6月 112020
Rancher is a complete software stack for teams adopting containers. It addresses the operational and security challenges of managing multiple Kubernetes clusters across any infrastructure, while providing DevOps teams with integrated tools for running containerized workloads.
Rancher是供采用容器的团队使用的完整软件堆栈。 它解决了在任何基础架构上管理多个Kubernetes集群的运营和安全挑战，同时为DevOps团队提供了用于运行容器化工作负载的集成工具。
禁用SELinux配置
[root@rancher ~]# sed -i 's/^SELINUX=enforcing$/SELINUX=disabled/' /etc/selinux/config [root@rancher ~]# setenforce 0 [root@rancher ~]# getenforce Permissive [root@rancher ~]#
安装Docker运行环境
[root@rancher ~]# curl https://releases.rancher.com/install-docker/18.09.sh | sh % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 15521 100 15521 0 0 92374 0 --:--:-- --:--:-- --:--:-- 92940 + '[' centos = redhat ']' + sh -c 'yum install -y -q yum-utils' Delta RPMs disabled because /usr/bin/applydeltarpm not installed. warning: /var/cache/yum/x86_64/7/updates/packages/yum-utils-1.1.31-54.el7_8.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY Public key for yum-utils-1.1.31-54.el7_8.noarch.rpm is not installed Importing GPG key 0xF4A80EB5: Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>" Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5 Package : centos-release-7-6.1810.2.el7.centos.x86_64 (installed) From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 + sh -c 'yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo' Loaded plugins: fastestmirror adding repo from: https://download.docker.com/linux/centos/docker-ce.repo grabbing file https://download.docker.com/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo repo saved to /etc/yum.repos.d/docker-ce.repo + '[' stable '!=' stable ']' + sh -c 'yum makecache fast' Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.keystealth.org * extras: mirror.fileplanet.com * updates: mirror.web-ster.com base | 3.6 kB 00:00:00 docker-ce-stable | 3.5 kB 00:00:00 extras | 2.9 kB 00:00:00 updates | 2.9 kB 00:00:00 (1/2): docker-ce-stable/x86_64/updateinfo | 55 B 00:00:00 (2/2): docker-ce-stable/x86_64/primary_db | 44 kB 00:00:00 Metadata Cache Created + sh -c 'yum install -y -q docker-ce-18.09.9 docker-ce-cli-18.09.9' warning: /var/cache/yum/x86_64/7/docker-ce-stable/packages/containerd.io-1.2.13-3.2.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 621e9f35: NOKEY Public key for containerd.io-1.2.13-3.2.el7.x86_64.rpm is not installed Importing GPG key 0x621E9F35: Userid : "Docker Release (CE rpm) <docker@docker.com>" Fingerprint: 060a 61c5 1b55 8a7f 742b 77aa c52f eb6b 621e 9f35 From : https://download.docker.com/linux/centos/gpg setsebool: SELinux is disabled. + '[' -d /run/systemd/system ']' + sh -c 'service docker start' Redirecting to /bin/systemctl start docker.service + sh -c 'docker version' Client: Version: 18.09.9 API version: 1.39 Go version: go1.11.13 Git commit: 039a7df9ba Built: Wed Sep 4 16:51:21 2019 OS/Arch: linux/amd64 Experimental: false Server: Docker Engine - Community Engine: Version: 18.09.9 API version: 1.39 (minimum version 1.12) Go version: go1.11.13 Git commit: 039a7df Built: Wed Sep 4 16:22:32 2019 OS/Arch: linux/amd64 Experimental: false If you would like to use Docker as a non-root user, you should now consider adding your user to the "docker" group with something like: sudo usermod -aG docker your-user Remember that you will have to log out and back in for this to take effect! WARNING: Adding a user to the "docker" group will grant the ability to run containers which can be used to obtain root privileges on the docker host. Refer to https://docs.docker.com/engine/security/security/#docker-daemon-attack-surface for more information. [root@rancher ~]#
可用Docker版本安装脚本列表
https://github.com/rancher/install-docker
配置DNS指向
rancher.bcoc.site ----> 167.71.149.159
安装Rancher并配置持久化存储和Let’s Encrypt证书
