shell-01

最新推荐文章于 2025-12-31 20:45:00 发布

原创最新推荐文章于 2025-12-31 20:45:00 发布 · 120 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#docker #kubernetes #linux #运维 #容器

虚拟化&操作系统专栏收录该内容

23 篇文章

订阅专栏

本文详细介绍了一个自动化部署流程，包括禁用SELinux和防火墙、安装Ceph和Docker相关RPM包、重启系统等步骤，并设置定时任务监控系统状态，如CPU使用率、内存状态、磁盘空间和Kubernetes节点上的Pods状态。

shell片段1

#!/bin/bash

sed -i 's/enforcing/disabled/g' /etc/selinux/config
sleep 1
echo 'disabled selinux'
#
systemctl stop firewalld.service
systemctl disable firewalld.service
sleep 1
echo 'disabled firewall'
#
yum localinstall -y ./ceph/upgrade/*.rpm
sleep 1
echo 'installed upgrade rpm'
yum localinstall -y ./ceph/*.rpm
sleep 1
echo 'installed ststem rpm'
yum localinstall -y ./rpm/*.rpm
sleep 1
echo 'installed docker rpm'
#
systemctl start docker
systemctl enable docker

#
reboot
echo 'system reboot now!'

shell片段2

#!/bin/bash
#
systemctl disable firewalld
systemctl stop firewalld
echo 'disable firewalld'
#
yum localinstall -y ./kuberpm/*.rpm
sleep 2
echo 'install kubernetes rpm successful!'
#
sed -i 's/--selinux-enabled --log-driver=journald --signature-verification=false/--selinux-enabled=false --insecure-registry [gcr.io/g](http://gcr.io/g)' /etc/sysconfig/docker
sed -i 's/KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ServiceAccount,ResourceQuota"/KUBE_ADMISSION_CONTROL="--admission-control=NamespaceLifecycle,NamespaceExists,LimitRanger,SecurityContextDeny,ResourceQuota"/g' /etc/kubernetes/apiserver
sleep 2
rpm2cpio ./python-rhsm-certificates-1.19.10-1.el7_4.x86_64.rpm | cpio -iv --to-stdout ./etc/rhsm/ca/redhat-uep.pem | tee /etc/rhsm/ca/redhat-uep.pem
echo 'setup option successful!'
sleep 2
#
for i in etcd docker kube-apiserver kube-controller-manager kube-scheduler kubelet kube-proxy;
do systemctl restart $i;
sleep 1;
systemctl enable $i;
done;

echo 'kubernetes install OK!!!'
#
docker load -i ./images/mysql.tar
docker load -i ./images/registry.tar
echo 'kubernetes&docker Installation completed;mysql images load successful!!!;'
echo 'Please input "docker images" "kubectl get nodes"'

shell片段3

#!/bin/sh

#systemstat.sh

echo $(date -d "today" +"%Y%m%d_%H%M%S") >> /opt/20190131/cpu.txt

top -b -n 2 | grep "Cpu" >>/opt/20190131/cpu.txt

sleep 1

echo $(date -d "today" +"%Y%m%d_%H%M%S") >> /opt/20190131/mem.txt

free -m | grep "Mem" >>/opt/20190131/mem.txt

sleep 1

echo $(date -d "today" +"%Y%m%d_%H%M%S") >> /opt/20190131/sda2.txt

df -k | grep sda2 >>/opt/20190131/sda2.txt

sleep 1

echo $(date -d "today" +"%Y%m%d_%H%M%S") >> /opt/20190131/pods.txt

/usr/local/bin/kubectl get pods --all-namespaces >> /opt/20190131/pods.txt

2、编辑crontab表开启定时任务如下：

[root@mon780 20190131]# crontab -l

*/5 * * * * /opt/20190131/systemstat