COROSYNC-KEYGEN(8)

💖 COROSYNC-KEYGEN 💖

okay bestie, welcome to the corosync-keygen page from the System Manager's Manual section 8 — yes it's a sysadmin man page but it's also kinda iconic so let's go 🫶

---

✨ NAME ✨

corosync-keygen — generate an authentication key for Corosync. that's it. that's the job. 💅

---

🌸 SYNOPSIS 🌸

corosync-keygen [-k <filename>] [-m <randomfile>] [-s size] [-l] [-h]

---

🦋 DESCRIPTION 🦋

so here's the tea 🍓 — if you want to set up corosync using cryptographic techniques to make sure your messages are authentic and private (yes, the whole "nobody's reading my cluster mail" vibe), you're gonna need to generate a private key. no key, no privacy. periodt.

corosync-keygen is the girl that makes that key and drops it at /etc/corosync/authkey, or wherever you tell it with the -k option. ✨

IMPORTANT BESTIE: this private key has to be copied to every processor in the cluster. every. single. one. if the private key isn't the same for every node, the nodes with nonmatching private keys will not be able to join the same configuration. it's giving group project where one person has a different doc 💀

so copy the key to some security transportable storage, or just use ssh to send it node to node. then install it with this command:

unix#: install -D --group=0 --owner=0 --mode=0400 /path_to_authkey/authkey /etc/corosync/authkey

and if you ever see a message saying Invalid digest coming from the corosync executive? that means the keys are not consistent between processors. vibe check failed. go fix your keys. 😭

---

💅 OPTIONS 💅

• -k <filename> — this one specifies the fully qualified path</> to the shared key you wanna create. the default is /etc/corosync/authkey. she's the main character option fr fr 👑
• -r — random number source file. default is /dev/urandom. for example, /dev/random may be used when you really superb randomness is needed. fancy. ✨
• -s size — size of the generated key in bytes. default is 256 bytes. the allowed range is <128, 4096>. don't get greedy now. 🎀
• -l — this option is not used and it's kept only for compatibility. she's just there. standing. existing. we respect her anyway. 💀
• -h — print basic usage. the classic "help me please" button. 🫶

---

🌈 EXAMPLES 🌈

generate the key — the basic slay:

# corosync-keygen
Corosync Cluster Engine Authentication key generator.
Gathering 2048 bits for key from /dev/urandom.
Writing corosync key to /etc/corosync/authkey

generate a longer key and store it in the /tmp/authkey file — she's bigger, she's bolder, she's living in /tmp:

$ corosync-keygen -s 2048 -k /tmp/authkey
Corosync Cluster Engine Authentication key generator.
Gathering 16384 bits for key from /dev/urandom.
Writing corosync key to /tmp/authkey.

generate a superb key using /dev/random — this one makes you work for it, keyboard-mashing era 😭:

# corosync-keygen -r /dev/random
Gathering 2048 bits for key from /dev/random.
Press keys on your keyboard to generate entropy.
Press keys on your keyboard to generate entropy (1128 bits still needed).
Press keys on your keyboard to generate entropy (504 bits still needed).
Press keys on your keyboard to generate entropy (128 bits still needed).
Press keys on your keyboard to generate entropy (32 bits still needed).
Writing corosync key to /etc/corosync/authkey.

---

👀 SEE ALSO 👀

• corosync_overview(7)
• corosync.conf(5)

go read those next bestie, iykyk 💜

---

🎀 AUTHOR 🎀

Angus Salkeld — thank you for your service king 🫡✨

---

and that's a wrap on the COROSYNC-KEYGEN(8) page from the System Manager's Manual, dated 2019-04-09. she's a little vintage, she's still serving 💖 bye bestie, go generate some keys 🌸🦋