Livepatch on-prem with Oracle Cloud Infrastructure Object Storage patch storage

To configure this, follow these steps:

• Create an Object Storage bucket in the preferred region (best if the region is the same as the deployment’s). Care needs to be taken to make the bucket not publicly writable, as this would pose a significant security risk.

• Choose an authentication method: an OCI config file/profile, or instance principal authentication if the compute instance is granted the required IAM policies.

• Configure the relevant OCI config options.

Once this is configured, Livepatch will store and retrieve patch files from the OCI Object Storage bucket.

patch-storage.oracle-config-file (and patch-storage.oracle-profile) are optional; when omitted, instance principal authentication is used instead, bound to the OCI compute instance the server runs on.