rancher 非docker离线安装

🧙 Questions

使用非docker的方式离线安装rancher
Centos8.5

☄️ Ideas

上传安装包

ssh-copy-id root@47.116.218.162
scp -r /Users/ispong/Downloads/rke2-images.linux-amd64.tar.zst root@47.116.218.162:/tmp
scp -r /Users/ispong/Downloads/rke2.linux-amd64.tar.gz root@47.116.218.162:/tmp
scp -r /Users/ispong/Downloads/sha256sum-amd64.txt root@47.116.218.162:/tmp
scp -r /Users/ispong/Downloads/install.sh root@47.116.218.162:/tmp

创建rke2包

mkdir -p /data/rancher
ln -s /data/rancher /var/lib/rancher

mkdir -p /data/containers
ln -s /data/containers /var/lib/containers

安装rke2

mkdir -p /data/rke2-artifacts
cp /tmp/rke2-images.linux-amd64.tar.zst /data/rke2-artifacts/
cp /tmp/rke2.linux-amd64.tar.gz /data/rke2-artifacts/
cp /tmp/sha256sum-amd64.txt /data/rke2-artifacts/

# 必须要使用root用户执行
cd /tmp
INSTALL_RKE2_ARTIFACT_PATH=/data/rke2-artifacts sh install.sh

启动rke2

journalctl -u rke2-server -f 看日志

systemctl enable rke2-server.service
systemctl start rke2-server.service
systemctl status rke2-server.service

检查服务是否启动

此时k8s已经安装好了

tee -a /etc/profile <<-'EOF'
export KUBECONFIG=/etc/rancher/rke2/rke2.yaml 
export PATH=$PATH:/var/lib/rancher/rke2/bin
EOF
source /etc/profile
# sudo chown ispong:ispong /etc/rancher/rke2/rke2.yaml
kubectl get nodes
kubectl get pods -n kube-system

离线安装helm

scp -r /Users/ispong/Downloads/helm-v3.15.3-linux-amd64.tar.gz root@47.116.218.162:/tmp

cd /tmp
tar -zxvf helm-v3.15.3-linux-amd64.tar.gz
mv /tmp/linux-amd64/helm /usr/bin/helm
helm version

离线安装containerd

scp -r /Users/ispong/Downloads/containerd-2.1.4-linux-amd64.tar.gz root@47.116.218.162:/tmp

cd /tmp
tar -vzxf containerd-2.1.4-linux-amd64.tar.gz
mv /tmp/bin/* /usr/bin/
containerd version

离线安装nerdctl

scp -r /Users/ispong/Downloads/nerdctl-2.2.0-linux-amd64.tar.gz root@47.116.218.162:/tmp
tar -vzxf /tmp/nerdctl-2.2.0-linux-amd64.tar.gz
mv /tmp/nerdctl /usr/bin/nerdctl
mv /tmp/containerd-rootless-setuptool.sh /usr/bin/containerd-rootless-setuptool.sh
mv /tmp/containerd-rootless.sh /usr/bin/containerd-rootless.sh
nerdctl version

使用helm安装harbor

helm repo add harbor https://helm.goharbor.io
kubectl create ns harbor
helm install harbor harbor/harbor /tmp/cert-manager-v1.15.1.tgz \
  --namespace harbor \
  --set expose.type=nodePort \
  --set expose.tls.enabled=false \
  --set harborAdminPassword=MySecurePass123! \
  --set externalURL=http://<NODE_IP>:30002 
kubectl -n harbor get pods

导入rancher镜像 v2.8.5

cd /tmp/rancher
chmod +x rancher-load-images.sh
./rancher-load-images.sh --image-list ./rancher-images.txt --registry isxcode:8443/library

离线安装rancher2

k8s安装自签证书

cd /tmp/rancher
kubectl create namespace cert-manager
kubectl apply -f ./cert-manager-crd.yaml
helm install cert-manager /tmp/rancher/cert-manager-v1.15.1.tgz \
    --namespace cert-manager \
    --set image.repository=docker.io/library/quay.io/jetstack/cert-manager-controller \
    --set webhook.image.repository=docker.io/library/quay.io/jetstack/cert-manager-webhook \
    --set cainjector.image.repository=docker.io/library/quay.io/jetstack/cert-manager-cainjector \
    --set startupapicheck.image.repository=docker.io/library/quay.io/jetstack/cert-manager-startupapicheck \
    --debug
helm list -A

k8s安装rancher

卸载：helm uninstall rancher -n cattle-system
记得修改hostname

cd /tmp/rancher
kubectl create namespace cattle-system
helm install rancher /tmp/rancher/rancher-2.8.5.tgz \
  --namespace cattle-system \
  --set hostname=isxcode \
  --set certmanager.version=1.15.1 \
  --set rancherImage=docker.io/library/rancher/rancher \
  --set useBundledSystemChart=true \
  --set systemDefaultRegistry=docker.io/library \
  --set rancherImageTag=v2.8.5 \
  --set service.type=NodePort
kubectl -n cattle-system get deploy rancher

🔗 Links

• rancher docs