[lustre-discuss] RHEL 9.8 and 10.2 support

Thu Jun 4 12:41:48 UTC 2026

I acknowledge that there is a window between a new Red Hat minor version releasing and a fully-qualified of Lustre supporting that version being released.

Efforts are made to keep this window as small as possible (work is done with beta versions when available for example), but there are usually other factors involved than purely RHEL updates to consider and time needs to be allocated for testing.

Given that the work for the client support of the new RHEL version is publicly available ahead of the formal release being available, I would have thought that this would provide a suitable stopgap in the event of something urgent coming up.

Is there something which makes this unworkable or is there just a lack of documentation for people to feel confident enough to attempt this?

From: lustre-discuss <lustre-discuss-bounces at lists.lustre.org> on behalf of Fokke Dijkstra via lustre-discuss <lustre-discuss at lists.lustre.org>
Date: Thursday, June 4, 2026 at 12:36 AM
To:
Cc: lustre-discuss at lists.lustre.org <lustre-discuss at lists.lustre.org>
Subject: Re: [lustre-discuss] RHEL 9.8 and 10.2 support

I would also like to stress the importance of having Lustre supporting the latest RedHat kernels as soon as possible. We have seen several privilege escalation exploits in the last month, for which we had to temporarily limit or disable access to our cluster to prevent somebody from using the exploits.
If we would also have had to wait for a Lustre client update, before we could patch our services that would have been disastrous. Since the fixes were still released for Alma Linux 9.7 we managed to patch within a few days.
If a new vulnerability were to be published now we would be in great trouble, as we currently cannot run Alma Linux 9.8 kernels with a working Lustre client. And given the frequency with which critical vulnerabilities have appeared I don't think we have seen the end of this.

Kind regards,

Fokke Dijkstra

Op di 2 jun 2026 om 16:08 schreef Peter Jones via lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>:
Georgios

The plan is to finalize which the next LTS release will be - 2.17 vs 2.18 - by the end of this month. Whatever the outcome, there will be support for RHEL 10.x clients.

Peter

From: lustre-discuss <lustre-discuss-bounces at lists.lustre.org<mailto:lustre-discuss-bounces at lists.lustre.org>> on behalf of Georgios Magklaras via lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>
Date: Tuesday, June 2, 2026 at 4:32 AM
To: lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org> <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>
Subject: Re: [lustre-discuss] RHEL 9.8 and 10.2 support

For David: For RHEL 10.2, there are patches (including one suggestion from me) as part of LU 20312: https://jira.whamcloud.com/browse/LU-20312

We are of course in the process of testing this.

For Peter: We also echo the LTS issue. We are using primarily 2.15.x, with 2.16.1 at a smaller part of our production. 2.17.x is used as part of our test environment, because we are encountering issues with 2.16.1 . For RHEL 10.x, we would like to know what would be the LTS Lustre release.

Best regards,
GM
--
--
--

Georgios Magklaras PhD
Chief Engineer
IT Infrastructure/HPC
The Norwegian Meteorological Institute

https://www.met.no/
https://www.steelcyber.com/georgioshome/

On Tue, 2 Jun 2026 at 11:45, Hans Henrik Happe via lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>> wrote:
The work is tracked in LU-20071<https://jira.whamcloud.com/browse/LU-20071> for the RHEL 9.8 and there is a patch. Haven't tested it myself.

You need RHEL 9.8 to get a kernel that fixes all the known root escalation security issues. So I agree that we are in a bit of a limbo until an RHEL 9.8 LTS version of Lustre is ready. However, I think Alma did a special security kernel for RHEL 9.7. I know Rocky did.

On 01/06/2026 19.16, Peter Jones via lustre-discuss wrote:
So do I understand correctly that your concern is that:

  1.
there are vulnerabilities in RHEL 10.2 that also affect RHEL 10.1 but there are no updates for RHEL 10.1 once RHEL 10.2 is GA
  2.
RHEL 10.x is not supported by the current Lustre LTS branch (2.15.x)

If so, the good news is that we expect to have a newly designated LTS branch in the near future that will support RHEL 10.x clients.

