[Pacemaker] Low cost stonith device

Mon Oct 5 11:49:25 UTC 2009

Hi Dejan,

We are glad to contribute. Pacemaker is an impressive project.

I used wget because I had prior experience. I am used to Gentoo systems,
so wget is always installed. Since the output isn't restricted to just
the information I want, I would have to sed the output anyway and the
lack of \n actually makes it easier. If all the other RAs use a single
tool, I will adapt the RA.
The cgi interface is actually documented in the manual so I hope they
also have the decency to keep it stable. If not, I will probably have to
do the maintenance anyway.

I was already writing a follow-up when I realised that the device needed
configuration before the RA would work :) I have added the necessary
documentation in comments. It now includes a link to the product manual
too. Feel free to copy it to a seperate README if that suits your needs
better.

Btw, since I found references to some of their other products in the
telnet interface, I think they use this firmware for many of their
products. It seems likely that this RA will work for some of the other
power switching products.

Regards,

  Johan

#
# Documentation: 
#
#   Manufacturer URL: http://www.aviosys.com/ip_power_9258hp.html
#   Manual URL: http://www.aviosys.com/manual/9258HP_EN.pdf
#
#   Initially, the device is set up with a configuration tool for
windows. 
#   This allows you to detect device and find its network settings. You
#   can then configure the device with new network settings with that
#   tool or just do it yourself with a browser. I used the latter 
#   method. I set the device to DHCP and assigned it a static lease.
#
#   Second step is to name the ports so the RA can find which port to 
#   reset for which host. Assign the ports a name equal to the 
#   hostname of your system (without domain part): name a port node1 
#   if the fqdn of the connected devce is node1.example.com
#   One of the minus points here is that the names are restricted to 15
#   characters so fqdns are not an option.
#
#   Last step is to supply the RA with the IP of the device and the
username 
#   and password to allow it to reset ports. You can use the default
admin 
#   account or create an account for the RA through the web interface
of 
#   the device.
#

On Mon, 2009-10-05 at 12:42 +0200, Dejan Muhamedagic wrote:
> Hi,
> 
> On Mon, Oct 05, 2009 at 10:37:54AM +0200, Johan Verrept wrote:
> > Hello guys,
> > 
> >    I completed the RA and have attached it. As far as I can tell it is
> > fully functional but I would appreciate it if someone "in the know"
> > would take a look and gave me some feedback.
> 
> Many thanks for the contribution. Looks good to me, let's just
> hope that the html output won't be to volatile in future :) BTW,
> did you consider using lynx or w3m: I think that both have an
> option to dump just text instead of HTML.
> 
> Can you also provide a short README on how to configure the
> device.
> 
> Cheers,
> 
> Dejan
> 
> > Thank you,
> > 
> > 	Johan Verrept
> > 
> > On Fri, 2009-10-02 at 11:04 +0200, Johan Verrept wrote:
> > > Hi,
> > > 
> > > in the meantime I got the device and am working on a RA. I will need
> > > permission to post it here, so no promises. The telnet access can't
> > > manage the ports but there is a documented cgi-based interface. 
> > > For now, I am pretty happy with the device.
> > > 
> > > 	J.
> > > 
> > > On Fri, 2009-09-25 at 11:14 +0200, Johan Verrept wrote:
> > > > Hi guys,
> > > > 
> > > > When I looked into this yesterday , I found this device:
> > > > 
> > > > 	http://www.aviosys.com/ip_power_9258hp.html
> > > > 
> > > > At around 150 euro, it is pretty cheap. It is an independent device and
> > > > will not do nifty things like server console access (like the IPMI
> > > > cards) but it should work well for stonith purposes (over-featured,
> > > > actually). There is an even cheaper version but for a cluster I kinda
> > > > like the sound of "High grade components and extreme durability" ;).
> > > > I also like that it is independently powered so if the PSU of a server
> > > > fails, the stonith device will still work (and the cluster won't block).
> > > > 
> > > > I have one ordered and will write an RA for it as soon as I get it. The
> > > > device claims telnet access so it should not be hard to do.
> > > > 
> > > > Regards,
> > > > 
> > > >    Johan
> > > > 
> > > > PS: there are others too in this category of devices:
> > > > http://www.server-rack-online.com/cw-2h2-c20.html for about the same
> > > > price ($225), but with less power ports.
> > > > 
> > > > 
> > > > On Thu, 2009-09-24 at 16:24 -0600, Remi Broemeling wrote:
> > > > > Hi Mario -- I was just looking into this myself, today.  I think the
> > > > > lowest cost that you'll be able to find is an IPMI card for your
> > > > > motherboard (as long as the motherboard in question supports it).  To
> > > > > find out you'll need to look into your specific model of motherboard
> > > > > and see what is needed (or even if it is possible).  IPMI cards aren't
> > > > > foolproof and have their own problems; but it's better than nothing, I
> > > > > would think.
> > > > > 
> > > > > I think that your idea for fencing at the switch would be workable;
> > > > > but how exactly to accomplish that would depend on the switch that you
> > > > > were talking about; as the commands (and even if external ability to
> > > > > do so is available) would be switch/manufacturer-dependent.
> > > > > 
> > > > > Of course even lower cost (but even more problematic) is simply using
> > > > > external/ssh to shutdown the server to be killed, as that should be
> > > > > free.
> > > > > 
> > > > > See here for more documentation on STONITH:
> > > > > http://www.clusterlabs.org/mediawiki/images/f/f2/Crm_fencing.pdf
> > > > > 
> > > > > Mario Giammarco wrote: 
> > > > > > Hello,
> > > > > > 
> > > > > > Can you suggest me a list of stonith devices compatible with 
> > > > > > pacemaker?
> > > > > > 
> > > > > > I need a low cost one.
> > > > > > 
> > > > > > I have also another idea to build a low cost stonith device:
> > > > > > 
> > > > > > I have intelligent switches. To stonith a node I can send to
> > > > > >  a switch the command 
> > > > > > to turn off all ethernet ports linked to the node to be fenced. 
> > > > > > 
> > > > > > So the node is powered on but it cannot do any harm because 
> > > > > > it is disconnected 
> > > > > > from network.
> > > > > > 
> > > > > > Is it a good idea? How can I implement it?
> > > > > > 
> > > > > > Thanks in advance for any help.
> > > > > > 
> > > > > > Mario
> > > > > >   
> > > > > -- 
> > > > > 
> > > > > Remi Broemeling
> > > > > Sr System Administrator

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ippower9258hp
Type: application/x-shellscript
Size: 5049 bytes
Desc: not available
URL: <https://lists.clusterlabs.org/pipermail/pacemaker/attachments/20091005/b0f3b215/attachment-0002.bin>