安装命令
docker run --privileged -d --restart=unless-stopped -p 80:80 -p 443:443 -v /data/rancher/rancher:/var/lib/rancher -v /data/rancher/log:/var/log -v /data/rancher/cni:/var/lib/cni -v /data/rancher/kubelet:/var/lib/kubelet --name rancher rancher/rancher:v2.5.12
resolv.conf权限问题:
chattr -i /etc/resolv.confchown 755 /etc/resolv.conf
cni
cni插件问题(network plugin is not ready: cni config uninitialized):
sudo mkdir -p /opt/cni/bincd /opt/cni/bin然后接下来去下载相应的压缩包https://github.com/containernetworking/plugins/releases/tag/v0.8.6下载一个cni-plugins-linux-amd64-v0.8.6.tgz然后将其解压在/opt/cni/bin下就可以了。
etcd
[etcd] Failed to bring up Etcd Plane: etcd cluster is unhealthy: hosts [192.168.154.231] failed to report healthy. Check etcd container logs on each host for more information
docker stop $(docker ps -aq)# 注意,这个会把所用容器删除docker system prune -f# 注意,这个会清空所有volumedocker volume rm $(docker volume ls -q)# 注意,这个会清空所有imagedocker image rm $(docker image ls -q)rm -rf /etc/ceph \/etc/cni \/etc/kubernetes \/opt/cni \/opt/rke \/run/secrets/kubernetes.io \/run/calico \/run/flannel \/var/lib/calico \/var/lib/etcd \/var/lib/cni \/var/lib/kubelet \/var/lib/rancher/rke/log \/var/log/containers \/var/log/pods \
防火墙
iptables failed: iptables —wait -t nat -A DOCKER -p tcp -d 0/0 —dport 2380 -j DNAT —to-destination 172.17.0.3:1337 ! 产生原因 修改过防火墙配置(从无到有, firewalld) 解决办法 重启 docker
systemctl restart docker
dial tcp 111.46.57.34:6443: connect: connection refused
排查思路:
- 防火墙端口。
- swap关闭(重点)。
- docker是否正常cgroupdriver=systemd。
- 修改了/etc/hosts文件(重点)。
