Chapril » Infra Chapril

- apt dist-upgrade
- apt autoremove

Problème avec virtlogd.

invoke-rc.d: initscript virtlogd, action "start" failed.
● virtlogd.service - Virtual machine log manager

...

=(^-^)=root@coon:/etc/libvirt/qemu# journalctl -u virtlogd.service
-- Logs begin at Wed 2019-10-30 17:10:59 CET, end at Fri 2019-11-01 12:03:42 CET. --
nov. 01 11:43:14 coon.chapril.org virtlogd[8233]: 2019-11-01 10:43:14.790+0000: 8233: error : virNetSocketReadWire:1801 : End of file while reading data: Erreur d'entrée/sortie
nov. 01 11:43:16 coon.chapril.org virtlogd[8233]: 2019-11-01 10:43:16.654+0000: 8233: error : virNetSocketReadWire:1801 : End of file while reading data: Erreur d'entrée/sortie
nov. 01 11:43:18 coon.chapril.org virtlogd[8233]: 2019-11-01 10:43:18.085+0000: 8233: error : virNetSocketReadWire:1801 : End of file while reading data: Erreur d'entrée/sortie
nov. 01 11:43:23 coon.chapril.org virtlogd[8233]: 2019-11-01 10:43:23.081+0000: 8233: error : virNetSocketReadWire:1801 : End of file while reading data: Erreur d'entrée/sortie
nov. 01 11:43:33 coon.chapril.org virtlogd[8233]: 2019-11-01 10:43:33.838+0000: 8233: error : virNetSocketReadWire:1801 : End of file while reading data: Erreur d'entrée/sortie
nov. 01 12:01:26 coon.chapril.org systemd[1]: Reloading Virtual machine log manager.
nov. 01 12:01:26 coon.chapril.org systemd[1]: Reloaded Virtual machine log manager.
nov. 01 12:01:27 coon.chapril.org systemd[1]: Dependency failed for Virtual machine log manager.
nov. 01 12:01:27 coon.chapril.org systemd[1]: virtlogd.service: Job virtlogd.service/start failed with result 'dependency'.
nov. 01 12:02:55 coon.chapril.org systemd[1]: Reloading Virtual machine log manager.
nov. 01 12:02:55 coon.chapril.org systemd[1]: Reloaded Virtual machine log manager.
nov. 01 12:02:56 coon.chapril.org systemd[1]: Dependency failed for Virtual machine log manager.
nov. 01 12:02:56 coon.chapril.org systemd[1]: virtlogd.service: Job virtlogd.service/start failed with result 'dependency'.

reboot

virtlogd est passé après reboot par un dist-upgrade.

Après redémarrage de maine, également.

=(^-^)=root@coon:~# drbdadm primary coon
=(^-^)=root@coon:~# cat /proc/drbd 
version: 8.4.10 (api:1/proto:86-101)
srcversion: 15055BDD6F0D23278182874 
 0: cs:Connected ro:Secondary/Secondary ds:UpToDate/UpToDate C r-----
    ns:0 nr:0 dw:0 dr:0 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 wo:f oos:0
 1: cs:Connected ro:Primary/Secondary ds:UpToDate/UpToDate C r-----
    ns:12 nr:0 dw:0 dr:12 al:0 bm:0 lo:0 pe:0 ua:0 ap:0 ep:1 wo:f oos:0

Montage du drbd: le chemin du periph block a changé.

=(^-^)=root@coon:~# mount /var/lib/libvirt/coon
mount: /var/lib/libvirt/coon: /dev/drbd/by-res/coon is not a block device.
=(^-^)=root@coon:~# file /dev/drbd/by-res/coon
/dev/drbd/by-res/coon: directory
=(^-^)=root@coon:~# file /dev/drbd/by-res/coon/0
/dev/drbd/by-res/coon/0: symbolic link to ../../../drbd1
=(^-^)=root@coon:~# cat /etc/fstab 
# /etc/fstab: static file system information.
#
# file system            mount point           type    options              dump pass

