<p><strong>Prerequisites</strong></p> <p>You have created and installed Ping An Hotfix.</p> <p><strong><span style="font-size:16px">Upgrade to the Latest Kernel Version</span></strong></p> <p><strong>Procedures</strong></p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Execute the following command to upgrade the kernel version:</p> <p># ksplice kernel upgrade</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; After finishing the upgrade, you will be prompted with the currently effective kernel version.</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Execute the following command to view the actual kernel version that has been effective after Ksplice upgrade:</p> <p># ksplice kernel uname -r</p> <p>3.10.0-957.el7.x86_64</p> <p><strong><span style="font-size:16px">Online Upgrade of Core Components in User Space</span></strong></p> <p><strong>Procedures</strong></p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Execute the following command to upgrade the glibc and openssl packages. After finishing the upgrade, you will be prompted to adapt the following processes and services:</p> <p># ksplice -y user upgrade</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; After finishing the operation, execute the following command to view the processes and services that have been adapted:</p> <p># ksplice user show</p> <p><strong>Note:</strong></p> <p>The update frequency of the user space core component-related upgrade packages is lower than the kernel security patch update frequency. Once the system installs the updated version of glibc or openssl through yum update, Ksplice will automatically synchronize to ensure that the ksplice aware library and the file system glibc and openssl remain consistent. In addition, after the system restarts, since the process adapts to the new version of glibc and openssl during the restart, the ksplice command will no longer view the adaptation of the user space hot upgrade.</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The most common function of using Ksplice to enhance the client is to upgrade the core components of user space. You can execute the following commands:</p> <p># ksplice user upgrade</p> <p><strong><span style="font-size:16px">Online Retro-version of Core Components in User Space</span></strong></p> <p><strong>Procedures</strong></p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Execute the following command to delete the adaptation of all user space core components:</p> <p># ksplice user remove --all</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Execute the following command to downgrade all ksplice aware library packages:</p> <p># yum downgrade glibc{,-devel,-headers,-common} openssl{,-devel}</p> <p>More Operation Commands</p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; View all hot-installed kernel Hotfixes and user space adaptation after updating glibc and openssl:</p> <p># ksplice user show</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; View the adaptation of user space after updating glibc and openssl:</p> <p># ksplice user show</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; View all hot-installed kernel Hotfixes:</p> <p># ksplice kernel show</p> <p>4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; View the currently valid kernel version number:</p> <p># ksplice kernel uname -r</p> <p>5.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; View the status of a process (PID) adapting to user space upgrade:</p> <p># ksplice user show --pid=&lt;PID&gt;</p> <p>6.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; When some patch modules in uptrack-updates are deleted, review and install:</p> <p># ksplice kernel upgrade</p> <p>7.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Delete all user space hot upgrade patches:</p> <p># ksplice user remove --all</p> <p>8.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; If intervention/non-intervention is required, usually add &quot;-y&quot; or &quot;-n&quot; option, for example:</p> <p># ksplice -|- kernel upgrade</p> <p># ksplice -y |- user upgrad</p>