]>
git.proxmox.com Git - pve-cluster.git/blob - data/PVE/CLI/pvecm.pm
1 package PVE
::CLI
::pvecm
;
8 use PVE
::Tools
qw(run_command);
11 use PVE
::JSONSchema
qw(get_standard_option);
12 use PVE
::RPCEnvironment
;
15 use PVE
::API2
::ClusterConfig
;
18 use base
qw(PVE::CLIHandler);
20 $ENV{HOME
} = '/root'; # for ssh-copy-id
22 my $basedir = "/etc/pve";
23 my $clusterconf = "$basedir/corosync.conf";
24 my $libdir = "/var/lib/pve-cluster";
25 my $authfile = "/etc/corosync/authkey";
28 sub setup_environment
{
29 PVE
::RPCEnvironment-
>setup_default_cli_env();
32 __PACKAGE__-
>register_method ({
36 description
=> "Generate new cryptographic key for corosync.",
38 additionalProperties
=> 0,
42 description
=> "Output file name"
46 returns
=> { type
=> 'null' },
51 my $filename = $param->{filename
};
54 $> == 0 || die "Error: Authorization key must be generated as root user.\n";
55 my $dirname = dirname
($filename);
57 die "key file '$filename' already exists\n" if -e
$filename;
59 File
::Path
::make_path
($dirname) if $dirname;
61 run_command
(['corosync-keygen', '-l', '-k', $filename]);
66 __PACKAGE__-
>register_method ({
70 description
=> "Adds the current node to an existing cluster.",
72 additionalProperties
=> 0,
76 description
=> "Hostname (or IP) of an existing cluster member."
78 nodeid
=> get_standard_option
('corosync-nodeid'),
81 description
=> "Number of votes for this node",
87 description
=> "Do not throw error if node already exists.",
90 ring0_addr
=> get_standard_option
('corosync-ring0-addr'),
91 ring1_addr
=> get_standard_option
('corosync-ring1-addr'),
92 fingerprint
=> get_standard_option
('fingerprint-sha256', {
97 description
=> "Always use SSH to join, even if peer may do it over API.",
102 returns
=> { type
=> 'null' },
107 my $nodename = PVE
::INotify
::nodename
();
109 my $host = $param->{hostname
};
111 PVE
::Cluster
::assert_joinable
($param->{ring0_addr
}, $param->{ring1_addr
}, $param->{force
});
113 if (!$param->{use_ssh
}) {
114 print "Please enter superuser (root) password for '$host':\n";
115 my $password = PVE
::PTY
::read_password
("Password for root\@$host: ");
117 delete $param->{use_ssh
};
118 $param->{password
} = $password;
120 eval { PVE
::Cluster
::join($param) };
123 if (ref($err) eq 'PVE::APIClient::Exception' && $err->{code
} == 501) {
124 $err = "Remote side is not able to use API for Cluster join!\n" .
125 "Pass the 'use_ssh' switch or update the remote side.\n";
129 return; # all OK, the API join endpoint successfully set us up
132 # allow fallback to old ssh only join if wished or needed
134 PVE
::Cluster
::setup_sshd_config
();
135 PVE
::Cluster
::setup_rootsshconfig
();
136 PVE
::Cluster
::setup_ssh_keys
();
138 # make sure known_hosts is on local filesystem
139 PVE
::Cluster
::ssh_unmerge_known_hosts
();
141 my $cmd = ['ssh-copy-id', '-i', '/root/.ssh/id_rsa', "root\@$host"];
142 run_command
($cmd, 'outfunc' => sub {}, 'errfunc' => sub {},
143 'errmsg' => "unable to copy ssh ID");
145 $cmd = ['ssh', $host, '-o', 'BatchMode=yes',
146 'pvecm', 'addnode', $nodename, '--force', 1];
148 push @$cmd, '--nodeid', $param->{nodeid
} if $param->{nodeid
};
149 push @$cmd, '--votes', $param->{votes
} if defined($param->{votes
});
150 push @$cmd, '--ring0_addr', $param->{ring0_addr
} if defined($param->{ring0_addr
});
151 push @$cmd, '--ring1_addr', $param->{ring1_addr
} if defined($param->{ring1_addr
});
153 if (system (@$cmd) != 0) {
154 my $cmdtxt = join (' ', @$cmd);
155 die "unable to add node: command failed ($cmdtxt)\n";
158 my $tmpdir = "$libdir/.pvecm_add.tmp.$$";
162 print "copy corosync auth key\n";
163 $cmd = ['rsync', '--rsh=ssh -l root -o BatchMode=yes', '-lpgoq',
164 "[$host]:$authfile $clusterconf", $tmpdir];
166 system(@$cmd) == 0 || die "can't rsync data from host '$host'\n";
168 my $corosync_conf = PVE
::Tools
::file_get_contents
("$tmpdir/corosync.conf");
169 my $corosync_authkey = PVE
::Tools
::file_get_contents
("$tmpdir/authkey");
171 PVE
::Cluster
::finish_join
($host, $corosync_conf, $corosync_authkey);
182 __PACKAGE__-
>register_method ({
186 description
=> "Displays the local view of the cluster status.",
188 additionalProperties
