Ceph-Kern-Commands

ceph -s                 # Cluster-Status
ceph health detail      # Warnungen im Klartext
ceph df                 # Kapazität je Pool
ceph osd df tree        # Auslastung je OSD/Host
ceph versions           # Daemon-Versionen

# OSD-Management
ceph osd tree
ceph osd set noout      # keine Migration (Wartung)
ceph osd out 5          # OSD 5 evakuieren
ceph osd reweight 5 0.8 # temporäres Gewicht
ceph orch osd rm 5      # cephadm, statt osd purge

# Pools & Autoscaler
ceph osd pool create data 128 128 replicated
ceph osd pool set data size 3
ceph osd pool set data min_size 2
ceph osd pool set data bulk true   # PGs vorab hoch
ceph osd pool autoscale-status
ceph osd pool application enable data rbd

# Erasure-Profil & EC-Pool
ceph osd erasure-code-profile set ec42 \
  k=4 m=2 crush-failure-domain=host plugin=isa
# v21 deprecated: shec, clay, jerasure außer reed_sol_van
ceph osd pool create ecpool erasure ec42
ceph osd pool set ecpool allow_ec_overwrites true
# FastEC ab v20, nicht umkehrbar:
ceph osd pool set ecpool allow_ec_optimizations true

# CRUSH
ceph osd crush tree --show-shadow
ceph osd crush rule create-replicated ssd-rule \
  default host ssd
ceph osd crush rm-device-class osd.5
ceph osd crush set-device-class nvme osd.5
ceph osd crush move node7 rack=rack2

# cephx / Auth (aes256k ab 20.2.4/19.2.6)
ceph auth ls
ceph auth get-or-create client.app \
  mon 'profile rbd' osd 'profile rbd pool=data' \
  mgr 'profile rbd pool=data'
ceph auth rotate --key-type=aes256k client.app
ceph health detail | grep AUTH_INSECURE

# RBD: Image, Snap, Clone, Mirror
rbd create data/vol1 --size 100G
rbd snap create data/vol1@base
rbd snap protect data/vol1@base
rbd clone data/vol1@base data/clone1
rbd mirror image enable data/vol1 snapshot

# CephFS
ceph fs volume create cephfs
ceph fs subvolumegroup create cephfs csi
ceph fs subvolume create cephfs v1 --group_name csi
# ab v20 bei FS-Health-Warnung: --yes-i-really-mean-it
ceph fs set cephfs max_mds 2
ceph fs status

# RGW (S3) & Balancer/Orchestrator
radosgw-admin user create --uid=app --display-name="App"
radosgw-admin key create --uid=app --key-type=s3 \
  --gen-access-key --gen-secret
radosgw-admin sync status
ceph balancer status    # upmap + on ist Default