Hi,
Trying to set up QDevice for a 2-node PVE cluster.
I've installed
When trying to run the configuration from one of the PVE nodes, it fails;
The install log from QDevice on the Raspberry Pi;
qnetd service running on the Raspberry Pi:
Trying to set up QDevice for a 2-node PVE cluster.
I've installed
corosync-qnetd
on a Raspberry Pi, and corosync-qdevice
on both PVE nodes.When trying to run the configuration from one of the PVE nodes, it fails;
Code:
root@gridlock:~# pvecm qdevice setup 2001:123:123:123::123
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: WARNING: All keys were skipped because they already exist on the remote system.
(if you think this is a mistake, you may want to use -f option)
INFO: initializing qnetd server
Certificate database (/etc/corosync/qnetd/nssdb) already exists. Delete it to initialize new db
INFO: copying CA cert and initializing on all nodes
Certificate database already exists. Delete it to continue
Host key verification failed.
INFO: generating cert request
Certificate database doesn't exists. Use /usr/sbin/corosync-qdevice-net-certutil -i to create it
command 'corosync-qdevice-net-certutil -r -n pve-cluster1' failed: exit code 1
The install log from QDevice on the Raspberry Pi;
Code:
Preparing to unpack .../corosync-qnetd_3.0.0-4+deb10u1_armhf.deb ...
Unpacking corosync-qnetd (3.0.0-4+deb10u1) ...
Setting up corosync-qnetd (3.0.0-4+deb10u1) ...
Creating /etc/corosync/qnetd/nssdb
Creating new key and cert db
password file contains no data
Creating new noise file /etc/corosync/qnetd/nssdb/noise.txt
Creating new CA
Generating key. This may take a few moments...
Is this a CA certificate [y/N]?
Enter the path length constraint, enter to skip [<0 for unlimited path]: > Is this a critical extension [y/N]?
Generating key. This may take a few moments...
Notice: Trust flag u is set automatically if the private key is present.
QNetd CA certificate is exported as /etc/corosync/qnetd/nssdb/qnetd-cacert.crt
Created symlink /etc/systemd/system/multi-user.target.wants/corosync-qnetd.service → /lib/systemd/system/corosync-qnetd.service.
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for systemd (241-7~deb10u5+rpi1) ...
qnetd service running on the Raspberry Pi:
Code:
root@gumpii:~# systemctl status corosync-qnetd
● corosync-qnetd.service - Corosync Qdevice Network daemon
Loaded: loaded (/lib/systemd/system/corosync-qnetd.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2021-05-05 02:13:35 CEST; 32min ago
Docs: man:corosync-qnetd
Main PID: 22326 (corosync-qnetd)
Tasks: 1 (limit: 2063)
CGroup: /system.slice/corosync-qnetd.service
└─22326 /usr/bin/corosync-qnetd -f
May 05 02:13:35 gumpii systemd[1]: Starting Corosync Qdevice Network daemon...
May 05 02:13:35 gumpii systemd[1]: Started Corosync Qdevice Network daemon.
Last edited: