[Fix] Available updates + kernel fixes alert (#1159)

RichardAnderson · web-flow · commit 56f7e42de99b · 2026-06-13T18:44:04.000+01:00
* kernel fixes

* server status bug

* Address PR review: kernel-specific log type, reuse BroadcastServerUpdate, cleaner update flash message

* fix
diff --git a/app/Actions/Server/CheckConnection.php b/app/Actions/Server/CheckConnection.php
@@ -21,6 +21,7 @@ public function check(Server $server, int $retry = 2): Server
             if (in_array($status, [ServerStatus::DISCONNECTED, ServerStatus::UPDATING])) {
                 $server->status = ServerStatus::READY;
                 $server->save();
+                app(BroadcastServerUpdate::class)->broadcast($server);
                 if ($status === ServerStatus::DISCONNECTED) {
                     Notifier::send($server, new ServerConnected($server));
                 }
@@ -34,6 +35,7 @@ public function check(Server $server, int $retry = 2): Server
             if ($status !== ServerStatus::DISCONNECTED) {
                 $server->status = ServerStatus::DISCONNECTED;
                 $server->save();
+                app(BroadcastServerUpdate::class)->broadcast($server);
                 Notifier::send($server, new ServerDisconnected($server));
             }
         }
diff --git a/app/Actions/Server/RebootServer.php b/app/Actions/Server/RebootServer.php
@@ -14,6 +14,7 @@ public function reboot(Server $server): Server
             $server->os()->reboot();
             $server->status = ServerStatus::DISCONNECTED;
             $server->save();
+            app(BroadcastServerUpdate::class)->broadcast($server);
         } catch (Throwable) {
             $server = $server->checkConnection();
         }
diff --git a/app/Actions/Server/UpdateKernel.php b/app/Actions/Server/UpdateKernel.php
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Actions\Server;
+
+use App\Enums\ServerStatus;
+use App\Jobs\Server\UpdateKernelJob;
+use App\Models\Server;
+
+class UpdateKernel
+{
+    public function updateKernel(Server $server): void
+    {
+        $server->status = ServerStatus::UPDATING;
+        $server->save();
+        dispatch(new UpdateKernelJob($server))->onQueue('ssh');
+    }
+}
diff --git a/app/Http/Controllers/ServerController.php b/app/Http/Controllers/ServerController.php
@@ -8,6 +8,7 @@
 use App\Actions\Server\RebootServer;
 use App\Actions\Server\TransferServer;
 use App\Actions\Server\Update;
+use App\Actions\Server\UpdateKernel;
 use App\Exceptions\SSHError;
 use App\Http\Resources\ServerLogResource;
 use App\Http\Resources\ServerProviderResource;
@@ -122,7 +123,15 @@ public function checkForUpdates(Server $server): RedirectResponse
 
         $server->checkForUpdates();
 
-        return back()->with('info', 'Available updates: '.$server->refresh()->updates);
+        $server->refresh();
+
+        $message = "Available updates: {$server->updates}";
+
+        if ($server->kernel_updates > 0) {
+            $message .= " (plus {$server->kernel_updates} kernel)";
+        }
+
+        return back()->with('info', $message);
     }
 
     #[Post('/{server}/update', name: 'servers.update')]
@@ -135,6 +144,16 @@ public function update(Server $server): RedirectResponse
         return back()->with('info', 'Server is being updated. This may take a while.');
     }
 
