🚀 Kubernetes 集群搭建超详细教程 | v1.33.1 + Rocky Linux 9.5 + containerd

1cat >> /etc/hosts <<EOF
2192.168.100.10 k8s-master01
3192.168.100.11 k8s-node01
4192.168.100.12 k8s-node02
5EOF

1wget https://github.com/containerd/nerdctl/releases/download/v2.1.3/nerdctl-full-2.1.3-linux-amd64.tar.gz
2tar Cxzvvf /usr/local nerdctl-full-2.1.3-linux-amd64.tar.gz

1containerd -v

1containerd github.com/containerd/containerd/v2 v2.1.3 c787fb98...

1mkdir /etc/containerd
2containerd config default > /etc/containerd/config.toml

1sed -i "s|sandbox = 'registry.k8s.io/pause:3.10'|sandbox = 'registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.10'|" /etc/containerd/config.toml

1sed -i '/^\s*\[plugins.'"'"'io.containerd.cri.v1.images'"'"'.registry\]/{n;s|^\(\s*\)config_path = .*$|\1config_path = '"'"'/etc/containerd/certs.d'"'"'|}' /etc/containerd/config.toml

1mkdir -p /etc/containerd/certs.d/docker.io
2cat > /etc/containerd/certs.d/docker.io/hosts.toml <<-'EOF'
3server = "https://registry.myk8s.cn"
4[host."https://registry.myk8s.cn"]
5  capabilities = ["pull", "resolve", "push"]
6EOF

1systemctl daemon-reload
2systemctl enable --now containerd
3systemctl enable --now buildkit

1nerdctl completion bash > /etc/bash_completion.d/nerdctl
2source /etc/bash_completion.d/nerdctl

1nerdctl run -d -p 8000:80 --name container1 registry.myk8s.cn/library/nginx
2nerdctl ps

1swapoff -a
2sed -i 's/.*swap.*/#&/' /etc/fstab

 1cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
 2br_netfilter
 3EOF
 4modprobe br_netfilter
 5
 6cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
 7net.bridge.bridge-nf-call-ip6tables = 1
 8net.bridge.bridge-nf-call-iptables = 1
 9net.ipv4.ip_forward = 1
10EOF
11
12sysctl --system

 1cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
 2[kubernetes]
 3name=Kubernetes
 4baseurl=https://mirrors.nju.edu.cn/kubernetes/core%3A/stable%3A/v1.33/rpm/
 5enabled=1
 6gpgcheck=1
 7gpgkey=https://mirrors.nju.edu.cn/kubernetes/core%3A/stable%3A/v1.33/rpm/repodata/repomd.xml.key
 8exclude=kubelet kubeadm kubectl cri-tools kubernetes-cni
 9EOF
10
11yum install -y kubelet kubeadm kubectl --disableexcludes=kubernetes
12systemctl enable --now kubelet

1kubectl completion bash > /etc/bash_completion.d/kubectl
2kubeadm completion bash > /etc/bash_completion.d/kubeadm
3source /etc/bash_completion.d/kubectl
4source /etc/bash_completion.d/kubeadm

1cat > /etc/crictl.yaml <<-'EOF'
2runtime-endpoint: unix:///run/containerd/containerd.sock
3image-endpoint: unix:///run/containerd/containerd.sock
4timeout: 10
5debug: false
6EOF
7
8crictl images

1crictl completion bash > /etc/bash_completion.d/crictl
2source /etc/bash_completion.d/crictl

1systemctl stop firewalld
2systemctl disable firewalld

1kubeadm config print init-defaults > kubeadm.yaml
2sed -i 's/.*advert.*/  advertiseAddress: 192.168.100.10/g' kubeadm.yaml
3sed -i 's/.*name.*/  name: k8s-master01/g' kubeadm.yaml
4sed -i "/^\\s*networking:/a\\  podSubnet: 172.16.0.0/16" kubeadm.yaml

1kubeadm config images pull --config kubeadm.yaml

1kubeadm init --config kubeadm.yaml

1mkdir -p $HOME/.kube
2cp /etc/kubernetes/admin.conf $HOME/.kube/config
3chown $(id -u):$(id -g) $HOME/.kube/config

1kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/refs/tags/v3.30.0/manifests/tigera-operator.yaml
2
3wget https://raw.githubusercontent.com/projectcalico/calico/refs/tags/v3.30.0/manifests/custom-resources.yaml
4vim custom-resources.yaml

1cidr: 172.16.0.0/16

1kubectl apply -f custom-resources.yaml

1kubectl get pods -A

1kubeadm token create --print-join-command

1kubeadm join 192.168.100.10:6443 --token xxxxxx.xxxxxx \
2--discovery-token-ca-cert-hash sha256:xxxxxxxxxxxxxxxxxxxxxxxxxxxx \
3--cri-socket=unix:///run/containerd/containerd.sock

1kubectl label nodes k8s-node01 node-role.kubernetes.io/worker=
2kubectl label nodes k8s-node02 node-role.kubernetes.io/worker=

1kubectl get nodes
2kubectl get pod -A