Error: "VMkernel Live Patch is incompatible due to presence of running VProbes instances" during ESX 9.0 live patching

Products

• VMware vSphere ESXi

Issue/Introduction

With the release of ESX 9.0, the operating system supports updating kernel code, including the VMkernel as well as kernel modules, without rebooting the host. Such updates are delivered via Live Patch images; vLCM can apply such an image on hosts running an ESX base image that is compatible with the specific Live Patch image. See the Live Patch product documentation for more details.

When a Live Patch affects kernel code, vLCM performs certain prechecks on each host. During the compliance scan, the following error may be reported:

VMkernel Live Patch is incompatible due to presence of running VProbes instances.

Environment

ESX 9.x

Cause

vProbes cannot be running when attempting a live patch that impacts kernel code. 

Resolution

Stop all running vProbes on the host. Ensure these arent being used for any ongoing troubleshooting investigation before stopping them.

 

To list running vProbes, use the following command.

ps -Cc | grep vprobe

To terminate all running vProbes, use the following command

vprobe --vmk --reset