mini centos7+k3s部署（镜像拉取解决版）

1、准备部署环境

bash 复制代码

#安装基础软件、关闭防火墙、设置主机名、关闭swap、配置转发
yum install -y device-mapper-persistent-data lvm2 wget net-tools curl wget vim telnet ipset ipvsadm yum-config-manager yum-utils
systemctl disable firewalld --now
setenforce 0
sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
swapoff -a
sed -i '/swap/s/^/#/' /etc/fstab
cat > /etc/sysconfig/modules/ipvs.modules <<EOF 
#!/bin/bash
modprobe -- ip_vs
modprobe -- ip_vs_rr
modprobe -- ip_vs_wrr
modprobe -- ip_vs_sh
modprobe -- nf_conntrack
EOF
chmod 755 /etc/sysconfig/modules/ipvs.modules && bash
lsmod | grep -e ip_vs -e nf_conntrack_ipv4
hostnamectl set-hostname k3s-server && bash

2、安装

bash 复制代码

#查看所有版本
curl -s https://api.github.com/repos/k3s-io/k3s/releases | grep '"tag_name"' | cut -d '"' -f 4 | sort -V

2.1 在线安装

bash 复制代码

curl -sfL https://get.k3s.io | sh -

2.2 离线安装

bash 复制代码

curl -sfL https://get.k3s.io -o install.sh
wget https://github.com/k3s-io/k3s/releases/download/v1.28.6+k3s1/k3s -O k3s
chmod +x k3s install.sh
cp k3s /usr/local/bin/
INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh

3、问题解决

安装k3s后发现所有pod都是在创建中，查看日志是镜像拉取失败

bash 复制代码

[root@localhost ~]# kubectl get pod -A
NAMESPACE     NAME                                      READY   STATUS              RESTARTS   AGE
kube-system   coredns-7f496c8d7d-gzv8c                  0/1     ContainerCreating   0          27s
kube-system   helm-install-traefik-crd-9qjr8            0/1     ContainerCreating   0          27s
kube-system   helm-install-traefik-zz4zj                0/1     ContainerCreating   0          27s
kube-system   local-path-provisioner-578895bd58-tbnsr   0/1     ContainerCreating   0          27s
kube-system   metrics-server-7b9c9c4b9c-2bmmq           0/1     ContainerCreating   0          27s

解决

bash 复制代码

mkdir -p /var/lib/rancher/k3s/agent/etc/containerd/certs.d/docker.io
cd /var/lib/rancher/k3s/agent/etc/containerd/certs.d/docker.io
cat > hosts.toml << EOF
server = "https://docker.io"
[host."https://dockerproxy.com"]
  capabilities = ["pull", "resolve"]

[host."https://docker.m.daocloud.io"]
  capabilities = ["pull", "resolve"]
EOF
systemctl restart k3s

此时，安静等待即可

bash 复制代码

kubectl get pod -A -w

最后结果

bash 复制代码

[root@localhost docker.io]# kubectl get pod -A
NAMESPACE     NAME                                      READY   STATUS      RESTARTS   AGE
kube-system   coredns-7f496c8d7d-gzv8c                  1/1     Running     0          21m
kube-system   helm-install-traefik-crd-9qjr8            0/1     Completed   0          21m
kube-system   helm-install-traefik-zz4zj                0/1     Completed   2          21m
kube-system   local-path-provisioner-578895bd58-tbnsr   1/1     Running     0          21m
kube-system   metrics-server-7b9c9c4b9c-2bmmq           1/1     Running     0          21m
kube-system   svclb-traefik-3b5f5bbc-hp6cp              2/2     Running     0          12m
kube-system   traefik-6f5f87584-ntv6t                   1/1     Running     0          12m