[Pacemaker] RHEL 6.3 + fence_vmware_soap + esx 5.1

Mistina Michal Michal.Mistina at virte.sk
Mon Jul 15 10:56:24 UTC 2013


Hi Andrew.

Here is the ommited /var/log/messages with stonigh-ng sections.

Jul 15 09:53:38 PCMK1 stonith-ng[1538]:   notice: stonith_device_action:
Device vm-fence-pcmk2 not found
Jul 15 09:53:38 PCMK1 stonith-ng[1538]:     info: stonith_command: Processed
st_execute from lrmd: rc=-12
Jul 15 09:53:38 PCMK1 crmd[1542]:     info: process_lrm_event: LRM operation
vm-fence-pcmk2_monitor_0 (call=11, rc=7, cib-update=21, confirmed=true) not
running
Jul 15 09:53:38 PCMK1 lrmd: [1539]: info: rsc:vm-fence-pcmk2:12: start
Jul 15 09:53:38 PCMK1 stonith-ng[1538]:     info: stonith_device_register:
Added 'vm-fence-pcmk2' to the device list (1 active devices)
Jul 15 09:53:38 PCMK1 stonith-ng[1538]:     info: stonith_command: Processed
st_device_register from lrmd: rc=0
Jul 15 09:53:38 PCMK1 stonith-ng[1538]:     info: stonith_command: Processed
st_execute from lrmd: rc=-1
Jul 15 09:54:13 PCMK1 lrmd: [1539]: WARN: vm-fence-pcmk2:start process (PID
3332) timed out (try 1).  Killing with signal SIGTERM (15).
Jul 15 09:54:18 PCMK1 lrmd: [1539]: WARN: vm-fence-pcmk2:start process (PID
3332) timed out (try 2).  Killing with signal SIGKILL (9).
Jul 15 09:54:18 PCMK1 lrmd: [1539]: WARN: operation start[12] on
stonith::fence_vmware_soap::vm-fence-pcmk2 for client 1542, its parameters:
passwd=[password] shell_timeout=[20] ssl=[1] login=[administrator]
action=[reboot] crm_feature_set=[3.0.6] retry_on=[10] ipaddr=[x.x.x.x]
port=[T1-PCMK2] login_timeout=[15] CRM_meta_timeout=[20000] : pid [3332]
timed out
Jul 15 09:54:18 PCMK1 crmd[1542]:    error: process_lrm_event: LRM operation
vm-fence-pcmk2_start_0 (12) Timed Out (timeout=20000ms)
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_ais_dispatch: Update
relayed from pcmk2
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_trigger_update: Sending
flush op to all hosts for: fail-count-vm-fence-pcmk2 (INFINITY)
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_perform_update: Sent
update 24: fail-count-vm-fence-pcmk2=INFINITY
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_ais_dispatch: Update
relayed from pcmk2
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_trigger_update: Sending
flush op to all hosts for: last-failure-vm-fence-pcmk2 (1373874858)
Jul 15 09:54:18 PCMK1 attrd[1540]:   notice: attrd_perform_update: Sent
update 27: last-failure-vm-fence-pcmk2=1373874858
Jul 15 09:54:21 PCMK1 lrmd: [1539]: info: rsc:vm-fence-pcmk2:13: stop
Jul 15 09:54:21 PCMK1 stonith-ng[1538]:     info: stonith_device_remove:
Removed 'vm-fence-pcmk2' from the device list (0 active devices)
Jul 15 09:54:21 PCMK1 stonith-ng[1538]:     info: stonith_command: Processed
st_device_remove from lrmd: rc=0
Jul 15 09:54:21 PCMK1 crmd[1542]:     info: process_lrm_event: LRM operation
vm-fence-pcmk2_stop_0 (call=13, rc=0, cib-update=23, confirmed=true) ok

What does this output mean?

Best regards,
Michal Mistina

-----Original Message-----
From: Andrew Beekhof [mailto:andrew at beekhof.net] 
Sent: Monday, July 15, 2013 3:06 AM
To: The Pacemaker cluster resource manager
Subject: Re: [Pacemaker] RHEL 6.3 + fence_vmware_soap + esx 5.1


On 13/07/2013, at 10:05 PM, Mistina Michal <Michal.Mistina at virte.sk> wrote:

> Hi,
> Does somebody know how to set up fence_vmware_soap correctly so that it
will start fencing vmware machine in the esx 5.1?
>  
> My problem is the fence_vmware_soap resource agent for stonith timed out.
Don't know why.

Nothing in the stonith-ng logs?

