https://firmware-selector.openwrt.org/
选择路由器型号

openwrt更新固件

### 准备工作

dockerfile
```
FROM python:3.9-slim
# ... 其他配置 ...

# 强制 Python 不缓存 stdout 和 stderr
ENV PYTHONUNBUFFERED=1

CMD ["python", "main.py"]
```
python服务端
```python
import signal
import time
import yaml
import os

# 定义全局变量存储配置
config = {}

def load_config():
    """读取并解析配置文件的函数"""
    global config
    try:
        with open("config.yaml", "r") as f:
            config = yaml.safe_load(f)
        print(f"[{time.strftime('%H:%M:%S')}] 配置已加载: {config}")
    except Exception as e:
        print(f"加载失败: {e}")

def handle_sighup(signum, frame):
    """SIGHUP 信号处理回调函数"""
    print(f"\n捕获到信号 {signum} (SIGHUP)，执行热更新...")
    load_config()

# 1. 初始化加载
load_config()

# 2. 注册信号监听
# 在 Linux 中，SIGHUP 通常用于通知守护进程重新加载配置
signal.signal(signal.SIGHUP, handle_sighup)

print(f"当前进程 PID: {os.getpid()}")
print("正在运行业务逻辑（每5秒循环一次），请尝试发送信号...\n")

try:
    while True:
        print(f"当前 [app_name] 是: {config.get('app_name')}")
        time.sleep(5)
except KeyboardInterrupt:
    print("\n服务已手动停止")
```

### 构建并启动容器
```bash
# 构建
docker build -t reload-test .

# 运行（将宿主机的 config.yaml 挂载进去，实现同步修改）
docker run -d --name my-app -v $(pwd)/config.yaml:/app/config.yaml reload-test

# 查看实时日志
docker logs -f my-app
```



不重启容器下，用Unix 信号量（SIGHUP）热修改docker python服务的配置

## 环境配置

三台主机同时关闭swap：
```bash
sudo swapoff -a
# 永久关闭：编辑 /etc/fstab，注释掉包含 swap 的那一行
sudo sed -i '/swap/s/^/#/' /etc/fstab
```

各主机配置主机名
```bash
Master: sudo hostnamectl set-hostname k8s-master

Node1: sudo hostnamectl set-hostname k8s-node1

Node2: sudo hostnamectl set-hostname k8s-node2
```

三台主机写入hosts
```bash
# 在三台机器上分别执行，确保解析无误
cat <<EOF | sudo tee -a /etc/hosts
192.168.200.150  k8s-master
192.168.200.151  k8s-node1
192.168.200.152  k8s-node2
EOF
```

设置转发ipv4
```bash
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
overlay
br_netfilter
EOF

sudo modprobe overlay
sudo modprobe br_netfilter

# 设置所需的 sysctl 参数，这些参数在重新启动后保持不变
cat <<EOF | sudo tee /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-iptables  = 1
net.bridge.bridge-nf-call-ip6tables = 1
net.ipv4.ip_forward                 = 1
EOF

# 应用 sysctl 参数
sudo sysctl --system
```
三台主机设置Containerd
```bash
sudo apt-get update
sudo apt-get install -y containerd

# 生成默认配置文件
sudo mkdir -p /etc/containerd
containerd config default | sudo tee /etc/containerd/config.toml

# 关键一步：将 SystemdCgroup 设置为 true（为了稳定性）
sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/g' /etc/containerd/config.toml

sudo systemctl restart containerd
```
三台主机安装kubeadm (初始化工具), kubelet (运行代理) 和 kubectl (命令行工具)。
```bash

# 下载 Google Cloud 公开签名秘钥（或者使用阿里云镜像源，如果你在国内的话）
sudo apt-get update
sudo apt-get install -y apt-transport-https ca-certificates curl

# 这里使用阿里云镜像源，速度更快
curl -fsSL https://mirrors.aliyun.com/kubernetes/apt/doc/apt-key.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-archive-keyring.gpg

echo "deb [signed-by=/etc/apt/keyrings/kubernetes-archive-keyring.gpg] https://mirrors.aliyun.com/kubernetes/apt/ kubernetes-xenial main" | sudo tee /etc/apt/sources.list.d/kubernetes.list

sudo apt-get update
sudo apt-get install -y kubelet kubeadm kubectl
sudo apt-mark hold kubelet kubeadm kubectl
```

