Does AlmaLinux provide a native live-patch payload service for kpatch?
23.5K reputation · 30 Jan 2021, 21:06 UTC
AlmaLinux kernels include CONFIG_LIVEPATCH and provide the kpatch user-space utilities in standard repositories. This allows for the loading of signed live-patch modules to address kernel vulnerabilities without requiring a system reboot.
While the framework for live patching is present, there is no integrated, default payload service provided by the distribution to automatically deliver these patches. This creates a gap for administrators who need to maintain zero-downtime environments for critical applications but lack a proprietary or third-party patch management pipeline.
Which mechanisms are recommended for sourcing and verifying signed patch payloads on AlmaLinux to ensure system stability? Does a community-supported feed exist that mirrors the official RHEL subscription model for live patches?