Automate Compliance With KernelCare and Chef - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

KernelCare and chef announcement (1)

KernelCare automates kernel patching, ensuring that servers comply with security standards. Chef automates infrastructure configuration, ensuring that every system is configured correctly. Use them together, and you can automate compliance on thousands of servers in minutes.

KernelCare promptly delivers the latest security patches for different Linux distributions applied automatically to the running kernel in just nanoseconds.

It takes only two simple steps to install and register KernelCare and make your infrastructure safe from critical kernel vulnerabilities. While it is that easy – it can be challenging to deploy KernelCare if you take care of 1,000 and more servers on a daily basis.

That’s why we at KernelCare are pleased to announce a new collaboration with Chef. We’re introducing a new Automated Compliance Framework that works like this:

 

  1. Chef InSpec identifies systems vulnerabilities that require attention.
  2. Chef Infra prioritises, schedules, and manages remediation of those vulnerabilities.
  3. KernelCare then executes the remediation, applying security patches while the systems are operational.

 

For enterprises that operate large server fleets, this framework represents a major advance in compliance with standards such as SOC2 and HIPAA. That’s because it enables the deployment of KernelCare across thousands of servers very quickly and easily.

 

In conjunction with KernelCare, Chef Infra can be used to:

 

  • Distribute the KernelCare agent package, if you have servers with no internet access.
  • Distribute the KernelCare agent configuration file.
  • Set environment variables.
  • Install the KernelCare agent (from either local or remote servers).
  • Register KernelCare.

For more detailed instructions please refer to the KernelCare Deployment Whitepaper and KernelCare Chef Cookbook.

Want to see firsthand how KernelCare and Chef can automate compliance for your enterprise? Sign up for a free KernelCare trial and deploy KernelCare with Chef.

Get a FREE 7-Day Supported Trial of KernelCare 

 

 

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.