ceph (12.2.11+dfsg1-2.1+deb10u1) buster-security; urgency=medium * Non-maintainer upload by the LTS Security Team. [ Stefano Rivera ] * Collection of minor security updates for Ceph. * CVE-2020-27781: Privilege Escalation: User credentials could be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. * CVE-2021-20288: Potential Privilege Escalation: When handling CEPHX_GET_PRINCIPAL_SESSION_KEY requests, ignore CEPH_ENTITY_TYPE_AUTH in CephXServiceTicketRequest::keys. * CVE-2020-1760: XSS: A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input. * CVE-2020-25678: Information Disclosure: ceph stores mgr module passwords in clear text. This can be found by searching the mgr logs for grafana and dashboard, with passwords visible. * CVE-2019-10222: Denial of service: An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients. * CVE-2020-10753 and CVE-2021-3524: Header Injection: It was possible to inject HTTP headers via a CORS ExposeHeader tag in an Amazon S3 bucket. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. * CVE-2020-12059: Denial of Service: A POST request with an invalid tagging XML could crash the RGW process by triggering a NULL pointer exception. * CVE-2020-1700: Denial of Service: A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system. * CVE-2021-3531: Denial of Service: When processing a GET Request in Ceph Storage RGW for a swift URL that ends with two slashes it could cause the rgw to crash, resulting in a denial of service. * CVE-2021-3979: Loss of Confidentiality: A key length flaw was found in Ceph Storage. An attacker could exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks. [ Bastien Roucariès ] * CVE-2023-43040: A flaw was found in Ceph RGW. An unprivileged user can write to any bucket(s) accessible by a given key if a POST's form-data contains a key called 'bucket' with a value matching the name of the bucket used to sign the request. The result of this is that a user could actually upload to any bucket accessible by the specified access key as long as the bucket in the POST policy matches the bucket in said POST form part. (Closes: #1053690) -- Bastien Roucariès Sat, 21 Oct 2023 16:42:26 +0000 ceph (12.2.11+dfsg1-2.1) unstable; urgency=medium * Non-maintainer upload. * [3194010] Install ceph-volume@.service into ceph-osd. (Closes: #924061) -- Bernd Zeimetz Fri, 05 Apr 2019 15:12:52 +0200 ceph (12.2.11+dfsg1-2) unstable; urgency=medium * [27a321] Fix builds on 32bit architectures * [346bfa] Fix linking radosgw without BEAST frontend -- Gaudenz Steinlin Tue, 19 Feb 2019 08:50:12 +0100 ceph (12.2.11+dfsg1-1) unstable; urgency=medium * [8b6f70] Build depend on cmake >= 3.13.2 * [98ed84] New upstream version 12.2.11+dfsg1 - Fixes CVE-2018-14662, CVE-2018-16889, CVE-2018-16846 (Closes: #921948, #918969, #921947) * [4d5c86] Mark all LTTng tracepoints symbols as optional * [b92a2f] Build depend on debhelper >= 11.5.4~ * [5781cc] Add Breaks/Replaces ceph-base (<< 12.2.10+dfsg1-1~) to ceph-common (Closes: #919898) * [658bd3] Fixup Breaks/Replaces for files moved between binary packages * [c24137] Install systemd units for Ceph MGR service (Closes: #920176, #919871) * [091e14] Remove no longer needed dpkg-maintscript-helper calls in radosgw * [567dde] Temp changelog commit -- Gaudenz Steinlin Tue, 12 Feb 2019 10:55:02 +0100 ceph (12.2.10+dfsg1-1) unstable; urgency=medium * [22146e] ceph-base: create directory for bootstrap-rbd key * [8c0362] Move ceph bash completion to ceph-common * [b9e790] Make ceph binary package Suggests binNMU safe * [fc83f1] Install ceph-fuse systemd service file * [e70c29] Enable LTTng * [234e9b] New upstream version 12.2.10+dfsg1 -- Gaudenz Steinlin Sat, 29 Dec 2018 22:08:52 +0100 ceph (12.2.8+dfsg1-5) unstable; urgency=medium * [66e03b] Fix linking on archs which require libatomic * [5236f3] Fix Python 3 autopkgtest -- Gaudenz Steinlin Fri, 30 Nov 2018 16:49:02 +0100 ceph (12.2.8+dfsg1-4) unstable; urgency=medium * [97dfb6] Fix detection of armel for NEON instructions (Closes: #913599) -- Gaudenz Steinlin Thu, 22 Nov 2018 22:33:21 +0100 ceph (12.2.8+dfsg1-3) unstable; urgency=medium * [168bb9] Build depend on pythonX-dev instead of pythonX-all-dev (Closes: #912905) * [38d140] Patch to check for atomic support during build (Closes: #913601) * [9cc0a5] Disable libboost-context on unsupported archs (Closes: #913600) * [238143] Fix building with -g1 on 32 bit architectures * [3b48d5] Use -mfloat-abi=softfp on armel for NEON instructions (Closes: #913599) -- Gaudenz Steinlin Thu, 22 Nov 2018 09:38:09 +0100 ceph (12.2.8+dfsg1-2) unstable; urgency=medium * [5c4b36] Add