#kernel
2 posts · all tags
-
30 min read
Livepatching the Linux kernel : through the eyes of an SRE
Rebooting a whole hypervisor fleet for every KVM escape isn't always an option. Writing a livepatch by hand for Januscape, letting kpatch-build do it for Pwnescape, and why cumulative patches matter.
-
10 min read
IPv6 connectivity issue : a journey into radvd and socket options
User virtual machines could randomly lose their IPv6 connectivity to the Internet. Disabling the IPv6 option in the launcher thus allowed reliable access to the VM to be restored...