What does HackerNews think of kpatch?

kpatch - live kernel patching

Language: C

All Linux kernel livepatch stuff are paid services, as I understand it, the Linux kernel live patches aren't possible to just produce automatically, it requires a team with enough Linux kernel knowledge to make it work and usually such teams want to get paid.

Also, I think that the base Linux kpatch tools are open source, but the infrastructure that RedHat/SUSE/Canonical/etc use to provide them are not. However, I think the Gentoo folks do have some open infra code.

https://github.com/dynup/kpatch https://wiki.gentoo.org/wiki/Elivepatch https://wiki.gentoo.org/wiki/Live_patching https://github.com/gentoo/elivepatch-server https://github.com/gentoo/elivepatch-client

Kpatch is fully open

https://github.com/dynup/kpatch

But if you mean the Kernel patch packages themselves, then you are right, looks like there are no free patch packages that one can just download and use.

> now supports kernel live patching

Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch

You can use stuff like https://github.com/dynup/kpatch or http://www.ksplice.com/ to apply security patches to a running Linux kernel, but that's still pretty new stuff.

Stratus has been doing that since the 90s, though :-)