- 积分
- 16843
在线时间 小时
最后登录1970-1-1
|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?开始注册
x
[WRN] CEPHADM_REFRESH_FAILED: failed to probe daemons or devices* X2 e; G }. [4 [
host private-registry.example.com `cephadm ceph-volume` failed: cephadm exited with an error code: 1, stderr:Non-zero exit code 125 from /bin/podman run --rm --ipc=host --net=host --entrypoint stat --init -e CONTAINER_IMAGE=ceph5-2-1-registry.example.com:5000/rhceph/rhceph-5-rhel8@sha256:d42c0d99ddeaa001570dce4eb90b71699e0401fe449966b935f669ffad22bd01 -e NODE_NAME=private-registry.example.com -e CEPH_USE_RANDOM_NONCE=1 ceph5-2-1-registry.example.com:5000/rhceph/rhceph-5-rhel8@sha256:d42c0d99ddeaa001570dce4eb90b71699e0401fe449966b935f669ffad22bd01 -c %u %g /var/lib/ceph7 A$ R) L2 Y. u6 [
stat: stderr Trying to pull ceph5-2-1-registry.example.com:5000/rhceph/rhceph-5-rhel8@sha256:d42c0d99ddeaa001570dce4eb90b71699e0401fe449966b935f669ffad22bd01...
1 r1 W! Y4 h/ b7 _stat: stderr Error: initializing source docker://ceph5-2-1-registry.example.com:5000/rhceph/rhceph-5-rhel8@sha256:d42c0d99ddeaa001570dce4eb90b71699e0401fe449966b935f669ffad22bd01: reading manifest sha256:d42c0d99ddeaa001570dce4eb90b71699e0401fe449966b935f669ffad22bd01 in ceph5-2-1-registry.example.com:5000/rhceph/rhceph-5-rhel8: unauthorized: authentication required
! t4 a+ R8 c% ?1 s" xHow to eliminate this warning?
" n( i- T$ c. M4 _0 f4 o; XResolution) ~2 k( `$ t2 V4 a7 D7 S4 t# Q/ ~
Login to the cephadm shell on the lead monitor node.
, V! l3 N8 R' S/ |& h! K2 v" Q" q; P4 V) U0 T4 n/ {
Raw
, `# v* a3 ?) p) _, X/ L! z9 q: Q# cephadm shell
9 Z. R/ A, c: W6 e, u5 H% QLog in manually to the custom registry on all the new hosts simultaneously:
. `6 U5 ?8 ] H I. s0 `5 i2 g# O7 c: q% D9 q3 F
Raw
9 \9 o& A% A% Q5 X+ f$ L, \# ceph cephadm registry-login --registry-url <CUSTOM_REGISTRY_NAME> --registry_username <REGISTRY_USERNAME> --registry_password <PASSWORD>
& M. R+ P, J6 q3 x" BExecuting the aforementioned command will produce a podman-auth.json file in the /etc/ceph directory that contains the custom registry's authentication details., o9 o* I% W1 \/ r+ Y7 g
& q. [2 `, y* j5 ^8 s% t* R6 c: w
Wait 3-5 minutes to see if the daemon starts up.1 ^* \- d. |& w8 `) v
( ?2 x" W2 _' [
Raw
- `2 }3 w1 Q f/ K3 C! O# watch ceph orch ls5 S- Q5 \# k D% n
OPTIONAL: Restart the daemon if it is still not in running state.+ S+ E1 q$ b7 }5 e' X7 v/ g4 `
9 B r5 v4 z5 m, a5 L Q9 A. lRaw9 z m# Z' V; Y1 k, `; ^
# ceph orch restart <DAEMON_NAME>5 Y8 U/ N+ @) D7 @ Y
SPECIAL CASE:7 ~& P0 f1 \( ?+ t- r
For daemons like node-exporter, prometheus, alertmanager, grafana:
2 A) b2 r. `6 q& _) A- X
w- @: E$ D* v. O& I X! T& zAfter logging into the custom registry, use the ceph config command to configure the custom container images:3 y& m2 R! A: ]2 r% s
. B$ C! P6 |, \; Y( [: lRaw
% L) x. V* Y" E7 C( F' s6 D1 L) {# ceph config set mgr mgr/cephadm/OPTION_NAME CUSTOM_REGISTRY_NAME/CONTAINER_NAME3 y5 e% {# {6 z1 U
Use the following options for OPTION_NAME:
) B4 N2 H$ r* u9 u$ C, k C. r0 P" X
Raw5 ~; F z: ^. L$ Z8 c( }
container_image_prometheus! X. m# @% ?2 T+ u
container_image_grafana- m; ^; j: k; z/ y3 \: h+ h( C
container_image_alertmanager
! M3 e) q' O- q- acontainer_image_node_exporter% W) ^" @& L, W' A7 |
Redeploy each daemon:
/ K4 ^$ V0 L' g% F; ]# y: P5 ] R
Raw1 o* ~5 e; l- G9 L8 u
# ceph orch redeploy DAEMON_NAME
6 L* g/ J% q* |3 hRoot Cause
, e) F0 E! n D5 L' DWhile adding ceph daemons on newly added hosts, cephadm is not able to determine the custom registry credentials under podman-auth.json file under the /etc/ceph directory or the file itself is missing.( H8 R; g7 K% N( D
4 C; X2 h8 P5 W6 Z
Behind the scene, when we run this command it actually only logs in the host where the command is run. As a result, when cephadm attempts to pull the image on other hosts it still fails due to not logged in on the other hosts.
: o1 S; W. @, [: V7 l) L( _& R8 I
+ m; m+ i- ^# D4 n$ C- t( @For this, instead of running the command on the host itself, use the ceph cephadm registry-login command from inside the cephadm shell and it should log in all the hosts in the cluster.! |) K, {& j, _( m+ m/ x
! ^* Z: ^2 g/ P* ^! r+ r7 u. p) ]Diagnostic Steps, M$ X" w/ D* S3 D
Check if the podman-auth.json file is present under /etc/ceph/ on each node. O( {! s1 h* q: J7 V! Q. o
$ f! |* O# D/ Y* O$ a! kRaw2 N* \) h6 {6 W, v
# ls -l /etc/ceph/
2 t q$ l+ c8 T9 s0 EVerify the daemon status:" w% }6 Z- Y/ k) g& t }6 ^1 P
" _: }. U% c1 g& y, s) N
Raw
! g+ U F# P; _4 C# ceph orch ls+ S3 j; f0 ^. Q+ E/ R
# ceph orch ps
( h6 i, ^& V/ P/ |6 x+ t5 v- a% Y5 `) y5 L$ c) @7 w
|
|