>  
> [root at pcmk1 ~]# crm_verify -L -V
> warning: unpack_rsc_op:        Processing failed op
vm-fence-pcmk2_last_failure_0 on pcmk1: unknown exec error (-2)
> warning: unpack_rsc_op:        Processing failed op
vm-fence-pcmk1_last_failure_0 on pcmk2: unknown exec error (-2)
> warning: common_apply_stickiness:      Forcing vm-fence-pcmk2 away from
pcmk1 after 1000000 failures (max=1000000)
> warning: common_apply_stickiness:      Forcing vm-fence-pcmk1 away from
pcmk2 after 1000000 failures (max=1000000)
>  
> I have 2 node cluster. If I tried to manually reboot vmware machine by
calling fence_vmware_soap it worked.
> [root at pcmk1 ~]# fence_vmware_soap -a x.x.x.x -l administrator -p 
> password -n "pcmk2" -o reboot -z
>  
> My settings are.
> [root at pcmk1 ~]# stonith_admin -M -a fence_vmware_soap <resource-agent 
> name="fence_vmware_soap" shortdesc="Fence agent for VMWare over SOAP API">
>   <longdesc>fence_vmware_soap is an I/O Fencing agent which can be used
with the virtual machines managed by VMWare products that have SOAP API
v4.1+.
> .P
> Name of virtual machine (-n / port) has to be used in inventory path
format (e.g. /datacenter/vm/Discovered virtual machine/myMachine). In the
cases when name of yours VM is unique you can use it instead. Alternatively
you can always use UUID (-U / uuid) to access virtual machine.</longdesc>
>   <vendor-url>http://www.vmware.com</vendor-url>
>   <parameters>
>     <parameter name="action" unique="0" required="1">
>       <getopt mixed="-o, --action=<action>"/>
>       <content type="string" default="reboot"/>
>       <shortdesc lang="en">Fencing Action</shortdesc>
>     </parameter>
>     <parameter name="ipaddr" unique="0" required="1">
>       <getopt mixed="-a, --ip=<ip>"/>
>       <content type="string"/>
>       <shortdesc lang="en">IP Address or Hostname</shortdesc>
>     </parameter>
>     <parameter name="login" unique="0" required="1">
>       <getopt mixed="-l, --username=<name>"/>
>       <content type="string"/>
>       <shortdesc lang="en">Login Name</shortdesc>
>     </parameter>
>     <parameter name="passwd" unique="0" required="0">
>       <getopt mixed="-p, --password=<password>"/>
>       <content type="string"/>
>       <shortdesc lang="en">Login password or passphrase</shortdesc>
>     </parameter>
>     <parameter name="passwd_script" unique="0" required="0">
>       <getopt mixed="-S, --password-script=<script>"/>
>       <content type="string"/>
>       <shortdesc lang="en">Script to retrieve password</shortdesc>
>     </parameter>
>     <parameter name="ssl" unique="0" required="0">
>       <getopt mixed="-z, --ssl"/>
>       <content type="boolean"/>
>       <shortdesc lang="en">SSL connection</shortdesc>
>     </parameter>
>     <parameter name="port" unique="0" required="0">
>       <getopt mixed="-n, --plug=<id>"/>
>       <content type="string"/>
>       <shortdesc lang="en">Physical plug number or name of virtual
machine</shortdesc>
>     </parameter>
>     <parameter name="uuid" unique="0" required="0">
>       <getopt mixed="-U, --uuid"/>
>       <content type="string"/>
>       <shortdesc lang="en">The UUID of the virtual machine to
fence.</shortdesc>
>     </parameter>
>     <parameter name="ipport" unique="0" required="0">
>       <getopt mixed="-u, --ipport=<port>"/>
>       <content type="string"/>
>       <shortdesc lang="en">TCP port to use for connection with
device</shortdesc>
>     </parameter>
>     <parameter name="verbose" unique="0" required="0">
>       <getopt mixed="-v, --verbose"/>
>       <content type="boolean"/>
>       <shortdesc lang="en">Verbose mode</shortdesc>
>     </parameter>
>     <parameter name="debug" unique="0" required="0">
>       <getopt mixed="-D, --debug-file=<debugfile>"/>
>       <content type="string"/>
>       <shortdesc lang="en">Write debug information to given
file</shortdesc>
>     </parameter>
>     <parameter name="version" unique="0" required="0">
>       <getopt mixed="-V, --version"/>
>       <content type="boolean"/>
>       <shortdesc lang="en">Display version information and
exit</shortdesc>
>     </parameter>
>     <parameter name="help" unique="0" required="0">
>       <getopt mixed="-h, --help"/>
>       <content type="boolean"/>
>       <shortdesc lang="en">Display help and exit</shortdesc>
>     </parameter>
>     <parameter name="separator" unique="0" required="0">
>       <getopt mixed="-C, --separator=<char>"/>
>       <content type="string" default=","/>
>       <shortdesc lang="en">Separator for CSV created by operation
list</shortdesc>
>     </parameter>
>     <parameter name="power_timeout" unique="0" required="0">
>       <getopt mixed="--power-timeout"/>
>       <content type="string" default="20"/>
>       <shortdesc lang="en">Test X seconds for status change after
ON/OFF</shortdesc>
>     </parameter>
