[ClusterLabs] Clone process appears running whereas not

[Emmanuel Le Nohaïc]

Le 05/06/2015 16:43, Ken Gaillot a écrit :
> On 06/05/2015 10:05 AM, Emmanuel Le Nohaïc wrote:
>>
>> Nodes are running Debian 8 with systemd. I think pacemaker reads
>> output of anything like "systemctl status openvpn" and thinks that
>> process is running because it appears running with :
>>
>> systemctl status openvpn (on CENTRAL1) ● openvpn.service - OpenVPN
>> service Loaded: loaded (/etc/systemd/system/openvpn.service;
>> disabled) Active: active (exited) since ven. 2015-06-05 15:45:07
>> CEST; 11min ago Process: 732 ExecStart=/bin/true (code=exited,
>> status=0/SUCCESS)
> 
> Pacemaker relies on the resource agent (systemd's openvpn service in
> this case) to tell it whether the resource is running. If the agent
> says yes when it's really no, Pacemaker can't do the right thing.
> 
> Why is ExecStart=/bin/true? That doesn't look right.
> 

This is the default openvpn unit file configuration.

I replaced it by openvpn at server.service which contains
[Unit]
Description=OpenVPN connection to %i
PartOf=openvpn.service
ReloadPropagatedFrom=openvpn.service

[Service]
Type=forking
ExecStart=/usr/sbin/openvpn
ExecReload=/bin/kill -HUP $MAINPID
WorkingDirectory=/etc/openvpn

[Install]
WantedBy=multi-user.target

Now it runs fine, thanks. I also did the necessary for timeout between
nodes, it is now up to 10s.

Last question, if openvpn process fails on one node, is it possible to
monitor the system to re-add it automaticaly in the cluster when the
openvpn processus will be available ? (without restart pacemaker).

I have to check for the VIP to turn on the other node when openvpn
process fails and the cluster will just runs like we want ! :)

Thanks for your feedback.

-- 
Emmanuel Le Nohaïc
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xEAE01ACC.asc
Type: application/pgp-keys
Size: 3510 bytes
Desc: not available
URL: <http://lists.clusterlabs.org/pipermail/users/attachments/20150605/d60f5ee8/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.clusterlabs.org/pipermail/users/attachments/20150605/d60f5ee8/attachment-0002.sig>