- ceph-users - lists.ceph.io

Fw: Incompatibilities (implicit_tenants & barbican) with Openstack after migrating from Ceph Luminous to Nautilus.
by Scheurer François 14 Apr '20

14 Apr '20

(resending to the new maillist) Dear Casey, Dear All, We tested the migration from Luminous to Nautilus and noticed two regressions breaking the RGW integration in Openstack: 1) the following config parameter is not working on Nautilus but is valid on Luminous and on Master: rgw_keystone_implicit_tenants = swift In the log: parse error setting 'rgw_keystone_implicit_tenants' to 'swift' (Expected option value to be integer, got 'swift') This param is important to make RGW working for S3 and Swift. Setting it to false breaks swift/openstack and setting it to true makes S3 incompatible with dns-style bucketnames (with shared or public access). Please note that path-style bucketnames are deprecated by AWS and most clients are only supporting dns-style... Ref.: https://tracker.ceph.com/issues/24348 https://github.com/ceph/ceph/commit/3ba7be8d1ac7ee43e69eebb58263cd080cca1d38 2) the server-side encryption (SSE-KMS) is broken on Nautilus: to reproduce the issue: s3cmd --access_key $ACCESSKEY --secret_key $SECRETKEY --host-bucket "%(bucket)s.$ENDPOINT" --host "$ENDPOINT" --region="$REGION" --signature-v2 --no-preserve --no-ssl --server-side-encryption --server-side-encryption-kms-id ${SECRET##*/} put helloenc.txt s3://testenc/ output: upload: 'helloenc.txt' -> 's3://testenc/helloenc.txt' [1 of 1] 9 of 9 100% in 0s 37.50 B/s done ERROR: S3 error: 403 (AccessDenied): Failed to retrieve the actual key, kms-keyid: cd0903db-c613-49be-96d9-165c02544bc7 rgw log: see below TLDR: after investigating, I found that radosgw was actually getting the barbican secret correctly but the HTTP CODE (=200) validation was failing because of a bug in Nautilus. My understanding is following (please correct me): The bug in src/rgw/rgw_http_client.cc . Since Nautilus HTTP_CODE are converted into ERROR_CODE (200 becomes 0) in the request processing. This happens in RGWHTTPManager::reqs_thread_entry(), which centralizes the processing of (curl) HTTP Requests with multi-treading. This is fine but the member variable http_status of the class RGWHTTPClient is not updated with the resulting HTTP CODE, so the variable keeps its initial value of 0. Then in src/rgw/rgw_crypt.cc the logic is still verifying that http_status is in range [200,299] and this fails... I wrote the following oneliner bugfix for src/rgw/rgw_http_client.cc: diff --git a/src/rgw/rgw_http_client.cc b/src/rgw/rgw_http_client.cc index d0f0baead6..7c115293ad 100644 --- a/src/rgw/rgw_http_client.cc +++ b/src/rgw/rgw_http_client.cc @@ -1146,6 +1146,7 @@ void *RGWHTTPManager::reqs_thread_entry() status = -EAGAIN; } int id = req_data->id; + req_data->client->http_status = http_status; finish_request(req_data, status); switch (result) { case CURLE_OK: The s3cmd is then working fine with KMS server side encryption. Questions: * Could someone please write a fix for the regression of 1) and make a PR ? * Could somebody also make a PR for 2? Thank you for your help. :-) Cheers Francois Scheurer rgw log: export CLUSTER=ceph; /home/local/ceph/build/bin/radosgw -f --cluster ${CLUSTER} --name client.rgw.$(hostname) --setuser ceph --setgroup ceph & tail -fn0 /var/log/ceph/ceph-client.rgw.ewos1-osd1-stage.log | less -IS 2020-02-26 16:32:59.208 7fc1f1c54700 20 Getting KMS encryption key for key=cd0903db-c613-49be-96d9-165c02544bc7 2020-02-26 16:32:59.208 7fc1f1c54700 20 Requesting secret from barbican url=http://keystone.service.stage.i.ewcs.ch:5000/v3/auth/tokens 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTPClient::process: http_status: 0 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTP::process 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTP::send 2020-02-26 16:32:59.208 7fc1f1c54700 20 sending request to http://keystone.service.stage.i.ewcs.ch:5000/v3/auth/tokens 2020-02-26 16:32:59.208 7fc1f1c54700 20 ssl verification is set to off 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTPManager::add_request: client->init_request(req_data): 0 2020-02-26 16:32:59.208 7fc1f1c54700 20 register_request mgr=0x56374b865540 req_data->id=4, curl_handle=0x56374c77c4a0 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTPManager::signal_thread(): write(thread_pipe[1], (void *)&buf, sizeof(buf)): 4 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTPManager::add_request: signal_thread(): 0 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTP::send: rgw_http_manager->add_request(req): 0 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: RGWHTTP::process: send(req): 0 2020-02-26 16:32:59.208 7fc1f1c54700 20 ewdebug: struct rgw_http_req_data : public RefCountedObject : int wait() : ret: 0 2020-02-26 16:32:59.208 7fc2184a1700 20 link_request req_data=0x56374c96a240 req_data->id=4, curl_handle=0x56374c77c4a0 2020-02-26 16:32:59.608 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: http_status: 201 2020-02-26 16:32:59.608 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: rgw_http_error_to_errno(http_status): 0 2020-02-26 16:32:59.608 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: finish_request(req_data, status): status: 0 2020-02-26 16:32:59.608 7fc2184a1700 20 ewdebug: struct rgw_http_req_data : public RefCountedObject : void finish(int r) : ret: 0 2020-02-26 16:32:59.652 7fc1f1c54700 5 ewdebug: request_key_from_barbican: Accept application/octet-stream X-Auth-Token gAAAAABeVo-xxx 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTPClient::process: http_status: 0 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTP::process 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTP::send 2020-02-26 16:32:59.652 7fc1f1c54700 20 sending request to http://barbican.service.stage.i.ewcs.ch:9311/v1/secrets/cd0903db-c613-49be-… 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTPManager::add_request: client->init_request(req_data): 0 2020-02-26 16:32:59.652 7fc1f1c54700 20 register_request mgr=0x56374b865540 req_data->id=5, curl_handle=0x56374c77c4a0 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTPManager::signal_thread(): write(thread_pipe[1], (void *)&buf, sizeof(buf)): 4 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTPManager::add_request: signal_thread(): 0 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTP::send: rgw_http_manager->add_request(req): 0 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: RGWHTTP::process: send(req): 0 2020-02-26 16:32:59.652 7fc1f1c54700 20 ewdebug: struct rgw_http_req_data : public RefCountedObject : int wait() : ret: 0 2020-02-26 16:32:59.652 7fc2184a1700 20 link_request req_data=0x56374c96a240 req_data->id=5, curl_handle=0x56374c77c4a0 => 2020-02-26 16:32:59.752 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: http_status: 200 2020-02-26 16:32:59.752 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: rgw_http_error_to_errno(http_status): 0 2020-02-26 16:32:59.752 7fc2184a1700 20 ewdebug: RGWHTTPManager::reqs_thread_entry: finish_request(req_data, status): status: 0 2020-02-26 16:32:59.752 7fc2184a1700 20 ewdebug: struct rgw_http_req_data : public RefCountedObject : void finish(int r) : ret: 0 2020-02-26 16:32:59.752 7fc1f1c54700 5 ewdebug: request_key_from_barbican: secret_req.process: 0 => 2020-02-26 16:32:59.752 7fc1f1c54700 5 ewdebug: request_key_from_barbican: secret_req.get_http_status: 0 2020-02-26 16:32:59.752 7fc1f1c54700 5 ewdebug: request_key_from_barbican: secret_req.get_http_status not in [200,299] range! 2020-02-26 16:32:59.752 7fc1f1c54700 5 Failed to retrieve secret from barbican:cd0903db-c613-49be-96d9-165c02544bc7 2020-02-26 16:32:59.752 7fc1f1c54700 5 ERROR: failed to retrieve actual key from key_id: cd0903db-c613-49be-96d9-165c02544bc7 2020-02-26 16:32:59.752 7fc1f1c54700 2 req 1 1.092s s3:put_obj completing 2020-02-26 16:32:59.752 7fc1f1c54700 2 req 1 1.092s s3:put_obj op status=-13 2020-02-26 16:32:59.752 7fc1f1c54700 2 req 1 1.092s s3:put_obj http status=403 2020-02-26 16:32:59.752 7fc1f1c54700 1 ====== req done req=0x56374c9808d0 op status=-13 http_status=403 latency=1.092s ====== => we see that http_status is correct (200) but the variable secret_req.get_http_status (member of class RGWHTTPClient) is incorrect (0 instead of 200)

