Post glusterfs-3.8.4-53.el7 for RHEL7

Latest response

I can't update glusterfs-3.8.4-53.el7 to glusterfs-3.8.4-54.8.el7 without subscribing to the glusterfs channel? I'm not using gluster for my workstations so I feel a little stuck; removing gluster is a little scary with all the dependencies. Not something I want to do. Does this mean I have to purchase a gluster subscription just to knock out some CVE's for the workstations?

cve-2018-1088

Responses

Downloading the package individually would help you in that case, but you'd need to take care of dependencies as well. https://access.redhat.com/downloads/content/glusterfs/3.8.4-54.el7/x86_64/fd431d51/package

Yeah, I wanted to see what would happen if I could do a local install on my workstation. I wasn't able to complete the install due to the gluster dependencies. Kinda kicking the can down the road till a later date. It really feels like I need to purchase the gluster channel. I appreciate the response.

You are right, trying to resolve dependency mess is big trouble without a properly configured yum repository channels. I see that these packages 'glusterfs' and related belongs to the channel "rh-gluster-3-client-for-rhel-7-server-rpms" which also comes along with 'Red Hat Developer Subscription' which is a no-cost subscription which you can avail and use it. Please check this link https://developers.redhat.com/blog/2017/04/07/no-cost-no-hassle-plenty-of-rhel-developer-benefits/

You would need to activate this developer subscription first and then enable the gluster repo channels and then you could do an update for required packages. Be aware of dependencies packages which would also get updated. Check if this is possible for you...

Developer subscription is only a server subscription, some Workstation products are not available.

It has been documented saying that it covers 'workstation' as well

The no-cost Red Hat Enterprise Linux Developer Subscription gets you:

Red Hat Enterprise Linux Server – An application development entitlement to the world’s leading enterprise Linux platform. (This includes workstation components for desktop installation, too)

Hi Laszlo,

Why are you scared to remove it?

You can do a dryrun first:

yum erase glusterfs

Then see what other packages would be removed.

If needed publish the output here to get an advise how to proceed.

Regards,

Jan Gerrit

glusterfs-api
glusterfs-cli
glusterfs-client-xlators
glusterfs-fuse
glusterfs-libs
libgovirt
libibverbs
libiscsi
librbd1
librdmacm
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-kvm
libvirt-gconfig
libvirt-glib
libvirt-gobject
libvirt-libs

libvirt and qemu caught my attention because I kinda need that for the kvm to work. I suppose I could take it out of the workstations that don't have to use the kvm for work; I think that might help knock some of the CVE's. I'm gonna do some reading to see if I can't find an alternative.

Gluster client packages will be updated in 7.6, in the meantime I guess you can make a custom repo for workstations using the glusterfs lib. Since that is being updated. For all those folks using qemu.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.