Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : do you always use the newest kernel ?

[ttgt]

Hi,

do you always use the newest kernel ?

because update the newest kernel,

server need to reboot.


thanx

[VPSJohn]

Hi,

most of time I wait until the next release comes up before I even upgrade

[ssfred]

Hi,
There can be vulnerabilities with the latest kernel. So it is always better to wait some more time to use it.

[Simplex-Ed]

The servers we run utilise KSplice so kernel updates are automatically applied without human intervention or a reboot of the server.

[ttgt]

KSplice is not offer signing up any more...

[ttgt]

anyone can share your experience ? thanx

[cedricd]

Originally Posted by ttgt

KSplice is not offer signing up any more...

KSplice's patching method is open source - you can roll out your own updates/patches for free

[ttgt]

Originally Posted by cedricd

KSplice's patching method is open source - you can roll out your own updates/patches for free

but KSplice make server do not need to reboot,can any other way to achieve the rebootless work ? thanx

[cedricd]

Originally Posted by ttgt

but KSplice make server do not need to reboot,can any other way to achieve the rebootless work ? thanx

You can.. the tools are open source. You can make your own patches

[ttgt]

Originally Posted by cedricd

You can.. the tools are open source. You can make your own patches

is it possible tell me more detail about it ? thanx

[cedricd]

Originally Posted by ttgt

is it possible tell me more detail about it ? thanx

Others might be able to, I haven't gotten into the process of making patches

[CoderJosh]

Unless you have special requirements (due to special/new hardware, for example), it's usually best to stick with the Linux kernel coming with your Linux distribution. It's not updated all that frequently, and unless there's a severe security or stability problem that got fixed, you can also consider skipping a reboot.

[mellow-h]

Originally Posted by CoderJosh

Unless you have special requirements (due to special/new hardware, for example), it's usually best to stick with the Linux kernel coming with your Linux distribution. It's not updated all that frequently, and unless there's a severe security or stability problem that got fixed, you can also consider skipping a reboot.

I don't think he meant to say the latest kernel from kernel.org, rather the latest kernel from the specific distro.

To answer OP, it is important to check what are updated in the latest kernel. If it is a root vulnerability or something that can affect the environment you are running, then yes, you should immediately update the kernel. Otherwise, you can hold until you see an update that you specifically require.

You can sign up in the Security Advisory mailing list for the distro you are running to receive detailed information on update. That is the best way to analyze and find which update is required.