architecture specific symbols for librados2 * [38bc1b] Build depend on libatomic1 on armel, m68k, mips, mipsel, powerpc, powerpcspe and sh4 -- Gaudenz Steinlin Wed, 31 Oct 2018 23:38:05 +0100 ceph (12.2.8+dfsg1-1) unstable; urgency=medium [ James Page ] * [9c55f6] Ensure that systemd targets are enabled and started * [17ca38] Support optional runtime loading of openssl in radosgw * [8927f6] Fix build on i386 * [774281] Ensure all ceph modules are included in the binary package. * [00ca38] Cherry pick upstream fix to resolve FTBFS on armhf * [5d118c] Add ceph-volume tools to ceph-osd package [ Gaudenz Steinlin ] * [ba768b] New upstream version 12.2.8+dfsg1 (Closes: #852999, #864535, #893149) * [96eba0] Exclude jsonchecker from upstream source * [7dd73b] Exclude Windows help file from orig tarball * [9d1740] Move ceph initscript and systemd target to ceph-base * [8ae049] Drop obsolete patches (either upstreamed or because of switch to cmake) * [cfd095] Create directory for Ceph Manager bootstrap keys * [858194] Shell scripts moved out of architecture specific directory * [f3f387] Merge ceph-fs-common package into ceph-common * [1789fe] Move radosgw-admin to ceph-common * [6f51fc] Add compressor plugins to ceph-common * [5bd0d1] Add crypto plugins to ceph-common on amd64 * [7724f7] New binary package ceph-mgr * [804be6] Remove librgw_file* from ceph-test. These are unit tests for rgw. * [fef87a] Upstream changed the build system to cmake * [134e34] Build Python 3 versions of Python modules (Closes: #883148) * [52a969] Package RADOS gateway Python bindings (python-rgw) * [a48700] Add rados-objclass-dev binary package * [30306f] Update dependencies for new upstream release * [4d07af] libcephfs1 -> libcephfs2 soname bumped upstream * [c4022d] Remove ceph-disk-udev no longer shipped upstream * [9aad82] Remove sample.fetch_config no longer shipped upstream * [fc163d] Update copyright for new upstream release * [21c408] Add /usr/bin/radosgw-es to radosgw package * [f63b2a] ceph-osd: sysctl config to increase the maximum number of AIO requests * [5f1f30] Remove static libraries from -dev packages (removed upstream) * [1db168] Install ceph-detect-init into /usr/bin instead of /usr/sbin * [1fb625] Move ceph-*-tool from ceph-test into daemon packages * [6a5628] Remove obsolete X-Python-Version * [c6fc4d] Update to Debian Policy version 4.2.1 * [5821f2] Set multiarch triplet in debian/rules * [9bdce0] Remove override of dh_auto_install * [b71c87] Add libceph-common to librados2 and librados-dev pkgs * [c746ce] Override JSON license lintian warning (false positive, code removed) * [17d65c] Use dh_missing instead of dh_install --list-missing * [cba40a] Remove obsolete ceph-create-keys@.service from ceph-base * [252d62] Update watch file for https and repacking * [ef84cf] Install ceph SysV init script with dh_install * [0c2c84] Add missing source for jquery.flot.js (actually jquery.colorhelpers.js) * [0f1e2e] Add missing sources for JQuery in civetweb * [8010cc] Add missing sources from AdminLTE * [7c425a] Add lintian overrides for source-is-missing false positives * [75f7d2] Update symbols files * [aa7295] Patch to fix build failures with Boost 1.67 * [872887] Build with Debian packaged Boost 1.67 instead of bundled Boost 1.66 * [abf215] Use google-perftools on all supported architectures * [44dd74] Add missing sources for the mgr dashboard plugin * [39f9d6] Depend on ceph-common for pythonX-cephfs (Closes: #896400) * [7a10f0] Improve autopkgtests * [7515ca] Add Python dependency for ceph-fuse * [d91a92] Make the ceph binary package a pure metapackage * [df1dc8] Add Lintian overrides for systemd targets * [bc7cd4] Install upstream rbdmap systemd service file * [dd44ea] Remove RUNPATH from JNI libraries * [7e9bce] Add dependency on junit4 and libcephfs-java for ceph-test * [dfbe7c] Remove unnecessary ceph-base postrm script (Closes: #867465) * [bad29d] Fix permissions on /var/run/ceph in SysV init script (Closes: #869142) * [6edc7a] Mark libraries as Multi-Arch compatible (Closes: #822740) [ Thomas Goirand ] * [46be6f] Change VCS links to point to Salsa [ Shengjing Zhu ] * [bfcf95] Don't treat rados-classes and ceph/compressor as shared libraries * [0ef4f9] Add missing interpreter in ceph-{osd,mon}.postinst (Closes: #862684, #862685) * [f75bfc] Change section of libcephfs-jni from libs to java * [f4b5d4] Add patch to fix various spelling errors * [f60d21] Patch to remove link to ceph.com for dashboard favicon * [116028] Backport test build fix from upstream * [b83166] Change architecture of ceph-fuse to linux-any (from amd64) -- Gaudenz Steinlin Sun, 