Описание
Feature update for slurm and pdsh
This update for slurm and pdsh fixes the following issues:
slurm was updated to version 24.11.1 using package slurm_24_11:
-
Security issues fixed:
- CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes under other users' jobs (bsc#1236722)
- CVE-2024-42511: Fixed vulnerability with switch plugins where a user could override the isolation between Slingshot VNIs or IMEX channels (bsc#1236726)
-
Important remarks:
- Slurm can be upgraded from version 23.02, 23.11 or 24.05 to version 24.11 without loss of jobs or other state information. Upgrading directly from an earlier version of Slurm will result in loss of state information.
- If using the
slurmdbd(Slurm DataBase Daemon) you must update this first. - The 24.11
slurmdbdwill work with Slurm daemons of version 23.02 and above. You will not need to update all clusters at the same time, but it is very important to updateslurmdbdfirst and having it running before updating any other clusters making use of it. - If using a backup DBD you must start the primary first to do any database conversion, the backup will not start until this has happened.
- All SPANK plugins must be recompiled when upgrading from any Slurm version prior to 24.11.
-
Highlights of changes:
- Fixed issues related to the modified startup handling for slurmdbd:
moved PID file to
/run/slurmdbd(bsc#1236928) - Create slurm-owned log file on behalf of slurmdbd (bsc#1236929)
- Added report AccountUtilizationByQOS to sreport.
AccountUtilizationByUseris able to be filtered by QOS.- Added autodetected gpus to the output of
slurmd -C - Added ability to submit jobs with multiple QOS. These are sorted by priority highest being the first.
- Removed the instant on feature from
switch/hpe_slingshot. slurmctld: Changed incoming RPC handling to dedicated thread pool with asynchronous handling of I/O that can be configured viaconmgr_*entries underSlurmctldParametersinslurm.conf.
- Fixed issues related to the modified startup handling for slurmdbd:
moved PID file to
-
Configuration File Changes (see appropriate man page for details)
- Added
SchedulerParameters=bf_allow_magnetic_slotoption. It allows jobs in magnetic reservations to be planned by backfill scheduler. - Added
TopologyParam=TopoMaxSizeUnroll=#to allow--nodes=<min>-<max>fortopology/block. - Added
DataParserParametersslurm.confparameter to allow setting default value for CLI--jsonand--yamlarguments. - Hardware collectives in
switch/hpe_slingshotnow requiresenable_stepmgr. - Added connection related parameters to
slurm.confunderSlurmctldParameters:
conmgr_max_connections: Defaults to 150 connections.
conmgr_threads: Defaults to 64 threads for slurmctld.
conmgr_use_poll: Defaults is to use epoll in Linux.
conmgr_connect_timeout: Defaults toMessageTimeout.
conmgr_read_timeout: Defaults toMessageTimeout.
conmgr_wait_write_delay: Defaults toMessageTimeout.
conmgr_write_timeout: Defaults to MessageTimeout. - Added
SlurmctldParamters=ignore_constraint_validationto ignoreconstraint/featurevalidation at submission. - Added
SchedulerParameters=bf_topopt_enableoption to enable experimental hook to control backfill.
- Added
-
Command Changes (see man pages for details):
- Remove srun
--cpu-bind=rank. - Add
'%b'as a file name pattern for the array task id modulo 10. sacct: Respect--noheaderfor--batch-scriptand--env-vars.- Add
sacctmgr pingcommand to query status ofslurmdbd. sbcast: Add--nodelistoption to specify where files are transmitted tosbcast: Add--no-allocationoption to transmit files to nodes outside of a job allocation.slurmdbd: Add-uoption. This is used to determine if restarting the DBD will result in database conversion.- Remove
salloc --get-user-env. scontrol: Add--json/--yamlsupport tolistpids.scontrol: Addliststeps.scontrol: Addlistjobs.scontrol show topo: Show aggregated block sizes when using topology/block.
- Remove srun
-
API Changes:
- Remove
burst_buffer/luacallslurm.job_info_to_string(). job_submit/lua: Addassoc_qosattribute tojob_descto display all potential QOS's for a job's association.job_submit/lua: Addslurm.get_qos_priority()function to retrieve the given QOS's priority.
- Remove
-
SLURMRESTD Changes:
- Removed fields deprecated in the Slurm-23.11 release from v0.0.42 endpoints.
- Removed v0.0.39 plugins.
- Set
data_parser/v0.0.42+prefer_refsflag to default. - Add
data_parser/v0.0.42+minimize_refsflag to inline single referenced schemas in the OpenAPI schema to get default behavior ofdata_parser/v0.0.41. - Rename v0.0.42
JOB_INFOfieldminimum_switchestorequired_switchesto reflect the actual behavior. - Rename v0.0.42
ACCOUNT_CONDITIONfieldassocationtoassociation(typo). - Tag
slurmdb/v0.0.42/jobs pidfield deprecated.
