Documentation on how to configure live kernel patching. about photon

[dcasota]

@sshedi @altanov is pr #1536 ready for publish?

@novaksam that pr contains live kernel patching docs, too. If that entries do not serve, describe where it didn‘t work in your constellation.

[novaksam]

@dcasota That does outline how to set it up, but is live patching going to become part of the built-in patching? Will the patches be distributed through some means within the OS (which that go through the kpatch scripts), or will that be a manual process?

Thanks!

[dcasota]

@novaksam I don’t know. In VCF, Broadcom has various software delivery methods for virtual machines’ virtual hardware and guest os inside. It just works.
Lately I have seen a similar meccano in Hyperv. It seems to have become legacy.

For the open-source Photon OS version the Photon OS team publishes security packages quite fast. Simply update your os using tdnf and tdnf-automatic.

Intelligent Patching is interesting for products with Photon OS as sub component, 100%. Actually, I think the non-classic way is Broadcom AI land.

[bhllamoreaux]

@novaksam Apologies for the lack of documentation. At the moment, we are just providing some tools for users to generate/manage their own livepatches; it will be a manual process for now.

Patches are already available in github when fixes are merged, e.g 8ead6b4, but you'll have to generate and load the livepatch module(s) yourself.

[novaksam]

It's all good, was hoping it would be a native part of the product, but it appears to not be at that point currently.