Setup pcs cluster lab on kvm libvirt virtualization

-
~~~~~ Setup pcs cluster lab on kvm libvirt ~~~~~~~~~
----------------------------------------------------
host - kvm.mylab.local
guest- hanode1.mylab.local    | 192.168.122.83
guest- hanode2.mylab.local    | 192.168.122.84
~~~~~~~~~~~~~On KVM Host~~~~~~~~~~~~~
yum install fence-virt fence-virtd fence-virtd-libvirt fence-virtd-multicast fence-virtd-serial

 mkdir /etc/cluster
 dd if=/dev/urandom of=/etc/cluster/fence_xvm.key bs=4k count=1

 -- hit enter for all in above

 firewall-cmd --permanent --add-service=fence_virt
 firewall-cmd --permanent --add-port=1229/udp
 firewall-cmd --permanent --add-port=1229/tcp
 firewall-cmd --reload

 systemctl start fence_virtd.service
 systemctl enable fence_virtd.service
 systemctl status fence_virtd.service
  fence_virtd -c

 ssh [email protected] mkdir /etc/cluster
 ssh [email protected] mkdir /etc/cluster
 scp /etc/cluster/fence_xvm.key [email protected]:/etc/cluster/
 scp /etc/cluster/fence_xvm.key [email protected]:/etc/cluster/

 fence_xvm -o list
 ~~~~~~~~~~~on both nodes ~~~~~~~~~~~~~~~
yum install pcs pacemaker corosync fence-agents-virsh fence-virt \
pacemaker-remote fence-agents-all lvm2-cluster resource-agents \
psmisc policycoreutils-python gfs2-utils -y
echo "centos" | passwd hacluster --stdin
systemctl start pcsd.service; systemctl enable pcsd.service
firewall-cmd --permanent --add-service=high-availability
firewall-cmd --permanent --add-port=1229/tcp
firewall-cmd --reload

fence_xvm -o off -H hanode2  ## to check fencing
----Only if selinux was enabled during pcs setup
ls -Z /etc/cluster/fence_xvm.key
selinux_restorecon /etc/cluster/fence_xvm.key

 ~~~~~~~~~~~~~on any one of node~~~~~~~~~~~~

 pcs cluster auth hanode1.mylab.local hanode2.mylab.local -u hacluster -p centos
 pcs cluster setup --start --name webcluster hanode1.mylab.local hanode2.mylab.local
 pcs cluster enable --all
 pcs status
 crm_mon -r1
 pcs cluster status

 -- setup fencing part
 pcs stonith create fencedev1 fence_xvm pcmk_host_map="hanode1.mylab.local:hanode1 hanode2.mylab.local:hanode2" key_file=/etc/cluster/fence_xvm.key
 pcs stonith create fencedev2 fence_xvm pcmk_host_map="hanode1.mylab.local:hanode1 hanode2.mylab.local:hanode2" key_file=/etc/cluster/fence_xvm.key
 pcs constraint location fencedev1 prefers hanode1.mylab.local
 pcs constraint location fencedev2 prefers hanode2.mylab.local
 pcs constraint list
 pcs stonith
 pcs status
 --to check
 pcs stonith fence hanode2
 pcs stonith show --full
 pcs property --all | grep -i stonith

Comments

Post a Comment

Popular posts from this blog

Running web ssh client on port 443 /80 with nginx as reverse proxy

-
Package used         : shellinabox , nginx Repository used        : epel-release Linux distro used    : Centos 7.6 nginx reverse proxy server ip : 192.168.1.65 shellinabox web ssh server ip : 192.168.1.111 login to web ssh server first install epel-repo # yum install epel-release -y install shellinabox package # yum -y install shellinabox start and enable shellinaboxd service # systemctl enable shellinaboxd && systemctl start shellinaboxd By default shellinaboxd service starts with ssl port 4200 for us to run this in a reverse proxy environment need to make this as insecure hence the encryption will be done by nginx to end user. edit file /etc/sysconfig/shellinabox  like bellow- USER=shellinabox GROUP=shellinabox CERTDIR=/var/lib/shellinabox PORT=4200 OPTS="--disable-ssl-menu -s /:LOGIN" OPTS="-t -s /:SSH:192.168.1.111" save file exit and restart service # systemctl restart shellinaboxd Now open firewall for listening port 4200 from nginx proxy server only #
Read more

Running cockpit behind nginx reverse proxy with nginx ssl and cockpit non ssl

-
Domain for web access to cockpit : cockpit.mylab.local cockpit server ip : 192.168.1.61 nginx server ip   : 192.168.1.65 Linux distro using is Centos 7.6 Login to cockpit server Create a file [root@repo ~]# vim /etc/cockpit/cockpit.conf content will be like [WebService] Origins = https://cockpit.mylab.local wss://cockpit.mylab.local ProtocolHeader = X-Forwarded-Proto AllowUnencrypted = true save and restart cockpit # systemctl restart cockpit now  login to your nginx webserver and install nginx # yum install nginx -y create a new file vim /etc/nginx/conf.d/cockpit.conf paste content as bellow server {     listen         80;     listen         443 ssl http2;     server_name    cockpit.mylab.local;     ssl_certificate /etc/ssl/certs/cockpit-selfsigned.crt;     ssl_certificate_key  /etc/ssl/private/cockpit-selfsigned.key;     location / {         proxy_pass http://192.168.1.61:9090;         proxy_set_header Host $host;         proxy_http_version 1.1;
Read more

Setup VOD streaming server with nginx using RTMP on Ubuntu 18.04

-
Install required packages for source code nginx build # apt-get install -y build-essential ca-certificates wget curl libpcre3 libpcre3-dev autoconf unzip automake libtool tar git libssl-dev zlib1g-dev uuid-dev lsb-release vim htop sysstat ufw fail2ban makepasswd libgd-dev libgeoip-dev -y create a directory # mkdir /usr/local/src/nginx/ # cd /usr/local/src/nginx/ download and extract nginx tar # wget -qO- http://nginx.org/download/nginx-1.14.2.tar.gz | tar zxf - clone nginx rtmp module # git clone https://github.com/arut/nginx-rtmp-module Download other modules - PCRE version 8.42 # wget https://ftp.pcre.org/pub/pcre/pcre-8.42.tar.gz && tar xzvf pcre-8.42.tar.gz - zlib version 1.2.11 # wget https://www.zlib.net/zlib-1.2.11.tar.gz && tar xzvf zlib-1.2.11.tar.gz - OpenSSL version 1.1.0h # wget https://www.openssl.org/source/openssl-1.1.0h.tar.gz && tar xzvf openssl-1.1.0h.tar.gz # cd nginx-1.14.2/ configure  nginx with modules and options # ./configure --add-modu
Read more