CVE's are coming at a rapid pace and Linux provides the tooling to live patch the kernel yourself, across your fleet, and sometimes faster than the vendor. This tooling will be built to support all Linux distributions, and will turn into an open service to make this easier for everyone
What's the point of this project? kpatch and klp-build (SUSE's kpatch tooling, the defacto standard for all distros these days) is open source, tested and used by every distribution.
3 comments
[ 3.2 ms ] story [ 67.8 ms ] threadhttps://github.com/SUSE/klp-build
What does linux-hotpatch give me that klp-build doesn't?