Skip to main content
RunBook Academy

← All runbooks in Ceph

high riskdata loss risk~90 min

Safely remove a storage host

1 · Prerequisites

Confirm every item is in place before any state change.

  • The host is to be decommissioned
  • Replacement capacity is in place (or cluster headroom is sufficient)
  • A maintenance window is scheduled

2 · Pre-checks

Read-only diagnostic commands. If any of these don't match expected output, stop and investigate further.

  • · The host passes cephadm check-host
  • · The cluster is HEALTH_OK
  • · The clusters capacity headroom is at least 30%
  • · Time and DNS are healthy

3 · Procedure

Execute each step in order. Verify the expected output of a step before moving to the next.

  1. 1Mark all OSDs on the host out: ceph osd out osd.<id>
  2. 2Wait for backfill: ceph progress
  3. 3Stop the daemons: ceph orch daemon stop osd.<id>
  4. 4Remove the host: ceph orch host rm <hostname>
  5. 5Verify the host is removed
  6. 6Decommission the host physically

4 · Verification

Confirm the procedure actually fixed the problem.

  • ceph -s reports HEALTH_OK
  • The host is removed from the orchestrator and the CRUSH map
  • No PGs are degraded
  • ceph osd tree shows the remaining OSDs in the right CRUSH buckets

5 · Rollback

If verification fails, undo the procedure in reverse order.

  • If backfill stalls: tune recovery settings
  • If a PG is stuck on the hosts OSDs: identify why the OSD is unresponsive
  • If headroom is insufficient: add capacity before removing the host

6 · Escalation

When the runbook isn't enough, contact:

  • · Storage team

Safely remove a storage host

This runbook covers Safely remove a storage host on a Ceph Tentacle cluster.

When to use

  • Active production scenario matching the impact (data-loss-risk)
  • The prerequisites are met

Prerequisites

Before starting this runbook, verify each prerequisite has been met. If a prerequisite is not met, resolve it first or escalate.

  • The host is to be decommissioned
  • Replacement capacity is in place (or cluster headroom is sufficient)
  • A maintenance window is scheduled

Pre-checks

Collect evidence before taking action. Evidence is the proof the runbook worked.

# The host passes cephadm check-host
# The cluster is HEALTH_OK
# The clusters capacity headroom is at least 30%
# Time and DNS are healthy

Procedure

Step 1

Mark all OSDs on the host out: ceph osd out osd.<id>

Step 2

Wait for backfill: ceph progress

Step 3

Stop the daemons: ceph orch daemon stop osd.<id>

Step 4

Remove the host: ceph orch host rm <hostname>

Step 5

Verify the host is removed

Step 6

Decommission the host physically

Verification

After completing the procedure, verify the result:

# ceph -s reports HEALTH_OK
# The host is removed from the orchestrator and the CRUSH map
# No PGs are degraded
# ceph osd tree shows the remaining OSDs in the right CRUSH buckets

Rollback

If the procedure does not produce the expected verification, roll back:

  • If backfill stalls: tune recovery settings
  • If a PG is stuck on the hosts OSDs: identify why the OSD is unresponsive
  • If headroom is insufficient: add capacity before removing the host

Escalation

If you cannot roll back or the rollback fails, escalate:

  • Storage team

References

  1. Ceph documentation