Emmanuel Arias

Linux live patching in Debian

We filed ITP #1070494 in May 2024 about adding live patching support for linux in Debian. More that an ITP, our project is an Intend to Design, Implement and Maintain livepatching for the kernel.

In this talk, we will present our current plans, including the design of a first approach, and all the questions and concerns that come with this project. Questions include how to triage the security issues, how to maintain the patches, and how to match the kernel image Debian lifecycle. We aim at performing a live demo of a simple livepatch.

The work-in-progress prototyping can be found in the Salsa linux-livepatching repo.

This talk would be the opportunity to discuss live what would be the best way to support linux livepatching in Debian.

🧉