Adolfo Delorenzo
39732488ef
Build a custom Tiny Core 17.0 kernel (6.18.2) with missing configs that the stock kernel lacks for container workloads: - CONFIG_CGROUP_BPF=y (cgroup v2 device control via BPF) - CONFIG_DEVTMPFS=y (auto-create /dev device nodes) - CONFIG_DEVTMPFS_MOUNT=y (auto-mount devtmpfs) - CONFIG_MEMCG=y (memory cgroup controller for memory.max) - CONFIG_CFS_BANDWIDTH=y (CPU bandwidth throttling for cpu.max) Also strips unnecessary subsystems (sound, GPU, wireless, Bluetooth, KVM, etc.) for minimal footprint on a headless K8s edge appliance. Init system fixes for successful boot-to-running-pods: - Add switch_root in init.sh to escape initramfs (runc pivot_root) - Add mountpoint guards in 00-early-mount.sh (skip if already mounted) - Create essential device nodes after switch_root (kmsg, console, etc.) - Enable cgroup v2 controller delegation with init process isolation - Mount BPF filesystem for cgroup v2 device control - Add mknod fallback from sysfs in 20-persistent-mount.sh for /dev/vda - Move KubeSolo binary to /usr/bin (avoid /usr/local bind mount hiding) - Generate /etc/machine-id in 60-hostname.sh (kubelet requires it) - Pre-initialize iptables tables before kube-proxy starts - Add nft_reject, nft_fib, xt_nfacct to kernel modules list Build system changes: - New build-kernel.sh script for custom kernel compilation - Dockerfile.builder adds kernel build deps (flex, bison, libelf, etc.) - Selective kernel module install (only modules.list + transitive deps) - Install iptables-nft (xtables-nft-multi) + shared libs in rootfs Tested: ISO boots in QEMU, node reaches Ready in ~35s, CoreDNS and local-path-provisioner pods start and run successfully. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
48 lines
1.7 KiB
Bash
Executable File
48 lines
1.7 KiB
Bash
Executable File
#!/bin/sh
|
|
# 60-hostname.sh — Set system hostname
|
|
# If cloud-init (stage 45) already set the hostname, skip this stage.
|
|
|
|
# Cloud-init writes /etc/hostname and saves to data partition
|
|
if [ "$CLOUDINIT_APPLIED" = "1" ] && [ -f /etc/hostname ]; then
|
|
HOSTNAME="$(cat /etc/hostname)"
|
|
if [ -n "$HOSTNAME" ]; then
|
|
log "Hostname already set by cloud-init: $HOSTNAME"
|
|
return 0
|
|
fi
|
|
fi
|
|
|
|
if [ -f "$DATA_MOUNT/etc-kubesolo/hostname" ]; then
|
|
HOSTNAME="$(cat "$DATA_MOUNT/etc-kubesolo/hostname")"
|
|
elif [ -f /etc/kubesolo/hostname ]; then
|
|
HOSTNAME="$(cat /etc/kubesolo/hostname)"
|
|
else
|
|
# Generate hostname from MAC address of primary interface
|
|
MAC_SUFFIX=""
|
|
for iface in /sys/class/net/*; do
|
|
iface="$(basename "$iface")"
|
|
case "$iface" in lo|docker*|veth*|br*|cni*) continue ;; esac
|
|
MAC_SUFFIX="$(cat "/sys/class/net/$iface/address" 2>/dev/null | tr -d ':' | tail -c 7)"
|
|
break
|
|
done
|
|
HOSTNAME="kubesolo-${MAC_SUFFIX:-unknown}"
|
|
fi
|
|
|
|
hostname "$HOSTNAME"
|
|
echo "$HOSTNAME" > /etc/hostname
|
|
echo "127.0.0.1 $HOSTNAME" >> /etc/hosts
|
|
|
|
# Generate /etc/machine-id if missing (kubelet requires it)
|
|
if [ ! -f /etc/machine-id ]; then
|
|
if [ -f "$DATA_MOUNT/etc-kubesolo/machine-id" ]; then
|
|
cp "$DATA_MOUNT/etc-kubesolo/machine-id" /etc/machine-id
|
|
else
|
|
# Generate from hostname hash (deterministic across reboots)
|
|
printf '%s' "$HOSTNAME" | md5sum 2>/dev/null | cut -d' ' -f1 > /etc/machine-id || \
|
|
cat /proc/sys/kernel/random/uuid 2>/dev/null | tr -d '-' > /etc/machine-id || true
|
|
# Persist for next boot
|
|
cp /etc/machine-id "$DATA_MOUNT/etc-kubesolo/machine-id" 2>/dev/null || true
|
|
fi
|
|
fi
|
|
|
|
log_ok "Hostname set to: $HOSTNAME"
|