<br />
<b>Warning</b>:  is_file(): open_basedir restriction in effect. File(/www/wwwroot/wordpress//index.php/wp-json/wp/v2/posts/133) is not within the allowed path(s): (/www/wwwroot/wordpress/:/tmp/) in <b>/www/wwwroot/wordpress/wp-content/plugins/jetpack-boost/app/modules/optimizations/page-cache/pre-wordpress/class-boost-cache-utils.php</b> on line <b>80</b><br />
{"id":133,"date":"2026-04-10T07:08:42","date_gmt":"2026-04-09T23:08:42","guid":{"rendered":"https:\/\/www.moxbai.cn\/?p=133"},"modified":"2026-04-12T12:29:39","modified_gmt":"2026-04-12T04:29:39","slug":"%e5%88%9d%e5%a7%8b%e5%8c%96%e9%9b%86%e7%be%a4-clown%e6%96%87%e7%ab%a01","status":"publish","type":"post","link":"https:\/\/www.moxbai.cn\/index.php\/2026\/04\/10\/%e5%88%9d%e5%a7%8b%e5%8c%96%e9%9b%86%e7%be%a4-clown%e6%96%87%e7%ab%a01\/","title":{"rendered":"\u521d\u59cb\u5316\u96c6\u7fa4&#8211;clown\u6587\u7ae01"},"content":{"rendered":"<h1 class=\"wp-block-heading\"><br>\u4e3b\u673a\u6e05\u5355<\/h1>\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>\u4e3b\u673a\u540d<\/th>\n<th>IPv4<\/th>\n<th>\u7f51\u5173<\/th>\n<th>dns1<\/th><\/tr><\/thead>\n<tbody><tr><td>master<\/td>\n<td>10.10.10.101\/24<\/td>\n<td>10.10.10.1<\/td>\n<td>10.10.10.101<\/td><\/tr>\n<tr><td>node1<\/td>\n<td>10.10.10.102\/24<\/td>\n<td>10.10.10.1<\/td>\n<td>10.10.10.101<\/td><\/tr>\n<tr><td>node2<\/td>\n<td>10.10.10.103\/24<\/td>\n<td>10.10.10.1<\/td>\n<td>10.10.10.101<\/td><\/tr>\n<tr><td>windows\/\u7269\u7406\u673a<\/td>\n<td>10.10.10.2\/24<\/td>\n<td>10.10.10.1<\/td>\n<td><\/td><\/tr><\/tbody><\/table><\/div><\/figure>\n<p class=\"wp-block-paragraph\">1.\u6240\u4f7f\u7528\u7684\u73af\u5883\u4e3avm \u5185\u521b\u5efa\u4e09\u53f0rocky10-mini.iso\u865a\u62df\u673a<\/p>\n<p class=\"wp-block-paragraph\">2.\u4f7f\u7528nat\u8fde\u63a5\u5916\u7f51 \u4f7f\u5185\u7f51\u8fdb\u884c\u4e92\u8054\u901a\u4fe1<\/p>\n<p class=\"wp-block-paragraph\">3.vm\u865a\u62df\u7f51\u7edc\u7f16\u8f91\u5668 \u7f16\u8f91vment8\u7684nat\u8bbe\u7f6e \u7f51\u5173\u6307\u541110.10.10.1\u5145\u5f53\u8def\u7531\u5668\u4e0e\u7269\u7406\u4e3b\u673a\u8fdb\u884c\u94fe\u63a5 \u7269\u7406\u673a\u7684vment8\u7f51\u7edc\u4fe1\u606f\u4e0e\u4fe1\u606f\u8868\u5185\u5bb9\u76f8\u540c<\/p>\n<p class=\"wp-block-paragraph\">4.\u5f00\u59cb\u914d\u7f6e\u524d\u9700\u8fdb\u884c\u4ee5\u4e0b\u914d\u7f6e\u518d\u8fdb\u884c\u514b\u9686 \u65e0\u7279\u6b8a\u8981\u6c42\u8bf7\u6309\u6587\u6863\u8fdb\u884c\u64cd\u4f5c<\/p>\n<p class=\"wp-block-paragraph\">5.