Hello CentOS users,
in the recent time I keep getting the logwatch warnings from my 2 dedicated servers running CentOS 7.4.1708.
I guess because of the numerous kernel updates (because of Spectre+Meltdown) in the near past?
Could someone please suggest me, which files in my /boot partition would be safe to delete?
I would like to avoid the situation of having to boot the rescue partiton etc. remotely... and at the same time I am not proficient with grub or whatever my provider has configured my dedicated hosts to use...
# ls -al /boot total 427877 dr-xr-xr-x. 6 root root 6144 28. Jan 10:33 . dr-xr-xr-x 18 root root 4096 7. Feb 03:34 .. -rw-r--r-- 1 root root 140899 5. Dez 01:04 config-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 140915 4. Jan 02:19 config-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 140915 25. Jan 21:26 config-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 140898 13. Sep 00:38 config-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 140898 20. Okt 22:56 config-3.10.0-693.5.2.el7.x86_64 drwxr-xr-x 3 root root 1024 15. Sep 09:43 efi drwxr-xr-x. 2 root root 1024 11. Apr 2016 grub drwx------. 5 root root 1024 28. Jan 10:31 grub2 -rw-r--r--. 1 root root 40142116 15. Dez 2015 initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img -rw------- 1 root root 50402914 6. Dez 09:23 initramfs-3.10.0-693.11.1.el7.x86_64.img -rw------- 1 root root 18149718 6. Dez 09:24 initramfs-3.10.0-693.11.1.el7.x86_64kdump.img -rw------- 1 root root 50405879 5. Jan 09:02 initramfs-3.10.0-693.11.6.el7.x86_64.img -rw------- 1 root root 18150336 5. Jan 09:04 initramfs-3.10.0-693.11.6.el7.x86_64kdump.img -rw------- 1 root root 50402830 28. Jan 10:31 initramfs-3.10.0-693.17.1.el7.x86_64.img -rw------- 1 root root 18147918 28. Jan 10:33 initramfs-3.10.0-693.17.1.el7.x86_64kdump.img -rw------- 1 root root 50341850 15. Sep 09:45 initramfs-3.10.0-693.2.2.el7.x86_64.img -rw------- 1 root root 18147818 22. Okt 10:07 initramfs-3.10.0-693.2.2.el7.x86_64kdump.img -rw------- 1 root root 50393743 24. Okt 09:39 initramfs-3.10.0-693.5.2.el7.x86_64.img -rw------- 1 root root 18146720 24. Okt 09:40 initramfs-3.10.0-693.5.2.el7.x86_64kdump.img -rw-r--r--. 1 root root 611928 15. Sep 09:45 initrd-plymouth.img drwx------ 2 root root 12288 25. Mai 2016 lost+found -rw-r--r-- 1 root root 293093 5. Dez 01:07 symvers-3.10.0-693.11.1.el7.x86_64.gz -rw-r--r-- 1 root root 293110 4. Jan 02:21 symvers-3.10.0-693.11.6.el7.x86_64.gz -rw-r--r-- 1 root root 293109 25. Jan 21:28 symvers-3.10.0-693.17.1.el7.x86_64.gz -rw-r--r-- 1 root root 293064 13. Sep 00:40 symvers-3.10.0-693.2.2.el7.x86_64.gz -rw-r--r-- 1 root root 293084 20. Okt 22:59 symvers-3.10.0-693.5.2.el7.x86_64.gz -rw------- 1 root root 3228852 5. Dez 01:04 System.map-3.10.0-693.11.1.el7.x86_64 -rw------- 1 root root 3232490 4. Jan 02:19 System.map-3.10.0-693.11.6.el7.x86_64 -rw------- 1 root root 3232454 25. Jan 21:26 System.map-3.10.0-693.17.1.el7.x86_64 -rw------- 1 root root 3228852 13. Sep 00:38 System.map-3.10.0-693.2.2.el7.x86_64 -rw------- 1 root root 3228852 20. Okt 22:56 System.map-3.10.0-693.5.2.el7.x86_64 -rwxr-xr-x. 1 root root 5156528 15. Dez 2015 vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af -rwxr-xr-x 1 root root 5877504 5. Dez 01:05 vmlinuz-3.10.0-693.11.1.el7.x86_64 -rw-r--r-- 1 root root 171 5. Dez 01:05 .vmlinuz-3.10.0-693.11.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5889728 4. Jan 02:19 vmlinuz-3.10.0-693.11.6.el7.x86_64 -rw-r--r-- 1 root root 171 4. Jan 02:19 .vmlinuz-3.10.0-693.11.6.el7.x86_64.hmac -rwxr-xr-x 1 root root 5890720 25. Jan 21:26 vmlinuz-3.10.0-693.17.1.el7.x86_64 -rw-r--r-- 1 root root 171 25. Jan 21:26 .vmlinuz-3.10.0-693.17.1.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878848 13. Sep 00:38 vmlinuz-3.10.0-693.2.2.el7.x86_64 -rw-r--r-- 1 root root 170 13. Sep 00:38 .vmlinuz-3.10.0-693.2.2.el7.x86_64.hmac -rwxr-xr-x 1 root root 5878368 20. Okt 22:56 vmlinuz-3.10.0-693.5.2.el7.x86_64 -rw-r--r-- 1 root root 170 20. Okt 22:56 .vmlinuz-3.10.0-693.5.2.el7.x86_64.hmac
# cat /etc/grub2.cfg # # DO NOT EDIT THIS FILE # # It is automatically generated by grub2-mkconfig using templates # from /etc/grub.d and settings from /etc/default/grub #
### BEGIN /etc/grub.d/00_header ### set pager=1
if [ -s $prefix/grubenv ]; then load_env fi if [ "${next_entry}" ] ; then set default="${next_entry}" set next_entry= save_env next_entry set boot_once=true else set default="${saved_entry}" fi
