coreos

Ansible won't let me connect through SSH

时光毁灭记忆、已成空白 提交于 2019-12-21 07:27:12
问题 I'm trying to connect from one server to another. In fact I'm trying to connect to my host OS (CoreOS) from within a docker container. I have set up a RSA key and it works like a charm when using standard command line to connect to the remote host. It works as expected. When I'm trying to run ansible customercare -m ping --user=core --connection=ssh --private-key=/home/jenkins/.ssh/id_rsa I'm met with this error 10.45.1.107 | FAILED => SSH encountered an unknown error during the connection.

Docker container logs taking all my disk space

会有一股神秘感。 提交于 2019-12-20 08:48:06
问题 I am running a container on a VM. My container is writing logs by default to /var/lib/docker/containers/CONTAINER_ID/CONTAINER_ID-json.log file until the disk is full. Currently, I have to delete manually this file to avoid the disk to be full. I read that in Docker 1.8 there will be a parameter to rotate the logs. What would you recommend as the current workaround? 回答1: Docker 1.8 has been released with a log rotation option. Adding: --log-opt max-size=50m when the container is launched does

从零开始搭建内网高可用k8s集群

笑着哭i 提交于 2019-12-14 04:01:27
从零开始搭建内网高可用k8s集群 前言 前期准备 服务器硬件准备 服务器软件准备 第一步-搭建内网yum仓库 root@test: root@node2: root@master1, master2, node1 第二步-搭建内网harbor服务器 root@test: root@ALL: root@node2: 第三步-在master1,master2节点上搭建haproxy+keepalived框架 root@master1,master2: 第四步-部署k8s集群 root@master1: root@master2: root@node1,node2: 第五步-部署dashboard root@master1: 第六步-搭建ceph root@ALL: myceph@node2: root@node2: 前言 前段时间由于项目需求,需要搭建k8s集群,由于是首次接触,因此经验不足,只搭建了一个最基础的简单集群,现重新在内网搭建高可用集群+分布式存储,记录搭建过程 前期准备 服务器硬件准备 服务器 ip 系统 master1 172.16.140.100 centos7 master2 172.16.140.101 centos7 node1 172.16.140.102 centos7 node2 172.16.140.103 centos7 test——外网服务器

CoreOS: config network interface on simple machine call missing resources

送分小仙女□ 提交于 2019-12-13 00:48:55
问题 I'm following official documentation of CoreOS configuration with Vagrant step by step, and when I execute command vagrant up It's present some problem on phase: Configuring and enabling network interfaces... . The output: devops@devops-server:~/workspace/coreos-vagrant$ vagrant up Bringing machine 'core-01' up with 'virtualbox' provider... ==> core-01: Importing base box 'coreos-alpha'... ==> core-01: Matching MAC address for NAT networking... ==> core-01: Setting the name of the VM: coreos

CoreOS那些事之Rkt容器尝鲜(上)

痴心易碎 提交于 2019-12-12 19:46:24
【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>> 从CoreOS发布Rocket应用容器项目到现在,已经过去半年时间了。为了增加辨识度,项目更名为了 Rkt 。在沉寂了许久后,最近又开始在社区里出现了一些新鲜的声音。 首先是4月7日的一条新闻, Google领头投资CoreOS公司1200万美元 以共同合作发展旗下的Kubernetes组件。此次合作除了促成新的商业发行版 Tectonic 的诞生,也使得Rkt容器与Kubernetes的关系拉近了一步:Kubernetes将提供对Rkt的友好支持,而Rkt则将沿用Kubernetes的Pods等概念来规划容器。 随后的4月20日,VMWare发布了旗下的通过容器部署应用的开源操作系统发行版: Photon 。这个项目比较闪亮的地方在于,除了最知名的Docker容器,Photon还支持另外两种容器标准:CloudFoundry旗下的Garden,以及我们即将介绍的AppC/Rkt。CoreOS也在多篇博客中 暗示 VMWare其实以已经是AppC规范社区的一员。 就在5月4日的CoreOS Fest大会上,Linux大鳄红帽公司(Red Hat)联合谷歌(Google)、VMware和 Apcera 共同宣布,将大力支持AppC社区的发展。红帽和谷歌甚至确认 将派出工程师协助维护AppC项目 。

CoreOS那些事之Rkt容器尝鲜(下)

元气小坏坏 提交于 2019-12-12 18:45:39
【推荐】2019 Java 开发者跳槽指南.pdf(吐血整理) >>> 2015年是各种容器技术与名词扎堆的一年,Docker的出现使得“应用容器”的实施变得易如反掌的同时,也带动了它的许多竞争者。其中一个比较有趣的看点就在于“容器规范”的较量,最近红帽和英特尔也按捺不住,拿出自家的产品趁势搅局。 5月14日,红帽宣布了新的 多容器应用规范Nulecule (DockOne 翻译了这篇新闻 ),同时推出符合这个规范的一个实现:AtomicApp。(这个路子怎么看都有点像AppC和Rkt采用的模式) 因特尔则是发挥自家的特长,在5月18日,发布了 介于虚拟机与容器之间的跨界产品ClearLinux (DockOne同样 翻译了这篇新闻 )。之所以特别要提这个项目,是因为它首先会实现基于Rkt/AppC规范的容器模型,而将Docker放在了其次的位置。 “容器规范”的概念,看起来让人有些摸不着头脑,但在容器业界中,它确实是颇具诱惑力的一块蛋糕。在这一篇里,我们就来聊一聊支撑Rkt背后的那个“容器规范”:AppC Spec。 AppC规范究竟约定了什么 使用了开源软件的人,未必都会有心情仔细阅读各种开源协议的内容。大多数的使用容器产品用户,也不见得要对容器规范的内容有很高的兴致。 不过,为了更好的理解后面将要介绍到的相关工具,还是不妨稍微深入的了解一些 AppC规范 约定的内容

supervisord: is it possible to redirect subprocess stdout back to supervisord?

偶尔善良 提交于 2019-12-12 16:12:33
问题 I'm using supervisord as the entry point for Docker containers as described in https://docs.docker.com/articles/using_supervisord/, I want all logs to be written to stdout so I can take advantage of builtin tools like docker logs or systemd's journal, especially if running the containers on CoreOS. for stderr there's redirect_stderr=true option for subprocesses, is it possible to redirect the subprocess stdout back to supervisord somehow and not deal with actual log files ? 回答1: You can

Why does Kubernetes apiserver present a bad certificate to the etcd server?

元气小坏坏 提交于 2019-12-12 01:45:56
问题 Running Kubernetes on CoreOS on an AWS EC2 instance, I am unable to execute apiserver via a hyperkube Docker container successfully. The problem is that the etcd server refuses connections due to a bad certificate. What happens is this: $ docker run -v /etc/ssl/etcd:/etc/ssl/etcd:ro gcr.io/google_containers/hyperkube:v1.1.2 /hyperkube apiserver --bind-address=0.0.0.0 --insecure-bind-address=127.0.0.1 --etcd-servers=https://172.31.29.111:2379 --allow-privileged=true --service-cluster-ip-range

viewing log of exited pod

孤人 提交于 2019-12-12 00:57:11
问题 I'm trying to install kubernetes on my CoreOS cluster but it's not that relevant to my question. I'm on Container Linux by CoreOS alpha (1339.0.0) with rkt: rkt Version: 1.25.0 appc Version: 0.8.10 Go Version: go1.7.3 Go OS/Arch: linux/amd64 Features: -TPM +SDJOURNAL I have a specific pod that keeps exiting. for example, rkt list --full shows me: 914c4f3f-6e3a-44c2-a111-bfc91ceb411a kubedns gcr.io/google_containers/kubedns-amd64:1.9 sha512-c7b7c9c4393b exited 2017-03-13 13:34:10.306 +0000 UTC

Access an application running in a Docker Container which is running inside an emulated CoreOS in Ubuntu

家住魔仙堡 提交于 2019-12-11 09:56:14
问题 My problem is: I am running an application called Cloud9 inside a container, this application runs at default on localhost:3131, but it is changeable. This Docker Container is running on a CoreOS VM, and the CoreOS VM is running on Ubuntu 14.04 through VirtualBox. What I need is: from the browser on Ubuntu be able to access the Cloud9 application running inside Docker. I have tried several things to work on the Docker Network (Pipeworks, Docker0 settings, VirtualBox settings, etc), but I am