Administration Guide

6.1 Types of Resources #

The following types of resources can be created:

Primitives

A primitive resource, the most basic type of resource.

Groups

Groups contain a set of resources that need to be located together, started sequentially and stopped in the reverse order.

Clones

Clones are resources that can be active on multiple hosts. Any resource can be cloned, provided the respective resource agent supports it.

Promotable clones (also known as multi-state resources) are a special type of clone resources that can be promoted.

6.2 Supported Resource Agent Classes #

For each cluster resource you add, you need to define the standard that the resource agent conforms to. Resource agents abstract the services they provide and present an accurate status to the cluster, which allows the cluster to be non-committal about the resources it manages. The cluster relies on the resource agent to react appropriately when given a start, stop or monitor command.

Typically, resource agents come in the form of shell scripts. SUSE Linux Enterprise High Availability supports the following classes of resource agents:

Open Cluster Framework (OCF) resource agents

OCF RA agents are best suited for use with High Availability, especially when you need promotable clone resources or special monitoring abilities. The agents are generally located in /usr/lib/ocf/resource.d/provider/. Their functionality is similar to that of LSB scripts. However, the configuration is always done with environmental variables that allow them to accept and process parameters easily. OCF specifications have strict definitions of which exit codes must be returned by actions. See Section 10.3, “OCF Return Codes and Failure Recovery”. The cluster follows these specifications exactly.

All OCF Resource Agents are required to have at least the actions start, stop, status, monitor and meta-data. The meta-data action retrieves information about how to configure the agent. For example, to know more about the IPaddr agent by the provider heartbeat, use the following command:

OCF_ROOT=/usr/lib/ocf /usr/lib/ocf/resource.d/heartbeat/IPaddr meta-data

The output is information in XML format, including several sections (general description, available parameters, available actions for the agent).

Alternatively, use the crmsh to view information on OCF resource agents. For details, see Section 5.5.3, “Displaying Information about OCF Resource Agents”.

Linux Standards Base (LSB) scripts

LSB resource agents are generally provided by the operating system/distribution and are found in /etc/init.d. To be used with the cluster, they must conform to the LSB init script specification. For example, they must have several actions implemented, which are, at minimum, start, stop, restart, reload, force-reload and status. For more information, see http://refspecs.linuxbase.org/LSB_4.1.0/LSB-Core-generic/LSB-Core-generic/iniscrptact.html.

The configuration of those services is not standardized. If you intend to use an LSB script with High Availability, make sure that you understand how the relevant script is configured. You can often find information about this in the documentation of the relevant package in /usr/share/doc/packages/PACKAGENAME.

systemd

Pacemaker can manage systemd services if they are present. Instead of init scripts, systemd has unit files. Generally, the services (or unit files) are provided by the operating system. In case you want to convert existing init scripts, find more information at http://0pointer.de/blog/projects/systemd-for-admins-3.html.

Service

There are currently many types of system services that exist in parallel: LSB (belonging to System V init), systemd and (in some distributions) upstart. Therefore, Pacemaker supports a special alias that figures out which one applies to a given cluster node. This is particularly useful when the cluster contains a mix of systemd, upstart and LSB services. Pacemaker tries to find the named service in the following order: as an LSB (SYS-V) init script, a systemd unit file or an Upstart job.

Nagios

Monitoring plug-ins (formerly called Nagios plug-ins) allow to monitor services on remote hosts. Pacemaker can do remote monitoring with the monitoring plug-ins if they are present. For detailed information, see Section 9.1, “Monitoring Services on Remote Hosts with Monitoring Plug-ins”.

STONITH (fencing) resource agents

This class is used exclusively for fencing related resources. For more information, see Chapter 12, Fencing and STONITH.

The agents supplied with SUSE Linux Enterprise High Availability are written to OCF specifications.

6.3 Timeout Values #

Timeouts values for resources can be influenced by the following parameters:

op_defaults (global timeout for operations),
a specific timeout value defined in a resource template,
a specific timeout value defined for a resource.

Note: Priority of Values

If a specific value is defined for a resource, it takes precedence over the global default. A specific value for a resource also takes precedence over a value that is defined in a resource template.

