Skip to content

Commit d496635

Browse files
authored
Merge pull request #96 from turmyshevd/patch-9
2 parents 1b02726 + 90de4e8 commit d496635

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

docs/live-patching-services/README.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2161,13 +2161,13 @@ The list of vulnerabilities addressed by system live patching (LibCare, QEMUCare
21612161
/var/cache/kcare/libcare_cvelist
21622162
```
21632163

2164-
# Live Patching for Proxmox VE 8
2164+
## Live Patching for Proxmox VE 8
21652165

2166-
## Overview of Proxmox VE 8
2166+
### Overview of Proxmox VE 8
21672167

21682168
Proxmox Virtual Environment (VE) 8 is a powerful, open-source platform for enterprise virtualization. It integrates KVM hypervisor and LXC containers, software-defined storage, and networking functionality on a single platform. Proxmox VE 8 offers a robust and scalable solution for managing virtual machines (VMs) and containers, making it ideal for data centers and enterprise environments.
21692169

2170-
## The Need for Live Patching
2170+
### The Need for Live Patching
21712171

21722172
In the modern digital landscape, minimizing downtime is crucial. Applying security patches and updates often requires system reboots, leading to service interruptions. Live patching addresses this challenge by allowing you to apply critical updates to the kernel and key libraries without rebooting your servers. This ensures continuous security compliance and system availability.
21732173

@@ -2181,7 +2181,7 @@ In the modern digital landscape, minimizing downtime is crucial. Applying securi
21812181

21822182
Implementing live patching solutions is essential for organizations that prioritize both security and availability in their IT operations.
21832183

2184-
## Introduction to TuxCare's Live Patching Services
2184+
### Introduction to TuxCare's Live Patching Services
21852185

21862186
TuxCare offers a comprehensive suite of live patching services designed to keep Linux-based systems secure and up-to-date without the need for reboots or service restarts. These services seamlessly integrate with Proxmox VE 8, enhancing its capabilities and ensuring uninterrupted operations.
21872187

@@ -2193,68 +2193,68 @@ TuxCare offers a comprehensive suite of live patching services designed to keep
21932193

21942194
By integrating TuxCare's services into your Proxmox VE 8 environment, you can achieve a higher level of security and compliance while maintaining the performance and availability of your virtual infrastructure.
21952195

2196-
### KernelCare for Proxmox VE 8
2196+
#### KernelCare for Proxmox VE 8
21972197

21982198
KernelCare is a live patching solution that automatically applies security patches to the Linux kernel without requiring a reboot. This service ensures that your Proxmox VE 8 servers remain secure against known vulnerabilities while maintaining high availability.
21992199

2200-
#### Integration with Proxmox VE 8
2200+
##### Integration with Proxmox VE 8
22012201

22022202
In a Proxmox VE 8 environment, KernelCare ensures that the underlying Linux kernel is always protected without affecting the operation of VMs and containers. This integration offers:
22032203

22042204
- **Cluster-Wide Protection**: Apply kernel patches across all nodes in a Proxmox cluster without rebooting any servers.
22052205
- **Simplified Management**: Centralized control and monitoring of kernel patch status across multiple nodes.
22062206
- **Reduced Risk**: Mitigates the risk of security breaches that could compromise the entire virtualized infrastructure.
22072207

2208-
#### Getting Started with KernelCare
2208+
##### Getting Started with KernelCare
22092209

22102210
For detailed installation instructions, please refer to the [KernelCare Installation Guide](https://docs.tuxcare.com/live-patching-services/#installation-1) .
22112211

2212-
### LibCare for Proxmox VE 8
2212+
#### LibCare for Proxmox VE 8
22132213

22142214
Shared libraries like **OpenSSL** and **glibc** are fundamental to the operation of many applications and services. Vulnerabilities in these libraries can lead to serious security breaches, such as unauthorized data access or remote code execution. Traditionally, updating these libraries requires restarting the services or applications that use them, which can cause downtime.
22152215

22162216
**LibCare** provides a solution by enabling live patching of these critical shared libraries without the need to restart dependent services or reboot the servers. This ensures that security updates are applied promptly, keeping your system secure while maintaining service availability.
22172217

2218-
#### Importance in Proxmox VE 8
2218+
##### Importance in Proxmox VE 8
22192219

22202220
In the context of Proxmox VE 8, LibCare plays a critical role in maintaining the security of both the host environment and the guest virtual machines:
22212221

22222222
- **Secure Management Interfaces**: Protects the Proxmox web interface and API from vulnerabilities in libraries like OpenSSL.
22232223
- **Guest Isolation**: Ensures that vulnerabilities in shared libraries do not compromise the isolation between VMs or containers.
22242224
- **Service Reliability**: Maintains the stability of critical services by avoiding restarts.
22252225

2226-
#### Getting Started with LibCare
2226+
##### Getting Started with LibCare
22272227

22282228
For detailed installation instructions, please refer to the [LibCare Installation Guide](https://docs.tuxcare.com/live-patching-services/#libcare) .
22292229

2230-
### QEMUCare for Proxmox VE 8
2230+
#### QEMUCare for Proxmox VE 8
22312231

2232-
#### Overview
2232+
##### Overview
22332233

22342234
**QEMU** is the emulator and virtualizer used by Proxmox VE to run virtual machines. Vulnerabilities in QEMU can pose significant risks, potentially allowing attackers to escape from guest environments or cause denial-of-service conditions. Traditionally, patching QEMU requires stopping or migrating virtual machines, which can be disruptive.
22352235

22362236
**QEMUCare** provides live patching for QEMU, enabling security updates to be applied without interrupting running virtual machines. This ensures that your virtual infrastructure remains secure while maintaining continuous operation.
22372237

2238-
#### Benefits
2238+
##### Benefits
22392239

22402240
- **Uninterrupted VM Operation**: Apply security patches without stopping or migrating VMs.
22412241
- **Immediate Vulnerability Mitigation**: Quickly address security flaws as patches become available.
22422242
- **Operational Continuity**: Avoids the complexity and risk associated with migrating VMs for maintenance.
22432243
- **Simplified Management**: Reduces the administrative burden of coordinating VM downtime.
22442244
- **Compliance Assurance**: Helps meet security compliance requirements by ensuring the virtualization layer is up-to-date.
22452245

2246-
#### Integration with Proxmox VE 8
2246+
##### Integration with Proxmox VE 8
22472247

22482248
In Proxmox VE 8 environments, QEMUCare enhances the security of the virtualization stack:
22492249

22502250
- **Secure Virtualization Layer**: Protects against exploits targeting QEMU vulnerabilities.
22512251
- **Cluster-Wide Deployment**: Apply patches across all nodes without affecting cluster operations.
22522252
- **Reduced Risk**: Minimizes the attack surface by keeping the hypervisor components up-to-date.
22532253

2254-
#### Getting Started with QEMUCare
2254+
##### Getting Started with QEMUCare
22552255

22562256
For detailed installation instructions, please refer to the [QEMUCare Installation Guide](https://docs.tuxcare.com/live-patching-services/#qemucare) .
22572257

2258-
## Conclusion
2258+
### Conclusion
22592259

22602260
Integrating TuxCare’s live patching services—KernelCare, LibCare, and QEMUCare—into your Proxmox VE 8 environment provides a robust solution for maintaining system security and uptime. By following the installation and configuration steps outlined in this guide, you can ensure that your virtualization infrastructure remains secure and operational without the need for disruptive reboots or service restarts.

0 commit comments

Comments
 (0)