Install Ceph nodes without network proxy access

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Aug 5, 2014 at 3:59 PM, O'Reilly, Dan <Daniel.OReilly at dish.com>
wrote:

> Unfortunately, it still fails:
>
>
>
> tm1cldmonl01][WARNIN] This system is not registered to Red Hat
> Subscription Management. You can use subscription-manager to register.
>
> [tm1cldmonl01][INFO  ] Running command: sudo rpm --import
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc
>
> [tm1cldmonl01][WARNIN] curl: (7) couldn't connect to host
>
> [tm1cldmonl01][WARNIN] error:
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc: import
> read failed(2).
>
>
>
> Why would it be going out to anything.
>

I think it is because ceph-deploy is *not* parsing the repo section so that
it can infer that you in fact don't want to use a GPG url.

This is a bug IMO and ceph-deploy should be aware that you might not want
one. I don't think there is an option to explicitly tell ceph-deploy
not to use a gpg url when installing ceph, so your only alternative would
be to host the `release.asc` file in
file:///unixdepot/openstack/repos/ceph/release.asc

and then modify your repo sections to have that URL there. Like

[ceph-noarch]

name=Ceph noarch releasee

baseurl=file:///unixdepot/cloud/openstack/repos/ceph/noarch/

gpgkey=file:///unixdepot/cloud/openstack/repos/ceph/release.asc

gpgcheck=0

enabled=1



[ceph-x86_64]

