<aside class="msg message"><span class="msg-symbol">!</span><div class="msg-content">
<p>備忘録です。</p>
</div></aside>
<h1 id="ct%E3%82%92%E4%BD%9C%E6%88%90">
<a class="header-anchor-link" href="#ct%E3%82%92%E4%BD%9C%E6%88%90" aria-hidden="true"></a> CTを作成</h1>
<p>ところどころ大事な部分があるのでその場所を紹介します。</p>
<h2 id="general">
<a class="header-anchor-link" href="#general" aria-hidden="true"></a> General</h2>
<p><img src="https://storage.googleapis.com/zenn-user-upload/b3139cc9c800-20220623.png" alt loading="lazy" class="md-img"></p>
<p>特権コンテナでないといけないので<code>Unpriviledged</code>のチェックは外します。</p>
<h2 id="template">
<a class="header-anchor-link" href="#template" aria-hidden="true"></a> Template</h2>
<p><img src="https://storage.googleapis.com/zenn-user-upload/4e0b5dc4b0ff-20220623.png" alt loading="lazy" class="md-img"></p>
<p>今回はUbuntu 22.04 を使います。<br>
Ubuntuであればとりあえず動くと思います。</p>
<h2 id="memory">
<a class="header-anchor-link" href="#memory" aria-hidden="true"></a> Memory</h2>
<p><img src="https://storage.googleapis.com/zenn-user-upload/e24b3cdae094-20220623.png" alt loading="lazy" class="md-img"></p>
<p>Memoryはお好きな値に、Swapは0にします。</p>
<h2 id="config%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%81%AB%E8%BF%BD%E8%A8%98">
<a class="header-anchor-link" href="#config%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%81%AB%E8%BF%BD%E8%A8%98" aria-hidden="true"></a> configファイルに追記</h2>
<p>コンテナを作成したらホストからconfigファイルに以下の内容を追記します。</p>
<div class="code-block-container">
<div class="code-block-filename-container"><span class="code-block-filename">/etc/pve/lxc/&lt;コンテナID&gt;.conf</span></div>
<pre class="language-yaml"><code class="language-yaml"><span class="token comment"># ...</span>

