<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
The work is tracked in <a class="issue-link"
data-issue-key="LU-20071"
href="https://jira.whamcloud.com/browse/LU-20071" id="key-val"
rel="96792">LU-20071</a> for the RHEL 9.8 and there is a patch.
Haven't tested it myself.<br>
<br>
You need RHEL 9.8 to get a kernel that fixes all the known root
escalation security issues. So I agree that we are in a bit of a
limbo until an RHEL 9.8 LTS version of Lustre is ready. However, I
think Alma did a special security kernel for RHEL 9.7. I know Rocky
did.<br>
<br>
<div class="moz-cite-prefix">On 01/06/2026 19.16, Peter Jones via
lustre-discuss wrote:<br>
</div>
<blockquote type="cite"
cite="mid:SN6PR04MB4861B2458513D8970A4E1375CC152@SN6PR04MB4861.namprd04.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
So do I understand correctly that your concern is that:</div>
<div
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<ol start="1"
data-editing-info="{"applyListStyleFromLevel":false,"orderedStyleType":3}"
style="direction: ltr; margin-top: 0px; margin-bottom: 0px;">
<li
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); direction: ltr; margin-top: 0px; margin-bottom: 0px; list-style-type: "1) ";">
<div role="presentation" style="direction: ltr;">there are
vulnerabilities in RHEL 10.2 that also affect RHEL 10.1 but
there are no updates for RHEL 10.1 once RHEL 10.2 is GA</div>
</li>
<li
style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); direction: ltr; margin-top: 0px; margin-bottom: 0px; list-style-type: "2) ";">
<div role="presentation" style="direction: ltr;">RHEL 10.x is
not supported by the current Lustre LTS branch (2.15.x) </div>
</li>
</ol>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
If so, the good news is that we expect to have a newly
designated LTS branch in the near future that will support RHEL
10.x clients. </div>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Longer term, there are efforts to get Lustre into the upstream
kernel, which would completely eliminate any of these issues.</div>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div
style="direction: ltr; margin-top: 0px; margin-bottom: 0px; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
In the meantime, if you are ever in the position of wanting to
move to kernel versions ahead of formal support being available,
my recommendation would be to experiment with a limited number
of clients (perhaps even just one) before rolling out across all
the clients.</div>
<div
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="mail-editor-reference-message-container">
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
</div>
<div
style="padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor;">
<div class="ms-outlook-mobile-reference-message skipProofing"
style="text-align: left; font-family: Aptos; font-size: 12pt; color: black;">
<b>From: </b>David Cohen
<a class="moz-txt-link-rfc2396E" href="mailto:cdavid@physics.technion.ac.il"><cdavid@physics.technion.ac.il></a><br>
<b>Date: </b>Monday, June 1, 2026 at 8:41\u202fAM<br>
<b>To: </b>Peter Jones
<a class="moz-txt-link-rfc2396E" href="mailto:pjones@thelustrecollective.com"><pjones@thelustrecollective.com></a><br>
<b>Cc: </b>lustre-discuss
<a class="moz-txt-link-rfc2396E" href="mailto:lustre-discuss@lists.lustre.org"><lustre-discuss@lists.lustre.org></a><br>
<b>Subject: </b>Re: [lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
Hi Peter,</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
For the EL 10.1 client I was using version 17.0 which was the
only version to support EL 10. After upgrading to EL 10.2 the
client lost the storage mount.</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
I'm not updating the EL9.7 clients, not to risk losing the
storage mount. They are running the 2.15 LTS Lustre.</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
On the servers I am still using the 2.15 version on EL 8.10 as
I prefer to use the LTS version, and there is no LTS server
support beyond EL 8.10.</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
This complex matrix just emphasizes how much Lustre is a
restrictive factor for upgrades.</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
David</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing"
style="direction: ltr;">
<br>
</div>
<div class="gmail_attr" style="direction: ltr;">On Mon, Jun 1,
2026 at 4:48\u202fPM Peter Jones <<a
href="mailto:pjones@thelustrecollective.com"
data-outlook-id="a24fb89b-74ee-4f31-a66a-a3409e8cda45"
moz-do-not-send="true" class="moz-txt-link-freetext">pjones@thelustrecollective.com</a>>
wrote:</div>
<blockquote
style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left: 1px solid rgb(204, 204, 204);">
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
David</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Could you please clarify what version of Lustre you are
using today for both servers and clients? Also, are you