2 4

How to use ceph-volume raw ?
by hoannv46＠gmail.com 14 Apr '20

14 Apr '20

My cluster on 15.2.1 versions. I use ceph-volume raw to add new osd but it has error : ceph-volume raw prepare --bluestore --data /dev/vdb Running command: /usr/bin/ceph-authtool --gen-print-key Running command: /usr/bin/ceph --cluster ceph --name client.bootstrap-osd --keyring /var/lib/ceph/bootstrap-osd/ceph.keyring -i - osd new b3b79678-c40d-4a84-9c47-84c4d7234407 Running command: /usr/bin/ceph-authtool --gen-print-key Running command: /usr/bin/mount -t tmpfs tmpfs /var/lib/ceph/osd/ceph-0 Running command: /usr/bin/chown -R ceph:ceph /dev/vdb Running command: /usr/bin/ln -s /dev/vdb /var/lib/ceph/osd/ceph-0/block Running command: /usr/bin/ceph --cluster ceph --name client.bootstrap-osd --keyring /var/lib/ceph/bootstrap-osd/ceph.keyring mon getmap -o /var/lib/ceph/osd/ceph-0/activate.monmap stderr: 2020-04-14T09:36:40.234+0700 7ff302248700 -1 auth: unable to find a keyring on /etc/ceph/ceph.client.bootstrap-osd.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyring.bi n,: (2) No such file or directory 2020-04-14T09:36:40.234+0700 7ff302248700 -1 AuthRegistry(0x7ff2fc058388) no keyring found at /etc/ceph/ceph.client.bootstrap-osd.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyr ing.bin,, disabling cephx stderr: got monmap epoch 1 Running command: /usr/bin/ceph-authtool /var/lib/ceph/osd/ceph-0/keyring --create-keyring --name osd.0 --add-key AQC3IZVe+ZSrChAAhGUXJ5Nkg8K6UB9tiNaFxQ== stdout: creating /var/lib/ceph/osd/ceph-0/keyring added entity osd.0 auth(key=AQC3IZVe+ZSrChAAhGUXJ5Nkg8K6UB9tiNaFxQ==) Running command: /usr/bin/chown -R ceph:ceph /var/lib/ceph/osd/ceph-0/keyring Running command: /usr/bin/chown -R ceph:ceph /var/lib/ceph/osd/ceph-0/ Running command: /usr/bin/ceph-osd --cluster ceph --osd-objectstore bluestore --mkfs -i 0 --monmap /var/lib/ceph/osd/ceph-0/activate.monmap --keyfile - --osd-data /var/lib/ceph/osd/ceph-0/ --os d-uuid b3b79678-c40d-4a84-9c47-84c4d7234407 --setuser ceph --setgroup ceph stderr: 2020-04-14T09:36:40.742+0700 7f83483c4bc0 -1 bluestore(/var/lib/ceph/osd/ceph-0/) _read_fsid unparsable uuid stderr: 2020-04-14T09:36:40.742+0700 7f83483c4bc0 -1 bdev(0x556ebee86c00 /var/lib/ceph/osd/ceph-0//block) _lock flock failed on /var/lib/ceph/osd/ceph-0//block stderr: 2020-04-14T09:36:40.742+0700 7f83483c4bc0 -1 bdev(0x556ebee86c00 /var/lib/ceph/osd/ceph-0//block) open failed to lock /var/lib/ceph/osd/ceph-0//block: (11) Resource temporarily unavail able stderr: 2020-04-14T09:36:40.743+0700 7f83483c4bc0 -1 bluestore(/var/lib/ceph/osd/ceph-0/) mkfs failed, (11) Resource temporarily unavailable stderr: 2020-04-14T09:36:40.743+0700 7f83483c4bc0 -1 OSD::mkfs: ObjectStore::mkfs failed with error (11) Resource temporarily unavailable stderr: 2020-04-14T09:36:40.744+0700 7f83483c4bc0 -1 ** ERROR: error creating empty object store in /var/lib/ceph/osd/ceph-0/: (11) Resource temporarily unavailable --> Was unable to complete a new OSD, will rollback changes Running command: /usr/bin/ceph --cluster ceph --name client.bootstrap-osd --keyring /var/lib/ceph/bootstrap-osd/ceph.keyring osd purge-new osd.0 --yes-i-really-mean-it stderr: 2020-04-14T09:36:40.959+0700 7f0b569c3700 -1 auth: unable to find a keyring on /etc/ceph/ceph.client.bootstrap-osd.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyring.bi n,: (2) No such file or directory 2020-04-14T09:36:40.959+0700 7f0b569c3700 -1 AuthRegistry(0x7f0b50058388) no keyring found at /etc/ceph/ceph.client.bootstrap-osd.keyring,/etc/ceph/ceph.keyring,/etc/ceph/keyring,/etc/ceph/keyr ing.bin,, disabling cephx stderr: purged osd.0 --> RuntimeError: Command failed with exit code 250: /usr/bin/ceph-osd --cluster ceph --osd-objectstore bluestore --mkfs -i 0 --monmap /var/lib/ceph/osd/ceph-0/activate.monmap --keyfile - --os d-data /var/lib/ceph/osd/ceph-0/ --osd-uuid b3b79678-c40d-4a84-9c47-84c4d7234407 --setuser ceph --setgroup ceph After that i create new parition of /dev/vdb it create osd successfully. then ceph-volume raw activate --device /dev/sdb1 --> systemd support not yet implemented

