centos升級內核教程

當前系統為CentOS Linux release 6.0 (Final)，內核版本為2.6.32-71.el6.i686.由於最近內核出現最新的漏洞(linux kernel 又爆內存提權漏洞，2.6.39 內核無一幸免，所以將內核升級至3.2.2最新版本。

1.查看當前系統內核

# uname -r
2 2.6.32-71.el6.i686

2. 下載linux-3.2.2內核包

# cd ~
# wget -c http://www.kernel.org/pub/linux/kernel/v3.0/linux-3.2.2.tar.bz2
# tar jxvf  linux-3.2.2.tar.bz2
# cd linux-3.2.2

3. 配置內核並安裝

# make mrproper  #清除環境變量，即清除配置文件
# make menuconfig  #在菜單模式下選擇需要編譯的內核模塊

找到以下選中選項並選中networking support → networking options → network packet filtering framework(netfilter)

(1).core netfilter configuration

• 勾中”Netfilter connection tracking support” -m state相關模塊是依賴它的，不選則沒有。
• 將netbios name service protocal support(new) 編譯成模塊,不然後面升級iptables後啟動時會出錯
• 勾中“Netfilter Xtables support (required for ip_tables)”

(2).IP: Netfilter Configuration

• 將 “IPv4 connection tracking support (require for NAT)” 編譯成模塊。
• 勾中IP tables support (required for filtering/masq/NAT) 。
• 將 “Full NAT” 下的 “MASQUERADE target support” 和 “REDIRECT target support” 編譯成模塊

(3).其它模塊可以根據自己的需要進行選擇,若不懂可以參考內核配置手冊.

# make clean #確保所有東西均保持最新狀態.
# make bzImage #生成內核文件
# make modules #編譯模塊
# make modules_install #安裝模塊
# make install #安裝

4. 編輯 /etc/grub.conf 文件，將 default=1 改為 default=0

# cat /etc/grub.conf
# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE: You have a /boot partition. This means that
# all kernel and initrd paths are relative to /boot/, eg.
# root (hd0,0)
# kernel /vmlinuz-version ro root=/dev/mapper/VolGroup-lv_root
# initrd /initrd-[generic-]version.img
#boot=/dev/sda
default=1
timeout=5
splashimage=(hd0,0)/grub/splash.xpm.gz
hiddenmenu
title CentOS Linux (3.2.2)
root (hd0,0)
kernel /vmlinuz-3.2.2 ro root=/dev/mapper/VolGroup-lv_root rd_LVM_LV=VolGroup/lv_root rd_LVM_LV=VolGroup/lv_swap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet
initrd /initramfs-3.2.2.img
title centos (2.6.32-71.el6.i686)
root (hd0,0)
kernel /vmlinuz-2.6.32-71.el6.i686 ro root=/dev/mapper/VolGroup-lv_root rd_LVM_LV=VolGroup/lv_root rd_LVM_LV=VolGroup/lv_swap rd_NO_LUKS rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us crashkernel=auto rhgb quiet
initrd /initramfs-2.6.32-71.el6.i686.img

5. 重啟系統,並查看內核

# reboot
# uname -r
3.2.2