[PVE-User] pve-firewall, clustering and HA gone bad

[Mark Schouten]

On Thu, Jun 13, 2019 at 12:34:28PM +0200, Thomas Lamprecht wrote:
> > 2: ha-manager should not be able to start the VM's when they are running
> > elsewhere
> 
> This can only happen if fencing fails, and that fencing works is always
> a base assumption we must take (as else no HA is possible at all).
> So it would be interesting why fencing did not worked here (see below
> for the reason I could not determine that yet as I did not have your logs
> at hand)

Reading the emails from that specific night, I saw this message:

 The node 'proxmox01' failed and needs manual intervention.

 The PVE HA manager tries to fence it and recover the
 configured HA resources to a healthy node if possible.

 Current fence status: SUCCEED
 fencing: acknowledged - got agent lock for node 'proxmox01'

This seems to suggest that the cluster is confident that the fencing
succeeded. How does it determine that?

-- 
Mark Schouten     | Tuxis B.V.
KvK: 74698818     | http://www.tuxis.nl/
T: +31 318 200208 | info at tuxis.nl