fedora-coreos(fcos)
https://getfedora.org/coreos/
https://docs.fedoraproject.org/en-US/fedora-coreos/
step1: download
https://getfedora.org/en/coreos/download?tab=cloud_operators&stream=stable
根据平台选择对应的版本，bare-metal(裸金属/裸机)
vmware.x86_64.ova
fedora-coreos-32.20200629.3.0-vmware.x86_64.ova
step2: fcos config
https://docs.fedoraproject.org/en-US/fedora-coreos/provisioning-vmware/
fcc config
https://docs.fedoraproject.org/en-US/fedora-coreos/fcct-config/
#Configuration process
Ignition configurations are formatted as JSON, which is quick and easy for a machine to read. However, these files are not easy for humans to read or write. The solution is a two-step configuration process that is friendly for both humans and machines:
Produce a YAML-formatted Fedora CoreOS Configuration (FCC) file.
Run the Fedora CoreOS Configuration Transpiler (fcct) to convert the YAML file into a JSON Ignition file.
During the transpilation process, fcct verifies the syntax of the YAML file, which can catch errors before you use it to launch the FCOS system.
Once you have an Ignition (.ign) file, you can use it to boot an FCOS system in a VM or install it on bare metal
fcos.fcc -->fcos.ign(json)
generate ras pairs
ssh-keygen -t rsa -P ''
fcos.fcc
variant: fcos
version: 1.0.0
storage:
files:
- path: /etc/NetworkManager/system-connections/eth0.nmconnection
mode: 0600
overwrite: true
contents:
inline: |
[connection]
type=ethernet
interface-name=eth0
[ipv4]
method=manual
addresses=172.24.100.200/12
gateway=172.16.0.2
dns=223.5.5.5;8.8.8.8
passwd:
users:
- name: core
ssh_authorized_keys:
- "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsKc8PGzOU/+i73RqyHknBfiIMaHETSFjPvCgVcysx41v0jazIZzaGl//7G+MgEQrU0yxR6LaC2RFTGN8D0w2Ugqnvocuudr+jVoTrC0KrPv1Dhqepgnk8cg2QGHWpwhg2vUx6arW0MNbUo35q0Q1cdBjYcMctwIuT8p39uGYjIk/PkQvFtc3czGlxeLQAwGFTQgNkUTOEAuV/VgX3gmzrYBnnrKxRZKZkzt9a3VD8hCuDPV6aJixzN+H33Ix5ajEU/etXX5eUZXcWa8EbF0+acsPeVgB/vaqKDGjXbB3ngcsKoaeBX24FwtBdr/VydYtnyOrDvRt12i+GAwKuWJol"
groups: [ sudo, docker ]
convert fcc->ign
https://docs.fedoraproject.org/en-US/fedora-coreos/using-fcct/
docker pull quay.io/coreos/fcct
docker pull quay.mirrors.ustc.edu.cn/coreos/fcct
docker run -i --rm quay.io/coreos/fcct --pretty --strict <fcos.fcc > fcos.ign
encoding
cat fcos.ign | base64 -w0
base64
xxxxx
step3: import ova to vmware
文件--->打开--->xxxx.ova
base64加密的数据 //本质就是fcos.ign
base64 //数据加密方式
step4: ssh login
https://docs.fedoraproject.org/en-US/fedora-coreos/static-ip-config/
#通过console看到自动分配的ip,查看网卡名字
nmcli connection show
/etc/NetworkManager/system-connections/eth0.nmconnection
interface-name=eth0 //eth0修改为当前存在的网卡名字
reboot //重启系统
use passwd auth
https://docs.fedoraproject.org/en-US/fedora-coreos/authentication/
https://busybox.net/downloads/BusyBox.html
[root@k8s-node1 ~]# docker run --rm -it busybox mkpasswd --method=yescrypt
Password:
$1$COK0ZhBw$IYNt06shh71PD/Yf2jcmv/
core/core auth
$1$COK0ZhBw$IYNt06shh71PD/Yf2jcmv/