4 ms·
Emphasis added: > An eBPF probe should never cause kernel panics. Should, but did. This is the point at which to learn and adapt. Also, kernels are software
by freedomben 2y ago
Emphasis added:
> An eBPF probe should never cause kernel panics.
Should, but did. This is the point at which to learn and adapt.
Also, kernels are software just like nearly everything else, and software is buggy. It's a balance obviously, but some basic defensive development can be a real savior for your users.
I don't know the details about this CrowdStrike incident, but I would also be surprised if you couldn't write an automated test (even a "smoke test") to quickly test out these new kernels before they hit your customers. Given what happened, it seems like negligence not to do that.
- roblabla 2y agoIt's possible CS can do better, of course. But it's just wrong to blame them for the Linux crashes - they're not the ones that introduced buggy code and broke their users. RHEL/Linux did.