Kubernetes-V1.14.2 二进制编译安装（环境准备篇）

yum -y install bash-completion.noarch net-tools \
 vim lrzsz wget tree screen lsof tcpdump unzip tree 

tar xf  kernel-ml-4.18.9.tar.gz 
cd /tmp && yum -y install *.rpm 
sed -i 's#GRUB_DEFAULT#\#GRUB_DEFAULT#' /etc/default/grub  
sed -i '3a GRUB_DEFAULT=0' /etc/default/grub 
grub2-mkconfig -o /boot/grub2/grub.cfg 
reboot 
#重启系统查看内核版本 
uname -r   
# 版本号  4.18.9-1.el7.elrepo.x86_64 

#关闭selinux
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
setenforce 0
#关闭防火墙
systemctl stop firewalld && systemctl disable firewalld
#远程连接优化
sed -i 's#GSSAPIAuthentication yes#GSSAPIAuthentication no#g' /etc/ssh/sshd_config
sed -i 's#\#UseDNS yes#UseDNS no#g' /etc/ssh/sshd_config
##开启密码登陆
sed -i 's#PasswordAuthentication no#PasswordAuthentication yes#g' /etc/ssh/sshd_config
#开启root远程登陆
sed -i 's#PermitRootLogin without-password#PermitRootLogin yes#g' /etc/ssh/sshd_config
#重启sshd服务
systemctl restart sshd
#修改系统时区
ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
#修改配置yum源
rm -rf /etc/yum.repos.d/*
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
curl -o /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
yum makecache
#安装基础命令
yum -y install bash-completion.noarch net-tools vim lrzsz wget tree screen lsof tcpdump
#关闭swapp
swapoff -a
/etc/fstab swapp全部注释

# centos7 下需要给网卡建立桥接
vim /etc/sysctl.conf
vm.swappiness = 0
net.ipv4.ip_forward = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
 
sysctl -p

###PS:建立桥接时文件不存在错误用 modprobe br_netfilter

#卸载旧版本
yum remove docker docker-client docker-client-latest docker-common \
docker-latest docker-latest-logrotate docker-logrotate docker-engine
 
#安装docker yum源
yum install -y yum-utils
yum-config-manager --add-repo \
http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo

#安装docker-ce
yum -y install docker-ce-18.06.1.ce-3.el7

# 修改配置文件(指定私有仓库，可忽略跳过)
# tee /etc/docker/daemon.json <<-'EOF'
#{
#  "storage-driver": "overlay2",
#  "registry-mirrors":["https://r2hd8p9u.mirror.aliyuncs.com"],
#  "insecure-registries":["*.*.*.*:5000","192.168.4.126"]
#}
#EOF

systemctl restart docker
systemctl enable docker && systemctl start docker

hostnamectl --static set-hostname  k8s-master
hostnamectl --static set-hostname  k8s-node-1
hostnamectl --static set-hostname  k8s-node-2

vim /etc/hosts

192.168.189.139 k8s-master
192.168.189.131 k8s-node-1
192.168.189.132 k8s-node-2

ssh-keygen -t rsa -P "" -f ~/.ssh/id_rsa
cat /root/.ssh/id_rsa.pub > /root/.ssh/authorized_keys
 
scp -rp /root/.ssh k8s-node-1:/root
scp -rp /root/.ssh k8s-node-2:/root
ssh k8s-master
ssh k8s-node-1
ssh k8s-node-2

mkdir -p /app/kubernetes/{cfg,bin,ssl,log}