=> 0,
191 returns
=> { type
=> 'null' },
196 PVE
::Corosync
::check_conf_exists
();
198 my $cmd = ['corosync-quorumtool', '-siH'];
202 exit (-1); # should not be reached
205 __PACKAGE__-
>register_method ({
209 description
=> "Displays the local view of the cluster nodes.",
211 additionalProperties
=> 0,
214 returns
=> { type
=> 'null' },
219 PVE
::Corosync
::check_conf_exists
();
221 my $cmd = ['corosync-quorumtool', '-l'];
225 exit (-1); # should not be reached
228 __PACKAGE__-
>register_method ({
232 description
=> "Tells corosync a new value of expected votes.",
234 additionalProperties
=> 0,
238 description
=> "Expected votes",
243 returns
=> { type
=> 'null' },
248 PVE
::Corosync
::check_conf_exists
();
250 my $cmd = ['corosync-quorumtool', '-e', $param->{expected
}];
254 exit (-1); # should not be reached
258 __PACKAGE__-
>register_method ({
259 name
=> 'updatecerts',
260 path
=> 'updatecerts',
262 description
=> "Update node certificates (and generate all needed files/directories).",
264 additionalProperties
=> 0,
267 description
=> "Force generation of new SSL certifate.",
272 description
=> "Ignore errors (i.e. when cluster has no quorum).",
278 returns
=> { type
=> 'null' },
282 PVE
::Cluster
::setup_rootsshconfig
();
284 PVE
::Cluster
::gen_pve_vzdump_symlink
();
286 if (!PVE
::Cluster
::check_cfs_quorum
(1)) {
287 return undef if $param->{silent
};
288 die "no quorum - unable to update files\n";
291 PVE
::Cluster
::setup_ssh_keys
();
293 my $nodename = PVE
::INotify
::nodename
();
295 my $local_ip_address = PVE
::Cluster
::remote_node_ip
($nodename);
297 PVE
::Cluster
::gen_pve_node_files
($nodename, $local_ip_address, $param->{force
});
298 PVE
::Cluster
::ssh_merge_keys
();
299 PVE
::Cluster
::ssh_merge_known_hosts
($nodename, $local_ip_address);
300 PVE
::Cluster
::gen_pve_vzdump_files
();
305 __PACKAGE__-
>register_method ({
309 description
=> "Used by VM/CT migration - do not use manually.",
311 additionalProperties
=> 0,
313 get_migration_ip
=> {
316 description
=> 'return the migration IP, if configured',
319 migration_network
=> {
322 description
=> 'the migration network used to detect the local migration IP',
327 description
=> 'Run a command with a tcp socket as standard input.'
328 .' The IP address and port are printed via this'
329 ." command's stdandard output first, each on a separate line.",
332 'extra-args' => PVE
::JSONSchema
::get_standard_option
('extra-args'),
335 returns
=> { type
=> 'null'},
339 if (!PVE
::Cluster
::check_cfs_quorum
(1)) {
344 my $network = $param->{migration_network
};
345 if ($param->{get_migration_ip
}) {
346 die "cannot use --run-command with --get_migration_ip\n"
347 if $param->{'run-command'};
348 if (my $ip = PVE
::Cluster
::get_local_migration_ip
($network)) {
353 # do not keep tunnel open when asked for migration ip
357 if ($param->{'run-command'}) {
358 my $cmd = $param->{'extra-args'};
359 die "missing command\n"
360 if !$cmd || !scalar(@$cmd);
362 # Get an ip address to listen on, and find a free migration port
364 if (defined($network)) {
365 $ip = PVE
::Cluster
::get_local_migration_ip
($network)
366 or die "failed to get migration IP address to listen on\n";
367 $family = PVE
::Tools
::get_host_address_family
($ip);
369 my $nodename = PVE
::INotify
::nodename
();
370 ($ip, $family) = PVE
::Network
::get_ip_from_hostname
($nodename, 0);
372 my $port = PVE
::Tools
::next_migrate_port
($family, $ip);
374 PVE
::Tools
::pipe_socket_to_command
($cmd, $ip, $port);
378 print "tunnel online\n";
381 while (my $line = <STDIN
>) {
383 last if $line =~ m/^quit$/;
391 keygen
=> [ __PACKAGE__
, 'keygen', ['filename']],
392 create
=> [ 'PVE::API2::ClusterConfig', 'create', ['clustername']],
393 add
=> [ __PACKAGE__
, 'add', ['hostname']],
394 addnode
=> [ 'PVE::API2::ClusterConfig', 'addnode', ['node']],
395 delnode
=> [ 'PVE::API2::ClusterConfig', 'delnode', ['node']],
396 status
=> [ __PACKAGE__
, 'status' ],
397 nodes
=> [ __PACKAGE__
, 'nodes' ],
398 expected
=> [ __PACKAGE__
, 'expected', ['expected']],
399 updatecerts
=> [ __PACKAGE__
, 'updatecerts', []],
400 mtunnel
=> [ __PACKAGE__
, 'mtunnel', ['extra-args']],