k8e check-config 在harbian 22.04上通不过

thomasdba commented 2 years ago

OS： harbian 22.04 (seems based on ubuntu 22.04) arch: x86 64

k8e check-config log is below :

INFO[0000] Acquiring lock file /var/lib/k8e/data/.lock
INFO[0000] Preparing data dir /var/lib/k8e/data/ca5c2f67a814dd475319811b12a7fb6c4302ae5076e46342f40c5d7714a8e917

Verifying binaries in /var/lib/k8e/data/ca5c2f67a814dd475319811b12a7fb6c4302ae5076e46342f40c5d7714a8e917/bin:

sha256sum: good
links: good

System:

/usr/sbin iptables v1.8.7 (nf_tables): should be older than v1.8.0 or in legacy mode (fail)
swap: disabled
routes: ok

Limits:

/proc/sys/kernel/keys/root_maxkeys: 1000000

modprobe: FATAL: Module configs not found in directory /lib/modules/5.15.0-40-generic info: reading kernel config from /boot/config-5.15.0-40-generic ...

Generally Necessary:

cgroup hierarchy: nonexistent?? (fail) (see https://github.com/tianon/cgroupfs-mount)
/usr/sbin/apparmor_parser apparmor: enabled and tools installed
CONFIG_NAMESPACES: enabled
CONFIG_NET_NS: enabled
CONFIG_PID_NS: enabled
CONFIG_IPC_NS: enabled
CONFIG_UTS_NS: enabled
CONFIG_CGROUPS: enabled
CONFIG_CGROUP_CPUACCT: enabled
CONFIG_CGROUP_DEVICE: enabled
CONFIG_CGROUP_FREEZER: enabled
CONFIG_CGROUP_SCHED: enabled
CONFIG_CPUSETS: enabled
CONFIG_MEMCG: enabled
CONFIG_KEYS: enabled
CONFIG_VETH: enabled (as module)
CONFIG_BRIDGE: enabled (as module)
CONFIG_BRIDGE_NETFILTER: enabled (as module)
CONFIG_IP_NF_FILTER: enabled (as module)
CONFIG_IP_NF_TARGET_MASQUERADE: enabled (as module)
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: enabled (as module)
CONFIG_NETFILTER_XT_MATCH_CONNTRACK: enabled (as module)
CONFIG_NETFILTER_XT_MATCH_IPVS: enabled (as module)
CONFIG_IP_NF_NAT: enabled (as module)
CONFIG_NF_NAT: enabled (as module)
CONFIG_POSIX_MQUEUE: enabled

Optional Features:

CONFIG_USER_NS: enabled
CONFIG_SECCOMP: enabled
CONFIG_CGROUP_PIDS: enabled
CONFIG_BLK_CGROUP: enabled
CONFIG_BLK_DEV_THROTTLING: enabled
CONFIG_CGROUP_PERF: enabled
CONFIG_CGROUP_HUGETLB: enabled
CONFIG_NET_CLS_CGROUP: enabled (as module)
CONFIG_CGROUP_NET_PRIO: enabled
CONFIG_CFS_BANDWIDTH: enabled
CONFIG_FAIR_GROUP_SCHED: enabled
CONFIG_RT_GROUP_SCHED: missing
CONFIG_IP_NF_TARGET_REDIRECT: enabled (as module)
CONFIG_IP_SET: enabled (as module)
CONFIG_IP_VS: enabled (as module)
CONFIG_IP_VS_NFCT: enabled
CONFIG_IP_VS_PROTO_TCP: enabled
CONFIG_IP_VS_PROTO_UDP: enabled
CONFIG_IP_VS_RR: enabled (as module)
CONFIG_EXT4_FS: enabled
CONFIG_EXT4_FS_POSIX_ACL: enabled
CONFIG_EXT4_FS_SECURITY: enabled
Network Drivers:
- "overlay":
- CONFIG_VXLAN: enabled (as module) Optional (for encrypted networks):
  - CONFIG_CRYPTO: enabled
  - CONFIG_CRYPTO_AEAD: enabled
  - CONFIG_CRYPTO_GCM: enabled
  - CONFIG_CRYPTO_SEQIV: enabled
  - CONFIG_CRYPTO_GHASH: enabled
  - CONFIG_XFRM: enabled
  - CONFIG_XFRM_USER: enabled (as module)
  - CONFIG_XFRM_ALGO: enabled (as module)
  - CONFIG_INET_ESP: enabled (as module)
  - CONFIG_INET_XFRM_MODE_TRANSPORT: missing
Storage Drivers:
- "overlay":
- CONFIG_OVERLAY_FS: enabled (as module)

STATUS: 2 (fail)

xiaods commented 2 years ago

/usr/sbin iptables v1.8.7 (nf_tables): should be older than v1.8.0 or in legacy mode (fail)

cgroup hierarchy: nonexistent?? (fail)
(see https://github.com/tianon/cgroupfs-mount)

[x] 1. 解决cgroup hierarchy: nonexistent?? (fail)

解决方案：打开文件 /etc/default/grub，添加

GRUB_CMDLINE_LINUX="systemd.unified_cgroup_hierarchy=0"

[x] 2. /usr/sbin iptables v1.8.7 (nf_tables): should be older than v1.8.0 or in legacy mode (fail)

解决方案：

update-alternatives --set iptables /usr/sbin/iptables-legacy

最终解决方案，需要 k8e/contrib/util/check-config.sh 需要优化。

xiaods commented 2 years ago

脚本已经更新，请使用最新的k8e版本部署，可以获得支持。

xiaods commented 2 years ago

v1.21.14-rc3+k8e1 更新了check-config.sh。修复了以上 2个failed的bug。可以直接用了。

xiaods / k8e

k8e check-config 在harbian 22.04上通不过 #251