~/talk

An SRE Guide to Linux Kernel Upgrades

on YouTube 34m
Talkat SREcon22 Europe/Middle East/Africa · 2022-10-25..10-27· [linux-and-operating-systems]

speaker

name:Ignat Korchagin
website:https://pqsec.org

resources

video:https://youtu.be/SVf-RnoUBCM
slides:none on file

summary

The kernel stable branch produces ~75 bugfix releases (example: 5.15 had 75), over half of them contain >100 commits and 55 of 74 releases carry CVE fixes; delaying updates grows the change delta (5.15.16→5.15.32 = 2,196 commits, delaying further →5,436 commits) and increases risk nonlinearly. Real gains appear: migrating 5.4→5.10 saved ~5GB RAM per server. Apply weekly bugfix releases, prefer an LTS major branch, rebooted rollouts in small batches with metrics and small reproducers for upstream fixes.

AI-written summary · about

chapters (6)

  1. 0:00The fear of kernel upgrades
  2. 3:27Risks of delaying updates
  3. 11:39Common industry anti-patterns
  4. 17:12Why kernel updates are safer
  5. 20:07Understanding release models
  6. 27:15Best practices for deployment

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.