通过sealos部署K8S
1、基于如下centos镜像,准备虚拟机
链接:https://pan.baidu.com/s/1BH8wHuotYnrk0wOj_48afA?pwd=acc4
提取码:acc4
三台服务器IP如下
pc254(master),192.168.32.254
pc253(node),192.168.32.253
pc252(node),192.168.32.252
通过如下脚本修改ip地址
vi /etc/sysconfig/network-scripts/ifcfg-ens33
设置DNS,会影响mirrors.aliyun.com的连接,DNS1一定四8.8.8.8,否则aliyun.com连接不通。
# 打开文件,编辑文件
vi /etc/sysconfig/network-scripts/ifcfg-enp33
# 新增
DNS1=8.8.8.8
DNS2=8.8.4.4
DNS3=114.114.114.114
如果通过如上脚本修改了ip,需要根据如下脚本重启网络才能生效
systemctl restart NetworkManager
systemctl restart nertwork
2、更新yum源
curl使用说明参考CentOS curl命令详解
rm -fv rm -f /etc/yum.repos.d/*
while [ true ]; do curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo && break 1 ;done
while [ true ]; do curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo && break 1 ;done
3、基础环境配置
更新yum
yum update -y
关闭防火墙
# 关闭防火墙
systemctl stop firewalld && systemctl disable firewalld
# 关闭selinux
sed -i 's/enforcing/disabled/' /etc/selinux/config # 永久
setenforce 0 # 临时
# 关闭swap
swapoff -a # 临时
sed -ri 's/.*swap.*/#&/' /etc/fstab # 永久
# 根据规划设置主机名
hostnamectl set-hostname <hostname>
# 在master添加hosts
cat >> /etc/hosts << EOF
192.168.32.254 pc254
192.168.32.253 pc253
192.168.32.252 pc252
EOF
# 时间同步
yum install ntpdate -y && ntpdate ntp.aliyun.com
4、配置免密登录
254服务器执行如下脚本,参考: 多台Centos7配置相互间的免密登录
[root@pc254 ~]# ssh-keygen -t dsa
Generating public/private dsa key pair.
Enter file in which to save the key (/root/.ssh/id_dsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_dsa.
Your public key has been saved in /root/.ssh/id_dsa.pub.
The key fingerprint is:
SHA256:OJ472fTiMcoVY1Mtsh9PCKITzwtRHvCDpG0wT/VeFBg root@pc254
The key's randomart image is:
+---[DSA 1024]----+
| o +o+ Eoo. |
| O = o.. . |
| . B = + + . |
| . * = * o |
| + = S o . |
| + =.= + |
| +++.. . |
| .o+oo. |
| +o.. |
+----[SHA256]-----+
[root@pc254 ~]#
[root@pc254 ~]# ll -a
total 42408
dr-xr-x---. 5 root root 213 Dec 20 20:01 .
dr-xr-xr-x. 17 root root 244 Dec 21 08:51 ..
-rw-------. 1 root root 1353 Dec 20 16:29 anaconda-ks.cfg
-rw-------. 1 root root 969 Dec 20 20:01 .bash_history
-rw-r--r--. 1 root root 18 Dec 29 2013 .bash_logout
-rw-r--r--. 1 root root 176 Dec 29 2013 .bash_profile
-rw-r--r--. 1 root root 176 Dec 29 2013 .bashrc
-rw-r--r--. 1 root root 100 Dec 29 2013 .cshrc
drwxr-----. 3 root root 19 Dec 20 17:13 .pki
drwxr-xr-x. 4 root root 33 Dec 20 18:04 .sealos
-rw-r--r--. 1 root root 43393801 Dec 20 17:06 sealos_4.1.3_linux_amd64.tar.gz
drwx------. 2 root root 57 Dec 21 09:50 .ssh
-rw-r--r--. 1 root root 129 Dec 29 2013 .tcshrc
[root@pc254 ~]# ll -a .ssh
total 12
drwx------. 2 root root 57 Dec 21 09:50 .
dr-xr-x---. 5 root root 213 Dec 20 20:01 ..
