虽然我在Ubunut 20.04LTS服务器上有规范的Livepatch,但我对何时需要重新启动系统感到困惑。
$ sudo canonical-livepatch status --verbose
last check: 22 minutes ago
kernel: 5.4.0-29.33-generic
server check-in: succeeded
patch state: ✓ no livepatches needed for this kernel yet
client version: 9.5.5
architecture: x86_64
cpu model: Intel(R
我使用5.11.0-40内核运行Ubuntu20.04,现在启动我的机器时,Livepatch遇到了一个持久错误(盾牌图标显示红色)。我以前也有过这种情况,但通常在重新启动之后才会清除,或者很少进行软件更新。
“软件更新程序”窗口显示:
正则Livepatch经历了一个内部错误。有关进一步信息,请参阅https://wiki.ubuntu.com/Kernel/Livepatch#CommonIssues。
canonical-livepatch status显示:
last check: 4 minutes ago
kernel: 5.11.0-40.44~20.04.2-generic
s
我最近和Xubuntu18.04有个问题,并不总是醒着。似乎只是早上的事。我调出了syslog,看到了一些失败,比如“启动快照失败了”。会是这样吗?对于如何解决这个问题,有什么建议吗?我看不出有什么方法可以将文件粘贴在下面的syslog中,但是行格式会丢失。在6:29完成了一次艰难的重新启动以恢复。
Aug 2 00:13:43 Pavilion anacron[10964]: Job `cron.weekly' started
Aug 2 00:13:43 Pavilion anacron[11320]: Updated timestamp for job `cron.weekl
canonical-livepatch快照不为其子命令提供自动完成功能。根据“帮助”页,有效的子命令如下:
$ canonical-livepatch help
...
COMMANDS:
config - configure livepatching on the machine
disable - disable livepatching on the machine
enable - enable livepatching on the machine
help - display help
kernel-upgrade-required - indicat
我无法通过gnome控制中心的“联机帐户”选项卡登录我的Ubuntu帐户,因为它正在引发错误:“连接Ubuntu单点登录服务器出错:\n出了问题,请再试一次”。
当我试图启用livepatch (ua enable livepatch)时,它失败了:
One moment, checking your subscription first
Stderr: Could not retrieve client information.: GET request to "https://livepatch.canonical.com/v1/client/{...}/info" fai
今天,livepatch自动更新,在更新之后,日志中开始出现以下错误。
4/5/23 7:12 PM canonical-livepatch.canonical-livepatchd Client information is recent, not refreshing.
4/5/23 7:12 PM canonical-livepatch.canonical-livepatchd SRU date retrieval failed
4/5/23 7:12 PM canonical-livepatch.canonical-livepatchd failed to st
当Ubuntu修补了内核,但建议重新启动到新版本时,motd中会出现如下消息:
*** Livepatch has fixed kernel vulnerabilities. System restart recommended on the closest maintenance window
它不涉及/run/reboot-required,即使在apt upgrade安装了新内核时也是如此。
幸运的是,我有一个每周维护窗口,我希望系统在Livepatch推荐的时候自动重新启动。换句话说,我想要Livepatch的即时补丁功能,但我不需要马拉松式的正常运行时间。
实现这一目标的最佳方法是什
我最近发现了规范的Livepatch服务,我想把它安装在我的Raspberry Pi上,但是上面写着Livepatch is not available for platform arm64. Supported platforms are: amd64, x86_64.
Livepatch官方网站说:Livepatch只能在x86或amd64 CPU中使用,为什么它不适用于基于arm的CPU?
我想在我的系统上测试/Pro选项:
~$ ▶ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 22.04.1 LTS
Release: 22.04
Codename: jammy
~$ ▶ sudo pro status
SERVICE ENTITLED STATUS DESCRIPTION
esm-apps yes enabled Expanded Security Maintenance f
当我冲进我的机器时,我看到了以下情况:
Welcome to Ubuntu 18.04.1 LTS (GNU/Linux 4.15.6-sound-29 x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
* Security certifications for Ubuntu!
We now have FIPS, STIG, CC an
当我使用Ubuntu服务器时,人们通常会向我打招呼
Welcome to Ubuntu 18.04.2 LTS (GNU/Linux 4.15.0-45-generic x86_64)
* Documentation: https://help.ubuntu.com
* Management: https://landscape.canonical.com
* Support: https://ubuntu.com/advantage
System information disabled due to load higher than 1.0
* C
当尝试在UbuntuBudgie18.04的派生程序上启用带有"Software &Update“GUI的Livepatch时,我会得到以下错误消息:
Sorry, there's a problem in setting up Canonical Livepatch
我尝试通过使用https://auth.livepatch.canonical.com/上的步骤并运行这些命令来手动完成这一任务,但是我得到了以下内容:
2018/12/13 11:11:21 error executing enable: This machine ID is already enab