#livepatch — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #livepatch, aggregated by home.social.
-
Canonical Livepatch is now available for Ubuntu 26.04 LTS and Ubuntu Core 26 ARM64!
#Ubuntu #Linux #UbuntuLinux #Computers #Laptops #TechNews #TechUpdates #Canonical #Livepatch
-
Canonical Livepatch is now available for Ubuntu 26.04 LTS and Ubuntu Core 26 ARM64!
#Ubuntu #Linux #UbuntuLinux #Computers #Laptops #TechNews #TechUpdates #Canonical #Livepatch
-
Live kernel patching for ARM64 Ubuntu is now available!
Canonical has announced that Livepatch, which facilitates patching the kernel in real time without requiring system reboot to improve your computer’s security, is now available for the ARM64 version of Ubuntu. This means that ARM64 machines that are running Ubuntu will now be able to update their kernel automatically without any downtime. This makes those machines more secure while the system is still running.
Starting from Ubuntu 26.04 LTS Resolute Raccoon and Ubuntu Core 26, live patching is now available for ARM64 machines! This means that they can now automatically update themselves when there is an important security patch that needs to be applied, making them more secure without requiring a reboot!
Previously available on AMD64 machines with Ubuntu Core 20 and Ubuntu 20.04 LTS Focal Fossa, live patching has now been extended to ARM64 machines.
Here are some of the details about how the Ubuntu team implemented this support:
According to the official announcement, they had been working on the Livepatch support for ARM64 machines for three years, but it was implemented after lots of effort were put to it. The challenge that faced this implementation was the lack of reliable kernel stack traces that live patching needed and the lck of mature toolchain required, such as GCC, objdump, and kpatch.
Starting 2024, the efforts were being made upstream, with the Linux kernel in ARM64 systems finally earning a net safety required to swap code in a running kernel. Toolchains were updated to accommodate to the requirements of live patching, and reliable stack trace checks were finally implemented in the upstream kernel code.
The toolchains have also been improved to build loadable kernel modules for ARM64 processors, and the build network has been equipped with an infrastructure that is suitable to compile live kernel patches for such processors, with its regression test suites to ensure that everything was going smoothly.
#arm64 #Canonical #CanonicalLivepatch #Livepatch #news #Tech #Technology #Ubuntu #update -
Live kernel patching for ARM64 Ubuntu is now available!
Canonical has announced that Livepatch, which facilitates patching the kernel in real time without requiring system reboot to improve your computer’s security, is now available for the ARM64 version of Ubuntu. This means that ARM64 machines that are running Ubuntu will now be able to update their kernel automatically without any downtime. This makes those machines more secure while the system is still running.
Starting from Ubuntu 26.04 LTS Resolute Raccoon and Ubuntu Core 26, live patching is now available for ARM64 machines! This means that they can now automatically update themselves when there is an important security patch that needs to be applied, making them more secure without requiring a reboot!
Previously available on AMD64 machines with Ubuntu Core 20 and Ubuntu 20.04 LTS Focal Fossa, live patching has now been extended to ARM64 machines.
Here are some of the details about how the Ubuntu team implemented this support:
According to the official announcement, they had been working on the Livepatch support for ARM64 machines for three years, but it was implemented after lots of effort were put to it. The challenge that faced this implementation was the lack of reliable kernel stack traces that live patching needed and the lck of mature toolchain required, such as GCC, objdump, and kpatch.
Starting 2024, the efforts were being made upstream, with the Linux kernel in ARM64 systems finally earning a net safety required to swap code in a running kernel. Toolchains were updated to accommodate to the requirements of live patching, and reliable stack trace checks were finally implemented in the upstream kernel code.
The toolchains have also been improved to build loadable kernel modules for ARM64 processors, and the build network has been equipped with an infrastructure that is suitable to compile live kernel patches for such processors, with its regression test suites to ensure that everything was going smoothly.
