Kea >= 1:3.0.3-6 Update Requires Manual Intervention

2026-04-07 kea >= 1:3.0.3-6 update requires manual intervention
The kea package has moved all services to run as a dedicated kea user (instead of root) for improved security. This change requires permission updates to the runtime files created by the kea services.

Users upgrading from an existing kea installation should therefore run the following commands after the upgrade:

chown kea: /var/lib/kea/* /var/log/kea/* /run/lock/kea/logger_lockfile

systemctl try-restart kea-ctrl-agent.service kea-dhcp{4,6,-ddns}.service

Accounts that need to interact with kea services files (e.g. lease files under /var/lib/kea, log files under /var/log/kea or configuration files under /etc/kea) should be added to the kea group.

  • I had no idea what kea even was. I had to do a search. It doesn’t seem to be installed on my EOS.

  • For those unaware of what kea is…

As it is an package out of the extra repository, it would only affect those who are using it already.
Which isn’t the case for me, luckily.

Also, there aren’t any packages which rely upon it, as seen in the package details.

Had to search for it too :slight_smile: It’s not installed on my system either.

Same here. Never heard of kea before.