+    #[Post('/{server}/update-kernel', name: 'servers.update-kernel')]
+    public function updateKernel(Server $server): RedirectResponse
+    {
+        $this->authorize('update', $server);
+
+        app(UpdateKernel::class)->updateKernel($server);
+
+        return back()->with('info', 'Kernel is being updated and the server will restart.');
+    }
+
     #[Post('/{server}/transfer', name: 'servers.transfer')]
     public function transfer(Server $server, Request $request): RedirectResponse
     {
diff --git a/app/Http/Resources/ServerResource.php b/app/Http/Resources/ServerResource.php
@@ -36,6 +36,7 @@ public function toArray(Request $request): array
             'progress' => $this->progress,
             'progress_step' => $this->progress_step,
             'updates' => $this->updates,
+            'kernel_updates' => $this->kernel_updates,
             'last_update_check' => $this->last_update_check,
             'status_color' => $this->status->getColor(),
             'features' => $this->features(),
diff --git a/app/Jobs/Server/UpdateKernelJob.php b/app/Jobs/Server/UpdateKernelJob.php
@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Jobs\Server;
+
+use App\Actions\Server\BroadcastServerUpdate;
+use App\Actions\Server\RebootServer;
+use App\Facades\Notifier;
+use App\Models\Server;
+use App\Models\ServerLog;
+use App\Notifications\ServerUpdateFailed;
+use App\Traits\UniqueQueue;
+use Exception;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Queue\Queueable;
+
+class UpdateKernelJob implements ShouldQueue
+{
+    use Queueable;
+    use UniqueQueue;
+
+    public function __construct(protected Server $server) {}
+
+    public function handle(): void
+    {
+        $this->run("server-{$this->server->id}", function () {
+            $this->server->os()->upgradeKernel();
+            $this->server->checkConnection();
+            $this->server->checkForUpdates();
+            app(BroadcastServerUpdate::class)->broadcast($this->server);
+            app(RebootServer::class)->reboot($this->server);
+        });
+    }
+
+    public function failed(Exception $e): void
+    {
+        Notifier::send($this->server, new ServerUpdateFailed($this->server));
+        $this->server->checkConnection();
+        app(BroadcastServerUpdate::class)->broadcast($this->server);
+
+        ServerLog::log(
+            $this->server,
+            'update-kernel-failed',
+            $e->getMessage()
+        );
+    }
+}
diff --git a/app/Models/Server.php b/app/Models/Server.php
@@ -69,6 +69,7 @@
  * @property Collection<int, SshKey> $sshKeys
  * @property string $hostname
  * @property int $updates
+ * @property int $kernel_updates
  * @property ?Carbon $last_update_check
  */
 class Server extends AbstractModel
@@ -96,6 +97,7 @@ class Server extends AbstractModel
         'progress',
         'progress_step',
         'updates',
+        'kernel_updates',
         'last_update_check',
         'feature_data',
     ];
@@ -109,6 +111,7 @@ class Server extends AbstractModel
         'auto_update' => 'boolean',
         'progress' => 'float',
         'updates' => 'integer',
+        'kernel_updates' => 'integer',
         'last_update_check' => 'datetime',
         'feature_data' => 'json',
         'os' => OperatingSystem::class,
@@ -642,7 +645,9 @@ public function securityScore(): array
      */
     public function checkForUpdates(): void
     {
-        $this->updates = $this->os()->availableUpdates();
+        $result = $this->os()->availableUpdates();
+        $this->updates = $result['updates'];
+        $this->kernel_updates = $result['kernel'];
         $this->last_update_check = now();
         $this->save();
     }
@@ -701,6 +706,13 @@ public function getWarnings(): array
             ];
         }
 
+        if ($this->kernel_updates > 0) {
+            $warnings[] = [
+                'key' => 'kernel_update_available',
+                'count' => $this->kernel_updates,
+            ];
+        }
+
         $latestMetric = $this->relationLoaded('latestMetric')
             ? $this->latestMetric
             : $this->latestMetric()->first();
diff --git a/app/SSH/OS/OS.php b/app/SSH/OS/OS.php
@@ -51,14 +51,30 @@ public function upgrade(): void
     /**
      * @throws SSHError
      */
-    public function availableUpdates(): int
+    public function upgradeKernel(): void
+    {
+        $this->server->ssh()->exec(
+            view('ssh.os.upgrade-kernel'),
+            'upgrade-kernel'
+        );
+    }
+
+    /**
+     * @return array{updates: int, kernel: int}
+     *
+     * @throws SSHError
+     */
+    public function availableUpdates(): array
     {
         $result = $this->server->ssh()->exec(
             view('ssh.os.available-updates'),
             'check-available-updates'
         );
 
-        return max(str($result)->after('Available updates:')->trim()->toInteger(), 0);
+        return [
+            'updates' => max(str($result)->after('Available updates:')->trim()->toInteger(), 0),
+            'kernel' => max(str($result)->after('Kernel updates:')->trim()->toInteger(), 0),
+        ];
     }
 
