[linkerd] where to pass the flag `--set proxyInit.runAsRoot=true`?

thomas.bucaioni

Hello,
The pre-checks say: "There are nodes using the docker container runtime and proxy-init container must run as root user. Try installing linkerd via --set proxyInit.runAsRoot=true"
But when I run the install script with:

curl -sL run.linkerd.io/install > linkerd-install.sh
sudo ./linkerd-install.sh --set proxyInit.runAsRoot=true

the same happens.
Maybe it takes to install Linkerd on the cloud? My cluster runs in virt-manager with 2 nodes

thomas.bucaioni

On a fresh install with containerd in qemu/kvm, it goes well

chrispokorni

Hi @thomas.bucaioni,

The calico network plugin is responsible for setting up one or multiple IP pools for the pods running in the Kubernetes cluster. By default, all nodes host subnets of a given pool, but node selectors can be used to isolate a specific pool to a desired subset of nodes of the cluster.

https://projectcalico.docs.tigera.io/getting-started/kubernetes/hardway/configure-ip-pools

Regards,
-Chris

alihasanahmedk

hi @thomas.bucaioni this flag will be passed in linkerd install command. skip the check --pre command and directly installed the linkerd with this flag.

linkerd install --set proxyInit.runAsRoot=true | kubectl apply -f -

thomas.bucaioni

Same on aws:

ubuntu@cpnode:~$ curl -sL run.linkerd.io/install | sh
Downloading linkerd2-cli-stable-2.11.2-linux-amd64...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 44.7M  100 44.7M    0     0  6348k      0  0:00:07  0:00:07 --:--:-- 7091k
Download complete!

Validating checksum...
Checksum valid.

Linkerd stable-2.11.2 was successfully installed 🎉


Add the linkerd CLI to your path with:

  export PATH=$PATH:/home/ubuntu/.linkerd2/bin

Now run:

  linkerd check --pre                     # validate that Linkerd can be installed
  linkerd install | kubectl apply -f -    # install the control plane into the 'linkerd' namespace
  linkerd check                           # validate everything worked!
  linkerd dashboard                       # launch the dashboard

Looking for more? Visit https://linkerd.io/2/tasks

ubuntu@cpnode:~$ export PATH=$PATH:/home/ubuntu/.linkerd2/bin
ubuntu@cpnode:~$ linkerd check --pre
there are nodes using the docker container runtime and proxy-init container must run as root user.
try installing linkerd via --set proxyInit.runAsRoot=true

But a simple service exposed doesn't seem to work neither...

thomas.bucaioni

Now I get:

‼ cluster networks can be verified
    the following nodes do not expose a podCIDR:
    wnode
    see https://linkerd.io/2.11/checks/#l5d-cluster-networks-verified for hints

but since only calico sets the pod Cidr, the worker node can't expose one?

thomas.bucaioni

Hi @chrispokorni
Of course, calico have more options than just setting a Cidr. Thank you for the link

thomas.bucaioni

Hi @alihasanahmedk
Great, thank you for your help

alihasanahmedk

Always welcome @thomas.bucaioni