You should also make sure the host can ssh to itself and accept keys On Thu, Oct 25, 2018, 8:42 AM Jayme, <jay...@gmail.com> wrote:
> Darn autocorrect, sshd config rather > > On Thu, Oct 25, 2018, 7:29 AM Jarosław Prokopowski, < > jprokopow...@gmail.com> wrote: > >> Hi, >> >> Please help! :-) I couldn't find any solution via google. >> >> I followed this document to create oVirt hyperconverged on 3 hosts using >> cockpit wizard: >> >> >> https://ovirt.org/blog/2018/02/up-and-running-with-ovirt-4-2-and-gluster-storage/ >> >> System: CentOS Linux release 7.5.1804 >> >> All hosts can resolve each other names via DNS, ssh keys are exchanged >> and working. >> I added firewall rules based on oVirt installation guide. SSH is possible >> between all hosts using keys. >> >> I cannot create the configuration and the error I get in the last step is: >> >> >> ------------------------------------------------------------------------------------------------------ >> PLAY [gluster_servers] >> ********************************************************* >> >> TASK [Run a shell script] >> ****************************************************** >> failed: [bq817storage.example.com] >> (item=/usr/share/gdeploy/scripts/grafton-sanity-check.sh -d sdb -h >> bq817storage.example.com, bq735storage.example.com, >> bq813storage.example.com) => {"item": >> "/usr/share/gdeploy/scripts/grafton-sanity-check.sh -d sdb -h >> bq817storage.example.com, bq735storage.example.com, >> bq813storage.example.com", "msg": "Failed to connect to the host via >> ssh: Permission denied >> (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n", "unreachable": >> true} >> fatal: [bq817storage.example.com]: UNREACHABLE! => {"changed": false, >> "msg": "All items completed", "results": [{"_ansible_ignore_errors": null, >> "_ansible_item_label": "/usr/share/gdeploy/scripts/grafton-sanity-check.sh >> -d sdb -h bq817storage.example.com, bq735storage.example.com, >> bq813storage.example.com", "_ansible_item_result": true, "item": >> "/usr/share/gdeploy/scripts/grafton-sanity-check.sh -d sdb -h >> bq817storage.example.com, bq735storage.example.com, >> bq813storage.example.com", "msg": "Failed to connect to the host via >> ssh: Permission denied >> (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n", "unreachable": >> true}]} >> to retry, use: --limit @/tmp/tmpYLHDCP/run-script.retry >> >> PLAY RECAP >> ********************************************************************* >> bq817storage.example.com : ok=0 changed=0 unreachable=1 failed=0 >> >> >> Firewall rules: >> >> oVirt engine host: >> >> #firewall-cmd --list-all >> public (active) >> target: default >> icmp-block-inversion: no >> interfaces: enp134s0f0 enp134s0f1 >> sources: >> services: ssh dhcpv6-client cockpit glusterfs http https dns >> ports: 2222/tcp 6100/tcp 7410/udp 54323/tcp 2223/tcp 161/udp 111/tcp >> 5900-6923/tcp 5989/tcp 9090/tcp 16514/tcp 49152-49216/tcp 54321/tcp >> 54322/tcp 6081/udp >> protocols: >> masquerade: no >> forward-ports: >> source-ports: >> icmp-blocks: >> rich rules: >> >> oVirt nodes: >> >> #firewall-cmd --list-all >> public (active) >> target: default >> icmp-block-inversion: no >> interfaces: enp134s0f0 enp134s0f1 >> sources: >> services: ssh dhcpv6-client cockpit glusterfs dns >> ports: 2223/tcp 161/udp 111/tcp 5900-6923/tcp 5989/tcp 9090/tcp >> 16514/tcp 49152-49216/tcp 54321/tcp 54322/tcp 6081/udp >> protocols: >> masquerade: no >> forward-ports: >> source-ports: >> icmp-blocks: >> >> --------------------------------------------------------------------------------- >> >> Thanks in advance >> Jarson >> _______________________________________________ >> Users mailing list -- users@ovirt.org >> To unsubscribe send an email to users-le...@ovirt.org >> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4KKTG4VVPG7WKRNBDJV6JWGOKPBMM2LB/ >> >
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/G3MBCQCVQF2G4VTQLUIYQPDNKYRKVMAC/