Getting timeout values right is very important. Setting them too low will result in a lot of (unnecessary) fencing operations for the following reasons:

If a resource runs into a timeout, it fails and the cluster will try to stop it.
If stopping the resource also fails (for example, because the timeout for stopping is set too low), the cluster will fence the node. It considers the node where this happens to be out of control.

You can adjust the global default for operations and set any specific timeout values with both crmsh and Hawk2. The best practice for determining and setting timeout values is as follows:

Procedure 6.1: Determining Timeout Values #

Check how long it takes your resources to start and stop (under load).
If needed, add the op_defaults parameter and set the (default) timeout value accordingly:
1. For example, set op_defaults to 60 seconds:
```
crm(live)configure# op_defaults timeout=60
```
2. For resources that need longer periods of time, define individual timeout values.
When configuring operations for a resource, add separate start and stop operations. When configuring operations with Hawk2, it will provide useful timeout proposals for those operations.

6.4 Creating Primitive Resources #

Before you can use a resource in the cluster, it must be set up. For example, to use an Apache server as a cluster resource, set up the Apache server first and complete the Apache configuration before starting the respective resource in your cluster.

If a resource has specific environment requirements, make sure they are present and identical on all cluster nodes. This kind of configuration is not managed by SUSE Linux Enterprise High Availability. You must do this yourself.

You can create primitive resources using either Hawk2 or crmsh.

Note: Do Not Touch Services Managed by the Cluster

When managing a resource with SUSE Linux Enterprise High Availability, the same resource must not be started or stopped otherwise (outside of the cluster, for example manually or on boot or reboot). The High Availability software is responsible for all service start or stop actions.

If you need to execute testing or maintenance tasks after the services are already running under cluster control, make sure to put the resources, nodes, or the whole cluster into maintenance mode before you touch any of them manually. For details, see Section 27.2, “Different Options for Maintenance Tasks”.

Important: Resource IDs and Node Names

Cluster resources and cluster nodes should be named differently. Otherwise Hawk2 will fail.

6.4.1 Creating Primitive Resources with Hawk2 #

To create the most basic type of resource, proceed as follows:

Procedure 6.2: Adding a Primitive Resource #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Primitive.
Enter a unique Resource ID.
In case a resource template exists on which you want to base the resource configuration, select the respective Template. For details about configuring templates, see Procedure 6.6, “Adding a Resource Template”.
Select the resource agent Class you want to use: lsb, ocf, service, stonith, or systemd. For more information, see Section 6.2, “Supported Resource Agent Classes”.
If you selected ocf as class, specify the Provider of your OCF resource agent. The OCF specification allows multiple vendors to supply the same resource agent.
From the Type list, select the resource agent you want to use (for example, IPaddr or Filesystem). A short description for this resource agent is displayed.
With that, you have specified the resource basics.
Note
The selection you get in the Type list depends on the Class (and for OCF resources also on the Provider) you have chosen.
Figure 6.1: Hawk2—Primitive Resource #
After you have specified the resource basics, Hawk2 shows the following categories. Either keep these categories as suggested by Hawk2, or edit them as required.
Parameters (Instance Attributes)
Determines which instance of a service the resource controls. For more information, refer to Section 6.13, “Instance Attributes (Parameters)”.
When creating a resource, Hawk2 automatically shows any required parameters. Edit them to get a valid resource configuration.
Operations
Needed for resource monitoring. For more information, refer to Section 6.14, “Resource Operations”.
When creating a resource, Hawk2 displays the most important resource operations (monitor, start, and stop).
Meta Attributes
Tells the CRM how to treat a specific resource. For more information, refer to Section 6.12, “Resource Options (Meta Attributes)”.
When creating a resource, Hawk2 automatically lists the important meta attributes for that resource (for example, the target-role attribute that defines the initial state of a resource. By default, it is set to Stopped, so the resource will not start immediately).
Utilization
Tells the CRM what capacity a certain resource requires from a node. For more information, refer to Section 7.10.1, “Placing Resources Based on Their Load Impact with Hawk2”.
Click Create to finish the configuration. A message at the top of the screen shows if the action has been successful.