-rw------- 1 root root 668 Dec 21 09:50 id_dsa
-rw-r--r-- 1 root root 600 Dec 21 09:50 id_dsa.pub
-rw-r--r--. 1 root root 352 Dec 20 20:00 known_hosts
[root@pc254 ~]#
[root@pc254 ~]# cat .ssh/id_dsa.pub
ssh-dss AAAAB3NzaC1kc3MAAACBAOV9hxPmJnZOpHszmdk8HvS7ZDcM5gKw0DEb8sR4hm/kMJj8UOllIrn7JhHp6mQ8pi1o/iltEkE8eS9vrx+6LKumFRBUPYVJ+aVK03LROly44nSQ/FsLeyH3REpKoi0k5hPgdoJ2bdpCn0rACWSHmpVzhFysi5Mx2EXzqu0SfrdbAAAAFQDylhALj7aueiQdRI0W2377OSWX7wAAAIAvpgDRoEqy1XkBY8mdcbpwtsxpK+ikECzELVnhqg2xs7jG4TFWTtwRYxRlNTgD3oY2RQy9Y1pPDcXZnkiNcVnXP4WSneglrFLNRsVeo1u/DCtrFSpc/156632hdFNAbNswpgQKwfnTs1qdOhM/2DYUrdpYq26SeHesHCgHhnzcwgAAAIEAuAD8NwMGHGl+oSNPVbrdCAT+i9QBXNM+NZ6XHcvxgINylh3q757mzy+MepGTF6Bz0R0do39yP3IgevMbm4CZxuh1YxSPthoQ1cxRktpdAU+CoaKZSv1jlbA18LUhM+kTsz8pUR3Ffx64Hrbhbljq8piLiGfiMPkiLQJ4OZJtxAU= root@pc254
[root@pc254 ~]# cat .ssh/id_dsa
-----BEGIN DSA PRIVATE KEY-----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-----END DSA PRIVATE KEY-----
[root@pc254 ~]#
252,253两台服务器上执行如下脚本
ssh-keygen -t dsa
把id_dsa.pub复制到authorized_keys中,内容如下
[root@pc254 .ssh]# cat authorized_keys
ssh-dss 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 root@pc253
ssh-dss AAAAB3NzaC1kc3MAAACBAOV9hxPmJnZOpHszmdk8HvS7ZDcM5gKw0DEb8sR4hm/kMJj8UOllIrn7JhHp6mQ8pi1o/iltEkE8eS9vrx+6LKumFRBUPYVJ+aVK03LROly44nSQ/FsLeyH3REpKoi0k5hPgdoJ2bdpCn0rACWSHmpVzhFysi5Mx2EXzqu0SfrdbAAAAFQDylhALj7aueiQdRI0W2377OSWX7wAAAIAvpgDRoEqy1XkBY8mdcbpwtsxpK+ikECzELVnhqg2xs7jG4TFWTtwRYxRlNTgD3oY2RQy9Y1pPDcXZnkiNcVnXP4WSneglrFLNRsVeo1u/DCtrFSpc/156632hdFNAbNswpgQKwfnTs1qdOhM/2DYUrdpYq26SeHesHCgHhnzcwgAAAIEAuAD8NwMGHGl+oSNPVbrdCAT+i9QBXNM+NZ6XHcvxgINylh3q757mzy+MepGTF6Bz0R0do39yP3IgevMbm4CZxuh1YxSPthoQ1cxRktpdAU+CoaKZSv1jlbA18LUhM+kTsz8pUR3Ffx64Hrbhbljq8piLiGfiMPkiLQJ4OZJtxAU= root@pc254
ssh-dss AAAAB3NzaC1kc3MAAACBAI4tgBXmx5U4j6bfZvdCeCJ19c+SYiAG3Wg2HVSBkSE3uGCzJxRdktNP1YqFkbyPmo6touWNuCOoDGqwaqjGlA8Z