1 0

Re: Recommendation for decent write latency performance from HDDs
by Maged Mokhtar 12 Apr '20

12 Apr '20

On 12/04/2020 21:41, huxiaoyu(a)horebdata.cn wrote: > thanks again. > > I will try PetaSAN later. How big is the recommended cache size > (dm-writecache) for a OSD? > Actual number of partitions per SSD is more important, each partition serves 1 HDD/OSD, we allow 1-8. For size anything above 50GB is good, more will help specially with read caching. You need 2% of cache size in RAM, so a 100GB partitions requires 2GB in RAM, RAM is used internally to keep track of things, no data caching happens in RAM. /Maged > ------------------------------------------------------------------------ > huxiaoyu(a)horebdata.cn > > *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> > *Date:* 2020-04-12 21:34 > *To:* huxiaoyu(a)horebdata.cn <mailto:huxiaoyu@horebdata.cn>; Reed > Dier <mailto:reed.dier@focusvq.com>; jesper <mailto:jesper@krogh.cc> > *CC:* ceph-users <mailto:ceph-users@ceph.io> > *Subject:* Re: [ceph-users] Re: Recommendation for decent write > latency performance from HDDs > > > On 12/04/2020 20:35, huxiaoyu(a)horebdata.cn wrote: >> >> >> That said, with a recent kernel such as 4.19 stable release, and >> a decent enterprise SSD such as Intel D4510/4610, i do not need >> to worry about the data safety related to dm-writecache. >> >> thanks a lot. >> >> samuel >> > > The patch recently went in 5.4 and backported to 4.18+, so you > need to check your version has it. > > This will guarantee that a fua (force unit access)/sync write > generated by the OSD, will end up on media before successful > return. Enterprise drives + any drive that supports PLP will > guarantee stored data will not corrupt in a power failure. > > If you wish, you can install PetaSAN to test cache performance > yourself. > > /Maged > > >> ------------------------------------------------------------------------ >> huxiaoyu(a)horebdata.cn >> >> *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> >> *Date:* 2020-04-12 20:03 >> *To:* huxiaoyu(a)horebdata.cn <mailto:huxiaoyu@horebdata.cn>; >> Reed Dier <mailto:reed.dier@focusvq.com>; jesper >> <mailto:jesper@krogh.cc> >> *CC:* ceph-users <mailto:ceph-users@ceph.io> >> *Subject:* Re: [ceph-users] Re: Recommendation for decent >> write latency performance from HDDs >> >> >> On 12/04/2020 18:10, huxiaoyu(a)horebdata.cn wrote: >>> Dear Maged Mokhtar， >>> >>> It is very interesting to know that your experiment shows >>> dm-writecache would be better than other alternatives. I >>> have two questions: >> >> yes much better. >> >>> >>> 1 can one cache device serve multiple HDDs? I know bcache >>> can do this, which is convenient. dont know whether >>> dm-writecache has such a feature >> >> it works on a partition, so you can partition your disk to >> several partitions to support multiple OSDs,in our ui we >> allow from 1-8 partitions. >> >>> 2 Did you test whether write-back to disks from >>> dm-writecache is power-safe or not. As far as know, bcache >>> does not gurantee power-safe writebacks, thus i have to turn >>> off HDD write cache (otherwise a data loss may occur) >>> >> Get a recent kernel and insure it has the fua patch >> mentioned, this will correctly handle sync writes, else you >> may lose data. You also need a recent lvm tool set that >> support dm-writecache. You need also use an SSD with PLP >> support (enterprise models and some consumer models), some >> cheaper SSDs without PLP support can lose existing stored >> data on power loss, since their write cycle involves a >> read/erase/write block so a power loss can erase already >> stored data on such consumer devices. We also have another >> patch (see our source) that adds mirroring of metadata to >> dm-writecache to handle this, but that is not needed for >> decent drives. >> >>> best regards, >>> >>> samuel >>> >>> >>> >>> >>> ------------------------------------------------------------------------ >>> huxiaoyu(a)horebdata.cn >>> >>> *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> >>> *Date:* 2020-04-12 16:45 >>> *To:* Reed Dier <mailto:reed.dier@focusvq.com>; jesper >>> <mailto:jesper@krogh.cc> >>> *CC:* ceph-users <mailto:ceph-users@ceph.io> >>> *Subject:* [ceph-users] Re: Recommendation for decent >>> write latency performance from HDDs >>> On 10/04/2020 23:17, Reed Dier wrote: >>> > Going to resurrect this thread to provide another option: >>> > >>> > LVM-cache, ie putting a cache device in-front of the >>> bluestore-LVM LV. >>> > >>> > I only mention this because I noticed it in the SUSE >>> documentation for >>> > SES6 (based on Nautilus) here: >>> > >>> https://documentation.suse.com/ses/6/html/ses-all/lvmcache.html >>> in PetaSAN project, we support dm-writecache and it >>> works very well. We >>> had done tests with other cache devices such as bcache >>> and dm-cache, >>> and it is much better. it is mainly a write cache, but >>> reads are read >>> from cache device if present, but does not promote reads >>> from slow >>> device. Typically with hdd clusters, write latency is >>> the issue, reads >>> are helped by OSD cache and in case of reduplicated >>> pools, are much >>> faster anyways. >>> You need a recent kernel, we have an upstreamed patch: >>> https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/dri… >>> + depending on your distribution, you may need an >>> updated lvm tool set. >>> /Maged >>> > >>> >> * If you plan to use