heartbeat 监听在udp的694的端口
LRM:本地资源管理器
CRM:资源管理器
RA:资源代理(脚本)
heartbeat legacy : heartbeat 传统类型的资源代理，通常位于/etc/ha.d/haresources.d/目录下；
LSB:/etc/rc.d/init.d/*{start|stop|status|restart} 目录下的脚本；
具体实现：
[root@stu21 ~]# lftp 172.16.0.1
lftp 172.16.0.1:~> cd pub/Sources/6.x86_64
lftp 172.16.0.1:/pub/Sources/6.x86_64> mirror heartbeat2/
Total: 1 directory, 7 files, 0 symlinks
New: 7 files, 0 symlinks
5829264 bytes transferred
lftp 172.16.0.1:/pub/Sources/6.x86_64>
lftp 172.16.0.1:/pub/Sources/6.x86_64> bye
[root@stu21 ~]# ls
anaconda-ks.cfg heartbeat2 install.log lamp_source nginx-1.4.7.tar.gz nginx-1.6.2.tar.gz
dir.sh ifcfg-eth6 install.log.syslog nginx nginx-1.6.2
[root@stu21 ~]# cd heartbeat2/
[root@stu21 heartbeat2]#
[root@stu21 heartbeat2]# ls
heartbeat-2.1.4-12.el6.x86_64.rpm heartbeat-ldirectord-2.1.4-12.el6.x86_64.rpm
heartbeat-debuginfo-2.1.4-12.el6.x86_64.rpm heartbeat-pils-2.1.4-12.el6.x86_64.rpm
heartbeat-devel-2.1.4-12.el6.x86_64.rpm heartbeat-stonith-2.1.4-12.el6.x86_64.rpm
heartbeat-gui-2.1.4-12.el6.x86_64.rpm
安装方法：
1、# yum install net-snmp-libs libnet PyXML perl-Time-Date
2、# rpm -ivh heartbeat-2.1.4-12.el6.x86_64.rpm heartbeat-stonith-2.1.4-12.el6.x86_64.rpm heartbeat-pils-2.1.4-12.el6.x86_64.rpm
同步时间
（两个节点）
节点一(172.16.21.6)
[root@stu21 heartbeat2]# ntpdate 172.16.0.1
31 Dec 20:59:25 ntpdate[6950]: adjust time server 172.16.0.1 offset 0.379319 sec
[root@stu21 heartbeat2]#
最好几分钟同步一下
[root@stu21 heartbeat2]# crontab -e
no crontab for root - using an empty one
*/3 * * * * /usr/sbin/ntpdate 172.16.0.1 &> /dev/null
~
~
节点二：(172.16.21.10)
[root@stu21 heartbeat2]# ntpdate 172.16.0.1
31 Dec 21:00:50 ntpdate[4737]: adjust time server 172.16.0.1 offset 0.380532 sec
[root@stu21 heartbeat2]#
最好每个几分钟同步一下
[root@stu21 heartbeat2]# crontab -e
no crontab for root - using an empty one
*/3 * * * * /usr/sbin/ntpdate 172.16.0.1 &> /dev/null
~
~
在节点一上生成密钥，使得两节点间检测心跳信息无须密码
[root@stu21 .ssh]# ssh-keygen -P ''
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
75:cc:d5:7e:f8:ae:d6:c7:7b:36:45:f6:22:a8:06:dc root@node1.stu21.com
The key's randomart image is:
+--[ RSA 2048]----+
| .. |
| o . .|
| . + o |
| . . . =|
| . .S . +o|
| o E . . . +|
| . . . =.|
| o ..B|
| . ..+=|
+-----------------+
[root@stu21 .ssh]#
在 节点1 的 /etc/hosts 下增加 " uname -n " 所显示两个节点的内容
172.16.21.6 node1.stu21.com node1(别名)
172.16.21.10 node2.stu21.com node2(别名)
[root@stu21 ~]# ssh-copy-id -i .ssh/id_rsa.pub root@node2
The authenticity of host 'node2 (172.16.21.10)' can't be established.
