Hi, Am 21.08.26 um 4:10 PM schrieb Nico Schottelius:

a) All VPS/VMs need to be restarted To be able to rotate keys, aside from the almost impossible flow to actually doing the rotation (more to that below), this will affect every consumer of VMs. The usual setup is that all hypervisors are using the same key.

VM live migration should be able to do the trick here. When the new compute node already has the new key and the librbd version to support it.

I'm not saying anything cannot be done, but the way how this vulnerabilty is solved will cause major headache around the industry.

IMHO we will see a muted health warning for the years to come. Regards -- Robert Sander Linux Consultant Heinlein Consulting GmbH Schwedter Str. 8/9b, 10119 Berlin https://www.heinlein-support.de Tel: +49 30 405051 - 0 Fax: +49 30 405051 - 19 Amtsgericht Berlin-Charlottenburg - HRB 220009 B Geschäftsführer: Peer Heinlein - Sitz: Berlin