pyrox.dev
1{ lib, ... }:
2
3let
4 cfg = {
5 clusterId = "066ae264-2a5d-4729-8001-6ad265f50b03";
6 monA = {
7 name = "a";
8 ip = "192.168.1.1";
9 };
10 osd0 = {
11 name = "0";
12 key = "AQBCEJNa3s8nHRAANvdsr93KqzBznuIWm2gOGg==";
13 uuid = "55ba2294-3e24-478f-bee0-9dca4c231dd9";
14 };
15 osd1 = {
16 name = "1";
17 key = "AQBEEJNac00kExAAXEgy943BGyOpVH1LLlHafQ==";
18 uuid = "5e97a838-85b6-43b0-8950-cb56d554d1e5";
19 };
20 osd2 = {
21 name = "2";
22 key = "AQAdyhZeIaUlARAAGRoidDAmS6Vkp546UFEf5w==";
23 uuid = "ea999274-13d0-4dd5-9af9-ad25a324f72f";
24 };
25 };
26 generateCephConfig =
27 { daemonConfig }:
28 {
29 enable = true;
30 global = {
31 fsid = cfg.clusterId;
32 monHost = cfg.monA.ip;
33 monInitialMembers = cfg.monA.name;
34 };
35 }
36 // daemonConfig;
37
38 generateHost =
39 {
40 cephConfig,
41 networkConfig,
42 }:
43 { pkgs, ... }:
44 {
45 virtualisation = {
46 emptyDiskImages = [
47 20480
48 20480
49 20480
50 ];
51 vlans = [ 1 ];
52 };
53
54 networking = networkConfig;
55
56 environment.systemPackages = with pkgs; [
57 bash
58 sudo
59 ceph
60 xfsprogs
61 ];
62
63 boot.kernelModules = [ "xfs" ];
64
65 services.ceph = cephConfig;
66 };
67
68 networkMonA = {
69 dhcpcd.enable = false;
70 interfaces.eth1.ipv4.addresses = lib.mkOverride 0 [
71 {
72 address = cfg.monA.ip;
73 prefixLength = 24;
74 }
75 ];
76 };
77 cephConfigMonA = generateCephConfig {
78 daemonConfig = {
79 mon = {
80 enable = true;
81 daemons = [ cfg.monA.name ];
82 };
83 mgr = {
84 enable = true;
85 daemons = [ cfg.monA.name ];
86 };
87 osd = {
88 enable = true;
89 daemons = [
90 cfg.osd0.name
91 cfg.osd1.name
92 cfg.osd2.name
93 ];
94 };
95 };
96 };
97
98 # Following deployment is based on the manual deployment described here:
99 # https://docs.ceph.com/docs/master/install/manual-deployment/
100 # For other ways to deploy a ceph cluster, look at the documentation at
101 # https://docs.ceph.com/docs/master/
102 testScript = ''
103 start_all()
104
105 monA.wait_for_unit("network.target")
106
107 # Bootstrap ceph-mon daemon
108 monA.succeed(
109 "sudo -u ceph ceph-authtool --create-keyring /tmp/ceph.mon.keyring --gen-key -n mon. --cap mon 'allow *'",
110 "sudo -u ceph ceph-authtool --create-keyring /etc/ceph/ceph.client.admin.keyring --gen-key -n client.admin --cap mon 'allow *' --cap osd 'allow *' --cap mds 'allow *' --cap mgr 'allow *'",
111 "sudo -u ceph ceph-authtool /tmp/ceph.mon.keyring --import-keyring /etc/ceph/ceph.client.admin.keyring",
112 "monmaptool --create --add ${cfg.monA.name} ${cfg.monA.ip} --fsid ${cfg.clusterId} /tmp/monmap",
113 "sudo -u ceph ceph-mon --mkfs -i ${cfg.monA.name} --monmap /tmp/monmap --keyring /tmp/ceph.mon.keyring",
114 "sudo -u ceph touch /var/lib/ceph/mon/ceph-${cfg.monA.name}/done",
115 "systemctl start ceph-mon-${cfg.monA.name}",
116 )
117 monA.wait_for_unit("ceph-mon-${cfg.monA.name}")
118 monA.succeed("ceph mon enable-msgr2")
