https://github.com/linuxserver/docker-wireguard
docker run -d \
--name=wireguard \
--cap-add=NET_ADMIN \
--cap-add=SYS_MODULE \
-e PUID=1000 \
-e PGID=1000 \
-e TZ=Asia/Shanghai \
-e SERVERURL=0.0.0.0 \
-e SERVERPORT=51820 \
-e PEERS=2 \
-e PEERDNS=auto \
-e INTERNAL_SUBNET=10.10.10.0 \
-e ALLOWEDIPS=10.10.10.1/24 \
-v /root/.wireguard/config:/config \
-v /lib/modules:/lib/modules \
--net=host \
--restart unless-stopped \
linuxserver/wireguard
docker run -d \
--name=wireguard \
--cap-add=NET_ADMIN \
--cap-add=SYS_MODULE \
-e PUID=1000 \
-e PGID=1000 \
-e TZ=Asia/Shanghai \
-v /root/.wireguard/config:/config \
-v /lib/modules:/lib/modules \
--net=host \
--restart unless-stopped \
linuxserver/wireguard
version: '3'
services:
rancher:
image: 'rancher/rancher:v2.5.12-rc1'
privileged: true
restart: unless-stopped
network_mode: host
volumes:
- ./data:/var/lib/rancher
- /run/shm/rancher/auditlog:/var/log/auditlog
environment:
- TZ=Asia/Shanghai
sudo apt update
sudo apt install software-properties-common
sudo add-apt-repository --yes --update ppa:ansible/ansible
sudo apt install ansible
apt install prometheus-node-exporter
curl -s http://127.0.0.1:9100/metrics | curl --data-binary @- http://127.0.0.1:9091/metrics/job/node/instance/"192.168.1.2:9100"swapoff -a
# https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/rancher-v2-5-14/
# High Availability with Embedded DB
curl -sfL https://get.k3s.io | sh -
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/k3s/k3s-install.sh | INSTALL_K3S_VERSION=v1.20.15+k3s1 INSTALL_K3S_MIRROR=cn sh -
# High Availability with an External DB
curl -sfL https://get.k3s.io | sh -s - server \
--datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database"
# INSTALL_K3S_MIRROR
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/k3s/k3s-install.sh | INSTALL_K3S_VERSION=v1.20.15+k3s1 INSTALL_K3S_MIRROR=cn sh -s - --kubelet-arg='eviction-hard=memory.available<100Mi,imagefs.available<0.1%,imagefs.inodesFree<0.1%,nodefs.available<0.1%,nodefs.inodesFree<0.1%' --node-external-ip 10.10.10.1 --advertise-address 10.10.10.1 --node-ip 10.10.10.1 --flannel-iface wg0cat << EOF > /etc/rancher/k3s/registries.yaml
mirrors:
docker.io:
endpoint:
- "https://docker.mirrors.ustc.edu.cn"
EOFsystemctl restart k3s
systemctl status k3s
k3s kubectl get nodes
k3s kubectl get pods -A
k3s kubectl get svc -A
k3s kubectl delete pod --grace-period=0 --force --namespace $namespace $name
crictl ps
crictl info/usr/local/bin/k3s-uninstall.sh
/usr/local/bin/k3s-agent-uninstall.sh
cat /var/lib/rancher/k3s/server/node-token
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/k3s/k3s-install.sh | INSTALL_K3S_VERSION=v1.20.15+k3s1 INSTALL_K3S_MIRROR=cn K3S_URL=https://192.168.28.100:6443 K3S_TOKEN=K10fb4da3a53effbed27e5f5875f5505eb45a49cf995d9adbd0f85064c2e2a7ae17::server:a019f0db1cf838ea796002d4b1bc54a1 sh -
curl -sfL https://rancher-mirror.oss-cn-beijing.aliyuncs.com/k3s/k3s-install.sh | INSTALL_K3S_VERSION=v1.20.15+k3s1 INSTALL_K3S_MIRROR=cn K3S_URL=https://192.168.28.100:6443 K3S_TOKEN=K10fb4da3a53effbed27e5f5875f5505eb45a49cf995d9adbd0f85064c2e2a7ae17::server:a019f0db1cf838ea796002d4b1bc54a1 sh -s - --node-external-ip 192.168.28.100 --node-ip 192.168.28.100 --flannel-iface wg0# server