#arm64 #Canonical #CanonicalLivepatch #Livepatch #news #Tech #Technology #Ubuntu #update -
Livepatching для ядра Linux на x86 и RISC-V: как это работает
Продолжаем разбираться в работе лайвпатчей для ядра Linux. В примере из первой части этой статьи мы загрузили лайвпатч и он каким-то магическим образом настроил все так, чтобы ядро Linux использовало не свою функцию nf_tproxy_laddr4(), а ее исправленный вариант. Давайте теперь посмотрим, что стоит за этой магией, а после этого разберемся, как все это использовать в продакшене. В этой части статьи будет и несколько вопросов-заданий для читателя. Ответы и подсказки — в конце.
-
Livepatching: готовим «точечное» обновление ядра Linux на примере реального бага
Бывает так, что серверные Linux-системы неделями или даже месяцами работают без перезагрузки. Переносить нагрузку с одного сервера на другие, устанавливать обновления, проверять, что после перезагрузки железо работает верно, запускать заново все необходимое ПО — это далеко не всегда просто, быстро и дешево. Но как быть, если нужно устранить критические уязвимости или другие серьезные ошибки в ядре Linux? Об одном из способов сделать это без перезагрузки системы и пойдет речь в этой статье. Меня зовут Евгений, я работаю в компании YADRO. Задачами, связанными с разработкой и анализом компонентов ядра Linux, я занимаюсь уже около 15 лет. Я расскажу, что такое livepatching, как такая технология появилась и как она применяется. А также покажу на примере, как можно самому сделать лайвпатч, чтобы исправить реальный баг в ядре Ubuntu 22.04 Server. У статьи будет продолжение. Там подробно разберем, как именно лайвпатчи заменяют одни функции ядра Linux на другие, а также узнаем, на что нужно обращать внимание, если потребуется использовать все это в продакшене. В основном речь пойдет о системах с архитектурой x86 и RISC-V (хотя технология работает и для ARM64, PowerPC, s390x).
-
Welcome to PWM Wednesday!
A Yamaha CS-30 live patching session to start your day...
https://www.youtube.com/watch?v=u-2QfAKPxE0
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
-
Welcome to PWM Wednesday!
A Yamaha CS-30 live patching session to start your day...
https://www.youtube.com/watch?v=u-2QfAKPxE0
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
-
The Yamaha CS-30 is back... ready for a super-fun live patching session. Fair warning: things get kinda wild. :awesome:
What an incredible instrument!!
https://youtube.com/watch?v=Xz5ylnCE3I8
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
@diysynth
-
The Yamaha CS-30 is back... ready for a super-fun live patching session. Fair warning: things get kinda wild. :awesome:
What an incredible instrument!!
https://youtube.com/watch?v=Xz5ylnCE3I8
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
@diysynth
-
The glorious CS-30 from Yamaha... there's one in my studio. And I'm patching it. :awesome:
Life is seriously good.
https://www.youtube.com/watch?v=_ZqiRBI1ZrQ
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
-
The glorious CS-30 from Yamaha... there's one in my studio. And I'm patching it. :awesome:
Life is seriously good.
https://www.youtube.com/watch?v=_ZqiRBI1ZrQ
#yamaha #cs30 #vintage #analogsynths #monoSynths #livepatch #cabinstudio
-
Митап по Linux Kernel: про livepatching, работу с расширениями RISC-V и создание модуля ядра для memory extender
30 октября в 19:00 инженеры из YADRO и локальной Linux User группы откроют серию совместных митапов. Они поделятся опытом точечного обновления ядра Linux с помощью livepatching, расскажут о поддержке архитектуры и расширений RISC-V и про устройство подсистемы DMA.
-
“Livepatch has fixed vulnerabilities in the running kernel. If there is a new kernel available, upgrade and reboot”
Lets see if 5.15.0-112 will make this friendly message go away… #ubuntu #linuxkernel #livepatch
-
Looking forward to discussing Linux kernel livepatch testing at Linux Plumbers Conference 2023!
