konstruktoid/hardening

Question: how do you update the kernel after hardening?

Thumpermat opened this issue · 4 comments

Thumpermat commented

I used your packer to create a hardened ubuntu server. Now there is a linux kernel update, but because of the hardening the server doesn't get updated with the new kernel.

Which steps should I do in order to update the linux kernel and then harden the system again?

Looking forward to your reply.

konstruktoid commented

Hi again @Thumpermat,
See konstruktoid/hardened-images#3 regarding a possible workaround for the kernel installation issue.

My workflow is basically:

  • Create initial image (using the Packer code) and use that as a template
  • Install and configure wanted services on the server generated from the above template
  • Maintain and update the server using e.g Ansible
Thumpermat commented

So you mean that by adding the /boot/grub/grub.cfg and updating grub, it will also update the kernel?

konstruktoid commented

Create /boot/grub/ if missing and then run update-grub.
There should the be no issues upgrading the kernel after that.

Thumpermat commented

Thank you very much.