William David Edwards

Op 31 jan 2026 om 13:02 heeft gagan tiwari via ceph-users <ceph-users@ceph.io> het volgende geschreven:

HI Guys, Our ceph cluster seems to be compromised by rootkit attack.

How did you determine that?

It has 5 mon including one mgr and 7 osd nodes.

We will need to reformat and reinstall OS on ceph mgr node and 2 ceph mon nodes.

2 mon nodes and 7 osd nodes are safe.

Ceph health status is showing ok. And the cluster is still working but very slow.

Why slow?

Please let me know how to proceed to have minimal disruption to the users and without any data loss

What have you tried? What’s your plan so far?

Thanks, Gagan _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io