\u6211\u7684\u865a\u62df\u673a\u90fd\u5173\u95ed\u4e86\u4fa7\u7f13\u901a\u9053<\/p>\n<h4 class=\"wp-block-heading\">\u914d\u7f6e\u7f51\u7edc\u4fe1\u606f<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8bf7\u5728master\u4e3b\u673a\u4e0b\u8fdb\u884c\u8be5\u64cd\u4f5c<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>hostnamectl set-hostname master #\u66f4\u6539\u4e3b\u673a\u540d&lt;br&gt;nmcli c modify ens160 ipv4.address 10.10.10.101\/24 ipv4.gateway 10.10.10.1 ipv4.dns 10.10.10.101 autoconnect yes    #\u914d\u7f6e\u7f51\u5361ens160\u4fe1\u606f&lt;br&gt;systemctl restart NetworkManager #\u91cd\u542f\u7f51\u7edc\u7ba1\u7406\u5de5\u5177&lt;br&gt;bash    #\u52a0\u8f7d\u4e3b\u673a\u540d<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u5173\u95ed\u9632\u706b\u5899\u4e0eselinux<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fd9\u91cc\u8981\u653e\u5f88\u591a\u4e2a\u7aef\u53e3\u6240\u4ee5\u4e3a\u4e86\u7b80\u4fbf\u4e00\u70b9\u76f4\u63a5\u5173\u95ed\u9632\u706b\u5899<\/p>\n\n<p class=\"wp-block-paragraph\">selinux\u4f1a\u6321\u5230k8s\u7684\u8fd0\u884c \u4e5f\u5173\u95ed\u4e86<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>systemctl stop firewalld&lt;br&gt;systemctl disable firewalld&lt;br&gt;\u200b&lt;br&gt;vi \/etc\/selinux\/config&lt;br&gt;     16  grubby --update-kernel ALL --args selinux=0    #\u53d6\u6d88\u6ce8\u91ca&lt;br&gt;     22  SELINUX=disabled   #\u6c38\u4e45\u5173\u95edselinux<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u7f16\u8f91hosts\u914d\u7f6e\u6587\u4ef6 \u4e3ak8s\u96c6\u7fa4\u63d0\u4f9b\u4e3b\u673a\u6e05\u5355<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8bf7\u5728 master\u4e3b\u673a\u4e0b\u8fdb\u884c\u8be5\u64cd\u4f5c \u540e\u7eed\u514b\u9686\u4e5f\u4f1a\u5c06\u8be5\u865a\u62df\u673a\u914d\u7f6e\u4e00\u5e76\u8fdb\u884c\u5b8c\u6574\u514b\u9686<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>vi \/etc\/hosts&lt;br&gt;    10.10.10.101 master&lt;br&gt;    10.10.10.102 node1&lt;br&gt;    10.10.10.103 node2<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u7f16\u8f91ssh\u5141\u8bb8\u8fdc\u7a0b\u767b\u9646<\/h4>\n<pre class=\"wp-block-code\"><code>sed -i '39a\\PermitRootLogin yes' \/etc\/ssh\/sshd_config&lt;br&gt;systemctl enable sshd --now<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u66f4\u6362\u7cfb\u7edf\u8f6f\u4ef6\u6e90<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fd9\u91cc\u662f\u56e0\u4e3arocky\u7684\u9ed8\u8ba4\u955c\u50cf\u6e90\u5728\u56fd\u5916 \u4f1a\u6bd4\u8f83\u6162\u6240\u4ee5\u5728\u8fd9\u91cc\u4f7f\u7528\u4e86\u963f\u91cc\u4e91\u7684\u955c\u50cf\u7ad9<\/p>\n\n<p class=\"wp-block-paragraph\">\u5982\u60f3\u5148\u8fdb\u884cyum\u6e90\u7684\u5907\u4efd \u53ef\u4ee5\u4f7f\u7528mv\u6216cp\u529f\u80fd\u8fdb\u884c\u5907\u4efd<\/p>\n\n<p class=\"wp-block-paragraph\">\u3010\u6ce8\u610f\u3011\u8fd9\u91cc\u6211\u7684\u955c\u50cf\u90fd\u662fx86\u955c\u50cf \u5982\u662farm\u673a\u5b50\u7b49\u8bf7\u81ea\u884c\u66f4\u6539<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/yum.repos.d\/*&lt;br&gt;vi \/etc\/yum.repos.d\/a.repo&lt;br&gt; &nbsp;  [BaseOS]&lt;br&gt; &nbsp; &nbsp;name=baseos&lt;br&gt; &nbsp; &nbsp;baseurl=https:\/\/mirrors.aliyun.com\/rockylinux\/10\/BaseOS\/x86_64\/os\/&lt;br&gt; &nbsp; &nbsp;gpgcheck=0&lt;br&gt; &nbsp; &nbsp;enabled=1&lt;br&gt;\u200b&lt;br&gt; &nbsp;  [AppStream]&lt;br&gt; &nbsp; &nbsp;name=app&lt;br&gt; &nbsp; &nbsp;baseurl=https:\/\/mirrors.aliyun.com\/rockylinux\/10\/AppStream\/x86_64\/os\/&lt;br&gt; &nbsp; &nbsp;gpgcheck=0&lt;br&gt; &nbsp; &nbsp;enabled=1&lt;br&gt;\u200b&lt;br&gt; &nbsp;  [extras]&lt;br&gt; &nbsp; &nbsp;name=extras&lt;br&gt; &nbsp; &nbsp;baseurl=https:\/\/mirrors.aliyun.com\/rockylinux\/10\/extras\/x86_64\/os\/&lt;br&gt; &nbsp; &nbsp;gpgcheck=0&lt;br&gt; &nbsp; &nbsp;enabled=1&lt;br&gt;\u200b&lt;br&gt; &nbsp;  [kubernetes]&lt;br&gt; &nbsp; &nbsp;name=Kubernetes&lt;br&gt; &nbsp; &nbsp;baseurl=https:\/\/mirrors.aliyun.com\/kubernetes\/yum\/repos\/kubernetes-el7-x86_64\/&lt;br&gt; &nbsp; &nbsp;enabled=1&lt;br&gt; &nbsp; &nbsp;gpgcheck=0&lt;br&gt;\u200b&lt;br&gt; &nbsp;  [containerd]&lt;br&gt; &nbsp; &nbsp;name=Containerd&lt;br&gt; &nbsp; &nbsp;baseurl=https:\/\/download.docker.com\/linux\/centos\/10\/x86_64\/stable\/&lt;br&gt; &nbsp; &nbsp;enabled=1&lt;br&gt; &nbsp; &nbsp;gpgcheck=0&lt;br&gt;\u200b<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u914d\u7f6e\u65f6\u95f4\u540c\u6b65<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fd9\u91cc\u505a\u65f6\u95f4\u540c\u6b65\u662f\u4e3a\u4e86\u6211\u7684\u8282\u70b9\u548c\u4e3b\u8282\u70b9\u5728\u540c\u4e00\u4e2a\u65f6\u95f4\u4e0b \u4e5f\u65b9\u4fbf\u770b\u65e5\u5fd7<\/p>\n\n<p class=\"wp-block-paragraph\">\u3010\u6ce8\u610f\u3011\u8981\u5220\u9664chrony.conf\u914d\u7f6e\u6587\u4ef6\u5185\u7684pool 2.rocky.pool.ntp.org iburst<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>yum install chrony vim -y&lt;br&gt;vim \/etc\/chrony.conf&lt;br&gt;    pool ntp1.aliyun.com iburst&lt;br&gt;    pool ntp2.aliyun.com iburst&lt;br&gt;    pool cn.pool.ntp.org iburst&lt;br&gt;\u200b&lt;br&gt;systemctl enable chronyd --now<\/code><\/pre>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u4f7f\u7528chronyc sources\u8fdb\u884c\u6d4b\u8bd5<\/p>\n<\/blockquote>\n<h4 class=\"wp-block-heading\">\u7981\u7528swap\u5206\u533a<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fd9\u91cc\u662f\u4e3a\u4e86\u9632\u6b62\u8fd9\u4e2aswap\u5206\u533a\u5360\u7528k8s\u96c6\u7fa4\u7684\u5185\u5b58<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>sed -i 'swap\/d' \/etc\/fstab  #\u5220\u9664\u6389\u5305\u542bswap\u7684\u884c&lt;br&gt;swapoff -a  #\u4e34\u65f6\u5173\u95edswap<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u5f00\u542f\u5185\u6838\u8f6c\u53d1<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fd9\u91cc\u6211\u662f\u4e3a\u4e86\u5728\u4e0d\u540c\u7684\u8282\u70b9\u4e0apod\u95f4\u901a\u4fe1 \u5e76\u4f7fpod\u8bbf\u95ee\u5916\u90e8\u7f51\u7edc \u4e14\u540e\u7eed\u6211\u4f1a\u914d\u7f6eipvs\u89c4\u5219<\/p>\n\n<p class=\"wp-block-paragraph\">k8s\u7684\u7f51\u7edc\u6a21\u578b\u8981\u6c42\u6bcf\u4e00\u4e2apod\u90fd\u62e5\u6709\u4e00\u4e2a\u72ec\u7acb\u7684IP(IP-per-Pod) \u5e76\u4e14\u4efb\u4f55\u4e24\u4e2apod\u4e4b\u95f4\u90fd\u53ef\u4ee5\u76f4\u63a5\u901a\u4fe1 \u65e0\u8bba\u662f\u5426\u5728\u540c\u4e00\u4e2a\u8282\u70b9\u4e0a \u6bcf\u4e2a\u8282\u70b9\u672c\u8d28\u4e0a\u5c31\u662f\u4e00\u4e2a\u5c0f\u578b\u7684\u7f51\u7edc\u8def\u7531\u5668 \u8d1f\u8d23\u4e3a\u8fd0\u884c\u5728\u5176\u4e0a\u7684\u6240\u6709pod\u8f6c\u53d1\u6d41\u91cf<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>vim \/etc\/sysctl.d\/k8s.conf&lt;br&gt;    net.bridge.bridge-nf-call-ip6tables=1&lt;br&gt;    net.bridge.bridge-nf-call-iptables=1&lt;br&gt;    net.ipv4.ip_forward=1   #\u4e3a\u6bcf\u4e2a\u8282\u70b9\u5f00\u542f\u8def\u7531\u5668\u6a21\u5f0f&lt;br&gt;\u200b&lt;br&gt;vim \/etc\/modules-load.d\/k8s.conf&lt;br&gt;    br_netfilter    #\u8bbe\u7f6e\u7cfb\u7edf\u5728\u542f\u52a8\u65f6\u81ea\u52a8\u52a0\u8f7dbr_netfilter\u5185\u6838\u6a21\u5757&lt;br&gt;    overlay #\u8bbe\u7f6e\u7cfb\u7edf\u5728\u542f\u52a8\u65f6\u81ea\u52a8\u52a0\u8f7dOverkayFS\u5185\u6838\u6a21\u5757&lt;br&gt;\u200b&lt;br&gt;modprobe overlay    #\u4e34\u65f6\u5411\u5185\u6838\u6dfb\u52a0OverlayFS\u5185\u6838\u6a21\u5757&lt;br&gt;modprobe br_netfilter   #\u4e34\u65f6\u52a0\u8f7d\u5185\u6838\u6a21\u5757&lt;br&gt;\u200b&lt;br&gt;sysctl --system #\u91cd\u65b0\u52a0\u8f7d\u6240\u6709\u7cfb\u7edf\u914d\u7f6e\u6587\u4ef6&lt;br&gt;lsmod | grep br_netfilter   <\/code><\/pre>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u4f7f\u7528 lsmod | grep br_netfilter \u9a8c\u8bc1\u5185\u6838\u6a21\u5757\u662f\u5426\u5df2\u7ecf\u6210\u529f\u52a0\u8f7d\u5230\u5f53\u524d\u8fd0\u884c\u7684\u5185\u6838\u4e2d<\/p>\n<\/blockquote>\n<h4 class=\"wp-block-heading\">\u914d\u7f6eipvs\u529f\u80fd<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u89e3\u51b3 kube-proxy \u4f7f\u7528 iptables \u6a21\u5f0f\u65f6\u5728\u5927\u89c4\u6a21\u96c6\u7fa4\u4e0b\u7684\u6027\u80fd\u74f6\u9888\u95ee\u9898<\/p>\n\n<p class=\"wp-block-paragraph\">iptables\u662flinux\u5185\u6838\u7f51\u7edc\u6570\u636e\u5305\u5904\u7406\u7684\u5b9e\u9645\u6267\u884c\u8005\uff08\u6570\u636e\u5e73\u9762\uff09<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>yum install ipset ipvsadm -y&lt;br&gt;&lt;br&gt;\/\/\u5c06k8s\u8282\u70b9\u6b66\u88c5\u6210\u4e00\u4e2a\u9ad8\u6027\u80fd\u7684\u7f51\u7edc\u6570\u636e\u5e73\u9762&lt;br&gt;vim \/etc\/modules-load.d\/ipvs.conf   #\u5728\u7cfb\u7edf\u6bcf\u6b21\u542f\u52a8\u65f6 \u81ea\u52a8\u52a0\u8f7d\u8be5\u5185\u6838\u6a21\u5757&lt;br&gt; overlay #\u542f\u7528OverlayFS\u8054\u5408\u6587\u4ef6\u7cfb\u7edf&lt;br&gt;  ip_vs   #IP Virtual Server\u7684\u6838\u5fc3\u5f00\u5173&lt;br&gt; ip_vs_rr    #Round Robin \u8f6e\u8be2&lt;br&gt; ip_vs_wrr   #Weighted Round Robin \u52a0\u6743\u8f6e\u8be2&lt;br&gt;  ip_vs_sh    #Source Hashing \u6e90\u54c8\u5e0c\u5730\u5740&lt;br&gt;   nf_conntrack    #\u7f51\u7edc\u8fde\u63a5\u8ddf\u8e2a\u6a21\u5757&lt;br&gt;   &lt;br&gt;modprobe overlay    #\u7acb\u5373\u52a0\u8f7d&lt;br&gt;modprobe ip_vs &amp;&amp; modprobe ip_vs_rr &amp;&amp; modprobe ip_vs_wrr &amp;&amp; modprobe ip_vs_sh &amp;&amp; modprobe nf_conntrack<\/code><\/pre>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u4f7f\u7528lsmod\u67e5\u770b\u6a21\u5757\u662f\u5426\u52a0\u8f7d\u6210\u529f<\/p>\n<\/blockquote>\n<h4 class=\"wp-block-heading\">\u5b89\u88c5kubeadm&#8230;<\/h4>\n<pre class=\"wp-block-code\"><code>yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes    #\u4e0d\u6392\u9664k8s\u7684\u5305\u8fdb\u884c\u4e0b\u8f7d&lt;br&gt;systemctl enable kubelet --now<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u914d\u7f6econtainerd<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">1.\u5b89\u88c5\u5e76\u914d\u7f6econtainerd<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>yum install containerd -y&lt;br&gt;&lt;br&gt;#\u751f\u6210\u9ed8\u8ba4\u7684\u914d\u7f6e\u6587\u4ef6&lt;br&gt;mkdir -p \/etc\/containerd&lt;br&gt;containerd config default | sudo tee \/etc\/containerd\/config.toml&lt;br&gt;&lt;br&gt;# \u4fee\u6539\u914d\u7f6e\u4f7f\u7528\u56fd\u5185\u955c\u50cf\u6e90 !!!&lt;br&gt;sudo sed -i 's|registry.k8s.io|registry.aliyuncs.com\/google_containers|g' \/etc\/containerd\/config.toml&lt;br&gt;sudo sed -i 's|sandbox_image = &quot;.*&quot;|sandbox_image = &quot;registry.aliyuncs.com\/google_containers\/pause:3.9&quot;|g' \/etc\/containerd\/config.toml&lt;br&gt;&lt;br&gt;# \u542f\u52a8\u5e76\u542f\u7528 containerd&lt;br&gt;sudo systemctl enable containerd&lt;br&gt;sudo systemctl start containerd<\/code><\/pre>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">2.\u914d\u7f6ecrictl\u4f7f\u7528containerd<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code># \u521b\u5efa crictl \u914d\u7f6e&lt;br&gt;tee \/etc\/crictl.yaml &gt; \/dev\/null &lt;&lt;EOF&lt;br&gt;runtime-endpoint: unix:\/\/\/var\/run\/containerd\/containerd.sock&lt;br&gt;image-endpoint: unix:\/\/\/var\/run\/containerd\/containerd.sock&lt;br&gt;timeout: 10&lt;br&gt;debug: false&lt;br&gt;EOF<\/code><\/pre>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">3.