转载说明：如果您喜欢这篇文章并打算转载它，请私信作者取得授权。感谢您喜爱本文，请文明转载，谢谢。

关联文章：

《RKE快速搭建离线k8s集群并用rancher管理界面》

《附2：rke安装的k8s集群新增主机》

1.创建普通用户sre并赋予sudo权限

# adduser sre# echo "sre ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers# gpasswd -a sre root#将登陆用户sre加入到root用户组中# newgrp root #更新用户组

2.关闭selinux、swap和防火墙

# 关闭selinux# sed -ri 's#(SELINUX=).*#\1disabled#' /etc/selinux/config && setenforce 0# 关闭swap# swapoff -a && sed -i '/swap/s/^/#/g' /etc/fstab# 关闭防火墙# systemctl disable firewalld && systemctl stop firewalld

3.设置内核参数

# modprobe overlay# modprobe br_netfilter

4.在/etc/security/limits.conf末尾是否添加参数

root soft nofile 65535root hard nofile 65535* soft nofile 65535* hard nofile 65535

5.创建/etc/sysctl.d/k8s.conf文件，内容如下

net.ipv6.conf.all.disable_ipv6 = 1net.ipv6.conf.default.disable_ipv6 = 1net.core.wmem_default = 8388608net.core.rmem_default = 8388608net.core.rmem_max = 16777216net.core.wmem_max = 16777216net.ipv4.tcp_timestamps = 0net.ipv4.tcp_synack_retries = 1net.ipv4.tcp_tw_recycle = 1net.ipv4.tcp_tw_reuse = 1net.ipv4.tcp_mem = 94500000 915000000 927000000net.ipv4.tcp_max_orphans = 3276800net.ipv4.ip_local_port_range = 1024 65535net.ipv4.tcp_fin_timeout = 10net.ipv4.tcp_keepalive_time = 100net.ipv4.tcp_syncookies = 1net.ipv4.tcp_max_syn_backlog = 819200net.ipv4.tcp_max_tw_buckets = 20000net.ipv4.tcp_rmem=4096 87380 16777216net.ipv4.tcp_wmem=4096 65536 16777216net.core.netdev_max_backlog=300000net.ipv4.ip_forward = 1net.ipv4.tcp_ecn=0net.ipv4.ip_nonlocal_bind = 1net.ipv4.conf.all.arp_announce = 2net.ipv4.conf.all.arp_ignore = 1net.ipv4.conf.default.rp_filter = 0fs.inotify.max_user_instances = 1280fs.inotify.max_queued_events = 163840fs.inotify.max_user_watches = 8192000vm.swappiness = 10vm.drop_caches = 2net.ipv4.tcp_retries2 = 5net.core.somaxconn = 65535net.bridge.bridge-nf-call-iptables = 1net.bridge.bridge-nf-call-ip6tables = 1vm.max_map_count = 262144

执行命令让配置生效：

sysctl -p &&sysctl -p /etc/sysctl.d/k8s.conf

6.开启ipvs

cat > /etc/sysconfig/modules/ipvs.modules <modprobe -- ip_vsmodprobe -- ip_vs_rrmodprobe -- ip_vs_wrrmodprobe -- ip_vs_shmodprobe -- nf_conntrack_ipv4EOF

7.升级内核版本

此处升级到5.4.124版本上传压缩包kernel5.4.zip到服务器

# 1）安装rpm包：[root@k8s-master01 ~]# cd kernel5.4 && rpm -Uvh --force --nodeps *rpm#确保rpm包安装无误# 2）查看新版本内核顺序：[root@k8s-master01 ~]# awk -F\' '$1=="menuentry " {print $2}' /etc/grub2.cfgCentOS Linux (5.4.124-1.el7.elrepo.x86_64) 7 (Core) #CentOS Linux (3.10.0-1160.15.2.el7.x86_64) 7 (Core)CentOS Linux (3.10.0-957.el7.x86_64) 7 (Core)CentOS Linux (0-rescue-de03a5f3bf5a4b7e9df939c9dc5b428d) 7 (Core)[root@k8s-master01 ~]## 3）修改内核的启动顺序为0：[root@k8s-master01 ~]# sed -i 's#GRUB_DEFAULT=saved#GRUB_DEFAULT=0#g' /etc/default/grub# 查看修改结果：[root@k8s-master01 ~]# grep "GRUB_DEFAULT=0" /etc/default/grubGRUB_DEFAULT=0[root@k8s-master01 ~]# # 4）接着运行grub2-mkconfig命令来重新创建内核配置[root@k8s-master01 kernel5.4]# grub2-mkconfig -o /boot/grub2/grub.cfgGenerating grub configuration file ...Found linux image: /boot/vmlinuz-5.4.124-1.el7.elrepo.x86_64Found initrd image: /boot/initramfs-5.4.124-1.el7.elrepo.x86_64.imgFound linux image: /boot/vmlinuz-3.10.0-957.el7.x86_64Found initrd image: /boot/initramfs-3.10.0-957.el7.x86_64.imgFound linux image: /boot/vmlinuz-0-rescue-c465ccc35a5e40e4ad2da6735b24234aFound initrd image: /boot/initramfs-0-rescue-c465ccc35a5e40e4ad2da6735b24234a.imgdone[root@k8s-master01 kernel5.4]# # 5）重启服务器[root@k8s-master01 ~]# reboot# 6）检查内核版本[root@k8s-master01 ~]# uname -r5.4.124-1.el7.elrepo.x86_64[root@k8s-master01 ~]#

8.docker版本离线安装

dockerce-20.zip上传到服务器并解压

1）安装docker-ce

# cd dockerce-20 && ./install.sh -f docker-20.10.6.tgz# 设置docker开启自启动：# systemctl enable docker

2）创建镜像加速文件：/etc/docker/daemon.json

{"graph":"/home/docker","exec-opts":["native.cgroupdriver=systemd"],"insecure-registries": ["harbor.test.com:8000"], #私有harbor镜像仓库地址"registry-mirrors": ["https://1l3yp2sl.mirror.aliyuncs.com"], #阿里云加速镜像"bip": "192.168.0.1/24" #指定docker虚拟IP，这}

3）重新加载docker配置并重启

# systemctl daemon-reload # systemctl restart docker