patchinfo.15084 - openSUSE Build Service

Security update for ceph

This update for ceph fixes the following issues:

- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).
- Added --container-init feature (bsc#1177319, bsc#1163764)
- Made journald as the logdriver again (bsc#1177933)
- Fixes a condition check for copy_tree, copy_files, and move_files in cephadm (bsc#1177676)
- Fixed a bug where device_health_metrics pool gets created even without any OSDs in the cluster (bsc#1173079)
- Log cephadm output /var/log/ceph/cephadm.log (bsc#1174644)
- Fixed a bug where the orchestrator didn't come up anymore after the deletion of OSDs (bsc#1176499)
- Fixed a bug where cephadm fails to deploy all OSDs and gets stuck (bsc#1177450)
- python-common will no longer skip unavailable disks (bsc#1177151)
- Added snap-schedule module (jsc#SES-704)
- Updated the SES7 downstream branding (bsc#1175120, bsc#1175161, bsc#1175169, bsc#1170498)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Submitted by Holger Sickenberg (holgisms)

Fixed bugs

cephadm creates innumerable count of zombie processes

"Javascript required" page does not mention SUSE Enterprise Storage

SES7: ceph orch apply -i drive_groups.yml deployed osd, when it should have not.

Daemon logs are not present in journald output

ses7 "make check" failure in mgr-dashboard-frontend-unittests

NFS Ganesha "documentation" link goes nowhere

SES 6 --> SES 7 upgrade: failed to probe daemons or devices

Pixelated SUSE logo in Ceph Dashboard

scrollbar on crush map viewer behaving oddly

Ceph Dashboard currently provides links to upstream not downstream

adopt {prometheus,grafana,alertmanager} fails with "RuntimeError: uid/gid not found"

VUL-0: EMBARGOED: CVE-2020-25660: ceph: CEPHX_V2 replay attack protection lost (problematic fix for CVE-2018-1128)

Not possible to remove apparmor-parser (on the host) without also removing cephadm

Heart icon not visible, when dashboard menu selected

Missing MVP feature: "cephadm: possibility to obtaining core dumps when a containerized daemon crashes"

Module 'cephadm' has failed: Expecting value: line 1 column 1 (char 0)

ceph base container image likely to contain podman unless something is done about it

cephadm install doesn't install podman

Dashboard is unable to manage NFS Ganesha instances deployed by cephadm and Rook

'ceph mon stat -f json' is not giving json format output

mgr operator() Failed to run module in active mode ('cephadm')

CEPHADM_REFRESH_FAILED: failed to probe daemons or devices

ceph-volume: TypeError: prepare() takes 1 positional argument but 2 were given

cephadm should create a logfile for troubleshooting / supportcalls and documentation etc.

Selected Binaries

openSUSE Build Service is sponsored by