目录
3、关闭selinux、firewalld、NetworkManager
电脑配置感人，偏热爱学习，技术也差，经常虚拟机搭建一套环境后叫苦连连，无法支撑别的技术部署实践或者有时玩崩，
根据习惯，做一些初始化操作，仅用于日常练习，不安全不安全不安全。
centos7.5虚拟机初始化操作
1、设置默认eth0网卡名称
# 初次安装打开kernel选项设置默认eth0
TAB键+net.ifnames=0 biosdevname=0
# 远程连接
SecureCRT--选项--会话选项--仿真--终端--xterm--后面两个勾上--外观--字体和编码
2、网络信息规划
#规划网段
虚拟机--编辑--虚拟网络编辑器--NET--网段以及DHCP配置
#IP设置
vi /etc/sysconfig/network-scripts/ifcfg-eth0
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
NAME=eth0
DEVICE=eth0
ONBOOT=yes
IPADDR=192.168.192.128
NETMASK=255.255.255.0
GATEWAY=192.168.192.2
systemctl restart network
#DNS设置
vi /etc/resolv.conf
nameserver 192.168.192.2
3、关闭selinux、firewalld、NetworkManager
sed -i 's/enforcing/disabled/g' /etc/selinux/config
systemctl stop firewalld
systemctl disable firewalld
systemctl disable NetworkManager
4、主机名规划与解析
hostnamectl set-hostname k8s-master
cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.192.128 k8s-master
192.168.192.129 k8s-node1
192.168.192.130 k8s-node2
5、安装yum源和常用包
cd /etc/yum.repos.d
wget http://mirrors.aliyun.com/repo/epel-7.repo
yum install -y net-tools vim lrzsz tree screen lsof tcpdump nc mtr nmap openssl-devel wget telnet unzip bind-utils ntpdate
6、时间定时同步
which ntpdate
/usr/sbin/ntpdate
crontab -e
*/60 * * * * /usr/sbin/ntpdate pool.ntp.org > /dev/null 2>&1
7、安装JDK1.8
[root@k8s-master2 bin]# JDK全版本下载：https://www.oracle.com/technetwork/java/javase/archive-139210.html
[root@k8s-master2 bin]# rz
[root@k8s-master2 bin]# mkdir /usr/java
[root@k8s-master2 bin]# tar zxvf jdk-8u91-linux-x64.tar.gz -C /usr/java/
[root@k8s-master2 java]# mv jdk1.8.0_91/ jdk1.8.0
[root@k8s-master2 java]# vim /etc/profile
export JAVA_HOME=/usr/java/jdk1.8.0
export JRE_HOME=${JAVA_HOME}/jre
export CLASSPATH=.:${JAVA_HOME}/lib:${JRE_HOME}/lib:$CLASSPATH
export JAVA_PATH=${JAVA_HOME}/bin:${JRE_HOME}/bin
export PATH=$PATH:${JAVA_PATH}
8、安装docker
配置宿主机网卡转发
## 若未配置，需要执行如下 $ cat <<EOF > /etc/sysctl.d/docker.conf net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 net.ipv4.ip_forward=1 EOF $ sysctl -p /etc/sysctl.d/docker.conf
Yum安装配置docker
卸载原来docke
yum remove docker -y \
docker-client \
docker-client-latest \
docker-common \
docker-latest \
docker-latest-logrotate \
docker-logrotate \
docker-selinux \
docker-engine-selinux \
docker-engine
rm -rf /etc/systemd/system/docker.service.d
rm -rf /var/lib/docker
rm -rf /var/run/docker
## 下载阿里源repo文件
$ curl -o /etc/yum.repos.d/Centos-7.repo http://mirrors.aliyun.com/repo/Centos-7.repo
$ curl -o /etc/yum.repos.d/docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
$ yum clean all && yum makecache
## yum安装
$ yum install docker-ce-20.10.6 -y
注意：最新版docker不支持老内核，需要升级至4.19
## 查看源中可用版本
$ yum list docker-ce --showduplicates | sort -r
## 安装旧版本
##yum install -y docker-ce-18.09.9
## 配置源加速
## https://cr.console.aliyun.com/cn-hangzhou/instances/mirrors
mkdir -p /etc/docker
vi /etc/docker/daemon.json
{
"registry-mirrors" : [
"https://8xpk5wnt.mirror.aliyuncs.com"
]
}
## 设置开机自启
systemctl enable docker
systemctl daemon-reload
## 启动docker
systemctl start docker
## 查看docker信息
docker info
## docker-client
which docker
## docker daemon
ps aux |grep docker
## containerd
ps aux|grep containerd
systemctl status containerd
9、升级4.19内核
CentOS7 需要升级内核至4.18+，本地升级的版本为4.19
cd /root
wget http://193.49.22.109/elrepo/kernel/el7/x86_64/RPMS/kernel-ml-devel-4.19.12-1.el7.elrepo.x86_64.rpm
wget http://193.49.22.109/elrepo/kernel/el7/x86_64/RPMS/kernel-ml-4.19.12-1.el7.elrepo.x86_64.rpm
从master01节点传到其他节点：
for i in k8s-master02 k8s-master03 k8s-node01 k8s-node02;do scp kernel-ml-4.19.12-1.el7.elrepo.x86_64.rpm kernel-ml-devel-4.19.12-1.el7.elrepo.x86_64.rpm $i:/root/ ; done
所有节点安装内核
cd /root && yum localinstall -y kernel-ml*
所有节点更改内核启动顺序
grub2-set-default 0 && grub2-mkconfig -o /etc/grub2.cfg
grubby --args="user_namespace.enable=1" --update-kernel="$(grubby --default-kernel)"
检查默认内核是不是4.19
[root@k8s-master02 ~]# grubby --default-kernel
/boot/vmlinuz-4.19.12-1.el7.elrepo.x86_64
所有节点重启，然后检查内核是不是4.19
[root@k8s-master02 ~]# uname -a
Linux k8s-master02 4.19.12-1.el7.elrepo.x86_64 #1 SMP Fri Dec 21 11:06:36 EST 2018 x86_64 x86_64 x86_64 GNU/Linux
每个阶段制作快照便于恢复，然后reboot。
拷贝虚拟机到其他节点，修改地址与主机名。
10、根据个人习惯设置别名
[root@pro01 ~]# cat ~/.bashrc
# .bashrc
# User specific aliases and functions
alias rm='rm -i'
alias cp='cp -i'
alias mv='mv -i'
alias re='systemctl restart'
alias ipset='vim /etc/sysconfig/network-scripts/ifcfg-eth0'
# Source global definitions
if [ -f /etc/bashrc ]; then
. /etc/bashrc
fi
[root@pro01 ~]# source ~/.bashrc
[root@pro01 ~]#