docker run -d --restart=unless-stopped \ -p 80:80 -p 443:443 \ -v /opt/rancher:/var/lib/rancher \ rancher/rancher:latest \ --acme-domain rancher.bcoc.site [root@rancher ~]# docker image ls REPOSITORY TAG IMAGE ID CREATED SIZE [root@rancher ~]# docker container ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES [root@rancher ~]# [root@rancher ~]# docker run -d --restart=unless-stopped \ > -p 80:80 -p 443:443 \ > -v /opt/rancher:/var/lib/rancher \ > rancher/rancher:latest \ > --acme-domain rancher.bcoc.site Unable to find image 'rancher/rancher:latest' locally latest: Pulling from rancher/rancher 23884877105a: Pull complete bc38caa0f5b9: Pull complete 2910811b6c42: Pull complete 36505266dcc6: Pull complete 99447ff7670f: Pull complete 879c87dc86fd: Pull complete 5b954e5aebf8: Pull complete 664e1faf26b5: Pull complete bf7ac75d932b: Pull complete 7e972d16ff5b: Pull complete 08314b1e671c: Pull complete d5ce20b3d070: Pull complete 20e75cd9c8e9: Pull complete 80daa2770be8: Pull complete 7fb927855713: Pull complete af20d79674f1: Pull complete d6a9086242eb: Pull complete 887a8f050cee: Pull complete 834df47e622f: Pull complete Digest: sha256:25ab51f5366ee7b7add66bc41203eac4b8654386630432ac4f334f69f8baf706 Status: Downloaded newer image for rancher/rancher:latest 7b54dbd549650b332c9ded7904e044774ddce775f54e3f6802d22f9c2e626057 [root@rancher ~]#
查看当前运行的rancher容器
[root@rancher ~]# docker container ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 7b54dbd54965 rancher/rancher:latest "entrypoint.sh --acm…" 20 seconds ago Up 19 seconds 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp recursing_joliot [root@rancher ~]#
登录Web控制台并为默认用户admin设置密码
确认Web控制台访问URL地址
控制台主界面
查看https证书信息
创建集群配置
集群配置详情
按照节点角色类型生成集群节点配置命令
在一个或多个已安装Docker的节点上运行
sudo docker run -d --privileged --restart=unless-stopped --net=host \ -v /etc/kubernetes:/etc/kubernetes -v /var/run:/var/run rancher/rancher-agent:v2.4.4 \ --server https://rancher.bcoc.site --token 7lmgztttzn7z2l8w6t4xhdz9gz2l7rpks6x7gc8222pjddt2mxlwcp \ --etcd --controlplane --worker
在rancher-01上运行 [root@rancher-01 ~]# sudo docker run -d --privileged --restart=unless-stopped --net=host \ > -v /etc/kubernetes:/etc/kubernetes -v /var/run:/var/run rancher/rancher-agent:v2.4.4 \ > --server https://rancher.bcoc.site --token 7lmgztttzn7z2l8w6t4xhdz9gz2l7rpks6x7gc8222pjddt2mxlwcp \ > --etcd --controlplane --worker Unable to find image 'rancher/rancher-agent:v2.4.4' locally v2.4.4: Pulling from rancher/rancher-agent 23884877105a: Pull complete bc38caa0f5b9: Pull complete 2910811b6c42: Pull complete 36505266dcc6: Pull complete 839286d9c3a6: Pull complete 8a1ba646e5a3: Pull complete 4917caa38753: Pull complete b56094248bdf: Pull complete 77f08dadb4eb: Pull complete d925a4b78308: Pull complete Digest: sha256:a6b416d7e5f89d28f8f8a54472cabe656378bc8c1903d08e1c2e9e453cdab1ff Status: Downloaded newer image for rancher/rancher-agent:v2.4.4 eea306867dca30ad9f70dcd764e723fec2b10239212205535ab83f24fc6827ed [root@rancher-01 ~]#
在rancher-02上运行
[root@rancher-02 ~]# sudo docker run -d --privileged --restart=unless-stopped --net=host \ > -v /etc/kubernetes:/etc/kubernetes -v /var/run:/var/run rancher/rancher-agent:v2.4.4 \ > --server https://rancher.bcoc.site --token 7lmgztttzn7z2l8w6t4xhdz9gz2l7rpks6x7gc8222pjddt2mxlwcp \ > --etcd --controlplane --worker Unable to find image 'rancher/rancher-agent:v2.4.4' locally v2.4.4: Pulling from rancher/rancher-agent 23884877105a: Pull complete bc38caa0f5b9: Pull complete 2910811b6c42: Pull complete 36505266dcc6: Pull complete 839286d9c3a6: Pull complete 8a1ba646e5a3: Pull complete 4917caa38753: Pull complete b56094248bdf: Pull complete 77f08dadb4eb: Pull complete d925a4b78308: Pull complete Digest: sha256:a6b416d7e5f89d28f8f8a54472cabe656378bc8c1903d08e1c2e9e453cdab1ff Status: Downloaded newer image for rancher/rancher-agent:v2.4.4 1f84c5b8afa35475fada986834458c08c565ff7d2b3dd4965a55a2439036e45b [root@rancher-02 ~]#
查看Web控制台显示集群创建中
集群创建成功
