diff --git a/defaults/docker_images.yml b/defaults/docker_images.yml
index e2aeb7e..c11811f 100644
--- a/defaults/docker_images.yml
+++ b/defaults/docker_images.yml
@@ -51,7 +51,7 @@
     docker_image_keycloak_server: "${_param:mcp_docker_registry}/mirantis/external/jboss/keycloak:4.5.0.Final"
     docker_image_keycloak_proxy: "${_param:mcp_docker_registry}/mirantis/external/jboss/keycloak:3.4.2.Final"
     # CVP
-    docker_image_cvp_sanity_checks: "${_param:mcp_docker_registry}/mirantis/cvp/cvp-sanity-checks:2019.2.19"
+    docker_image_cvp_sanity_checks: "${_param:mcp_docker_registry}/mirantis/cvp/cvp-sanity-checks:2019.2.21"
     docker_image_cvp_tempest: "${_param:mcp_docker_registry}/mirantis/cicd/ci-tempest:${_param:openstack_version}"
     docker_image_cvp_shaker_checks: "${_param:mcp_docker_registry}/mirantis/cvp/cvp-shaker:2019.2.14"
     docker_image_cvp_rally: "${_param:mcp_docker_registry}/mirantis/cvp/cvp-rally:2019.2.5"
@@ -186,7 +186,7 @@
           name: cvp-shaker:2019.2.14
         - registry: ${_param:mcp_docker_registry}/mirantis/cvp
           target_registry: ${_param:default_local_mirrror_content:docker_client_registry_target_registry}/mirantis/cvp
-          name: cvp-sanity-checks:2019.2.19
+          name: cvp-sanity-checks:2019.2.21
         - registry: ${_param:mcp_docker_registry}/mirantis/external/xrally
           target_registry: ${_param:default_local_mirrror_content:docker_client_registry_target_registry}/mirantis/external/xrally
           name: xrally-openstack:0.11.2
diff --git a/jenkins/client/job/ceph/remove-node.yml b/jenkins/client/job/ceph/remove-node.yml
index 959cbc0..11b02d0 100644
--- a/jenkins/client/job/ceph/remove-node.yml
+++ b/jenkins/client/job/ceph/remove-node.yml
@@ -27,7 +27,7 @@
               default: salt
             HOST:
               type: string
-              description: HOST to remove from thecluster
+              description: HOST to remove from the cluster
             OSD:
               type: string
               description: Remove only those OSDs at HOST (comma-separated list or *). Leave empty if you going to remove a whole osd node. Only relevant with OSD node
diff --git a/linux/system/single/mcp.yml b/linux/system/single/mcp.yml
index 74afc08..496bc7e 100644
--- a/linux/system/single/mcp.yml
+++ b/linux/system/single/mcp.yml
@@ -26,6 +26,7 @@
           net.core.netdev_max_backlog: 261144
           net.ipv4.tcp_tw_reuse: 1
           kernel.panic: 60
+          kernel.unprivileged_userns_clone: 0
       cpu:
         governor: performance
       limit: