diff --git a/xml/ha_fencing.xml b/xml/ha_fencing.xml index 6cb59fba..ca6174d7 100644 --- a/xml/ha_fencing.xml +++ b/xml/ha_fencing.xml @@ -446,56 +446,62 @@ hostlist Kdump belongs to the and is in fact the opposite of a fencing device. The plug-in checks if a Kernel dump is in progress on a node. If so, it - returns true, and acts as if the node has been fenced. + returns true and acts as if the node has been fenced, + because the node will reboot after the Kdump is complete. + If not, it returns a failure and the next fencing device is triggered. - The Kdump plug-in must be used in concert with another, real &stonith; - device, for example, external/ipmi. For the fencing - mechanism to work properly, you must specify that Kdump is checked before - a real &stonith; device is triggered. Use crm configure - fencing_topology to specify the order of the fencing devices as + The Kdump plug-in must be used together with another, real &stonith; + device, for example, external/ipmi. It does + not work with SBD as the &stonith; device. For the fencing + mechanism to work properly, you must specify the order of the fencing devices + so that Kdump is checked before a real &stonith; device is triggered, as shown in the following procedure. - Use the stonith:fence_kdump resource agent (provided - by the package fence-agents) - to monitor all nodes with the Kdump function enabled. Find a - configuration example for the resource below: + Use the stonith:fence_kdump fence agent. + A configuration example is shown below. For more information, + see crm ra info stonith:fence_kdump. &prompt.root;crm configure &prompt.crm.conf;primitive st-kdump stonith:fence_kdump \ - params nodename="&node1; "\ - pcmk_host_check="static-list" \ + params nodename="&node1; "\ + pcmk_host_list="&node1;" \ + pcmk_host_check="static-list" \ pcmk_reboot_action="off" \ pcmk_monitor_action="metadata" \ pcmk_reboot_retries="1" \ - timeout="60" + timeout="60" &prompt.crm.conf;commit - + - Name of the node to be monitored. If you need to monitor more than one - node, configure more &stonith; resources. To prevent a specific node - from using a fencing device, add location constraints. + Name of the node to listen for a message from fence_kdump_send. + Configure more &stonith; resources for other nodes if needed. + + + Defines how long to wait for a message from fence_kdump_send. + If a message is received, then a Kdump is in progress and the fencing mechanism + considers the node to be fenced. If no message is received, fence_kdump + times out, which indicates that the fence operation failed. The next &stonith; device + in the fencing_topology eventually fences the node. + + - - The fencing action starts after the timeout of the resource. - - In /etc/sysconfig/kdump on each node, configure - KDUMP_POSTSCRIPT to send a notification to all nodes - when the Kdump process is finished. For example: + On each node, configure fence_kdump_send to send a message to + all nodes when the Kdump process is finished. In /etc/sysconfig/kdump, + edit the KDUMP_POSTSCRIPT line. For example: -KDUMP_POSTSCRIPT="/usr/lib/fence_kdump_send -i INTERVAL -p PORT -c 1 &node1; &node2; &node3;" +KDUMP_POSTSCRIPT="/usr/lib/fence_kdump_send -i 10 -p 7410 -c 1 NODELIST" - The node that does a Kdump restarts automatically after Kdump is - finished. + Replace NODELIST with the host names of all the cluster nodes. @@ -514,15 +520,16 @@ hostlist - To achieve that Kdump is checked before triggering a real fencing + To have Kdump checked before triggering a real fencing mechanism (like external/ipmi), use a configuration similar to the following: &prompt.crm.conf;fencing_topology \ &node1;: kdump-node1 ipmi-node1 \ - &node2;: kdump-node2 ipmi-node2 + &node2;: kdump-node2 ipmi-node2 +&prompt.crm.conf;commit For more details on : - &prompt.root;crm configure help fencing_topology + &prompt.crm.conf;help fencing_topology