name=Ceph x86_64 releasee

gpgkey=file:///unixdepot/cloud/openstack/repos/ceph/release.asc

baseurl=file:///unixdepot/cloud/openstack/repos/ceph/x86_64/

gpgcheck=0
enabled=1



> My cephdeploy.conf file is:
>
>
>
>
>
> #
>
> # ceph-deploy configuration file
>
> #
>
>
>
> [ceph-deploy-global]
>
> # Overrides for some of ceph-deploy's global flags, like verbosity or
> cluster
>
> # name
>
>
>
> [ceph-deploy-install]
>
> # Overrides for some of ceph-deploy's install flags, like version of ceph
> to
>
> # install
>
>
>
>
>
> #
>
> # Repositories section
>
> #
>
>
>
> # yum repos:
>
>
>
> [ceph-noarch]
>
> name=Ceph noarch releasee
>
> baseurl=file:///unixdepot/cloud/openstack/repos/ceph/noarch/
>
> gpgcheck=0
>
> enabled=1
>
>
>
> [ceph-x86_64]
>
> name=Ceph x86_64 releasee
>
> baseurl=file:///unixdepot/cloud/openstack/repos/ceph/x86_64/
>
> gpgcheck=0
>
> enabled=1
>
>
>
> # [myrepo]
>
> # baseurl = https://user:pass at example.org/rhel6
>
> # gpgurl = https://example.org/keys/release.asc
>
> # default = True
>
> # extra-repos = cephrepo  # will install the cephrepo file too
>
> #
>
> # [cephrepo]
>
> # name=ceph repo noarch packages
>
> # baseurl=http://ceph.com/rpm-emperor/el6/noarch
>
> # enabled=1
>
> # gpgcheck=1
>
> # type=rpm-md
>
> # gpgkey=
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/autobuild.asc
>
>
>
> # apt repos:
>
> # [myrepo]
>
> # baseurl = https://user:pass at example.org/
>
> # gpgurl = https://example.org/keys/release.asc
>
> # default = True
>
> # extra-repos = cephrepo  # will install the cephrepo file too
>
> #
>
> # [cephrepo]
>
> # baseurl=http://ceph.com/rpm-emperor/el6/noarch
>
> # gpgkey=
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/autobuild.asc
>
>
>
>
>
> *From:* O'Reilly, Dan
> *Sent:* Tuesday, August 05, 2014 1:35 PM
> *To:* 'Alfredo Deza'
> *Cc:* ceph-users at lists.ceph.com
> *Subject:* RE: [ceph-users] Install Ceph nodes without network proxy
> access
>
>
>
> Outstanding!  I think that?s just what I need.  Thanks very much for the
> quick response.
>
>
>
> *From:* Alfredo Deza [mailto:alfredo.deza at inktank.com
> <alfredo.deza at inktank.com>]
> *Sent:* Tuesday, August 05, 2014 1:28 PM
> *To:* O'Reilly, Dan
> *Cc:* ceph-users at lists.ceph.com
> *Subject:* Re: [ceph-users] Install Ceph nodes without network proxy
> access
>
>
>
>
>
>
>
> On Tue, Aug 5, 2014 at 3:21 PM, O'Reilly, Dan <Daniel.OReilly at dish.com>
> wrote:
>
> I?m trying to bring up a Ceph cluster.  In our environment, access to
> outside repositories is VERY restricted.   This causes some BIG problems,
> namely, going out to the ceph respositories.  I opened up a proxy to allow
> this, but still have problems:
>
>
>
> [ceph at tm1cldcphal01 wombat-cluster]$ ceph-deploy install tm1cldmonl01
>
> [ceph_deploy.conf][DEBUG ] found configuration file at:
> /home/cephadmin/.cephdeploy.conf
>
> [ceph_deploy.cli][INFO  ] Invoked (1.5.5): /usr/bin/ceph-deploy install
> tm1cldmonl01
>
> [ceph_deploy.install][DEBUG ] Installing stable version firefly on cluster
> ceph hosts tm1cldmonl01
>
> [ceph_deploy.install][DEBUG ] Detecting platform for host tm1cldmonl01 ...
>
> [tm1cldmonl01][DEBUG ] connected to host: tm1cldmonl01
>
> [tm1cldmonl01][DEBUG ] detect platform information from remote host
>
> [tm1cldmonl01][DEBUG ] detect machine type
>
> [ceph_deploy.install][INFO  ] Distro info: Red Hat Enterprise Linux Server
> 6.5 Santiago
>
> [tm1cldmonl01][INFO  ] installing ceph on tm1cldmonl01
>
> [tm1cldmonl01][INFO  ] Running command: sudo yum clean all
>
> [tm1cldmonl01][DEBUG ] Loaded plugins: product-id, security,
> subscription-manager
>
> [tm1cldmonl01][DEBUG ] Cleaning repos: Local_Repo RHN_Latest ceph-noarch
> ceph-x86_64
>
> [tm1cldmonl01][DEBUG ] Cleaning up Everything
>
> [tm1cldmonl01][WARNIN] This system is not registered to Red Hat
> Subscription Management. You can use subscription-manager to register.
>
> [tm1cldmonl01][INFO  ] Running command: sudo yum -y install wget
>
> [tm1cldmonl01][DEBUG ] Loaded plugins: product-id, security,
> subscription-manager
>
> [tm1cldmonl01][DEBUG ] Setting up Install Process
>
> [tm1cldmonl01][DEBUG ] Package wget-1.12-1.11.el6_5.x86_64 already
> installed and latest version
>
> [tm1cldmonl01][DEBUG ] Nothing to do
>
> [tm1cldmonl01][WARNIN] This system is not registered to Red Hat
> Subscription Management. You can use subscription-manager to register.
>
> *[tm1cldmonl01][INFO  ] Running command: sudo rpm --import
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc
> <https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc>*
>
> *[tm1cldmonl01][WARNIN] curl: (7) Failed to connect to
> 2607:f298:4:147::b05:fe2a: Network is unreachable*
>
> *[tm1cldmonl01][WARNIN] error:
> https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc
> <https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc>: import
> read failed(2).*
>
> *[tm1cldmonl01][ERROR ] RuntimeError: command returned non-zero exit
> status: 1*
>
> *[ceph_deploy][ERROR ] RuntimeError: Failed to execute command: rpm
> --import https://ceph.com/git/ <https://ceph.com/git/>?*
> p=ceph.git;a=blob_plain;f=keys/release.asc
>
>
>
> It looks like curl is attempting to do an IPV6 lookup.  So, I disabled
> IPV6 and now just get from curl:
>
>
>
> curl: (7) couldn't connect to host
>
> error: https://ceph.com/git/?p=ceph.git: import read failed(2).
>
>
>
> Is there ANY way to install ceph without going outside our network?  This
> is a VERY limiting thing, and we simply cannot have a wide-open proxy to
> external systems that are beyond our control.   We can?t be the only people
> running into this.
>
>
>
> There sure is, I would suggest setting up a mirror and point ceph-deploy
> to your internal mirror so that it can install from there. There are a few
> flags
> involved, and you can make ceph-deploy have certain defaults if you need
> to with the cephdeploy.conf file:
> http://ceph.com/ceph-deploy/docs/conf.html
>
> Some users have to make a few changes if creating a mirror is completely
> out of the questions, you can find some notes here:
> http://ceph.com/ceph-deploy/docs/install.html#behind-firewall
>
>
>
> Thanks!
>
>
>
> Dan O'Reilly
>
> UNIX Systems Administration
>
> [image: cid:638154011 at 09122011-048B]
>
> 9601 S. Meridian Blvd.
>
> Englewood, CO 80112
>
> 720-514-6293
>
>
>
>
>
>
> _______________________________________________
> ceph-users mailing list
> ceph-users at lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ceph.com/pipermail/ceph-users-ceph.com/attachments/20140805/e7b60627/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 1895 bytes
Desc: not available
URL: <http://lists.ceph.com/pipermail/ceph-users-ceph.com/attachments/20140805/e7b60627/attachment.jpg>


[Index of Archives]     [Information on CEPH]     [Linux Filesystem Development]     [Ceph Development]     [Ceph Large]     [Linux USB Development]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [xfs]


  Powered by Linux