a fast drive as an LVM cache >>> for multiple >>> >> OSDs, be aware that all OSD operations (including >>> replication) >>> >> will go through the caching device. All >>> reads will be queried >>> >> from the caching device, and are only served from >>> the slow device >>> >> in case of a cache miss. Writes are always >>> applied to the caching >>> >> device first, and are flushed to the slow device >>> at a later time >>> >> ('writeback' is the default caching mode). >>> >> * When deciding whether to utilize an LVM cache, >>> verify whether the >>> >> fast drive can serve as a front for multiple OSDs >>> while still >>> >> providing an acceptable amount of IOPS. You >>> can test it by >>> >> measuring the maximum amount of IOPS that the >>> fast device can >>> >> serve, and then dividing the result by the number >>> of OSDs behind >>> >> the fast device. If the result is lower or close >>> to the maximum >>> >> amount of IOPS that the OSD can provide without >>> the cache, LVM >>> >> cache is probably not suited for this setup. >>> >> >>> >> * The interaction of the LVM cache device with OSDs is >>> >> important. Writes are periodically flushed from >>> the caching >>> >> device to the slow device. If the incoming >>> traffic is sustained >>> >> and significant, the caching device will struggle >>> to keep up with >>> >> incoming requests as well as the flushing >>> process, resulting in >>> >> performance drop. Unless the fast device can >>> provide much more >>> >> IOPS with better latency than the slow device, do >>> not use LVM >>> >> cache with a sustained high volume workload. >>> Traffic in a burst >>> >> pattern is more suited for LVM cache as it gives >>> the cache time >>> >> to flush its dirty data without interfering with >>> client traffic. >>> >> For a sustained low traffic workload, it is >>> difficult to guess in >>> >> advance whether using LVM cache will improve >>> performance. The >>> >> best test is to benchmark and compare the LVM >>> cache setup against >>> >> the WAL/DB setup. Moreover, as small writes >>> are heavy on the WAL >>> >> partition, it is suggested to use the fast device >>> for the DB >>> >> and/or WAL instead of an LVM cache. >>> >> >>> > >>> > So it sounds like you could partition your NVMe for >>> either LVM-cache, >>> > DB/WAL, or both? >>> > >>> > Just figured this sounded a bit more akin to what you >>> were looking for >>> > in your original post and figured I would share. >>> > >>> > I don't use this, but figured I would share it. >>> > >>> > Reed >>> > >>> >> On Apr 4, 2020, at 9:12 AM, jesper(a)krogh.cc >>> <mailto:jesper@krogh.cc> >>> >> wrote: >>> >> >>> >> Hi. >>> >> >>> >> We have a need for "bulk" storage - but with decent >>> write latencies. >>> >> Normally we would do this with a DAS with a Raid5 >>> with 2GB Battery >>> >> backed write cache in front - As cheap as possible >>> but still getting the >>> >> features of scalability of ceph. >>> >> >>> >> In our "first" ceph cluster we did the same - just >>> stuffed in BBWC >>> >> in the OSD nodes and we're fine - but now we're onto >>> the next one and >>> >> systems like: >>> >> >>> https://www.supermicro.com/en/products/system/1U/6119/SSG-6119P-ACR12N4L.cfm >>> >> Does not support a Raid controller like that - but is >>> branded as for >>> >> "Ceph >>> >> Storage Solutions". >>> >> >>> >> It do however support 4 NVMe slots in the front - So >>> - some level of >>> >> "tiering" using the NVMe drives should be what is >>> "suggested" - but what >>> >> do people do? What is recommeneded. I see multiple >>> options: >>> >> >>> >> Ceph tiering at the "pool - layer": >>> >> >>> https://docs.ceph.com/docs/master/rados/operations/cache-tiering/ >>> >> And rumors that it is "deprectated: >>> >> >>> https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2.0/html… >>> >> >>> >> Pro: Abstract layer >>> >> Con: Deprecated? - Lots of warnings? >>> >> >>> >> Offloading the block.db on NVMe / SSD: >>> >> >>> https://docs.ceph.com/docs/mimic/rados/configuration/bluestore-config-ref/ >>> >> >>> >> Pro: Easy to deal with - seem heavily supported. >>> >> Con: As far as I can tell - this will only benefit >>> the metadata of the >>> >> osd- not actual data. Thus a data-commit to the osd >>> til still be >>> >> dominated >>> >> by the writelatency of the underlying - very slow HDD. >>> >> >>> >> Bcache: >>> >> >>> http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-June/027713.html >>> >> >>> >> Pro: Closest to the BBWC mentioned above - but with >>> way-way larger cache >>> >> sizes. >>> >> Con: It is hard to see if I end up being the only one >>> on the planet using >>> >> this >>> >> solution. >>> >> >>> >> Eat it - Writes will be as slow as hitting dead-rust >>> - anything that >>> >> cannot live >>> >> with that need to be entirely on SSD/NVMe. >>> >> >>> >> Other? >>> >> >>> >> Thanks for your input. >>> >> >>> >> Jesper >>> >> _______________________________________________ >>> >> ceph-users mailing list -- ceph-users(a)ceph.io >>> >> To unsubscribe send an email to ceph-users-leave(a)ceph.io >>> > >>> > >>> > _______________________________________________ >>> > ceph-users mailing list -- ceph-users(a)ceph.io >>> > To unsubscribe send an email to ceph-users-leave(a)ceph.io >>> _______________________________________________ >>> ceph-users mailing list -- ceph-users(a)ceph.io >>> To unsubscribe send an email to ceph-users-leave(a)ceph.io >>>

