16.04 Server with Canonical Livepatch Service requires restart - Ask Ubuntu


i'm no means sysadmin, maybe simple oversight. isn't whole point of livepatch service prevent mission-critical servers having restart after kernel update?

livepatch on google cloud compute server in question has been installed since october 18th. before installing livepatch service, performed 1 last restart.

this i'm presented upon login:

login as: ubuntu authenticating public key "key" agent welcome ubuntu 16.04.1 lts (gnu/linux 4.4.0-45-generic x86_64)   * documentation:  https://help.ubuntu.com  * management:     https://landscape.canonical.com  * support:        https://ubuntu.com/advantage  cloud support ubuntu advantage cloud guest:   http://www.ubuntu.com/business/services/cloud  1 package can updated. 0 updates security updates.  *** system restart required *** last login: tue nov  1 09:57:46 2016 x.x.x.x 

if check status of livepatch service, looks fine:

ubuntu@server:~$ canonical-livepatch status kernel: 4.4.0-45.66-generic fully-patched: true version: "" 

anything else need doing prevent these required restarts? there other packages need full restart? packages managed through ubuntu's own package manager.

here can find lengthy faq ubuntu live patch: http://blog.dustinkirkland.com/2016/10/canonical-livepatch.html copied questions of interest you:

q: kinds of updates provided canonical livepatch service?

a: canonical livepatch service intended address high , critical severity linux kernel security vulnerabilities, identified ubuntu security notices , cve database. note there limitations kernel livepatch technology -- linux kernel code paths cannot safely patched while running. our best supply canonical livepatches high , critical vulnerabilities in timely fashion whenever possible. there may occasions when traditional kernel upgrade , reboot might still necessary. we’ll communicate through usual mechanisms -- usns, landscape, desktop notifications, byobu, /etc/motd, etc.

q: non-security bug fixes, stability, performance, or hardware enablement updates?

a: canonical continue provide linux kernel updates addressing bugs, stability issues, performance problems, , hardware compatibility on our usual cadence -- every 3 weeks. these updates can applied using ‘sudo apt update; sudo apt upgrade -y’, using desktop “software updates” application, or landscape systems management. these standard (non-security) updates still require reboot, have.


Comments

Popular posts from this blog

download - Firefox cannot save files (most of the time), how to solve? - Super User

windows - "-2146893807 NTE_NOT_FOUND" when repair certificate store - Super User