Tell me more ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
up vote 9 down vote favorite
1

ksplice is an open source extension of the Linux kernel which allows system administrators to apply security patches to a running kernel without having to reboot the operating system. (From Wikipedia.)

Is there a downside to using ksplice? Does it introduce any kind of instability? If not, why is it not included by default in more Linux distributions?

share|improve this question

2 Answers

up vote 3 down vote accepted

Technically it's very sound, I think that the fact distributions do provide this method of patching yet is:

  • It does not integrate with the existing update methods (packaging wise)

  • It adds to the burden of the distro to provide another method of upgrading.

share|improve this answer
+1 to that. There would be MANY intricacies to tracking a hot-patched kernel and what hot-patches were applied. And it doesn't even begin to touch what happens if even a non-hotpatched system would have crashed on a kernel upgrade(panic,fail to boot, etc). I like having the fall-back option...I don't know if ksplice duplicates the running kernel as a backup or not. – Call me V Apr 11 '11 at 17:57
up vote 0 down vote

(A disclaimer: I work for Ksplice.)

Re: "Is there a downside to using Ksplice?" you may find the answer to a similar question over at ServerFault to be useful: http://serverfault.com/questions/78406/is-ksplice-production-ready/

share|improve this answer
2  
I don't know why you disclaim anything here, you didn't actually answer the question here... It's generally considered bad behavior for your answer to simply be a link. – xenoterracide♦ Mar 26 '11 at 16:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.