6.4.2 Creating Primitive Resources with crmsh #

Log in as root and start the crm tool:
```
# crm configure
```
Configure a primitive IP address:
```
crm(live)configure# primitive myIP IPaddr \
      params ip=127.0.0.99 op monitor interval=60s
```
The previous command configures a “primitive” with the name myIP. You need to choose a class (here ocf), provider (heartbeat), and type (IPaddr). Furthermore, this primitive expects other parameters like the IP address. Change the address to your setup.
Display and review the changes you have made:
```
crm(live)configure# show
```
Commit your changes to take effect:
```
crm(live)configure# commit
```

6.5 Creating Resource Groups #

Some cluster resources depend on other components or resources. They require that each component or resource starts in a specific order and runs together on the same server with resources it depends on. To simplify this configuration, you can use cluster resource groups.

You can create resource groups using either Hawk2 or crmsh.

Example 6.1: Resource Group for a Web Server #

An example of a resource group would be a Web server that requires an IP address and a file system. In this case, each component is a separate resource that is combined into a cluster resource group. The resource group would run on one or more servers. In case of a software or hardware malfunction, the group would fail over to another server in the cluster, similar to an individual cluster resource.

Figure 6.2: Group Resource #

Groups have the following properties:

Starting and Stopping: Resources are started in the order they appear in and stopped in the reverse order.
Dependency: If a resource in the group cannot run anywhere, then none of the resources located after that resource in the group is allowed to run.
Contents: Groups may only contain a collection of primitive cluster resources. Groups must contain at least one resource, otherwise the configuration is not valid. To refer to the child of a group resource, use the child's ID instead of the group's ID.
Constraints: Although it is possible to reference the group's children in constraints, it is usually preferable to use the group's name instead.
Stickiness: Stickiness is additive in groups. Every active member of the group will contribute its stickiness value to the group's total. So if the default resource-stickiness is 100 and a group has seven members (ﬁve of which are active), the group as a whole will prefer its current location with a score of 500.
Resource Monitoring: To enable resource monitoring for a group, you must configure monitoring separately for each resource in the group that you want monitored.

6.5.1 Creating Resource Groups with Hawk2 #

Note: Empty Groups

Groups must contain at least one resource, otherwise the configuration is not valid. While creating a group, Hawk2 allows you to create more primitives and add them to the group.

Procedure 6.3: Adding a Resource Group #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Group.
Enter a unique Group ID.
To define the group members, select one or multiple entries in the list of Children. Re-sort group members by dragging and dropping them into the order you want by using the “handle” icon on the right.
If needed, modify or add Meta Attributes.
Click Create to finish the configuration. A message at the top of the screen shows if the action has been successful.

Figure 6.3: Hawk2—Resource Group #

6.5.2 Configuring Resource Groups with crmsh #

The following example creates two primitives (an IP address and an e-mail resource):

Run the crm command as system administrator. The prompt changes to crm(live).

Configure the primitives:

crm(live)# configure
crm(live)configure# primitive Public-IP ocf:heartbeat:IPaddr2 \
    params ip=1.2.3.4 \
    op monitor interval=10s
crm(live)configure# primitive Email systemd:postfix \
    op monitor interval=10s

Group the primitives with their relevant identifiers in the correct order:
```
crm(live)configure# group g-mailsvc Public-IP Email
```

6.6 Creating Clone Resources #

You may want certain resources to run simultaneously on multiple nodes in your cluster. To do this you must configure a resource as a clone. Examples of resources that might be configured as clones include cluster file systems like OCFS2. You can clone any resource provided. This is supported by the resource's Resource Agent. Clone resources may even be configured differently depending on which nodes they are hosted.

There are three types of resource clones:

Anonymous Clones: These are the simplest type of clones. They behave identically anywhere they are running. Because of this, there can only be one instance of an anonymous clone active per machine.
Globally Unique Clones: These resources are distinct entities. An instance of the clone running on one node is not equivalent to another instance on another node; nor would any two instances on the same node be equivalent.
Promotable Clones (Multi-state Resources): Active instances of these resources are divided into two states, active and passive. These are also sometimes called primary and secondary. Promotable clones can be either anonymous or globally unique. See also Section 6.7, “Creating Promotable Clones (Multi-state Resources)”.

