Unable to update the ceph-common packages on OpenShift node
Environment
- OpenShift Container Platform (OCP) 3.6
Issue
- OpenShift server has
ceph-common-0.94.5-2.el7.x86_64.rpmpackage automatically installed on the system. The package comes from RHEL 7 base repository. - The errata which is showing applicable for this package contains newer packages, however, they come from Red Hat Ceph Storage repository which is not enabled on the Openshift server.
yum infoin consequence shows the current package as vulnerable.
Resolution
-
Red Hat always suggests Customers to attach repository that matches installed product so updating packages from another repository cannot interfere. OpenShift system should have only specific repositories enabled. Please do not try ceph cross-repository updates via
rhel-7-server-rhceph-2-tools-rpms. -
At the time of writing this article
ceph-common-0.94.5-2.el7.x86_64.rpmis the latest version package available in RHEL 7 base repository. -
There are many repositories which are having overlap in packages they are providing. Note that the naming convention is different for the
ceph-commonpackage:
.el7is shipped in base RHEL,
.el7cpis what we ship in the Ceph repositories, and
.el7ostis what gets cross-shipped in OpenStack.
Root Cause
- Red Hat is aware of the limitations of the way how applicable errata is calculated and is considering to resolve this in a future version of Errata component of Customer Portal.
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
