Hi Doug,
FYI, I've had bad experience with this on virtualized Security Onion instances... I thought it was only on Hyper-V and Xensever, but I've also seen it on VMware.
</snip>
user@securityonion:~$ sudo apt-get autoremove
[sudo] password for user:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
gir1.2-json-1.0 gir1.2-timezonemap-1.0 gir1.2-xkl-1.0 libtimezonemap1
linux-headers-3.19.0-43 linux-headers-3.19.0-43-generic
linux-image-3.19.0-43-generic linux-image-extra-3.19.0-43-generic
0 upgraded, 0 newly installed, 8 to remove and 0 not upgraded.
After this operation, 293 MB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 151670 files and directories currently installed.)
Removing gir1.2-timezonemap-1.0 (0.4.1) ...
Removing gir1.2-json-1.0 (0.16.2-1ubuntu1) ...
Removing gir1.2-xkl-1.0 (5.4-0ubuntu1) ...
Removing libtimezonemap1 (0.4.1) ...
Removing linux-headers-3.19.0-43-generic (3.19.0-43.49~14.04.1) ...
Removing linux-headers-3.19.0-43 (3.19.0-43.49~14.04.1) ...
Removing linux-image-extra-3.19.0-43-generic (3.19.0-43.49~14.04.1) ...
run-parts: executing /etc/kernel/postinst.d/apt-auto-removal 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
run-parts: executing /etc/kernel/postinst.d/dkms 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
run-parts: executing /etc/kernel/postinst.d/initramfs-tools 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
update-initramfs: Generating /boot/initrd.img-3.19.0-43-generic
run-parts: executing /etc/kernel/postinst.d/pm-utils 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
run-parts: executing /etc/kernel/postinst.d/update-notifier 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
run-parts: executing /etc/kernel/postinst.d/zz-update-grub 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
Generating grub configuration file ...
Found background: /etc/PinguyBuilder/grub.png
Found background image: /etc/PinguyBuilder/grub.png
Found linux image: /boot/vmlinuz-3.19.0-43-generic
Found initrd image: /boot/initrd.img-3.19.0-43-generic
Found memtest86+ image: /boot/memtest86+.elf
Found memtest86+ image: /boot/memtest86+.bin
done
Removing linux-image-3.19.0-43-generic (3.19.0-43.49~14.04.1) ...
WARN: Proceeding with removing running kernel image.
Examining /etc/kernel/prerm.d.
run-parts: executing /etc/kernel/prerm.d/dkms 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
dkms: removing: pf_ring 6 (3.19.0-43-generic) (x86_64)
-------- Uninstall Beginning --------
Module: pf_ring
Version: 6
Kernel: 3.19.0-43-generic (x86_64)
-------------------------------------
Status: Before uninstall, this module version was ACTIVE on this kernel.
pf_ring.ko:
- Uninstallation
- Deleting from: /lib/modules/3.19.0-43-generic/updates/dkms/
- Original module
- No original module was found for this module on this kernel.
- Use the dkms install command to reinstall any previous module version.
depmod....
DKMS: uninstall completed.
------------------------------
Deleting module version: 6
completely from the DKMS tree.
------------------------------
Done.
Examining /etc/kernel/postrm.d .
run-parts: executing /etc/kernel/postrm.d/initramfs-tools 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
update-initramfs: Deleting /boot/initrd.img-3.19.0-43-generic
run-parts: executing /etc/kernel/postrm.d/zz-update-grub 3.19.0-43-generic /boot/vmlinuz-3.19.0-43-generic
Generating grub configuration file ...
Found background: /etc/PinguyBuilder/grub.png
Found background image: /etc/PinguyBuilder/grub.png
Found memtest86+ image: /boot/memtest86+.elf
Found memtest86+ image: /boot/memtest86+.bin
done
The link /vmlinuz is a damaged link
Removing symbolic link vmlinuz
you may need to re-run your boot loader[grub]
The link /initrd.img is a damaged link
Removing symbolic link initrd.img
you may need to re-run your boot loader[grub]
Processing triggers for libc-bin (2.19-0ubuntu6.9) ...
</snip>
<snip>
root@securityonion:~# soup
###########################################################################
This script will automatically install all available updates
and remove any old kernels (keeping at least two kernels).
For distributed deployments, please ensure this script is
run on the master server before updating sensors.
If mysql-server updates are available, it will stop sensor processes
to ensure a clean update.
At the end of the script, if mysql-server and/or kernel updates
were installed, you will be prompted to reboot.
###########################################################################
Press Enter to continue or Ctrl-C to cancel.
Checking for kernels that can be removed...
ls: cannot access /boot/vmlinuz-*: No such file or directory
No kernels are eligible for removal
Checking for updates...
</snip>
Alessandro
On Thursday, March 17, 2016 at 8:43:04 AM UTC-4, Doug Burks wrote:
> Hi Bugs,
>
> You should be able to safely do a "sudo apt-get autoremove".
>