ceph 0.44+ and leveldb

[Laszlo Boszormenyi <gcs@xxxxxxxxx>]

Hi Ceph developers,

It seems you included leveldb in the source of Ceph. It has two serious
problems.
First, security. Now leveldb can't be updated to a newer version, only
with Ceph. Worst, security teams may not notice leveldb is embedded into
Ceph; meaning the latter would remain unfixed and vulnerable.
Second, as it doesn't contain fixes for various architectures that a
separately packaged leveldb has, it can make Ceph fail to build on
several architectures where leveldb is built otherwise.

See the Debian build list for example:
https://buildd.debian.org/status/package.php?p=ceph+leveldb&suite=sid

Also, leveldb doesn't work on all architectures. Making Ceph less
portable, which means less users can reach it.
See the build failures for ia64, mips, powerpc and s390[x]:
-- cut --
from ./db/builder.cc:7:
./port/atomic_pointer.h:133:2: error: #error Please implement AtomicPointer for this platform.
make[5]: *** [builder.o] Error 1
make[5]: *** Waiting for unfinished jobs....
make[4]: *** [all] Error 2
make[5]: Leaving directory `/build/buildd-ceph_0.44.1-1-ia64-2UAFHZ/ceph-0.44.1/src/leveldb'
-- cut --

Please re-evaluate the usage of leveldb.

Regards,
Laszlo/GCS

--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html