Linux Kernel Live Patching Working Fairly Well For Millions Of Meta Servers

[phoronix]

Phoronix: Linux Kernel Live Patching Working Fairly Well For Millions Of Meta Servers

Meta/Facebook has turned to kernel live-patching (KLP) with Red Hat's Kpatch the the Linux kernel livepatch infrastructure to handle live updates to "several million servers". Meta engineers shared during this week's Linux Plumbers Conference around the successes they've had with it as well as troubles encountered along the way...

https://www.phoronix.com/news/Meta-Linux-Kernel-Live-Patching

[wpoely86]

Many of the recent side channels attacks also required new firmware and new BIOS/UEFI. I wonder how they handle this. As far as I understood, that still requires a full kernel restart?

[Volta]

millions of servers

Good to know In case of energy or CO2 crisis.

[JEBjames]

Michael

Typo/grammar

"Meta/Facebook has turned to kernel live-patching (KLP) with Red Hat's Kpatch the the Linux kernel livepatch infrastructure to handle live updates".

Perhaps should be something like

"Meta/Facebook has turned to kernel live-patching (KLP) with Red Hat's Kpatch Linux kernel livepatch infrastructure to handle live updates"