Clones must contain exactly one group or one regular resource.

When configuring resource monitoring or constraints, clones have different requirements than simple resources. For details, see Pacemaker Explained, available from http://www.clusterlabs.org/pacemaker/doc/.

You can create clone resources using either Hawk2 or crmsh.

6.6.1 Creating Clone Resources with Hawk2 #

Note: Child Resources for Clones

Clones can either contain a primitive or a group as child resources. In Hawk2, child resources cannot be created or modified while creating a clone. Before adding a clone, create child resources and configure them as desired.

Procedure 6.4: Adding a Clone Resource #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Clone.
Enter a unique Clone ID.
From the Child Resource list, select the primitive or group to use as a sub-resource for the clone.
If needed, modify or add Meta Attributes.
Click Create to finish the configuration. A message at the top of the screen shows if the action has been successful.

Figure 6.4: Hawk2—Clone Resource #

6.6.2 Creating Clone Resources with crmsh #

To create an anonymous clone resource, first create a primitive resource and then refer to it with the clone command. Do the following:

Log in as root and start the crm interactive shell:
```
# crm configure
```

Configure the primitive, for example:

crm(live)configure# primitive Apache apache

Clone the primitive:

crm(live)configure# clone cl-apache Apache

6.7 Creating Promotable Clones (Multi-state Resources) #

Promotable clones (formerly known as multi-state resources) are a specialization of clones. They allow the instances to be in one of two operating modes (primary or secondary). Promotable clones must contain exactly one group or one regular resource.

When configuring resource monitoring or constraints, promotable clones have different requirements than simple resources. For details, see Pacemaker Explained, available from http://www.clusterlabs.org/pacemaker/doc/.

You can create promotable clones using either Hawk2 or crmsh.

6.7.1 Creating Promotable Clones with Hawk2 #

Note: Child Resources for Multi-state Resources

Multi-state resources can either contain a primitive or a group as child resources. In Hawk2, child resources cannot be created or modified while creating a multi-state resource. Before adding a multi-state resource, create child resources and configure them as desired. For details, refer to Section 6.4.1, “Creating Primitive Resources with Hawk2” or Section 6.5.1, “Creating Resource Groups with Hawk2”.

Procedure 6.5: Adding a Multi-state Resource #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Multi-state.
Enter a unique Multi-state ID.
From the Child Resource list, select the primitive or group to use as a sub-resource for the multi-state resource.
If needed, modify or add Meta Attributes.
Click Create to finish the configuration. A message at the top of the screen shows if the action has been successful.

Figure 6.5: Hawk2—Multi-state Resource #

6.7.2 Creating Promotable Clones with crmsh #

To create a promotable clone resource, first create a primitive resource and then the promotable clone resource. The promotable clone resource must support at least promote and demote operations.

Log in as root and start the crm interactive shell:
```
# crm configure
```

Configure the primitive. Change the intervals if needed:

crm(live)configure# primitive my-rsc ocf:myCorp:myAppl \
    op monitor interval=60 \
    op monitor interval=61 role=Master

Create the promotable clone resource:
```
crm(live)configure# ms ms-rsc my-rsc
```

6.8 Creating Resource Templates #

If you want to create lots of resources with similar configurations, defining a resource template is the easiest way. After having been defined, it can be referenced in primitives—or in certain types of constraints, as described in Section 7.3, “Resource Templates and Constraints”.

If a template is referenced in a primitive, the primitive will inherit all operations, instance attributes (parameters), meta attributes, and utilization attributes defined in the template. Additionally, you can define specific operations or attributes for your primitive. If any of these are defined in both the template and the primitive, the values defined in the primitive will take precedence over the ones defined in the template.

You can create resource templates using either Hawk2 or crmsh.

6.8.1 Creating Resource Templates with Hawk2 #

Resource templates are configured like primitive resources.

Procedure 6.6: Adding a Resource Template #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Template.
Enter a unique Resource ID.
Follow the instructions in Procedure 6.2, “Adding a Primitive Resource”, starting from Step 5.