/dev/mapper/vg_coon-root     /             ext4 rw,relatime,data=ordered     0 1
/dev/mapper/vg_coon-var     /var             ext4 rw,relatime,data=ordered     0 2
/dev/mapper/vg_coon-tmp     /tmp             ext4 rw,relatime,data=ordered     0 2
/dev/mapper/vg_coon-libvirt     /var/lib/libvirt     ext4 rw,relatime,data=ordered     0 2
none                 /proc             proc rw,relatime         0 0
/dev/mapper/vg_coon-swap    none                  swap sw                           0 0
/dev/drbd/by-res/maine        /var/lib/libvirt/maine    ext4 defaults,noauto,_netdev    0 2
/dev/drbd/by-res/coon         /var/lib/libvirt/coon/    ext4 defaults,noauto,_netdev    0 2    

Après correction :

=(^-^)=root@coon:~# cat /etc/fstab 
# /etc/fstab: static file system information.
#
# file system            mount point           type    options              dump pass

/dev/mapper/vg_coon-root     /             ext4 rw,relatime,data=ordered     0 1
/dev/mapper/vg_coon-var     /var             ext4 rw,relatime,data=ordered     0 2
/dev/mapper/vg_coon-tmp     /tmp             ext4 rw,relatime,data=ordered     0 2
/dev/mapper/vg_coon-libvirt     /var/lib/libvirt     ext4 rw,relatime,data=ordered     0 2
none                 /proc             proc rw,relatime         0 0
/dev/mapper/vg_coon-swap    none                  swap sw                           0 0
/dev/drbd/by-res/maine/0        /var/lib/libvirt/maine    ext4 defaults,noauto,_netdev    0 2
/dev/drbd/by-res/coon/0         /var/lib/libvirt/coon/    ext4 defaults,noauto,_netdev    0 2    

Par contre un autoremove nous a fait perdre qemu.

On a peut être eu une installation initiale qui manquait de rigueur. Suivant le wiki debian : https://wiki.debian.org/KVM

apt-get install --no-install-recommends qemu-kvm libvirt-clients libvirt-daemon-system

Lecture des listes de paquets... Fait
Construction de l'arbre des dépendances       
Lecture des informations d'état... Fait
libvirt-clients est déjà la version la plus récente (5.0.0-4).
libvirt-daemon-system est déjà la version la plus récente (5.0.0-4).
Les paquets supplémentaires suivants seront installés : 
  ipxe-qemu libbluetooth3 libbrlapi0.6 libcacard0 libcapstone3 libdrm-common libdrm2 libepoxy0 libfdt1 libgbm1 libgstreamer-plugins-base1.0-0 libgstreamer1.0-0 libibverbs1 libnspr4 libnss3 libopus0
  liborc-0.4-0 libpcsclite1 libpixman-1-0 librdmacm1 libspice-server1 libusb-1.0-0 libusbredirparser1 libvdeplug2 libvirglrenderer0 libwayland-server0 libx11-6 libx11-data libxau6 libxcb1 libxdmcp6
  qemu-system-common qemu-system-data qemu-system-x86 seabios
Paquets suggérés :
  libvisual-0.4-plugins gstreamer1.0-tools opus-tools pcscd samba vde2 qemu-block-extra sgabios
Paquets recommandés :
  gstreamer1.0-plugins-base ibverbs-providers gstreamer1.0-libav gstreamer1.0-plugins-good gstreamer1.0-plugins-ugly qemu-system-gui qemu-utils ovmf
Les NOUVEAUX paquets suivants seront installés :
  ipxe-qemu libbluetooth3 libbrlapi0.6 libcacard0 libcapstone3 libdrm-common libdrm2 libepoxy0 libfdt1 libgbm1 libgstreamer-plugins-base1.0-0 libgstreamer1.0-0 libibverbs1 libnspr4 libnss3 libopus0
  liborc-0.4-0 libpcsclite1 libpixman-1-0 librdmacm1 libspice-server1 libusb-1.0-0 libusbredirparser1 libvdeplug2 libvirglrenderer0 libwayland-server0 libx11-6 libx11-data libxau6 libxcb1 libxdmcp6 qemu-kvm
  qemu-system-common qemu-system-data qemu-system-x86 seabios
0 mis à jour, 36 nouvellement installés, 0 à enlever et 0 non mis à jour.

