Score:1

livepatch not livepatching very much

cn flag

I have been running canonical-livepatch for a year or so but constantly find that I have to reboot my server due to kernel patching. Now recently I have been running Linux kernel 5.11.0-1021-aws.

Then recently came a security patch https://ubuntu.com/security/notices/USN-5135-1 which was installed (automatically). Now the system requires me to reboot because of this tiny patch.

$ cat /var/run/reboot-required.pkgs

linux-image-5.11.0-1022-aws
linux-base

canonical-livepatch status

last check: 35 minutes ago
kernel: 5.11.0-1021.22~20.04.2-aws
server check-in: succeeded
patch state: ✓ no livepatches needed for this kernel yet
tier: updates (Free usage; This machine beta tests new patches.)
machine id: ec22769b485772537a25ff41239f34b3

Is this how livepatch is supposed to work? I find myself rebooting the system at least once per month due to kernel patches. Am I doing something wrong? Maybe my system installs the patch before live-patch have a chance? Or have I simply misunderstood how live patch is working?

All the best !
Daniel

Organic Marble avatar
us flag
I tried it out for a long time after it first came out. AFAIK I never got a patch. My conclusion: unneeded overhead. So I removed it.
Score:-1
cn flag

After further reading I concluded that canonical-livepatch only patches the most critical updates in summary very few per year.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.