\u6d4b\u8bd5containerd\u662f\u5426\u6b63\u5e38\u5de5\u4f5c<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>#\u6d4b\u8bd5\u62c9\u53d6\u955c\u50cf&lt;br&gt;crictl pull registry.aliyuncs.com\/google_containers\/pause:3.9<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u514b\u9686\u8be5master\u865a\u62df\u673a\u751f\u6210node1\u4e0enode2<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fc7\u7a0b\u8df3\u8fc7<\/p>\n<\/blockquote>\n<p class=\"wp-block-paragraph\">\u7f16\u8f91node1\u7f51\u7edc\u4fe1\u606f\u4e0e\u4e3b\u673a\u540d<\/p>\n<pre class=\"wp-block-code\"><code>hostnamectl set-hostname node1&lt;br&gt;nmcli c modify ens160 ipv4.address 10.10.10.102\/24&lt;br&gt;systemctl restart NetworkManager&lt;br&gt;bash<\/code><\/pre>\n<p class=\"wp-block-paragraph\">\u7f16\u8f91node2\u7f51\u7edc\u4fe1\u606f\u4e0e\u4e3b\u673a\u540d<\/p>\n<pre class=\"wp-block-code\"><code>hostnamectl set-hostname node2&lt;br&gt;nmcli c modify ens160 ipv4.address 10.10.10.103\/24&lt;br&gt;systemctl restart NetworkManager&lt;br&gt;bash<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u914d\u7f6essh\u514d\u5bc6\u767b\u5f55<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u8fdb\u884c\u64cd\u4f5c \u914d\u7f6e\u514d\u5bc6\u767b\u5f55\u4f20\u8f93\u6587\u4ef6\u5c31\u4e0d\u7528\u8f93\u5bc6\u7801\u4e86\u5f88\u4fbf\u6377<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>ssh-keygen&lt;br&gt;ssh-copy-id 10.10.10.102&lt;br&gt;ssh-copy-id 10.10.10.103&lt;br&gt;ssh-copy-id 10.10.10.101&lt;br&gt;scp .ssh\/know_hosts root@10.10.10.102:\/root\/.ssh\/&lt;br&gt;scp .ssh\/know_hosts root@10.10.10.103:\/root\/.ssh\/<\/code><\/pre>\n<h4 class=\"wp-block-heading\"><strong>K8s\u521d\u59cb\u5316\u524d\u5fc5\u68c0\u6e05\u5355\uff1a<\/strong><\/h4>\n<ol class=\"wp-block-list\">\n<li><strong>\u8282\u70b9\u57fa\u7840<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u2705 \u6240\u6709\u8282\u70b9<strong>\u4e3b\u673a\u540d\u552f\u4e00<\/strong>\u4e14\u53ef\u89e3\u6790<\/li>\n\n<li>\u2705 \u5df2<strong>\u5173\u95ed swap<\/strong>\uff1a<code>swapoff -a<\/code><\/li>\n\n<li>\u2705 \u5df2<strong>\u5173\u95ed\u9632\u706b\u5899<\/strong>\u548c<strong>SELinux<\/strong><\/li>\n<\/ul>\n<\/li>\n\n<li><strong>\u5185\u6838\u4e0e\u7f51\u7edc<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u2705 \u52a0\u8f7d\u5185\u6838\u6a21\u5757\uff1a<code>sudo modprobe br_netfilter<\/code><\/li>\n\n<li>\u2705 \u542f\u7528\u6865\u63a5\u8f6c\u53d1\uff1a<code>sysctl -p \/etc\/sysctl.d\/k8s.conf<\/code><\/li>\n<\/ul>\n<\/li>\n\n<li><strong>\u5bb9\u5668\u8fd0\u884c\u65f6<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u2705 