背景

kernelが必要なミドルウェアをシステムで利用している
AWS SystemsManagerからパッチ適用を行いkernelのアップデートを行っていた
→SystemsManagerでアップデートされた最新のバージョンではミドルウェア側が対応していなかったため、kernelのバージョンアップはパッチ適用時には除外し、手動でバージョンアップを行うことにした

環境

RHEL 8.8 (Ootpa)
kernel-4.18.0-477.21.1.el8_8.x86_64
→kernel-4.18.0-513.11.1.el8_9 (これにしたい)

手順

パッチ適用の除外設定

kernelのバージョンのみ、SystemsManagerのパッチ適用からアップデートをしたくないので除外設定を行う

パッチベースラインの編集から、除外したいkernel関連パッチを例外に設定し、拒否されたパッチのアクションを「ブロック」にする

パッチの例外に反映されていることを確認

　
パッチ適用時の例外設定が完了

kernel手動アップデート

現在のバージョンを確認

[root@ip ~]# uname -r
4.18.0-477.21.1.el8_8.x86_64
[root@ip ~]# grubby --default-kernel
/boot/vmlinuz-4.18.0-477.21.1.el8_8.x86_64

システムで利用できるkernelのバージョンを表示

[root@ip~]# dnf --showduplicate list kernel*
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Red Hat Enterprise Linux 8 for x86_64 - AppStream from RHUI (RPMs)                                                                                                                 65 kB/s | 4.5 kB     00:00
Red Hat Enterprise Linux 8 for x86_64 - AppStream from RHUI (RPMs)                                                                                                                 64 MB/s |  64 MB     00:01
Red Hat Enterprise Linux 8 for x86_64 - BaseOS from RHUI (RPMs)                                                                                                                   114 kB/s | 4.1 kB     00:00
Red Hat Enterprise Linux 8 for x86_64 - BaseOS from RHUI (RPMs)                                                                                                                    63 MB/s |  70 MB     00:01
Red Hat Update Infrastructure 3 Client Configuration Server 8                                                                                                                      47 kB/s | 1.5 kB     00:00
Red Hat Update Infrastructure 3 Client Configuration Server 8                                                                                                                      64 kB/s | 3.5 kB     00:00
Last metadata expiration check: 0:00:01 ago on Fri 07 Jun 2024 01:33:12 AM UTC.
Installed Packages
kernel.x86_64                                                                                     4.18.0-348.el8                                                                        @System
kernel.x86_64                                                                                     4.18.0-477.21.1.el8_8                                                                 @rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-348.el8                                                                        @System
kernel-core.x86_64                                                                                4.18.0-477.21.1.el8_8                                                                 @rhel-8-baseos-rhui-rpms
kernel-modules.x86_64                                                                             4.18.0-348.el8                                                                        @System
kernel-modules.x86_64                                                                             4.18.0-477.21.1.el8_8                                                                 @rhel-8-baseos-rhui-rpms
kernel-tools.x86_64                                                                               4.18.0-477.21.1.el8_8                                                                 @rhel-8-baseos-rhui-rpms
kernel-tools-libs.x86_64                                                                          4.18.0-477.21.1.el8_8                                                                 @rhel-8-baseos-rhui-rpms
Available Packages
(中略)

kernel-core.x86_64                                                                                4.18.0-372.16.1.el8_6                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-372.19.1.el8_6                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-372.26.1.el8_6                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-372.32.1.el8_6                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-425.3.1.el8                                                                    rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-425.10.1.el8_7                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-425.13.1.el8_7                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-425.19.2.el8_7                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-477.10.1.el8_8                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-477.13.1.el8_8                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-477.15.1.el8_8                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-477.21.1.el8_8                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-477.27.1.el8_8                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-513.5.1.el8_9                                                                  rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-513.9.1.el8_9                                                                  rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-513.11.1.el8_9                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-513.18.1.el8_9                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-513.24.1.el8_9                                                                 rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-553.el8_10                                                                     rhel-8-baseos-rhui-rpms
kernel-core.x86_64                                                                                4.18.0-553.5.1.el8_10                                                                 rhel-8-baseos-rhui-rpms
(以下略)

