[Bug 1925347] Re: ceph-osd fails to start with ProtectClock=true

[Launchpad Bug Tracker]

This bug was fixed in the package ceph - 16.2.1-0ubuntu0.21.04.1

---------------
ceph (16.2.1-0ubuntu0.21.04.1) hirsute-proposed; urgency=medium

  * SECURITY UPDATE: New upstream point release (LP: #1925322):
    - CVE-2021-20288
  * d/rules: remove temporary build objects after install to avoid
    running out of disk space during package builds.
  * d/p/bug1925347.patch: Cherry pick fix to revert ProtectClock
    permissions change in systemd configurations which prevents the
    ceph-osd process from starting (LP: #1925347).

 -- James Page <james.page at ubuntu.com>  Thu, 22 Apr 2021 10:21:35 +0100

** Changed in: ceph (Ubuntu Hirsute)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ceph in Ubuntu.
https://bugs.launchpad.net/bugs/1925347

Title:
  ceph-osd fails to start with ProtectClock=true

Status in ceph package in Ubuntu:
  Fix Released
Status in ceph source package in Hirsute:
  Fix Released

Bug description:
  [Impact]
  ceph-osd daemon is unable to start on fresh installs or post upgrade

  [Test Case]
  Deploy ceph with OSD units
  ceph-osd will fail to start

  [Regression Risk]
  Reverts ceph to its pre-pacific configuration for this option.

  [Original Bug Report]
  Ceph Pacific
  Ubuntu 20.04 (but 21.04 has the same change)

  Upstream pull: https://github.com/ceph/ceph/pull/40845
  Upstream issue: https://tracker.ceph.com/issues/50347

  Upstream enabled ProtectClock=true as part of a change to reduce
  permissions needed for daemons - however this has the side effect of
  disabling access to block devices, which is needed for the ceph-osd
  daemon (at least).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ceph/+bug/1925347/+subscriptions