Monday Dec 19, 2016

MONDAY SPOTLIGHT: Patching User Space with Oracle Ksplice

Oracle Ksplice is a powerful tool that allows administrators to increase the speed of deployment of critical patches and helps eliminate downtime.

The Ksplice enhanced client extends the ability of Ksplice to enable in-memory patching of critical user space libraries in Oracle Linux. The ability to patch these libraries in-memory without rebooting not only increases system security but also reduces costly system downtime. Recent exploits such as Heartbleed can be patched automatically without administrator intervention, maintenance windows or downtime. 

Before you enable Ksplice, you need to disable any prelinking of binaries that may have occurred. Oracle Linux 6 systems come with the prelink tool installed by default which must be removed to prevent conflicts with the Ksplice enhanced client.  Oracle Linux 7 systems do not have prelink installed by default.

# prelink –au
# yum remove prelink

Installation of the Ksplice enhanced client is simple for Oracle Linux servers that are registered to the Unbreakable Linux Network (ULN).

Login to the ULN web interface, select the system you want to enable Ksplice on, then click on Manage Subscriptions.  Next, enable the Ksplice-aware user space packages channel for that server.

After enabling the Ksplice-aware user space packages channel, use yum to install the Ksplice enhanced client on the server:

# yum install –y ksplice

Once the Ksplice client is installed, retrieve your access key for Ksplice from ULN and add it to the Ksplice configuration by editing /etc/uptrack/uptrack.conf.

Next, use yum to install the Ksplice aware versions of the user space packages installed on your server, without updating any other packages on the system, by running following command:

# yum --disablerepo=* --enablerepo=ol7_x86_64_userspace_ksplice update

A single reboot is required to activate the newly installed Ksplice aware libraries. After you reboot the system once, you will then be able to apply any future patches to both the kernel and critical user space libraries without rebooting. 

In addition to patching both kernel and critical user space packages, Ksplice can also be used as a diagnostic tool by Oracle Support to load diagnostic kernels without rebooting the system. 

The following white paper provides the workflow of using Ksplice as a diagnostic tool with Oracle Support: 

The full Ksplice User Guide can be found here: 

Are you ready to take back your weekends and increase the security of your systems with Ksplice?

Thursday Sep 15, 2011

Now Available: Zero Downtime Updates for Oracle Linux with Ksplice

Ksplice, which was recently acquired by Oracle in July 2011, is now available as part of Oracle Linux. With Ksplice, users can update the Linux operating system (OS) kernel, while it is running, without a reboot or any interruption. Only Oracle Linux offers this unique capability, making it possible for users to make important Linux updates without burdening the team with the operational cost and disruption of rebooting for every update to Linux.

Available at no additional charge to existing and new Oracle Linux Premier Support customers, Oracle’s Ksplice Uptrack service is easy to access. Oracle Linux Premier Support subscribers can request a Ksplice access key through Unbreakable Linux Network (ULN). After installing Ksplice, you can easily apply all important Linux kernel updates without needing to reboot. No configuration changes or initial reboot is needed to install. Under the hood, Ksplice loads a Linux kernel module that rewrites portions of the running kernel to apply the updates.

Read the Ksplice data sheet.

Join us on September 20th at 9:00 am US PT for a Ksplice webcast and get more details.

Friday Jul 22, 2011

Oracle Linux Enhanced with Zero Downtime Software Updates

Oracle Buys Ksplice

Oracle today announced that it has acquired Ksplice, Inc., the creator of innovative zero downtime update technology for Linux. The transaction has closed.

The addition of Ksplice’s technology will increase the security, reliability and availability of Oracle Linux by enabling customers to apply security updates, diagnostics patches and critical bug fixes without rebooting.

Oracle believes it will be the only enterprise Linux provider that can offer zero downtime updates, and expects to make the Ksplice technology a standard feature of Oracle Linux Premier Support.

Ksplice Inc. is a privately-held company based in Cambridge, Mass.

Read more 


Get the latest updates on strategy, products, events, news, customers, partners and all things Oracle Linux! Connect with Oracle's Linux experts.

Stay Connected




« February 2017