Rancher安装
官网：架构推荐 | Rancher。 服务器最低配置要求：4核4G
安装 Docker-CE
1：查看操作系统
cat /etc/redhat-release
2：关闭防火墙及Seliunx、swap分区
swapoff -a && sysctl -w vm.swappiness=0 && sed -ri '/^[^#]*swap/s@^@#@' /etc/fstab
systemctl disable –now firewalld && setenforce 0
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/sysconfig/selinux
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
3：更换yum源
sed -e 's|^mirrorlist=|#mirrorlist=|g' \\
-e 's|^#baseurl=http://dl.rockylinux.org/$contentdir|baseurl=https://mirrors.aliyun.com/rockylinux|g' \\
-i.bak \\
/etc/yum.repos.d/rocky*.repo
4: 安装docker源
yum install -y yum-utils jq psmisc net-tools telnet device-mapper-persistent-data lvm2 -y
yum-config-manager –add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
dnf makecache
5：安装基础工具
yum install wget jq psmisc vim net-tools telnet yum-utils device-mapper-persistent-data lvm2 git iptables -y
6：内核调优
modprobe overlay
modprobe br_netfilter
modprobe iptable_filter
modprobe ip_tables
modprobe iptable_nat
这一整套是搭建 containerd + K8s 节点前的前置环境初始化
vim /etc/modules-load.d/container-modules.conf
overlay
br_netfilter
iptable_filter
ip_tables
iptable_nat
systemctl enable –now systemd-modules-load.service rsyslog
lsmod | grep -E "overlay|br_netfilter|iptable_filter|ip_tables"
底层存储就绪：加载 overlay，支持容器镜像分层读写
底层网络就绪：加载网桥、iptables 模块，支撑 K8s Pod 通信、Service 转发、网络策略
持久化生效：配置开机自动加载，重启机器不用重复手动加载模块
事后校验：确认模块加载成功，避免后续安装 containerd/kubelet 报网络 / 存储底层错误
cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
EOF
sysctl –system
sysctl -p
7: 安装docker
yum install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y
配置镜像加速器
vim /etc/docker/daemon.json
{
"exec-opts": ["native.cgroupdriver=systemd"],
"registry-mirrors": [ "http://hub-mirror.c.163.com",
"https://docker.m.daocloud.io",
"https://dockerproxy.com",
"https://vu1ajswo.mirror.aliyuncs.com",
"https://docker.mirrors.ustc.edu.cn",
"https://docker.nju.edu.cn" ]
}
8:启动Docker
systemctl daemon-reload && systemctl enable –now docker
测试docker
docker info
离线安装 Rancher
版本选择：GitHub – rancher/rancher: Complete container management platform
k3s 容器镜像修改方法：https://docs.rancher.cn/docs/rancher2/best-practices/use-in-china/_index/
先创建目录 — 存放我的个人主页中的rancher10个镜像 (提前下载好)
mkdir -p /data/rancher-data && chmod 777 -R /data && cd /data/rancher-data
通过xshell放到当前目录下!
1:创建数据目录
cd /opt && mkdir rancher && cd rancher
2:启动Rancher : (拉取走的是阿里云)
vim docker-compose.yaml
services:
rancher:
image: registry.cn-hangzhou.aliyuncs.com/hujiaming/rancher:v2.14.2
container_name: rancher
restart: unless-stopped
privileged: true
networks:
– rancher-net
ports:
– "80:80"
– "443:443"
dns:
– 223.5.5.5
– 114.114.114.114
volumes:
– /data/rancher-data:/var/lib/rancher
environment:
– TZ=Asia/Shanghai
– CATTLE_BOOTSTRAP_PASSWORD=Mashangyouqian666666!@
– CATTLE_TELEMETRY=off
– CATTLE_AGENT_IMAGE=registry.cn-hangzhou.aliyuncs.com/hujiaming/rancher-agent:v2.14.2
ulimits:
nofile:
soft: 65536
hard: 65536
nproc: 65536
healthcheck:
test: ["CMD", "curl", "-f", "-k", "https://localhost/ping"]
interval: 30s
timeout: 10s
retries: 3
start_period: 90s
logging:
driver: json-file
options:
max-size: "100m"
max-file: "5"
networks:
rancher-net:
driver: bridge
ipam:
config:
– subnet: 172.20.0.0/16
gateway: 172.20.0.1
docker compose up -d
3:查看容器日志
docker logs -f rancher
tail -f /data/rancher-data/k3s.log
如果rancher的组件镜像无法拉取，请参考此链接如何在国内使用 Rancher | Rancher文档
新开终端!
进入到rancher容器
docker exec -it rancher bash
cd /var/lib/rancher
加载我们放在目录里面的镜像文件
ctr -n k8s.io image import /var/lib/rancher/mirrored-coredns-coredns-1.14.2.tar
ctr -n k8s.io image import /var/lib/rancher/mirrored-pause-3.6.tar
ctr -n k8s.io image import /var/lib/rancher/shell-v0.7.0.tar
ctr -n k8s.io image import /var/lib/rancher/fleet-v0.15.2.tar
ctr -n k8s.io image import /var/lib/rancher/turtles-v0.26.2.tar
ctr -n k8s.io image import /var/lib/rancher/system-upgrade-controller-v0.19.1.tar
ctr -n k8s.io image import /var/lib/rancher/rancher-webhook-v0.10.6.tar
ctr -n k8s.io image import /var/lib/rancher/remotedialer-proxy-v0.7.3.tar
ctr -n k8s.io image import /var/lib/rancher/fleet-agent-v0.15.2.tar
ctr -n k8s.io image import /var/lib/rancher/cluster-api-controller-v1.12.7.tar
登录 : 网页
更换镜像
registry.cn-hangzhou.aliyuncs.com
