PowerFlex 4.x: PowerFlex 스토리지 클러스터를 배포할 수 없습니다. 오류 "실패한 부트스트랩 작업 실패"

PowerFlex 4.x: PowerFlex 스토리지 클러스터를 배포할 수 없습니다. 오류 "실패한 부트스트랩 작업 실패"

MDM 클러스터가 아직 형성되지 않았습니다. MDM rpm만 SVM에 설치됩니다.

exception.log에는 다음과 같은 오류가 있습니다.

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10156:in `configure_security_bootstrap'
/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10405:in `configure_scaleio_gateway'
/opt/asm-deployer/lib/asm/service_deployment.rb:4156:in `process_scaleio'

scaleio-block-legacy-gateway_exception.log에는 다음과 같은 오류가 있습니다.

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

SVM의 LIA 추적 로그는 몇 초마다 다음으로 채워집니다.

2024/12/13 15:34:12.925210 LOW:7ff568389db0:netPath_StartAsServer_CK:00539:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:0 Start connection from IP XX.XX.XX.XX:43739 to XX.XX.XX.YY:9098
2024/12/13 15:34:12.925220 LOW:7ff568389db0:netPath_StartAsServer_CK:00552:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 Registered with manager
2024/12/13 15:34:12.925735 LOW:7ff568389db0:netSec_Accept_CK:00310: Starting secure accept
2024/12/13 15:34:12.929886 MED:7ff568389db0:mosSecurity_PrintLibX509StoreCtxError:01115: SSL certificate verification error: unable to get local issuer certificate
2024/12/13 15:34:12.929900 LOW:7ff568389db0:mosSsl_HandleError:00429: ERROR: Handshake: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed, SSL error: 1
2024/12/13 15:34:12.929903 LOW:7ff568389db0:netSec_SslHandshake_CK:00486: ERROR: Handshake failed (CERT_VERIFY_FAILURE)
2024/12/13 15:34:12.929905 LOW:7ff568389db0:netPath_StartAsServer_CK:00568: ERROR:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 secure accept failure (CERT_VERIFY_FAILURE)

LIA에 대한 포트 9099가 열려 있는지 확인하기 위해 SVM의 IP 주소를 사용하여 MVM에서 다음 명령을 실행했습니다.

echo ""> /dev/tcp/XX.XX.XX.XX/9099 && echo "Port is open" || echo "not open"

그러나 PowerFlex 스토리지 MDM 클러스터를 구축하지 못했습니다

고객에게 포트 9099를 차단하는 하드웨어 방화벽이 있었습니다. 

배포 중 포트 9099에서 LIA 통신을 차단할 수 있는 하드웨어 방화벽을 사용하고 있지 않은지 고객과 함께 확인합니다.