Docker\/containerd <strong>\u5df2\u5b89\u88c5\u5e76\u542f\u52a8<\/strong><\/li>\n\n<li>\u2705 \u6d4b\u8bd5\u5bb9\u5668\u8fd0\u884c\uff1a<code>docker run hello-world<\/code><\/li>\n<\/ul>\n<\/li>\n\n<li><strong>\u955c\u50cf\u8bbf\u95ee<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u2705 <strong>\u9884\u62c9\u53d6\u955c\u50cf<\/strong>\u6216\u914d\u7f6e<strong>\u56fd\u5185\u6e90<\/strong>\uff08\u5173\u952e\uff01\uff09\uff1abashkubeadm config images pull &#8211;image-repository registry.aliyuncs.com\/google_containers<\/li>\n<\/ul>\n<\/li>\n\n<li><strong>\u7aef\u53e3\u68c0\u67e5<\/strong>\n<ul class=\"wp-block-list\">\n<li>\u2705 \u786e\u4fdd <strong>6443\u300110250<\/strong> \u7b49\u7aef\u53e3\u672a\u88ab\u5360\u7528<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p class=\"wp-block-paragraph\"><strong>\u6700\u540e\u6267\u884c\uff1a<\/strong> <code>kubeadm init --dry-run<\/code> \u8fdb\u884c\u6700\u7ec8\u9884\u68c0\u3002<\/p>\n<h4 class=\"wp-block-heading\">\u521d\u59cb\u5316\u96c6\u7fa4<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u4ee5\u4e0b\u547d\u4ee4\u53ea\u80fd\u5728master\u8282\u70b9\u4e0a\u8fdb\u884c<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code>sudo kubeadm init --apiserver-advertise-address=10.10.10.101 --image-repository registry.aliyuncs.com\/google_containers --kubernetes-version v1.28.2 --service-cidr=192.168.0.0\/12 --pod-network-cidr=192.168.0.0\/16<\/code><\/pre>\n<p class=\"wp-block-paragraph\">1.\u64a4\u9500\u7ba1\u7406\u5458\u6743\u9650<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u6b64\u6b65\u9aa4\u53ea\u9700\u5728master\u8282\u70b9\u8fdb\u884c<\/p>\n<\/blockquote>\n<pre class=\"wp-block-code\"><code> 1.\u4e0d\u662froot\u7528\u6237\u7528\u8fd9\u4e2a&lt;br&gt;  mkdir -p $HOME\/.kube&lt;br&gt;  sudo cp -i \/etc\/kubernetes\/admin.conf $HOME\/.kube\/config&lt;br&gt;  sudo chown $(id -u):$(id -g) $HOME\/.kube\/config&lt;br&gt;  systemctl restart kubelet&lt;br&gt; 2.\u662froot\u7528\u6237\u7528\u8fd9\u4e2a&lt;br&gt;  export KUBECONFIG=\/etc\/kubernetes\/admin.conf  #\u4e34\u65f6\u751f\u6548&lt;br&gt;  echo &quot;export KUBECONFIG=\/etc\/kubernetes\/admin.conf&quot; &gt;&gt; \/root\/.bashrc&lt;br&gt;source \/root\/.bashrc   #\u6c38\u4e45\u751f\u6548<\/code><\/pre>\n<p class=\"wp-block-paragraph\">2.node1\u4e0enode2\u8282\u70b9\u52a0\u5165\u96c6\u7fa4<\/p>\n<pre class=\"wp-block-code\"><code>kubeadm join 10.10.10.101:6443 --token mx6jlu.frb3dykrrgofhb5i \\&lt;br&gt;        --discovery-token-ca-cert-hash sha256:e467906a6291973f1c0dc1469d5b9caddda338a5bbcd8cb3ee356003bf84dd62<\/code><\/pre>\n<p class=\"wp-block-paragraph\">\u3010\u6ce8\u610f\u82e5\u4e2d\u9014\u51fa\u73b0\u8bc1\u4e66\u95ee\u9898\u3011<\/p>\n<pre