Get the most out of your Centmin Mod LEMP stack
Become a Member

[Solved] Long delay before console/shell loads after recent centmin mod updates

Discussion in 'Bug Reports' started by MaximilianKohler, May 22, 2026.

  1. MaximilianKohler

    MaximilianKohler Member

    214
    9
    18
    Jun 23, 2023
    Ratings:
    +39
    Local Time:
    2:59 AM
    Please fill in any relevant information that applies to you:
    • CentOS Version: AlmaLinux 9.7
    • Centmin Mod Version Installed: Centmin Mod 140.00beta01
    • Nginx Version Installed: 1.31.0
    • PHP Version Installed: 8.2.31
    • MariaDB MySQL Version Installed: 10.6.26-MariaDB
    • When was last time updated Centmin Mod code base ? : daily
    • Persistent Config:
      Code (Text):
      MARCH_TARGETNATIVE='n'        # Off for compatibility, on for speed.
      LETSENCRYPT_DETECT='y'        #
      VHOSTCTRL_CLOUDFLAREINC='y'   #
      NGINX_ZERODT='y'              # Zero downtime upgrades
      PHP_PGO='y'                   # Speed up php
      DEVTOOLSETTWELVE='y'        # GCC 12 https://community.centminmod.com/threads/22086/#post-101583
      DEVTOOLSETTHIRTEEN='n'        #
      PHP_ARGON='y'                 # Enable more secure Argon2 password hash algorithm. Recompile php after enabling.
      
      POSTGRESQL='y'          # Install PostgreSQL with PHP recompile
      POSTGRESQL_BRANCHVER='16'  # Stick with current version; upgrading is manual.
      NEEDRESTART_CHECK='y'   # Check if system needs to be rebooted after system updates
      
      # enable PHP latest version check on SSH logins MOTD
      # https://community.centminmod.com/threads/19540/
      DMOTD_PHPCHECK='y'
      
      SET_DEFAULT_MYSQLCHARSET='utf8mb4'  # For Xenforo
      SELFSIGNEDSSL_ECDSA='y'
      PHPFINFO='y'
      PHP_OVERWRITECONF='n'
      PYTHON_INSTALL_ALTERNATIVES='y'
      
      MARCH_TARGETNATIVE='n'
      
      
      
    I think it started after the cmsec feature was implemented, and before the visual upgrade. I wasn't sure if it was the cmsec part that is causing it, since this part was loading reasonably quickly:
    Code:
     * cmsec: running 5 kernel CVE check(s), please wait...
     * CVE-2026-31431 (almalinux kernel): PATCHED
     * CVE-2026-43284 (almalinux kernel): PATCHED
     * CVE-2026-43500 (almalinux kernel): NOT AFFECTED
     * CVE-2026-46300 (almalinux kernel): PATCHED
     * CVE-2026-46333 (almalinux kernel): PATCHED
    
    The long delay was at the end of that, and before this part:
    Code:
    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
     [!!]  Centmin Mod 140.00beta01 — updates available, run cmupdate
     [OK]  CSF    15.02 (matches mirror)
    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
    
    I ran `cmupdate` and then `centmin`, and it was as quick as usual. I then closed the shell window and opened a new one, and the long delay was definitely during the CVE checks.


    My server's already been patched for a few days, and the check still seems to be causing a long delay, so perhaps there may be improvements to the way the checks are done? If not, I think I'll just disable them since I already get email updates when new kernels have been installed and require a server reboot.
     
  2. duderuud

    duderuud Active Member

    318
    97
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +215
    Local Time:
    11:59 AM
    1.29 x
    11.4
    Same here...
     
  3. eva2000

    eva2000 Administrator Staff Member

    58,920
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    7:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah looking into this :)
     
  4. eva2000

    eva2000 Administrator Staff Member

    58,920
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    7:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    pushed a fix to 132.00stable, 140.00beta01 and 141.00beta01

    try running command = cmupdate and then retry SSH login
     
  5. duderuud

    duderuud Active Member

    318
    97
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +215
    Local Time:
    11:59 AM
    1.29 x
    11.4
    Works, thanks for the update!
     
  6. MaximilianKohler

    MaximilianKohler Member

    214
    9
    18
    Jun 23, 2023
    Ratings:
    +39
    Local Time:
    2:59 AM
    It did initially speed it up when I tested it yesterday, but when I just opened it today, it was back to slow again.
     
  7. eva2000

    eva2000 Administrator Staff Member

    58,920
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    7:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    might be due to cache expiry

    but is it slow every SSH login for the day or just first time?
     
  8. MaximilianKohler

    MaximilianKohler Member

    214
    9
    18
    Jun 23, 2023
    Ratings:
    +39
    Local Time:
    2:59 AM
    Ah, yes, it does seem to be slower the first time for the day. If that's a limitation of this method, I think I'd prefer email notifications instead.
     
  9. duderuud

    duderuud Active Member

    318
    97
    28
    Dec 5, 2020
    The Netherlands
    Ratings:
    +215
    Local Time:
    11:59 AM
    1.29 x
    11.4
    Alma 10.2 was just out. Updated one of my servers and the cve check has some problems with CVE-2026-31431

    Little snippet:
    Code:
    == Vendor running-kernel assessment ==
    Detected OS:     AlmaLinux 10.2 (Lavender Lion)
    Vendor branch:   AlmaLinux 10
    Running kernel:  6.12.0-211.7.3.el10_2
    Fixed baseline:  6.12.0-124.52.2.el10_1
    
    RESULT: The running kernel and the known fixed version are from different package families,
    and the running kernel's changelog does not record CVE-2026-31431.
    A direct version comparison would be unreliable, so it was skipped.
    Verify manually with: dnf repoquery --changelog kernel-core-$(uname -r)
    or your vendor's security advisory (see suggested actions below).
    
    == Linode/Akamai Cloud kernel assessment ==
    No Linode-provided kernel marker detected in uname -r.
    
    == Provider/custom kernel warning ==
    No obvious provider/custom kernel marker detected in uname -r.
    
    ...
    
    == Final status ==
    STATUS: indeterminate  CONFIDENCE: low  EXIT: 3
    
    The script could not determine whether your system is vulnerable or patched.
    See the reasons below and check manually.
    
    Reasons:
      - Running kernel suffix family does not match AlmaLinux 10 baseline; changelog did not record CVE-2026-31431; comparison would be misleading.
    
     
  10. eva2000

    eva2000 Administrator Staff Member

    58,920
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    7:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    DMOTD checks also support pushover.net push notifications if you set in /etc/centminmod/custom_config.inc
    Code (Text):
    PUSH_MOTD_ALERTS='y'
    PUSH_API_TOKEN='your-pushover-app-token'
    PUSH_USER_KEY='your-pushover-user-key'
    

    but right now, it still needs CVE checks displayed - might see about improving this

    or if you're comfortable just disable CVE check for now

    set in /etc/centminmod/custom_config.inc
    Code (Text):
    DMOTD_CVECHECK='n'
    


    Thanks for bug report will investigate