woodstock's latest activity
-
Wwoodstock reacted to fweber's post in the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon with
Like.
An update: The Ceph packages and accompanying pve-manager and pve-docs updates are now available in the Proxmox VE 9 enterprise repositories as well. -
Wwoodstock replied to the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon.Hi there. Quote from the docs: You can see the stored key with ceph-bluestore-tool show-label --dev /var/lib/ceph/osd/ceph-0/block . If you see your old key then the section "Rotate the Service Keys by Hand" from the pve docs should fix this...
-
Wwoodstock replied to the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future.Just a quick heads-up: this is my personal approach and what worked for me. Please make sure to test it on your end first. You can mute the errors and warnings to bring ceph to HEALTH_OK again (this was on ceph tentacle): ceph health mute...
-
Wwoodstock reacted to t.lamprecht's post in the thread Cephx Key Migration Procedure and Ceph 19.2 Squid Going EOL Soon with Like.
Recent security findings and fixes in Ceph make it necessary to upgrade ceph and migrate authentication keys from the aes to the aes256k cipher. This is to address weaknesses in the old Cephx authentication method, especially if your Ceph service...
-
Wwoodstock reacted to Burkhard Linke's post in the thread Ceph CVEs – keyring rotation strongly advised, probably required in the future with Like.
Any idea when these important changes will be available in the pve-enterprise repository?
-
Wwoodstock reacted to UHL-Services's post in the thread PVE 9.2 + Ceph Tentacle 20.2.4: RBD operations fail because pve-storage passes removed --auth_supported option with Like.
Hi, I’m running into what looks like a compatibility issue between current Proxmox VE 9.2 storage code and Ceph Tentacle 20.2.4. Environment: Proxmox VE: 9.2 pve-manager: 9.2.11 libpve-storage-perl: 9.1.8 qemu-server...