Package: ceph-mon
Version: 10.2.5-7.2
Severity: important

Dear Maintainer,

The systemd unit /lib/systemd/system/ceph-mon@.service contains the
following configuration:

  ProtectSystem=full

This prevent the monitor from writing to /etc.

However, when joining a cluster, ceph-mon may write files in this
directory. For instance, if the cluster has an admin client (which is
always the case if the cluster was created following Ceph's
documentation), ceph-mon will try to write this file:

  /etc/ceph/ceph.client.admin.keyring

Which causes the service to crash.


Possible solutions to this issue are to remove ProtectSystem, or ask
upstream to only write this kind of files to /var/lib/ceph.

Best regards,
Valentin Lorentz

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to