28 Oct 2018 23:43:10 +0100 ceph (10.2.5-7.2) unstable; urgency=medium * Non-maintainer upload. * Build with -g1 instead of -g on 32bit architectures to fix FTBFS due to the 2GB/3GB address space limits. -- Adrian Bunk Wed, 07 Jun 2017 11:39:39 +0300 ceph (10.2.5-7.1) unstable; urgency=medium * Non-maintainer upload. * ceph-mon: Add Breaks+Replaces: ceph-common (<< 10) for taking over /usr/bin/ceph-rest-api. (Closes: #864161) -- Andreas Beckmann Tue, 06 Jun 2017 09:08:30 +0200 ceph (10.2.5-7) unstable; urgency=medium * [a12798] Add fix-init-system-detection.patch. This replaces the static init system detection by more appropriate runtime detection which also works if a Debian system is running with sysvinit. (Closes: #862075) -- Gaudenz Steinlin Fri, 12 May 2017 12:12:00 +0200 ceph (10.2.5-6) unstable; urgency=medium * [e44a30] Disable running dh_auto_install with parallel jobs (Closes: #850906) * [b7e926] Link with libatomic and --as-needed on all archs (Closes: #850831) -- Gaudenz Steinlin Wed, 11 Jan 2017 12:02:24 +0100 ceph (10.2.5-5) unstable; urgency=medium * [f4675d] Set _FILE_OFFSET_BITS=64 via DEB_CPPFLAGS_MAINT_APPEND * [f60392] Install systemd targets for ceph services (Closes: #850509) * [d3baba] Link with -latomic on mips/mipsel -- Gaudenz Steinlin Tue, 10 Jan 2017 09:04:48 +0100 ceph (10.2.5-4) unstable; urgency=medium * [88034c] Build with ggc-min-expand=5 on mips/el (Closes: #849657) * [c31e79] Add patch to build rocksdb with -latomic on mips/el * [182dd8] NEWS entry about upgrades from Debian Jessie -- Gaudenz Steinlin Sun, 08 Jan 2017 21:34:21 +0100 ceph (10.2.5-3) unstable; urgency=medium * [eeff8d] Use -mfloat-abi=softfp on armel for NEON plugin (Closes: #849660) -- Gaudenz Steinlin Thu, 05 Jan 2017 09:18:41 +0100 ceph (10.2.5-2) unstable; urgency=medium * [3859ca] Only list missing files instead of failing (Closes: #849031) * [47aef7] Remove chrony from recommends (provides time-daemon) (Closes: #827673) * [3e96e6] Upstream fix for CVE-2016-9579 (short CORS request) (Closes: #849048) -- Gaudenz Steinlin Sat, 24 Dec 2016 13:14:28 +0100 ceph (10.2.5-1) unstable; urgency=medium [ James Page ] * [754935] Imported Upstream version 9.2.0 - [df85c3] Resync relevant packaging changes with upstream. - [be5f82] Refresh patches. - [d1f3fe] Add python-setuptools to BD's for ceph-detect-init. - [b2f926] Add lsb-release to BD's to ensure that python modules are installed to correct locations. - [e4d702] Add python-sphinx to BD's to ensure man pages get generated and installed. - [3ead6e] Correct install location for ceph-monstore-update tool. - [269754] [177b7a] Update symbols for new release. * [4c45629] Update NEWS file for infernalis changes. * [940491e] Limit number of parallel builds to 2 to reduce memory footprint on builders. * [a2bed4] New upstream version 10.2.5 * [cbfb6b] Sync upstream changes around rbdmap install and conf files. * [5c52b2] Drop patches include upstream, refresh remaining patches * [8f9820] Resync further packaging changes from upstream. * [27d010] Re-add bz2-dev BD. * [e94aa2] Add python-dev to BD's. * [e201c1] d/p/pybind-flags.patch: Ensure that cython *FLAGS are correctly set. * [14cd12] d/p/fix-systemd-escaping.patch: Ensure that leading '/' is stripped from block device paths when escaping for use in systemd unit names. * [33b3aa] Add pull request for systemd fixes * [d781a2] d/ceph-mds.postinst: Fix syntax error. * [ce55ec] Ensure that python flags are correct set for cython rbd build. * [f9e35b] Switch rbd python binding to cython * [8ccae0] Drop ceph_volume_client until its actually in the codebase. * [0a11cc] Install to relative, not absolute /etc/ceph. * [e2415a] Drop ceph-bluefs-tool from ceph package. * [b16966] d/ceph-mds.dirs: Actually create /var/lib/ceph/mds prior to changing permissions (LP: #1544647). * [0c1201] d/ceph.init: Restore link to init-ceph, resolving un-install failures due to missing init script (LP: #1546112). [ Gaudenz Steinlin ] * [e3cb86] Remove no longer needed check for dh-autoreconf>=6 * [9157b3] Install ceph-brag tool into ceph-common * [74e9f3] Install ceph-client-debug into ceph-test * [476449] Use jh_installlib to install Java libraries * [643f6e] Don't remove configure script on dh_clean * [4bb203] Remove *.la files to binary packages * [b76c6a] Add build dependency on libboost-iostreams-dev * [b0506f] Add build dependency on libldap2-dev * [526ce1] Refresh patches for upstream version 10.2.2 * [cf539b] Remove patches applied upstream in 10.2.2 [ James Page ] * [646b48] Add librgw2 binary packages. * [ae3cda] Drop virtualenv from BD's. * [7ebd7c] Re-enable