環境準備

• Podman Version: 4.4.4

Rancher 2.7.3

# Start Rancher
sudo podman run -d --restart=unless-stopped   -p 80:80 -p 443:443 -e TZ=Asia/Taipei  --privileged --name=rancher rancher/rancher:v2.7.3

# Check
sudo podman ps -a

# 將images tar 傳到Container
sudo podman cp rancher-2.7.3.tar rancher:/var/lib/rancher/

# 還原tar 成images
sudo podman exec -it  rancher ctr -n k8s.io image import rancher-2.7.3.tar

# Get rancher password
sudo podman logs rancher  2>&1 | grep "Boot"

Hosts

echo "
192.168.61.10 RMS
192.168.61.11 m1
192.168.61.21 w1
192.168.61.22 w2
" | sudo tee -a /etc/hosts

Set ssh env

#!/bin/bash
# ssh env
grep -x 'StrictHostKeyChecking no' /etc/ssh/ssh_config || echo 'StrictHostKeyChecking no' >>/etc/ssh/ssh_config
grep -x 'PermitRootLogin no' /etc/ssh/sshd_config || echo 'PermitRootLogin no' >>/etc/ssh/sshd_config
grep -x 'PermitUserEnvironment yes' /etc/ssh/sshd_config || echo 'PermitUserEnvironment yes' >>/etc/ssh/sshd_config

# ssh enable rsa
grep -x 'HostKeyAlgorithms +ssh-rsa' /etc/ssh/sshd_config || echo 'HostKeyAlgorithms +ssh-rsa' >>/etc/ssh/sshd_config
grep -x 'PubkeyAcceptedKeyTypes +ssh-rsa' /etc/ssh/sshd_config || echo 'PubkeyAcceptedKeyTypes +ssh-rsa' >>/etc/ssh/sshd_config

# restart service
ssh-keygen -t rsa -A

sed -i '/pam_limits.so/s/^session/#session/' /etc/pam.d/sshd

# set sshenv
for user in $(ls /home); do
  if [ ! -d /home/"${user}"/.ssh ]; then
    su "${user}" -c "ssh-keygen -t rsa -P '' -f ~/.ssh/id_rsa &>/dev/null"
    su "${user}" -c "cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys"
  fi
  chmod -R 700 /home/"${user}"/.ssh
  chmod 600 /home/"${user}"/.ssh/id_rsa
  chmod 644 /home/"${user}"/.ssh/id_rsa.pub
done

Create rancher auto-restart bash script

sudo tee /usr/local/bin/start_rancher <<EOF
#!/bin/bash
sudo podman start rancher && exit 0
EOF

sudo tee /usr/local/bin/stop_rancher <<EOF
#!/bin/bash
sudo podman stop rancher && exit 0
EOF

sudo chmod a+x /usr/local/bin/*_rancher

Create systemctl config

# Create config
sudo tee /usr/lib/systemd/system/rancher.service <<EOF
[Unit]
Description=rancher Startup and Shutdown Service
Wants=network.target
After=network-online.target

[Service]
Restart=on-failure
Type=forking
RemainAfterExit=yes
ExecStart=/bin/bash /usr/local/bin/start_rancher
ExecStop=/bin/bash /usr/local/bin/stop_rancher
TimeoutStartSec=1min
TimeoutStopSec=1min
TimeoutStartFailureMode=abort
TimeoutStopFailureMode=abort

[Install]
WantedBy=multi-user.target default.target
EOF

sudo systemctl daemon-reload
sudo systemctl enable rancher.service
sudo systemctl is-enabled rancher.service