RSA key fingerprint is 6a:5a:71:de:61:ca:29:01:c2:7d:8d:6f:06:27:2b:b2.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'node2' (RSA) to the list of known hosts.
root@node2's password:
Now try logging into the machine, with "ssh 'root@node2'", and check in:
.ssh/authorized_keys
to make sure we haven't added extra keys that you weren't expecting.
[root@stu21 ~]# cd .ssh/
[root@stu21 .ssh]# ls
authorized_keys id_rsa id_rsa.pub known_hosts
[root@stu21 .ssh]# ssh node2 'date';date
Wed Dec 31 21:38:29 CST 2014
Wed Dec 31 21:38:29 CST 2014
[root@stu21 .ssh]#
[root@stu21 ~]# scp /etc/hosts node2:/etc/hosts
hosts 100% 358 0.4KB/s 00:00
[root@stu21 ~]#
在节点2 的终端上生成密钥一份给 节点2的机子上
[root@stu21 ~]# ssh-keygen -t rsa -P ''
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
fe:fe:67:a7:c2:da:23:a9:91:28:05:4b:06:ea:87:84 root@node2.stu21.com
The key's randomart image is:
+--[ RSA 2048]----+
| . |
|.. . |
|E. + |
|o .o o |
| o .. . S |
| . . o . |
| . . + o |
| . oo.+ o .|
| .o++o=.o |
+-----------------+
[root@stu21 ~]#
[root@stu21 ~]# ssh-copy-id -i .ssh/id_rsa.pub root@node1
The authenticity of host 'node1 (172.16.21.6)' can't be established.
RSA key fingerprint is 6a:5a:71:de:61:ca:29:01:c2:7d:8d:6f:06:27:2b:b2.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'node1,172.16.21.6' (RSA) to the list of known hosts.
root@node1's password:
Permission denied, please try again.
root@node1's password:
Now try logging into the machine, with "ssh 'root@node1'", and check in:
.ssh/authorized_keys
to make sure we haven't added extra keys that you weren't expecting.
验证下是否能检测对方时间
[root@stu21 ~]# ssh node1 'date' ; date
Wed Dec 31 21:50:55 CST 2014
Wed Dec 31 21:50:55 CST 2014
[root@stu21 ~]#
前期准备已将完成，接下来就是配置la
分别在两个节点机子上检查
[root@stu21 ~]# rpm -ql heartbeat
[root@stu21 ~]# cd /usr/share/doc/heartbeat-2.1.4/
[root@stu21 heartbeat-2.1.4]# ls
apphbd.cf COPYING.LGPL GettingStarted.txt hb_report.html README startstop
authkeys DirectoryMap.txt ha.cf hb_report.txt Requirements.html
AUTHORS faqntips.html HardwareGuide.html heartbeat_api.html Requirements.txt
ChangeLog faqntips.txt HardwareGuide.txt heartbeat_api.txt rsync.html
COPYING GettingStarted.html haresources logd.cf rsync.txt
[root@stu21 heartbeat-2.1.4]# cp -p authkeys haresources ha.cf /etc/ha.d/
[root@stu21 heartbeat-2.1.4]#
[root@stu21 heartbeat-2.1.4]# cd /etc/ha.d/
[root@stu21 ha.d]#
[root@stu21 ha.d]# ll
total 48
-rw-r--r-- 1 root root 645 Sep 10 2013 authkeys
-rw-r--r-- 1 root root 10539 Sep 10 2013 ha.cf
-rwxr-xr-x 1 root root 745 Sep 10 2013 harc
-rw-r--r-- 1 root root 5905 Sep 10 2013 haresources
drwxr-xr-x 2 root root 4096 Dec 31 20:43 rc.d
-rw-r--r-- 1 root root 692 Sep 10 2013 README.config
drwxr-xr-x 2 root root 4096 Dec 31 20:43 resource.d
-rw-r--r-- 1 root root 7864 Sep 10 2013 shellfuncs
[root@stu21 ha.d]#
改下加深颜色的文件权限必须为 600或是400
[root@stu21 ha.d]# chmod 600 authkeys
[root@stu21 ha.d]# ll
total 48
-rw------- 1 root root 645 Sep 10 2013 authkeys
-rw-r--r-- 1 root root 10539 Sep 10 2013 ha.cf
-rwxr-xr-x 1 root root 745 Sep 10 2013 harc
-rw-r--r-- 1 root root 5905 Sep 10 2013 haresources
drwxr-xr-x 2 root root 4096 Dec 31 20:43 rc.d
-rw-r--r-- 1 root root 692 Sep 10 2013 README.config
drwxr-xr-x 2 root root 4096 Dec 31 20:43 resource.d
-rw-r--r-- 1 root root 7864 Sep 10 2013 shellfuncs
[root@stu21 ha.d]#
配置文件：
ha.cf： heartbeat的主配置文件；
authkeys：集群信息加密算法及密钥；
haresources: heartbeat v1的CRM配置接口；
---------------------------------------------------------------------------------------------------------------------------------
[root@stu21 ha.d]# vim ha.cf
logfile /var/log/ha-log(开启)
#
#
# Facility to use for syslog()/logger
#
#logfacility local0（关闭）//如果要开启，则需要在 /etc/rsyslog.conf 增加一条 local0.* /var/log/heartbeat.log
.
