网站资料筹备全国企业信用公示查询服务平台

网站资料筹备,全国企业信用公示查询服务平台,电子商务网址大全,肇庆市端州发布从本章来完成安装k8s学习的最后一种安装方式(二进制安装)#xff0c;系统使用Rockly9.6#xff0c;K8s版本1.29.2#xff0c;一共会分成几张进行编写。1. 安装Topo2.环境初始化 1、镜像下载(所有节点) # 官方下载地址 https://rockylinux.org/download # 阿里云镜像下载地址…从本章来完成安装k8s学习的最后一种安装方式(二进制安装)系统使用Rockly9.6K8s版本1.29.2一共会分成几张进行编写。1. 安装Topo2.环境初始化1、镜像下载(所有节点)# 官方下载地址https://rockylinux.org/download# 阿里云镜像下载地址https://mirrors.aliyun.com/rockylinux/9/isos/x86_64/?spma2c6h.25603864.0.0.29696621VzJej52、环境配置(所有节点)2.1 网卡配置(所有主机都要设置好IP)# cat /etc/NetworkManager/system-connections/ens160.nmconnection[ipv4]methodmanualaddress1192.168.1.12/24,192.168.1.1dns114.114.114.114;8.8.8.82.2 修改主机名和/etc/hosts解析文件# 设置主机名hostnamectl set-hostname server170# Host文件解析# cat /etc/hosts127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6192.168.1.170 server170192.168.1.171 server171192.168.1.172 server172192.168.1.173 server173192.168.1.174 server1742.3 Rocky 系统软件源更换# 使用阿里源sed-es|^mirrorlist|#mirrorlist|g\-es|^#baseurlhttp://dl.rockylinux.org/$contentdir|baseurlhttps://mirrors.aliyun.com/rockylinux|g\-i.bak\/etc/yum.repos.d/[Rr]ocky*.repo# 使用私有仓库sed-es|^mirrorlist|#mirrorlist|g\-es|^#baseurlhttp://dl.rockylinux.org/$contentdir|baseurlhttp://192.168.1.12:8081/repository/Rockylinux-YumGroup|g\-i.bak\/etc/yum.repos.d/[Rr]ocky*.repo dnf makecache2.4 防火墙修改 firewalld 为 iptablessystemctl stop firewalld systemctl disable firewalld yum -yinstalliptables-services systemctl start iptables iptables -F# 清理iptables规则systemctlenableiptables2.5 禁用 Selinuxsetenforce0sed-is/SELINUXenforcing/SELINUXdisabled/g/etc/selinux/config grubby --update-kernel ALL --argsselinux02.6 设置时区及时间同步# 将3台master构建成高可用时间服务器2台node作为客户端向时间服务器同步# 同步时间timedatectl set-timezone Asia/Shanghai# 3台服务端(master)yuminstallchrony -ycat/etc/chrony.confEOF pool ntp1.aliyun.com iburst pool ntp2.aliyun.com iburst pool ntp3.aliyun.com iburst driftfile /var/lib/chrony/drift makestep 1.0 3 rtcsync allow 192.168.1.0/24 local stratum 10 # 设置权重这个3台服务器要不同 keyfile /etc/chrony.keys leapsectz right/UTC logdir /var/log/chrony EOFsystemctl restart chronyd;systemctlenablechronyd# 客户端(node)yuminstallchrony -ycat/etc/chrony.confEOF pool 192.168.1.170 iburst pool 192.168.1.171 iburst pool 192.168.1.172 iburst driftfile /var/lib/chrony/drift makestep 1.0 3 rtcsync keyfile /etc/chrony.keys leapsectz right/UTC logdir /var/log/chrony EOFsystemctl restart chronyd;systemctlenablechronyd# 使用客户端进行验证chronyc sources -v2.7 关闭 swap 分区swapoff -ased-is:/dev/mapper/rl-swap:#/dev/mapper/rl-swap:g/etc/fstab2.8 安装配置IPVs# 安装 ipvsyuminstallipvsadm ipset sysstat conntrack libseccomp -ycat/etc/modules-load.d/ipvs.confEOF ip_vs ip_vs_rr ip_vs_wrr ip_vs_sh nf_conntrack ip_tables ip_set xt_set ipt_set ipt_rpfilter ipt_REJECT ipip EOFsystemctl restart systemd-modules-load.service lsmod|grep-e ip_vs -e nf_conntrack2.9 安装必备的工具包yum update -yyum -yinstallwgetpsmiscvimnet-tools nfs-utils telnet yum-utils device-mapper-persistent-data lvm2gittarcurl2.10 将calico网卡排除被NetworkManager所管理(后期会用calico进行管理)cat/etc/NetworkManager/conf.d/calico.confEOF [keyfile] unmanaged-devicesinterface-name:cali*;interface-name:tunl* EOFsystemctl restart NetworkManager2.11 内核参数优化# 配置 ulimitulimit-SHn65535cat/etc/security/limits.confEOF * soft nofile 655360 * hard nofile 131072 * soft nproc 655350 * hard nproc 655350 * seft memlock unlimited * hard memlock unlimitedd EOF# 修改内核参数catEOF/etc/sysctl.d/k8s.confnet.ipv4.ip_forward 1 net.bridge.bridge-nf-call-iptables 1 fs.may_detach_mounts 1 vm.overcommit_memory1 vm.panic_on_oom0 fs.inotify.max_user_watches89100 fs.file-max52706963 fs.nr_open52706963 net.netfilter.nf_conntrack_max2310720 net.ipv4.tcp_keepalive_time 600 net.ipv4.tcp_keepalive_probes 3 net.ipv4.tcp_keepalive_intvl 15 net.ipv4.tcp_max_tw_buckets 36000 net.ipv4.tcp_tw_reuse 1 net.ipv4.tcp_max_orphans 327680 