Linux HA Cluster: running a resource as non-root user

centos7corosynchigh-availabilitylinuxpacemaker

i'm have successfully setup the HA cluster using pacemaker and corosync on centos7, and i've also been able to add and start resources.

one of the resources is an instance of tomcat, and in the current configuration it runs fine. the only problem i am having is that tomcat is being run as root user. i would like the tomcat resource to launch as non-root user. i've been reading the documentation but i havent been able to find anything yet.

can anyone here see if they have a solution to this?

thanks in advance.

Best Answer

looking carefully at the documentation for the HA resource type ocf:heartbeat:tomcat there is an option tomcat_user , when set, tomcat will be launched as that user.

Related Solutions

Linux High Availability – Alternatives to Heartbeat, Pacemaker, and CoroSync

I prefer to use keepalived for high-availability. I find it simpler to setup (one daemon and config) than heartbeat and company. The only drawback I run into, is that keepalived doesn't have a unicast option by default, and only uses VRRP for communication (The author of HAProxy has written a unicast patch for keepalived however)

Pacemaker/corosync timeout before resource transfers

It sounds like migration-threshold is what you're looking for.

Assumming that you have a resource which is setting op monitor interval to 20s:

primitive p_foo ocf:heartbeat:foo \
    params ...
    op monitor interval="20s"

and you want it doesn't migrate to a new node within 1 minute, so you should set migration-threshold to 3:

primitive p_foo ocf:heartbeat:foo \
    params ...
    op monitor interval="20s"
    meta target-role="Started" migration-threshold="3"

Best Answer

Related Solutions

Linux High Availability – Alternatives to Heartbeat, Pacemaker, and CoroSync

Pacemaker/corosync timeout before resource transfers

Related Topic