1 0

Re: Recommendation for decent write latency performance from HDDs
by Maged Mokhtar 12 Apr '20

12 Apr '20

On 12/04/2020 20:35, huxiaoyu(a)horebdata.cn wrote: > > > That said, with a recent kernel such as 4.19 stable release, and a > decent enterprise SSD such as Intel D4510/4610, i do not need to worry > about the data safety related to dm-writecache. > > thanks a lot. > > samuel > The patch recently went in 5.4 and backported to 4.18+, so you need to check your version has it. This will guarantee that a fua (force unit access)/sync write generated by the OSD, will end up on media before successful return. Enterprise drives + any drive that supports PLP will guarantee stored data will not corrupt in a power failure. If you wish, you can install PetaSAN to test cache performance yourself. /Maged > ------------------------------------------------------------------------ > huxiaoyu(a)horebdata.cn > > *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> > *Date:* 2020-04-12 20:03 > *To:* huxiaoyu(a)horebdata.cn <mailto:huxiaoyu@horebdata.cn>; Reed > Dier <mailto:reed.dier@focusvq.com>; jesper <mailto:jesper@krogh.cc> > *CC:* ceph-users <mailto:ceph-users@ceph.io> > *Subject:* Re: [ceph-users] Re: Recommendation for decent write > latency performance from HDDs > > > On 12/04/2020 18:10, huxiaoyu(a)horebdata.cn wrote: >> Dear Maged Mokhtar， >> >> It is very interesting to know that your experiment shows >> dm-writecache would be better than other alternatives. I have two >> questions: > > yes much better. > >> >> 1 can one cache device serve multiple HDDs? I know bcache can do >> this, which is convenient. dont know whether dm-writecache has >> such a feature > > it works on a partition, so you can partition your disk to several > partitions to support multiple OSDs,in our ui we allow from 1-8 > partitions. > >> 2 Did you test whether write-back to disks from dm-writecache is >> power-safe or not. As far as know, bcache does not gurantee >> power-safe writebacks, thus i have to turn off HDD write cache >> (otherwise a data loss may occur) >> > Get a recent kernel and insure it has the fua patch mentioned, > this will correctly handle sync writes, else you may lose data. > You also need a recent lvm tool set that support dm-writecache. > You need also use an SSD with PLP support (enterprise models and > some consumer models), some cheaper SSDs without PLP support can > lose existing stored data on power loss, since their write cycle > involves a read/erase/write block so a power loss can erase > already stored data on such consumer devices. We also have another > patch (see our source) that adds mirroring of metadata to > dm-writecache to handle this, but that is not needed for decent > drives. > >> best regards, >> >> samuel >> >> >> >> >> ------------------------------------------------------------------------ >> huxiaoyu(a)horebdata.cn >> >> *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> >> *Date:* 2020-04-12 16:45 >> *To:* Reed Dier <mailto:reed.dier@focusvq.com>; jesper >> <mailto:jesper@krogh.cc> >> *CC:* ceph-users <mailto:ceph-users@ceph.io> >> *Subject:* [ceph-users] Re: Recommendation for decent write >> latency performance from HDDs >> On 10/04/2020 23:17, Reed Dier wrote: >> > Going to resurrect this thread to provide another option: >> > >> > LVM-cache, ie putting a cache device in-front of the >> bluestore-LVM LV. >> > >> > I only mention this because I noticed it in the SUSE >> documentation for >> > SES6 (based on Nautilus) here: >> > https://documentation.suse.com/ses/6/html/ses-all/lvmcache.html >> in PetaSAN project, we support dm-writecache and it works >> very well. We >> had done tests with other cache devices such as bcache and >> dm-cache, >> and it is much better. it is mainly a write cache, but reads >> are read >> from cache device if present, but does not promote reads from >> slow >> device. Typically with hdd clusters, write latency is the >> issue, reads >> are helped by OSD cache and in case of reduplicated pools, >> are much >> faster anyways. >> You need a recent kernel, we have an upstreamed patch: >> https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/dri… >> + depending on your distribution, you may need an updated lvm >> tool set. >> /Maged >> > >> >> * If you plan to use a fast drive as an LVM cache for >> multiple >> >> OSDs, be aware that all OSD operations (including >> replication) >> >> will go through the caching device. All reads will be >> queried >> >> from the caching device, and are only served from the >> slow device >> >> in case of a cache miss. Writes are always applied to >> the caching >> >> device first, and are flushed to the slow device at a >> later time >> >> ('writeback' is the default caching mode). >> >> * When deciding