[SOLVED] Installing kernelcare in container issue with insmod

[robm]

Using centOS 7 LXC as "unprivileged containers" and trying to install kernelcare for rebootless kernel updates, and running into this error:

insmod: ERROR: could not insert module /var/cache/kcare/modules/none-abcd/kcare.ko: Operation not permitted
Unable to load kmod (/var/cache/kcare/modules/none-abcd/kcare.ko 1)

Is there a way to use kernelcare in an LXC centOS 7 container with proxmox?

 

[wolfgang]

Hi,

What do you try to achieve?
LXC uses the Host kernel.
It would be fatal if an unprivileged container could replace the host kernel.
Also, a privileged Container should not be capable to do this.

 

[robm]

I thought with LXC, since we can install any OS, that we have to manage each LXC's kernel with updates, etc... We are trying to apply kernelcare to each LXC so we do not have to reboot the container each time a new kernel is released for the OS of the container.

For example, if the container is a centOS 7 one, can we install kernelcare to manage the container's kernel? Or do we have to restart the container each time a new centOS 7 kernel is released?

 

[oguz]

the kernel inside the container is completely irrelevant. the host kernel is used regardless of whichever kernel you may have installed in the container (technically you don't even need to install a kernel on the container).

 

[robm]

Ah ok, thanks for the explanation. We'll put kernelcare on the host, and we should be good then.

 

[oguz]

glad it's all clear!

you can mark the thread as [SOLVED] so others can know what to expect