[pve-devel] [PATCH v5 pve-storage, pve-manager 00/11] Fix #4759: Configure Permissions for ceph-crash.service

[Maximiliano Sandoval]

Max Carrara <m.carrara at proxmox.com> writes:

> Fix #4759: Configure Permissions for ceph-crash.service - Version 5
> ===================================================================

I tested this patch series on a testing cluster updated to
no-subscription with ceph-base 18.2.2-pve1. For the purposes of testing
I removed the version check against 0.0.0.

The following things were working as expected:

 - There are no more ceph-crash errors in the journal
 - /etc/pve/ceph.conf contains:
   ```
   [client.crash]
	keyring = /etc/pve/ceph/$cluster.$name.keyring
   ```
 - The new keyring is the right place at
   ```
   # ls /etc/pve/ceph
   ceph.client.crash.keyring
   ```
 - After a few minutes the crash reports at /var/lib/ceph/crash/ were
   moved to /var/lib/ceph/crash/posted.

One thing that was broken is running the ceph-crash binary directly:

```
# ceph-crash
INFO:ceph-crash:pinging cluster to exercise our key
2024-04-09T11:42:31.591+0200 7009fca926c0 -1 auth: unable to find a keyring on /etc/pve/priv/ceph.client.admin.keyring: (13) Permission denied
2024-04-09T11:42:31.595+0200 7009fca926c0 -1 auth: unable to find a keyring on /etc/pve/priv/ceph.client.admin.keyring: (13) Permission denied
2024-04-09T11:42:31.595+0200 7009fca926c0 -1 auth: unable to find a keyring on /etc/pve/priv/ceph.client.admin.keyring: (13) Permission denied
2024-04-09T11:42:31.595+0200 7009fca926c0 -1 auth: unable to find a keyring on /etc/pve/priv/ceph.client.admin.keyring: (13) Permission denied
2024-04-09T11:42:31.595+0200 7009fca926c0 -1 monclient: keyring not found
[errno 13] RADOS permission denied (error connecting to the cluster)
INFO:ceph-crash:monitoring path /var/lib/ceph/crash, delay 600s
```

--
Maximiliano