search for: kpatch

...o mention it would make the world a more secure > place :) > > Is it an upstream issue? No SRPMS available? Etc? > > Just trying to understand. I don't follow the centos-devel list. Has this > been discussed there, or elsewhere? > There is a lot to go into making a correct kpatch. You have to determine that you have a working kpatch (you can have one which works on 1% and corrupts 80% and crashes 19%), you have to determine that the patch fixes the problem (you can build patches which should do the right thing but don't), and you have to determine that it doesn't ad...

...rrata and Bugfix Advisory 2016:0209 Upstream details at : https://rhn.redhat.com/errata/RHBA-2016-0209.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: d028cf451a86be106e8696a4d1813ab35fc63aa165db1c897ffd2044cc3cf605 kpatch-0.3.1-1.el7_2.noarch.rpm Source: 463365306938c8dd92fde5f4789777853fc280bea9d769c25b3018bcc7e4e01d kpatch-0.3.1-1.el7_2.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

...Errata and Bugfix Advisory 2017:3310 Upstream details at : https://access.redhat.com/errata/RHBA-2017:3310 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 4826f391b35168db5fa9a38cfd5f74bb4dfbc4a757c0cbda2df04f546c9f9130 kpatch-0.4.0-2.el7_4.noarch.rpm Source: 61e1c9b9fafe0ae9abbfa29625a23453b40fc833991eaa9e4a6cff1a4a5bcd56 kpatch-0.4.0-2.el7_4.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

...Errata and Bugfix Advisory 2019:3062 Upstream details at : https://access.redhat.com/errata/RHBA-2019:3062 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: b918465cfb4a493aaed744ea33018cdb9cf94e4f1d3faa017b6cd74c50e07064 kpatch-0.6.1-5.el7_7.noarch.rpm Source: 72d721bda39c5114cfcbd549860649fa2ddb4ae927f4d8e0d21a3bee0d038b97 kpatch-0.6.1-5.el7_7.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net Twitter: @JohnnyCentOS

...rrata and Bugfix Advisory 2014:1074 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-1074.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 54c186f5da1cf8d23e17cbb1d1c62f6fe00268f27f80663313922b469c09196f kpatch-0.1.10-1.el7_0.noarch.rpm Source: 4e6a52c08909c8d64522b40a286113cd84bb209d8f9655d67fc135895b7a07b9 kpatch-0.1.10-1.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net

...and Enhancement Advisory 2014:1649 Upstream details at : https://rhn.redhat.com/errata/RHEA-2014-1649.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 51d8cfeb1a49efd3d778fcbf00537076b2d68f6ebcd0098fa174cd885c29dc6a kpatch-0.1.10-3.el7_0.noarch.rpm Source: 4d7cb8146fc0433167cd8e18f439d3b3cf7748649ce21b509b501fd46cc45c58 kpatch-0.1.10-3.el7_0.src.rpm -- Johnny Hughes CentOS Project { http://www.centos.org/ } irc: hughesjr, #centos at irc.freenode.net

On Thu, Oct 3, 2019 at 1:42 PM Jim Perrin <jperrin at centos.org> wrote: > > > On 10/3/19 1:32 PM, Phelps, Matthew wrote: > > Forgive me if this has been answered before and I've missed it. > > > > This https://access.redhat.com/solutions/2206511 says live kernel > patches > > will be available via yum updates as of RHEL 7.7. Is this carried over to

...suggest the CentOS documentation be updated to explicitly state so. > > >> Just trying to understand. I don't follow the centos-devel list. Has > this > >> been discussed there, or elsewhere? > >> > > > > There is a lot to go into making a correct kpatch. You have to > > determine that you have a working kpatch (you can have one which works > > on 1% and corrupts 80% and crashes 19%), you have to determine that > > the patch fixes the problem (you can build patches which should do the > > right thing but don't), and you...

...is not the same as a Oracle > kernel is not the same as the one you recompiled locally. From most > operational points they seem the same, but kernel patching is where > those differences really show up. > > Yes it would be easy to set up some automated tool which 'made' > kpatches.. and I expect they may 'work' for most systems. But I also > expect that they would also eat babies more times than people would > like. If sites really need them, they can set up the tooling > themselves and make them work when they know they want it. Trying to > make it a g...

...team building CentOS is able to. (DISCLAIMER: I work for RH, so that may not sound as true as it is) >> Just trying to understand. I don't follow the centos-devel list. Has this >> been discussed there, or elsewhere? >> > > There is a lot to go into making a correct kpatch. You have to > determine that you have a working kpatch (you can have one which works > on 1% and corrupts 80% and crashes 19%), you have to determine that > the patch fixes the problem (you can build patches which should do the > right thing but don't), and you have to determine th...

On 10/3/19 1:32 PM, Phelps, Matthew wrote: > Forgive me if this has been answered before and I've missed it. > > This https://access.redhat.com/solutions/2206511 says live kernel patches > will be available via yum updates as of RHEL 7.7. Is this carried over to > CentOS 7.7.1908? > The functionality should be available, but we don't provide patches in this way, no.