119 monA.succeed("ceph config set mon auth_allow_insecure_global_id_reclaim false")
120
121 # Can't check ceph status until a mon is up
122 monA.succeed("ceph -s | grep 'mon: 1 daemons'")
123
124 # Start the ceph-mgr daemon, after copying in the keyring
125 monA.succeed(
126 "sudo -u ceph mkdir -p /var/lib/ceph/mgr/ceph-${cfg.monA.name}/",
127 "ceph auth get-or-create mgr.${cfg.monA.name} mon 'allow profile mgr' osd 'allow *' mds 'allow *' > /var/lib/ceph/mgr/ceph-${cfg.monA.name}/keyring",
128 "systemctl start ceph-mgr-${cfg.monA.name}",
129 )
130 monA.wait_for_unit("ceph-mgr-a")
131 monA.wait_until_succeeds("ceph -s | grep 'quorum ${cfg.monA.name}'")
132 monA.wait_until_succeeds("ceph -s | grep 'mgr: ${cfg.monA.name}(active,'")
133
134 # Bootstrap OSDs
135 monA.succeed(
136 "mkfs.xfs /dev/vdb",
137 "mkfs.xfs /dev/vdc",
138 "mkfs.xfs /dev/vdd",
139 "mkdir -p /var/lib/ceph/osd/ceph-${cfg.osd0.name}",
140 "mount /dev/vdb /var/lib/ceph/osd/ceph-${cfg.osd0.name}",
141 "mkdir -p /var/lib/ceph/osd/ceph-${cfg.osd1.name}",
142 "mount /dev/vdc /var/lib/ceph/osd/ceph-${cfg.osd1.name}",
143 "mkdir -p /var/lib/ceph/osd/ceph-${cfg.osd2.name}",
144 "mount /dev/vdd /var/lib/ceph/osd/ceph-${cfg.osd2.name}",
145 "ceph-authtool --create-keyring /var/lib/ceph/osd/ceph-${cfg.osd0.name}/keyring --name osd.${cfg.osd0.name} --add-key ${cfg.osd0.key}",
146 "ceph-authtool --create-keyring /var/lib/ceph/osd/ceph-${cfg.osd1.name}/keyring --name osd.${cfg.osd1.name} --add-key ${cfg.osd1.key}",
147 "ceph-authtool --create-keyring /var/lib/ceph/osd/ceph-${cfg.osd2.name}/keyring --name osd.${cfg.osd2.name} --add-key ${cfg.osd2.key}",
148 'echo \'{"cephx_secret": "${cfg.osd0.key}"}\' | ceph osd new ${cfg.osd0.uuid} -i -',
149 'echo \'{"cephx_secret": "${cfg.osd1.key}"}\' | ceph osd new ${cfg.osd1.uuid} -i -',
150 'echo \'{"cephx_secret": "${cfg.osd2.key}"}\' | ceph osd new ${cfg.osd2.uuid} -i -',
151 )
152
153 # Initialize the OSDs with regular filestore
154 monA.succeed(
155 "ceph-osd -i ${cfg.osd0.name} --mkfs --osd-uuid ${cfg.osd0.uuid}",
156 "ceph-osd -i ${cfg.osd1.name} --mkfs --osd-uuid ${cfg.osd1.uuid}",
157 "ceph-osd -i ${cfg.osd2.name} --mkfs --osd-uuid ${cfg.osd2.uuid}",
158 "chown -R ceph:ceph /var/lib/ceph/osd",
159 "systemctl start ceph-osd-${cfg.osd0.name}",
160 "systemctl start ceph-osd-${cfg.osd1.name}",
161 "systemctl start ceph-osd-${cfg.osd2.name}",
162 )
163 monA.wait_until_succeeds("ceph osd stat | grep -e '3 osds: 3 up[^,]*, 3 in'")
164 monA.wait_until_succeeds("ceph -s | grep 'mgr: ${cfg.monA.name}(active,'")
165 monA.wait_until_succeeds("ceph -s | grep 'HEALTH_OK'")
166
167 monA.succeed(
168 "ceph osd pool create single-node-test 32 32",
169 "ceph osd pool ls | grep 'single-node-test'",
170
171 # We need to enable an application on the pool, otherwise it will
172 # stay unhealthy in state POOL_APP_NOT_ENABLED.
