CentOS 內核升級步驟和方法

當前系統爲CentOS Linux release 6.0 (Final)，內核版本爲2.6.32-71.el6.i686.因爲最近內核出現最新的漏洞(linux kernel 又爆內存提權漏洞，2.6.39 內核無一倖免，因此將內核升級至3.2.2最新版本。

一、查看當前系統內核

# uname -r 2 2.6.32-71.el6.i686

二、下載linux-3.2.2內核包

# cd ~
# wget -c http://www.kernel.org/pub/linux/kernel/v3.0/linux-3.2.2.tar.bz2
# tar jxvf linux-3.2.2.tar.bz2
# cd linux-3.2.2

三、配置內核並安裝

# make mrproper  #清除環境變量，即清除配置文件
# make menuconfig  #在菜單模式下選擇須要編譯的內核模塊

找到如下選中選項並選中networking support → networking options → network packet filtering framework(netfilter)

(1)Core netfilter configuration

• 勾中"Netfilter connection tracking support" -m state相關模塊是依賴它的，不選則沒有。
• 將netbios name service protocal support(new) 編譯成模塊,否則後面升級iptables後啓動時會出錯
• 勾中"Netfilter Xtables support (required for ip_tables)"

(2)IP: Netfilter Configuration

• 將 "IPv4 connection tracking support (require for NAT)" 編譯成模塊。
• 勾中IP tables support (required for filtering/masq/NAT) 。
• 將 "Full NAT" 下的 "MASQUERADE target support" 和 "REDIRECT target support" 編譯成模塊

(3)其它模塊能夠根據本身的須要進行選擇,若不懂能夠參考內核配置手冊.

# make clean #確保全部東西均保持最新狀態.
# make bzImage #生成內核文件
# make modules #編譯模塊
# make modules_install #安裝模塊
# make install #安裝

四、編輯 /etc/grub.conf 文件，將 default=1 改成 default=0

# cat /etc/grub.conf # grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE: You have a /boot partition. This means that
# all kernel and initrd paths are relative to /boot/, eg.
# root (hd0,0)
# kernel /vmlinuz-version ro root=/dev/mapper/VolGroup-lv_root
# initrd /initrd-[generic-]version.img
#boot=/dev/sdadefault=1 timeout=5
splashimage=(hd0,0)/grub/splash.xpm.gz
hiddenmenu
title CentOS Linux (3.2.2)
root (hd0,0)
kernel /vmlinuz-3.2.2 ro root=/dev/mapper/VolGroup-lv_root rd_LVM_LV=VolGroup/lv_root rd_LVM_LV=VolGroup/lv_swap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet
initrd /initramfs-3.2.2.img
title centos (2.6.32-71.el6.i686)
root (hd0,0)
kernel /vmlinuz-2.6.32-71.el6.i686 ro root=/dev/mapper/VolGroup-lv_root rd_LVM_LV=VolGroup/lv_root rd_LVM_LV=VolGroup/lv_swap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet
initrd /initramfs-2.6.32-71.el6.i686.img

五、重啓系統,並查看內核

# reboot # uname -r 3.2.