package name (why you should check uname), and if Rocky is one of the distributions that breaks uname then Rocky may not be the best distribution for security conscious people ( I know Alma patches way before Rocky )

1

u/No_Insurance8730 23d ago

Thank you!

i use 5.14.0.611.54.1.el9_7.cloud.1.0.x86_64 looks like from

https://dl.rockylinux.org/pub/sig/9/cloud/x86_64/cloud-kernel/

1

u/elatllat 23d ago edited 23d ago

You say uname is reporting the same version as the rockylinux repository (5.14.0-611.54.1.el9_7.cloud) so that's the best rocky has to offer. It's way behind centos-stream-9 ( 5.14.0-719.el9) and that's not only not an official LTS it's also not CIP, instead you just have to trust that centos-stream/Alma/RHEL/Rocky do as good of a job as the rest of the planet combined since official v5.14 EOL-ed in 2021 with version 5.14.21.

Alma is at 5.14.0-687.17.1.el9_8 so that seems to be a middle ground between centos-stream and Rocky

1

u/No_Insurance8730 23d ago

Thanks you so much that makes sense