Remove old Ubuntu kernel packages¶

Available since 2.25.0

During a management or managed cluster update with Ubuntu package updates, Container Cloud automatically removes unnecessary kernel and system packages.

During cleanup, Container Cloud keeps two most recent kernel versions, which is the default behavior of the Ubuntu apt autoremove command. The number of kernel packages may be more than two if this command has never been used.

Mirantis recommends keeping two kernel versions with the previous kernel version for fallback in case the current kernel becomes unstable. However, if you absolutely require leaving only the latest version of kernel packages, you can use the script described below after considering all possible risks.

To remove all kernel packages of the previous version:

Verify that the cluster is successfully updated and is in the Ready state.
Log in as root to the required node using SSH.

Run the following script that calls an Ansible module targeted at local host. The module outputs a list of packages to remove, if any, without actually removing them.

cleanup-kernel-packages

The script workflow includes the following tasks:

Task order	Task name	Description
1	`Get kernels to cleanup`	Collect installed kernel packages and detect the candidates for removal.
2	`Get kernels to cleanup (LOG)`	Print the log from the first task.
3	`Kernel packages to remove`	Print the list of packages collected by the first task.
4	`Remove kernel packages`	Remove packages that are detected as candidates for removal if the following conditions are met: The script detects at least one candidate for removal You add the `--cleanup` flag to the cleanup-kernel-packages command

If the system outputs any packages to remove, carefully assess the list from the output of the Kernel packages to remove task.

Caution

The script removes all detected packages. There is no possibility to modify the list of candidates for removal.

Example of system response with several packages to remove

TASK [Get kernels to cleanup]
ok: [localhost]

TASK [Get kernels to cleanup (LOG)]
ok: [localhost] => {
    "cleanup_kernels.log": [
        "2023-09-28 10:08:42,849 [INFO] Logging enabled",
        "2023-09-28 10:08:42,865 [DEBUG] Found kernel package linux-headers-5.15.0-79-generic, version 5.15.0.post79-generic",
        "2023-09-28 10:08:42,865 [DEBUG] Found kernel package linux-headers-5.15.0-83-generic, version 5.15.0.post83-generic",
        "2023-09-28 10:08:42,865 [DEBUG] Found kernel package linux-hwe-5.15-headers-5.15.0-79, version 5.15.0.post79",
        "2023-09-28 10:08:42,865 [DEBUG] Found kernel package linux-hwe-5.15-headers-5.15.0-83, version 5.15.0.post83",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-image-5.15.0-79-generic, version 5.15.0.post79-generic",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-image-5.15.0-83-generic, version 5.15.0.post83-generic",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-modules-5.15.0-79-generic, version 5.15.0.post79-generic",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-modules-5.15.0-83-generic, version 5.15.0.post83-generic",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-modules-extra-5.15.0-79-generic, version 5.15.0.post79-generic",
        "2023-09-28 10:08:42,866 [DEBUG] Found kernel package linux-modules-extra-5.15.0-83-generic, version 5.15.0.post83-generic",
        "2023-09-28 10:08:42,871 [DEBUG] Current kernel is 5.15.0.post83-generic",
        "2023-09-28 10:08:42,871 [INFO] Kernel package version prior '5.15.0.post83': 5.15.0.post79",
        "2023-09-28 10:08:42,872 [INFO] No kernel packages after version '5.15.0.post83' found.",
        "2023-09-28 10:08:42,872 [INFO] Kernel package versions to remove: 5.15.0.post79",
        "2023-09-28 10:08:42,872 [DEBUG] The following packages are candidates for autoremoval: linux-headers-5.15.0-79-generic, linux-hwe-5.15-headers-5.15.0-79,linux-image-5.15.0-79-generic, linux-modules-5.15.0-79-generic, linux-modules-extra-5.15.0-79-generic",
        "2023-09-28 10:08:45,338 [DEBUG] The following packages are resolved reverse dependencies for autoremove candidates: linux-modules-5.15.0-79-generic, linux-modules-extra-5.15.0-79-generic, linux-hwe-5.15-headers-5.15.0-79, linux-headers-5.15.0-79-generic, linux-image-5.15.0-79-generic",
        "2023-09-28 10:08:45,338 [INFO] No protected packages found",
        "2023-09-28 10:08:45,339 [INFO] Exiting successfully"
    ]
}

TASK [Kernel packages to remove]
ok: [localhost] => {
    "cleanup_kernels.packages": [
        "linux-headers-5.15.0-79-generic",
        "linux-hwe-5.15-headers-5.15.0-79",
        "linux-image-5.15.0-79-generic",
        "linux-modules-5.15.0-79-generic",
        "linux-modules-extra-5.15.0-79-generic"
    ]
}

TASK [Remove kernel packages] ****************
skipping: [localhost]

If you decide to proceed with removal of package candidates, rerun the script with the --cleanup flag:
```
cleanup-kernel-packages --cleanup
```