Re:Hetzner now provides IPv6 only dedicated servers
by Drybones on Tuesday December 07, 2021 @03:04PM
(#29477508)
As someone who does full patches every couple of weeks on my servers and reboots every several months, I agree, however there's stuff that can live patch the kernel these days like kernelcare and livepatch by Canonical and more.
Another reason though to reboot every so often is for the server to do filesystem checks on the root partition(s).
Re:Hetzner now provides IPv6 only dedicated servers
by hackbinary on Tuesday December 07, 2021 @03:26PM
(#29477767)
Hot patching (kpatch) wasn't GE until earlier this year on Ubuntu.
Re:Hetzner now provides IPv6 only dedicated servers
by leephillips on Tuesday December 07, 2021 @03:01PM
(#29477475)
I understand, and my uptime was just to show how reliable Hetzner has been. By “talk me into it” I meant please point out a real kernel security flaw that be exploited without already having access to the system. There very well might be some! I’m not well up on all of this.
Yes, I check my logs and see the constant stream of breakin attempts. Basic security precautions seem to keep them out.
You're leaving yourself open to having something exploited. Have a look at your ssh logs where "people" are constantly trying to get in.
https://www.whitesourcesoftware.com/resources/blog/top-10-li...