     /**
diff --git a/database/migrations/2026_06_13_162705_add_kernel_updates_to_servers_table.php b/database/migrations/2026_06_13_162705_add_kernel_updates_to_servers_table.php
@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('servers', function (Blueprint $table): void {
+            $table->integer('kernel_updates')->default(0);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('servers', function (Blueprint $table): void {
+            $table->dropColumn('kernel_updates');
+        });
+    }
+};
diff --git a/resources/js/components/server-banners.tsx b/resources/js/components/server-banners.tsx
@@ -10,6 +10,7 @@ export default function ServerBanners({ server }: { server: Server }) {
 
   const rebootRequiredWarning = warnings.find((w) => w.key === 'reboot_required');
   const updatesWarning = warnings.find((w) => w.key === 'updates_available');
+  const kernelUpdateWarning = warnings.find((w) => w.key === 'kernel_update_available');
 
   if (rebootRequiredWarning) {
     items.push({
@@ -63,6 +64,33 @@ export default function ServerBanners({ server }: { server: Server }) {
     });
   }
 
+  if (kernelUpdateWarning) {
+    const kernelCount = kernelUpdateWarning.count;
+    items.push({
+      key: 'kernel-update',
+      title: `Kernel update available`,
+      description: <>Install the pending kernel {kernelCount === 1 ? 'package' : 'packages'} and restart to apply the new kernel.</>,
+      action: (
+        <Button
+          variant="outline"
+          size="sm"
+          onClick={() =>
+            dialog.confirm.open({
+              title: `Update kernel on ${server.name}?`,
+              description: `This installs the pending kernel ${kernelCount === 1 ? 'package' : 'packages'} (a full upgrade that may install or remove packages), then restarts the server to boot the new kernel. The server will be unavailable for a minute or two and connections in flight will be dropped.`,
+              variant: 'destructive',
+              confirmLabel: 'Update & restart',
+              method: 'post',
+              url: route('servers.update-kernel', server.id),
+            })
+          }
+        >
+          Update &amp; restart
+        </Button>
+      ),
+    });
+  }
+
   if (items.length === 0) return null;
 
   return (
diff --git a/resources/js/layouts/server/layout.tsx b/resources/js/layouts/server/layout.tsx
@@ -33,14 +33,16 @@ import { usePage } from '@inertiajs/react';
 import { Site } from '@/types/site';
 import PHPIcon from '@/icons/php';
 import siteHelper from '@/lib/site-helper';
+import { useRealtimeRecord } from '@/hooks/use-socket-events';
 
 export default function ServerLayout({ children }: { children: ReactNode }) {
   const page = usePage<{
     server: Server;
     site?: Site;
   }>();
 
-  const isMenuDisabled = page.props.server.status !== 'ready';
+  const server = useRealtimeRecord<Server>(page.props.server, 'server')!;
+  const isMenuDisabled = server.status !== 'ready';
   const storedSite = siteHelper.getStoredSite();
   const site = page.props.site || (storedSite?.server_id === page.props.server.id ? storedSite : null) || null;
 
@@ -279,7 +281,7 @@ export default function ServerLayout({ children }: { children: ReactNode }) {
 
   return (
     <Layout secondNavItems={sidebarNavItems} secondNavTitle={page.props.server.name}>
-      <ServerHeader server={page.props.server} site={page.props.site} />
+      <ServerHeader server={server} site={page.props.site} />
 
       <div>{children}</div>
     </Layout>
diff --git a/resources/js/pages/servers/components/actions.tsx b/resources/js/pages/servers/components/actions.tsx
@@ -91,6 +91,21 @@ export default function ServerActions({ server }: { server: Server }) {
         >
           Update
         </DropdownMenuItem>
+        <DropdownMenuItem
+          disabled={server.kernel_updates == 0}
+          onSelect={() =>
+            dialog.confirm.open({
+              title: `Update kernel on ${server.name}?`,
+              description: `This installs the pending kernel ${server.kernel_updates === 1 ? 'package' : 'packages'} (a full upgrade that may install or remove packages), then restarts the server to boot the new kernel. The server will be unavailable for a minute or two and connections in flight will be dropped.`,
+              variant: 'destructive',
+              confirmLabel: 'Update & restart',
+              method: 'post',
+              url: route('servers.update-kernel', server.id),
+            })
+          }
+        >
+          Update kernel
+        </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
   );
diff --git a/resources/js/types/server.d.ts b/resources/js/types/server.d.ts
@@ -27,6 +27,7 @@ export interface Server {
   progress?: string;
   progress_step?: string;
   updates: number;
+  kernel_updates: number;
   last_update_check?: string;
   features: ServerFeature[];
   created_at: string;
@@ -36,7 +37,10 @@ export interface Server {
   [key: string]: unknown;
 }
 