173 # Creating a CephFS would do this automatically, but we haven't done that here.
174 # See: https://docs.ceph.com/en/reef/rados/operations/pools/#associating-a-pool-with-an-application
175 # We use the custom application name "nixos-test" for this.
176 "ceph osd pool application enable single-node-test nixos-test",
177
178 "ceph osd pool rename single-node-test single-node-other-test",
179 "ceph osd pool ls | grep 'single-node-other-test'",
180 )
181 monA.wait_until_succeeds("ceph -s | grep '2 pools, 33 pgs'")
182 monA.succeed(
183 "ceph osd getcrushmap -o crush",
184 "crushtool -d crush -o decrushed",
185 "sed 's/step chooseleaf firstn 0 type host/step chooseleaf firstn 0 type osd/' decrushed > modcrush",
186 "crushtool -c modcrush -o recrushed",
187 "ceph osd setcrushmap -i recrushed",
188 "ceph osd pool set single-node-other-test size 2",
189 )
190 monA.wait_until_succeeds("ceph -s | grep 'HEALTH_OK'")
191 monA.wait_until_succeeds("ceph -s | grep '33 active+clean'")
192 monA.fail(
193 "ceph osd pool ls | grep 'multi-node-test'",
194 "ceph osd pool delete single-node-other-test single-node-other-test --yes-i-really-really-mean-it",
195 )
196
197 # Shut down ceph by stopping ceph.target.
198 monA.succeed("systemctl stop ceph.target")
199
200 # Start it up
201 monA.succeed("systemctl start ceph.target")
202 monA.wait_for_unit("ceph-mon-${cfg.monA.name}")
203 monA.wait_for_unit("ceph-mgr-${cfg.monA.name}")
204 monA.wait_for_unit("ceph-osd-${cfg.osd0.name}")
205 monA.wait_for_unit("ceph-osd-${cfg.osd1.name}")
206 monA.wait_for_unit("ceph-osd-${cfg.osd2.name}")
207
208 # Ensure the cluster comes back up again
209 monA.succeed("ceph -s | grep 'mon: 1 daemons'")
210 monA.wait_until_succeeds("ceph -s | grep 'quorum ${cfg.monA.name}'")
211 monA.wait_until_succeeds("ceph osd stat | grep -e '3 osds: 3 up[^,]*, 3 in'")
212 monA.wait_until_succeeds("ceph -s | grep 'mgr: ${cfg.monA.name}(active,'")
213 monA.wait_until_succeeds("ceph -s | grep 'HEALTH_OK'")
214
215 # Enable the dashboard and recheck health
216 monA.succeed(
217 "ceph mgr module enable dashboard",
218 "ceph config set mgr mgr/dashboard/ssl false",
219 # default is 8080 but it's better to be explicit
220 "ceph config set mgr mgr/dashboard/server_port 8080",
221 )
222 monA.wait_for_open_port(8080)
223 monA.wait_until_succeeds("curl -q --fail http://localhost:8080")
224 monA.wait_until_succeeds("ceph -s | grep 'HEALTH_OK'")
225 '';
226in
227{
228 name = "basic-single-node-ceph-cluster";
229 meta = with lib.maintainers; {
230 maintainers = [
231 lejonet
232 johanot
233 ];
234 };
235
236 nodes = {
237 monA = generateHost {
238 cephConfig = cephConfigMonA;
239 networkConfig = networkMonA;
240 };
241 };
242
243 inherit testScript;
244}