rocksdb build for bluestore support * [e393e5] Add rbd-mirror package * [00d06d] Add patch to set g++ flags correctly for rocksdb * [3b029a] Enable gperftools on arm64 architecture. * [e88620] Add ceph-bluefs-tool to install. * [4f40a1] Add s390x to list of rocksdb flags * [858334] d/p/skip-setup.py-makefiles.patch,rules: Avoid use of virtualenv to install ceph-disk and ceph-detect-init python modules. * [40c3b7] Update watch file to scan for gz files. * [49b716] Install librgw_file* as part of ceph-test package. [ Gaudenz Steinlin ] * [2e156d] d/rules: Install upstart and systemd configurations for rbd-mirror. [ James Page ] * [ca0b07] d/copyright: Ensure that jerasure and gf-complete are not stripped from the upstream release tarball. * [eee861] d/p/disable-openssl-linking.patch: Disable build time linking with OpenSSL due to licensing incompatibilities. * [07d7a6] d/*.symbols: Add new symbols for RC. * [2416f1] Fix multiarch paths for librgw * [2da01d] d/rules: Ensure that dh_systemd_start does not insert maintainer script snippets for ceph-mon and ceph-create-keys - service restart should be handled outside of the packaging as it is under upstart and for all other systemd unit files installed (LP: #1563330). * [76ec3b] d/ceph-common.postinst: Silence output of usermod call (LP: #1569249). * [63d60f] d/rules,ceph-common.install: Ensure that /etc/default/ceph is a file and not a directory (LP: #1587516). * [a866ca] d/control: Bumped Standards-Version to 3.9.8, no changes. * [e0811e] d/ceph.install: Drop install of 60-ceph-partuuid-workaround.rules as no longer part of upstream codebase. * [25954f] * d/*: Split ceph-osd and ceph-mon into separate binary packages and add new ceph-base binary package inline with upstream packaging changes (LP: #1596063). * [f1287b] Add missing misc depends * [afeb18] d/rules,control: Drop -dbg packages and let Ubuntu builds take care of ddeb generation instead. [ Gaudenz Steinlin ] * [e133b2] Install rbdmap manpage into ceph-common * [b5ed64] Install radosgw-token command into radosgw package * [0a27e1] Adapt installation of Python files to latest Jewel release * [ef2544] Drop rocksdb-flags patch applied upstream * [07aef4] Add patch osd-limit-omap-data-in-push-op * [32f14d] Refresh patches [ James Page ] * [f4e95c] Fix install location for mount.ceph * [6a9efc] Update install location for mount.ceph.fuse * [7624f0] d/control: Add Pre-Depends on ceph-common to ceph-osd to ensure that ceph user and group are created prior to unpacking of udev rules (LP: #1631328). [ Frode Nordahl ] * [022ee3] Add rgw_rados-creation_time patch [ Gaudenz Steinlin ] * [05225f] Remove old ceph logrotate configuration [ James Page ] * [cfa82f] Refresh patches [ Gaudenz Steinlin ] * [fdec5d] Remove upstart support * [5966f0] Use new RSA key for ceph-post-file * [3748b6] Only install ChangeLog as upstream changelog * [aa1393] Install bash-completions to /usr * [ab0a88] Dependency on lsb-base for initscripts * [4d78b0] Disable radosgw SysV init script on systemd * [ff4c87] Don't install python bytecode * [3cbf5e] Add missing dependencies on python (ceph-osd, ceph-mon) * [8c70df] Update symbols files (librados2 and librbd1) * [e4f0c5] Add ${shlibs:Depends} on Python C extensions * [936838] Allow setting the number of parallel jobs * [e5aa0f] Remove Laszlo and add myself to uploaders -- Gaudenz Steinlin Sat, 17 Dec 2016 22:40:22 +0100 ceph (0.94.5-1) experimental; urgency=medium * [2d330d6] New upstream release: - [1e93090] Drop patch for CVE-2015-5245, included upstream. - [20adc7d] Refresh all other patches. * [9255e5d] Ensure any erasure coding test libraries and dangling symlinks are not included in the ceph package. -- James Page Mon, 09 Nov 2015 12:09:51 +0000 ceph (0.94.3-1) experimental; urgency=medium * [580fef] Imported Upstream version 0.94.3 (Closes: #777814, #795178) * [536935] Add upstream patch to fix CVE-2015-5245 (Closes: #798567) -- Gaudenz Steinlin Fri, 18 Sep 2015 16:55:23 +0200 ceph (0.94.2-2) experimental; urgency=medium * Revert "Drop virtualenv BD, disable unit tests." * Restore patches for test enablement. * Display test-suite log output in the event of failures. -- James Page Mon, 20 Jul 2015 13:37:06 +0100 ceph (0.94.2-1) experimental; urgency=medium * Resync with Ubuntu, introducing Ceph Hammer stable release: - d/*.symbols: Update inline with upstream additions, use regex for ceph version symbol. - d/lib-systemd/system/ceph-create-keys.service: Automatically create admin and bootstrap keys after ceph mon startup. - d/p/vivid-does-systemd.patch: Ensure that disks prepared on vivid or later use