The safest VPS kernel update is a controlled change, not a one-line package command: verify your distribution, snapshot and out-of-band recovery access, record the running kernel, install only supported repository packages, retain the previous kernel, reboot during a planned window, and test every critical service before declaring success.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
A newly installed kernel is inactive until the VPS boots into it. Live patching can cover selected urgent fixes without a reboot, but it does not replace a planned kernel upgrade. The procedure below applies to Ubuntu, Debian-family systems, and RHEL-based VPS instances, with commands and recovery paths for each.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →What a kernel update changes on a VPS
The Linux kernel controls process scheduling, memory, networking, filesystems, device drivers, and much of the isolation used by containers and virtual machines. A kernel package can contain security fixes, hardware or virtual-device support, and stability corrections. It can also change module behavior, boot parameters, or the way an out-of-tree driver is built.
Installing a package only places a new kernel, initramfs, and bootloader entry on disk. The currently running process continues to use the old kernel until a reboot. A reboot is also sometimes required after firmware, CPU microcode, shared-library, or other low-level dependency updates even when the kernel package itself is unchanged.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
For a game server or other stateful workload, separate “no player disconnect” and “no kernel reboot” goals. You may be able to drain players to another instance, stop matchmaking, or fail over traffic, but the VPS that must boot a different kernel still needs a restart unless you use a specialized live-update technique.
Preflight: establish a recovery path before changing packages
Identify the distribution and current kernel
Log in through SSH and record the operating system, release, architecture, and kernel currently in use. Keep this record with the change ticket or maintenance notes.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorscat /etc/os-release
uname -r
uname -m
hostnamectlOn Ubuntu or Debian, list installed kernel packages with dpkg -l 'linux-image*' | grep '^ii'. On RHEL, use rpm -q kernel. The output tells you which older bootable entries should remain available.
Check disk space, especially in /boot
df -h / /boot
sudo du -sh /boot/* 2>/dev/nullKernel updates need room for the package files, compressed modules, and a newly generated initramfs. A nearly full /boot can leave an incomplete transaction or an unbootable initramfs. Do not delete an old kernel merely to make space until you have confirmed which entry is running and which entry is known-good; use the distribution’s supported automatic cleanup after the change.
Confirm snapshot, console, and rescue access
Before touching the package manager, verify that your VPS provider can create a restorable snapshot or backup and that you can open its web console, serial console, or rescue environment. Test the login path, not just that a button exists. An out-of-band console is what lets you select a previous boot entry or inspect a machine when SSH and networking are unavailable.
Check the provider’s notices for required bootloader settings, virtual hardware changes, or a maintenance event. A snapshot is useful only if you know where it is stored, how long restoration takes, and whether restoring it will overwrite recent application data.
Recommended Free Tools
Record workload and access dependencies
- List critical systemd units, listening ports, mounted filesystems, firewall rules, routes, time synchronization, and storage devices.
- Record the SSH port, authorized access method, and any console credentials needed during recovery.
- For a game server, note active sessions, save locations, scheduled jobs, external databases, and the order in which proxy, database, and game services must start.
- Confirm monitoring and alerting are enabled so a failed service or missing route is visible after reboot.
Choose the maintenance window and success criteria
Schedule enough time for the reboot, first-boot module work, health checks, and a rollback decision. Announce the interruption to users and drain or stop stateful workloads cleanly. A normal reboot gives shutdown services, filesystems, and the bootloader their expected opportunity to run.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Write the success criteria before starting. At minimum, the VPS must boot the intended kernel, accept SSH connections, have the expected routes and mounts, report no unexpected failed units, and pass application-specific checks. For a game server, include a test connection, authentication, save/write verification, and confirmation that monitoring has resumed.
Install a supported kernel package
Ubuntu and Debian-family systems
Use the distribution’s released packages through APT. Avoid mixing a provider kernel, a random mainline build, and third-party repositories unless your provider explicitly supports that combination. Canonical’s Livepatch support boundaries also exclude personally rebuilt kernels and several development or PPA variants.
sudo apt update
apt list --upgradable
sudo apt-get -s dist-upgradeThe simulated transaction (-s) lets you inspect packages that would be installed, upgraded, removed, or held back. Pay particular attention to linux-image, linux-modules, linux-headers, initramfs, bootloader packages, and DKMS-related changes. If the proposed transaction removes the only known-good kernel, stop and investigate.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
After reviewing the simulation and resolving any held or broken packages, apply the supported update:
sudo apt-get dist-upgradeSome releases use a meta-package such as linux-generic to pull in the current supported kernel series. Do not install a different series solely because its version number is higher; follow the release’s security and hardware-support channel.