>     <parameter name="shell_timeout" unique="0" required="0">
>       <getopt mixed="--shell-timeout"/>
>       <content type="string" default="3"/>
>       <shortdesc lang="en">Wait X seconds for cmd prompt after issuing
command</shortdesc>
>     </parameter>
>     <parameter name="login_timeout" unique="0" required="0">
>       <getopt mixed="--login-timeout"/>
>       <content type="string" default="5"/>
>       <shortdesc lang="en">Wait X seconds for cmd prompt after
login</shortdesc>
>     </parameter>
>     <parameter name="power_wait" unique="0" required="0">
>       <getopt mixed="--power-wait"/>
>       <content type="string" default="0"/>
>       <shortdesc lang="en">Wait X seconds after issuing ON/OFF</shortdesc>
>     </parameter>
>     <parameter name="delay" unique="0" required="0">
>       <getopt mixed="--delay"/>
>       <content type="string" default="0"/>
>       <shortdesc lang="en">Wait X seconds before fencing is
started</shortdesc>
>     </parameter>
>     <parameter name="retry_on" unique="0" required="0">
>       <getopt mixed="--retry-on"/>
>       <content type="string" default="1"/>
>       <shortdesc lang="en">Count of attempts to retry power on</shortdesc>
>     </parameter>
>   </parameters>
>   <actions>
>     <action name="on"/>
>     <action name="off"/>
>     <action name="reboot"/>
>     <action name="status"/>
>     <action name="list"/>
>     <action name="monitor"/>
>     <action name="metadata"/>
>     <action name="stop" timeout="20s"/>
>     <action name="start" timeout="20s"/>
>   </actions>
> </resource-agent>
>  
> [root at pcmk1 ~]# crm configure show
> node pcmk1
> node pcmk2
> primitive drbd_pg ocf:linbit:drbd \
>         params drbd_resource="postgres" \
>         op monitor interval="15" role="Master" \
>         op monitor interval="16" role="Slave" \
>         op start interval="0" timeout="240" \
>         op stop interval="0" timeout="120"
> primitive pg_fs ocf:heartbeat:Filesystem \
>         params device="/dev/vg_local-lv_pgsql/lv_pgsql"
directory="/var/lib/pgsql/9.2/data" options="noatime,nodiratime"
fstype="xfs" \
>         op start interval="0" timeout="60" \
>         op stop interval="0" timeout="120"
> primitive pg_lsb lsb:postgresql-9.2 \
>         op monitor interval="30" timeout="60" \
>         op start interval="0" timeout="60" \
>         op stop interval="0" timeout="60"
> primitive pg_lvm ocf:heartbeat:LVM \
>         params volgrpname="vg_local-lv_pgsql" \
>         op start interval="0" timeout="30" \
>         op stop interval="0" timeout="30"
> primitive pg_vip ocf:heartbeat:IPaddr2 \
>         params ip="x.x.x.x" iflabel="pcmkvip" \
>         op monitor interval="5"
> primitive vm-fence-pcmk1 stonith:fence_vmware_soap \
>         params ipaddr="x.x.x.x" login="administrator" passwd="password"
port="pcmk1" ssl="1" retry_on="10" shell_timeout="20" login_timeout="15"
action="reboot"
> primitive vm-fence-pcmk2 stonith:fence_vmware_soap \
>         params ipaddr="x.x.x.x" login="administrator" passwd="password"
port="pcmk2" ssl="1" retry_on="10" shell_timeout="20" login_timeout="15"
action="reboot"
> group PGServer pg_lvm pg_fs pg_lsb pg_vip ms ms_drbd_pg drbd_pg \
>         meta master-max="1" master-node-max="1" clone-max="2"
clone-node-max="1" notify="true"
> location l-st-pcmk1 vm-fence-pcmk1 -inf: pcmk1 location l-st-pcmk2 
> vm-fence-pcmk2 -inf: pcmk2 location master-prefer-node1 pg_vip 50: 
> pcmk1 colocation col_pg_drbd inf: PGServer ms_drbd_pg:Master order 
> ord_pg inf: ms_drbd_pg:promote PGServer:start property 
> $id="cib-bootstrap-options" \
>         dc-version="1.1.7-6.el6-148fccfd5985c5590cc601123c6c16e966b85d14"
\
>         cluster-infrastructure="openais" \
>         expected-quorum-votes="4" \
>         stonith-enabled="true" \
>         no-quorum-policy="ignore" \
>         maintenance-mode="false"
> rsc_defaults $id="rsc-options" \
>         resource-stickiness="100"
>  
> Am I doing something wrong?
>  
> Best regards,
> Michal Mistina
>  
> _______________________________________________
> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org 
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> 
> Project Home: http://www.clusterlabs.org Getting started: 
> http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org


_______________________________________________
Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
http://oss.clusterlabs.org/mailman/listinfo/pacemaker

Project Home: http://www.clusterlabs.org Getting started:
http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
Bugs: http://bugs.clusterlabs.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3057 bytes
Desc: not available
URL: <https://lists.clusterlabs.org/pipermail/pacemaker/attachments/20130715/9b850833/attachment-0004.p7s>


More information about the Pacemaker mailing list