[Bug 1925347] Re: ceph-osd fails to start with ProtectClock=true

[Launchpad Bug Tracker]

This bug was fixed in the package ceph - 16.2.1-0ubuntu1

---------------
ceph (16.2.1-0ubuntu1) impish; urgency=medium

  [ Chris MacNaughton ]
  * d/ceph-base.install: Remove ceph-deploy man page installation
    (LP: #1892448).

  [ James Page ]
  * SECURITY UPDATE: New upstream point release (LP: #1925322):
    - CVE-2021-20288
  * d/rules: remove temporary build objects after install to avoid
    running out of disk space during package builds.
  * d/p/bug1925347.patch: Cherry pick fix to revert ProtectClock
    permissions change in systemd configurations which prevents the
    ceph-osd process from starting (LP: #1925347).

 -- James Page <james.page at ubuntu.com>  Tue, 04 May 2021 19:21:24 +0100

** Changed in: ceph (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-20288

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ceph in Ubuntu.
https://bugs.launchpad.net/bugs/1925347

Title:
  ceph-osd fails to start with ProtectClock=true

Status in ceph package in Ubuntu:
  Fix Released
Status in ceph source package in Hirsute:
  Fix Committed

Bug description:
  [Impact]
  ceph-osd daemon is unable to start on fresh installs or post upgrade

  [Test Case]
  Deploy ceph with OSD units
  ceph-osd will fail to start

  [Regression Risk]
  Reverts ceph to its pre-pacific configuration for this option.

  [Original Bug Report]
  Ceph Pacific
  Ubuntu 20.04 (but 21.04 has the same change)

  Upstream pull: https://github.com/ceph/ceph/pull/40845
  Upstream issue: https://tracker.ceph.com/issues/50347

  Upstream enabled ProtectClock=true as part of a change to reduce
  permissions needed for daemons - however this has the side effect of
  disabling access to block devices, which is needed for the ceph-osd
  daemon (at least).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1925347/+subscriptions