Which distro? Debian for example always keeps two kernels: the curent one and the one in use before that, which is what I prefer, never had to rely on more than one backup kernel.

yeah, it really sucks to spring this upon as like this… I had to change UID/GID of a user too because of that, really annoying.

It’s more than that, you have to make sure a certain directory is owned by the “node” user and it has to have uid 1000. That’s a small but very important step in said migration guide, which I overlooked initially. Nothing happened though, container wouldn’t start and its logs kept pointing to this directory, then I saw it in the docs.

Nginx in front of it, open ports for https (and ssh), nothing more. Let’s encrypt certificate and you’re good to go.