bitcoin-tutorials/k8s/install.microk8s.sh at master · securitybrahh/bitcoin-tutorials · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
#!/bin/bash

# install microk8s and helm on Debian 11 - RaspiBlitz

if [ "$1" = on ]; then
  sudo apt update

  SSDmount="/mnt/ext"
  sudo mkdir -p /var/snap
  sudo mv -f /var/snap ${SSDmount}/
  sudo ln -s ${SSDmount}/snap /var/snap

  sudo apt install -y snapd
  sudo snap install microk8s --classic --channel=1.23/stable

  sudo adduser --disabled-password --gecos "" k8s
  sudo usermod -a -G sudo,bitcoin,debian-tor,microk8s k8s
  echo '/usr/share/doc/fzf/examples/key-bindings.bash' >> /home/k8s/.bashrc
  echo '/usr/share/doc/fzf/examples/completion.bash' >> /home/k8s/.bashrc
  echo 'export PATH=/snap/bin:$PATH' | sudo tee -a /home/k8s/.profile
  echo "\
alias kubectl='microk8s kubectl'
alias egrep='egrep --color=auto'
alias fgrep='fgrep --color=auto'
alias g='git'
alias grep='grep --color=auto'
alias gs='git status'
alias k='kubectl'
alias l='ls -CF'
alias la='ls -A'
alias ll='ls -alF'
alias ls='ls --color=auto'
alias tf='terraform'\
" | sudo -u k8s tee -a /home/k8s/.bash_aliases

  # troubleshooting steps on Debian
  # https://microk8s.io/docs/troubleshooting
  sudo iptables -P FORWARD ACCEPT
  sudo apt-get install -y iptables-persistent
  echo '{
      "insecure-registries" : ["localhost:32000"]
  }
  ' | sudo tee -a /etc/docker/daemon.json

  sudo ufw allow in on vxlan.calico && sudo ufw allow out on vxlan.calico
  sudo ufw allow in on cali+ && sudo ufw allow out on cali+
  sudo ufw allow 16443 comment "microk8s"
  sudo ufw allow 10443 comment "kubernetes-dashboard"

  ## part of the docker install script
  # echo "### 3) Symlink the working directory to the SSD"
  sudo systemctl stop docker
  sudo systemctl stop docker.socket
  sudo mkdir -p /var/lib/docker
  sudo mv -f /var/lib/docker ${SSDmount}/
  sudo ln -s ${SSDmount}/docker /var/lib/docker
  sudo systemctl start docker
  sudo systemctl start docker.socket

  sudo -u k8s /snap/bin/microk8s stop

  ## symlink the microk8s containerd and default-storage to the SSD
  SSDmount="/mnt/ext"

  sudo mkdir -p ${SSDmount}/microk8s/common/var/lib/containerd
  sudo mkdir -p ${SSDmount}/microk8s/common/run/containerd

#   echo "--config \${SNAP_DATA}/args/containerd.toml
# --root ${SSDmount}/microk8s/common/var/lib/containerd
# --state ${SSDmount}/microk8s/common/run/containerd
# --address \${SNAP_COMMON}/run/containerd.sock
# " | sudo tee /var/snap/microk8s/current/args/containerd

  sudo -u k8s /snap/bin/microk8s start

  sudo -u k8s /snap/bin/microk8s enable storage
  #microk8s enable helm
  #microk8s enable dns
  #microk8s enable dashboard
  #microk8s enable ingress
  #microk8s enable registry

  # make the config permanent
  sudo -u k8s /snap/bin/microk8s config | sudo -u k8s tee /home/k8s/.kube/config
  sudo chmod 0600 /home/k8s/.kube/config

  # helm
  sudo snap install helm --classic
fi

if [ "$1" = off ]; then

 helm uninstall galoy
 sudo snap remove helm
 microk8s reset --destroy-storage
 microk8s stop
 sudo snap remove microk8s
 sudo apt remove -y snapd --purge
 sudo rm -rf /mnt/ext/snap

fi