sudo apt-get update
sudo apt-get install nfs-kernel-server
sudo mkdir -p /nfs
sudo chown nobody:nogroup /nfs
# Modify the exports file (/etc/exports).
# /nfs *(rw,sync,no_subtree_check,no_root_squash)
sudo systemctl restart nfs-kernel-server
# client
sudo apt update
sudo apt install nfs-common
sudo mkdir -p /nfs
sudo mount 192.168.1.2:/nfs /nfscurl https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash
helm versionkubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml
helm repo add jetstack https://charts.jetstack.io
helm repo update
helm install cert-manager jetstack/cert-manager \
--namespace cert-manager \
--create-namespace \
--version v1.5.1
1$ helm repo add rancher-stable https://releases.rancher.com/server-charts/stable
2$ helm repo add rancher-stable http://rancher-mirror.oss-cn-beijing.aliyuncs.com/server-charts/stable
3$ helm repo add rancher-stable http://rancher-mirror.cnrancher.com/server-charts/stable
helm repo update
echo "export KUBECONFIG=/etc/rancher/k3s/k3s.yaml" >> ~/.bash_profile
source .bash_profile
k3s kubectl create ns cattle-system
helm install rancher rancher-stable/rancher \
--namespace cattle-system \
--version 2.5.14 \
--set hostname=rancher.dev.run \
--set replicas=3
#########################################################################################################
k3s kubectl -n cattle-system create secret generic tls-ca --from-file=/etc/rancher/cacerts.pem
# helm upgrade --install
helm install rancher rancher-stable/rancher \
--namespace cattle-system \
--version 2.5.14 \
--set hostname=rancher.dev.run \
--set ingress.tls.source=secret \
--set tls=external \
--set privateCA=true
k3s kubectl -n cattle-system rollout status deploy/rancher
k3s kubectl -n cattle-system get deploy rancher
k3s kubectl -n cattle-system get pods- reset-password
k3s kubectl --kubeconfig $KUBECONFIG -n cattle-system exec $(k3s kubectl --kubeconfig $KUBECONFIG -n cattle-system get pods -l app=rancher | grep '1/1' | head -1 | awk '{ print $1 }') -- reset-password
https://gitlab.com/help/user/project/clusters/add_remove_clusters.md
- API URL
kubectl cluster-info | grep 'Kubernetes master' | awk '/http/ {print $NF}'
- CA certificate
kubectl get secret $(kubectl get secret | grep default-token | awk '{print $1}') -o jsonpath="{['data']['ca\.crt']}" | base64 --decode
- Token
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: ServiceAccount
metadata:
name: gitlab-admin
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: gitlab-admin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: gitlab-admin
namespace: kube-system
EOF
kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep gitlab-admin | awk '{print $1}')
- check
kubectl get deploy -A | grep tiller
kubectl get pods -n gitlab-managed-apps
- fix x509
env:
- name: CI_SERVER_TLS_CA_FILE
value: /home/gitlab-runner/.gitlab-runner/certs/ca.test.crt
- name: RUNNER_BUILDS_DIR
value: /opt/gitlab-runner/builds
- name: RUNNER_CACHE_DIR
value: /opt/gitlab-runner/cache
volumeMounts:
- name: ca-test
mountPath: /home/gitlab-runner/.gitlab-runner/certs
- fix configmap
entrypoint: |-
############################################
sed -i '$d' ~/.gitlab-runner/config.toml
cat >> ~/.gitlab-runner/config.toml << EOF
[[runners.kubernetes.volumes.host_path]]
name = "gitlab-runner"
mount_path = "/opt/gitlab-runner/"
read_only = false
host_path = "/home/gitlab/runner/"
[[runners.kubernetes.volumes.host_path]]
name = "docker"
mount_path = "/var/run/docker.sock"
read_only = true
host_path = "/var/run/docker.sock"
EOF
# Start the runner
############################################
- fix hosts
- name: RUNNER_PRE_CLONE_SCRIPT # optional
value: |-
cat>> /etc/hosts <<EOF
192.168.28.123 git.com
192.168.28.123 reg.git.com
EOF
# Execute before k3s installation
mkdir -p /var/lib/rancher/k3s/server/manifests
cat << EOF > /var/lib/rancher/k3s/server/manifests/traefik.yml
apiVersion: helm.cattle.io/v1
kind: HelmChart
metadata:
name: traefik
namespace: kube-system
spec:
chart: traefik
repo: https://containous.github.io/traefik-helm-chart
set:
image.tag: "2.2.1"
EOF
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent