[ceph-users] Re: ceph-ansible epel repo

1 thing I forgot to mention, we have proxy settings on the servers: curl -A 'urlgrabber/3.9.1 yum/3.2.29' -LIv https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64 [1] 28809 [root@hk-cephm-2007 ~]# * About to connect() to proxy sisproxy port 3128 (#0) * Trying 10.118.37.223... * Connected to sisproxy (10.118.37.223) port 3128 (#0) * Establish HTTP proxy tunnel to mirrors.fedoraproject.org:443 < HTTP/1.1 200 Connection established HTTP/1.1 200 Connection established < * Proxy replied OK to CONNECT request * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none * SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 * Server certificate: * subject: CN=*.fedoraproject.org,O="Red Hat, Inc.",L=Raleigh,ST=North Carolina,C=US * start date: Feb 27 00:00:00 2020 GMT * expire date: Mar 02 12:00:00 2022 GMT * common name: *.fedoraproject.org * issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US < HTTP/1.1 200 OK HTTP/1.1 200 OK < Date: Thu, 30 Jul 2020 14:45:42 GMT Date: Thu, 30 Jul 2020 14:45:42 GMT < Server: Apache Server: Apache < X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN < X-Xss-Protection: 1; mode=block X-Xss-Protection: 1; mode=block < X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff < Referrer-Policy: same-origin Referrer-Policy: same-origin < content-type: application/metalink+xml content-type: application/metalink+xml < content-length: 304 content-length: 304 < AppTime: D=1072 AppTime: D=1072 < X-Fedora-ProxyServer: proxy01.iad2.fedoraproject.org X-Fedora-ProxyServer: proxy01.iad2.fedoraproject.org < X-Fedora-RequestID: XyLdFuQS5UUqdgw-qV-D4wAAAwU X-Fedora-RequestID: XyLdFuQS5UUqdgw-qV-D4wAAAwU < * Connection #0 to host sisproxy left intact [1]+ Done curl -A 'urlgrabber/3.9.1 yum/3.2.29' -LIv https://mirrors.fedoraproject.org/metalink?repo=epel-7 Maybe someone can dig out some information from this. -----Original Message----- From: Szabo, Istvan (Agoda) &lt;Istvan.Szabo(a)agoda.com&gt; Sent: Thursday, July 30, 2020 9:36 PM To: ceph-users(a)ceph.io Subject: [ceph-users] ceph-ansible epel repo Email received from outside the company. If in doubt don't click links nor open attachments! ________________________________ Hi, I've configured the all.yml like this: grep -v "^#\|^$" ceph/ceph-ansible-playbooks/ceph-ansible-stable-4.0/group_vars/all.yml --- dummy: nautilus: 14 cluster: ceph mon_group_name: mons osd_group_name: osds mgr_group_name: mgrs configure_firewall: False centos_package_dependencies: - epel-release - libselinux-python ceph_origin: repository ceph_repository: community ceph_mirror: http://hk-repo-2001/repo/ceph/ ceph_stable_key: http://hk-repo-2001/repo/ceph/release.asc ceph_stable_release: nautilus ceph_stable_redhat_distro: el7 monitor_interface: bond0 ip_version: ipv4 public_network: 10.121.58.0/24 cluster_network: 192.168.58.0/24 osd_objectstore: bluestore dashboard_enabled: False I'd like to install from our repo server, but when it wants to install at this step it complains about can't reach the epel repository: TASK [ceph-common : install redhat ceph packages] ******************************************************************************************************** FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). fatal: [hk-ceph-2c09]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failure talking to yum: Cannot retrieve metalink for repository: epel/x86_64. Please verify its path and try again"} fatal: [hk-ceph-2c08]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failure talking to yum: Cannot retrieve metalink for repository: epel/x86_64. Please verify its path and try again"} fatal: [hk-ceph-2c10]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failure talking to yum: Cannot retrieve metalink for repository: epel/x86_64. Please verify its path and try again"} FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (3 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). fatal: [hk-ceph-2c07]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failure talking to yum: failure: repodata/repomd.xml from epel: [Errno 256] No more mirrors to try.\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/repodata/repomd.x…: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620: 52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network is unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml: [Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network is unreachable\""} FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (2 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). FAILED - RETRYING: install redhat ceph packages (1 retries left). I've tried to change on the hk-ceph-2c07 in the epel.repo file uncomment baseurl and comment out metalink, cleaned yum ... but nothing helped, I guess something is wrong with my internal link. When I try to install something from epel repo on the server, I can, but via ansible I can't. I'd like to deploy ceph with ansible user, the rights are correct. Here is the hosts file for the playbook: [all:vars] ansible_ssh_user=ansible ansible_become=true ansible_become_method=sudo ansible_become_user=root [mons] hk-cephm-2007 hk-cephm-2008 hk-cephm-2009 [mgrs] hk-cephm-2007 hk-cephm-2008 hk-cephm-2009 [osds] hk-ceph-2c07 hk-ceph-2c08 hk-ceph-2c09 hk-ceph-2c10 Why is the repo error or network unreachable? Thank you ________________________________ This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses. _______________________________________________ ceph-users mailing list -- ceph-users(a)ceph.io To unsubscribe send an email to ceph-users-leave(a)ceph.io