RHEL-based systems
Use the repositories and workflow supported for your RHEL release. First inspect available updates and the transaction:
sudo dnf check-update
sudo dnf upgrade --assumenoIf the preview is appropriate, apply it with the normal DNF update process:
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
sudo dnf upgradeOn systems still using YUM-compatible tooling, the equivalent supported command may be yum update. Keep the prior installed kernel package. Red Hat’s kernel live-patching and kpatch support applies only within its documented release, architecture, and update boundaries.
Check DKMS and external modules
Virtualization agents, storage drivers, security software, and hardware-specific modules may be built outside the distribution kernel. Before rebooting, inspect their status:
dkms status
lsmod | sortFor each DKMS module, confirm that a build completed for the new kernel and that the package transaction did not report compiler, signing, or dependency errors. If a module is essential for networking or storage and has no compatible build, postpone the reboot and obtain a supported version.
Review the boot entries before rebooting
List the installed kernels and verify that the bootloader has a fallback entry. On Ubuntu or Debian, grep -E "menuentry|submenu" /boot/grub/grub.cfg shows generated entries; on RHEL, grubby --info=ALL displays kernel arguments and paths when the utility is available. Do not edit generated GRUB files by hand as part of a routine update.
Confirm that the default entry points to the intended new kernel and that its command line preserves required options such as console settings, encrypted-volume parameters, or provider-specific networking arguments. If your provider documents a custom bootloader, follow that documentation instead of assuming a standard GRUB layout.
Reboot in a controlled way
- Stop or drain applications according to their documented shutdown procedure. Flush game-server saves and database writes; do not simply terminate processes that hold state.
- Capture a final record of the running kernel, package transaction result, and current service status.
- Notify users and monitoring systems of the planned interruption, or suppress only the alerts that would otherwise create noise.
- Reboot through the normal operating-system path:
sudo systemctl reboot. Use the provider console if SSH closes before the machine returns. - Wait for the provider’s boot state and console output to settle. Do not issue repeated hard resets while an initramfs, filesystem check, or first-boot module build is still running.
A forced power cycle or console reset should be a recovery action, not the default update method, because it can bypass service shutdown and increase filesystem or application-data risk.
Validate the new boot before reopening traffic
Confirm the kernel and boot time
uname -r
who -b
uptimeCompare uname -r with the version you approved. If it still shows the old version, the package may be installed correctly but the bootloader selected the previous entry; investigate before changing defaults.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Find failed units and serious boot errors
systemctl --failed
journalctl -b -p err..alertReview the complete current-boot journal for warnings involving networking, storage, filesystems, authentication, time synchronization, or module loading. A zero failed-unit count does not prove that an application is healthy, so continue with service-level checks.
Verify network, storage, time, and security controls
ip addr
ip route
findmnt
timedatectl status
sudo ss -lntup
sudo nft list ruleset- Confirm the expected addresses, default route, DNS resolution, and firewall policy.
- Check that every required mount is present and writable where it should be.
- Verify the clock and time source; large jumps can break certificates, authentication, and scheduled jobs.
- Confirm that SSH is listening on the expected address and port and that your second access method still works.
- Check storage latency or provider-agent status if the VPS exposes those signals.
Run application and game-server health checks
Start dependencies in order and inspect each unit’s status and logs. Test the application locally and through the same public endpoint users use. For a game server, connect with a test account, load a world or match, save a small change, and confirm that the proxy, voice, database, and backup jobs can communicate. Re-enable normal traffic only after these checks pass.
Rollback if the new kernel is unhealthy
If the machine boots but services fail
Use the provider console or a local reboot to enter the bootloader’s advanced-options menu and select the retained previous kernel. Once the VPS is running again, capture logs from the failed boot and the package-manager output before attempting another update. Compare module, network, storage, and boot-parameter differences between the two entries.
Do not remove the problematic kernel immediately. Keeping its packages and logs makes diagnosis possible and preserves a clear record of what changed.
If the VPS does not boot or the filesystem is damaged
- Open the provider’s out-of-band console and capture the visible boot error.
- Try the previous kernel entry if the bootloader menu is reachable.
- If normal boot remains impossible, attach or enter the provider’s rescue environment.
- Mount the system read-only first when investigating filesystem damage. Preserve journal files, package-manager logs, and the kernel command line.