whether to utilize an LVM cache, verify >> whether the >> >> fast drive can serve as a front for multiple OSDs >> while still >> >> providing an acceptable amount of IOPS. You can test it by >> >> measuring the maximum amount of IOPS that the fast >> device can >> >> serve, and then dividing the result by the number of >> OSDs behind >> >> the fast device. If the result is lower or close to >> the maximum >> >> amount of IOPS that the OSD can provide without the >> cache, LVM >> >> cache is probably not suited for this setup. >> >> >> >> * The interaction of the LVM cache device with OSDs is >> >> important. Writes are periodically flushed from the >> caching >> >> device to the slow device. If the incoming traffic >> is sustained >> >> and significant, the caching device will struggle to >> keep up with >> >> incoming requests as well as the flushing process, >> resulting in >> >> performance drop. Unless the fast device can provide >> much more >> >> IOPS with better latency than the slow device, do not >> use LVM >> >> cache with a sustained high volume workload. Traffic >> in a burst >> >> pattern is more suited for LVM cache as it gives the >> cache time >> >> to flush its dirty data without interfering with >> client traffic. >> >> For a sustained low traffic workload, it is difficult >> to guess in >> >> advance whether using LVM cache will improve >> performance. The >> >> best test is to benchmark and compare the LVM cache >> setup against >> >> the WAL/DB setup. Moreover, as small writes are heavy >> on the WAL >> >> partition, it is suggested to use the fast device for >> the DB >> >> and/or WAL instead of an LVM cache. >> >> >> > >> > So it sounds like you could partition your NVMe for either >> LVM-cache, >> > DB/WAL, or both? >> > >> > Just figured this sounded a bit more akin to what you were >> looking for >> > in your original post and figured I would share. >> > >> > I don't use this, but figured I would share it. >> > >> > Reed >> > >> >> On Apr 4, 2020, at 9:12 AM, jesper(a)krogh.cc >> <mailto:jesper@krogh.cc> >> >> wrote: >> >> >> >> Hi. >> >> >> >> We have a need for "bulk" storage - but with decent write >> latencies. >> >> Normally we would do this with a DAS with a Raid5 with 2GB >> Battery >> >> backed write cache in front - As cheap as possible but >> still getting the >> >> features of scalability of ceph. >> >> >> >> In our "first" ceph cluster we did the same - just stuffed >> in BBWC >> >> in the OSD nodes and we're fine - but now we're onto the >> next one and >> >> systems like: >> >> >> https://www.supermicro.com/en/products/system/1U/6119/SSG-6119P-ACR12N4L.cfm >> >> Does not support a Raid controller like that - but is >> branded as for >> >> "Ceph >> >> Storage Solutions". >> >> >> >> It do however support 4 NVMe slots in the front - So - >> some level of >> >> "tiering" using the NVMe drives should be what is >> "suggested" - but what >> >> do people do? What is recommeneded. I see multiple options: >> >> >> >> Ceph tiering at the "pool - layer": >> >> >> https://docs.ceph.com/docs/master/rados/operations/cache-tiering/ >> >> And rumors that it is "deprectated: >> >> >> https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2.0/html… >> >> >> >> Pro: Abstract layer >> >> Con: Deprecated? - Lots of warnings? >> >> >> >> Offloading the block.db on NVMe / SSD: >> >> >> https://docs.ceph.com/docs/mimic/rados/configuration/bluestore-config-ref/ >> >> >> >> Pro: Easy to deal with - seem heavily supported. >> >> Con: As far as I can tell - this will only benefit the >> metadata of the >> >> osd- not actual data. Thus a data-commit to the osd til >> still be >> >> dominated >> >> by the writelatency of the underlying - very slow HDD. >> >> >> >> Bcache: >> >> >> http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-June/027713.html >> >> >> >> Pro: Closest to the BBWC mentioned above - but with >> way-way larger cache >> >> sizes. >> >> Con: It is hard to see if I end up being the only one on >> the planet using >> >> this >> >> solution. >> >> >> >> Eat it - Writes will be as slow as hitting dead-rust - >> anything that >> >> cannot live >> >> with that need to be entirely on SSD/NVMe. >> >> >> >> Other? >> >> >> >> Thanks for your input. >> >> >> >> Jesper >> >> _______________________________________________ >> >> ceph-users mailing list -- ceph-users(a)ceph.io >> >> To unsubscribe send an email to ceph-users-leave(a)ceph.io >> > >> > >> > _______________________________________________ >> > ceph-users mailing list -- ceph-users(a)ceph.io >> > To unsubscribe send an email to ceph-users-leave(a)ceph.io >> _______________________________________________ >> ceph-users mailing list -- ceph-users(a)ceph.io >> To unsubscribe send an email to ceph-users-leave(a)ceph.io >>

