Unexporting kallsyms_lookup_name()

Posted Mar 2, 2020 11:26 UTC (Mon) by Sesse (subscriber, #53779)
Parent article: Unexporting kallsyms_lookup_name()

What is the current status of kpatch, really? I see there's all sorts of patches coming in for years now, but do we have all of the pieces of the puzzle? Can I install a reasonably mainstream distro (or even upstream kernels…?), run a command and get it live-patched up to date? (I remember being able to do that with ksplice before they got sold to Oracle, and it was pretty amazing.)

Unexporting kallsyms_lookup_name()

Posted Mar 3, 2020 2:52 UTC (Tue) by pabs (subscriber, #43278) [Link]

I have not used it myself, but Oracle (for Oracle Linux, RHEL, Ubuntu, Fedora), RedHat, SUSE, Canonical (Ubuntu) and Gentoo all support it AFAICT. For the first four companies it is a paid service but Oracle has a gratis trial period. AFAICT the first four don't publish their tooling surrounding kpatch itself, but Gentoo does. I expect you could repurpose Gentoo's tooling to do patches for mainline kernels.

https://wiki.gentoo.org/wiki/Elivepatch

There is also another one (KernelCare I think) that IIRC has its own non-mainline patching mechanism.