Learn about Centmin Mod LEMP Stack today
Register Now

[Solved] Long delay before console/shell loads after recent centmin mod updates

Discussion in 'Bug Reports' started by MaximilianKohler, May 22, 2026.

  1. MaximilianKohler

    MaximilianKohler Member

    220
    10
    18
    Jun 23, 2023
    Ratings:
    +42
    Local Time:
    1:03 AM
    Please fill in any relevant information that applies to you:
    • CentOS Version: AlmaLinux 9.7
    • Centmin Mod Version Installed: Centmin Mod 140.00beta01
    • Nginx Version Installed: 1.31.0
    • PHP Version Installed: 8.2.31
    • MariaDB MySQL Version Installed: 10.6.26-MariaDB
    • When was last time updated Centmin Mod code base ? : daily
    • Persistent Config:
      Code (Text):
      MARCH_TARGETNATIVE='n'        # Off for compatibility, on for speed.
      LETSENCRYPT_DETECT='y'        #
      VHOSTCTRL_CLOUDFLAREINC='y'   #
      NGINX_ZERODT='y'              # Zero downtime upgrades
      PHP_PGO='y'                   # Speed up php
      DEVTOOLSETTWELVE='y'        # GCC 12 https://community.centminmod.com/threads/22086/#post-101583
      DEVTOOLSETTHIRTEEN='n'        #
      PHP_ARGON='y'                 # Enable more secure Argon2 password hash algorithm. Recompile php after enabling.
      
      POSTGRESQL='y'          # Install PostgreSQL with PHP recompile
      POSTGRESQL_BRANCHVER='16'  # Stick with current version; upgrading is manual.
      NEEDRESTART_CHECK='y'   # Check if system needs to be rebooted after system updates
      
      # enable PHP latest version check on SSH logins MOTD
      # https://community.centminmod.com/threads/19540/
      DMOTD_PHPCHECK='y'
      
      SET_DEFAULT_MYSQLCHARSET='utf8mb4'  # For Xenforo
      SELFSIGNEDSSL_ECDSA='y'
      PHPFINFO='y'
      PHP_OVERWRITECONF='n'
      PYTHON_INSTALL_ALTERNATIVES='y'
      
      MARCH_TARGETNATIVE='n'
      
      
      
    I think it started after the cmsec feature was implemented, and before the visual upgrade. I wasn't sure if it was the cmsec part that is causing it, since this part was loading reasonably quickly:
    Code:
     * cmsec: running 5 kernel CVE check(s), please wait...
     * CVE-2026-31431 (almalinux kernel): PATCHED
     * CVE-2026-43284 (almalinux kernel): PATCHED
     * CVE-2026-43500 (almalinux kernel): NOT AFFECTED
     * CVE-2026-46300 (almalinux kernel): PATCHED
     * CVE-2026-46333 (almalinux kernel): PATCHED
    
    The long delay was at the end of that, and before this part:
    Code:
    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
     [!!]  Centmin Mod 140.00beta01 — updates available, run cmupdate
     [OK]  CSF    15.02 (matches mirror)
    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
    
    I ran `cmupdate` and then `centmin`, and it was as quick as usual. I then closed the shell window and opened a new one, and the long delay was definitely during the CVE checks.


    My server's already been patched for a few days, and the check still seems to be causing a long delay, so perhaps there may be improvements to the way the checks are done? If not, I think I'll just disable them since I already get email updates when new kernels have been installed and require a server reboot.
     
  2. duderuud

    duderuud Active Member

    328
    98
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +220
    Local Time:
    10:03 AM
    1.29 x
    11.4
    Same here...
     
  3. eva2000

    eva2000 Administrator Staff Member

    60,296
    12,609
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,267
    Local Time:
    7:03 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah looking into this :)
     
  4. eva2000

    eva2000 Administrator Staff Member

    60,296
    12,609
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,267
    Local Time:
    7:03 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    pushed a fix to 132.00stable, 140.00beta01 and 141.00beta01

    try running command = cmupdate and then retry SSH login
     
  5. duderuud

    duderuud Active Member

    328
    98
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +220
    Local Time:
    10:03 AM
    1.29 x
    11.4
    Works, thanks for the update!
     
  6. MaximilianKohler

    MaximilianKohler Member

    220
    10
    18
    Jun 23, 2023
    Ratings:
    +42
    Local Time:
    1:03 AM
    It did initially speed it up when I tested it yesterday, but when I just opened it today, it was back to slow again.
     
  7. eva2000

    eva2000 Administrator Staff Member

    60,296
    12,609
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,267
    Local Time:
    7:03 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    might be due to cache expiry

    but is it slow every SSH login for the day or just first time?
     
  8. MaximilianKohler

    MaximilianKohler Member

    220
    10
    18
    Jun 23, 2023
    Ratings:
    +42
    Local Time:
    1:03 AM
    Ah, yes, it does seem to be slower the first time for the day. If that's a limitation of this method, I think I'd prefer email notifications instead.
     
  9. duderuud

    duderuud Active Member

    328
    98
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +220
    Local Time:
    10:03 AM
    1.29 x
    11.4
    Alma 10.2 was just out. Updated one of my servers and the cve check has some problems with CVE-2026-31431

    Little snippet:
    Code:
    == Vendor running-kernel assessment ==
    Detected OS:     AlmaLinux 10.2 (Lavender Lion)
    Vendor branch:   AlmaLinux 10
    Running kernel:  6.12.0-211.7.3.el10_2
    Fixed baseline:  6.12.0-124.52.2.el10_1
    
    RESULT: The running kernel and the known fixed version are from different package families,
    and the running kernel's changelog does not record CVE-2026-31431.
    A direct version comparison would be unreliable, so it was skipped.
    Verify manually with: dnf repoquery --changelog kernel-core-$(uname -r)
    or your vendor's security advisory (see suggested actions below).
    
    == Linode/Akamai Cloud kernel assessment ==
    No Linode-provided kernel marker detected in uname -r.
    
    == Provider/custom kernel warning ==
    No obvious provider/custom kernel marker detected in uname -r.
    
    ...
    
    == Final status ==
    STATUS: indeterminate  CONFIDENCE: low  EXIT: 3
    
    The script could not determine whether your system is vulnerable or patched.
    See the reasons below and check manually.
    
    Reasons:
      - Running kernel suffix family does not match AlmaLinux 10 baseline; changelog did not record CVE-2026-31431; comparison would be misleading.
    
     
  10. eva2000

    eva2000 Administrator Staff Member

    60,296
    12,609
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,267
    Local Time:
    7:03 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    DMOTD checks also support pushover.net push notifications if you set in /etc/centminmod/custom_config.inc
    Code (Text):
    PUSH_MOTD_ALERTS='y'
    PUSH_API_TOKEN='your-pushover-app-token'
    PUSH_USER_KEY='your-pushover-user-key'
    

    but right now, it still needs CVE checks displayed - might see about improving this

    or if you're comfortable just disable CVE check for now

    set in /etc/centminmod/custom_config.inc
    Code (Text):
    DMOTD_CVECHECK='n'
    


    Thanks for bug report will investigate