Bug#1108403: cloud-init: CVE-2024-6174
On Jun 29, 2025 17:31, Bastian Blank <waldi@debian.org> wrote:
>
> On Sun, Jun 29, 2025 at 12:48:20PM +0000, Jeremy Stanley wrote:
> > But since we're talking about a very small subset of clouds right now
> > (specifically those with non-amd64 compute nodes), I think the behavior
> > change is probably not a major concern.
>
> Just one. Debian does not support config drive on ahci, only virtio,
> when using the smaller genericcloud image.
>
> Could someone see if openstack could finally fix that broken default?
>
> Bastian
There's as much as I know, no way to fix the default. Only, operators can add the metadata to the flavor or image. Typically to the image in fact, as the lack of AHCI is really just a Debian specificity. Which is why I filled the bug about re-adding AHCI support in the cloud kernel. I think it is very unfortunate you closed that bug so fast, leaving no room for discution. Because of the we (at infomaniak) switched to the non-cloud kernel fearing some customers trying to boot from server backups would ommit the virtio metadata... :(
Cheers,
Thomas Goirand (zigo)
Reply to: