🛡️ Install KernelCare

By /

KernelCare is a rebootless kernel patching service from TuxCare, allowing you to keep your Linux servers secure without downtime. This guide covers installation, updating, license management, and uninstallation across various Linux distributions.

✅ Prerequisites

  • Root SSH access
  • Internet connectivity
  • A supported Linux distribution:
    • RPM-based (e.g., CentOS, AlmaLinux, RHEL, CloudLinux)
    • APT-based (e.g., Debian, Ubuntu)

🛠️ Installation

1. Check Kernel Compatibility

Before installing, verify if your system is compatible:

curl -s -L https://kernelcare.com/checker | python

2. Install KernelCare

🔸 For RPM-based Systems (CentOS, RHEL, CloudLinux, AlmaLinux):

curl -s -L https://kernelcare.com/installer | bash

🔹 For APT-based Systems (Debian, Ubuntu):

wget https://downloads.kernelcare.com/kernelcare-latest.deb
dpkg -i kernelcare-latest.deb

3. Register Your License Key (if using a key)

kcarectl --register YOUR_LICENSE_KEY

ℹ️ Note: If you’re using an IP-based license (common with cPanel partners), this step is not required.

🔄 Updating KernelCare

Automatic Updates

  • KernelCare automatically checks for patches every 4 hours.

Manual Update

To manually apply available kernel patches:

kcarectl --update

Update KernelCare Agent

RPM-based:

yum install -y kernelcare

APT-based:

apt-get install kernelcare

Disable Automatic Updates (Optional)

Edit the config file:

vi /etc/sysconfig/kcare/kcare.conf

Set:

AUTO_UPDATE=False

🔍 Checking License & Patch Status

  • View License Info: kcarectl --license-info
  • Check if patches are applied: kcarectl --info
  • View detailed patch data: kcarectl --patch-info
  • See the effective kernel version: kcarectl --uname

❌ Uninstallation

RPM-based Systems:

yum remove kernelcare

DNF-based Systems (AlmaLinux 9+):

dnf remove kernelcare

APT-based Systems:

apt-get remove kernelcare

To remove all configuration files as well:

apt-get purge kernelcare

⚠️ Note: Uninstalling KernelCare unregisters the license if the server has internet access. If not, you may need to remove it manually from your TuxCare (CLN) account.

Free Kernelcare Symlink Protection

kcarectl --info
kcarectl --update
kcarectl --set-patch-type extra --update
mkdir -p /etc/sysconfig/kcare
echo "fs.enforce_symlinksifowner=1" > /etc/sysconfig/kcare/sysctl.conf
sysctl -p /etc/sysconfig/kcare/sysctl.conf
sysctl fs.enforce_symlinksifowner

Reboot the server.

reboot

📚 Further Reading

Official Documentation:
👉 TuxCare KernelCare Docs

Scroll to Top