Linux Hypervisor - rke2 - help

devops

Well-known member
  • Apr 3, 2023
    605
    463
    63
    colombo
    Brothers,

    මට mage lead task වගයක් දුන්නා.
    VM 3 කට ඇක්සස් දුන්නා tailscale thought.

    Vms looks Like C1 C2 C3. මේ host VM හැම එකකම node and master කියලා nested VM 2 ගානෙ තියනවා. ඒ කියන්නෙ ඔක්කොම nested VM 6 ක්.

    Master VM එක k8s control plane එක විදියටත්, node VM එක k8s node එකක් විදියටත් තමා වැඩ කරන්න ඕන.

    පස්සෙ මට wireguard getway server එකකට access දුන්නා. ඕකේ wireguard config 200 ක් හදන්න කිව්වා. මේ ටික කරගත්තා අවුලක් නෑ.

    C2 and C3 Host VM දෙකේ තියන nested VM 4 ඇතුලේ rke2 install කරලත් තියනවා.

    Issue:
    C1 host VM එකේ තියන node vm එක access කරන්න බෑ. master vm එකේ rke2 install කරලත් නෑ.

    1. මට දැන් ඕන access කරන්න බැරි node VM එකේ access හදාගන්න. ඒකෙ rke2 install කරන්න.
    2. master එකෙත් rke2 install කරන්න
    3. Finally control plane 3 කුයි node 3 කුයි තියන rke2 cluster එකක් තමයි හැදෙන්න ඕන.
    පොර මට අර wireguard confige 200 ක් හදන්න කීවෙ university students ල වගේකට මේ cluster එකේ access දෙන්න.

    Intern කෙනෙක් විදියට මේක ටිකක් අමාරු වැඩක් කියලයි මට හිතෙන්නේ. Specially මේ VM වල network part එක එහෙම ගැන මට කිසිම idea එකක් නෑ.

    හිතෙන විදියට මට වැඩේ ගැන understanding එකක් ගන්න linux hypervisor, libvirt, qemu, kvm, vrish වගේ දේවල් ගැන මුලින්ම ඉගෙනගන්න වෙයි වගේ.

    Any suggestions????
     
    • Like
    Reactions: Janatha Jhon

    udithshan

    Active member
  • Jul 1, 2011
    424
    205
    43
    අපි මාතර..!
    Othana access krnna bari nm host karla thyna cloud portal eka patten network connection case athi. ehema natnm wireguard eke config waradi athi. Oka hadanna nm cloud console eka patten VM wala network route wena wdya poddk balanna wei. and wire gurad
     
    • Like
    Reactions: LZP1992

    milkywayromanholiday

    Well-known member
  • Apr 25, 2025
    518
    363
    63
    Gemini 2.5 Pro:

    ## Troubleshooting C1 Node VM Accessibility erişim sorunlarını giderme

    Since the node VM of C1 is inaccessible, let's focus on figuring out why:

    * **Check Nested VM Status on C1 Host**: First, ensure the nested VM is actually running on the C1 host. You might need to use `virsh` (if using KVM/QEMU) or the relevant commands for your hypervisor to check its status.
    * **Review Network Configuration**: This is likely the core issue. Carefully compare the network configuration of C1 and its nested VMs with those of C2 and C3. Pay close attention to:
    * **Bridge/NAT settings**: How are the nested VMs connected to the host and the external network?
    * **IP addressing**: Are there any IP conflicts or incorrect subnet configurations?
    * **DNS settings**: Can the C1 host and its VMs resolve each other's names?
    * **Firewall Rules**: Check the firewall rules (e.g., `iptables`, `firewalld`) on the C1 host and its nested VMs. Are there any rules blocking access to the node VM? 🛡️
    * **Tailscale and WireGuard**: Since you're using Tailscale and WireGuard, ensure their configurations are correct and not interfering with access to the C1 node VM.
    * **Tailscale**: Verify that Tailscale is running and configured correctly on C1 and its nested VMs (if applicable). Check the Tailscale ACLs to ensure they allow the necessary connections.
    * **WireGuard**: Understand how WireGuard is being used. Is it for a VPN connection, and if so, is it configured to allow access to the C1 node VM?
    * **SSH/Access Method**: Double-check the SSH keys and access credentials for the C1 node VM. If you're using SSH, try connecting with verbose mode (`ssh -vvv user@ip_address`) to get more debugging information.

    ## RKE2 Installation RKE2 Kurulumu

    Once you regain access to the C1 node VM, you'll need to install RKE2 on it and the C1 master VM. Here are the general steps:

    1. **Install RKE2**: You can usually install RKE2 with a simple script provided by Rancher. Make sure to use the correct version and role (server or agent) for each VM.
    2. **Configure RKE2**: You'll need to create configuration files (`config.yaml`) for each RKE2 instance, specifying things like the cluster token, server/agent roles, and networking options (especially important in your case!). ⚙️
    3. **Start RKE2**: Once configured, start the RKE2 service on each VM.

    ## RKE2 Cluster Setup RKE2 Küme Kurulumu

    With RKE2 installed and running on all VMs, you can now set up the cluster:

    1. **Initialize the First Master**: Start the RKE2 server on the first master VM. This will initialize the cluster and generate a cluster token.
    2. **Join Other Masters**: Start the RKE2 servers on the other master VMs, providing the cluster token and the IP address of the first master.
    3. **Join Nodes**: Start the RKE2 agents on the node VMs, providing the cluster token and the IP address of one of the master VMs.
    4. **Verify Cluster Status**: Use `kubectl` (you might need to install it separately) to check the status of your cluster and make sure all nodes are registered and ready.

    ## Understanding Networking Ağ Yapılandırmasını Anlama

    Given that the network configuration is a key challenge, here are some tips to help you understand it:

    * **Ask for Documentation**: If possible, ask for any documentation or diagrams of the network setup. 📄
    * **Trace the Network Path**: Use tools like `traceroute` and `ping` to trace the network path between VMs and understand how they communicate. 🗺️
    * **Inspect Network Configurations**: Examine the network configuration files on the host and nested VMs to understand how they are set up.
    * **Seek Help**: Don't hesitate to ask for help from the person who set up the VMs or from online communities like the one you posted on. There are many helpful people in the Linux and Kubernetes communities! 🤝

    This is a complex task, so take it one step at a time and don't get discouraged! By systematically troubleshooting the access issues and carefully configuring RKE2 and the network, you should be able to get your cluster up and running. Good luck! 🚀
     

    LZP1992

    Well-known member
  • Feb 6, 2014
    5,574
    5,851
    113
    @ගෙදර
    Ube company ekakda wada karanne?
    Or freelancing?

    Othana access krnna bari nm host karla thyna cloud portal eka patten network connection case athi. ehema natnm wireguard eke config waradi athi. Oka hadanna nm cloud console eka patten VM wala network route wena wdya poddk balanna wei. and wire gurad
    Mostly inboud and outbound rules
    ------ Post added on May 26, 2025 at 6:50 PM