6.8.2 Creating Resource Templates with crmsh #

Use the rsc_template command to get familiar with the syntax:

# crm configure rsc_template
 usage: rsc_template <name> [<class>:[<provider>:]]<type>
         [params <param>=<value> [<param>=<value>...]]
         [meta <attribute>=<value> [<attribute>=<value>...]]
         [utilization <attribute>=<value> [<attribute>=<value>...]]
         [operations id_spec
             [op op_type [<attribute>=<value>...] ...]]

For example, the following command creates a new resource template with the name BigVM derived from the ocf:heartbeat:Xen resource and some default values and operations:

crm(live)configure# rsc_template BigVM ocf:heartbeat:Xen \
    params allow_mem_management="true" \
    op monitor timeout=60s interval=15s \
    op stop timeout=10m \
    op start timeout=10m

Once you defined the new resource template, you can use it in primitives or reference it in order, colocation, or rsc_ticket constraints. To reference the resource template, use the @ sign:

crm(live)configure# primitive MyVM1 @BigVM \
    params xmfile="/etc/xen/shared-vm/MyVM1" name="MyVM1"

The new primitive MyVM1 is going to inherit everything from the BigVM resource templates. For example, the equivalent of the above two would be:

crm(live)configure# primitive MyVM1 Xen \
    params xmfile="/etc/xen/shared-vm/MyVM1" name="MyVM1" \
    params allow_mem_management="true" \
    op monitor timeout=60s interval=15s \
    op stop timeout=10m \
    op start timeout=10m

If you want to overwrite some options or operations, add them to your (primitive) definition. For example, the following new primitive MyVM2 doubles the timeout for monitor operations but leaves others untouched:

crm(live)configure# primitive MyVM2 @BigVM \
    params xmfile="/etc/xen/shared-vm/MyVM2" name="MyVM2" \
    op monitor timeout=120s interval=30s

A resource template may be referenced in constraints to stand for all primitives which are derived from that template. This helps to produce a more concise and clear cluster configuration. Resource template references are allowed in all constraints except location constraints. Colocation constraints may not contain more than one template reference.

6.9 Creating STONITH Resources #

Important: No Support Without STONITH

You must have a node fencing mechanism for your cluster.
The global cluster options stonith-enabled and startup-fencing must be set to true. When you change them, you lose support.

By default, the global cluster option stonith-enabled is set to true. If no STONITH resources have been defined, the cluster will refuse to start any resources. Configure one or more STONITH resources to complete the STONITH setup. While STONITH resources are configured similarly to other resources, their behavior is different in some respects. For details refer to Section 12.3, “STONITH Resources and Configuration”.

6.9.1 Creating STONITH Resources with Hawk2 #

To add a STONITH resource for SBD, for libvirt (KVM/Xen) or for vCenter/ESX Server, the easiest way is to use the Hawk2 wizard.

Procedure 6.7: Adding a STONITH Resource #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
From the left navigation bar, select Configuration › Add Resource › Primitive.
Enter a unique Resource ID.
From the Class list, select the resource agent class stonith.
From the Type list, select the STONITH plug-in to control your STONITH device. A short description for this plug-in is displayed.
Hawk2 automatically shows the required Parameters for the resource. Enter values for each parameter.
Hawk2 displays the most important resource Operations and proposes default values. If you do not modify any settings here, Hawk2 adds the proposed operations and their default values when you confirm.
If there is no reason to change them, keep the default Meta Attributes settings.
Figure 6.6: Hawk2—STONITH Resource #
Confirm your changes to create the STONITH resource.
A message at the top of the screen shows if the action has been successful.

To complete your fencing configuration, add constraints. For more details, refer to Chapter 12, Fencing and STONITH.