-export type ServerWarning = { key: 'updates_available'; count: number } | { key: 'reboot_required' };
+export type ServerWarning =
+  | { key: 'updates_available'; count: number }
+  | { key: 'reboot_required' }
+  | { key: 'kernel_update_available'; count: number };
 
 export interface ServerFeature {
   label: string;
diff --git a/resources/views/ssh/os/available-updates.blade.php b/resources/views/ssh/os/available-updates.blade.php
@@ -1,5 +1,10 @@
-sudo DEBIAN_FRONTEND=noninteractive apt-get update
+sudo DEBIAN_FRONTEND=noninteractive apt-get update > /dev/null 2>&1
 
-AVAILABLE_UPDATES=$(sudo DEBIAN_FRONTEND=noninteractive apt list --upgradable 2>/dev/null | tail -n +2 | wc -l)
+UPGRADABLE=$(sudo DEBIAN_FRONTEND=noninteractive apt list --upgradable 2>/dev/null | tail -n +2)
 
-echo "Available updates:$AVAILABLE_UPDATES"
+TOTAL=$(printf '%s\n' "$UPGRADABLE" | grep -c '/' || true)
+KERNEL_UPDATES=$(printf '%s\n' "$UPGRADABLE" | grep -cE '^linux-(image|headers|modules|modules-extra|generic|virtual|lowlatency|hwe|tools|cloud-tools|aws|azure|gcp|oracle|kvm)[^ ]*/' || true)
+REGULAR=$((TOTAL - KERNEL_UPDATES))
+
+echo "Available updates:$REGULAR"
+echo "Kernel updates:$KERNEL_UPDATES"
diff --git a/resources/views/ssh/os/upgrade-kernel.blade.php b/resources/views/ssh/os/upgrade-kernel.blade.php
@@ -0,0 +1,4 @@
+sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get clean
+sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get update
+sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get dist-upgrade -y
+sudo DEBIAN_FRONTEND=noninteractive NEEDRESTART_MODE=a apt-get autoremove -y
diff --git a/tests/Feature/ServerTest.php b/tests/Feature/ServerTest.php

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@ public function check(Server $server, int $retry = 2): Server`
`21`	`21`	`if (in_array($status, [ServerStatus::DISCONNECTED, ServerStatus::UPDATING])) {`
`22`	`22`	`$server->status = ServerStatus::READY;`
`23`	`23`	`$server->save();`
	`24`	`+ app(BroadcastServerUpdate::class)->broadcast($server);`
`24`	`25`	`if ($status === ServerStatus::DISCONNECTED) {`
`25`	`26`	`Notifier::send($server, new ServerConnected($server));`
`26`	`27`	`}`
`@@ -34,6 +35,7 @@ public function check(Server $server, int $retry = 2): Server`
`34`	`35`	`if ($status !== ServerStatus::DISCONNECTED) {`
`35`	`36`	`$server->status = ServerStatus::DISCONNECTED;`
`36`	`37`	`$server->save();`
	`38`	`+ app(BroadcastServerUpdate::class)->broadcast($server);`
`37`	`39`	`Notifier::send($server, new ServerDisconnected($server));`
`38`	`40`	`}`
`39`	`41`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,7 @@ public function reboot(Server $server): Server`
`14`	`14`	`$server->os()->reboot();`
`15`	`15`	`$server->status = ServerStatus::DISCONNECTED;`
`16`	`16`	`$server->save();`
	`17`	`+ app(BroadcastServerUpdate::class)->broadcast($server);`
`17`	`18`	`} catch (Throwable) {`
`18`	`19`	`$server = $server->checkConnection();`
`19`	`20`	`}`