Page MenuHomePhabricator

glance: refresh stretch image to include latest security fixes
Closed, ResolvedPublic

Description

The Debian Stretch image we serve in CloudVPS using glance requires a refresh to include latest security fixes.

Currently they come up with linux kernel 4.9.144, which doesn't have the MDS fixes backported yet.

Related Objects

StatusSubtypeAssignedTask
Resolved• aborrero

Event Timeline

• aborrero triaged this task as High priority.
• aborrero moved this task from Inbox to Soon! on the cloud-services-team (Kanban) board.

Mentioned in SAL (#wikimedia-cloud) [2019-07-25T10:47:59Z] <arturo> re-enabled puppet agent in cloud-bootstrapvz-stretch (disabled by andrew 88652 minutes ago) to handle T228983

Mentioned in SAL (#wikimedia-cloud) [2019-07-25T12:32:34Z] <arturo> eqiad1/glance: debian-9.9-stretch image deprecates debian-9.8-stretch (T228983)

• aborrero claimed this task.

@MoritzMuehlenhoff confirmed the new debian-9.9-stretch image that was deployed into glance in eqiad1 is fixed and works fine.