使用rancher+docker+k8s搭建集群管理平台

安装docker-ce-17.03.2

#安装docker-ce-17.03.2，首先要安装它的依赖包

[root@linux-node2 ~]# wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm --no-check-certificate

[root@linux-node2 ~]# yum install -y docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm

#安装docker-ce-17.03.2

[root@linux-node2 ~]# wget https://download.docker.com/linux/centos/7/x86_64/stable/Packages/docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm --no-check-certificate

[root@linux-node2 ~]# yum install -y docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm

#验证docker-ce是否安装成功，查看docker-ce的版本

[root@linux-node2 ~]# docker version

Client:

Version: 17.03.2-ce

API version: 1.27

Go version: go1.7.5

Git commit: f5ec1e2

Built: Tue Jun 27 02:21:36 2017

OS/Arch: linux/amd64

启动docker，下载rancher并启动rancher容器

[root@linux-node2 ~]# systemctl start docker

[root@linux-node2 ~]# docker pull rancher/server:v1.6.14

#运行rancher容器，报错如下：

[root@linux-node2 ~]# docker run -d --restart=unless-stopped -p 8080:8080 rancher/server:v1.6.14

docker: Error response from daemon: mkdir /var/lib/docker/overlay/138a6139ced9986f759c7f8514a4f706168140aaf10fa70f9e50a1ad3187dcbc-init/merged/dev/shm: invalid argument.

#解决办法：参考https://stackoverflow.com/questions/42248571/cannt-run-or-build-docker-images-on-centos-7

[root@linux-node2 docker]# vim /etc/docker/daemon.json

{

"registry-mirrors": ["https://0wtxe175.mirror.aliyuncs.com"],

"storage-driver": "devicemapper"

}

[root@linux-node2 docker]# systemctl daemon-reload

[root@linux-node2 docker]# systemctl start docker

#最后再启动rancher容器，成功了

[root@linux-node2 docker]# docker ps

CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES

fa0517e043d8 rancher/server:v1.6.14 "/usr/bin/entry /u..." 16 minutes ago Up 16 minutes 3306/tcp, 0.0.0.0:8080->8080/tcp awesome_hypatia

创建一个编排hello.yaml后，状态一直是ContainerCreating，经查看生成过程，排错如下

[root@linux-node1 ~]# kubectl create -f hello.yaml

pod "hello-world" created

[root@linux-node1 ~]# kubectl get pods

NAME READY STATUS RESTARTS AGE

hello-world 0/1 ContainerCreating 0 6s

#一直处于ContainerCreating状态，查看生成过程

[root@linux-node1 ~]# kubectl get pods

NAME READY STATUS RESTARTS AGE

hello-world 0/1 ContainerCreating 0 7m

[root@linux-node1 ~]# kubectl describe pod hello-world

Name: hello-world

Namespace: default

Node: 192.168.182.171/192.168.182.171

。。。

arning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ErrImagePull: "image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest, this may be because there are no credentials on this request. details: (open /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt: no such file or directory)"

10m 15s 43 {kubelet 192.168.182.171} Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ImagePullBackOff: "Back-off pulling image \"registry.access.redhat.com/rhel7/pod-infrastructure:latest\""

#上面的报错原因为不能打开这个文件/etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt

#通过ll 查看这个文件是否存在，状态是软连接，不停闪烁，说明这个软件接有问题，证书不存在

[root@linux-node2 ~]# ll /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt

lrwxrwxrwx 1 root root 27 Jul 19 14:02 /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt -> /etc/rhsm/ca/redhat-uep.pem

#接下来就要生成这个证书文件，注意：是在node节点生成这个证书，而不是master节点

[root@linux-node2 ~]# yum install python-rhsm* -y

Installed:

subscription-manager-rhsm.x86_64 0:1.20.11-1.el7.centos

subscription-manager-rhsm-certificates.x86_64 0:1.20.11-1.el7.centos

#安装的subscription-manager-rhsm-certificates.x86_64 0:1.20.11-1.el7.centos并不是我们需要的证书安装包，所以要把这个包卸载掉，下载正确的证书安装包

[root@linux-node2 ~]# yum remove subscription-manager-rhsm-certificates.x86_64 0:1.20.11-1.el7.centos

[root@linux-node2 ~]# wget http://mirror.centos.org/centos/7/os/x86_64/Packages/python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm

[root@linux-node2 ~]# yum install python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm

#这时候再打开这个证书文件软连接就正常了

[root@linux-node2 ~]# ll /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt

lrwxrwxrwx 1 root root 27 Jul 19 14:11 /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt -> /etc/rhsm/ca/redhat-uep.pem

#最后重新创建一个编排后，node节点就可以pull拉取对应的images了

k8s dashboard 报错 Error: 'dial tcp 172.168.56.2:9090: getsockopt: connection refused'

检查iptables -L -n ，检查node节点上的FORWARD 查看转发是否是drop，如果是drop，则开启

解决办法：iptables -P FORWARD ACCEPT 不过系统重启后就失效了

使用rancher+docker+k8s搭建集群管理平台

猜你喜欢