Oracle Ksplice: Helping guard Linux systems from security breaches with zero-downtime patching

September 19, 2022 | 3 minute read
Gursewak Sokhi
Technical Product Manager - Oracle Linux & Virtualization
Text Size 100%:

Whether your Linux operating system (OS) is running on-premises or in the cloud, Oracle Ksplice helps protect your system by updating it with the latest kernel, hypervisor, and critical user space libraries, without a reboot. Ksplice is included with Oracle Linux Premier Support and freely available with Oracle Cloud Infrastructure (OCI) subscriptions. Zero-downtime patching with Ksplice is provided for supported Linux kernels in Oracle Linux, Red Hat Enterprise Linux (RHEL), CentOS Linux, and Ubuntu.

Oracle Ksplice technology helps reduce the burdens that come with rebooting systems to apply critical updates and keeps your operating system on guard.

OCI customers deploying Oracle Linux get it all for free!

OCI customers deploying Oracle Linux compute instances get Oracle Ksplice at no extra cost. Ksplice is preinstalled when Oracle Linux platform images in OCI are deployed, efficiently allowing you to protect your system and helping reduce the window of vulnerability with live OS patching. Security compliance is further enhanced by the delivery of autonomous patching capabilities and known exploit detection, a feature that helps keep administrators attentive with alerts of suspicious system activities. Ksplice is also integrated into Oracle OS Management Service and Oracle Autonomous Linux, services available for you in OCI to overcome time-consuming, complex administrative tasks.

Oracle Autonomous Linux

Based on Oracle Linux, Oracle Autonomous Linux increases reliability and cost-savings by helping eliminate human error and management complexity. With its self-tuning capabilities, Autonomous Linux systems have Ksplice built in for zero-downtime patching of the kernel and key user spaces (glibc and openssl), helping keep systems secure and compliant.

Autonomous Linux also features monitoring and submission of logs for critical events, such as a kernel oops or kernel crashes, allowing root cause analysis to be performed on them. With Oracle Autonomous Linux, your team can avoid spending endless nights rebooting systems to apply critical updates and instead focus on development projects throughout their workdays, delivering greater value to your business.

Oracle OS Management Service

Oracle OS Management Service provides tools that update and patch Oracle Linux instances deployed in OCI for security bugs and software updates, simplifying and automating traditional software management tasks. OS Management Service assists in securing your instances by helping you keep a watchful eye on OS security updates that are available for deployment. OS Management also supports Oracle Linux and Autonomous Linux instances running Ksplice and Windows Server instances in OCI, making it a one-stop shop for managing operating system patching solutions.

Best of all, OCI customers enjoy the highest-level support for free with OCI subscriptions, including Oracle Linux Premier Support at no extra charge. With Ksplice zero-downtime updates, you can take advantage of all the other benefits Oracle Linux Premier Support provides, such as the Oracle Cloud Native Environment, which includes Kubernetes and Kata containers for developing cloud native applications, 24/7 technical support from Oracle experts with comprehensive knowledge of enterprise software, and access to application streams for development.

Advantages of Oracle Linux Premier Support

By subscribing to Oracle Linux Premier Support, you can also use Oracle Ksplice on supported Linux systems that are deployed on-premises and on Authorized Cloud Environments. Oracle Linux Premier Support provides more value to your systems with offerings such as Oracle Linux high availability services (Corosync and Pacemaker), the ability to monitor Oracle Linux kernel-based virtual machine (Oracle Linux KVM) environments through Oracle Linux Virtualization Manager, an all-inclusive automation framework through Oracle Linux Automation Manager and Engine, and a variety of storage or file system options that include Gluster, Btrfs, XFS, and OCFS2.

Try it for yourself!

Interested in trying out Oracle Ksplice on OCI but don’t have an OCI account? Start for free by signing up for Oracle Cloud Free Tier, which includes Always Free cloud services for an unlimited time and gives access to a 30-day trial.

If you’re running Oracle Linux or RHEL outside of Oracle Cloud Infrastructure and want to explore the power of Oracle Ksplice zero-downtime updates for on-premise deployments, you can try it too with a 30-day free trial.

For more information, see the following resources:

Gursewak Sokhi

Technical Product Manager - Oracle Linux & Virtualization

Gursewak Sokhi is a Technical Product Manager for Oracle Linux and Virtualization. He holds a Computer Engineering B.S. with a concentration in Systems Programming, and a Mathematics and Economics B.A. from the University of California, Santa Cruz.

Connect with him on LinkedIn:

Previous Post

Configure pfSense active-passive high-availability clusters with Corosync and Pacemaker on OCI

Mayank Kakani | 3 min read

Next Post

Oracle and NVIDIA solve the largest AI and NLP models

Akshai Parthasarathy | 4 min read