> Also disappointing to see a discussion of live upgrades without mention of ksplice.
What's really funny there is that it appears his system can't do as much as ksplice. IIRC ksplice lets you hot-swap a new kernel in and hand control to it.
AT specifically says they can swap out "everything but the tiny microkernel". So... that would be like module unload/load on linux, then? Excellent work.
Is he that confident nobody's going to find a bug in his microkernel in the next 50 years? That was his criteria for "reliable", and since it can't be swapped out, that microkernel had better be pretty robust...