- For details on the changes in this version update, consult Slurm 24.11 changelog
pdsh:
- Fix version test for munge build (bsc#1236156)
- Dropped Slurm support for s390x and i586: Slurm no longer builds for s390x or 32bit
- Implementation of package
pdsh-slurm_24_11compatible with Slurm 24.11
Список пакетов
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150300.54.3
pdsh-dshgroup-2.35-150300.54.3
pdsh-genders-2.35-150300.54.3
pdsh-machines-2.35-150300.54.3
pdsh-netgroup-2.35-150300.54.3
pdsh-slurm-2.35-150300.54.3
pdsh-slurm_22_05-2.35-150300.54.3
pdsh-slurm_23_02-2.35-150300.54.3
pdsh-slurm_24_11-2.35-150300.54.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150300.54.3
pdsh-dshgroup-2.35-150300.54.3
pdsh-genders-2.35-150300.54.3
pdsh-machines-2.35-150300.54.3
pdsh-netgroup-2.35-150300.54.3
pdsh-slurm-2.35-150300.54.3
pdsh-slurm_22_05-2.35-150300.54.3
pdsh-slurm_23_02-2.35-150300.54.3
pdsh-slurm_24_11-2.35-150300.54.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150300.54.3
pdsh-dshgroup-2.35-150300.54.3
pdsh-genders-2.35-150300.54.3
pdsh-machines-2.35-150300.54.3
pdsh-netgroup-2.35-150300.54.3
pdsh-slurm-2.35-150300.54.3
pdsh-slurm_22_05-2.35-150300.54.3
pdsh-slurm_23_02-2.35-150300.54.3
pdsh-slurm_24_11-2.35-150300.54.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150500.46.6.3
pdsh-dshgroup-2.35-150500.46.6.3
pdsh-genders-2.35-150500.46.6.3
pdsh-machines-2.35-150500.46.6.3
pdsh-netgroup-2.35-150500.46.6.3
pdsh-slurm_24_11-2.35-150500.46.6.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150500.46.6.3
pdsh-dshgroup-2.35-150500.46.6.3
pdsh-genders-2.35-150500.46.6.3
pdsh-machines-2.35-150500.46.6.3
pdsh-netgroup-2.35-150500.46.6.3
pdsh-slurm_24_11-2.35-150500.46.6.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise Module for HPC 15 SP6
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150500.46.6.3
pdsh-dshgroup-2.35-150500.46.6.3
pdsh-genders-2.35-150500.46.6.3
pdsh-machines-2.35-150500.46.6.3
pdsh-netgroup-2.35-150500.46.6.3
pdsh-slurm_24_11-2.35-150500.46.6.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
pdsh-2.35-150500.46.6.3
pdsh-dshgroup-2.35-150500.46.6.3
pdsh-genders-2.35-150500.46.6.3
pdsh-machines-2.35-150500.46.6.3
pdsh-netgroup-2.35-150500.46.6.3
openSUSE Leap 15.6
libnss_slurm2_24_11-24.11.1-150300.7.5.1
libpmi0_24_11-24.11.1-150300.7.5.1
libslurm42-24.11.1-150300.7.5.1
pdsh-2.35-150500.46.6.3
pdsh-dshgroup-2.35-150500.46.6.3
pdsh-genders-2.35-150500.46.6.3
pdsh-machines-2.35-150500.46.6.3
pdsh-netgroup-2.35-150500.46.6.3
pdsh-slurm_22_05-2.35-150300.54.3
pdsh-slurm_23_02-2.35-150300.54.3
pdsh-slurm_24_11-2.35-150500.46.6.2
perl-slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-24.11.1-150300.7.5.1
slurm_24_11-auth-none-24.11.1-150300.7.5.1
slurm_24_11-config-24.11.1-150300.7.5.1
slurm_24_11-config-man-24.11.1-150300.7.5.1
slurm_24_11-cray-24.11.1-150300.7.5.1
slurm_24_11-devel-24.11.1-150300.7.5.1
slurm_24_11-doc-24.11.1-150300.7.5.1
slurm_24_11-hdf5-24.11.1-150300.7.5.1
slurm_24_11-lua-24.11.1-150300.7.5.1
slurm_24_11-munge-24.11.1-150300.7.5.1
slurm_24_11-node-24.11.1-150300.7.5.1
slurm_24_11-openlava-24.11.1-150300.7.5.1
slurm_24_11-pam_slurm-24.11.1-150300.7.5.1
slurm_24_11-plugins-24.11.1-150300.7.5.1
slurm_24_11-rest-24.11.1-150300.7.5.1
slurm_24_11-seff-24.11.1-150300.7.5.1
slurm_24_11-sjstat-24.11.1-150300.7.5.1
slurm_24_11-slurmdbd-24.11.1-150300.7.5.1
slurm_24_11-sql-24.11.1-150300.7.5.1
slurm_24_11-sview-24.11.1-150300.7.5.1
slurm_24_11-testsuite-24.11.1-150300.7.5.1
slurm_24_11-torque-24.11.1-150300.7.5.1
slurm_24_11-webdoc-24.11.1-150300.7.5.1
Ссылки
- Link for SUSE-FU-2025:0660-1
- E-Mail link for SUSE-FU-2025:0660-1
- SUSE Security Ratings
- SUSE Bug 1236722
- SUSE Bug 1236726
- SUSE Bug 1236928
- SUSE Bug 1236929
- SUSE CVE CVE-2024-42511 page
- SUSE CVE CVE-2024-48936 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libnss_slurm2_24_11-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libpmi0_24_11-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libslurm42-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pdsh-2.35-150300.54.3
Ссылки
- CVE-2024-42511
- SUSE Bug 1236726
Описание
SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with --stepmgr, or on systems that have globally enabled stepmgr via SlurmctldParameters=enable_stepmgr in their configuration.
Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libnss_slurm2_24_11-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libpmi0_24_11-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libslurm42-24.11.1-150300.7.5.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pdsh-2.35-150300.54.3
Ссылки
- CVE-2024-48936
- SUSE Bug 1236722