linux内核升级

最近HW行动，报出来的linux系统内核漏洞，环境中全部是2.6.32-431.el6.x86_64的主机，需要全部升级到754版本，这也是第一次进行内核升级操作。

先找了一台和生产环境差不多的虚拟机（内核版本还是不一样，较高），通过aliyun直接进行yum更新，将更新下来的安装包保存下来，然后上传到内网的仓库中，重新打包镜像，让其他主机直接也能进行升级。

[root@Server129 yum.repos.d]# yum upgrade kernel

Loaded plugins: fastestmirror, security

Setting up Upgrade Process

Loading mirror speeds from cached hostfile

Resolving Dependencies

--> Running transaction check

---> Package kernel.x86_64 0:2.6.32-754.el6 will be installed

--> Processing Dependency: kernel-firmware >= 2.6.32-754.el6 for package: kernel-2.6.32-754.el6.x86_64

--> Running transaction check

---> Package kernel-firmware.noarch 0:2.6.32-696.el6 will be updated

---> Package kernel-firmware.noarch 0:2.6.32-754.el6 will be an update

--> Finished Dependency Resolution

Dependencies Resolved

======================================================================================================================================================================

 Package                                     Arch                               Version                                      Repository                          Size

======================================================================================================================================================================

Installing:

 kernel                                      x86_64                             2.6.32-754.el6                               aliyun                              32 M

Updating for dependencies:

 kernel-firmware                             noarch                             2.6.32-754.el6                               aliyun                              29 M

Transaction Summary

======================================================================================================================================================================

Install       1 Package(s)

Upgrade       1 Package(s)

Total download size: 61 M

Is this ok [y/N]: y

Downloading Packages:

(1/2): kernel-2.6.32-754.el6.x86_64.rpm                                                                                                        |  32 MB     00:38

(2/2): kernel-firmware-2.6.32-754.el6.noarch.rpm                                                                                               |  29 MB     00:51

----------------------------------------------------------------------------------------------------------------------------------------------------------------------

Total                                                                                                                                 672 kB/s |  61 MB     01:33

Running rpm_check_debug

Running Transaction Test

Transaction Test Succeeded

Running Transaction

Warning: RPMDB altered outside of yum.

  Updating   : kernel-firmware-2.6.32-754.el6.noarch                                                                                                              1/3

  Installing : kernel-2.6.32-754.el6.x86_64                                                                                                                       2/3

  Cleanup    : kernel-firmware-2.6.32-696.el6.noarch                                                                                                              3/3

  Verifying  : kernel-firmware-2.6.32-754.el6.noarch                                                                                                              1/3

  Verifying  : kernel-2.6.32-754.el6.x86_64                                                                                                                       2/3

  Verifying  : kernel-firmware-2.6.32-696.el6.noarch                                                                                                              3/3 

Installed:

  kernel.x86_64 0:2.6.32-754.el6                                                                                                                                      

Dependency Updated:

  kernel-firmware.noarch 0:2.6.32-754.el6                                                                                                                             

Complete!

在生产上，直接进行yum安装的时候，出现的安装包还不一样。

Dependencies Resolved

====================================================================================================================================================

 Package                                 Arch                           Version                                  Repository                    Size

====================================================================================================================================================

Installing:

 kernel                                  x86_64                         2.6.32-754.el6                           base                          32 M

Updating for dependencies:

 dracut                                  noarch                         004-409.el6_8.2                          base                         127 k

 dracut-kernel                           noarch                         004-409.el6_8.2                          base                          28 k

 kernel-firmware                         noarch                         2.6.32-754.el6                           base                          29 M

Transaction Summary

====================================================================================================================================================

Install       1 Package(s)

Upgrade       3 Package(s)

默认情况下，安装之后，直接重启系统，就会加载新的内核，不需要调整什么grub参数。