CentOS Salt-workon无法连接到Salt-master，登录尝试失败

Question

我有两个节点:

1. Debian 11 salt-master (3002.6+dfsg1-4+deb11u1)在ip 10.0.0.254
新安装的CentOS 7 -刚刚更新并安装了salt-minion-3004.2-1(也尝试了salt-minion-3002.9-1)。主要的问题是在接受密钥后连接salt-仆从和salt-master。只有CentOS，其他Debian的下属工作得很好。小兵配置很简单:

master: 10.0.0.254
startup_states: 'highstate'
log_level_logfile: info

和主配置:

interface: 10.0.0.254
auto_accept: true
file_roots:
base:
- /srv/salt/
- /srv/formulas/
pillar_roots:
base:
- /srv/pillar
log_level: info
log_level_logfile: info

minion的日志看起来像(在调试模式下):

2022-12-08 17:34:55,308 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'base64_encode' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'base64_decode' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'md5' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'sha1' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'sha256' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'sha512' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'hmac' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'hmac_compute' as a jinja filter
2022-12-08 17:34:55,309 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'random_hash' as a jinja filter
2022-12-08 17:34:55,310 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'rand_str' as a jinja filter
2022-12-08 17:34:55,310 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'file_hashsum' as a jinja filter
2022-12-08 17:34:55,358 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'http_query' as a jinja filter
2022-12-08 17:34:55,362 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'strftime' as a jinja filter
2022-12-08 17:34:55,362 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'date_format' as a jinja filter
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:84  ][DEBUG   ][13797] Marking 'raise' as a jinja global
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:58  ][DEBUG   ][13797] Marking 'match' as a jinja test
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:58  ][DEBUG   ][13797] Marking 'equalto' as a jinja test
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'skip' as a jinja filter
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'sequence' as a jinja filter
2022-12-08 17:34:55,365 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'to_bool' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'indent' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'tojson' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'quote' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'regex_escape' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'regex_search' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'regex_match' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'regex_replace' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'uuid' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'unique' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'min' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'max' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'avg' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'union' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'intersect' as a jinja filter
2022-12-08 17:34:55,366 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'difference' as a jinja filter
2022-12-08 17:34:55,367 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'symmetric_difference' as a jinja filter
2022-12-08 17:34:55,367 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'method_call' as a jinja filter
2022-12-08 17:34:55,367 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'yaml_dquote' as a jinja filter
2022-12-08 17:34:55,367 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'yaml_squote' as a jinja filter
2022-12-08 17:34:55,367 [salt.utils.decorators.jinja:32  ][DEBUG   ][13797] Marking 'yaml_encode' as a jinja filter
2022-12-08 17:34:55,372 [salt.utils.process:324 ][DEBUG   ][13797] Created pidfile: /var/run/salt-minion.pid
2022-12-08 17:34:55,372 [salt.cli.daemons :91  ][INFO    ][13797] Starting up the Salt Minion
2022-12-08 17:34:55,373 [salt.utils.event :1017][DEBUG   ][13797] AsyncEventPublisher PUB socket URI: /var/run/salt/minion/minion_event_c6728c0b0d_pub.ipc
2022-12-08 17:34:55,373 [salt.utils.event :1018][DEBUG   ][13797] AsyncEventPublisher PULL socket URI: /var/run/salt/minion/minion_event_c6728c0b0d_pull.ipc
2022-12-08 17:34:55,373 [salt.utils.event :1050][INFO    ][13797] Starting pull socket on /var/run/salt/minion/minion_event_c6728c0b0d_pull.ipc
2022-12-08 17:34:55,374 [salt.utils.event :313 ][DEBUG   ][13797] SaltEvent PUB socket URI: /var/run/salt/minion/minion_event_c6728c0b0d_pub.ipc
