23
submitted 1 month ago by otter@lemmy.ca to c/selfhosted@lemmy.world

cross-posted from: https://lemmy.ml/post/46701277

I’ve been running my home lab since 2021 and honestly thought my update routine was solid: apt update && apt upgrade, reboot, job done.

Turns out I was wrong. I was checking CVE‑2026‑31431 (Copy Fail) this morning and realised that despite my “successful” updates, I was still running a vulnerable kernel from March.

I’ve had to rethink how I handle host updates. If you’re relying on a standard upgrade and a reboot to keep Proxmox or Debian hosts safe, you might want to check if yours is lying to you as well.

top 13 comments
sorted by: hot top controversial new old
[-] tofu@lemmy.nocturnal.garden 14 points 1 month ago

You're not supposed to run apt upgrade in Proxmox at all, it may even break your system. Use dist-upgrade.

https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#system_software_updates

[-] TheIPW@lemmy.ml 2 points 1 month ago

dist-upgrade and full-upgrade are essentially the same command but yeah, I won't be using apt upgrade again in the future! Like I said in my post, the joys of being self taught is that you learn by my making mistakes and that's part of the "fun" 🤣

[-] frongt@lemmy.zip 1 points 1 month ago

Not essentially, exactly. One is a deprecated alias for the other.

[-] MalReynolds@slrpnk.net 1 points 1 month ago

Nah, the fun is learning form others mistakes. Thanks for a fun read :}

[-] LeTak@feddit.org 1 points 1 month ago

Just don’t use any command in proxmox. Proxmox is designed GUI first. It got an update button in the GUI. Only major releases could need tinkering in the terminal. But even changing repos is now possible in the GUI.

[-] suzune@ani.social 1 points 1 month ago* (last edited 1 month ago)

I've seen that the patches are only available in the debian-security repository. It's important to review your repo list in /etc/apt/sources.list.d.

[-] frongt@lemmy.zip 1 points 1 month ago

Proxmox does not use the standard debian kernel.

[-] GreenKnight23@lemmy.world 0 points 1 month ago

from my own experience, apt dist-upgrade removes old kernels, apt upgrade still installed the new kernel, grub updated and booted into the new kernel.

all dist-upgrade did (for me) was delete the old kernels. which is something I would prefer not to do because it removes any ability to rollback should I absolutely need to.

Which distro? Debian for example always keeps two kernels: the curent one and the one in use before that, which is what I prefer, never had to rely on more than one backup kernel.

[-] GreenKnight23@lemmy.world 0 points 3 weeks ago

Debian. like the Debian.

currently running Trixie on my daily and bookworm on a couple servers which will be upgraded to Trixie soon.

[-] Andres4NY@social.ridetrans.it 1 points 3 weeks ago

@GreenKnight23 @oong3Eepa1ae1tahJozoosuu I've never seen that behavior in Debian. Is that some different type of configuration?

[-] GreenKnight23@lemmy.world 1 points 3 weeks ago

native config. nothing special.

[-] Andres4NY@social.ridetrans.it 1 points 3 weeks ago

@GreenKnight23 I don't see that behavior. Rebooting into a new kernel and then running dist-upgrade, it always _always_ keeps one older kernel around. Bookworm and trixie.

this post was submitted on 02 May 2026
23 points (92.6% liked)

Selfhosted

59651 readers
225 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS