fedora-coreos(fcos)
https://getfedora.org/coreos/
https://docs.fedoraproject.org/en-US/fedora-coreos/
step1: download
https://getfedora.org/en/coreos/download?tab=cloud_operators&stream=stable
根據平台選擇對應的版本，bare-metal(裸金屬/裸機)
vmware.x86_64.ova
fedora-coreos-32.20200629.3.0-vmware.x86_64.ova
step2: fcos config
https://docs.fedoraproject.org/en-US/fedora-coreos/provisioning-vmware/
fcc config
https://docs.fedoraproject.org/en-US/fedora-coreos/fcct-config/
#Configuration process
Ignition configurations are formatted as JSON, which is quick and easy for a machine to read. However, these files are not easy for humans to read or write. The solution is a two-step configuration process that is friendly for both humans and machines:
Produce a YAML-formatted Fedora CoreOS Configuration (FCC) file.
Run the Fedora CoreOS Configuration Transpiler (fcct) to convert the YAML file into a JSON Ignition file.
During the transpilation process, fcct verifies the syntax of the YAML file, which can catch errors before you use it to launch the FCOS system.
Once you have an Ignition (.ign) file, you can use it to boot an FCOS system in a VM or install it on bare metal
fcos.fcc -->fcos.ign(json)
generate ras pairs
ssh-keygen -t rsa -P ''
fcos.fcc
variant: fcos
version: 1.0.0
storage:
files:
- path: /etc/NetworkManager/system-connections/eth0.nmconnection
mode: 0600
overwrite: true
contents:
inline: |
[connection]
type=ethernet
interface-name=eth0
[ipv4]
method=manual
addresses=172.24.100.200/12
gateway=172.16.0.2
dns=223.5.5.5;8.8.8.8
passwd:
users:
- name: core
ssh_authorized_keys:
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsKc8PGzOU/+i73RqyHknBfiIMaHETSFjPvCgVcysx41v0jazIZzaGl//7G+MgEQrU0yxR6LaC2RFTGN8D0w2Ugqnvocuudr+jVoTrC0KrPv1Dhqepgnk8cg2QGHWpwhg2vUx6arW0MNbUo35q0Q1cdBjYcMctwIuT8p39uGYjIk/PkQvFtc3czGlxeLQAwGFTQgNkUTOEAuV/VgX3gmzrYBnnrKxRZKZkzt9a3VD8hCuDPV6aJixzN+H33Ix5ajEU/etXX5eUZXcWa8EbF0+acsPeVgB/vaqKDGjXbB3ngcsKoaeBX24FwtBdr/VydYtnyOrDvRt12i+GAwKuWJol"
groups: [ sudo, docker ]
convert fcc->ign
https://docs.fedoraproject.org/en-US/fedora-coreos/using-fcct/
docker pull quay.io/coreos/fcct
docker pull quay.mirrors.ustc.edu.cn/coreos/fcct
docker run -i --rm quay.io/coreos/fcct --pretty --strict <fcos.fcc > fcos.ign
encoding
cat fcos.ign | base64 -w0
base64
xxxxx
step3: import ova to vmware
文件--->打開--->xxxx.ova
base64加密的數據 //本質就是fcos.ign
base64 //數據加密方式
step4: ssh login
https://docs.fedoraproject.org/en-US/fedora-coreos/static-ip-config/
#通過console看到自動分配的ip,查看網卡名字
nmcli connection show
/etc/NetworkManager/system-connections/eth0.nmconnection
interface-name=eth0 //eth0修改為當前存在的網卡名字
reboot //重啟系統
use passwd auth
https://docs.fedoraproject.org/en-US/fedora-coreos/authentication/
https://busybox.net/downloads/BusyBox.html
[root@k8s-node1 ~]# docker run --rm -it busybox mkpasswd --method=yescrypt
Password:
$1$COK0ZhBw$IYNt06shh71PD/Yf2jcmv/
core/core auth
$1$COK0ZhBw$IYNt06shh71PD/Yf2jcmv/