4 ms·

Not very open though. Livepatch is closed, unlike kpatch. And probably they are going to be using some kind of snap packages somewhere. Which are annoying to

Not very open though. Livepatch is closed, unlike kpatch. And probably they are going to be using some kind of snap packages somewhere. Which are annoying to deal with and centralized. However since many of the things they support are using a GPL license, then its a matter of time until we get a Ubuntu Pro clone. Also its free for 5 Devices, RHEL is free for 16 but you need to renew every year manually, which is really annoying, looks like Ubuntu Pro doesn't require to do such a thing. I like the RHEL philosophy in software more, as they tend to make everything open, unlike canonical which is currently pushing a centralized package format and has a history of trying to do things their own way. This is coming from someone who is using Debian everywhere.

kapilvt 4y ago
s/format/repository
rlpb 4y ago
> Livepatch is closed, unlike kpatch. It's the same. For example https://ubuntu.com/security/livepatch/docs/faq https://ubuntu.com/security/livepatch/docs/faq links to https://github.com/torvalds/linux/blob/master/Documentation/livepatch/livepatch.rst https://github.com/torvalds/linux/blob/master/Documentation/....
pabs3 4y ago
All of the Linux live patching efforts are paid services. I think Gentoo might have some open stuff, but no patch generation/distribution service. IIRC the reason is that you basically need full-time staff knowledgeable in Linux kernel internals to be able to generate the Linux live patches.
- jacooper 4y ago
  Kpatch is fully open https://github.com/dynup/kpatch https://github.com/dynup/kpatch But if you mean the Kernel patch packages themselves, then you are right, looks like there are no free patch packages that one can just download and use.
  - pabs3 4y ago
    Right, kpatch itself is open, but the infrastructure to run it is generally proprietary (except for Gentoo's) and the patches themselves are paywalled (and Gentoo produces no patches).

kapilvt 4y ago

s/format/repository

rlpb 4y ago

> Livepatch is closed, unlike kpatch. It's the same. For example https://ubuntu.com/security/livepatch/docs/faq https://ubuntu.com/security/livepatch/docs/faq links to https://github.com/torvalds/linux/blob/master/Documentation/livepatch/livepatch.rst https://github.com/torvalds/linux/blob/master/Documentation/....

pabs3 4y ago

All of the Linux live patching efforts are paid services. I think Gentoo might have some open stuff, but no patch generation/distribution service. IIRC the reason is that you basically need full-time staff knowledgeable in Linux kernel internals to be able to generate the Linux live patches.

jacooper 4y ago
Kpatch is fully open https://github.com/dynup/kpatch https://github.com/dynup/kpatch But if you mean the Kernel patch packages themselves, then you are right, looks like there are no free patch packages that one can just download and use.
- pabs3 4y ago
  Right, kpatch itself is open, but the infrastructure to run it is generally proprietary (except for Gentoo's) and the patches themselves are paywalled (and Gentoo produces no patches).