Ubuntu 24.04.2安装配置k8s 1.35.0

本文使用cilium 替代kube-proxy

1、Ubuntu 24.04.2安装k8s 1.35.0

软件版本：

ubuntu24.04.2,

kubeadm v1.33.34

kubernetes v1.33.4

containerd v2.0.2

cilium version v1.18.0

机器地址系统

node1 192.168.2.25 Ubuntu 24.04.2 LTS master

node2 192.168.2.26 Ubuntu 24.04.2 LTS node

第一步、基础设置

所有机器均需要操作

关闭swap

复制代码

sed -ri 's/^([^#].*swap.*)$/#\1/' /etc/fstab && grep swap /etc/fstab && swapoff -a && free -h

关闭防火墙

复制代码

ufw disable

设置时区

复制代码

timedatectl set-timezone Asia/Shanghai
systemctl restart systemd-timesyncd.service

开启ipv4转发

复制代码

cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf

# Kubernetes & Cilium 必需参数
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

# 可选：调优内核参数（如连接跟踪表大小）
net.netfilter.nf_conntrack_max = 1048576
EOF

应用配置（等效于 sysctl -p /etc/sysctl.d/k8s.conf）

复制代码

sysctl --system

sysctl net.ipv4.ip_forward

配置hostname以及hosts

复制代码

cat >> /etc/hosts << EOF
192.168.2.25 ops-test-025
192.168.2.26 ops-test-026
EOF

第二步：安装containerd

所有节点均需操作

2.1 下载和配置containerd

从 https://github.com/containerd/containerd/releases 下载

二进制文件是为基于 glibc 的 Linux 发行版（如 Ubuntu 和 Rocky Linux）动态构建的。此二进制文件可能不适用于基于 musl 的发行版，例如 Alpine Linux。此类发行版的用户可能必须从源或第三方软件包安装 containerd

旧的 Linux 发行版上不起作用，并将在 containerd 2.0 中删除。cri-containerd-xx

(containerd2.x文档) https://github.com/containerd/containerd/blob/main/docs/containerd-2.0.md

复制代码

wget https://github.com/containerd/containerd/releases/download/v2.0.2/containerd-2.0.2-linux-amd64.tar.gz

apt install runc

$ tar Cxzvf /usr/local containerd-2.0.2-linux-amd64.tar.gz
bin/
bin/containerd-shim-runc-v2
bin/containerd-shim
bin/ctr
bin/containerd-shim-runc-v1
bin/containerd
bin/containerd-stress

mkdir -p /etc/containerd && containerd config default > /etc/containerd/config.toml

sed -i "s#registry.k8s.io/pause:3.10#registry.aliyuncs.com/google_containers/pause:3.10#g" /etc/containerd/config.toml
#添加SystemdCgroup = true参数
sed -i "/ShimCgroup = ''/a \            SystemdCgroup = true" /etc/containerd/config.toml

#安装containerd.service官网提供的

复制代码

wget -P https://raw.githubusercontent.com/containerd/containerd/main/containerd.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable --now containerd
systemctl status containerd.service

2.2 安装crictl

复制代码

CRICTL_VERSION=v1.35.0
wget https://github.com/kubernetes-sigs/cri-tools/releases/download/$CRICTL_VERSION/crictl-$CRICTL_VERSION-linux-amd64.tar.gz
tar zxvf crictl-$CRICTL_VERSION-linux-amd64.tar.gz -C /usr/local/bin

2.3 配置私有Harbor镜像仓库

修改配置

大概在52行开始

复制代码

vim +52 /etc/containerd/config.toml 
 51     [plugins.'io.containerd.cri.v1.images'.registry]
 52       config_path = '/etc/containerd/certs.d'    #修改该行的配置信息

重新启动containerd

第三步：安装K8S组件

更新源

复制代码

sudo apt update && sudo apt upgrade -y

安装工具

复制代码

apt install -y apt-transport-https ca-certificates curl gpg

创建目录，有的版本有，看情况创建

复制代码

mkdir -p -m 755 /etc/apt/keyrings

下载秘钥

复制代码

curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.35/deb/Release.key | \
sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg && \
sudo chmod 644 /etc/apt/keyrings/kubernetes-apt-keyring.gpg
#  添加软件源1.35.0

echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.35/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list

复制代码

# 更新，安装软件，防止更新

apt update &&

apt install kubelet kubectl kubeadm &&

apt-mark hold kubelet kubeadm kubectl

复制代码

设置开机自启

复制代码

systemctl enable --now kubelet

查看版本

kubeadm version

复制代码

root@ops-test-025:~# kubeadm version
kubeadm version: &version.Info{Major:"1", Minor:"35", EmulationMajor:"", EmulationMinor:"", MinCompatibilityMajor:"", MinCompatibilityMinor:"", GitVersion:"v1.35.0", GitCommit:"66452049f3d692768c39c797b21b793dce80314e", GitTreeState:"clean", BuildDate:"2025-12-17T12:39:26Z", GoVersion:"go1.25.5", Compiler:"gc", Platform:"linux/amd64"}
root@ops-test-025:~# 

第四步：初始化集群
4.1 下载相关镜像
# 先下载阿里云镜像，node1节点即可，即master节点

sudo kubeadm config images pull

--image-repository=registry.aliyuncs.com/google_containers

--kubernetes-version=v1.35.0

--cri-socket=unix:///run/containerd/containerd.sock

复制代码

root@ops-test-025:~# sudo kubeadm config images pull

--image-repository=registry.aliyuncs.com/google_containers

--kubernetes-version=v1.35.0

--cri-socket=unix:///run/containerd/containerd.sock