Skip to content

Commit

Permalink
Update KLP downgrade
Browse files Browse the repository at this point in the history
  • Loading branch information
Dmitri Popov committed Mar 13, 2024
1 parent ccacd44 commit 2912469
Show file tree
Hide file tree
Showing 2 changed files with 14 additions and 45 deletions.
8 changes: 4 additions & 4 deletions concepts/klp-intro.xml
Original file line number Diff line number Diff line change
Expand Up @@ -19,21 +19,21 @@
&klp; (&klpa;) makes it possible to apply the latest security updates to
Linux kernels without rebooting. This maximizes system uptime and
availability, which is particularly important for mission-critical systems.
As such, &klpa; offers several important benefits.
As such, &klpa; offers several benefits.
</para>
<itemizedlist>
<listitem>
<para>
Keeping a large number of servers automatically up to date is essential
Keeping a large number of servers automatically up-to-date is essential
for organizations obtaining or maintaining certain compliance
certifications. &klpa; can help achieve compliance, while reducing the
need for costly maintenance windows.
need for maintenance windows.
</para>
</listitem>
<listitem>
<para>
Companies that work with service-level agreement contracts must
guarantee a specific level of their system accessibility and uptime.
guarantee a certain level of the system accessibility and uptime.
Live patching makes it possible to patch systems without incurring
downtime.
</para>
Expand Down
51 changes: 10 additions & 41 deletions tasks/klp-troubleshoot.xml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
if different from product</literal> section of the output.
</para>
<para>
Every live patch receives updates for one year from the release of the
Every live patch receives updates for 13 months from the release of the
underlying kernel package. The
<link
xlink:href="https://www.suse.com/products/live-patching/current-patches/">Maintained
Expand All @@ -35,48 +35,17 @@
</para>
</section>
<section xml:id="sec-klp-man-patch-downgrade">
<title>Manual patch downgrade</title>
<title>Downgrading a kernel patch</title>
<para>
If you find the latest live patch problematic, you can downgrade the
currently installed live patch back to its previous version. We recommend
performing patch downgrade before the system starts exhibiting issues.
Keep in mind that a system with kernel warnings or kernel error traces in
the system log may not be suitable for the patch downgrade procedure. If
you are unsure whether the system meets the requirements for a patch
downgrade, contact SUSE Technical Support for help.
currently installed live patch back to its previous version. Keep in mind
that a system with kernel warnings or kernel error traces in the system
log may not be suitable for the patch downgrade procedure. If you are
unsure whether the system meets the requirements for a patch downgrade,
contact SUSE Technical Support for help.
</para>
<para>
To downgrade the latest kernel patch, use the <command>klp downgrade</command> command. This command automatically detects the version of the latest kernel patch, removes it, and installs the preceding kernel patch.
</para>
<procedure>
<title>Manual patch downgrade</title>
<step>
<para>
Identify the running live patch using the <command>klp -v
patches</command> command. You can see the currently running patch on
the line starting with <literal>RPM:</literal>. For example:
</para>
<screen>RPM: kernel-livepatch-5_3_18-24_29-default-2-2.1.x86_64</screen>
<para>
The <literal>5_3_18-24_29-default</literal> in the example above
denotes the exact running kernel version.
</para>
</step>
<step>
<para>
Use the command <command>zypper search -s
kernel-livepatch-<replaceable>RUNNING_KERNEL_VERSION</replaceable>-default</command>
to search for previous versions of the patch. The command returns a
list of available package versions. Keep in mind that for every new
live patch package release, the version number increases by one. Make
sure that you choose the version number one release lower than the
current one.
</para>
</step>
<step>
<para>
Install the desired version with the command <command>zypper in
--oldpackage
kernel-livepatch-<replaceable>RUNNING_KERNEL_VERSION</replaceable>-default=<replaceable>DESIRED_VERSION</replaceable></command>.
</para>
</step>
</procedure>
</section>
</topic>

0 comments on commit 2912469

Please sign in to comment.