Docker 的安裝以下過程經歷了漫長的痛苦，主要是網絡鏡像問題帶來的！以及排查日志！還有1.27.1版本的坑啊！前提多臺機器要能ping得通，這

Docker 的安裝

以下過程經歷了漫長的痛苦，主要是網絡鏡像問題帶來的！以及排查日志！還有1.27.1版本的坑啊！

前提多臺機器要能ping得通，這個設置根據自己環境不同而不同，我用的是NAT模式的虛擬機！接著在各個機器做以下相同步驟！kubeadm init 僅在主節點，join在node節點！

1.修改本機host

sudo vim /etc/hostname

2.修改 /etc/hosts 文件

3.關閉交換

sudo sed -ri 's/.*swap.*/#&/' /etc/fstab

4. 防火墻設置

sudo ufw allow 6643

5.

sudo vim /etc/containerd/config.tomln#這行注釋掉#disabled_plugins = ["cri"]

6.設置Docker cgroup驅動 :

sudo vi /etc/docker/daemon.jsonnnt{nnt"registry-mirrors":["https://docker.mirrors.ustc.edu.cn"],n #這一步修改docker cgroup 驅動nt"exec-opts":["native.cgroupdriver=systemd"]nnt}nntsudo systemctl daemon-reload && sudo systemctl restart docker && sudo docker info | grep Cgroup

7.安裝依賴：

sudo apt-get install -y apt-transport-https ca-certificates curlnnsudo curl -fsSLo /usr/share/keyrings/kubernetes-archive-keyring.gpg https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpgnnsudo echo "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] http://mirrors.aliyun.com/kubernetes/apt kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.listnnsudo apt-get updatennsudo apt-get install -y kubelet kubeadm kubectlnn#固定版本nsudo apt-mark hold kubelet kubeadm kubectl

8.列出所需要的images：

執行：sudo kubeadm config images listn將會打印類似于下面的鏡像列表：n registry.k8s.io/kube-apiserver:v1.27.1n registry.k8s.io/kube-controller-manager:v1.27.1n registry.k8s.io/kube-scheduler:v1.27.1n registry.k8s.io/kube-proxy:v1.27.1n registry.k8s.io/pause:3.9n registry.k8s.io/etcd:3.5.7-0n registry.k8s.io/coredns/coredns:v1.10.1n**************************************************************************************************n#下載docker image：n#pause:3.6 這里要下載3.6，不要下載3.9 有坑！！！n sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.27.1 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.6 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.27.1 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.27.1 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.27.1 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.5.7-0 n && sudo docker pull registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:v1.10.1 nn#重新給鏡像打tagnsudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:v1.10.1 registry.k8s.io/coredns/coredns:v1.10.1 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/etcd:3.5.7-0 registry.k8s.io/etcd:3.5.7-0 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-proxy:v1.27.1 registry.k8s.io/kube-proxy:v1.27.1 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-scheduler:v1.27.1 registry.k8s.io/kube-scheduler:v1.27.1 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-controller-manager:v1.27.1 registry.k8s.io/kube-controller-manager:v1.27.1 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.6 registry.k8s.io/pause:3.6 n sudo docker tag registry.cn-hangzhou.aliyuncs.com/google_containers/kube-apiserver:v1.27.1 registry.k8s.io/kube-apiserver:v1.27.1

9.網絡轉發設置

sudo cat <<EOF | sudo tee /etc/modules-load.d/k8s.confnoverlaynbr_netfilternEOFnnmodprobe overlay && modprobe br_netfilternnsudo cat <<EOF | sudo tee /etc/sysctl.d/k8s.confnnet.bridge.bridge-nf-call-iptables = 1nnet.bridge.bridge-nf-call-ip6tables = 1nnet.ipv4.ip_forward = 1nEOFnnsudo sysctl --system

10.安裝cri-docker

#下載地址：https://github.com/Mirantis/cri-dockerd/releasesnsudo dpkg -i cri-dockerd_0.2.6.3-0.ubuntu-bionic_amd64.deb nsudo systemctl daemon-reload && sudo systemctl enable cri-docker && sudo systemctl status cri-docker

11.kubeadm init

sudo kubeadm init --service-cidr=10.96.0.0/12 --pod-network-cidr=10.244.0.0/16 --cri-socket=unix:///var/run/cri-dockerd.sock n#打印join密鑰：并加入，注意這里需要把master節點的admin文件復制過來，按照init的時候的步驟去設置，否則kubectl將不能啟用，會報8080端口錯誤！加入的時候需要帶上—cri-socket=unix:///var/run/cri-dockerd.socknkubeadm token create --print-join-command

12.安裝網絡組件

kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml

13.打印日志：

journalctl -u kubelet -fnkubectl get pods --all-namespaces