Home_greyopenFATE - openSUSE feature tracking > #306907
Dashboard | Search | Sign up | Login

Please login or register to be able to edit or vote this feature.

Add support for Ksplice

Feature state

openSUSE Distribution
Done
openSUSE-11.2
Rejected
openSUSE-11.3
Rejected

Description

KSplice allows it currently to apply most but not all kernel updates without the need to reboot which is especially great for servers. It's backed by a newly founded corporation that continually tries to improve it so hopefully sometime in the future a reboot wont be necessary for any kernel update.

Fedora as well as Ubuntu already support it so openSUSE shouldn't stay behind.

URL: http://www.ksplice.com/

Discussion


icons/user_comment.png H. M. wrote: (8 years ago)

Ksplice will be THE reason for many webserver admins to choose Ubuntu and not openSUSE. Don't lose any ground on the server market, make use of Ksplice too.

icons/user_comment.png . . wrote: (8 years ago)

A presentation at LinuxTag 2009 from the ksplice guys as well as
http://en.wikipedia.org/wiki/Ksplice says, that
all security patches can be made rebootless. Only 12% of 64 studied patches needed manual extra code (e.g. for updating structure data).

The proper way of distribution would of course also update /lib/modules and /boot/vmlinuz/initrd but possibly patch the running kernel via a rpm post-inst script.

I have noted that in the past, openSUSE kernel-updates happened later than those for Debian and Ubuntu, but often contained several fixes at a time. I guess, part of this is due to the reboot needed after a kernel-update, so with Ksplice critical security fixes could reach users faster.

icons/user_comment.png J. S. wrote: (8 years ago)

Ksplice or similar functionality is critical for production servers, especially those exposed in the DMZ.

In the future there should never be an excuse that a security patch didn't get applied since it required a reboot and a maintenance window wasn't available right away.

icons/user_comment.png J. B. wrote: (8 years ago)

This is really two requests:

1. Add the ksplice kernel module into the distribution.

2. Provide the kernel updates as ksplice patches (most likely as an alternative to the normal updates).

While 1. is easy, I don't see the kernel teams having enough resources for 2. It will require the community to step in; anybody who's interested in doing the work is welcome.

That said, 1. does not make sense without 2. If we find somebody who does the work (please speak up if you are interested!), the module can be distributed as a KMP and/or this feature can be reopened.

icons/user_comment.png M. V. wrote: (8 years ago)

Just for the record I would add the functionaly to the kernel anyway so people can play with it. Even when the kernelteam does not yet deliver the paches in ksplice format.

Because If we later decide to offer the ksplice patches it can be done.

icons/user_comment.png M. M. wrote: (8 years ago)

Are there any kernel modifications needed on our side? From a short look at http://www.ksplice.com/dist/ksplice-0.9.9-src.tar.gz , it's a set of userspace programs and a kernel module template that gets compiled when you apply a ksplice patch.

icons/user_comment.png J. S. wrote: (8 years ago)

From what i can tell from their website, this is a non-free software package.....

icons/user_comment.png B. W. wrote: (8 years ago)

The website is mostly about the commercial services offered.Nevertheless http://www.ksplice.com/dist/ksplice-0.9.9-src.tar.gz contains in its "COPYING: file
                    GNU GENERAL PUBLIC LICENSE
                       Version 2, June 1991

and .c and .pl files state in their head

 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License, version 2.

only those in kmodsrc/x86/libudis86/ have a different, more liberal license (BSD-License)

So this is simply free software.

@Michel & @Michal: ksplice should be working on vanilla kernels, so no kernel patch needed.

icons/user_comment.png M. M. wrote: (8 years ago)

OK, in that case all we need to get basic ksplice enablement is to package the ksplice scripts and submit them to Factory. This can be done by anyone.

As for providing ksplice kernel patches, see comment #4.

icons/user_comment.png R. G. wrote: (6 years ago)

Oracle has bought Kplice
www.theregister.co.uk/2011/07/22/oracle_buys_ksplice/

And it seems that they plan to stop offering the service to other distros...
So before wasting a lot of effort, we should wait to see what really happens with it

icons/user_comment.png M. L. wrote: (4 years ago)

Why not provide our owned service based on the GPLed code of Ksplice?
There'd be some server work to compile the patch code (post code), and develop a Ksplice-Desktop to fetch the binary post code then do hot fix.

icons/user_comment.png R. B. wrote: (6 months ago)

Done, openSUSE now has support for kGraft, just awaiting someone to make the patches.

Last change: 6 months ago
Voting
Score: 59
  • Negative: 4
  • Neutral: 1
  • Positive: 63
Feature Export
Application-xmlXML   Text-x-logPlaintext   PrinterPrint