[TUTORIAL] [Nautilus] activating CEPH DASHBOARD

[virttom]

Hi all !

Even if I know that there is more than 1 way to do it, here is a way that worked for me. Please note that since it was on a POC I found it useful to use self signed certificate, don't do this on production cluster

apt install ceph-mgr-dashboard (on all service manager nodes)

ceph mgr module enable dashboard

ceph dashboard ac-user-create cephdash [password] administrator

ceph config-key set mgr/dashboard/server_addr ::

ceph dashboard create-self-signed-cert

ceph mgr module disable dashboard

ceph mgr module enable dashboard

systemctl restart ceph-mgr@[servername].service

Then https://[IP or FQDN]:8443 or http://[IP or FQDN]:8080

 

[Stoiko Ivanov]

Thanks for sharing your experience!
I marked the thread as TUTORIAL - thus others can spot it more easily

 

[Tmanok]

Awesome thank you so much for sharing!

 

[RokaKen]

Indeed! An alternative for those who don't require/desire SSL would be:

apt install ceph-mgr-dashboard

For each manager, listen only on a private IP/interface

ceph config set mgr mgr/dashboard/<nodeN>/server_addr <private_IP_N>

For each manager, perhaps listen on a non-standard port

ceph config set mgr mgr/dashboard/<nodeN>/server_port 8080

Enable without SSL and related certificate

ceph mgr module enable dashboard

ceph config set mgr mgr/dashboard/ssl false

Create privileged and unprivileged accounts

ceph dashboard ac-user-create myadmin <password> administrator

ceph dashboard ac-user-create myaudit <password> read-only

If you only use Ceph RBD, don't bother with other services

ceph dashboard feature disable cephfs iscsi mirroring rgw

Verify some settings

ceph dashboard ac-user-show

ceph dashboard ac-role-show

ceph dashboard feature status

It's a good tool in addition to the CLI and PVE Ceph monitoring tools. Enjoy!

 

[Deepen Dhulla]

If you get error : ceph dashboard ac-user-create input file not specified: please specify the file containing password/secret with "-i" option

use :
echo "mypasswordhere" > /root/cephdashpass.txt
ceph dashboard ac-user-create cephdash -i /root/cephdashpass.txt administrator

 

[Drallas]

This worked for me on Proxmox 8.

apt install ceph-mgr-dashboard (on all service manager nodes)

ceph mgr module enable dashboard
echo "thepassword" > /root/password
ceph dashboard ac-user-create cephdash -i ./password administrator --force
ceph config-key set mgr/dashboard/server_addr 127.0.0.1
ceph dashboard create-self-signed-cert
ceph mgr module disable dashboard
ceph mgr module enable dashboard
systemctl restart ceph-mgr@[hostname].service
systemctl status ceph-mgr@hostname.service
rm password

Dashboard is working.

Only seeing a "Module 'restful' has failed dependency: PyO3 modules may only be initialized once per interpreter process”

This seems Ceph / Python related.

 

[itNGO]

This worked for me on Proxmox 8.

apt install ceph-mgr-dashboard (on all service manager nodes)

ceph mgr module enable dashboard
echo "thepassword" > /root/password
ceph dashboard ac-user-create cephdash -i ./password administrator --force
ceph config-key set mgr/dashboard/server_addr 127.0.0.1
ceph dashboard create-self-signed-cert
ceph mgr module disable dashboard
ceph mgr module enable dashboard
systemctl restart ceph-mgr@[hostname].service
systemctl status ceph-mgr@hostname.service
rm password

Dashboard is working.

Only seeing a "Module 'restful' has failed dependency: PyO3 modules may only be initialized once per interpreter process”

This seems Ceph / Python related.

Does this use many additional resources?

 

[Drallas]

Does this use many additional resources?

Not at all, only see the ceph-mgr 'wake-up' while using the dashboard; otherwise it's at 0.3% CPU (AMD Ryzen 5 5625U) and 1% memory (out of 32GB). You could disable the service, only starting it when you need the dashboard.

 

[w00dmAn]

Hi there,

I've got this:
root@pve00:~# ceph-mgr module enable dashboard
2023-09-17T17:02:08.870+1200 7fa59c70e000 -1 auth: unable to find a keyring on /var/lib/ceph/mgr/ceph-admin/keyring: (2) No such file or directory
2023-09-17T17:02:08.870+1200 7fa59c70e000 -1 AuthRegistry(0x555d41aa0a40) no keyring found at /var/lib/ceph/mgr/ceph-admin/keyring, disabling cephx
2023-09-17T17:02:08.870+1200 7fa59c70e000 -1 auth: unable to find a keyring on /var/lib/ceph/mgr/ceph-admin/keyring: (2) No such file or directory
2023-09-17T17:02:08.870+1200 7fa59c70e000 -1 AuthRegistry(0x7ffff2e5d8c0) no keyring found at /var/lib/ceph/mgr/ceph-admin/keyring, disabling cephx
failed to fetch mon config (--no-mon-config to skip)

What to do?

I have got keyring:

root@pve00:/var/lib/ceph/mgr/ceph-pve00#


Thanks

 

[scyto]

root@pve00:~# ceph-mgr module enable dashboard

the command ceph-mgr and ceph mgr are not the same thing - use ceph mgr

note that for many of us even ceph mgr with or without --force is not working, so YMMV