<div dir="ltr"><div>For David: For RHEL 10.2, there are patches (including one suggestion from me) as part of LU 20312: <a href="https://jira.whamcloud.com/browse/LU-20312">https://jira.whamcloud.com/browse/LU-20312</a></div><div><br></div><div>We are of course in the process of testing this.</div><div><br></div><div>For Peter: We also echo the LTS issue. We are using primarily 2.15.x, with 2.16.1 at a smaller part of our production. 2.17.x is used as part of our test environment, because we are encountering issues with 2.16.1 . For RHEL 10.x, we would like to know what would be the LTS Lustre release. </div><div><br></div><div>Best regards,</div><div>GM</div><div><div>-- </div><div>--</div><div>--</div><div><br></div><div><b>Georgios Magklaras PhD</b></div><div>Chief Engineer</div><div>IT Infrastructure/HPC</div><div>The Norwegian Meteorological Institute</div><div><br></div><div><a href="https://www.met.no/" target="_blank" style="color:rgb(86,163,241)">https://www.met.no/</a></div><div><a href="https://www.steelcyber.com/georgioshome/" target="_blank" style="color:rgb(86,163,241)">https://www.steelcyber.com/georgioshome/</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 2 Jun 2026 at 11:45, Hans Henrik Happe via lustre-discuss <<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u>
<div>
The work is tracked in <a href="https://jira.whamcloud.com/browse/LU-20071" id="m_4727304991567963322m_-8225123516406798014key-val" rel="96792" target="_blank">LU-20071</a> for the RHEL 9.8 and there is a patch.
Haven't tested it myself.<br>
<br>
You need RHEL 9.8 to get a kernel that fixes all the known root
escalation security issues. So I agree that we are in a bit of a
limbo until an RHEL 9.8 LTS version of Lustre is ready. However, I
think Alma did a special security kernel for RHEL 9.7. I know Rocky
did.<br>
<br>
<div>On 01/06/2026 19.16, Peter Jones via
lustre-discuss wrote:<br>
</div>
<blockquote type="cite">
<div style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
So do I understand correctly that your concern is that:</div>
<div style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<ol start="1" style="direction:ltr;margin-top:0px;margin-bottom:0px">
<li style="font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);direction:ltr;margin-top:0px;margin-bottom:0px;list-style-type:"1) "">
<div role="presentation" style="direction:ltr">there are
vulnerabilities in RHEL 10.2 that also affect RHEL 10.1 but
there are no updates for RHEL 10.1 once RHEL 10.2 is GA</div>
</li>
<li style="font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0);direction:ltr;margin-top:0px;margin-bottom:0px;list-style-type:"2) "">
<div role="presentation" style="direction:ltr">RHEL 10.x is
not supported by the current Lustre LTS branch (2.15.x) </div>
</li>
</ol>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
If so, the good news is that we expect to have a newly
designated LTS branch in the near future that will support RHEL
10.x clients. </div>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Longer term, there are efforts to get Lustre into the upstream
kernel, which would completely eliminate any of these issues.</div>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;margin-top:0px;margin-bottom:0px;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
In the meantime, if you are ever in the position of wanting to
move to kernel versions ahead of formal support being available,
my recommendation would be to experiment with a limited number
of clients (perhaps even just one) before rolling out across all
the clients.</div>
<div style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_4727304991567963322m_-8225123516406798014mail-editor-reference-message-container">
<div style="direction:ltr">
</div>
<div style="padding:3pt 0in 0in;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181,196,223) currentcolor currentcolor">
<div style="text-align:left;font-family:Aptos;font-size:12pt;color:black">
<b>From: </b>David Cohen
<a href="mailto:cdavid@physics.technion.ac.il" target="_blank"><cdavid@physics.technion.ac.il></a><br>
<b>Date: </b>Monday, June 1, 2026 at 8:41\u202fAM<br>
<b>To: </b>Peter Jones
<a href="mailto:pjones@thelustrecollective.com" target="_blank"><pjones@thelustrecollective.com></a><br>
<b>Cc: </b>lustre-discuss
<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank"><lustre-discuss@lists.lustre.org></a><br>
<b>Subject: </b>Re: [lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div style="direction:ltr">
Hi Peter,</div>
<div style="direction:ltr">
For the EL 10.1 client I was using version 17.0 which was the
only version to support EL 10. After upgrading to EL 10.2 the
client lost the storage mount.</div>
<div style="direction:ltr">
I'm not updating the EL9.7 clients, not to risk losing the
storage mount. They are running the 2.15 LTS Lustre.</div>
<div style="direction:ltr">
On the servers I am still using the 2.15 version on EL 8.10 as
I prefer to use the LTS version, and there is no LTS server
support beyond EL 8.10.</div>
<div style="direction:ltr">
This complex matrix just emphasizes how much Lustre is a
restrictive factor for upgrades.</div>
<div style="direction:ltr">
<br>
</div>