...teressted in getting this "fixed". --Ralph P.s.: If we don't remove the EXTRAVERSION from our xen patch, then the exactly error message is: ... dh_install -p xen-docs -X examples --sourcedir=/home/ralphp/build/xen-3.0.1/debian/install dh_installdocs dh_installchangelogs dh_installkpatches Diff file changes EXTRAVERSION: debian/linux-2.6.12-xen.patch at /usr/bin/dh_installkpatches line 99. make: *** [binary] Error 255

Forgive me if this has been answered before and I've missed it. This https://access.redhat.com/solutions/2206511 says live kernel patches will be available via yum updates as of RHEL 7.7. Is this carried over to CentOS 7.7.1908? -- *Matt Phelps* *Information Technology Specialist, Systems Administrator* (Computation Facility, Smithsonian Astrophysical Observatory) Center for

On Thu 2023-01-26 15:12:35, Seth Forshee (DigitalOcean) wrote: > On Thu, Jan 26, 2023 at 06:03:16PM +0100, Petr Mladek wrote: > > On Fri 2023-01-20 16:12:20, Seth Forshee (DigitalOcean) wrote: > > > We've fairly regularaly seen liveptches which cannot transition within kpatch's > > > timeout period due to busy vhost worker kthreads. > > > > I have missed this detail. Miroslav told me that we have solved > > something similar some time ago, see > > https://lore.kernel.org/all/20220507174628.2086373-1-song at kernel.org/ > > In...

...ly the same as a RHEL kernel is not the same as a Oracle kernel is not the same as the one you recompiled locally. From most operational points they seem the same, but kernel patching is where those differences really show up. Yes it would be easy to set up some automated tool which 'made' kpatches.. and I expect they may 'work' for most systems. But I also expect that they would also eat babies more times than people would like. If sites really need them, they can set up the tooling themselves and make them work when they know they want it. Trying to make it a general purpose answe...

...ndency on gcc (it''s build essential anyway) * Ralph Passgang <ralph@debianbase.de> - Added changes from 3.0.1-0tha3 - Removed patch generation from kernel source in debian/rules @@ -13,7 +17,7 @@ extraversion stripped off) - Changed debian/linux-patch-xen.kpatches - -- Ralph Passgang <ralph@debianbase.de> Fri, 17 Feb 2006 00:55:00 +0100 + -- Guido Trotter <ultrotter@debian.org> Fri, 17 Feb 2006 07:47:34 +0100 xen (3.0.1-0tha3) unstable; urgency=low Modified: trunk/debian/control ========================================================...

...ntos-announce-owner at centos.org When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-announce digest..." Today's Topics: 1. CESA-2014:1653 Moderate CentOS 5 openssl Security Update (Johnny Hughes) 2. CEEA-2014:1649 CentOS 7 kpatch Enhancement Update (Johnny Hughes) 3. CESA-2014:1652 Important CentOS 7 openssl Security Update (Johnny Hughes) 4. CESA-2014:1653 Moderate CentOS 5 openssl Security Update (Johnny Hughes) 5. CESA-2014:1652 Important CentOS 6 openssl Security Update (Johnny Hughes) -----...

...your researchers can't write code that performs checkpoints, they're going to be awfully unhappy when a bug in their code makes it segfault 199 days into a 200 day run. Scheduled downtime and rolling cluster upgrades is a necessity of HPC cluster administration. I do wish that the ksplice/kpatch stuff was available in CentOS. -- Jonathan Billings <billings at negate.org>

...gcc BugFix Update (Johnny Hughes) 3. CESA-2014:1073 Low CentOS 7 nss-util Security Update (Johnny Hughes) 4. CESA-2014:1073 Low CentOS 7 nss-softokn Security Update (Johnny Hughes) 5. CESA-2014:1073 Low CentOS 7 nss Security Update (Johnny Hughes) 6. CEBA-2014:1074 CentOS 7 kpatch BugFix Update (Johnny Hughes) ---------------------------------------------------------------------- Message: 1 Date: Mon, 18 Aug 2014 21:47:05 +0000 From: Johnny Hughes <johnny at centos.org> Subject: [CentOS-announce] CEBA-2014:1072 CentOS 7 haproxy BugFix Update To: centos-announce at...

...at 03:12:35PM -0600, Seth Forshee (DigitalOcean) wrote: > > On Thu, Jan 26, 2023 at 06:03:16PM +0100, Petr Mladek wrote: > > > On Fri 2023-01-20 16:12:20, Seth Forshee (DigitalOcean) wrote: > > > > We've fairly regularaly seen liveptches which cannot transition within kpatch's > > > > timeout period due to busy vhost worker kthreads. > > > > > > I have missed this detail. Miroslav told me that we have solved > > > something similar some time ago, see > > > https://lore.kernel.org/all/20220507174628.2086373-1-song at...