Longer term, there are efforts to get Lustre into the upstream kernel, which would completely eliminate any of these issues.

In the meantime, if you are ever in the position of wanting to move to kernel versions ahead of formal support being available, my recommendation would be to experiment with a limited number of clients (perhaps even just one) before rolling out across all the clients.

From: David Cohen <cdavid at physics.technion.ac.il><mailto:cdavid at physics.technion.ac.il>
Date: Monday, June 1, 2026 at 8:41 AM
To: Peter Jones <pjones at thelustrecollective.com><mailto:pjones at thelustrecollective.com>
Cc: lustre-discuss <lustre-discuss at lists.lustre.org><mailto:lustre-discuss at lists.lustre.org>
Subject: Re: [lustre-discuss] RHEL 9.8 and 10.2 support

Hi Peter,
For the EL 10.1 client I was using version 17.0 which was the only version to support EL 10. After upgrading to EL 10.2 the client lost the storage mount.
I'm not updating the EL9.7 clients, not to risk losing the storage mount. They are running the 2.15 LTS Lustre.
On the servers I am still using the 2.15 version on EL 8.10 as I prefer to use the LTS version, and there is no LTS server support beyond EL 8.10.
This complex matrix just emphasizes how much Lustre is a restrictive factor for upgrades.

David

On Mon, Jun 1, 2026 at 4:48 PM Peter Jones <pjones at thelustrecollective.com<mailto:pjones at thelustrecollective.com>> wrote:
David

Could you please clarify what version of Lustre you are using today for both servers and clients? Also, are you using ldiskfs or ZFS as the backend filesystem?

Peter

From: David Cohen <cdavid at physics.technion.ac.il<mailto:cdavid at physics.technion.ac.il>>
Date: Sunday, May 31, 2026 at 8:25 PM
To: Peter Jones <pjones at thelustrecollective.com<mailto:pjones at thelustrecollective.com>>
Cc: lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>
Subject: Re: [lustre-discuss] RHEL 9.8 and 10.2 support

Hi Peter,
The new kernel presented with EL 10.2 presents changes preventing DKMS from recompiling Lustre modules.
There is even a Jira ticket following the issue since the beta, highlighting the security fixes in the new kernels.
https://jira.whamcloud.com/browse/LU-20070

David

On Mon, Jun 1, 2026 at 12:19 AM Peter Jones <pjones at thelustrecollective.com<mailto:pjones at thelustrecollective.com>> wrote:
David

Could you please elaborate as to what you feel is missing today? Lustre clients are patchless, so I would expect that if a security update is issued for a given supported release of RHEL that users would just apply the kernel update and weak updates would take care of the rest with no need to get any updates to Lustre...

Peter

From: lustre-discuss <lustre-discuss-bounces at lists.lustre.org<mailto:lustre-discuss-bounces at lists.lustre.org>> on behalf of David Cohen via lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>
Date: Sunday, May 31, 2026 at 5:31 AM
To: lustre-discuss <lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>>
Subject: [lustre-discuss] RHEL 9.8 and 10.2 support

Hi,
With the latest critical kernel vulnerabilities, updates are no longer optional.
This puts Lustre on the critical path for cluster security.
Is there a plan to address this necessity by releasing Lustre client versions outside of the half a year cycle to support the new kernels?

David

_______________________________________________
lustre-discuss mailing list
lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>
http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org

_______________________________________________
lustre-discuss mailing list
lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>
http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org

_______________________________________________
lustre-discuss mailing list
lustre-discuss at lists.lustre.org<mailto:lustre-discuss at lists.lustre.org>
http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org

--
Fokke Dijkstra <f.dijkstra at rug.nl><mailto:f.dijkstra at rug.nl>
Team High Performance Computing
Center for Information Technology, University of Groningen
Postbus 11044, 9700 CA  Groningen, The Netherlands

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lustre.org/pipermail/lustre-discuss_lists.lustre.org/attachments/20260604/63be875e/attachment.html>