3.4 Managing Ksplice Updates With the uptrack-upgrade Command

Ksplice patches are stored in /var/cache/uptrack. Following a reboot, Ksplice automatically re-applies these patches very early in the boot process, before the network is configured, so that the system is hardened before any remote connections can be established.

To list the available Ksplice updates, use the uptrack-upgrade command:

# uptrack-upgrade -n

Install all available Ksplice updates as follows:

# uptrack-upgrade -y

When Ksplice has applied updates to a running kernel, the kernel has an effective version that is different from the original boot version that is displayed by the uname -a command.

Use the uptrack-uname command to display the effective version of the kernel:

# uptrack-uname -r
3.8.13-55.1.1.el6uek.x86_64

The uptrack-uname command supports the commonly used uname flags, including -a and -r, and provides a way for applications to detect that the kernel has been patched. The effective version is based on the version number of the latest patch that Ksplice has applied to the kernel.

View the updates that Ksplice has made to the running kernel as follows:

# uptrack-show

View the updates that are available for installation as follows:

# uptrack-show --available

Remove all updates from the kernel as follows:

# uptrack-remove --all

To prevent Ksplice from reapplying the updates at the next system reboot, create the empty file /etc/uptrack/disable:

# touch /etc/uptrack/disable

Alternatively, you can specify nouptrack as a parameter on the boot command line when you next restart the system.