Disable automatic download of pve-kernel versions

[haguards]

Hello
I have version Proxmox 6.4-15.
I see that my occupied space in /boot is gradually growing in the boot section. I started to check and pve-kernel versions are added there
Please tell me how to disable automatic download of pve-kernel versions

 

[t.lamprecht]

I have version Proxmox 6.4-15.

The 6.x series is end of life/out of support, I'd recommend upgrading to 7.x soon:
https://pve.proxmox.com/wiki/Upgrade_from_6.x_to_7.0

Please tell me how to disable automatic download of pve-kernel versions

Nothing gets downloaded automatically only if a user actually updates the host, at least if they did not set up something like unattended updates. Besides that, you normally want to get updates for important (security) fixes.

Rather, you want to remove older, unused kernels, executing apt autoremove should cover that, if not, please post the output of:

pveversion -v
ls -l /boot

btw. did you install PVE using the official ISO or on top of plain Debian? As for the latter you may want to remove the Debian kernels (apt remove 'linux-image*')

 

[haguards]

Серия 6.x устарела/не поддерживается, я бы порекомендовал в ближайшее время перейти на 7.x:
https://pve.proxmox.com/wiki/Обновление_от_6.x_до_7.0

Ничего не загружается автоматически, только если пользователь действительно обновляет хост, по крайней мере, если он не настроил что-то вроде автоматических обновлений . Кроме того, вы обычно хотите получать обновления для важных (безопасных) исправлений.

Скорее, вы хотите удалить старые, неиспользуемые ядра, выполнение apt autoremove должно покрыть это, если нет, опубликуйте вывод:

pveверсия -v
лс -л /загрузка[/код]

кстати. Вы установили PVE с помощью официального ISO или поверх простого Debian? Что касается последнего, вы можете удалить ядра Debian ([ICODE]apt remove 'linux-image*'[/ICODE])
[/QUOTE]

As I understand you are interested in the following data

proxmox-ve: 6.4-1 (running kernel: 5.4.174-2-pve)
pve-manager: 6.4-15 (running version: 6.4-15/af7986e6)
pve-kernel-5.4:6.4-20
pve-kernel-helper: 6.4-20
pve-kernel-5.4.203-1-pve:5.4.203-1
pve-kernel-5.4.195-1-pve:5.4.195-1
pve-kernel-5.4.189-2-pve:5.4.189-2
pve-kernel-5.4.174-2-pve:5.4.174-2
ceph-fuse: 12.2.11+dfsg1-2.1+b1



ls -l /boot
total 264591
-rw-r--r-- 1 root root 4729949 Mar 10 2022 System.map-5.4.174-2-pve
-rw-r--r-- 1 root root 4730939 Jun 13 10:39 System.map-5.4.189-2-pve
-rw-r--r-- 1 root root 4726421 Jul 13 14:19 System.map-5.4.195-1-pve
-rw-r--r-- 1 root root 4716551 Aug 26 15:43 System.map-5.4.203-1-pve
-rw-r--r-- 1 root root 237284 Mar 10 2022 config-5.4.174-2-pve
-rw-r--r-- 1 root root 237284 Jun 13 10:39 config-5.4.189-2-pve
-rw-r--r-- 1 root root 237256 Jul 13 14:19 config-5.4.195-1-pve
-rw-r--r-- 1 root root 237255 Aug 26 15:43 config-5.4.203-1-pve
drwxr-xr-x 5 root root 1024 Oct 15 17:51 grub
-rw-r--r-- 1 root root 48657281 Mar 26 2022 initrd.img-5.4.174-2-pve
-rw-r--r-- 1 root root 49131013 Jul 13 14:47 initrd.img-5.4.189-2-pve
-rw-r--r-- 1 root root 49127244 Jul 22 12:32 initrd.img-5.4.195-1-pve
-rw-r--r-- 1 root root 49128061 Sep 15 17:18 initrd.img-5.4.203-1-pve
drwx------ 2 root root 12288 Oct 5 2021 lost+found
drwxr-xr-x 2 root root 1024 Sep 15 17:18 pve
-rw-r--r-- 1 root root 13494656 Mar 10 2022 vmlinuz-5.4.174-2-pve
-rw-r--r-- 1 root root 13502848 Jun 13 10:39 vmlinuz-5.4.189-2-pve
-rw-r--r-- 1 root root 13482368 Jul 13 14:19 vmlinuz-5.4.195-1-pve
-rw-r--r-- 1 root root 13470080 Aug 26 15:43 vmlinuz-5.4.203-1-pve

I have already uninstalled old versions of the Debian kernel

I need to prevent downloading new versions of pve-kernel

 

[leesteken]

proxmox-ve: 6.4-1 (running kernel: 5.4.174-2-pve)
pve-manager: 6.4-15 (running version: 6.4-15/af7986e6)
pve-kernel-5.4:6.4-20
pve-kernel-helper: 6.4-20
pve-kernel-5.4.203-1-pve:5.4.203-1
pve-kernel-5.4.195-1-pve:5.4.195-1
pve-kernel-5.4.189-2-pve:5.4.189-2
pve-kernel-5.4.174-2-pve:5.4.174-2

You can probably free some space with apt-get purge pve-kernel-5.4.189-2-pve pve-kernel-5.4.189-2-pve, as you are not using them.
Are you not rebooting and using the latest kernel version (pve-kernel-5.4.203-1-pv) on purpose?
There won't be any more upgrades from Proxmox for PVE 6.4, so you don't have to worry about new kernels anymore.

 

[haguards]

You can probably free some space with apt-get purge pve-kernel-5.4.189-2-pve pve-kernel-5.4.189-2-pve, as you are not using them.
Are you not rebooting and using the latest kernel version (pve-kernel-5.4.203-1-pv) on purpose?
There won't be any more upgrades from Proxmox for PVE 6.4, so you don't have to worry about new kernels anymore.

Thanks for the info

And if we update proxmox to version 7, then how can we disable the automatic download of pve-kernel?

 

[leesteken]

And if we update proxmox to version 7, then how can we disable the automatic download of pve-kernel?

A freshly installed Proxmox does not automatically update or download updates. The pve-kernels are only downloaded and stored in that place with limited space when you manually install the pve-kernel updates. So in a default out-of-the-box installation, just stop installing updates manually (or just don't install the pve-kernel updates).

If your system is indeed installing updates automatically find out who changed that, how they did it and disable it.

Note that not updating the pve-kernel makes you miss out on security and bug fixes. Why not regularly reboot and remove old kernels? My Proxmox 7.2 does remove old kernel when running apt-get autoremove --purge automatically.

 

[t.lamprecht]

So in a default out-of-the-box installation, just stop installing updates manually (or just don't install the pve-kernel updates).

For completeness’ sake, as this really needs to be emphasized: Rather just remove the old, unused ones, as not installing new kernels, or updates in general, is a major security risk.
And if you don't just use PVE privately (e.g., home lab), say by hosting services for others or running it for a company it will be also a major liability issue.

 

[haguards]

For completeness’ sake, as this really needs to be emphasized: Rather just remove the old, unused ones, as not installing new kernels, or updates in general, is a major security risk.
And if you don't just use PVE privately (e.g., home lab), say by hosting services for others or running it for a company it will be also a major liability issue.

I understand that this is not entirely safe, but I'm wondering how I can turn off automatic downloads.
When I update, I will download the version I need

 

[t.lamprecht]

As I and leesteken told you multiple times: There is no automatic download by default!

The only way is either that you setup unattended upgrades (as link in my first reply) or setup some cron-job/periodic script that either downloads upgradable packages yourself. Otherwise those kernels simply came in by your last time upgrading manually.