CVE's are coming at a rapid pace and Linux provides the tooling to live patch the kernel yourself, across your fleet, and sometimes faster than the vendor. This tooling will be built to support all Linux distributions, and will turn into an open service to make this easier for everyone
What's the point of this project? kpatch and klp-build (SUSE's kpatch tooling, the defacto standard for all distros these days) is open source, tested and used by every distribution.
Honestly, I hadn't seen klp-build. If your on SLE, I think this is a decent place to be.
Many people don't realize they can be live patching the kernel themselves.. if nothing else, hopefully this will raise awareness and get folks using tools that exist, or building on this for their specific needs.
My long term goal here, is an open service you can run for ay distro.
CVE's are coming at a rapid pace and Linux provides the tooling to live patch the kernel yourself, across your fleet, and sometimes faster than the vendor. This tooling will be built to support all Linux distributions, and will turn into an open service to make this easier for everyone
What's the point of this project? kpatch and klp-build (SUSE's kpatch tooling, the defacto standard for all distros these days) is open source, tested and used by every distribution.
https://github.com/SUSE/klp-build
What does linux-hotpatch give me that klp-build doesn't?
Honestly, I hadn't seen klp-build. If your on SLE, I think this is a decent place to be.
Many people don't realize they can be live patching the kernel themselves.. if nothing else, hopefully this will raise awareness and get folks using tools that exist, or building on this for their specific needs.
My long term goal here, is an open service you can run for ay distro.