.
mcast eth0 227.203.101.1 694 1 0（开启多播地址，集群，得在默认下修改）
#node ken3
#node kathy
node node1.stu21.com (节点1 uname -n)
node node2.stu21.com（节点2 ）
#ping 10.10.10.254
ping 172.16.0.1
compression bz2
#
# Confiugre compression threshold
# This value determines the threshold to compress a message,
# e.g. if the threshold is 1, then any message with size greater than 1 KB
# will be compressed, the default is 2 (KB)
compression_threshold 2
---------------------------------------------------------------------------------------------------------------------------------
[root@node1 ~]# openssl rand -hex 6
89b3938df5e8
[root@node1 ~]#
[root@stu21 ha.d]# ls
authkeys ha.cf harc haresources rc.d README.config resource.d shellfuncs
[root@stu21 ha.d]# vim authkeys
#auth 1
#1 crc
#2 sha1 HI!
#3 md5 Hello!
auth 2
2 sha1 89b3938df5e8
[root@stu21 ha.d]# vim haresources
#node1 10.0.0.170 Filesystem::/dev/sda1::/data1::ext2
#
# Regarding the node-names in this file:
#
# They must match the names of the nodes listed in ha.cf, which in turn
# must match the `uname -n` of some node in the cluster. So they aren't
#virtual in any sense of the word.
node1.stu21.com 172.16.21.35/16/eth0/172.16.255.255 httpd（只加这一句）
接下来同样复制一份给节点 node2
[root@stu21 ha.d]# scp -p authkeys haresources ha.cf node2:/etc/ha.d/
authkeys 100% 672 0.7KB/s 00:00
haresources 100% 5968 5.8KB/s 00:00
ha.cf 100% 10KB 10.4KB/s 00:00
[root@stu21 ha.d]#
下面来测试两节点的web服务器是否正常
测试节点1（172.16.21.6）
[root@stu21 ha.d]# service nginx start
Starting nginx: [ OK ]
[root@stu21 ha.d]# curl 172.16.21.6
<h1>www.stu21.com /nginx </h1>
[root@stu21 ha.d]# service nginx stop
Stopping nginx: [ OK ]
[root@stu21 ha.d]# chkconfig nginx off
[root@stu21 ha.d]# chkconfig --list nginx
nginx 0:off 1:off 2:off 3:off 4:off 5:off 6:off
[root@stu21 ha.d]#
测试节点2（172.16.21.10）
[root@stu21 ~]#
[root@stu21 ~]# curl 172.16.21.10
<h1>node2.stu21.com /nginx </h1>
[root@stu21 ~]# service nginx stop
Stopping nginx: [ OK ]
[root@stu21 ~]# chkconfig nginx off
[root@stu21 ~]# chkconfig --list nginx
nginx 0:off 1:off 2:off 3:off 4:off 5:off 6:off
[root@stu21 ~]#
[root@stu21 ~]# service heartbeat start;ssh node2 'service heartbeat start'