linux內核升級
最近HW行動，報出來的linux系統內核漏洞，環境中全部是2.6.32-431.el6.x86_64的主機，需要全部升級到754版本，這也是第一次進行內核升級操作。
先找了一台和生產環境差不多的虛擬機（內核版本還是不一樣，較高），通過aliyun直接進行yum更新，將更新下來的安裝包保存下來，然后上傳到內網的倉庫中，重新打包鏡像，讓其他主機直接也能進行升級。
[root@Server129 yum.repos.d]# yum upgrade kernel
Loaded plugins: fastestmirror, security
Setting up Upgrade Process
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package kernel.x86_64 0:2.6.32-754.el6 will be installed
--> Processing Dependency: kernel-firmware >= 2.6.32-754.el6 for package: kernel-2.6.32-754.el6.x86_64
--> Running transaction check
---> Package kernel-firmware.noarch 0:2.6.32-696.el6 will be updated
---> Package kernel-firmware.noarch 0:2.6.32-754.el6 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
======================================================================================================================================================================
Package Arch Version Repository Size
======================================================================================================================================================================
Installing:
kernel x86_64 2.6.32-754.el6 aliyun 32 M
Updating for dependencies:
kernel-firmware noarch 2.6.32-754.el6 aliyun 29 M
Transaction Summary
======================================================================================================================================================================
Install 1 Package(s)
Upgrade 1 Package(s)
Total download size: 61 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): kernel-2.6.32-754.el6.x86_64.rpm | 32 MB 00:38
(2/2): kernel-firmware-2.6.32-754.el6.noarch.rpm | 29 MB 00:51
----------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 672 kB/s | 61 MB 01:33
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Warning: RPMDB altered outside of yum.
Updating : kernel-firmware-2.6.32-754.el6.noarch 1/3
Installing : kernel-2.6.32-754.el6.x86_64 2/3
Cleanup : kernel-firmware-2.6.32-696.el6.noarch 3/3
Verifying : kernel-firmware-2.6.32-754.el6.noarch 1/3
Verifying : kernel-2.6.32-754.el6.x86_64 2/3
Verifying : kernel-firmware-2.6.32-696.el6.noarch 3/3
Installed:
kernel.x86_64 0:2.6.32-754.el6
Dependency Updated:
kernel-firmware.noarch 0:2.6.32-754.el6
Complete!
在生產上，直接進行yum安裝的時候，出現的安裝包還不一樣。
Dependencies Resolved
====================================================================================================================================================
Package Arch Version Repository Size
====================================================================================================================================================
Installing:
kernel x86_64 2.6.32-754.el6 base 32 M
Updating for dependencies:
dracut noarch 004-409.el6_8.2 base 127 k
dracut-kernel noarch 004-409.el6_8.2 base 28 k
kernel-firmware noarch 2.6.32-754.el6 base 29 M
Transaction Summary
====================================================================================================================================================
Install 1 Package(s)
Upgrade 3 Package(s)
默認情況下，安裝之后，直接重啟系統，就會加載新的內核，不需要調整什么grub參數。