> now supports kernel live patching
Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch
Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch
canonical pay walled the second (free for "personal" use):
https://ubuntu.com/security/livepatch
Kpatch was/is the open, not-patent encumbered version (IIRC) - i thought RedHat had offered some version for years?
Ed: Only rarely touch RedHat for the past few years - and generally prefer "know that system boots correctly after (kernel) updates" to "its running new (presumably secure) kernel, but might not boot if power fails". It's a trade-off - but rarely do I need kernel live patching. Services probably need a restart due to new SSL library anyway...