So… KernelCare actually works as intended on Univention. But as Univention itself has these “errata-updates” it doesn’t make much sense to use…
as it currently works additional apps make no sense on UCS. as the complexity to implement availability during updates is much higher than setting up docker-swarm and configuring everything myself.