Validate cluster.https_address at configuration and allow change if node is not part of a cluster yet.

[lepokle]

Required information

• Distribution: Arch Linux
• Distribution version: Rolling Release
• The output of "lxc info" or if that fails: config: cluster.https_address: 192.168.167.1:8443 api_extensions:
  • storage_zfs_remove_snapshots
  • container_host_shutdown_timeout
  • container_stop_priority
  • container_syscall_filtering
  • auth_pki
  • container_last_used_at
  • etag
  • patch
  • usb_devices
  • https_allowed_credentials
  • image_compression_algorithm
  • directory_manipulation
  • container_cpu_time
  • storage_zfs_use_refquota
  • storage_lvm_mount_options
  • network
  • profile_usedby
  • container_push
  • container_exec_recording
  • certificate_update
  • container_exec_signal_handling
  • gpu_devices
  • container_image_properties
  • migration_progress
  • id_map
  • network_firewall_filtering
  • network_routes
  • storage
  • file_delete
  • file_append
  • network_dhcp_expiry
  • storage_lvm_vg_rename
  • storage_lvm_thinpool_rename
  • network_vlan
  • image_create_aliases
  • container_stateless_copy
  • container_only_migration
  • storage_zfs_clone_copy
  • unix_device_rename
  • storage_lvm_use_thinpool
  • storage_rsync_bwlimit
  • network_vxlan_interface
  • storage_btrfs_mount_options
  • entity_description
  • image_force_refresh
  • storage_lvm_lv_resizing
  • id_map_base
  • file_symlinks
  • container_push_target
  • network_vlan_physical
  • storage_images_delete
  • container_edit_metadata
  • container_snapshot_stateful_migration
  • storage_driver_ceph
  • storage_ceph_user_name
  • resource_limits
  • storage_volatile_initial_source
  • storage_ceph_force_osd_reuse
  • storage_block_filesystem_btrfs
  • resources
  • kernel_limits
  • storage_api_volume_rename
  • macaroon_authentication
  • network_sriov
  • console
  • restrict_devlxd
  • migration_pre_copy
  • infiniband
  • maas_network
  • devlxd_events
  • proxy
  • network_dhcp_gateway
  • file_get_symlink
  • network_leases
  • unix_device_hotplug
  • storage_api_local_volume_handling
  • operation_description
  • clustering
  • event_lifecycle
  • storage_api_remote_volume_handling
  • nvidia_runtime
  • container_mount_propagation
  • container_backup
  • devlxd_images
  • container_local_cross_pool_handling
  • proxy_unix
  • proxy_udp
  • clustering_join
  • proxy_tcp_udp_multi_port_handling
  • network_state
  • proxy_unix_dac_properties
  • container_protection_delete
  • unix_priv_drop
  • pprof_http
  • proxy_haproxy_protocol
  • network_hwaddr
  • proxy_nat
  • network_nat_order
  • container_full
  • candid_authentication
  • backup_compression
  • candid_config
  • nvidia_runtime_config
  • storage_api_volume_snapshots
  • storage_unmapped
  • projects
  • candid_config_key
  • network_vxlan_ttl
  • container_incremental_copy
  • usb_optional_vendorid
  • snapshot_scheduling
  • container_copy_project
  • clustering_server_address
  • clustering_image_replication
  • container_protection_shift
  • snapshot_expiry
  • container_backup_override_pool
  • snapshot_expiry_creation
  • network_leases_location
  • resources_cpu_socket
  • resources_gpu
  • resources_numa
  • kernel_features
  • id_map_current
  • event_location
  • storage_api_remote_volume_snapshots
  • network_nat_address
  • container_nic_routes
  • rbac
  • cluster_internal_copy
  • seccomp_notify
  • lxc_features
  • container_nic_ipvlan
  • network_vlan_sriov
  • storage_cephfs
  • container_nic_ipfilter
  • resources_v2
  • container_exec_user_group_cwd
  • container_syscall_intercept
  • container_disk_shift
  • storage_shifted
  • resources_infiniband api_status: stable api_version: "1.0" auth: trusted public: false auth_methods:
  • tls environment: addresses: [] architectures:
  • x86_64
  • i686 certificate: certificate_fingerprint: driver: lxc driver_version: 3.2.1 kernel: Linux kernel_architecture: x86_64 kernel_features: netnsid_getifaddrs: "true" seccomp_listener: "true" shiftfs: "false" uevent_injection: "true" unpriv_fscaps: "true" kernel_version: 5.2.11-arch1-1-ARCH lxc_features: mount_injection_file: "true" network_gateway_device_route: "true" network_ipvlan: "true" network_l2proxy: "true" network_phys_macvlan_mtu: "true" seccomp_notify: "true" project: default server: lxd server_clustered: false server_name: server_pid: 1708 server_version: "3.16" storage: zfs storage_version: 0.8.1-1

Issue description

I had run a single LXD node over the past three years. However I wanted to extend this setup and build a cluster now. By accident, I've set the cluster.https_address to 192.168.167.1:8443s (note the s at the end) by executing lxc config set cluster.https_address=192.168.167.1:8443s. LXD reports the following error:

Error: cannot listen on https socket: listen tcp: lookup tcp/8443s: Servname not supported for ai_socktype

Unfortunately I was not able to fix the misspelled address because changing this property is not yet supported. Running the command again shows:

Error: Changing cluster.https_address is currently not supported

Note that the node was not part of a cluster yet:

$ lxc cluster list
Error: LXD server isn't part of a cluster

I think validation of the address and/or allowing to change the address while node is not part of a cluster would be helpful.

I've changed the value using raw SQL with lxd sql. I hope this does not cause any issues now when starting to build the cluster.

Steps to reproduce

1. A single node LXD instance (no cluster) is needed
2. Set cluster.https_address to an invalid address like 192.168.167.1:8443s
3. Try to fix it

[GuanglinDu]

I ran across the similar problem when creating a cluster with several old laptops. There must be something wrong when the first node was initialized. I re-created this node several times with "lxd init" before fixing the problem. I tweaked the options carefully according to my former operations and the prompts, such as the following one should be yes, then I fed it with the local cabled host network interface name:

Would you like to configure LXD to use an existing bridge or host interface? (yes/no) [default=no]: yes
Name of the existing bridge or host interface: enp0s25