using ldiskfs or ZFS as the backend filesystem?</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Peter</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div
id="m_-6974884800191302538mail-editor-reference-message-container">
<div
style="padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor;">
<div
style="text-align: left; font-family: Aptos; font-size: 12pt; color: black;">
<b>From: </b>David Cohen <<a
href="mailto:cdavid@physics.technion.ac.il"
target="_blank"
data-outlook-id="b09be534-fa4b-42ac-8b54-d6625261b24f"
moz-do-not-send="true" class="moz-txt-link-freetext">cdavid@physics.technion.ac.il</a>><br>
<b>Date: </b>Sunday, May 31, 2026 at 8:25\u202fPM<br>
<b>To: </b>Peter Jones <<a
href="mailto:pjones@thelustrecollective.com"
target="_blank"
data-outlook-id="aa8651ec-5e54-4972-b073-bc96d612b0d8"
moz-do-not-send="true" class="moz-txt-link-freetext">pjones@thelustrecollective.com</a>><br>
<b>Cc: </b>lustre-discuss <<a
href="mailto:lustre-discuss@lists.lustre.org"
target="_blank"
data-outlook-id="338cff1b-5b24-4a5a-8986-75f00ff98c4b"
moz-do-not-send="true" class="moz-txt-link-freetext">lustre-discuss@lists.lustre.org</a>><br>
<b>Subject: </b>Re: [lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div style="direction: ltr;">Hi Peter,</div>
<div style="direction: ltr;">The new kernel presented with
EL 10.2 presents changes preventing DKMS from recompiling
Lustre modules.</div>
<div style="direction: ltr;">There is even a Jira ticket
following the issue since the beta, highlighting the
security fixes in the new kernels. </div>
<div style="direction: ltr;"><a
href="https://jira.whamcloud.com/browse/LU-20070"
target="_blank"
data-outlook-id="1af35c01-30d3-4aaa-b9ce-a9c15ccc20ae"
moz-do-not-send="true" class="moz-txt-link-freetext">https://jira.whamcloud.com/browse/LU-20070</a></div>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr;">David</div>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr;"><br>
</div>
<div class="gmail_attr" style="direction: ltr;">On Mon, Jun
1, 2026 at 12:19\u202fAM Peter Jones <<a
href="mailto:pjones@thelustrecollective.com"
target="_blank"
data-outlook-id="3ad17e11-1c6b-4d02-a4f8-84d3d365931b"
moz-do-not-send="true" class="moz-txt-link-freetext">pjones@thelustrecollective.com</a>>
wrote:</div>
<blockquote
style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left: 1px solid rgb(204, 204, 204);">
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
David</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Could you please elaborate as to what you feel is
missing today? Lustre clients are patchless, so I would
expect that if a security update is issued for a given
supported release of RHEL that users would just apply
the kernel update and weak updates would take care of
the rest with no need to get any updates to Lustre...</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Peter</div>
<div class="gmail_quote"
style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div
id="m_-6974884800191302538m_-3698673736015841028mail-editor-reference-message-container">
<div
style="padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor;">
<div
style="text-align: left; font-family: Aptos; font-size: 12pt; color: black;">
<b>From: </b>lustre-discuss <<a
href="mailto:lustre-discuss-bounces@lists.lustre.org" target="_blank"
data-outlook-id="df37236c-dab4-455e-a4fe-c7db574e1c28"
moz-do-not-send="true"
class="moz-txt-link-freetext">lustre-discuss-bounces@lists.lustre.org</a>>
on behalf of David Cohen via lustre-discuss <<a
href="mailto:lustre-discuss@lists.lustre.org"
target="_blank"
data-outlook-id="1b19b27b-3b9e-4656-89c0-8025e43d4700"
moz-do-not-send="true"
class="moz-txt-link-freetext">lustre-discuss@lists.lustre.org</a>><br>
<b>Date: </b>Sunday, May 31, 2026 at 5:31\u202fAM<br>
<b>To: </b>lustre-discuss <<a
href="mailto:lustre-discuss@lists.lustre.org"
target="_blank"
data-outlook-id="ddd18f66-21cb-4b24-b300-02acd14d3ca4"
moz-do-not-send="true"
class="moz-txt-link-freetext">lustre-discuss@lists.lustre.org</a>><br>
<b>Subject: </b>[lustre-discuss] RHEL 9.8 and 10.2
support<br>
<br>
</div>
</div>
<div style="direction: ltr;">Hi,</div>
<div style="direction: ltr;">With the latest critical
kernel vulnerabilities, updates are no longer
optional.</div>
<div style="direction: ltr;">This puts Lustre on the
critical path for cluster security.</div>
<div style="direction: ltr;">Is there a plan to address
this necessity by releasing Lustre client versions
outside of the half a year cycle to support the new
kernels?</div>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr;">David</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
lustre-discuss mailing list
<a class="moz-txt-link-abbreviated" href="mailto:lustre-discuss@lists.lustre.org">lustre-discuss@lists.lustre.org</a>
<a class="moz-txt-link-freetext" href="http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org">http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org</a>
</pre>
</blockquote>
<br>
</body>
</html>