<span class="token key atrule">lxc.apparmor.profile</span><span class="token punctuation">:</span> unconfined
<span class="token key atrule">lxc.cap.drop</span><span class="token punctuation">:</span>
<span class="token key atrule">lxc.cgroup.devices.allow</span><span class="token punctuation">:</span> a
<span class="token key atrule">lxc.mount.auto</span><span class="token punctuation">:</span> proc<span class="token punctuation">:</span>rw sys<span class="token punctuation">:</span>rw
</code></pre>
</div><h1 id="kubernetes%E3%82%92%E3%82%A4%E3%83%B3%E3%82%B9%E3%83%88%E3%83%BC%E3%83%AB">
<a class="header-anchor-link" href="#kubernetes%E3%82%92%E3%82%A4%E3%83%B3%E3%82%B9%E3%83%88%E3%83%BC%E3%83%AB" aria-hidden="true"></a> Kubernetesをインストール</h1>
<p><span class="embed-block zenn-embedded zenn-embedded-card"><iframe id="zenn-embedded__e67b752100b1" src="https://embed.zenn.studio/card#zenn-embedded__e67b752100b1" data-content="https%3A%2F%2Fkubernetes.io%2Fja%2Fdocs%2Fsetup%2Fproduction-environment%2Ftools%2Fkubeadm%2Finstall-kubeadm%2F" frameborder="0" scrolling="no" loading="lazy"></iframe></span><a href="https://kubernetes.io/ja/docs/setup/production-environment/tools/kubeadm/install-kubeadm/" style="display:none" target="_blank" rel="nofollow noopener noreferrer">https://kubernetes.io/ja/docs/setup/production-environment/tools/kubeadm/install-kubeadm/</a><br style="display:none">
このページを参考にインストールします。</p>
<p>🔽全部のプロセスをまとめたスクリプト</p>
<span class="embed-block zenn-embedded zenn-embedded-gist"><iframe id="zenn-embedded__070ffc7a13cb7" src="https://embed.zenn.studio/gist#zenn-embedded__070ffc7a13cb7" data-content="https%3A%2F%2Fgist.github.com%2FddPn08%2Fbea6db25e64cd3f93799f6cac4629c61" frameborder="0" scrolling="no" loading="lazy"></iframe></span>
<h1 id="%E3%82%A8%E3%83%A9%E3%83%BC%E5%AF%BE%E5%BF%9C">
<a class="header-anchor-link" href="#%E3%82%A8%E3%83%A9%E3%83%BC%E5%AF%BE%E5%BF%9C" aria-hidden="true"></a> エラー対応</h1>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash">kubeadm init --pod-network-cidr<span class="token operator">=</span><span class="token number">10.244</span>.0.0/16
</code></pre></div><p>このように普通に初期化しようとするとエラーが出ます。</p>
<p><code>[ERROR SystemVerification]: failed to parse kernel config: unable to load kernel module: "configs", output: "modprobe: FATAL: Module configs not found in directory /lib/modules/5.3.10-1-pve\n", err: exit status 1</code></p>
<p>オプションを追加して無視します。</p>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash">kubeadm init <span class="token punctuation">\</span>
--pod-network-cidr<span class="token operator">=</span><span class="token number">10.244</span>.0.0/16 <span class="token punctuation">\</span>
--ignore-preflight-errors<span class="token operator">=</span>SystemVerification
</code></pre></div><hr>
<p>けれどまだエラーが出ます。</p>
<p><code>failed to start OOM watcher open /dev/kmsg: no such file or directory</code></p>
<p>これを回避するために<code>/dev/kmsg</code>に、<code>/dev/console</code>のリンクを張る必要があります。</p>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash"><span class="token function">ln</span> <span class="token parameter variable">-s</span> /dev/console /dev/kmsg
<span class="token builtin class-name">echo</span> <span class="token string">'L /dev/kmsg - - - - /dev/console'</span> <span class="token operator">&gt;</span> /etc/tmpfiles.d/kmsg.conf <span class="token comment"># 再機動に対応</span>
</code></pre></div><hr>
<p>最後に、LXCでは<code>swapoff -a</code>が使えないので、スワップのエラーを無視するように設定します。</p>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash"><span class="token function">sed</span> <span class="token parameter variable">-i</span> <span class="token string">'9s/^/Environment="KUBELET_EXTRA_ARGS=--fail-swap-on=false"\n/'</span> /etc/systemd/system/kubelet.service.d/10-kubeadm.conf
</code></pre></div><hr>
<p>この状態で初期化します。</p>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash">kubeadm init <span class="token punctuation">\</span>
--pod-network-cidr<span class="token operator">=</span><span class="token number">10.244</span>.0.0/16 <span class="token punctuation">\</span>
--ignore-preflight-errors<span class="token operator">=</span>SystemVerification
</code></pre></div><p>するとエラー無く通るはずです。<br>
ワーカーノードでも同じように設定してから、joinします。</p>
<div class="code-block-container"><pre class="language-bash"><code class="language-bash">kubeadm <span class="token function">join</span> <span class="token number">10.1</span>.100.11:6443 <span class="token punctuation">\</span>
--ignore-preflight-errors<span class="token operator">=</span>SystemVerification <span class="token punctuation">\</span>
<span class="token parameter variable">--token</span> xxxxxx.xxxxxxxxxxxxx <span class="token punctuation">\</span>
--discovery-token-ca-cert-hash sha256:xxxxxxx
</code></pre></div><h1 id="%E5%8F%82%E8%80%83">
<a class="header-anchor-link" href="#%E5%8F%82%E8%80%83" aria-hidden="true"></a> 参考</h1>
<p><span class="embed-block zenn-embedded zenn-embedded-card"><iframe id="zenn-embedded__dc7d71d20a458" src="https://embed.zenn.studio/card#zenn-embedded__dc7d71d20a458" data-content="https%3A%2F%2Fthelastguardian.me%2Fposts%2F2020-01-10-kubernetes-in-lxc-on-proxmox%2F" frameborder="0" scrolling="no" loading="lazy"></iframe></span><a href="https://thelastguardian.me/posts/2020-01-10-kubernetes-in-lxc-on-proxmox/" style="display:none" target="_blank" rel="nofollow noopener noreferrer">https://thelastguardian.me/posts/2020-01-10-kubernetes-in-lxc-on-proxmox/</a></p>


ProxmoxVEのLXCでKubernetesクラスタを構築する。

Discussion