c2cf0d9945
* set selinux type t_etc if selinux state is enforcing * workaround with update repo is no longer needed remove comments about failing playbook * grubby is not available in distros using ostree * remove docker support because removed in fcos update install script example with live rootfs * do not call grubby on ostree based distro * update docs enabling containerd on fedora coreos
70 lines
1.8 KiB
Markdown
70 lines
1.8 KiB
Markdown
# Fedora CoreOS
|
|
|
|
Tested with stable version 34.20210611.3.0
|
|
|
|
Because package installation with `rpm-ostree` requires a reboot, playbook may fail while bootstrap.
|
|
Restart playbook again.
|
|
|
|
## Containers
|
|
|
|
Tested with
|
|
|
|
- containerd
|
|
- crio
|
|
|
|
## Network
|
|
|
|
### calico
|
|
|
|
To use calico create sysctl file with ignition:
|
|
|
|
```yaml
|
|
files:
|
|
- path: /etc/sysctl.d/reverse-path-filter.conf
|
|
contents:
|
|
inline: |
|
|
net.ipv4.conf.all.rp_filter=1
|
|
```
|
|
|
|
## libvirt setup
|
|
|
|
### Prepare
|
|
|
|
Prepare ignition and serve via http (a.e. python -m http.server )
|
|
|
|
```json
|
|
{
|
|
"ignition": {
|
|
"version": "3.0.0"
|
|
},
|
|
|
|
"passwd": {
|
|
"users": [
|
|
{
|
|
"name": "ansibleUser",
|
|
"sshAuthorizedKeys": [
|
|
"ssh-rsa ..publickey.."
|
|
],
|
|
"groups": [ "wheel" ]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
```
|
|
|
|
### create guest
|
|
|
|
```shell script
|
|
machine_name=myfcos1
|
|
ignition_url=http://mywebserver/fcos.ign
|
|
|
|
fcos_version=34.20210611.3.0
|
|
kernel=https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/${fcos_version}/x86_64/fedora-coreos-${fcos_version}-live-kernel-x86_64
|
|
initrd=https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/${fcos_version}/x86_64/fedora-coreos-${fcos_version}-live-initramfs.x86_64.img
|
|
rootfs=https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/${fcos_version}/x86_64/fedora-coreos-${fcos_version}-live-rootfs.x86_64.img
|
|
kernel_args="console=ttyS0 coreos.live.rootfs_url=${rootfs} coreos.inst.install_dev=/dev/sda coreos.inst.stream=stable coreos.inst.ignition_url=${ignition_url}"
|
|
sudo virt-install --name ${machine_name} --ram 4048 --graphics=none --vcpus 2 --disk size=20 \
|
|
--network bridge=virbr0 \
|
|
--install kernel=${kernel},initrd=${initrd},kernel_args_overwrite=yes,kernel_args="${kernel_args}"
|
|
```
|