Ubuntu Livepatch VS kpatch

There are some in-place kernel patching tools, i.e. `kpatch`, [livepatch](https://ubuntu.com/security/livepatch), and some other proprietary solutions, but they're for narrow targeted patching of security issues mostly and not for all out replacement of the running kernel. Source: about 1 year ago

> Anything that involves system services This is not true. NixOS, as one example, is able to figure out which services (including system) need to be restarted. > god forbid the kernel This is not true either. Live kernel updates are possible (but are usually a paid addition, e.g. https://ubuntu.com/security/livepatch). - Source: Hacker News / about 1 year ago

For patching running kernels against CVEs when you can't immediately reboot, there's Livepatch as well. Source: over 1 year ago

For security updates, yes, not for everything. See here: https://ubuntu.com/security/livepatch. Source: over 1 year ago

Ubuntu Pro is how you get Kernel Livepatch which applies security fixes to your running kernel without needing to reboot. Source: over 1 year ago

All Linux kernel livepatch stuff are paid services, as I understand it, the Linux kernel live patches aren't possible to just produce automatically, it requires a team with enough Linux kernel knowledge to make it work and usually such teams want to get paid. Also, I think that the base Linux kpatch tools are open source, but the infrastructure that RedHat/SUSE/Canonical/etc use to provide them are not. However, I... - Source: Hacker News / about 1 year ago

Kpatch is fully open https://github.com/dynup/kpatch But if you mean the Kernel patch packages themselves, then you are right, looks like there are no free patch packages that one can just download and use. - Source: Hacker News / over 1 year ago