114 lines
2.3 KiB
Markdown
114 lines
2.3 KiB
Markdown
## 1. 准备工作
|
||
|
||
在 pve 使用 lxc安装k3s需要修改一些宿主机配置
|
||
|
||
### 1.1 节点内核参数开启 `bridge-nf-call-iptables`
|
||
|
||
```bash
|
||
sysctl -w net.bridge.bridge-nf-call-iptables=1
|
||
```
|
||
|
||
这个主要是为了解决Service 同节点通信问题（启用 `bridge-nf-call-iptables` 这个内核参数 (置为 1)，表示 bridge 设备在二层转发时也去调用 iptables 配置的三层规则)）
|
||
|
||
### 1.2 关闭swap
|
||
|
||
```bash
|
||
sysctl vm.swappiness=0
|
||
swapoff -a
|
||
```
|
||
|
||
### 1.3 启用 IP 转发
|
||
|
||
```bash
|
||
echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf
|
||
sysctl --system
|
||
```
|
||
|
||
|
||
|
||
## 2 创建lxc容器
|
||
|
||
- k3s-master-01
|
||
- k3s-slave-01
|
||
- k3s-slave-02
|
||
- 不要勾选无特权容器
|
||
|
||
### 2.1 修改pve的lxc容器配置
|
||
|
||
```bash
|
||
vim /etc/pve/lxc/300.conf
|
||
|
||
添加如下内容
|
||
cat >> /etc/pve/lxc/302.conf << EOF
|
||
lxc.apparmor.profile: unconfined
|
||
lxc.cgroup.devices.allow: a
|
||
lxc.cap.drop:
|
||
lxc.mount.auto: "proc:rw sys:rw"
|
||
EOF
|
||
```
|
||
|
||
### 2.2 lxc容器修改
|
||
|
||
- touch /etc/rc.local
|
||
- 填入以下内容
|
||
|
||
```bash
|
||
|
||
#!/bin/sh -e
|
||
|
||
# Kubeadm 1.15 needs /dev/kmsg to be there, but it's not in lxc, but we can just use /dev/console instead
|
||
# see: https://github.com/kubernetes-sigs/kind/issues/662
|
||
if [ ! -e /dev/kmsg ]; then
|
||
ln -s /dev/console /dev/kmsg
|
||
fi
|
||
|
||
# https://medium.com/@kvaps/run-kubernetes-in-lxc-container-f04aa94b6c9c
|
||
mount --make-rshared /
|
||
```
|
||
|
||
- chmod +x /etc/rc.local
|
||
|
||
```bash
|
||
cat >> /etc/rc.local << EOF
|
||
#!/bin/sh -e
|
||
|
||
# Kubeadm 1.15 needs /dev/kmsg to be there, but it's not in lxc, but we can just use /dev/console instead
|
||
# see: https://github.com/kubernetes-sigs/kind/issues/662
|
||
if [ ! -e /dev/kmsg ]; then
|
||
ln -s /dev/console /dev/kmsg
|
||
fi
|
||
|
||
# https://medium.com/@kvaps/run-kubernetes-in-lxc-container-f04aa94b6c9c
|
||
mount --make-rshared /
|
||
EOF
|
||
```
|
||
|
||
### 2.3 lxc换软件源安装curl（可选）
|
||
|
||
```bash
|
||
sed -i 's@//.*archive.ubuntu.com@//mirrors.ustc.edu.cn@g' /etc/apt/sources.list
|
||
apt update -y
|
||
apt install curl -y
|
||
```
|
||
|
||
## 3安装k3s
|
||
|
||
### 3.1主节点执行
|
||
|
||
```bash
|
||
curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=v1.27.13+k3s1 sh -
|
||
```
|
||
|
||
### 3.2 查看集群令牌
|
||
|
||
```bash
|
||
cat /var/lib/rancher/k3s/server/node-token
|
||
```
|
||
|
||
### 3.3 worker节点执行
|
||
|
||
```bash
|
||
curl -fsL https://get.k3s.io | INSTALL_K3S_VERSION=v1.28.12+k3s1 K3S_URL=https://192.168.0.20:6443 K3S_TOKEN="xxxxx" sh -s - --node-name k3s-slave-01
|
||
```
|
||
|