YANO Tetsuro ynott

`k3s`/`RKE2` with external CRI/`containerd` support

While k3s and RKE2 ship with their own statically-compiled containerd binary, sometimes you need to be able to utilize a more standard container socket. Especially if your container-scanner expects a more traditional installation path (i.e. Twistlock/PrismaCloud). This quick guide will show you how to get up and running with an external CRI.

Install containerd

There are better ways to do this, but the most common way of installing containerd is via the docker-ce yum repository.

sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo

Introduction

Installing kubeflow on localmachine is not a simple task. Documentation on the official website might be outdated. At the time of writing, the solutions suggested include miniKF and microk8s. The later sets up GPU passthrough effortlessly.

Install microk8s
Enable microk8s features

On the host

Ensure these modules are loaded

cat /proc/sys/net/bridge/bridge-nf-call-iptables

Disable swap

sysctl vm.swappiness=0
swapoff -a

RKE2 commands

Updated on May 29 to accommodate etcd container not having /bin/sh available anymore.

Install

curl -sL https://get.rke2.io | sh
systemctl daemon-reload
systemctl start rke2-server

Instructions to hack up WSL2 on Windows 10 Build 18917 to run k3s (Kubernetes) and rio

Install WSL2

https://docs.microsoft.com/en-us/windows/wsl/wsl2-install

I already had Ubuntu-18.04 installed in wsl 1. So I just did wsl --set-version Ubuntu-18.04 2

Compile Kernel

Using Ubuntu 18.04 (I'm sure any distro will work), inside WSL2 download https://thirdpartysource.microsoft.com/download/Windows%20Subsystem%20for%20Linux%20v2/May%202019/WSLv2-Linux-Kernel-master.zip and extract to a folder. The latest version of the kernel source is available at (https://github.com/microsoft/WSL2-Linux-Kernel)

	#!/usr/bin/env python
	# -- coding: utf-8 --

	##
	## @file opencv_csi-camera.py
	## @brief Display the image captured by the CSI camera
	## @author Keitetsu
	## @date 2022/01/15
	## @copyright Copyright (c) 2022 Keitetsu
	## @par License

	#!/usr/bin/env bash
	#
	# Certbot Nginx Reload
	#
	# Let's Encrypt Certbot post hook command for Nginx which checks the updated
	# configuration files and reloads the server if everything validates.
	#
	# Author : Justin Hartman <code@justinhartman.co>
	# Version : 1.0.1
	# License : MIT <https://opensource.org/licenses/MIT>

	version: '3.7'

	services:
	redis:
	restart: always
	image: sameersbn/redis:4.0.9-2
	command:
	- --loglevel warning

	deploy:

	{
	"Version": "2012-10-17",
	"Statement": [
	{
	"Effect": "Allow",
	"Action": [
	"s3:GetBucketLocation",
	"s3:ListAllMyBuckets"
	],
	"Resource": "arn:aws:s3:::*"