Idem sur maine mais seul qemu-kvm est ajouté.

- restauration du nameserver interne

Démarrage des machines

=(^-^)=root@coon:/etc/libvirt/qemu# for host in $(ls *xml | sed -e 's/.xml//g'| grep -v modele) ; do virsh start $host ; done

+ update de la conf icinga sur admin + handshake borg :

=(^-^)=root@coon:~# BORG_RSH="ssh -p 2242 -A" borg list "backup@backup.chapril.org:/srv/backups/`hostname --fqdn`" 
Warning: Attempting to access a previously unknown unencrypted repository!
Do you want to continue? [yN] y

Problème avec Needrestart. Dans la supervision il apparait unknown.

=(^-^)=root@maine:~# needrestart -pqn
UNKN - Kernel: 4.19.0-6-amd64, Microcode: unknown, Services: none, Containers: none, Sessions: none|Kernel=0;0;;0;2 Microcode=U;0;;0;1 Services=0;;0;0 Containers=0;;0;0 Sessions=0;0;;0
=(^-^)=root@maine:~# needrestart -p
UNKN - Kernel: 4.19.0-6-amd64, Microcode: unknown, Services: none, Containers: none, Sessions: none|Kernel=0;0;;0;2 Microcode=U;0;;0;1 Services=0;;0;0 Containers=0;;0;0 Sessions=0;0;;0
=(^-^)=root@maine:~# needrestart -pv
[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v3.4
[main] running in root mode
[main] systemd detected
[Core] #1168 is a NeedRestart::Interp::Python
[Python] #1168: source=/usr/share/unattended-upgrades/unattended-upgrade-shutdown
[Core] #1175 is a NeedRestart::Interp::Python
[Python] #1175: source=/usr/bin/fail2ban-server
Failed to load NeedRestart::uCode::Intel: [uCode/Intel] iucode-tool not available!
[ucode] no supported processor microcode detection
[Kernel] Linux: kernel release 4.19.0-6-amd64, kernel version #1 SMP Debian 4.19.67-2+deb10u1 (2019-09-20)
[Kernel/Linux] /boot/vmlinuz-4.19.0-6-amd64 => 4.19.0-6-amd64 (debian-kernel@lists.debian.org) #1 SMP Debian 4.19.67-2+deb10u1 (2019-09-20) [4.19.0-6-amd64]*
[Kernel/Linux] /boot/vmlinuz-4.9.0-11-amd64 => 4.9.0-11-amd64 (debian-kernel@lists.debian.org) #1 SMP Debian 4.9.189-3+deb9u1 (2019-09-20) [4.9.0-11-amd64]
[Kernel/Linux] Expected linux version: 4.19.0-6-amd64
UNKN - Kernel: 4.19.0-6-amd64, Microcode: unknown, Services: none, Containers: none, Sessions: none|Kernel=0;0;;0;2 Microcode=U;0;;0;1 Services=0;;0;0 Containers=0;;0;0 Sessions=0;0;;0

Le patch:

diff --git a/needrestart/needrestart.conf b/needrestart/needrestart.conf
index 7503a8b..cf0e556 100644
--- a/needrestart/needrestart.conf
+++ b/needrestart/needrestart.conf
@@ -197,7 +197,7 @@ $nrconf{skip_mapfiles} = (-d '/proc/sys/kernel/grsecurity' ? -1 : 0);
 # Enable/disable CPU microcode update hints:
 #  1: requires the user to acknowledge pending updates
 #  0: disable microcode checks completely
-#$nrconf{ucodehints} = 0;
+$nrconf{ucodehints} = 0;

 # Nagios Plugin: configure return code use by nagios
 # as service status[1].