PDA

View Full Version : how to get security update when i upgrade to the latest kernel compiled on my own



pramitkumarpal
December 16th, 2013, 05:04 PM
I was into ubuntu 12.04 3.5.0-23 and i compiled a custom kernel and went to 3.12.5 .
After upgrading the kernel how to get the security updates?

ubuntu 12.04 LTS updates show in my update manager, but that should be invalid, shouldn't it? as i upgraded the kernel myself..

Frogs Hair
December 16th, 2013, 05:48 PM
Kernel updates are based on the desktop meta packages and you will receive updates for the kernel 12.04 is supposed to be using and not the one you manually compiled. The update system doesn't detect the manually upgraded kernel and provide security updates for it. Please wait for a response from users that have an upgraded kernel installed. There is a way to keep the kernel from regressing when updates come, but I am not familiar with it.

Doug S
December 16th, 2013, 11:36 PM
I often run with non-standard kernels. For updates, I boot with the normal kernel and do the update. Afterwards, I boot again with whatever kernel I need.

buzzingrobot
December 17th, 2013, 12:28 AM
When you build your own kernel, you get to add the patches, too. :)

tgalati4
December 17th, 2013, 04:54 AM
You have a few options:

As Doug_S suggested, boot into the mainline kernel and do the updates--this is handy to have as a backup anyway. Then once a year or every 6 months, recompile the kernel with your configuration and any patches that you have added. When you update the source code (which sometimes lags the binaries as far as patches go) you will eventually get the patches in the mainline kernel source tree. The other option is to evaluate the patches (by reading the changlogs) and not doing any updates at all until you find an update that patches a severe vulnerability--or fixes a problem with your hardware.

The pain (and time) it takes to compile the kernel has to be weighed by any benefits of kernel updates. Because LTS kernels will receive updates (mainly security updates) for 5 years, you will want to review the changlogs to see what vulnerabilities got fixed. If your system is not facing the internet or running a server, then you can probably do your updates once a year.

pramitkumarpal
December 18th, 2013, 01:09 PM
Everyone thanks for the replies.:D :P