2 1

Re: Recommendation for decent write latency performance from HDDs
by Maged Mokhtar 12 Apr '20

12 Apr '20

On 12/04/2020 18:10, huxiaoyu(a)horebdata.cn wrote: > Dear Maged Mokhtar， > > It is very interesting to know that your experiment shows > dm-writecache would be better than other alternatives. I have two > questions: yes much better. > > 1 can one cache device serve multiple HDDs? I know bcache can do > this, which is convenient. dont know whether dm-writecache has such a > feature it works on a partition, so you can partition your disk to several partitions to support multiple OSDs,in our ui we allow from 1-8 partitions. > 2 Did you test whether write-back to disks from dm-writecache is > power-safe or not. As far as know, bcache does not gurantee power-safe > writebacks, thus i have to turn off HDD write cache (otherwise a data > loss may occur) > Get a recent kernel and insure it has the fua patch mentioned, this will correctly handle sync writes, else you may lose data. You also need a recent lvm tool set that support dm-writecache. You need also use an SSD with PLP support (enterprise models and some consumer models), some cheaper SSDs without PLP support can lose existing stored data on power loss, since their write cycle involves a read/erase/write block so a power loss can erase already stored data on such consumer devices. We also have another patch (see our source) that adds mirroring of metadata to dm-writecache to handle this, but that is not needed for decent drives. > best regards, > > samuel > > > > > ------------------------------------------------------------------------ > huxiaoyu(a)horebdata.cn > > *From:* Maged Mokhtar <mailto:mmokhtar@petasan.org> > *Date:* 2020-04-12 16:45 > *To:* Reed Dier <mailto:reed.dier@focusvq.com>; jesper > <mailto:jesper@krogh.cc> > *CC:* ceph-users <mailto:ceph-users@ceph.io> > *Subject:* [ceph-users] Re: Recommendation for decent write > latency performance from HDDs > On 10/04/2020 23:17, Reed Dier wrote: > > Going to resurrect this thread to provide another option: > > > > LVM-cache, ie putting a cache device in-front of the > bluestore-LVM LV. > > > > I only mention this because I noticed it in the SUSE > documentation for > > SES6 (based on Nautilus) here: > > https://documentation.suse.com/ses/6/html/ses-all/lvmcache.html > in PetaSAN project, we support dm-writecache and it works very > well. We > had done tests with other cache devices such as bcache and dm-cache, > and it is much better. it is mainly a write cache, but reads are read > from cache device if present, but does not promote reads from slow > device. Typically with hdd clusters, write latency is the issue, > reads > are helped by OSD cache and in case of reduplicated pools, are much > faster anyways. > You need a recent kernel, we have an upstreamed patch: > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/dri… > + depending on your distribution, you may need an updated lvm tool > set. > /Maged > > > >> * If you plan to use a fast drive as an LVM cache for multiple > >> OSDs, be aware that all OSD operations (including replication) > >> will go through the caching device. All reads will be queried > >> from the caching device, and are only served from the slow > device > >> in case of a cache miss. Writes are always applied to the > caching > >> device first, and are flushed to the slow device at a later > time > >> ('writeback' is the default caching mode). > >> * When deciding whether to utilize an LVM cache, verify > whether the > >> fast drive can serve as a front for multiple OSDs while still > >> providing an acceptable amount of IOPS. You can test it by > >> measuring the maximum amount of IOPS that the fast device can > >> serve, and then dividing the result by the number of OSDs > behind > >> the fast device. If the result is lower or close to the maximum > >> amount of IOPS that the OSD can provide without the cache, LVM > >> cache is probably not suited for this setup. > >> > >> * The interaction of the LVM cache device with OSDs is > >> important. Writes are periodically flushed from the caching > >> device to the slow device. If the incoming traffic is sustained > >> and significant, the caching device will struggle to keep > up with > >> incoming requests as well as the flushing process, resulting in > >> performance drop. Unless the fast device can provide much more > >> IOPS with better latency than the slow device, do not use LVM > >> cache with a sustained high volume workload. Traffic in a burst > >> pattern is more suited for LVM cache as it gives the cache time > >> to flush its dirty data without interfering with client > traffic. > >> For a sustained low traffic workload, it is difficult to > guess in > >> advance whether using LVM cache will improve performance. The > >> best test is to benchmark and compare the LVM cache setup > against > >> the WAL/DB setup. Moreover, as small writes are heavy on > the WAL > >> partition, it is suggested to use the fast device for the DB > >> and/or WAL instead of an LVM cache. > >> > > > > So it sounds like you could partition your NVMe for either > LVM-cache, > > DB/WAL, or both? > > > > Just figured this sounded a bit more akin to what you were > looking for > > in your original post and figured I would share. > > > > I don't use this, but figured I would share it. > > > > Reed > > > >> On Apr 4, 2020, at 9:12 AM, jesper(a)krogh.cc > <mailto:jesper@krogh.cc> > >> wrote: > >> > >> Hi. > >> > >> We have a need for "bulk" storage - but with decent write > latencies. > >> Normally we would do this with a DAS with a Raid5 with 2GB Battery > >> backed write cache in front - As cheap as possible but still > getting the > >> features of scalability of ceph. > >> > >> In our "first" ceph cluster we did the same - just stuffed in BBWC > >> in the OSD nodes and we're fine - but now we're onto the next > one and > >> systems like: > >> > https://www.supermicro.com/en/products/system/1U/6119/SSG-6119P-ACR12N4L.cfm > >> Does not support a Raid controller like that - but is branded > as for > >> "Ceph > >> Storage Solutions". > >> > >> It do however support 4 NVMe slots in the front - So - some > level of > >> "tiering" using the NVMe drives should be what is "suggested" - > but what > >> do people do? What is recommeneded. I see multiple options: > >> > >> Ceph tiering at the "pool - layer": > >> https://docs.ceph.com/docs/master/rados/operations/cache-tiering/ > >> And rumors that it is "deprectated: > >> > https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2.0/html… > >> > >> Pro: Abstract layer > >> Con: Deprecated? - Lots of warnings? > >> > >> Offloading the block.db on NVMe / SSD: > >> > https://docs.ceph.com/docs/mimic/rados/configuration/bluestore-config-ref/ > >> > >> Pro: Easy to deal with - seem heavily supported. > >> Con: As far as I can tell - this will only benefit the metadata > of the > >> osd- not actual data. Thus a data-commit to the osd til still be > >> dominated > >> by the writelatency of the underlying - very slow HDD. > >> > >> Bcache: > >> > http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-June/027713.html > >> > >> Pro: Closest to the BBWC mentioned above - but with way-way > larger cache > >> sizes. > >> Con: It is hard to see if I end up being the only one on the > planet using > >> this > >> solution. > >> > >> Eat it - Writes will be as slow as hitting dead-rust - anything > that > >> cannot live > >> with that need to be entirely on SSD/NVMe. > >> > >> Other? > >> > >> Thanks for your input. > >> > >> Jesper > >> _______________________________________________ > >> ceph-users mailing list -- ceph-users(a)ceph.io > >> To unsubscribe send an email to ceph-users-leave(a)ceph.io > > > > > > _______________________________________________ > > ceph-users mailing list -- ceph-users(a)ceph.io > > To unsubscribe send an email to ceph-users-leave(a)ceph.io > _______________________________________________ > ceph-users mailing list -- ceph-users(a)ceph.io > To unsubscribe send an email to ceph-users-leave(a)ceph.io >

