000032774 - Kernel Panic on RSA Security Analytics appliance after upgrading to 10.5.1.2

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000032774
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: SA Security Analytics Server
RSA Version/Condition: 10.5.1.2
Platform: CentOS
O/S Version: 6
 
IssueAfter upgrading the kernel with 2.6.32-573.12.1.el6.x86_64 as a part of 10.5.1.2 upgrade process, it produced the kernel panic.
User-added image
Cause
/boot/initramfs-2.6.32-573.12.1.el6.x86_64.img file is missing.
When running grubby-wrapper script, it fails to create the initramfs img file for the updated kernel.
./grubby-wrapper-2.0.1.3.sh -d

Create a new initramfs image for 2.6.32-573.12.1.el6.x86_64? [Yes/No]: Yes
I: Executing /sbin/dracut -f -v /boot/initramfs-2.6.32-573.12.1.el6.x86_64.img 2.6.32-573.12.1.el6.x86_64
~~~
E: Failed to install setfont
dracut could not create a new initramfs.

ResolutionIf the kernel panic appears on all SA appliances, the cause could be the kernel package got corrupted somehow before (or during) the upgrade process. We can try removing the package via "yum remove kernel-2.6.32-573.12.1.el6.x86_64"  then replace the package in the repository with a fresh copy, and then installing the kernel package again using "yum update kernel".
If the kernel panic appears on a particular appliance only, the steps below can resolve the issue.
  1. Boot with the old kernel that is working ok.
  2. kbd is the package that contains setfont, try reinstall kbd package # yum reinstall kbd
  3. Run setfont with no options # setfont
  4. Run grubby-wrapper script again to see if initramfs image file can be created and boot with the new kernel.
NOTE: If the issue is not resolved by the steps above, contact RSA support to raise a Technical Support case and reference this KB number.
 

Attachments

    Outcomes