Error when try to joined cluster

[IWIOS]

Hi,

I try to create a cluster between PRX 6 and 7.

I joined the cluster with node 2. I can see the node in Datacenter, but when I go on node 2 I have this message :
tls_process_server_certificate: certificate verify failed (596)


This is the result of pvecm status on node 2:

root@prx1-iwios:~# pvecm status
Cluster information
-------------------
Name: HOMELAB
Config Version: 2
Transport: knet
Secure auth: on

Quorum information
------------------
Date: Fri Dec 3 21:13:17 2021
Quorum provider: corosync_votequorum
Nodes: 1
Node ID: 0x00000002
Ring ID: 2.5
Quorate: No

Votequorum information
----------------------
Expected votes: 2
Highest expected: 2
Total votes: 1
Quorum: 2 Activity blocked
Flags:

Membership information
----------------------
Nodeid Votes Name
0x00000002 1 10.0.24.5 (local)


pvecm status on node 1

root@prx1:~# pvecm status
Cluster information
-------------------
Name: HOMELAB
Config Version: 2
Transport: knet
Secure auth: on

Quorum information
------------------
Date: Fri Dec 3 21:19:04 2021
Quorum provider: corosync_votequorum
Nodes: 1
Node ID: 0x00000001
Ring ID: 1.5
Quorate: No

Votequorum information
----------------------
Expected votes: 2
Highest expected: 2
Total votes: 1
Quorum: 2 Activity blocked
Flags:

Membership information
----------------------
Nodeid Votes Name
0x00000001 1 10.0.24.2 (local)


On node 2 :

grep pve-ssl /var/log/syslog

prx1-iwios pveproxy[80731]: /etc/pve/local/pve-ssl.key: failed to load local private key (key_file or key) at /usr/share/perl5/PVE/APIServer/AnyEvent.pm line 1904

I have try many thing but without success.

Someone to help me ?

Thank you

 

[degan]

Normaly that indicates a problem with corosync. Can you plese post the output of "corosync-cfgtool -s" from both hosts?

 

[IWIOS]

Node 1 :
Local node ID 1, transport knet
LINK ID 0
addr = 10.0.24.2
status:
nodeid: 1: localhost
nodeid: 2: disconnected

Node 2 :

Local node ID 2, transport knet
LINK ID 0 udp
addr = 10.0.24.5
status:
nodeid: 1: disconnected
nodeid: 2: localhost

 

[degan]

Can you reach the nodes per ping?

 

[IWIOS]

Yes with IP address or with FQDN

 

[degan]

Yes with IP address or with FQDN

Also the 10.0.24.X adresses?

 

[IWIOS]

Also the 10.0.24.X adresses?

Yes i can ping from 10.0.24.2 to 10.0.24.5
From 10.0.24.5 to 10.0.24.2

 

[degan]

Can you try to restart the corosync service on both hosts

 

[IWIOS]

Can you try to restart the corosync service on both hosts

Nothing change :/