From 5475faaddf4c1f598cee6fad3718dff8c3294e6e Mon Sep 17 00:00:00 2001 From: Laura Flores Date: Tue, 23 Jun 2026 15:13:33 -0500 Subject: [PATCH] qa/tasks: change collectl source to download.ceph.com Getting it from our own service avoids exposing us to supply chain attacks in our QA infrastructure. Fixes: https://tracker.ceph.com/issues/76927 Signed-off-by: Laura Flores --- qa/tasks/cbt.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qa/tasks/cbt.py b/qa/tasks/cbt.py index b85902b55769..a7b33a7f54de 100644 --- a/qa/tasks/cbt.py +++ b/qa/tasks/cbt.py @@ -84,7 +84,7 @@ class CBT(Task): cbt_depends += ['pdsh', 'pdsh-rcmd-ssh'] self.log.info('Installing collectl') - collectl_location = "https://sourceforge.net/projects/collectl/files/collectl/collectl-4.3.1/collectl-4.3.1.src.tar.gz/download" + collectl_location = "https://download.ceph.com/qa/collectl-4.3.1.src.tar.gz" self.first_mon.run( args=[ 'sudo', 'mkdir', 'collectl', run.Raw('&&'), -- 2.47.3