Update Rocky 10.2 repositories and host images

priteau · priteau · commit c6604568486d · 2026-07-15T10:50:57.000+02:00
Rocky 10.2 repositories have been updated to bring in the latest kernel version, required to address recent security disclosures: * CVE-2026-43499 ('GhostLock') Rocky 10.2 host images have been rebuilt using this kernel version. DOCA OFED is not yet supported in Rocky Linux 10.2. Consider setting `stackhpc_pulp_repo_rocky_10_minor_version` to `'1'` if using OFED is mandatory.
diff --git a/etc/kayobe/pulp-host-image-versions.yml b/etc/kayobe/pulp-host-image-versions.yml
@@ -3,6 +3,6 @@
 # These images must be in SMS, since they are used by our AIO CI runners
 stackhpc_rocky_9_overcloud_host_image_version: 2025.1-20260715T072311
 stackhpc_rocky_9_overcloud_host_image_version_aarch64: 2025.1-20260715T072311
-stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260714T094220
-stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260714T094220
+stackhpc_rocky_10_overcloud_host_image_version: 2025.1-20260715T072311
+stackhpc_rocky_10_overcloud_host_image_version_aarch64: 2025.1-20260715T072311
 stackhpc_ubuntu_noble_overcloud_host_image_version: 2025.1-20260706T191822
diff --git a/etc/kayobe/pulp-repo-versions.yml b/etc/kayobe/pulp-repo-versions.yml
@@ -80,15 +80,15 @@ stackhpc_pulp_repo_rocky_10_1_highavailability_version: 20260506T223941
 stackhpc_pulp_repo_rocky_10_1_security_aarch64_version: 20260510T225242
 stackhpc_pulp_repo_rocky_10_1_security_source_version: 20260510T222658
 stackhpc_pulp_repo_rocky_10_1_security_version: 20260510T223302
-stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260713T010231
-stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260713T002630
-stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260713T002658
-stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260713T230505
-stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260713T224945
-stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260713T230445
-stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260713T010231
+stackhpc_pulp_repo_rocky_10_2_appstream_aarch64_version: 20260714T230725
+stackhpc_pulp_repo_rocky_10_2_appstream_source_version: 20260714T224455
+stackhpc_pulp_repo_rocky_10_2_appstream_version: 20260714T223154
+stackhpc_pulp_repo_rocky_10_2_baseos_aarch64_version: 20260714T230725
+stackhpc_pulp_repo_rocky_10_2_baseos_source_version: 20260714T224455
+stackhpc_pulp_repo_rocky_10_2_baseos_version: 20260714T225549
+stackhpc_pulp_repo_rocky_10_2_crb_aarch64_version: 20260714T230725
 stackhpc_pulp_repo_rocky_10_2_crb_source_version: 20260710T224916
-stackhpc_pulp_repo_rocky_10_2_crb_version: 20260713T223704
+stackhpc_pulp_repo_rocky_10_2_crb_version: 20260714T223154
 stackhpc_pulp_repo_rocky_10_2_extras_aarch64_version: 20260602T012631
 stackhpc_pulp_repo_rocky_10_2_extras_source_version: 20260602T004048
 stackhpc_pulp_repo_rocky_10_2_extras_version: 20260602T001113
diff --git a/releasenotes/notes/rl102-repo-bump-ghostlock-0f42f9e67105b676.yaml b/releasenotes/notes/rl102-repo-bump-ghostlock-0f42f9e67105b676.yaml
@@ -0,0 +1,5 @@
+---
+security:
+  - |
+    The latest Rocky 10.2 kernel (``kernel-6.12.0-211.33.1.el10_2``) is now
+    available, which addresses CVE-2026-43499 ('GhostLock').