### 初始化master节点
在master节点
```
sudo kubeadm init \
  --apiserver-advertise-address=192.168.200.150 \
  --image-repository registry.aliyuncs.com/google_containers \
  --kubernetes-version v1.28.2 \
  --service-cidr=10.96.0.0/12 \
  --pod-network-cidr=10.244.0.0/16
 ```
 初始化后执行
 ```
 mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config
```
看到一条
`sudo kubeadm join 192.168.200.150:6443 --token <你的token> \
    --discovery-token-ca-cert-hash sha256:<你的哈希值>`指令
 
复制后在其他两个节点粘贴
### 查看node节点
`kubectl get nodes`

状态是 NotReady

执行`kubectl apply -f https://github.com/flannel-io/flannel/releases/latest/download/kube-flannel.yml`

再次查看
`kubectl get nodes`

| NAME | STATUS | ROLES | VERSION |
| :--- | :--- | :--- | :--- |
| k8s-master | Ready | control-plane | v1.28.2 |
| k8s-node1 | Ready | `<none>` | v1.28.2 |
| k8s-node2 | Ready | `<none> `| v1.28.2 |

## 问题排查
出现连接问题
master节点
```
kubectl proxy --address='0.0.0.0' --accept-hosts='^*$ &'
```
--address='0.0.0.0'：允许监听所有网卡，而不仅仅是 127.0.0.1。

--accept-hosts='^*$'：防止因域名/IP 不匹配导致的拒绝访问。

关闭防火墙或只放行8001
```
# 在 Master 执行，直接关闭测试
sudo ufw disable 
# 或者只放行 8001
sudo ufw allow 8001/tcp
```


## 常用k8s管理面板
```
# 下载并应用官方部署清单
kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.7.0/aio/deploy/recommended.yaml
```


三台主机做k8s集群

不能跨版本升级

在这里写新的容器镜像版本

![image.png](/static/img/2bd49743174e7ebeab655737c0a3c32f.image.webp)

点击编排目录。可以进入docker-composer.yml所在路径，此时开启终端
```bash
root@nextcloud:/opt/1panel/apps/nextcloud/nextcloud# docker compose down
docker compose up -d
[+] Running 1/1
 ✔ Container 1Panel-nextcloud-CHYM  Removed                                                                                                                                                                                                             4.3s 
[+] Running 1/1
 ✔ Container 1Panel-nextcloud-CHYM  Started                                                                                                                                                                                                             0.4s 

root@nextcloud:/opt/1panel/apps/nextcloud/nextcloud# ls
1panel.env  data  data.yml  docker-compose.yml
root@nextcloud:/opt/1panel/apps/nextcloud/nextcloud# 
```
如果升级完是维护模式：
```bash
root@nextcloud:/opt/1panel/apps/nextcloud/nextcloud# docker exec -it -u 1000 1Panel-nextcloud-CHYM php /app/www/public/occ maintenance:mode --off
Maintenance mode disabled
```

nextcloud docker升级坑

https://docs.nextcloud.com/server/18/admin_manual/installation/server_tuning.html
```
Tune PHP-FPM
调整PHP-FPM
If you are using a default installation of php-fpm you might have noticed excessive load times on the web interface or even sync issues. This is due to the fact that each simultaneous request of an element is handled by a separate PHP-FPM process. So even on a small installation you should allow more processes to run. For example on a machine with 4GB of RAM and 1GB of MySQL cache following values in your www.conf file should work:

pm = dynamic
pm.max_children = 120
pm.start_servers = 12
pm.min_spare_servers = 6
pm.max_spare_servers = 18
Depending on your current PHP version you should find this file e.g. under /etc/php/7.2/fpm/pool.d/www.conf
```

## 原文指出要调整PHP-FPM

针对1panel,我们需要做一些修改。

```bash
root@3a0e0a3cd134:/# cd /etc/php83/
root@3a0e0a3cd134:/etc/php83# ls
conf.d  php-fpm.conf  php-fpm.d  php.ini
root@3a0e0a3cd134:/etc/php83# cd php-fpm.d/
root@3a0e0a3cd134:/etc/php83/php-fpm.d# cat www.conf
```
在末尾加入这些文本，然后重启容器即可


![image.png](/static/img/9bf57106b43fdd3b5cfd3a2b6d873868.image.webp)