2 1

Recommendation for decent write latency performance from HDDs
by jesper＠krogh.cc 12 Apr '20

12 Apr '20

Hi. We have a need for "bulk" storage - but with decent write latencies. Normally we would do this with a DAS with a Raid5 with 2GB Battery backed write cache in front - As cheap as possible but still getting the features of scalability of ceph. In our "first" ceph cluster we did the same - just stuffed in BBWC in the OSD nodes and we're fine - but now we're onto the next one and systems like: https://www.supermicro.com/en/products/system/1U/6119/SSG-6119P-ACR12N4L.cfm Does not support a Raid controller like that - but is branded as for "Ceph Storage Solutions". It do however support 4 NVMe slots in the front - So - some level of "tiering" using the NVMe drives should be what is "suggested" - but what do people do? What is recommeneded. I see multiple options: Ceph tiering at the "pool - layer": https://docs.ceph.com/docs/master/rados/operations/cache-tiering/ And rumors that it is "deprectated: https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2.0/html… Pro: Abstract layer Con: Deprecated? - Lots of warnings? Offloading the block.db on NVMe / SSD: https://docs.ceph.com/docs/mimic/rados/configuration/bluestore-config-ref/ Pro: Easy to deal with - seem heavily supported. Con: As far as I can tell - this will only benefit the metadata of the osd- not actual data. Thus a data-commit to the osd til still be dominated by the writelatency of the underlying - very slow HDD. Bcache: http://lists.ceph.com/pipermail/ceph-users-ceph.com/2018-June/027713.html Pro: Closest to the BBWC mentioned above - but with way-way larger cache sizes. Con: It is hard to see if I end up being the only one on the planet using this solution. Eat it - Writes will be as slow as hitting dead-rust - anything that cannot live with that need to be entirely on SSD/NVMe. Other? Thanks for your input. Jesper

5 7

How to fix 1 pg stale+active+clean
by Marc Roos 12 Apr '20

12 Apr '20

How to fix 1 pg marked as stale+active+clean pg 30.4 is stuck stale for 175342.419261, current state stale+active+clean, last acting [31]

3 4

Re: Understanding monitor requirements
by Brian Topping 12 Apr '20

12 Apr '20

Hi again, after all, this appears to be an MTU issue: Baseline: 1) Two of the nodes have a straight ethernet with 1500MTU, the third (problem) node is on a WAN tunnel with a restricted MTU. It appears that the MTUs were not set up correctly, so no surprise some software has problems. 2) I decided I knew Ceph well enough that I could handle recovery from disaster cases in Rook and it has advantages I can use. So please keep that in mind as I discuss this issue. (For those who aren’t familiar, Rook just orchestrates containers that are built by the Ceph team.) 3) In Rook, monitors run as pods under a CNI. The CNI adds additional overhead for transit, in my case a VxLAN overlay network. This overhead is apparently not enough to cause problems when running between nodes on a full 1500MTU local net. So the first two monitors come up cleanly. After spending a lot of time looking at the logs, I could see the mon map of all three nodes properly distributed, but when it came to an election, all nodes knew the election epoch but the third was not joining. Comparing the logs of the second node as peon with the troubled third node on the other side of the restricted MTU, the difference appeared to be that the third node was not providing a feature proposal when in fact it probably was and it was being dropped. So the election would end without the third node being a part of the quorum. The third node stopped asking for a new election and that’s how things ended. What I did this morning was figure out the MTU of the WAN tunnel and then change the entire CNI to that number. My expectation was that everything would start working and the necessary fragmentation would be generated by the client end of any connection. Instead, the second node that was previously able to join as peon was no longer able to do so. It seems to follow that the smaller MTU (1340 to be exact) set on the overall CNI causes the elections to fail. There are a number of things that I can do to improve the behavior of the cluster (such as PMTUD), but if Ceph is not going to work with a small MTU, all bets are off. I tried looking for issues in tracker.ceph.com, but apparently I haven’t logged in there for a while and my account was deleted. I applied for a new one. Any ideas what I can do here? Thanks! Brian

1 1

MDS: what's the purpose for LogEvent with empty metablob?
by Xinying Song 11 Apr '20

11 Apr '20

Hi, everyone: what's the purpose for LogEvent with empty metablob? For example in link/unlink operation cross two active mds, the procedure may look like below: 1. master send PREPARE to slave 2. slave receives PREPARE, and journal an ESlaveUpdate::OP_PREPARE, then responds ACK to master 3. master receives ACK and journal an EUpdate, then send OP_FINISH to slave 4. slave receives OP_FINISH and journal ESlaveUpdate::OP_COMMIT, then send OP_COMMIT to master 5. master receives OP_COMMIT and journal an ECommitted Why logevents in step 4 and 5 are necessary? Both of them have empty metablob. I guess these two logevents are originally used for a scene that crashes happen, but actually it seems not necessary. For example, if cash happens, after failed mds are brought up again, in resolve stage, master will resend OP_FINISH to slave, then things will continue as expected. Any tips about this question are appreciated. Thanks!

1 0

Octopus 15.2.1
by gert.wieberdink＠ziggo.nl 11 Apr '20

11 Apr '20

I am trying to install a fresh Ceph cluster on CentOS 8. Using the latest Ceph repo for el8, it still is not possible because of certain dependencies: libleveldb.so.1 needed by ceph-osd. Even after manually downloading and installing the leveldb-1.20-1.el8.x86_64.rpm package, there are still dependencies: Problem: package ceph-mgr-2:15.2.1-0.el8.x86_64 requires ceph-mgr-modules-core = 2:15.2.1-0.el8, but none of the providers can be installed - conflicting requests - nothing provides python3-cherrypy needed by ceph-mgr-modules-core-2:15.2.1-0.el8.noarch - nothing provides python3-pecan needed by ceph-mgr-modules-core-2:15.2.1-0.el8.noarch Is there a way to perform a fresh Ceph install on CentOS 8? Thanking in advance for your answer.

3 2