My Rancher run as

docker run -d --privileged --name=rancher-2.9.1 --restart=unless-stopped -p 80:80 -p 443:443 -v /opt/rancher:/var/lib/rancher rancher/rancher:v2.9.1 --acme-domain <http://xxxx.net|xxxx.net>

After that I am trying to install RKE2 via rancher UI when I setup in UI

CATTLE_AGENT_FALLBACK_PATH="/opt/bin" curl -fL <https://xxxxt.net/system-agent-install.sh> | sudo CATTLE_AGENT_FALLBACK_PATH="/opt/bin" sh -s - --server <https://xxxxt.net> --label '<http://cattle.io/os=linux|cattle.io/os=linux>' --token c5t55xx9h7k88n7gvq55bcsjkrxx7hzl2h6dndsbj4lk9mlx47kvsq --etcd --controlplane --worker

when I run this on the new node I get

[INFO]  Label: <http://cattle.io/os=linux|cattle.io/os=linux>
[INFO]  Role requested: etcd
[INFO]  Role requested: controlplane
[INFO]  Role requested: worker
[INFO]  CA strict verification is set to true
[INFO]  Using default agent configuration directory /etc/rancher/agent
[INFO]  Using default agent var directory /var/lib/rancher/agent
[FATAL]  Aborting system-agent installation due to requested strict CA verification with no CA checksum provided