“Why would I care about running KernelCare on an unsupported distribution”, you might ask me. “What are you talking about? Why are you here?! Get off my lawn!” might be another.

KernelCare is a great idea which sometimes breaks, but usually keeps you well within your SLA. It lets you do nearly-realtime half-week-or-so (I won’t claim 0-day) patching of the kernel without rebooting. This gets your kernel safe enough for the majority of issues – fairly consistently.

KernelCare supports Debian (Kind of), and by proxy- Devuan (Kind of).

For starters, you’re going to need to have the prerequisites installed- Python 2.7 (standard) with a few support tools. I’ll help you get those running (Kind of).

Although soon to be out-of-date, the easiest ways to get this handled is with pip 19. Obviously, I’d strongly suggest checking the base85 code before running it blindly as root, but for the sake of convenience:


$wget https://bootstrap.pypa.io/get-pip.py -O - | sudo python

Finally, we need an old version of cryptography to work with this older framework (I’m not the biggest fan of this design, either):

$sudo pip install 'cryptography<2.2'

Finally, you can install KernelCare! My modified installer script lives here for now. You’ll want to read the code, then run that, too- if you trust it. The default installer doesn’t work for Devuan. Since there is no direct numeric ID in the os-release file used by CloudLinux, I made it parse $PRETTY_NAME. It only understands ascii (Debian 9), and defaults to jessie (Debian 8) if it doesn’t match.

In the end, you’ll end up with something like this:

# kcarectl -i
Unknown kernel (debian 4.19.0-0.bpo.1-amd64), no patches available

OK, so this isn’t the best example, since I’m running a nonstandard kernel in this example, but it works!

Welcome, one, and all to 2019. Kicking, screaming, and otherwise- we’re all here.

Well, I wanted to bring you something from the archives of “Wait, that happened?”

Here’s an Atari ST demo song by Mad Max. It was so good that I encoded it to MP3 20 some years ago so I could save it to play on my CD MP3 player. Yeah, those were a thing.

Here it is. Enjoy!

Sorry, if you don’t have Flash (yeah, oldschool all the way in this post), here is a direct link.

We’ve entered an interesting time on the internet.

I’ve always been a proponent of free speech- whether I agree with you, or not. I’ve never tried to do more than ridicule people who have a differing opinion.

We’ve entered another era.

People are no longer content making fun of, teasing, or otherwise. They’re now deplatforming them. What does that mean?

Well, after ridicule, then they went on to contacting the internet providers to try to get them kicked off.

A few years later- employers, to attempt to get them fired.

Skip a few years forward- and now they’re trying to remove them completely from the internet. They’re getting them removed from Facebook (see my earlier post about this). They’re removing them from YouTube. They’re getting their funding removed from crowdfunding sites. They’re removing their abilities to say whatever stupid things they should have the right to say, no matter how much it might be disagreed with.

I don’t care how slow you are. I don’t care how much I disagree with you. I don’t even care how much of a jerk you might be- The internet is still yours. This is wrong.

Older Entries: Newer Entries: Stuff from before