Could there be kernel livepatching with Silverblue?

Hey all! :slight_smile:
I was just wondering if there could theoretically be kernel livepatching in fedora silverblue one day?
Any thoughts?

Have a wonderful day!

1 Like

Theory aside probably not practically, because the live patches from kernel to kernel really work best when created by hand with care, and we don’t have the resources to do that.

But I’m curious on the question in theory too, since Silverblue uses reboots to apply all os-level updates, it’d be kind of strange to go to extensive lengths to hot-patch the kernel when systemd or glibc or anything else requires a reboot. What’s the use situation you’re envisioning?

1 Like

There is the experimental option to set the filesystem to “livefs”. rpm-ostree ex livefs which makes the current booted commit into a writable system.

2 Likes

Thanks for your answers! :slight_smile: I was just wondering if kernel livepatching could still be the cherry on the cake for SB at some point, as it also makes the time between reboots even more secure. :thinking:
But I realize that the common use cases tend to suggest CoreOS with self-initiated reboots.