[Pkg-nagios-devel] Bug#1029720: Bug#1029720: monitoring-plugins-contrib: false positive w bookworm kernel: "running kernel does not match on-disk kernel image'

[Hilmar Preuße]

Am 26.01.2023 um 17:41 teilte Holger Levsen mit:

Hi,

> on a system running bookworm and the latest amd64 kernel
> /usr/lib/nagios/plugins/check_running_kernel warns me that the running kernel doesnt
> match the on-disk kernel, while it *is* running the latest kernel.
> (line breaks added for better readability.)
>
In the moment I'm trying to understand how the script works. My current
state is: it checks, which compression mode is used, for the kernel
images in /boot/ (which seems to be xz for bookworm), then it
decompresses the xz compressed part of the kernel images and searches
for "Linux version". The part after "Linux version" is compared to the
content of /proc/version. Unfortunately there is a difference:

/boot/vmlinuz:

Linux version 6.1.0-5-amd64 (debian-kernel at lists.debian.org) (gcc-12
(Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) # SMP
PREEMPT_DYNAMIC Debian 6.1.12-1 (2023-02-15)

/proc/version

Linux version 6.1.0-5-amd64 (debian-kernel at lists.debian.org) (gcc-12
(Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP
PREEMPT_DYNAMIC Debian 6.1.12-1 (2023-02-15)

So it could be a bug in the kernel configuration too. All this worked
fine on Debian stable. I did not check if there was another compression
method in use.

I could not dig further, I failed to extract the xz compressed part of
the kernel correctly. Not sure if this is useful.

Hilmar
--
sigfault