-
New blog post exploring CVE-2023-1829 and how to (ab)use it using only the tc (traffic control) tool.
https://mpdesouza.com/blog/five-commands-to-crash-the-kernel/
-
Canonical Bringing Livepatch Support to HWE Kernels
Ubuntu Pro subscribers will be able to apply reboot-free updates to more Linux kernels from July. As spotted by our friends at Neowin, Canonical announced Livepatch support for Hardware Enablement (HWE) kernels starting this summer. The first HWE kernel being covered as part of this support extension is Linux 6.2, which will be backported from the Ubuntu 23.04 release and pushed out to users of Ubuntu 22.04 LTS. Livepatch is a feature only available on long-term support (LTS) versions of Ubuntu for users with an active Ubuntu Pro subscription. When enabled, Livepatch allows users to install kernel updates (on eligible :sys_more_orange:
#News #Canonical #Hwe #Livepatch #Ubuntu22_04Lts:sys_omgubuntu: https://www.omgubuntu.co.uk/2023/04/ubuntu-livepatch-hwe-kernels
-
Canonical Bringing Livepatch Support to HWE Kernels
Ubuntu Pro subscribers will be able to apply reboot-free updates to more Linux kernels from July. As spotted by our friends at Neowin, Canonical announced Livepatch support for Hardware Enablement (HWE) kernels starting this summer. The first HWE kernel being covered as part of this support extension is Linux 6.2, which will be backported from the Ubuntu 23.04 release and pushed out to users of Ubuntu 22.04 LTS. Livepatch is a feature only available on long-term support (LTS) versions of Ubuntu for users with an active Ubuntu Pro subscription. When enabled, Livepatch allows users to install kernel updates (on eligible :sys_more_orange:
#News #Canonical #Hwe #Livepatch #Ubuntu22_04Lts:sys_omgubuntu: https://www.omgubuntu.co.uk/2023/04/ubuntu-livepatch-hwe-kernels
-
At SUSE, we from the Kernel Livepatching team need to make sure that live patches work properly, but how to test a live patch when you don't have a vulnerability reproducer for the bug? You create one!
-
Linux security: your questions, answered
https://ubuntu.com//blog/linux-security-frequently-asked-questions
#iotsecurity #Compliance #livepatch #Security -
Very interesting slides from @joe-lawrence about klp-convert and how it's being used to resolve non exported symbols on #livepatch loading time, without relying on kallsyms lookups. Hopefully we can have it merged "soon" :)
https://lpc.events/event/4/contributions/507/attachments/316/533/LPC2019.pdf
-
Ubuntu Pro is Now Available to Anyone Who Wants It
https://www.omgubuntu.co.uk/2023/01/ubuntu-pro-general-availability
#Canonical #livepatch #ubuntupro #News -
Ubuntu Pro is Now Available to Anyone Who Wants It
Canonical has made Ubuntu Pro generally available. Ubuntu Pro allows you to run an Ubuntu LTS release for 10 years with more critical security updates.
#News #Canonical #Livepatch #UbuntuPro:sys_omgubuntu: https://www.omgubuntu.co.uk/2023/01/ubuntu-pro-general-availability
-
Ubuntu Pro is Now Available to Anyone Who Wants It
Canonical has made Ubuntu Pro generally available. Ubuntu Pro allows you to run an Ubuntu LTS release for 10 years with more critical security updates.
#News #Canonical #Livepatch #UbuntuPro:sys_omgubuntu: https://www.omgubuntu.co.uk/2023/01/ubuntu-pro-general-availability
-
Finally, I feel inspired to do a real #Introduction.
Hi! I'm Ben. I make #livepatch for Ubuntu. You shouldn't need or use it! Being lazy about security and not updating quickly is bad, and if you've designed your system so it can't reboot, you did it wrong! Like many of us in security jobs, I hate that my current role exists and wish it wasn't absolutely necessary! :)
I love indie games, open source, and creative people everywhere. Please invite me to your Liberapay, Patreon, AND kickstarter.
-
Finally, I feel inspired to do a real #Introduction.
