This bug may be affect when you upgrade from 14.2.11 to 14.2.(12|14) with low speed (e.g. one by one node). If you already upgrade from 14.2.11 you just jump over this bug. k Sent from my iPhone

On 24 Nov 2020, at 10:43, Rainer Krienke <krienke@uni-koblenz.de> wrote:

Hello,

I am running a productive ceph cluster with Nautilus 14.2.13. All OSDs are bluestore and were created with a ceph version prior to 14.2.12.

What I would like to know is how urgent I should consider the collection_list_legacy bug since at the moment I am not going to add a brand new OSD to the system. However any time a disk could fail and so I would have to destroy the OSD with the failed disk and them with a new disk run ceph-volume to create a new bluestore OSD.

Would this scenario also lead to inconsistent pgs?

Thanks Rainer

...

Am 24.11.20 um 02:35 schrieb David Galloway: This is the 15th backport release in the Nautilus series. This release fixes a ceph-volume regression introduced in v14.2.13 and includes few other fixes. We recommend users to update to this release.

For a detailed release notes with links & changelog please refer to the official blog entry at https://ceph.io/releases/v14-2-15-nautilus-released

Notable Changes --------------- * ceph-volume: Fixes lvm batch --auto, which breaks backward compatibility when using non rotational devices only (SSD and/or NVMe). * BlueStore: Fixes a bug in collection_list_legacy which makes pgs inconsistent during scrub when running mixed versions of osds, prior to 14.2.12 with newer. * MGR: progress module can now be turned on/off, using the commands: `ceph progress on` and `ceph progress off`.

Getting Ceph ------------ * Git at git://github.com/ceph/ceph.git * Tarball at http://download.ceph.com/tarballs/ceph-14.2.15.tar.gz * For packages, see http://docs.ceph.com/docs/master/install/get-packages/ * Release git sha1: afdd217ae5fb1ed3f60e16bd62357ca58cc650e5 _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io

-- Rainer Krienke, Uni Koblenz, Rechenzentrum, A22, Universitaetsstrasse 1 56070 Koblenz, Tel: +49261287 1312 Fax +49261287 100 1312 Web: http://userpages.uni-koblenz.de/~krienke PGP: http://userpages.uni-koblenz.de/~krienke/mypgp.html _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io

Thanks for this. Is download.ceph.com more heavily loaded than usual? It's taking more than 24 hours to rsync this release to our local mirror (and AFAICT none of the European mirrors have caught up yet). Cheers, Dan On Thu, Dec 17, 2020 at 3:55 AM David Galloway <dgallowa@redhat.com> wrote:

This is the 16th backport release in the Nautilus series. This release fixes a security flaw in CephFS. We recommend users to update to this release.

Notable Changes --------------- * CVE-2020-27781 : OpenStack Manila use of ceph_volume_client.py library allowed tenant access to any Ceph credential's secret. (Kotresh Hiremath Ravishankar, Ramana Raja)

Changelog --------- * pybind/ceph_volume_client: disallow authorize on existing auth ids (Kotresh Hiremath Ravishankar, Ramana Raja)

Getting Ceph ------------ * Git at git://github.com/ceph/ceph.git * Tarball at http://download.ceph.com/tarballs/ceph-14.2.16.tar.gz * For packages, see http://docs.ceph.com/docs/master/install/get-packages/ * Release git sha1: 762032d6f509d5e7ee7dc008d80fe9c87086603c