Skip to main content
RunBook Academy

← All runbooks in Ceph

high riskdata loss risk~90 min

Recover from multiple OSD failures

1 · Prerequisites

Confirm every item is in place before any state change.

  • Multiple OSDs are down (possibly on different hosts)
  • A cascade event has happened

2 · Pre-checks

Read-only diagnostic commands. If any of these don't match expected output, stop and investigate further.

  • · ceph osd tree shows which OSDs are down
  • · ceph -s reports the cluster health
  • · The CRUSH map is readable
  • · Capacity headroom can absorb the recovery

3 · Procedure

Execute each step in order. Verify the expected output of a step before moving to the next.

  1. 1Identify the cascade cause
  2. 2Assess which PGs are at risk
  3. 3Do NOT mark OSDs out unnecessarily
  4. 4Wait for the cascade source to heal
  5. 5Recover the OSDs (Part LVII)
  6. 6Verify the cluster: ceph -s is HEALTH_OK

4 · Verification

Confirm the procedure actually fixed the problem.

  • The cluster recovers to HEALTH_OK
  • All affected PGs return to active+clean
  • Capacity is recovered

5 · Rollback

If verification fails, undo the procedure in reverse order.

  • If the cascade is persistent: identify the root cause
  • If the cluster cannot recover: see the disaster-recovery runbook

6 · Escalation

When the runbook isn't enough, contact:

  • · Storage team
  • · Hardware vendor
  • · Disaster recovery team

Recover from multiple OSD failures

This runbook covers Recover from multiple OSD failures on a Ceph Tentacle cluster.

When to use

  • Active production scenario matching the impact (data-loss-risk)
  • The prerequisites are met

Prerequisites

Before starting this runbook, verify each prerequisite has been met. If a prerequisite is not met, resolve it first or escalate.

  • Multiple OSDs are down (possibly on different hosts)
  • A cascade event has happened

Pre-checks

Collect evidence before taking action. Evidence is the proof the runbook worked.

# ceph osd tree shows which OSDs are down
# ceph -s reports the cluster health
# The CRUSH map is readable
# Capacity headroom can absorb the recovery

Procedure

Step 1

Identify the cascade cause

Step 2

Assess which PGs are at risk

Step 3

Do NOT mark OSDs out unnecessarily

Step 4

Wait for the cascade source to heal

Step 5

Recover the OSDs (Part LVII)

Step 6

Verify the cluster: ceph -s is HEALTH_OK

Verification

After completing the procedure, verify the result:

# The cluster recovers to HEALTH_OK
# All affected PGs return to active+clean
# Capacity is recovered

Rollback

If the procedure does not produce the expected verification, roll back:

  • If the cascade is persistent: identify the root cause
  • If the cluster cannot recover: see the disaster-recovery runbook

Escalation

If you cannot roll back or the rollback fails, escalate:

  • Storage team
  • Hardware vendor
  • Disaster recovery team

References

  1. Ceph documentation