CentOS Stream 9
Sponsored Link

Ceph Quincy : Add or Remove Monitors2022/06/14

 
This is how to add or remove Monitor Daemons from existing Cluster.
                                         |
        +--------------------+           |           +----------------------+
        |   [dlp.srv.world]  |10.0.0.30  |  10.0.0.31|    [www.srv.world]   |
        |     Ceph Client    +-----------+-----------+        RADOSGW       |
        |                    |           |           |                      |
        +--------------------+           |           +----------------------+
            +----------------------------+----------------------------+
            |                            |                            |
            |10.0.0.51                   |10.0.0.52                   |10.0.0.53 
+-----------+-----------+    +-----------+-----------+    +-----------+-----------+
|   [node01.srv.world]  |    |   [node02.srv.world]  |    |   [node03.srv.world]  |
|     Object Storage    +----+     Object Storage    +----+     Object Storage    |
|     Monitor Daemon    |    |                       |    |                       |
|     Manager Daemon    |    |                       |    |                       |
+-----------------------+    +-----------------------+    +-----------------------+

[1] For example, Add a [node04] node for Monitor Daemon on Admin Node.
# transfer public key

[root@node01 ~]#
ssh-copy-id node04

# if Firewalld is running, allow service

[root@node01 ~]#
ssh node04 "firewall-cmd --add-service=ceph-mon; firewall-cmd --runtime-to-permanent"

# install required packages

[root@node01 ~]#
ssh node04 "dnf -y install centos-release-ceph-quincy; dnf -y install ceph"
# configure monitor map

[root@node01 ~]#
FSID=$(grep "^fsid" /etc/ceph/ceph.conf | awk {'print $NF'})

[root@node01 ~]#
NODENAME="node04"

[root@node01 ~]#
NODEIP="10.0.0.54"

[root@node01 ~]#
monmaptool --add $NODENAME $NODEIP --fsid $FSID /etc/ceph/monmap

monmaptool: monmap file /etc/ceph/monmap
monmaptool: set fsid to fe4fb100-abec-488d-93fe-71b7ae7d9b81
monmaptool: writing epoch 0 to /etc/ceph/monmap (2 monitors)

# configure Monitor Daemin

[root@node01 ~]#
scp /etc/ceph/ceph.conf node04:/etc/ceph/ceph.conf

[root@node01 ~]#
scp /etc/ceph/ceph.mon.keyring node04:/etc/ceph

[root@node01 ~]#
scp /etc/ceph/monmap node04:/etc/ceph

[root@node01 ~]#
ssh node04 "ceph-mon --cluster ceph --mkfs -i node04 --monmap /etc/ceph/monmap --keyring /etc/ceph/ceph.mon.keyring"

[root@node01 ~]#
ssh node04 "chown -R ceph. /etc/ceph /var/lib/ceph/mon"

[root@node01 ~]#
ssh node04 "ceph auth get mon. -o /etc/ceph/ceph.mon.keyring"

[root@node01 ~]#
ssh node04 "systemctl enable --now ceph-mon@node04"

[root@node01 ~]#
ssh node04 "ceph mon enable-msgr2"
[root@node01 ~]#
ceph -s

  cluster:
    id:     fe4fb100-abec-488d-93fe-71b7ae7d9b81
    health: HEALTH_OK

  services:
    mon: 2 daemons, quorum node01,node04 (age 106s)
    mgr: node01(active, since 71m)
    mds: 1/1 daemons up
    osd: 3 osds: 3 up (since 5m), 3 in (since 10m)
    rgw: 1 daemon active (1 hosts, 1 zones)

  data:
    volumes: 1/1 healthy
    pools:   8 pools, 225 pgs
    objects: 219 objects, 464 KiB
    usage:   150 MiB used, 480 GiB / 480 GiB avail
    pgs:     225 active+clean

  io:
    client:   7.6 KiB/s rd, 0 B/s wr, 7 op/s rd, 5 op/s wr
[2] On the new Monitor Daemin Node, If SELinux is enabled, change policy.
[root@node04 ~]#
vi cephmon.te
# create new

module cephmon 1.0;

require {
        type ceph_t;
        type ptmx_t;
        type initrc_var_run_t;
        type sudo_exec_t;
        type chkpwd_exec_t;
        type shadow_t;
        class file { execute execute_no_trans lock getattr map open read };
        class capability { audit_write sys_resource };
        class process setrlimit;
        class netlink_audit_socket { create nlmsg_relay };
        class chr_file getattr;
}

#============= ceph_t ==============
allow ceph_t initrc_var_run_t:file { lock open read };
allow ceph_t self:capability { audit_write sys_resource };
allow ceph_t self:netlink_audit_socket { create nlmsg_relay };
allow ceph_t self:process setrlimit;
allow ceph_t sudo_exec_t:file { execute execute_no_trans open read map };
allow ceph_t ptmx_t:chr_file getattr;
allow ceph_t chkpwd_exec_t:file { execute execute_no_trans open read map };
allow ceph_t shadow_t:file { getattr open read };

[root@node04 ~]#
checkmodule -m -M -o cephmon.mod cephmon.te

[root@node04 ~]#
semodule_package --outfile cephmon.pp --module cephmon.mod

[root@node04 ~]#
semodule -i cephmon.pp

[3] To remove a Monitor Daemon from existing Cluster, run commands like follows.
For example, Remove [node04] node.
[root@node01 ~]#
ceph -s

  cluster:
    id:     fe4fb100-abec-488d-93fe-71b7ae7d9b81
    health: HEALTH_OK

  services:
    mon: 2 daemons, quorum node01,node04 (age 2m)
    mgr: node01(active, since 72m)
    mds: 1/1 daemons up
    osd: 3 osds: 3 up (since 6m), 3 in (since 11m)
    rgw: 1 daemon active (1 hosts, 1 zones)

  data:
    volumes: 1/1 healthy
    pools:   8 pools, 225 pgs
    objects: 219 objects, 464 KiB
    usage:   150 MiB used, 480 GiB / 480 GiB avail
    pgs:     225 active+clean

  io:
    client:   7.1 KiB/s rd, 0 B/s wr, 7 op/s rd, 4 op/s wr

# remove Monitor Daemon

[root@node01 ~]#
ceph mon remove node04

removing mon.node04 at [v2:10.0.0.54:3300/0,v1:10.0.0.54:6789/0], there will be 1 monitors
# disable monitor daemon

[root@node01 ~]#
ssh node04 "systemctl disable --now ceph-mon@node04.service"

[root@node01 ~]#
ceph -s

  cluster:
    id:     fe4fb100-abec-488d-93fe-71b7ae7d9b81
    health: HEALTH_OK

  services:
    mon: 1 daemons, quorum node01 (age 1.92858s)
    mgr: node01(active, since 73m)
    mds: 1/1 daemons up
    osd: 3 osds: 3 up (since 7m), 3 in (since 12m)
    rgw: 1 daemon active (1 hosts, 1 zones)

  data:
    volumes: 1/1 healthy
    pools:   8 pools, 225 pgs
    objects: 219 objects, 464 KiB
    usage:   150 MiB used, 480 GiB / 480 GiB avail
    pgs:     225 active+clean
Matched Content