housepower / ckman

This is a tool which used to manage and monitor ClickHouse database
Apache License 2.0
438 stars 108 forks source link

使用ckman进行集群搭建是否可以使用非root权限账号 #277

Open hekaiii opened 1 year ago

hekaiii commented 1 year ago

问题1:安全审计原因,ssh登录的账号不具备su命令权限,请问这种情况是否还可以使用ckman工具进行clickhouse集群搭建? 问题2:我在遇到问题1后填写root账号密码进行集群搭建,出现了以下报错请求 参数错误: host 10.177.87.150 get platform failed: host: 10.177.87.150, cmd: uname -m: : ssh: handshake failed: ssh: unable to authenticate, attempted methods [none password], no supported methods remain 请问这种情况如何处理?感谢回复!

YenchangChan commented 1 year ago

可以使用tgz的方式进行安装,具体参考: P16.ClickHouse集群的无root方式部署

hekaiii commented 1 year ago

您好,我通过tgz的方式顺利安装完了。但是在部署时,我选择了多副本部署。 但是我发现了一个新的问题,我发现服务器中的metrika,xml有两个集群名称一个的cluseter,请问这是什么情况?

YenchangChan commented 1 year ago

配置文件贴出来看看

hekaiii commented 1 year ago

{ "server":{ "port": 8808, "https": false, //certfile: //keyfile: "pprof": true, "session_timeout": 3600, //support local, mysql, postgres "persistent_policy": "local", "task_interval": 5 //public_key: },

"log":{ "level": "INFO", "max_count": 5, // megabyte "max_size": 10, // day "max_age": 10 },

// clickhouse connect pool options "clickhouse":{ //sets the maximum number of open connections to the database "max_open_conns": 10, //sets the maximum number of connections in the idle "max_idle_conns": 2, //sets the maximum amount of time a connection may be idle. "conn_max_idle_time": 10 },

// cron job task "cron":{ "sync_logic_schema": "0 ?", "watch_cluster_status": "0 /3 ?", "sync_dist_schema": "30 /10 ?" },

//"persistent_config":{ // // if peristent_policy is mysql, must config this // "mysql":{ // "host": "127.0.0.1", // "port": 3306, // "user": "root", // // you can use ./ckman --encrypt 123456 to get password like: E310E892E56801CED9ED98AA177F18E6 // "password": "ENC(E310E892E56801CED9ED98AA177F18E6)", // // database must be created before start ckman // "database": "ckman_db" // }, // "local":{ // "format": "json" // "config_dir": "/etc/ckman/conf" // "config_file": "clusters" // } //},

"nacos":{ "enabled": false, "hosts":[ "127.0.0.1" ], "port": 8848, "user_name": "nacos", // you can use './ckman --encrypt nacos' to get password like: A7561228101CB07938FAFF00C4444546 "password": "ENC(A7561228101CB07938FAFF00C4444546)" //namespace: } }

YenchangChan commented 9 months ago

请贴集群的配置,也就是clusters.json, 不是ckman自己的配置