rocky8系统安装rancher

系统初始化设置

1、关闭swap分区
swapoff -a && sed -i 's/.*swap.*/#&/' /etc/fstab

2、停止防火墙和selinux
systemctl stop firewalld.service
systemctl disable firewalld.service
setenforce 0 && sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

3、确保时区，时间正确
timedatectl

4、加载内核模块并调整参数
modprobe br_netfilter
modprobe iptable_nat
modprobe iptable_filter

cat > /etc/sysctl.conf << EOF
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF

持久化加载这些模块：将模块名称添加到 /etc/modules-load.d/modules.conf 文件中，以便在系统启动时自动加载。
cat <<EOF>/etc/modules-load.d/modules.conf
iptable_nat
iptable_filter
br_netfilter
EOF

#使配置生效，执行：
sysctl -p
sysctl --system

sysctl -p 只读取/etc/sysctl.conf文件中的参数值，sysctl --system 读取/etc/sysctl.d/目录下所有.conf文件中的参数值。

docker-ce安装

yum install yum-utils -y
yum-config-manager --add-repo https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

# centos7 yum install docker-ce -y

yum install docker-ce -y --allowerasing  # rocky8/9

mkdir -p /etc/docker

tee /etc/docker/daemon.json <<-'EOF'
{
  "log-opts": {
    "max-size": "5m",
    "max-file":"3"
  },
  "exec-opts": ["native.cgroupdriver=systemd"],
  "insecure-registries": ["192.168.137.35","harbor.cn"],
  "registry-mirrors": [
        "https://jockerhub.com",
        "https://mirror.baidubce.com",
        "https://dockerproxy.com",
        "https://docker.laoex.link",
        "https://docker.nju.edu.cn"
    ]
}
EOF

systemctl daemon-reload
systemctl restart docker
systemctl enable docker

rancher安装

创建数据持久化目录

#创建rancher的持久化目录
mkdir -p /data/rancher_home/rancher
#创建审计日志目录
mkdir -p /data/rancher_home/auditlog

下载镜像及启动

docker pull rancher/rancher-agent:v2.9.1-rc6
docker pull rancher/rancher:v2.9.1-rc6

docker run -itd --privileged -p 80:80 -p 443:443 \
-v /data/rancher_home/rancher:/var/lib/rancher \
-v /data/rancher_home/auditlog:/var/log/auditlog \
    --restart=unless-stopped --name rancher291  \
    -e CATTLE_AGENT_IMAGE="docker.io/rancher/rancher-agent:v2.9.1-rc6" \
   docker.io/rancher/rancher:v2.9.1-rc6

CATTLE_AGENT_IMAGE: 指定 rancher-agent 的镜像名称

查看密码登录

[root@master1-admin ~]# docker ps
CONTAINER ID   IMAGE                        COMMAND           CREATED          STATUS          PORTS                                                                      NAMES
6f2eb41454bf   rancher/rancher:v2.9.1-rc6   "entrypoint.sh"   23 minutes ago   Up 23 minutes   0.0.0.0:80->80/tcp, :::80->80/tcp, 0.0.0.0:443->443/tcp, :::443->443/tcp   rancher291

[root@master1-admin ~]# docker logs 6f2eb41454bf 2>&1 | grep "Bootstrap Password:"
2024/09/05 12:23:15 [INFO] Bootstrap Password: pwcg2hzssgjm25bzxhh5pz5ldmrgxg8bhw7x7p4v49lpxftxvtzcx6