class=\"wp-block-code\"><code>ln -sf \/etc\/kubernetes\/pki\/apiserver-etcd-client.crt \/etc\/kubernetes\/pki\/etcd\/&lt;br&gt;ln -sf \/etc\/kubernetes\/pki\/apiserver-etcd-client.key \/etc\/kubernetes\/pki\/etcd\/&lt;br&gt;# \u786e\u4fdd\u6587\u4ef6\u6709\u6b63\u786e\u7684\u6743\u9650&lt;br&gt;chmod 600 \/etc\/kubernetes\/pki\/etcd\/*.key&lt;br&gt;chmod 644 \/etc\/kubernetes\/pki\/etcd\/*.crt&lt;br&gt;&lt;br&gt;# \u68c0\u67e5\u6587\u4ef6\u6240\u6709\u6743&lt;br&gt;chown root:root \/etc\/ku<\/code><\/pre>\n<h4 class=\"wp-block-heading\">\u914d\u7f6ecalico<\/h4>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u5b89\u88c5calico\u914d\u7f6e\u6587\u4ef6<\/p>\n<\/blockquote>\n<pre class=\"wp-block-preformatted\">[root@master ~]# curl -L https:\/\/docs.projectcalico.org\/manifests\/calico.yaml -o calico.yaml<br>  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current<br>                                 Dload  Upload   Total   Spent    Left  Speed<br>100    83  100    83    0     0     90      0 --:--:-- --:--:-- --:--:--    90<br>100  232k  100  232k    0     0   104k      0  0:00:02  0:00:02 --:--:--  290k<\/pre>\n<pre class=\"wp-block-preformatted\"># 1. \u5e94\u7528 Calico \u914d\u7f6e<br>kubectl apply -f calico.yaml<br><br># 2. \u76d1\u63a7\u5b89\u88c5\u8fdb\u5ea6<br>watch kubectl get pods -n kube-system<br><br># 3. \u67e5\u770b\u8282\u70b9\u72b6\u6001\u53d8\u5316<br>watch kubectl get nodes<\/pre>","protected":false},"excerpt":{"rendered":"<p>\u4e3b\u673a\u6e05\u5355 \u4e3b\u673a\u540d IPv4 \u7f51\u5173 dns1 master 10.10.10.101\/24 10.10.10.1 10.10.10.101 node1 10.10.10.102\/24 10.10.10.1 10.10.10.101 node2 10.10.10.103\/24 10.10.10.1 10.10.10.101 windows\/\u7269\u7406\u673a 10.10.10.2\/24 10.10.10.1 1. [&hellip;]<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[5,11],"class_list":["post-133","post","type-post","status-publish","format-standard","hentry","category-linux","tag-linux","tag-11"],"_links":{"self":[{"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/posts\/133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/comments?post=133"}],"version-history":[{"count":2,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/posts\/133\/revisions"}],"predecessor-version":[{"id":171,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/posts\/133\/revisions\/171"}],"wp:attachment":[{"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/media?parent=133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/categories?post=133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.moxbai.cn\/index.php\/wp-json\/wp\/v2\/tags?post=133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}