From: Laura Flores <lflores@ibm.com>
Date: Tue, 23 Jun 2026 20:13:33 +0000 (-0500)
Subject: qa/tasks: change collectl source to download.ceph.com
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=5475faaddf4c1f598cee6fad3718dff8c3294e6e;p=ceph.git

qa/tasks: change collectl source to download.ceph.com

Getting it from our own service avoids exposing us to
supply chain attacks in our QA infrastructure.

Fixes: https://tracker.ceph.com/issues/76927
Signed-off-by: Laura Flores <lflores@ibm.com>
---

diff --git a/qa/tasks/cbt.py b/qa/tasks/cbt.py
index b85902b55769..a7b33a7f54de 100644
--- a/qa/tasks/cbt.py
+++ b/qa/tasks/cbt.py
@@ -84,7 +84,7 @@ class CBT(Task):
                 cbt_depends += ['pdsh', 'pdsh-rcmd-ssh']
 
             self.log.info('Installing collectl')
-            collectl_location = "https://sourceforge.net/projects/collectl/files/collectl/collectl-4.3.1/collectl-4.3.1.src.tar.gz/download"
+            collectl_location = "https://download.ceph.com/qa/collectl-4.3.1.src.tar.gz"
             self.first_mon.run(
                 args=[
                     'sudo', 'mkdir', 'collectl', run.Raw('&&'),