Cluster and QDevice

[jose-pr]

I am in the process of testing proxmox to replace some vmware esxi clusters. Everything looks good only thing missing is a vcenter like interface to centrally manage multiple clusters but i can live without it.

Do love that it is linux based and the configuration/build options it provides, was able to modify the iso to make it an automated pxe install and to add encryption during the installation (luks and zfs enc).

Last thing i am looking into is forming a cluster between two servers, the only other device to serve as a member is the router/switch which is a cisco one that can run containers, so would deploy the lowest resource/sized container that can support qdevice software on it. But one thing I dont like is that it the qdevice needs root access to the cluster members. I do trust my clusters members as they would be double encrypted but not the qdevice container I would deploy, to hold ssh root keys to my servers. Does the qdevice need root access to the nodes in the cluster if all its doing is acting as an arbiter, no need for vm/device access, only there to vote and provide input in who is online.

 

[UdoB]

From my mind: after installation a simple network connection is used to handle voting. For installation you need root access because you are manipulating fundamental cluster internals - it would be bad if this would be possible without root access...

 

[bbgeek17]

@UdoB is correct, the Corosync protocol, which is used for quorum vote, does not require SSH connectivity between qdevice and full cluster members.

---

Blockbridge : Ultra low latency all-NVME shared storage for Proxmox - https://www.blockbridge.com/proxmox

 

[jose-pr]

That looks better I should be able then to temporarily add the container root key to the authorized keys of the nodes for the install and then remove it. So container nevers need to know password.