I followed the instructions downloading the tar.gz...
# rke2
c
I followed the instructions downloading the tar.gz files, the install.sh script, the sha256sum text files, etc. Placed them in a directory called /rke2artifacts, then as root ran
INSTALL_RKE2_ARTIFACT_PATH=/rke2artifacts sh install.sh
. That appears to go just fine and I can see that the tar files end up in /var/lib/rancher/rke2/agent/images. However, when I start the rke2-server service, it keeps trying to pull down images from docker.io which since this is an airgap install I don't think that should be happening (and obviously won't work).
c
if it is failing because it cannot pull things from docker hub then you didn’t get all the right image tarballs.
figure out which tarballs contain the images you’re missing, and make sure you have them on your node.
c
I can see that the images it's pulling are the ones in those tarballs though when I look at the containerd logs
well, trying to pull
c
what makes you think it’s failing because it can’t pull images
c
containerd.log in /var/lib/rancher/rke2/agent/containerd has constant attempting to pull docker.io/rancher/someimage messages and corresponding failure messages
c
show a list of the files you’ve got on your node, and the logs showing it trying to pull them
the rke2 logs will show what images it imports, right after it starts containerd
if you don’t see the images being imported during startup then you don’t have the right tarballs
c
I'm looking through the beginning logs of the rke2-server service start to see if I can see what you are referring to. To get the log messages it will take a few as I'd have to scrub them and clear them from moving off the airgapped network to this machine
I should be able to get you a list of what I downloaded though pretty quickly
Copy code
bfbd978d603b7070f5748c934326db509bf1470c97d3f61a3aaa6e2eed6bd054  install.sh
93feb0b4f22cd0a7c971521126f88e731e8793f1b4ec6d8f9cf25ddbb484e870  rke2-images-all.linux-amd64.txt
9a8c2f4441984d5284ca77548683fcf27f313a907f4ae0d986adc4027b561037  rke2-images-calico.linux-amd64.tar.gz
bd787f40e0ea32380585220b387e137ac99b4ddc4730f2452ac853c22c5d81db  rke2-images-calico.linux-amd64.txt
5b8cc2a8081c42c57b5fbf4176f78b1fdf174cbd847d2f521fce297b5296b2a9  rke2-images-canal.linux-amd64.tar.gz
9dacf0fbf98c07d159e9c33b2a74d8f4424e8ebbfd34fc47b5c6614670521c40  rke2-images-canal.linux-amd64.txt
91a63ee04ffc6257d2f3cd0af48340d18673c564eabcd80970c98ab23bede846  rke2-images-cilium.linux-amd64.tar.gz
a09f130966665844348050ccce58cf396b2b7b461fec774807d7276d64a2d9f6  rke2-images-cilium.linux-amd64.txt
5cdf5f7453a3ab9e444124eec327f5df3cebeae856d2b24a8a7a884bf6cb15ff  rke2-images-core.linux-amd64.tar.gz
1e1978d587715f5d3301ba3679e9ab302bab40c59fbe835c0e9426f50ae9ce52  rke2-images-core.linux-amd64.txt
ae7ebc4b0c8f71bd2fdc2afd8b3c2c1064db41f191c0412dfc9afc4fc4fe7fbd  rke2-images-flannel.linux-amd64.tar.gz
81275811cc227455728a82c38c23f8045230714762f6691a82a35a5867b7848c  rke2-images-flannel.linux-amd64.txt
958e124a8f355d2f8eb04d7d62c0f207b4e487a802f6bca3d0bf8c8267d03dea  rke2-images-harvester.linux-amd64.tar.gz
977364c9bc0a79ca4c34d679c89aa78fb2e747b3947d1cfee53c4858f3040ce6  rke2-images-harvester.linux-amd64.txt
5ac5c6238e343eafbb77b0ce224af6beef1406c3ffa4cebdfe9e14182b45a576  rke2-images-multus.linux-amd64.tar.gz
d3be969b65ede65b6186a4b4a08719daabd03b1fed3f6f7bcd540acd34ab4773  rke2-images-multus.linux-amd64.txt
b0a556f1bd1706b7afe93cdb2fcfad2e86dcb1a8fa81bdbf0fa0e21279f42b08  rke2-images-traefik.linux-amd64.tar.gz
4ef41f862e98878ccc9ac12248699b2386b674ec8787fcff6223cd1a70d03b29  rke2-images-traefik.linux-amd64.txt
b9fa778ca7c0eb9a6cea8879b048bfbb3bfa2ce3ae03aa62cdc25bc7b3d26d2f  rke2-images-vsphere.linux-amd64.tar.gz
4606e956841e7e0ff332459933481e67cef4f6b0ae4a2793d336aa6d352d261f  rke2-images-vsphere.linux-amd64.txt
cba900cf406dffad2422c22aac09897825ca1691e276d3c5602669fc1d862d0b  rke2-images.linux-amd64.tar.gz
d9e37d8a342579a6308a2cc9ed4484e19c6e1cf235b1ee6c0d29a607712a241d  rke2-images.linux-amd64.txt
81ee8483e5251661af41cabfaecfb13094efc97a876e4338e996c4afac7674a9  rke2.linux-amd64
fee27c703ccfbffd304c6e2363feca4ea94b2177681a9da429669dbabb4f75c2  rke2.linux-amd64.tar.gz
be6367a98f15e726543389e403ed8ad6322bc78d38ac2383f475f422ddf42db6  sha256sum-amd64.txt
Those are the files with their sha256sums
I am aware that there may be some in there that won't be used but I didn't think that would be a problem. The instructions really only seem to say that the main tar.gz file I need is the rke2.linux-amd64.tar.gz. I did want to use traefik though, for example, so I grabbed that one since nginx is the default ingress
c
you’re sure that those are from the correct release of rke2? They don’t have versions in the filenames so it can be hard to tell.
the logs will tell you what’s going on though.
also note that you don’t need the text files? I’m not sure why you’d grab those.
c
I'm not sure why I grabbed the txt files either other than at least 2 of the txt files are required, right?
the sha256 sum and the rke2-images-all.linux-amd64.txt?
In the logs, it just goes through extracting charts, extracting manifests, updating manifests and then it starts containerd and immediately goes into "Pulling images from rke2-images-all.linux-amd64.txt" and starts failing to pull stuff
Is that txt file the problem, perhaps? I thought I only grabbed because I was getting a failure without it but I'll try starting up without it
well.. I think that one txt file actually was the problem as this time starting up the logs look MUCH better. Thank you for your help, I think this solved it!
c
no, you don’t need any of the text files. just the tarballs with the images, and the tarball with the binary and systemd units
c
it complains if the sha256 one isn't there because it uses that to verify
c
if you give it text files it tries to pull every image in the text file, even if its already in a tarball. those are meant to be used for preloading from a registry - if you want to make sure all the images are there before it starts.
oh sure you need the checksum file but not any of the image lists
c
but you are correct about the others and I didn't realize that