6.9.2 Creating STONITH Resources with crmsh #

Log in as root and start the crm interactive shell:
```
# crm
```

Get a list of all STONITH types with the following command:

crm(live)# ra list stonith
apcmaster                  apcmastersnmp              apcsmart
baytech                    bladehpi                   cyclades
drac3                      external/drac5             external/dracmc-telnet
external/hetzner           external/hmchttp           external/ibmrsa
external/ibmrsa-telnet     external/ipmi              external/ippower9258
external/kdumpcheck        external/libvirt           external/nut
external/rackpdu           external/riloe             external/sbd
external/vcenter           external/vmware            external/xen0
external/xen0-ha           fence_legacy               ibmhmc
ipmilan                    meatware                   nw_rpc100s
rcd_serial                 rps10                      suicide
wti_mpc                    wti_nps

Choose a STONITH type from the above list and view the list of possible options. Use the following command:

crm(live)# ra info stonith:external/ipmi
IPMI STONITH external device (stonith:external/ipmi)

ipmitool based power management. Apparently, the power off
method of ipmitool is intercepted by ACPI which then makes
a regular shutdown. If case of a split brain on a two-node
it may happen that no node survives. For two-node clusters
use only the reset method.

Parameters (* denotes required, [] the default):

hostname (string): Hostname
    The name of the host to be managed by this STONITH device.
...

Create the STONITH resource with the stonith class, the type you have chosen in Step 3, and the respective parameters if needed, for example:

crm(live)# configure
crm(live)configure# primitive my-stonith stonith:external/ipmi \
    params hostname="alice" \
    ipaddr="192.168.1.221" \
    userid="admin" passwd="secret" \
    op monitor interval=60m timeout=120s

6.10 Configuring Resource Monitoring #

If you want to ensure that a resource is running, you must configure resource monitoring for it. You can configure resource monitoring using either Hawk2 or crmsh.

If the resource monitor detects a failure, the following takes place:

Log file messages are generated, according to the configuration specified in the logging section of /etc/corosync/corosync.conf.
The failure is reflected in the cluster management tools (Hawk2, crm status), and in the CIB status section.
The cluster initiates noticeable recovery actions which may include stopping the resource to repair the failed state and restarting the resource locally or on another node. The resource also may not be restarted, depending on the configuration and state of the cluster.

If you do not configure resource monitoring, resource failures after a successful start will not be communicated, and the cluster will always show the resource as healthy.

Usually, resources are only monitored by the cluster while they are running. However, to detect concurrency violations, also configure monitoring for resources which are stopped. For resource monitoring, specify a timeout and/or start delay value, and an interval. The interval tells the CRM how often it should check the resource status. You can also set particular parameters such as timeout for start or stop operations.

For more information about monitor operation parameters, see Section 6.14, “Resource Operations”.

6.10.1 Configuring Resource Monitoring with Hawk2 #

Procedure 6.8: Adding and Modifying an Operation #

Log in to Hawk2:
```
https://HAWKSERVER:7630/
```
Add a resource as described in Procedure 6.2, “Adding a Primitive Resource” or select an existing primitive to edit.
Hawk2 automatically shows the most important Operations (start, stop, monitor) and proposes default values.
To see the attributes belonging to each proposed value, hover the mouse pointer over the respective value.
To change the suggested timeout values for the start or stop operation:
1. Click the pen icon next to the operation.
2. In the dialog that opens, enter a different value for the timeout parameter, for example 10, and confirm your change.
To change the suggested interval value for the monitor operation:
1. Click the pen icon next to the operation.
2. In the dialog that opens, enter a different value for the monitoring interval.
3. To configure resource monitoring in the case that the resource is stopped:
  1. Select the role entry from the empty drop-down box below.
  2. From the role drop-down box, select Stopped.
  3. Click Apply to confirm your changes and to close the dialog for the operation.
Confirm your changes in the resource configuration screen. A message at the top of the screen shows if the action has been successful.

To view resource failures, switch to the Status screen in Hawk2 and select the resource you are interested in. In the Operations column click the arrow down icon and select Recent Events. The dialog that opens lists recent actions performed for the resource. Failures are displayed in red. To view the resource details, click the magnifier icon in the Operations column.

