I am trying to install rke2 on rhel9 clone.
I have...
# generala
abundant-smartphone-9806
04/25/2025, 1:35 PMI am trying to install rke2 on rhel9 clone.
I have tried with 1.31 and with 1.30.
Also i have tried to use different version of klipper-help, using something like
--helm-job-image=rancher/klipper-helm:v0.9.2-build20240828 Copy code
rke2 server \
--debug \
--selinuxm
mysterious-animal-29850
04/25/2025, 2:28 PMTo not spam the chat, can you please use https://paste.opensuse.org/ for log sharing.
Can you verify that rke2-selinux and container-selinux package is installed?
Also please share the logs from the helm canal pod. Thanks
a
abundant-smartphone-9806
04/25/2025, 2:36 PMI will edit the post and move output to paste.
I just reinstalled rke2, after running
/usr/bin/rke2-uninstall.sh Copy code
rpm -qa | egrep -i rke\|container
container-selinux-2.232.1-1.el9.noarch
rke2-selinux-0.18-1.el9.noarch
rke2-common-1.31.7~rke2r1-0.el9.x86_64
rke2-server-1.31.7~rke2r1-0.el9.x86_64/var/lib/rancher/rke2/data/v1.31.7-rke2r1-7f85e977b85d/bin/kubectl logs helm-install-rke2-canal-kkchn -n kube-systemm
mysterious-animal-29850
04/25/2025, 3:24 PMhmm, can you grab the events for the helm install pod? sometimes the reason for crashloop gets logged there.
b
bumpy-tomato-36167
04/25/2025, 3:45 PMThis is the script I use to prepare rhel9 for rke2: https://github.com/rancher/terraform-null-rke2-install/blob/main/examples/candidate/prep.sh
a
abundant-smartphone-9806
04/25/2025, 4:06 PMcommand
/var/lib/rancher/rke2/data/v1.31.7-rke2r1-7f85e977b85d/bin/kubectl describe pod helm-install-rke2-canal-kkchn -n kube-system | lessabundant-smartphone-9806
04/25/2025, 4:18 PMfrom terraform-null-rke2-install
i am using /etc/NetworkManager/conf.d/rke2-canal.conf like in https://docs.rke2.io/known_issues#networkmanager
i do not have /etc/NetworkManager/conf.d/global-dns.conf
nm-cloud are not installed
i have ipv6 disabled like in https://access.redhat.com/solutions/8709#rhel789disable
Copy code
# nmcli connection modify <Connection Name> ipv6.addresses "" ipv6.gateway ""
# nmcli connection modify <Connection Name> ipv6.method "disabled"
sed -i 's/^[[:space:]]*::/#::/' /etc/hosts
cat /etc/sysctl.d/ipv6.conf
# Disable IPv6 for all interfaces
net.ipv6.conf.all.disable_ipv6 = 1
# Disable IPv6 for each network interface
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.<interface>.disable_ipv6 = 1m
mysterious-animal-29850
04/25/2025, 5:08 PMSame error as in your logs.
Copy code
Last State: Terminated
Reason: StartError
Message: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: exec: "entry": executable file not found in $PATH
Exit Code: 128mysterious-animal-29850
04/25/2025, 5:09 PMWhich rhel9 clone are you using. Version would be appreciated. Would like to replicate in a vm.
a
abundant-smartphone-9806
04/25/2025, 5:12 PMAlmaLinux 9.5
abundant-smartphone-9806
04/28/2025, 9:17 AMi think the issue might be with the /usr/bin/rke2-uninstall.sh
After clean install of AlmaLinux, applying oscap DISA STIG, the first rke2 server --debug is running ok.
Then, if i running rke2-uninstall, restart, add repo again, then run rke2 server --debug, i get the errors from my post.
I need to do more testing.
m
mysterious-animal-29850
04/28/2025, 2:00 PMIf you ran the install script and the node partially provisioned before, the rke2-uninstall script won't remove the agent tokens from /etc/rancher and some data from /var/lib/rancher. To do a full "clean" of a node, I normally
rm -rvf /etc/rancher /var/lib/rancher14 Views