Merge pull request #48805 from tserong/wip-57997-quincy

quincy: ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)

diff --cc src/ceph-crash.in
index 08284fc9ebc7790e9c2e582d88143671af763e5d,74e50e2b253f36df7a601e0251755b14ad37df22..0e02837fadd4dde8abd66985b485836402e10a37
--- 1/src/ceph-crash.in
--- 2/src/ceph-crash.in
+++ b/src/ceph-crash.in
@@@ -101,13 -128,12 +128,16 @@@ def main()
          log.error("directory %s does not exist; please create" % postdir)
          time.sleep(30)
  
 +    log.info("pinging cluster to exercise our key")
 +    pr = subprocess.Popen(args=['timeout', '30', 'ceph', '-s'])
 +    pr.wait()
 +
      log.info("monitoring path %s, delay %ds" % (args.path, args.delay * 60.0))
      while True:
-         scrape_path(args.path)
+         try:
+             scrape_path(args.path)
+         except Exception as e:
+             log.error(f"Error scraping {args.path}: {e}")
          if args.delay == 0:
              sys.exit(0)
          time.sleep(args.delay * 60)