Figure 6.7: Hawk2—Resource Details #

6.10.2 Configuring Resource Monitoring with crmsh #

To monitor a resource, there are two possibilities: either define a monitor operation with the op keyword or use the monitor command. The following example configures an Apache resource and monitors it every 60 seconds with the op keyword:

crm(live)configure# primitive apache apache \
  params ... \
  op monitor interval=60s timeout=30s

The same can be done with:

crm(live)configure# primitive apache apache \
   params ...
crm(live)configure# monitor apache 60s:30s

Monitoring Stopped Resources

Usually, resources are only monitored by the cluster as long as they are running. However, to detect concurrency violations, also configure monitoring for resources which are stopped. For example:

crm(live)configure# primitive dummy1 Dummy \
    op monitor interval="300s" role="Stopped" timeout="10s" \
    op monitor interval="30s" timeout="10s"

This configuration triggers a monitoring operation every 300 seconds for the resource dummy1 when it is in role="Stopped". When running, it will be monitored every 30 seconds.

Probing

The CRM executes an initial monitoring for each resource on every node, the so-called probe. A probe is also executed after the cleanup of a resource. If multiple monitoring operations are defined for a resource, the CRM will select the one with the smallest interval and will use its timeout value as default timeout for probing. If no monitor operation is configured, the cluster-wide default applies. The default is 20 seconds (if not specified otherwise by configuring the op_defaults parameter). If you do not want to rely on the automatic calculation or the op_defaults value, define a specific monitoring operation for the probing of this resource. Do so by adding a monitoring operation with the interval set to 0, for example:

crm(live)configure# primitive rsc1 ocf:pacemaker:Dummy \
    op monitor interval="0" timeout="60"

The probe of rsc1 will time out in 60s, independent of the global timeout defined in op_defaults, or any other operation timeouts configured. If you did not set interval="0" for specifying the probing of the respective resource, the CRM will automatically check for any other monitoring operations defined for that resource and will calculate the timeout value for probing as described above.

6.11 Loading Resources from a File #

Parts or all of the configuration can be loaded from a local file or a network URL. Three different methods can be defined:

replace: This option replaces the current configuration with the new source configuration.
update: This option tries to import the source configuration. It adds new items or updates existing items to the current configuration.
push: This option imports the content from the source into the current configuration (same as update). However, it removes objects that are not available in the new configuration.

To load the new configuration from the file mycluster-config.txt use the following syntax:

# crm configure load push mycluster-config.txt

6.12 Resource Options (Meta Attributes) #

For each resource you add, you can define options. Options are used by the cluster to decide how your resource should behave—they tell the CRM how to treat a specific resource. Resource options can be set with the crm_resource --meta command or with Hawk2 as described in Procedure 6.2, “Adding a Primitive Resource”.

The following resource options are available:

priority

If not all resources can be active, the cluster stops lower priority resources to keep higher priority resources active.

The default value is 0.

target-role

In what state should the cluster attempt to keep this resource? Allowed values: Stopped, Started, Unpromoted, Promoted.

The default value is Started.

is-managed

Is the cluster allowed to start and stop the resource? Allowed values: true, false. If the value is set to false, the status of the resource is still monitored and any failures are reported. This is different from setting a resource to maintenance="true".

The default value is true.

maintenance

Can the resources be touched manually? Allowed values: true, false. If set to true, all resources become unmanaged: the cluster stops monitoring them and does not know their status. You can stop or restart cluster resources without the cluster attempting to restart them.

The default value is false.

resource-stickiness

How much does the resource prefer to stay where it is?

The default value is 1 for individual clone instances, and 0 for all other resources.

migration-threshold

How many failures should occur for this resource on a node before making the node ineligible to host this resource?

The default value is INFINITY.

multiple-active

What should the cluster do if it ever finds the resource active on more than one node? Allowed values: block (mark the resource as unmanaged), stop_only, stop_start.

The default value is stop_start.

failure-timeout

How many seconds to wait before acting as if the failure did not occur (and potentially allowing the resource back to the node on which it failed)?

The default value is 0 (disabled).

allow-migrate

Whether to allow live migration for resources that support migrate_to and migrate_from actions. If the value is set to true, the resource can be migrated without loss of state. If the value is set to false, the resource will be shut down on the first node and restarted on the second node.

The default value is true for ocf:pacemaker:remote resources, and false for all other resources.

remote-node

The name of the remote node this resource defines. This both enables the resource as a remote node and defines the unique name used to identify the remote node. If no other parameters are set, this value is also assumed as the host name to connect to at the remote-port port.

This option is disabled by default.