2022-12-08 17:34:55,374 [salt.utils.event :314 ][DEBUG   ][13797] SaltEvent PULL socket URI: /var/run/salt/minion/minion_event_c6728c0b0d_pull.ipc
2022-12-08 17:34:55,375 [salt.loader      :778 ][DEBUG   ][13797] Grains refresh requested. Refreshing grains.
2022-12-08 17:34:55,375 [salt.config      :1898][DEBUG   ][13797] Reading configuration from /etc/salt/minion
2022-12-08 17:34:55,530 [salt.modules.network:2119][DEBUG   ][13797] Elapsed time getting FQDNs: 0.10647821426391602 seconds
2022-12-08 17:34:55,925 [salt.utils.lazy  :102 ][DEBUG   ][13797] LazyLoaded zfs.is_supported
2022-12-08 17:34:55,938 [salt.minion      :1272][INFO    ][13797] Creating minion process manager
2022-12-08 17:34:55,938 [salt.utils.process:640 ][DEBUG   ][13797] Process Manager starting!
2022-12-08 17:34:55,939 [salt.utils.process:640 ][DEBUG   ][13797] Process Manager starting!
2022-12-08 17:34:55,980 [salt.minion      :798 ][DEBUG   ][13797] Connecting to master. Attempt 1 of 1
2022-12-08 17:34:55,980 [salt.minion      :239 ][DEBUG   ][13797] Master URI: tcp://10.0.0.254:4506
2022-12-08 17:34:56,000 [salt.crypt       :503 ][DEBUG   ][13797] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'centos.test.tld', 'tcp://10.0.0.254:4506')
2022-12-08 17:34:56,001 [salt.transport.zeromq:558 ][DEBUG   ][13797] Generated random reconnect delay between '1000ms' and '11000ms' (1993)
2022-12-08 17:34:56,001 [salt.transport.zeromq:561 ][DEBUG   ][13797] Setting zmq_reconnect_ivl to '1993ms'
2022-12-08 17:34:56,001 [salt.transport.zeromq:567 ][DEBUG   ][13797] Setting zmq_reconnect_ivl_max to '11000ms'
2022-12-08 17:34:56,001 [salt.transport.zeromq:168 ][DEBUG   ][13797] Initializing new AsyncZeroMQReqChannel for ('/etc/salt/pki/minion', 'centos.test.tld', 'tcp://10.0.0.254:4506', 'clear')
2022-12-08 17:34:56,001 [salt.transport.zeromq:267 ][DEBUG   ][13797] Connecting the Minion to the Master URI (for the return server): tcp://10.0.0.254:4506
2022-12-08 17:34:56,002 [salt.transport.zeromq:1366][DEBUG   ][13797] Trying to connect to: tcp://10.0.0.254:4506
2022-12-08 17:34:56,002 [salt.crypt       :219 ][DEBUG   ][13797] salt.crypt.get_rsa_pub_key: Loading public key
2022-12-08 17:34:56,011 [salt.crypt       :781 ][ERROR   ][13797] Sign-in attempt failed: {'enc': 'pub', 'pub_key': '-----BEGIN PUBLIC KEY-----nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqAFGPkNIAGa8+JdKnu5nB6UZUNfX8yh2qYa6HPQzIbBMPC5Z+6vUJAeQiXX/vi/PWV4WhWw891KKE53HBcDlnn355J9PjcplZeaRXg/qPyUr7vH9AF4pUGXSJKUywZh6YyBUFKfiF/MDsuzxA26IPndLdejRtmn63rgMkuEAEz+u/Ke3GjMoOElWBRsiu6CW3C43STZsJbZ1QUTh+ROVe9nhM5sEnu8Zzr7zV5qQ8qJooYl2W5wpH/O+p/tbohxNRbSLFdfnEUk8dcIFNNX4ilen1o1JEEUGFfeOhfz2ePp6rW4YboIi8cd+oFOqFdXy7xOVHOST8wKtI8Px1TCfSzgCnLQIDAQABn-----END PUBLIC KEY-----', 'publish_port': 4505, 'aes': b'=Dxeexbcxfbxb1Rxd17rAxc1x9doxcfxbaxc3Ix06xe5n!xd5xbbxc2xdcUkx1byxf0>Rx18xf8x84xd6xa5xb5r.x0f{Pxabx18xddxb1xaaxe6xda9x8fx81x03|Nxa3@x1bxcax0cCxffxc6xe3Lx19x9dx9646x06=5xfe{xac><x81=hxeaxa2xc4x89xebVHx1dxf6xcbxbf^xbdx11r^xdbxf9qxa9VT'Kx9fxb3x1c|z>xb6xx91x19ix89:xca}x96!x94Px94x9dxcapx979]x87gxedxc9ywx97T<x95x0exb1lx89Kxb2x10x95xc9x8exbbx19x18x04xf8lXBFxa5x94xadx85x01x8fx15xbbA,fUx8dsxadMxe8xa3xfex92xe3@*cxd3r'xb9\xad)xedx03xe5xabx83xa7xf0"=x1dxf8uxf5Kxb7x9exbfxd3Kx93x9ex15xd3xcbLxd1xddx06xc1x1dxea"xe9x87,xf5$xb0x81xb9k(x8e]xb9xd4x02x92Oxfbmx81x89xc9y x07+x86pxb6"2', 'sig': b'x04xe1-Tx17Sxdd+xc3x14xe9x1exac x85xebx1ax8cx99xe8xd9xe3,2x12x89x1ax1fxed$Yx14Csxa6xbfxf3x08xa6xcfxe9bxa5xd9vx9ax0ex1e]{x01xb6xc4x95tx16;xf6t<x81x03xaexd8x0bx14"x8dx02xc6>Fxb9!xbdxf2NKxc1xa3x99=x8axafxe7x7fxbeLZ:xbf&lx99dx8cx86ihx89%xe1Cx886txc9r:xb1xb6x15\x1axacQxccV/xcdx87wxd1xafxf6xdfxecx81/xa2C"x87x97xadsxf2xb0xcc$6x9d'x0bx1cnxdaux95x1eix93$+)x1dx18xc3x8eXxa8Yxd5xb1xd0adxc0[xf8x98x90xd1wx13x9fhxbex80hx9cF3Lxe3xd8x8d.xe8x9fxe4I=xc2x96rx19Oxcax18bqx9dWNfxacxeexbf!xeeO|BPx0b[x91pxb7xed^'x81_x1axfdEx97x8bxcdr6x8ekRx1dxeaxcfxd7x16 xbe-x80,x1d/xd9x0ex01bmVPR'}
2022-12-08 17:34:56,011 [salt.transport.zeromq:294 ][DEBUG   ][13797] Closing AsyncZeroMQReqChannel instance
2022-12-08 17:34:56,014 [salt.minion      :1143][ERROR   ][13797] Error while bringing up minion for multi-master. Is master at 10.0.0.254 responding?

2022-12-08 17:34:00,476 [salt.transport.mixins.auth:197 ][INFO    ][556280] Authentication request from centos.test.tld
2022-12-08 17:34:00,476 [salt.transport.mixins.auth:434 ][INFO    ][556280] Authentication accepted from centos.test.tld

我试了3002和3004，结果是一样的我需要一些想法如何运行Centos minion与Debian master在一起。

Answer 1

来自3004.1发行说明:

3004.1仆从无法与3004.1以上的主服务器通信。你必须先升级主人再升级随从。

同样适用于3004.1

之后的仆从