siderolabs / talos

Talos Linux is a modern Linux distribution built for Kubernetes.
https://www.talos.dev
Mozilla Public License 2.0
6.63k stars 531 forks source link

Rook Ceph CSI RDB "NDB Module not Loading" #9320

Closed Prates23 closed 4 weeks ago

Prates23 commented 4 weeks ago

Bug Report

I'm having issue with Rook Ceph rbd plugins. I'm using rook ceph v18.2.4 and the csi-rbdplugin complains it can't "modprobe: ERROR: could not insert 'nbd': Operation not permitted\n"

Description

We are using rook ceph and require this plugin to be able to do VolumeSnapshot. It seems that the reason Rook can't load it dynamically is that Talos follows the KSPP kernel security hardening policies which requires modules to be signed. Is there way to fix this? Thanks

Logs

W0901 06:04:33.766142 10476 rbd_attach.go:238] nbd modprobe failed (an error (exit status 1) occurred while running modprobe args: [nbd]): "modprobe: ERROR: could not insert 'nbd': Operation not permitted\n"

Environment

smira commented 4 weeks ago

nbd module is shipped with Talos (see https://github.com/siderolabs/talos/pull/8119), but you might need to load it via Talos machine configuration.