4 ms·
> now supports kernel live patching Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch https://github.com/dynup/kpatch
by statquontrarian 4y ago
> now supports kernel live patching
Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch https://github.com/dynup/kpatch
- e12e 4y agoOracle snagged (developed) the first (for Linux) ksplice; https://ksplice.oracle.com/ https://ksplice.oracle.com/ canonical pay walled the second (free for "personal" use): https://ubuntu.com/security/livepatch https://ubuntu.com/security/livepatch Kpatch was/is the open, not-patent encumbered version (IIRC) - i thought RedHat had offered some version for years? Ed: Only rarely touch RedHat for the past few years - and generally prefer "know that system boots correctly after (kernel) updates" to "its running new (presumably secure) kernel, but might not boot if power fails". It's a trade-off - but rarely do I need kernel live patching. Services probably need a restart due to new SSL library anyway...