To many package deletions

[sbernhard]

https://github.com/maccelf/foreman_kernel_care/blob/b926a5247f6b17f573e1a2a31b8441ac79515981/app/models/concerns/foreman_kernel_care/host_managed_extensions.rb#L58

In debian/ubuntu and even on CentOS, multiple kernel can be installed. This would delete all packages instead of only the "live patched" linux kernel:

kernel-3.10.0-1160.31.1.el7.x86_64
kernel-3.10.0-1160.71.1.el7.x86_64
kernel-3.10.0-1127.18.2.el7.x86_64
kernel-3.10.0-957.5.1.el7.x86_64

Additionally, this would also delete packages like

kernel-tools-3.10.0-1160.80.1.el7.x86_64
kernel-tools-libs-3.10.0-1160.80.1.el7.x86_64

Had a look at https://github.com/maccelf/foreman_kernel_care/blob/b926a5247f6b17f573e1a2a31b8441ac79515981/app/models/concerns/foreman_kernel_care/host_managed_extensions.rb#L35 and recognized, that it gets all packages of the whole katello. I guess it would be better to only use the packages which are installed on the host.

[nadjaheitmann]

I think that the safest way to ensure package integrity is to install a facet for foreman_kernel_care and use it for data management