Conversation

K. Ryabitsev-Prime ๐Ÿ

Remember when we used to proudly parade our server uptimes? Man, what a simple and naive time that was.
2
9
22

@monsieuricon
We still can!

"Hey I managed to get 5 days of uptime last week!"

"Lucky you, we use software XYZ that's why we only had 2 consecutive days last week!"

0
0
2

@monsieuricon hey, at least you are getting insider information likely first for when you need to patch eh ;)

Lifecycling is part of life: kernel bugs suck though as a host has to be really taken out of a pool, upgraded, rebooted (and then wait for hardware to re-init) etc. Application level bugs one can get away with apt update && apt dist-upgrade and maybe drop a few minor requests and be happy for many things. But, when automated... eh;

Does really annoy when it is 100k hosts that have customer stuff long-term running on it, those are tricky.
And fat kernel on the host, small kernel for the VM can solve this only partiallyโ€ฆ

1
0
0
@jeroen I don't actually have any insider information about kernel vulnerabilities. :) Besides, we're as dependent on distro updates as any other person -- we don't run vanilla kernels on our systems.
1
0
0

@monsieuricon it is mostly irrelevant IMHO, as noted, lifecycling is just part of daily routine. so many problems come out, most not RCE, many local user privilege escalation, some which can be stopped with disabling further module loading. eh... just update on time ;)

0
0
0