if [ x"${feature_menuentry_id}" = xy ]; then menuentry_id_option="--id" else menuentry_id_option="" fi
export menuentry_id_option
if [ "${prev_saved_entry}" ]; then set saved_entry="${prev_saved_entry}" save_env saved_entry set prev_saved_entry= save_env prev_saved_entry set boot_once=true fi
function savedefault { if [ -z "${boot_once}" ]; then saved_entry="${chosen}" save_env saved_entry fi }
function load_video { if [ x$feature_all_video_module = xy ]; then insmod all_video else insmod efi_gop insmod efi_uga insmod ieee1275_fb insmod vbe insmod vga insmod video_bochs insmod video_cirrus fi }
terminal_output console if [ x$feature_timeout_style = xy ] ; then set timeout_style=menu set timeout=5 # Fallback normal timeout code in case the timeout_style feature is # unavailable. else set timeout=5 fi ### END /etc/grub.d/00_header ###
### BEGIN /etc/grub.d/00_tuned ### set tuned_params="" ### END /etc/grub.d/00_tuned ###
### BEGIN /etc/grub.d/01_users ### if [ -f ${prefix}/user.cfg ]; then source ${prefix}/user.cfg if [ -n "${GRUB2_PASSWORD}" ]; then set superusers="root" export superusers password_pbkdf2 root ${GRUB2_PASSWORD} fi fi ### END /etc/grub.d/01_users ###
### BEGIN /etc/grub.d/10_linux ### menuentry 'CentOS Linux (3.10.0-693.17.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.17.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.17.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.6.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.6.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.6.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.11.1.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.11.1.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.11.1.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.5.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.5.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.5.2.el7.x86_64.img } menuentry 'CentOS Linux (3.10.0-693.2.2.el7.x86_64) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-3.10.0-327.13.1.el7.x86_64-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video set gfxpayload=keep insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-3.10.0-693.2.2.el7.x86_64 root=/dev/md/2 ro nomodeset rd.auto=1 crashkernel=auto LANG=en_US.UTF-8 initrd16 /initramfs-3.10.0-693.2.2.el7.x86_64.img } menuentry 'CentOS Linux (0-rescue-34946d7b5edb0946bfb52c0f6cae67af) 7 (Core)' --class centos --class gnu-linux --class gnu --class os --unrestricted $menuentry_id_option 'gnulinux-0-rescue-34946d7b5edb0946bfb52c0f6cae67af-advanced-2a4bc862-eb7a-46b1-8979-d19c873dca3b' { load_video insmod gzio insmod part_msdos insmod part_msdos insmod diskfilter insmod mdraid1x insmod ext2 set root='mduuid/84bbf877f8bd0f7aa0c64064178966b4' if [ x$feature_platform_search_hint = xy ]; then search --no-floppy --fs-uuid --set=root --hint='mduuid/84bbf877f8bd0f7aa0c64064178966b4' 2206a439-5490-46d0-8d5e-9da8962924df else search --no-floppy --fs-uuid --set=root 2206a439-5490-46d0-8d5e-9da8962924df fi linux16 /vmlinuz-0-rescue-34946d7b5edb0946bfb52c0f6cae67af root=UUID=2a4bc862-eb7a-46b1-8979-d19c873dca3b ro nomodeset rd.auto=1 crashkernel=auto initrd16 /initramfs-0-rescue-34946d7b5edb0946bfb52c0f6cae67af.img } if [ "x$default" = 'CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)' ]; then default='Advanced options for CentOS Linux>CentOS Linux (3.10.0-327.13.1.el7.x86_64) 7 (Core)'; fi; ### END /etc/grub.d/10_linux ###
### BEGIN /etc/grub.d/20_linux_xen ### ### END /etc/grub.d/20_linux_xen ###
### BEGIN /etc/grub.d/20_ppc_terminfo ### ### END /etc/grub.d/20_ppc_terminfo ###
### BEGIN /etc/grub.d/30_os-prober ### ### END /etc/grub.d/30_os-prober ###
### BEGIN /etc/grub.d/40_custom ### # This file provides an easy way to add custom menu entries. Simply type the # menu entries you want to add after this comment. Be careful not to change # the 'exec tail' line above. ### END /etc/grub.d/40_custom ###
### BEGIN /etc/grub.d/41_custom ### if [ -f ${config_directory}/custom.cfg ]; then source ${config_directory}/custom.cfg elif [ -z "${config_directory}" -a -f $prefix/custom.cfg ]; then source $prefix/custom.cfg; fi ### END /etc/grub.d/41_custom ###
Thank you for any hints Alex