systemd for init. - d/lib-systemd/system/*.service: Align nofile limits and restart config with equivalent upstart configurations. - d/p/fix-cycles-arch.patch: Skip initialization of cycles_per_sec if rtdsc (or equivalent) is not supported. - d/ceph{-common}.install,control: Move ceph_argparse.py down into ceph-common package to fixup ceph cli usage/autopkgtest failure. - d/control,ceph-common.install,librbd1.install: Move rbdnamer and associated udev rules into ceph-common package. - d/control,python-*: Split out rbd, rados and cephfs bindings into separate python packages, move some bits into ceph/ceph-common. - d/control: Move python-flask dependency to ceph package, only required for REST API. - d/control: Use google-perftools on arm64. - d/control: Re-order Recommends to prefer ntp over chrony for Ubuntu. - d/p/ceph-osd-prestart-path.patch: Fixup path for ceph-osd upstart configuration pre-start script. - d/p/fix-argparse-defaults.patch: Workaround behavioural change in argparse set_defaults in python 2.7.9 * New upstream point release: - d/p/*: Refresh. * d/p/use_system_jerasure.patch,d/control: Drop use of libjerasure as the patch is intrusive and expensive to maintain; will revisit if adopted upstream. -- James Page Tue, 16 Jun 2015 11:31:05 +0100 ceph (0.87-2) experimental; urgency=low * Team upload. [ Gaudenz Steinlin ] * README.Debian: added clarification about setting the hashpspool flag. (Closes: #769596). [ James Page ] * Added new "modules.patch" to mark new erasure coding libraries as modules, wildcard install. [ Dmitry Smirnov ] * Recommends: added "ntp" to list of time-daemon alternatives (Closes: #767511). * Introduced native systemd services (except "rbdmap"), (Closes: #769593). * ceph-test: install forgotten files. * Run post-build tests: + updated "virtualenv-never-download.patch" to pass "--system-site-packages" to virtualenv to prevent downloads. + added new patches to disable network-dependent and failing tests. * Patchworks: - bug-9341.patch + bug-10036.patch (to show OSD affinity in "ceph osd tree"). Thanks, Mykola Golub. + bug-10059.patch + 0latest-giant.patch (Last-Update: 2014-11-15). + sleep-recover.patch + tests-disable.patch (to disable tests that need cluster). + tests-disable-ceph-disk.patch + use_system_gtest.patch (commented) as first attempt to build with system "libgtest-dev". + use_system_jerasure.patch * Build-Depends: + libjerasure-dev (>= 2.0.0-2~) + virtualenv + valgrind [amd64 armhf i386 powerpc] * rules: pass "--without-lttng" to explicitly disable "lttng" to avoid auto-enable if found. * rules: disabled bundled RocksDB: RocksDB suppose to improve performance of keyvaluestore OSDs but the latter slow down to nearly unusable state when filled over 1 TiB even with RocksDB. Moreover KV backend is experimental and super dangerous -- I lost cluster due to OSD poisoning caused by KV OSD which was plugged only during limited time. LevelDB is good enough, for now I see no reason to use RocksDB especially considering that it is not packaged separately. * Removed myself from Uploaders. -- Dmitry Smirnov Wed, 01 Apr 2015 11:47:38 +1100 ceph (0.87-1) experimental; urgency=medium * New major upstream release [October 2014]. + new "libradosstriper*" binary packages. * Patchworks (removed old patches, refreshed remaining ones). + "bug-9814.patch" to prevent OSD crash. Thanks, Haomai Wang. * Install systemd sleep handler. * Exclude erasure-code plugins from `dh_makeshlibs` processing to avoid useless calls to `ldconfig` in maintainer scripts. * Build-Depends: + libbabeltrace-dev + libbabeltrace-ctf-dev + libbz2-dev + libudev-dev + zlib1g-dev * Build with "--with-babeltrace". * Build and statically link bundled RocksDB. -- Dmitry Smirnov Thu, 30 Oct 2014 12:43:49 +1100 ceph (0.80.9-2) unstable; urgency=medium * [70fc1d] Add NEWS entry about CRUSH issues fixed in 0.80.9 * [f41bb6] Add NEWS entry about rbd backed filesystems and systemd -- Gaudenz Steinlin Tue, 05 May 2015 21:29:15 +0200 ceph (0.80.9-1) unstable; urgency=medium * [4b4e] Imported Upstream version 0.80.9 * [7102] Remove patches firefly-latest and p2139 applied upstream * [5869] Add myself to uploaders -- Gaudenz Steinlin Mon, 04 May 2015 08:49:37 +0200 ceph (0.80.7-2) unstable; urgency=medium * Team upload. * Build-Depends: +libjerasure-dev (>= 2.0.0-2~) * New patch to use system "jerasure" library instead of its bundled copy. * Removed myself from Uploaders. -- Dmitry Smirnov Thu, 11 Dec 2014 12:55:38 +1100 ceph (0.80.7-1) unstable; urgency=medium * New upstream release [October 2014]. * Minor update to long description of "rbd-fuse" (Closes: #765462). -- Dmitry Smirnov Thu, 16 Oct 2014 04:36:23 +1100 ceph (0.80.6-1) unstable; urgency=medium * New upstream release [October 2014]. * Standards-Version: 3.9.6. -- Dmitry Smirnov Thu, 02 Oct 2014 23:07:04 +1000 ceph (0.80.5-2) unstable; urgency=low * Patchworks: + new patch for Ceph#9341 to dramatically (e.g seconds instead of hours) reduce rejoin (i.e. MDS restart) time (fuse clients). + new "p2139.patch". + new patch with fixes from Firefly HEAD; includes patch to fix FTBFS on alpha (Closes: #756892). updated "librbd1.symbols"; * Build-Depends: mark "yasm" as [amd64] (Closes: #760383). * Recommends: + "time-daemon | chrony". -- Dmitry Smirnov Tue, 16 Sep 2014 03:54:15 +1000 ceph (0.80.5-1) unstable; urgency=medium * New upstream stable release: - d/p/firefly-post-release.patch: Dropped, no longer required. - d/lib{rados2,cephfs1}.symbols: Update with new symbols. -- James Page Wed, 30 Jul 2014 10:15:40 +0100 ceph (0.80.4-1) unstable; urgency=medium * New upstream release [July 2014]. * New patches: + rbdmap1-mount.patch + rbdmap2-hooks.patch + rbdmap3-lazyumount.patch + bug-8821.patch * radosgw: removed unused lintian overrides. -- Dmitry Smirnov Fri, 18 Jul 2014 02:33:39 +1000 ceph (0.80.1-2) unstable; urgency=low * Megapatch from "firefly" branch with post-0.80.1 fixes. * Patches for upstream bugs 8342, 8624 and some cherry-picks. * New "bash-completion.patch" with Bash completion improvements. * New patch to fix FTBFS on 'hppa' (Closes: #748571). * "sample.ceph.conf.patch": minor update. -- Dmitry Smirnov Sat, 05 Jul 2014 20:29:44 +1000 ceph (0.80.1-1) unstable; urgency=low * New upstream release [May 2014]. * Dropped all backported patches. * New "sleep-recover" and "client-sleep[1,2,3]" patches to fix fuse-client hang after resume from suspend [#8291]; thanks, Zheng Yan. * New "gcj_search_path.patch" to find "jni.h" with gcj-jdk v4.9.0. -- Dmitry Smirnov Wed, 14 May 2014 09:24:15 +1000 ceph (0.80-1) unstable; urgency=low * New upstream release [May 2014]. + upload to unstable. * Updated "README.Debian". * Updated "debian/copyright"; Thanks, László Böszörményi. * Added backported patches: [8113, 8175, 8282, 8291, bp0001, sample.ceph.conf]. * "gbp.conf": don't merge to experimental. * lintian-overrides: spelling-error-in-binary * tEH the. -- Dmitry Smirnov Wed, 07 May 2014 16:43:07 +1000 ceph (0.80~rc1-1) experimental; urgency=low * New upstream pre-release. * Minor re-factoring of udev rules installation. * ceph-common: added ceph-crush-location.1 man page. * ceph-test-dbg: fixed Depends. -- Dmitry Smirnov Thu, 24 Apr 2014 02:52:12 +1000 ceph (0.79-3) experimental; urgency=low * New "arch.patch" to detect build architecture using dpkg-architecture. * Mark amd64-only symbols as such. * Minor rules cleanup. -- Dmitry Smirnov Sat, 19 Apr 2014 15:56:37 +1000 ceph (0.79-2) experimental; urgency=low [ James Page ] * d/p/modules.patch,d/ceph.install: Mark all jerasure plugins as modules and ensure they are all installed. [ Dmitry Smirnov ] * Patchworks: - removed unused "defaults-leveldb-osd.patch". + improved description of "modules.patch". Thanks, James Page. + added new backported patches [#5469, #8008, _1606, spelling]. * Added .symbols and "dh_makeshlibs -V" shlibs tightening (Closes: #744382). * README.Debian: added note regarding kernel client mount option. * copyright: added license for man files. * control: "Suggests: logrotate". -- Dmitry Smirnov Fri, 18 Apr 2014 18:27:01 +1000 ceph (0.79-1) experimental; urgency=low * New upstream release [April 2014]. * Tighten dependency on ceph-common. * Install pm-suspend handler to stop/start ceph services on suspend/resume. * New (inactive) patch to bump OSD's leveldb defaults. * Patches dropped (applied-upstream): - init.patch - logrotate.patch - fix-defaultweight.patch * Refreshed "modules.patch". -- Dmitry Smirnov Tue, 08 Apr 2014 16:52:04 +1000 ceph (0.78-2) experimental; urgency=low * Standards to 3.9.5. * debian/copyright: reviewed and updated. * ceph-test: added lintian-override for "binary-without-manpage". * Patchworks: + refreshed/renamed/reordered "virtualenv-never-download.patch". + new "init.patch" for init.d scripts lintianisation. + new "logrotate.patch" to avoid rotating empty logs. + new "fix-defaultweight.patch" to fix weight calculation on OSD start. + new "gcj.patch" with partial fix to FTBFS with gcj-jdk. * Use symlinks to simplify installation of init.d and logrotate scripts. * Added retrospective changelog entry to mention new B-D "libblkid-dev". * Added "debian/clean file". * Added "README.Debian" file with some hopefully useful notes. * Added "mount.fuse.ceph.8" man page. * rules: + "dh --with" optimised. + set JAVAC to prevent FTBFS due to incorrect use of 'gcj', when detected. + verbose mode for 'cp' and 'rm' commands. + build with "--as-needed" to minimise needless linking. * control: + lintian/duplicate-short-description + consistent capitalisation. + removed needless versioned dependencies from Build-Depends. + added myself to Uploaders. -- Dmitry Smirnov Tue, 25 Mar 2014 07:17:40 +1100 ceph (0.78-1) experimental; urgency=medium * New upstream release: - d/control: Add "xfslib-dev" and "libblkid-dev" to BD's. - d/*: Sync relevant packaging changes from upstream. - d/p/*: Drop upstreamed patches. - d/p/modules.patch: Mark libcls_user.so and libec_jerasure.so as modules. - d/ceph.install: Only install libec_jerasure.so. * d/ceph-test.install: Install test binaries to /usr/lib/ceph/bin; they really don't need to be installed on the default path. * d/{ceph|radosgw|ceph-mds}.lintian-overrides: Add overrides for intentional difference in naming and structure between upstart configurations and init.d scripts. -- James Page Sat, 22 Mar 2014 18:27:40 +0000 ceph (0.72.2-3) unstable; urgency=medium * Team upload. [ James Page ] * d/ceph-test.install: Install test binaries to /usr/lib/ceph/bin; they really don't need to be installed on the default path. [ Dmitry Smirnov ] * Tightened shlibs with "dh_makeshlibs -V" (Closes: #679686). -- Dmitry Smirnov Mon, 14 Apr 2014 17:28:20 +1000 ceph (0.72.2-2) unstable; urgency=medium * d/radosgw.{postinst,postrm,preinst}: Handle renaming of radosgw upstart configuration on upgrade@0.72.1-3. * d/{ceph|ceph-mds|radosgw}.{postinst|prerm}: Check to ensure that system is running upstart before trying to start/stop upstart configurations (Closes: #734241, #738845, #738845). -- James Page Sat, 08 Mar 2014 16:48:28 +0000 ceph (0.72.2-1) unstable; urgency=medium * New upstream release. -- James Page Wed, 01 Jan 2014 09:32:03 +0000 ceph (0.72.1-3) unstable; urgency=low * d/rules,ceph.install: Correct install paths for ceph-* helpers. * d/p/modules: Mark libcls_kvs.so as module. * d/rules: Rename radosgw upstart configuration to radosgw-instance to avoid namespace conflict with init script which breaks backwards compatibility (LP: #1255464). -- James Page Wed, 27 Nov 2013 10:52:48 +0000 ceph (0.72.1-2) unstable; urgency=low * Fix upgrade failures from ceph < 0.67.3-1 (Closes: #728164): - d/control: ceph-mds Breaks/Replaces ceph (<< 0.67.3-1). - d/control: ceph-fs-common Breaks/Replaces ceph-common (<< 0.67.3-1). * d/rules,control: Use google-perftools on armhf and powerpc archs. -- James Page Mon, 25 Nov 2013 10:13:19 +0000 ceph (0.72.1-1) unstable; urgency=low * New upstream stable release: - d/ceph-test.install: Add new ceph_filestore_tool, ceph-kvstore-tool and ceph_test_cls_hello binaries, drop ceph_test_store_tool. - d/ceph-common.install: Add new ceph-post-file binary and manpage. - d/ceph.install: Tweaked install path /usr/sbin -> /sbin. - d/control: Add new BD's on python-nose and yasm. - d/copyright: Updates inline with changes in codebase. - d/ceph.install,rules: Install rbdmap init file using dh_installinit. - Refresh patches. * d/control,rules: Disable unit testing; it requires a forked version of cram and is still trying to download dependencies using virtualenv. -- James Page Fri, 22 Nov 2013 13:02:29 +0000 ceph (0.67.3-1) unstable; urgency=low [ Laszlo Boszormenyi ] * New upstream release (Closes: #693866, #705262). * Update debian/copyright. * Sync with Ubuntu. [ James Page ] * d/control,rules,libcephfs-{java,jni}: Enable Java CephFS library, add new BD's on javahelper and default-jdk, add dbg package. * d/control: Add new BD on libboost-thread-dev for RADOS Gateway keystone integration. * d/{control,obsync.install}: Drop obsync package inline with upstream. * d/librbd-dev.install: Pickup new features.h file. * Remove manual calls to ldconfig: - d/lib{rados2|rbd1|cephfs1}.post*: Dropped - all these do is call ldconfig which will automatically be done. - d/rules: Let dh_makeshlibs do its magic with postinst/postrm. * d/tests/*: Added autopkgtests for librbd, librados, python-ceph and the ceph CLI. * d/control: Fix versions of librbd1, librados2 and libcephfs1 for python-ceph as it requires an exact version match. * d/ceph.docs: Drop - README from upstream is only useful for developers (Closes: #722957). * d/rules: Drop --upstart-only from dh_installinit calls for upstart configurations; this is deprecated in Ubuntu and not support in Debian. * d/rules: Exclude jni package from shlibs generation to avoid pointless ldconfig calls in