1 thing I forgot to mention, we have proxy settings on the servers:
curl -A 'urlgrabber/3.9.1 yum/3.2.29' -LIv
https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=x86_64
[1] 28809
[root@hk-cephm-2007 ~]# * About to connect() to proxy sisproxy port 3128 (#0)
* Trying 10.118.37.223...
* Connected to sisproxy (10.118.37.223) port 3128 (#0)
* Establish HTTP proxy tunnel to mirrors.fedoraproject.org:443
CONNECT mirrors.fedoraproject.org:443 HTTP/1.1
Host: mirrors.fedoraproject.org:443
User-Agent: urlgrabber/3.9.1 yum/3.2.29
Proxy-Connection: Keep-Alive
< HTTP/1.1 200 Connection established
HTTP/1.1 200 Connection established
<
* Proxy replied OK to CONNECT request
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate:
* subject: CN=*.fedoraproject.org,O="Red Hat, Inc.",L=Raleigh,ST=North
Carolina,C=US
* start date: Feb 27 00:00:00 2020 GMT
* expire date: Mar 02 12:00:00 2022 GMT
* common name: *.fedoraproject.org
* issuer: CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert
Inc,C=US
HEAD /metalink?repo=epel-7 HTTP/1.1
User-Agent: urlgrabber/3.9.1 yum/3.2.29
Host:
mirrors.fedoraproject.org
Accept: */*
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Date: Thu, 30 Jul 2020 14:45:42 GMT
Date: Thu, 30 Jul 2020 14:45:42 GMT
< Server: Apache
Server: Apache
< X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
< X-Xss-Protection: 1; mode=block
X-Xss-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
Referrer-Policy: same-origin
< content-type: application/metalink+xml
content-type: application/metalink+xml
< content-length: 304
content-length: 304
< AppTime: D=1072
AppTime: D=1072
< X-Fedora-ProxyServer:
proxy01.iad2.fedoraproject.org
X-Fedora-ProxyServer:
proxy01.iad2.fedoraproject.org
< X-Fedora-RequestID: XyLdFuQS5UUqdgw-qV-D4wAAAwU
X-Fedora-RequestID: XyLdFuQS5UUqdgw-qV-D4wAAAwU
<
* Connection #0 to host sisproxy left intact
[1]+ Done curl -A 'urlgrabber/3.9.1 yum/3.2.29' -LIv
https://mirrors.fedoraproject.org/metalink?repo=epel-7
Maybe someone can dig out some information from this.
-----Original Message-----
From: Szabo, Istvan (Agoda) <Istvan.Szabo(a)agoda.com>
Sent: Thursday, July 30, 2020 9:36 PM
To: ceph-users(a)ceph.io
Subject: [ceph-users] ceph-ansible epel repo
Email received from outside the company. If in doubt don't click links nor open
attachments!
________________________________
Hi,
I've configured the all.yml like this:
grep -v "^#\|^$"
ceph/ceph-ansible-playbooks/ceph-ansible-stable-4.0/group_vars/all.yml
---
dummy:
nautilus: 14
cluster: ceph
mon_group_name: mons
osd_group_name: osds
mgr_group_name: mgrs
configure_firewall: False
centos_package_dependencies:
- epel-release
- libselinux-python
ceph_origin: repository
ceph_repository: community
ceph_mirror:
http://hk-repo-2001/repo/ceph/
ceph_stable_key:
http://hk-repo-2001/repo/ceph/release.asc
ceph_stable_release: nautilus
ceph_stable_redhat_distro: el7
monitor_interface: bond0
ip_version: ipv4
public_network: 10.121.58.0/24
cluster_network: 192.168.58.0/24
osd_objectstore: bluestore
dashboard_enabled: False
I'd like to install from our repo server, but when it wants to install at this step it
complains about can't reach the epel repository:
TASK [ceph-common : install redhat ceph packages]
********************************************************************************************************
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
fatal: [hk-ceph-2c09]: FAILED! => {"attempts": 3, "changed": false,
"msg": "Failure talking to yum: Cannot retrieve metalink for repository:
epel/x86_64. Please verify its path and try again"}
fatal: [hk-ceph-2c08]: FAILED! => {"attempts": 3, "changed": false,
"msg": "Failure talking to yum: Cannot retrieve metalink for repository:
epel/x86_64. Please verify its path and try again"}
fatal: [hk-ceph-2c10]: FAILED! => {"attempts": 3, "changed": false,
"msg": "Failure talking to yum: Cannot retrieve metalink for repository:
epel/x86_64. Please verify its path and try again"} FAILED - RETRYING: install redhat
ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (3 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
fatal: [hk-ceph-2c07]: FAILED! => {"attempts": 3, "changed": false,
"msg": "Failure talking to yum: failure: repodata/repomd.xml from epel:
[Errno 256] No more mirrors to
try.\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/repodata/repomd.x…: [Errno 14]
curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:
52:3:1:dead:beef:cafe:fed7: Network is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed7: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network
is
unreachable\"\nhttp://download.fedoraproject.org/pub/epel/7/x86_64/rep…d.xml:
[Errno 14] curl#7 - \"Failed to connect to 2620:52:3:1:dead:beef:cafe:fed6: Network
is unreachable\""} FAILED - RETRYING: install redhat ceph packages (2 retries
left).
FAILED - RETRYING: install redhat ceph packages (2 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
FAILED - RETRYING: install redhat ceph packages (1 retries left).
I've tried to change on the hk-ceph-2c07 in the epel.repo file uncomment baseurl and
comment out metalink, cleaned yum ... but nothing helped, I guess something is wrong with
my internal link.
When I try to install something from epel repo on the server, I can, but via ansible I
can't.
I'd like to deploy ceph with ansible user, the rights are correct.
Here is the hosts file for the playbook:
[all:vars]
ansible_ssh_user=ansible
ansible_become=true
ansible_become_method=sudo
ansible_become_user=root
[mons]
hk-cephm-2007
hk-cephm-2008
hk-cephm-2009
[mgrs]
hk-cephm-2007
hk-cephm-2008
hk-cephm-2009
[osds]
hk-ceph-2c07
hk-ceph-2c08
hk-ceph-2c09
hk-ceph-2c10
Why is the repo error or network unreachable?
Thank you
________________________________
This message is confidential and is for the sole use of the intended recipient(s). It may
also be privileged or otherwise protected by copyright or other legal rules. If you have
received it by mistake please let us know by reply email and delete it from your system.
It is prohibited to copy this message or disclose its content to anyone. Any
confidentiality or privilege is not waived or lost by any mistaken delivery or
unauthorized disclosure of the message. All messages sent to and from Agoda may be
monitored to ensure compliance with company policies, to protect the company's
interests and to remove potential malware. Electronic messages may be intercepted,
amended, lost or deleted, or contain viruses.
_______________________________________________
ceph-users mailing list -- ceph-users(a)ceph.io To unsubscribe send an email to
ceph-users-leave(a)ceph.io