Warning: Use unique IDs

This value must not overlap with any existing resource or node IDs.

remote-port

Custom port for the guest connection to pacemaker_remote.

The default value is 3121.

remote-addr

The IP address or host name to connect to if the remote node's name is not the host name of the guest.

The default value is the value set by remote-node.

remote-connect-timeout

How long before a pending guest connection times out?

The default value is 60s.

6.13 Instance Attributes (Parameters) #

The scripts of all resource classes can be given parameters which determine how they behave and which instance of a service they control. If your resource agent supports parameters, you can add them with the crm_resource command or with Hawk2 as described in Procedure 6.2, “Adding a Primitive Resource”. In the crm command line utility and in Hawk2, instance attributes are called params or Parameter, respectively. The list of instance attributes supported by an OCF script can be found by executing the following command as root:

# crm ra info [class:[provider:]]resource_agent

or (without the optional parts):

# crm ra info resource_agent

The output lists all the supported attributes, their purpose and default values.

Note: Instance Attributes for Groups, Clones or Promotable Clones

Note that groups, clones and promotable clone resources do not have instance attributes. However, any instance attributes set will be inherited by the group's, clone's or promotable clone's children.

6.14 Resource Operations #

By default, the cluster will not ensure that your resources are still healthy. To instruct the cluster to do this, you need to add a monitor operation to the resource's definition. Monitor operations can be added for all classes or resource agents. For more information, refer to Section 6.10, “Configuring Resource Monitoring”.

Table 6.1: Resource Operation Properties #

Operation	Description
`id`	Your name for the action. Must be unique. (The ID is not shown).
`name`	The action to perform. Common values: `monitor`, `start`, `stop`.
`interval`	How frequently to perform the operation. Unit: seconds
`timeout`	How long to wait before declaring the action has failed.
`requires`	What conditions need to be satisfied before this action occurs. Allowed values: `nothing`, `quorum`, `fencing`. The default depends on whether fencing is enabled and if the resource's class is `stonith`. For STONITH resources, the default is `nothing`.
`on-fail`	The action to take if this action ever fails. Allowed values: `ignore`: Pretend the resource did not fail. `block`: Do not perform any further operations on the resource. `stop`: Stop the resource and do not start it elsewhere. `restart`: Stop the resource and start it again (possibly on a different node). `fence`: Bring down the node on which the resource failed (STONITH). `standby`: Move all resources away from the node on which the resource failed.
`enabled`	If `false`, the operation is treated as if it does not exist. Allowed values: `true`, `false`.
`role`	Run the operation only if the resource has this role.
`record-pending`	Can be set either globally or for individual resources. Makes the CIB reflect the state of “in-flight” operations on resources.
`description`	Description of the operation.

6 Configuring Cluster Resources #

6.1 Types of Resources #

6.2 Supported Resource Agent Classes #

6.3 Timeout Values #

6.4 Creating Primitive Resources #

6.4.1 Creating Primitive Resources with Hawk2 #

6.4.2 Creating Primitive Resources with crmsh #

6.5 Creating Resource Groups #

6.5.1 Creating Resource Groups with Hawk2 #

6.5.2 Configuring Resource Groups with crmsh #

6.6 Creating Clone Resources #

6.6.1 Creating Clone Resources with Hawk2 #

6.6.2 Creating Clone Resources with crmsh #

6.7 Creating Promotable Clones (Multi-state Resources) #

6.7.1 Creating Promotable Clones with Hawk2 #

6.7.2 Creating Promotable Clones with crmsh #

6.8 Creating Resource Templates #

6.8.1 Creating Resource Templates with Hawk2 #

6.8.2 Creating Resource Templates with crmsh #

6.9 Creating STONITH Resources #

6.9.1 Creating STONITH Resources with Hawk2 #

6.9.2 Creating STONITH Resources with crmsh #

6.10 Configuring Resource Monitoring #

6.10.1 Configuring Resource Monitoring with Hawk2 #

6.10.2 Configuring Resource Monitoring with crmsh #

6.11 Loading Resources from a File #

6.12 Resource Options (Meta Attributes) #

6.13 Instance Attributes (Parameters) #

6.14 Resource Operations #