ssh免密互信与ubuntu20.04 pacemaker corosync ha linux高可用架构

0. 给每个主机设置不同的主机名
  sudo hostnamectl set-hostname node1
  sudo reboot
  
1.双机互信

[root@node1 ~]# uname -n
node1.shuishui.com
[root@node1 ~]# sudo vi /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.80.135  node1
192.168.80.136  node2
[root@node1 ~]# ping node2
PING node2 (192.168.80.136) 56(84) bytes of data.
64 bytes from node2.shuishui.com (172.16.7.20): icmp_seq=1 ttl=64 time=1.41 ms
-----------------------------------

2.ssh免密码登录

[root@node1 ~]# ssh-keygen -t rsa -P ''     #    /生成空密码 直接回车即可
 cd  ~/.ssh/    #进.ssh文件：
ls  #查看文件是否有id_rsa(私钥),id_rsa.pub(公钥)
cat    ~/.ssh/id_rsa.pub >>authorized_keys  #本机免密
cat   ~/.ssh/id_rsa.pub >> known_hosts   #把秘钥拷贝一份，追加到known_hosts文件中
ls  #查看是否有known_hosts文件
————————————————

ssh-copy-id -i id_rsa.pub root@对方主机名。

[root@node1 ~]# ssh-copy-id  -f   -i  ~/.ssh/id_rsa.pub  node2  #发送到node2 实质是向对方的authorized_keys 写入公钥, 向那个主机中写入,就可以免密登录那个主机

#添加资源
3 . pacemaker,corosync 搭建

  sudo apt install pacemaker crmsh -y 
  
  需要在: corosync 中/etc/corosync/corosync.conf 添加nodelist 中添加节点
 sudo crm 
 
 
 primitive webip ocf:heartbeat:IPaddr parms ip="192.168.80.110" nic="ens33" cidr_netmask="" broadcast="192.168.80.255" 
 
 primitive webserver systemd:cockpit op start timeout=10s op stop timeout=10s