<![CDATA[Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet.]]>Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet. My machines all run Red Hat Enterprise Linux, so I know I am protected against any new threat that comes with a lot of media fanfare, because we at Red Hat stoically fix things and make the updates available. So as on every Friday, I can relax and enjoy the weekend 🙂

@homelab

]]>https://board.circlewithadot.net/topic/b768d196-f6f6-4060-af7d-21aa72c87844/friday-is-dnf-update-and-reboot-day-for-the-machines-in-my-homelab-and-the-servers-i-run-on-the-internet.RSS for NodeFri, 15 May 2026 05:06:48 GMTFri, 01 May 2026 09:49:08 GMT60<![CDATA[Reply to Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet. on Fri, 01 May 2026 10:09:11 GMT]]>@jwildeboer Great 🙂

Created a little Ansible playbook to apply the mitigation to multiple servers: https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md

]]>https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116498769599545935https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116498769599545935Fri, 01 May 2026 10:09:11 GMT<![CDATA[Reply to Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet. on Fri, 01 May 2026 10:01:51 GMT]]>@Larvitz Yep, I did the `grubby --update-kernel=ALL --args="initcall_blacklist=algif_aead_init"` on all my exposed servers (and verified that all services still work afterwards). The homelab machines will wait for the kernel update. @homelab

]]>https://board.circlewithadot.net/post/https://social.wildeboer.net/users/jwildeboer/statuses/116498740793745040https://board.circlewithadot.net/post/https://social.wildeboer.net/users/jwildeboer/statuses/116498740793745040Fri, 01 May 2026 10:01:51 GMT<![CDATA[Reply to Friday is `dnf update` and `reboot` day for the machines in my homelab and the servers I run on the internet. on Fri, 01 May 2026 09:52:41 GMT]]>@jwildeboer @homelab this week, it might be a good idea, to also look at https://access.redhat.com/solutions/7141931 and ensure, either the right errata is applied, or the mentioned mitigations are in place, if you have systems affected by Copy Fail.

]]>https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116498704710628692https://board.circlewithadot.net/post/https://burningboard.net/users/Larvitz/statuses/116498704710628692Fri, 01 May 2026 09:52:41 GMT