Containers are temporarily disabled on all compute nodes inside the NAS secure enclave. This is due to a vulnerability that was discovered on all systems that use containers and run Lustre 2.12 and later. A Lustre patch that addresses the vulnerability has been installed on the PFEs, and containers have been re-enabled on PFEs.

NAS staff have been testing a new compute image that includes the Lustre patch. When testing is complete and the image is vetted, it will be rolled out to compute nodes and containers will be re-enabled.

We apologize for any impact this may have on your work. Please contact us if you have any questions or concerns.

Original Announcement:

Containers are temporarily disabled on all service nodes and compute nodes inside the NAS secure enclave, due to a recently discovered vulnerability.

We do not yet have an estimated time to complete work to resolve the vulnerability. We will send an email notification to let you know when containers will be re-enabled.

We apologize for any impact this may have on your work. If you have any questions or need more information, please contact the Control Room at (800) 331-8737, (650) 604-4444, or support@nas.nasa.gov.