Hi! I'm Ben. I make #livepatch for Ubuntu. You shouldn't need or use it! Being lazy about security and not updating quickly is bad, and if you've designed your system so it can't reboot, you did it wrong! Like many of us in security jobs, I hate that my current role exists and wish it wasn't absolutely necessary! :)
I love indie games, open source, and creative people everywhere. Please invite me to your Liberapay, Patreon, AND kickstarter.
-
Would anyone recommend using #Canonical #Livepatch? Is it free? I have a radio server running #LibreTime on #Ubuntu18.
-
What is the ‘Ubuntu Pro’ Banner in Software Sources About?
A few readers have mailed in to tell me they’ve spotted a new promotion for Ubuntu Pro in the Software & Update apps on Ubunu 20.04 LTS. The banner isn’t a nag screen; you have to open the Software & Updates tool (which is often referred to as the ‘software sources’ utility) and click on the Livepatch tab to see it: Livepatch is Ubuntu’s LTS-only reboot-free kernel update mechanism which is especially handy in situations where rebooting a system (or a fleet of systems) to apply a security update is …unideal. Chances are those looking to enable Livepatch are the :sys_more_orange:
#News #Canonical #Livepatch #Security #Ubuntu20_04Lts #UbuntuAdvantage #UbuntuPro:sys_omgubuntu: https://www.omgubuntu.co.uk/2022/01/ubuntu-pro-banner-in-software-and-updates-tool
-
Eine Frage an meine #linux Bubble, gibt es eine Möglichkeit bei #Debian 10 einen Kernel #Livepatch einzurichten für den Server? So das dieser nicht ausgeschaltet werden muss um auf einer neuen Kernelversion zu laufen? Hab bisher nur Kernelcare gefunden. Kostet aber etwas.
Für Ubuntu gibt es den Livepatch. Müsste theoretisch auch bei Debian laufen.
-
5 Tools That Will Help To Run Linux Servers Without Reboots #Kernelpatching #Livepatching #Kernel #Ksplice #Kpatch #Kgraft #Livepatch #KernelCare #Linux
https://www.ostechnix.com/5-kernel-live-patching-tools-that-will-help-to-run-linux-servers-without-reboots/ -
:ubuntu:
Le serveur de #FédiQuébec aurait besoin d'être redémarré pour appliquer le nouveau #noyau #Linux.Pour ceux qui connaissent : est-ce que ça vaut la peine #Canonical #Livepatch pour #Ubuntu?
https://ubuntu.com/livepatch -
Ubuntu 18.04.3 LTS Makes It Easier to Patch the Linux Kernel without Rebooting... Because it's not Microsoft Windows
The new Livepatch desktop integration included in Ubuntu 18.04.3 LTS consists of an indicator in the system tray area of the top panel, which displays the current status of Livepatch and notifications to inform users when new patch are available and if they've been applied.
Additionally, the Livepatch configuration UI, which is integrated as a tab in the Software & Updated utility, now gives users even more details on the corresponding CVEs that have been addressed in the latest patch. From there, you can also hide the indicator or disable Livepatch altogether.
See https://news.softpedia.com/news/ubuntu-18-04-3-lts-makes-it-easier-to-patch-the-linux-kernel-without-rebooting-527132.shtml https://squeet.me/objects/962c3e106526f7f201b9b9a39fe56f42392c7c6e -
Linux Ubuntu 18.04 LTS is now certified for Dell XPS 13 laptop.
Canonical and Dell: Ubuntu 18.04 LTS operating system for Dell XPS 13 machines to provide the Open Source community of developers with a powerful and unrivaled machine that works out-of-the-box.
Comes with the Canonical Livepatch Service.
Full Snap integration for easy installation of third-party apps.
Configure your Dell XPS 13 right now via link.
---> https://www.dell.com/en-us/work/shop/dell-laptops-and-notebooks/xps-13-developer-edition/spd/xps-13-9370-laptop?appliedRefinements=302
_
#Dell #Linux #Ubuntu #Canonical #LivePatch #XPS13