maintainer scripts. [ Bastian Blank ] * Use debhelper 9. * Use dh-autoreconf. * Install files from source tree if possible. * Run test-suite: - Build-depend on python-virtualenv. - Ask virtualenv to never download anything. * Fix clean target. * Properly mark library modules: - Don't longer exclude them from stripping. * Drop all libtool .la files. * Generate python dependencies. * Don't exclude stuff from shlibs generation. -- Laszlo Boszormenyi (GCS) Tue, 01 Oct 2013 02:29:08 +0200 ceph (0.48-1) unstable; urgency=low * New upstream release, the first with long-term support. * As gceph dropped by upstream, remove it from packaging. * Build with hardening enabled and build-conflict with libcryptopp not to mix up with libnss. * Use symbol versioning (closes: #679686). * Update debian/watch to GitHub tags. -- Laszlo Boszormenyi (GCS) Sat, 07 Jul 2012 07:53:40 +0200 ceph (0.47.2-1) unstable; urgency=low * New upstream release. * Use system leveldb (closes: #667907). * Remove librgw1 , librgw-dev and librgw1-dbg and add rest-bench and rest-bench-dbg packages. * Backport leveldb build fixes from upstream git as fix_leveldb_dep_for_system_library_case.patch and fix_leveldb_includes_for_system_library_case.patch . * Update packaging. * Sync with Ubuntu: switch build-dependency from libcryptopp to libnss as libcryptopp is not seeded. -- Laszlo Boszormenyi (GCS) Sun, 03 Jun 2012 13:37:52 +0200 ceph (0.44.1-1) unstable; urgency=low * New upstream release. -- Laszlo Boszormenyi (GCS) Fri, 06 Apr 2012 01:10:15 +0200 ceph (0.43-1) unstable; urgency=low * New upstream release, now creates /var/run/ceph on each start (closes: #660238). * Update debian/copyright . -- Laszlo Boszormenyi (GCS) Sun, 26 Feb 2012 04:07:02 +0100 ceph (0.41-1) unstable; urgency=low * New upstream release. -- Laszlo Boszormenyi (GCS) Sun, 05 Feb 2012 10:07:38 +0100 ceph (0.40-1) unstable; urgency=low * New upstream release (closes: #652037). * Adjust copyright to match upstream source changes. -- Laszlo Boszormenyi (GCS) Sat, 14 Jan 2012 12:01:30 +0100 ceph (0.38-1) unstable; urgency=low * New upstream release (closes: #647764), missingok is now part of logrotate directives (closes: #645651). * Rename ceph-client-tools package to ceph-common , libceph-dev to libcephfs-dev and libceph1{,-dbg} ones to libcephfs1{,-dbg} respectively. * Update upstream VCS locations. -- Laszlo Boszormenyi (GCS) Sun, 27 Nov 2011 21:40:52 +0100 ceph (0.35-1) unstable; urgency=low * New upstream release. -- Laszlo Boszormenyi (GCS) Sat, 24 Sep 2011 16:51:57 +0200 ceph (0.34-1) unstable; urgency=low * New upstream release (closes: #638714). * Make librbd-dev depends on librados-dev as it uses headers from the latter (closes: #636845). * Add new binary packages, gceph, gceph-dbg and obsync . The libcrush ones removed. * Change to quilt source format and tune packaging. -- Laszlo Boszormenyi (GCS) Sun, 28 Aug 2011 15:56:16 +0200 ceph (0.27-1.1) unstable; urgency=low * Non-maintainer upload. * Remove references to other libraries from dependency_libs field (closes: #621208). -- Luk Claes Sat, 28 May 2011 22:28:48 +0200 ceph (0.27-1) unstable; urgency=low * New upstream release. -- Laszlo Boszormenyi (GCS) Mon, 25 Apr 2011 10:09:05 +0200 ceph (0.25.2-1) unstable; urgency=low * New upstream release. * Make Ceph cross buildable (closes: #618939), thanks to Hector Oron. * Disable libatomic-ops on ARMv4t (armel) archs to prevent FTBFS (closes: #615235), thanks go to Hector Oron again. * Rename librados1{,-dbg,-dev} packages to librados2{,-dbg,-dev} ones; conflict with and replace the former ones. * Add librbd1 and librbd-dev packages. -- Laszlo Boszormenyi (GCS) Sun, 27 Mar 2011 15:51:23 +0200 ceph (0.24.3-2) unstable; urgency=low * Make Ceph Linux only and build on all Linux archs (closes: #614890). * Support parallel building via DEB_BUILD_OPTIONS . * Add watch file, thanks to Clint Byrum (closes: #615021). * Tune packaging. -- Laszlo Boszormenyi (GCS) Fri, 25 Feb 2011 15:17:26 +0100 ceph (0.24.3-1) unstable; urgency=low * New upstream bugfix release. -- Laszlo Boszormenyi (GCS) Sat, 19 Feb 2011 12:25:43 +0100 ceph (0.24.2-1) unstable; urgency=low * New upstream bugfix release. -- Laszlo Boszormenyi (GCS) Sat, 29 Jan 2011 15:25:14 +0100 ceph (0.24.1-1) unstable; urgency=low * New upstream bugfix release. -- Laszlo Boszormenyi (GCS) Tue, 11 Jan 2011 22:23:18 +0100 ceph (0.24-1) unstable; urgency=low * New upstream release. -- Laszlo Boszormenyi (GCS) Wed, 01 Dec 2010 09:26:25 -0800 ceph (0.23.1-1) experimental; urgency=low * Initial release (Closes: #506040) -- Sage Weil Sun, 21 Nov 2010 15:22:21 -0800