3.2.5. 配置 journald 设置

流程

1. 创建 /etc/systemd/journald.conf 文件的内容并将其编码为 base64。例如：

   $ cat > /tmp/jrnl.conf <<EOF
   # Disable rate limiting
   RateLimitInterval=1s
   RateLimitBurst=10000
   Storage=volatile
   Compress=no
   MaxRetentionSec=30s
   EOF

   Copy to Clipboard Toggle word wrap

2. 将临时 journal.conf 文件转换为 base64 并将其保存到变量(jrnl_cnf):

   $ export jrnl_cnf=$( cat /tmp/jrnl.conf | base64 -w0 )
   $ echo $jrnl_cnf
   IyBEaXNhYmxlIHJhdGUgbGltaXRpbmcKUmF0ZUxpbWl0SW50ZXJ2YWw9MXMKUmF0ZUxpbWl0QnVyc3Q9MTAwMDAKU3RvcmFnZT12b2xhdGlsZQpDb21wcmVzcz1ubwpNYXhSZXRlbnRpb25TZWM9MzBzCg==

   Copy to Clipboard Toggle word wrap

3. 创建机器配置，包括经过编码的 journald.conf 内容（jrnl_cnf 变量）：

   $ cat > /tmp/40-worker-custom-journald.yaml <<EOF
   apiVersion: machineconfiguration.openshift.io/v1
   kind: MachineConfig
   metadata:
     labels:
       machineconfiguration.openshift.io/role: worker
     name: 40-worker-custom-journald
   spec:
     config:
       ignition:
         config: {}
         security:
           tls: {}
         timeouts: {}
         version: 3.1.0
       networkd: {}
       passwd: {}
       storage:
         files:
         - contents:
             source: data:text/plain;charset=utf-8;base64,${jrnl_cnf}
             verification: {}
           filesystem: root
           mode: 420
           path: /etc/systemd/journald.conf
       systemd: {}
     osImageURL: ""
   EOF

   Copy to Clipboard Toggle word wrap

4. 将机器配置应用到池：

   $ oc apply -f /tmp/40-worker-custom-journald.yaml

   Copy to Clipboard Toggle word wrap

5. 检查是否应用新机器配置，并且节点是否处于降级状态。它可能需要几分钟时间。worker 池将显示更新进行中，每个节点都成功应用了新的机器配置：

   $ oc get machineconfigpool
   NAME   CONFIG             UPDATED UPDATING DEGRADED MACHINECOUNT READYMACHINECOUNT UPDATEDMACHINECOUNT DEGRADEDMACHINECOUNT AGE
   master rendered-master-35 True    False    False    3            3                 3                   0                    34m
   worker rendered-worker-d8 False   True     False    3            1                 1                   0                    34m

   Copy to Clipboard Toggle word wrap

6. 要检查是否应用了更改，您可以登录到 worker 节点：

   $ oc get node | grep worker
   ip-10-0-0-1.us-east-2.compute.internal   Ready    worker   39m   v0.0.0-master+$Format:%h$
   $ oc debug node/ip-10-0-0-1.us-east-2.compute.internal
   Starting pod/ip-10-0-141-142us-east-2computeinternal-debug ...
   ...
   sh-4.2# chroot /host
   sh-4.4# cat /etc/systemd/journald.conf
   # Disable rate limiting
   RateLimitInterval=1s
   RateLimitBurst=10000
   Storage=volatile
   Compress=no
   MaxRetentionSec=30s
   sh-4.4# exit

   Copy to Clipboard Toggle word wrap