Fred

关于这个local repo，我记得你有个文档提到，如果直接FROM nginx:1.9.1， 两个COPY --from [bionic|focal] /ubuntu /usr/share/nginx/html是错的。我改成COPY --from [bionic|focal] /ubuntu /usr/share/nginx/html/ubuntu就可以了。对于上面这个，好像路径又有所不同。另外，那个文档提到type=tar可以生成tar包导入，但是entrypoint会在import时丢掉，所以内置nginx不会启动，解决这个问题需要在import的时候加上-change 'CMD /usr/sbin/nginx -g "daemon off;"' 选项

又发现2个失败点： 1. node之前安装了较新版本的containerd，它会报告没有带允许降级选项而放弃，出错退出； 2. 同样的kernel精确版本号4.15.0-154-generic #161-Ubuntu，有的node发现没有bridge-nf-call-iptables行，出错退出； ```bash fatal: [node1]: FAILED! => changed=false msg: |- Failed to reload sysctl: net.ipv4.ip_forward = 1 net.ipv4.ip_local_reserved_ports = 30000-32767 sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such...

modprobe br_netfilter解决了这个问题 https://blog.csdn.net/shida_csdn/article/details/99571884

3. install.sh remove不清理offline source list ```bash root@node2:~# ll /etc/apt/sources.list.d/offline-resources.list* -rw-r--r-- 1 root root 66 Sep 6 15:18 /etc/apt/sources.list.d/offline-resources.list -rw-r--r-- 1 root root 66 Sep 6 14:51 /etc/apt/sources.list.d/offline-resources.list.bak root@node2:~# apt update...

4. 找不到Packages目录出错，实际目录是这样的： ```bash root@fredvb:~/kubeplay/resources/nginx/ubuntu/amd64/bionic# tree -L 2 . ├── archive.ubuntu.com │   └── ubuntu ├── download.docker.com │   └── linux └── Packages.gz 4 directories, 1 file ```

终于成功了一次，删除了cgroupv2，重启 ```bash =============================================================================== kubernetes-apps/ansible : Kubernetes Apps | Lay Down CoreDNS templates --------------------------------------------------------------------------- 4.58s kubernetes-apps/ansible : Kubernetes Apps | Start Resources -------------------------------------------------------------------------------------- 4.52s download : download | Download files /...

这是我目前还需要手动解决 ```bash #!/bin/bash # one shot # iptables -A FORWARD -p tcp -m tcp --dport 443 -j ACCEPT # iptables -A FORWARD -p tcp -m tcp --dport 8080 -j ACCEPT...

现在不出502了。但是多次执行安装测试，随机地，会出现末行000错误而终止： ```bash INFO[0000] Creating container nginx INFO[0000] Creating container registry ✔ The registry container is running. ✔ The nginx container is running. ✖ Error: the http://192.168.100.25:8080/certs/rootCA.crt website is not running,...

我估计是nginx还没准备好就访问了，所以是随机出现

this is not a normal add-on, so it requires take care additionally - if k8s apiServers are running on multiple nodes, cilium requires to set a LB IP as API...