Skip to content

Instantly share code, notes, and snippets.

@olljanat

olljanat/k3os-rootless.yaml

Last active January 24, 2021 21:27
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save olljanat/57f95d228538bd0c31609ff71da8c2c5 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save olljanat/57f95d228538bd0c31609ff71da8c2c5 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. olljanat revised this gist Jan 24, 2021. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion k3os-rootless.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -3,7 +3,8 @@ run_cmd:
    - "chmod a+r /dev/kmsg"
    - "touch /var/log/k3s-service.log"
    - "chown rancher /var/log/k3s-service.log"
    - "chown rancher /var/lib/rancher/k3s/agent/etc/crictl.yaml"
    - "if [ ! -f /var/lib/rancher/k3s/agent/etc ]; then mkdir -p /var/lib/rancher/k3s/agent/etc; fi"
    - "chown -R rancher /var/lib/rancher/k3s/agent/etc"
    k3os:
    modules:
    - overlay
  2. olljanat revised this gist Jan 24, 2021. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion k3os-rootless.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -13,4 +13,5 @@ k3os:
    sysctls:
    kernel.dmesg_restrict: "0"
    k3s_args:
    - --rootless
    - --rootless
    password: rancher
  3. olljanat created this gist Jan 24, 2021.
    16 changes: 16 additions & 0 deletions k3os-rootless.yaml
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,16 @@
    run_cmd:
    - "echo 0 > /proc/sys/kernel/dmesg_restrict"
    - "chmod a+r /dev/kmsg"
    - "touch /var/log/k3s-service.log"
    - "chown rancher /var/log/k3s-service.log"
    - "chown rancher /var/lib/rancher/k3s/agent/etc/crictl.yaml"
    k3os:
    modules:
    - overlay
    - nf_conntrack
    - br_netfilter
    - iptable_nat
    sysctls:
    kernel.dmesg_restrict: "0"
    k3s_args:
    - --rootless