net.ipv4.tcp_orphan_retries 3 net.ipv4.tcp_syncookies 1 net.ipv4.tcp_max_syn_backlog 16384 net.ipv4.ip_conntrack_max 65536 net.ipv4.tcp_max_syn_backlog 16384 net.ipv4.tcp_timestamps 0 net.core.somaxconn 16384 net.ipv6.conf.all.disable_ipv6 0 net.ipv6.conf.default.disable_ipv6 0 net.ipv6.conf.lo.disable_ipv6 0 net.ipv6.conf.all.forwarding 1 EOFsysctl --system3、 安装 Docker# 二进制包下载地址https://download.docker.com/linux/static/stable/x86_64/# wget https://mirrors.ustc.edu.cn/docker-ce/linux/static/stable/x86_64/docker-25.0.3.tgztarxf docker-*.tgzcpdocker/* /usr/bin/# 创建 containerd 的 service 文件,并且启动cat/etc/systemd/system/containerd.serviceEOF [Unit] Descriptioncontainerd container runtime Documentationhttps://containerd.io Afternetwork.target local-fs.target [Service] ExecStartPre-/sbin/modprobe overlay ExecStart/usr/bin/containerd Typenotify Delegateyes KillModeprocess Restartalways RestartSec5 LimitNPROCinfinity LimitCOREinfinity LimitNOFILE1048576 TasksMaxinfinity OOMScoreAdjust-999 [Install] WantedBymulti-user.target EOFsystemctlenable--now containerd.service# 准备 docker 的 service 文件cat/etc/systemd/system/docker.serviceEOF [Unit] DescriptionDocker Application Container Engine Documentationhttps://docs.docker.com Afternetwork-online.target firewalld.service cri-docker.service docker.socket containerd.service Wantsnetwork-online.target Requiresdocker.socket containerd.service [Service] Typenotify ExecStart/usr/bin/dockerd -H fd:// --containerd/run/containerd/containerd.sock ExecReload/bin/kill -s HUP$MAINPIDTimeoutSec0 RestartSec2 Restartalways StartLimitBurst3 StartLimitInterval60s LimitNOFILEinfinity LimitNPROCinfinity LimitCOREinfinity TasksMaxinfinity Delegateyes KillModeprocess OOMScoreAdjust-500 [Install] WantedBymulti-user.target EOF#准备 docker 的 socket 文件cat/etc/systemd/system/docker.socketEOF [Unit] DescriptionDocker Socket for the API [Socket] ListenStream/var/run/docker.sock SocketMode0660 SocketUserroot SocketGroupdocker [Install] WantedBysockets.target EOF# 配置加速器mkdir/etc/docker/ -pvcat/etc/docker/daemon.jsonEOF { exec-opts: [native.cgroupdriversystemd], registry-mirrors: [ https://docker.m.daocloud.io ], max-concurrent-downloads: 10, log-driver: json-file, log-level: warn, log-opts: { max-size: 10m, max-file: 3 }, data-root: /var/lib/docker } EOF# 启动 Dockergroupadddocker systemctl daemon-reload systemctlenable--now docker.socket systemctlenable--now docker.service systemctl status docker.service docker info4、安装 cri-docker# 解压 cri-docker# https://github.com/Mirantis/cri-dockerd/releases/# wget https://github.com/Mirantis/cri-dockerd/releases/download/v0.3.10/cri-dockerd-0.3.10.amd64.tgztarxvf cri-dockerd-*.amd64.tgzcpcri-dockerd/cri-dockerd /usr/bin/chmodx /usr/bin/cri-dockerd# 写入启动 cri-docker 配置文件cat/usr/lib/systemd/system/cri-docker.serviceEOF [Unit] DescriptionCRI Interface for Docker Application Container Engine Documentationhttps://docs.mirantis.com Afternetwork-online.target firewalld.service docker.service Wantsnetwork-online.target Requirescri-docker.socket [Service] Typenotify ExecStart/usr/bin/cri-dockerd --network-plugincni --pod-infra-container-imageregistry.aliyuncs.com/google_containers/pause:3.7 ExecReload/bin/kill -s HUP$MAINPIDTimeoutSec0 RestartSec2 Restartalways StartLimitBurst3 StartLimitInterval60s LimitNOFILEinfinity LimitNPROCinfinity LimitCOREinfinity TasksMaxinfinity Delegateyes KillModeprocess [Install] WantedBymulti-user.target EOF# 写入 cri-docker 的 socket 配置文件cat/usr/lib/systemd/system/cri-docker.socketEOF [Unit] DescriptionCRI Docker Socket for the API PartOfcri-docker.service [Socket] ListenStream%t/cri-dockerd.sock SocketMode0660 SocketUserroot SocketGroupdocker [Install] WantedBysockets.target EOF# 启动 cri-dockersystemctl daemon-reload systemctlenable--now cri-docker.service systemctl status cri-docker