
A Ceph CVE Fix Broke Libvirt, and Nobody Noticed for Two Weeks
Patching four Ceph CVEs quietly broke every libvirt RBD storage pool in the lab — the fix was to stop needing them.

Patching four Ceph CVEs quietly broke every libvirt RBD storage pool in the lab — the fix was to stop needing them.

Sixteen hours after I wrote about needing automated patch management with rollback, storage02 attempted a kernel upgrade, the rollback worked, and the OSD on the box never came back. The cluster is at 50% degradation.