<div style="direction:ltr">
David</div>
<div style="direction:ltr">
<br>
</div>
<div style="direction:ltr">
<br>
</div>
<div class="gmail_attr" style="direction:ltr">On Mon, Jun 1,
2026 at 4:48\u202fPM Peter Jones <<a href="mailto:pjones@thelustrecollective.com" target="_blank">pjones@thelustrecollective.com</a>>
wrote:</div>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:1px solid rgb(204,204,204)">
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
David</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Could you please clarify what version of Lustre you are
using today for both servers and clients? Also, are you
using ldiskfs or ZFS as the backend filesystem?</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Peter</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_4727304991567963322m_-8225123516406798014m_-6974884800191302538mail-editor-reference-message-container">
<div style="padding:3pt 0in 0in;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181,196,223) currentcolor currentcolor">
<div style="text-align:left;font-family:Aptos;font-size:12pt;color:black">
<b>From: </b>David Cohen <<a href="mailto:cdavid@physics.technion.ac.il" target="_blank">cdavid@physics.technion.ac.il</a>><br>
<b>Date: </b>Sunday, May 31, 2026 at 8:25\u202fPM<br>
<b>To: </b>Peter Jones <<a href="mailto:pjones@thelustrecollective.com" target="_blank">pjones@thelustrecollective.com</a>><br>
<b>Cc: </b>lustre-discuss <<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a>><br>
<b>Subject: </b>Re: [lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div style="direction:ltr">Hi Peter,</div>
<div style="direction:ltr">The new kernel presented with
EL 10.2 presents changes preventing DKMS from recompiling
Lustre modules.</div>
<div style="direction:ltr">There is even a Jira ticket
following the issue since the beta, highlighting the
security fixes in the new kernels. </div>
<div style="direction:ltr"><a href="https://jira.whamcloud.com/browse/LU-20070" target="_blank">https://jira.whamcloud.com/browse/LU-20070</a></div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">David</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr"><br>
</div>
<div class="gmail_attr" style="direction:ltr">On Mon, Jun
1, 2026 at 12:19\u202fAM Peter Jones <<a href="mailto:pjones@thelustrecollective.com" target="_blank">pjones@thelustrecollective.com</a>>
wrote:</div>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:1px solid rgb(204,204,204)">
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
David</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Could you please elaborate as to what you feel is
missing today? Lustre clients are patchless, so I would
expect that if a security update is issued for a given
supported release of RHEL that users would just apply
the kernel update and weak updates would take care of
the rest with no need to get any updates to Lustre...</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Peter</div>
<div class="gmail_quote" style="direction:ltr;font-family:Aptos,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_4727304991567963322m_-8225123516406798014m_-6974884800191302538m_-3698673736015841028mail-editor-reference-message-container">
<div style="padding:3pt 0in 0in;border-width:1pt medium medium;border-style:solid none none;border-color:rgb(181,196,223) currentcolor currentcolor">
<div style="text-align:left;font-family:Aptos;font-size:12pt;color:black">
<b>From: </b>lustre-discuss <<a href="mailto:lustre-discuss-bounces@lists.lustre.org" target="_blank">lustre-discuss-bounces@lists.lustre.org</a>>
on behalf of David Cohen via lustre-discuss <<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a>><br>
<b>Date: </b>Sunday, May 31, 2026 at 5:31\u202fAM<br>
<b>To: </b>lustre-discuss <<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a>><br>
<b>Subject: </b>[lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div style="direction:ltr">Hi,</div>
<div style="direction:ltr">With the latest critical
kernel vulnerabilities, updates are no longer
optional.</div>
<div style="direction:ltr">This puts Lustre on the
critical path for cluster security.</div>
<div style="direction:ltr">Is there a plan to address
this necessity by releasing Lustre client versions
outside of the half a year cycle to support the new
kernels?</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">David</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
lustre-discuss mailing list
<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a>
<a href="http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org" target="_blank">http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org</a>
</pre>
</blockquote>
<br>
</div>
_______________________________________________<br>
lustre-discuss mailing list<br>
<a href="mailto:lustre-discuss@lists.lustre.org" target="_blank">lustre-discuss@lists.lustre.org</a><br>
<a href="http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org" rel="noreferrer" target="_blank">http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org</a><br>
</blockquote></div><div><br clear="all"></div><div><br></div><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><br></div></div>
</div>