- Restore the pre-change snapshot when service restoration is more urgent than diagnosis, then copy the preserved evidence before retrying.
A rescue environment may require you to chroot into the installed system before rebuilding an initramfs or reinstalling a bootloader. Use commands documented for your distribution and provider; a rescue shell’s device names and network configuration may differ from the installed system.
Can you update a kernel without downtime?
| Approach | Does it activate a new kernel version? | Interruption | Support and risk profile | Rollback and validation |
|---|---|---|---|---|
| Normal package update and reboot | Yes | Planned reboot downtime; drain or fail over workloads to reduce user impact | Broadest support when using the distribution and provider’s released packages | Previous boot entry, provider console, snapshot, and full post-boot checks |
| Canonical Livepatch | No full kernel-version change; it applies selected fixes to the running kernel | Usually no reboot for covered high and critical kernel vulnerabilities | Limited to supported Ubuntu release, architecture, kernel version, and flavour combinations; it does not automatically install ordinary APT security updates | Still requires normal upgrade and reboot for a newer kernel; verify patch status and plan the eventual restart |
| kexec or Live Update Orchestrator | Yes, by loading and transferring directly to another kernel | Can reduce firmware and hardware-initialization time, but is not equivalent to uninterrupted service | Advanced, provider- and workload-dependent; forced paths can bypass normal shutdown handling | Requires a tested console and recovery plan; validate devices, mounts, networking, and applications as after any reboot |
How Livepatch fits into a kernel-maintenance plan
Canonical describes Livepatch as applying high and critical Linux kernel security fixes without a reboot. Its patches are matched to the exact running kernel version, and coverage depends on the supported release, architecture, kernel version, and flavour. A personally rebuilt or otherwise unsupported kernel falls outside those boundaries.
Livepatch is therefore useful for buying time when an urgent covered vulnerability appears during a busy service period. It does not install every APT security update, change the running kernel to a newer version, or eliminate the need for a maintenance reboot. Check its status using the tooling supplied for your Ubuntu release, record which fixes are covered, and schedule the full kernel transition.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
When kexec or live-update frameworks are appropriate
kexec loads a kernel and initramfs and transfers execution directly, avoiding normal firmware initialization. A forced execution path can also skip ordinary shutdown handling. That can shorten a transition, but it increases the need to understand device state, filesystem consistency, service quiescing, and provider behavior.
Linux’s Live Update Orchestrator is a specialized kexec-based process intended to preserve selected resources and keep designated devices operational, including in some cloud workloads. It is not a universal replacement for a normal reboot. Use it only after testing the exact distribution, kernel pair, provider virtualization, storage stack, and workload in a disposable environment, with a console and snapshot available.
Common failure modes and their fixes
“The update completed, but the old kernel is still running.”
The package is installed but the VPS was not rebooted, or the bootloader selected the older entry. Confirm uname -r, inspect the boot entries, and perform the planned reboot. Do not assume a package timestamp means the kernel is active.
“APT or DNF reports insufficient space.”
Stop the change, inspect /boot and the root filesystem, and remove only obsolete packages through supported distribution cleanup after identifying the running and fallback kernels. Expand the VPS volume if cleanup cannot provide a safe margin.
“SSH disappeared after reboot.”
Use the provider console to determine whether the machine booted, whether networking obtained the expected address, and whether the SSH service is listening. Check routes, firewall rules, cloud-init or provider-agent logs, and DKMS module errors. Select the previous kernel if the failure began with the new entry.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →“A storage or network module failed to load.”
Review journalctl -b, dkms status, and the package transaction. An out-of-tree module may not have built or may not be signed for the new kernel. Restore the previous entry, install a supported module version, or remove the unsupported dependency before retrying.
“The VPS boots, but the game server will not start.”
Check failed units, service ordering, permissions, mounted data paths, firewall rules, and application logs. Kernel changes can expose timing or module assumptions without causing a systemd failure. Validate the actual game endpoint and save path, then compare the new boot’s environment with the recorded baseline.
Close the change and improve the next update
After validation, record the activated kernel, package versions, reboot time, checks performed, and any warnings. Keep the snapshot according to your retention policy and retain the previous bootable kernel until the new one has survived your normal workload and monitoring period.
For recurring maintenance, turn the procedure into a runbook: preflight checks, transaction simulation, player-drain steps, console login instructions, exact health checks, rollback trigger, and an owner empowered to choose rollback. Test console and snapshot restoration periodically rather than discovering during a failed boot that either path is unusable.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