kernelバージョンを指定してインストール

[root@ip- ~]# dnf -y install kernel*-4.18.0-513.11.1.el8_9
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:01:03 ago on Fri 07 Jun 2024 01:33:12 AM UTC.
Dependencies resolved.
==================================================================================================================================================================================================================
 Package                                             Architecture                    Version                                                            Repository                                           Size
==================================================================================================================================================================================================================
Installing:
 kernel                                              x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              10 M
 kernel-abi-stablelists                              noarch                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              10 M
 kernel-core                                         x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              43 M
 kernel-cross-headers                                x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              15 M
 kernel-debug                                        x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              10 M
 kernel-debug-core                                   x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              72 M
 kernel-debug-devel                                  x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              24 M
 kernel-debug-modules                                x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              65 M
 kernel-debug-modules-extra                          x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              11 M
 kernel-devel                                        x86_64                          4.18.0-513.11.1.el8_9                                              rhel-8-baseos-rhui-rpms                              24 M
 kernel-doc                                          noarch                          4.18.0-513.11.1.el8_9          
(中略)
Installed:
  bison-3.0.4-10.el8.x86_64                                               elfutils-libelf-devel-0.188-3.el8.x86_64                                flex-2.6.1-9.el8.x86_64
  kernel-4.18.0-513.11.1.el8_9.x86_64                                     kernel-abi-stablelists-4.18.0-513.11.1.el8_9.noarch                     kernel-core-4.18.0-513.11.1.el8_9.x86_64
  kernel-cross-headers-4.18.0-513.11.1.el8_9.x86_64                       kernel-debug-4.18.0-513.11.1.el8_9.x86_64                               kernel-debug-core-4.18.0-513.11.1.el8_9.x86_64
  kernel-debug-devel-4.18.0-513.11.1.el8_9.x86_64                         kernel-debug-modules-4.18.0-513.11.1.el8_9.x86_64                       kernel-debug-modules-extra-4.18.0-513.11.1.el8_9.x86_64
  kernel-devel-4.18.0-513.11.1.el8_9.x86_64                               kernel-doc-4.18.0-513.11.1.el8_9.noarch                                 kernel-headers-4.18.0-513.11.1.el8_9.x86_64
  kernel-modules-4.18.0-513.11.1.el8_9.x86_64                             kernel-modules-extra-4.18.0-513.11.1.el8_9.x86_64                       keyutils-libs-devel-1.5.10-9.el8.x86_64
  krb5-devel-1.18.2-25.el8_8.x86_64                                       libcom_err-devel-1.45.6-5.el8.x86_64                                    libkadm5-1.18.2-25.el8_8.x86_64
  libselinux-devel-2.9-8.el8.x86_64                                       libsepol-devel-2.9-3.el8.x86_64                                         libverto-devel-0.3.2-2.el8.x86_64
  m4-1.4.18-7.el8.x86_64                                                  make-1:4.2.1-11.el8.x86_64                                              openssl-devel-1:1.1.1k-9.el8_7.x86_64
  pcre2-devel-10.32-3.el8_6.x86_64                                        pcre2-utf16-10.32-3.el8_6.x86_64                                        pcre2-utf32-10.32-3.el8_6.x86_64
  perl-Carp-1.42-396.el8.noarch                                           perl-Data-Dumper-2.167-399.el8.x86_64                                   perl-Digest-1.17-395.el8.noarch
  perl-Digest-MD5-2.55-396.el8.x86_64                                     perl-Encode-4:2.97-3.el8.x86_64                                         perl-Errno-1.28-422.el8.x86_64
  perl-Exporter-5.72-396.el8.noarch                                       perl-File-Path-2.15-2.el8.noarch                                        perl-File-Temp-0.230.600-1.el8.noarch
  perl-Getopt-Long-1:2.50-4.el8.noarch                                    perl-HTTP-Tiny-0.074-3.el8.noarch                                       perl-IO-1.38-422.el8.x86_64
  perl-IO-Socket-IP-0.39-5.el8.noarch                                     perl-IO-Socket-SSL-2.066-4.module+el8.3.0+6446+594cad75.noarch          perl-MIME-Base64-3.15-396.el8.x86_64
  perl-Mozilla-CA-20160104-7.module+el8.3.0+6498+9eecfe51.noarch          perl-Net-SSLeay-1.88-2.module+el8.6.0+13392+f0897f98.x86_64             perl-PathTools-3.74-1.el8.x86_64
  perl-Pod-Escapes-1:1.07-395.el8.noarch                                  perl-Pod-Perldoc-3.28-396.el8.noarch                                    perl-Pod-Simple-1:3.35-395.el8.noarch
  perl-Pod-Usage-4:1.69-395.el8.noarch                                    perl-Scalar-List-Utils-3:1.49-2.el8.x86_64                              perl-Socket-4:2.027-3.el8.x86_64
  perl-Storable-1:3.11-3.el8.x86_64                                       perl-Term-ANSIColor-4.06-396.el8.noarch                                 perl-Term-Cap-1.17-395.el8.noarch
  perl-Text-ParseWords-3.30-395.el8.noarch                                perl-Text-Tabs+Wrap-2013.0523-395.el8.noarch                            perl-Time-Local-1:1.280-1.el8.noarch
  perl-URI-1.73-3.el8.noarch                                              perl-Unicode-Normalize-1.25-396.el8.x86_64                              perl-constant-1.33-396.el8.noarch
  perl-interpreter-4:5.26.3-422.el8.x86_64                                perl-libnet-3.11-3.el8.noarch                                           perl-libs-4:5.26.3-422.el8.x86_64
  perl-macros-4:5.26.3-422.el8.x86_64                                     perl-parent-1:0.237-1.el8.noarch                                        perl-podlators-4.11-1.el8.noarch
  perl-threads-1:2.21-2.el8.x86_64                                        perl-threads-shared-1.58-2.el8.x86_64                                   zlib-devel-1.2.11-21.el8_7.x86_64

Complete!
[root@ip-~]#

再起動を行いkernelのバージョン確認

[root@ip- ~]# reboot

再起動後・・・

[root@ip- ~]# uname -r
4.18.0-513.11.1.el8_9.x86_64
[root@ip-~]# grubby --default-kernel
/boot/vmlinuz-4.18.0-513.11.1.el8_9.x86_64
[root@ip- ~]#

手動でバージョンアップを行うことができました