인프런 커뮤니티 질문&답변

해당 에러 케이스를 검색해보니, 사내 네트워크 일 경우 인증 에러들이 많이 발생하는 것 같은데

현재 사내 네트워크 사용 중 일까요?

https://velog.io/@ptah0414/Docker-Error-response-from-daemon-Get-httpsregistry-1.docker.iov2-x509-certificate-signed-by-unknown-authority-%EC%97%90%EB%9F%AC

https://joycecoder.tistory.com/100

일단 해당 이미지는 정상적으로 올라가져 있는건 확인했습니다.

한번 아래 명령어로 삭제 하시고, 다시 만들어 보시겠어요?

# 삭제
kubectl delete -f https://raw.githubusercontent.com/kubetm/kubetm.github.io/master/yamls/k8s-install/calico.yaml
kubectl delete -f https://raw.githubusercontent.com/kubetm/kubetm.github.io/master/yamls/k8s-install/calico-custom.yaml

# 생성
kubectl create -f https://raw.githubusercontent.com/kubetm/kubetm.github.io/master/yamls/k8s-install/calico.yaml
kubectl create -f https://raw.githubusercontent.com/kubetm/kubetm.github.io/master/yamls/k8s-install/calico-custom.yaml

그래도 안되면 kubectl get pods -A -o wide 명령을 날려보면 해당 Pod가 어느 노드에 생기는지 확인이 됩니다. 아마 Master Node 일 가능성이 높긴한데, 해당 노드에서 아래 명령으로 직접 이미지를 다운 받아 보세요.

docker pull quay.io/tigera/operator:v1.29.0

감사합니다.

정확히 어느 조치로 해결이 된건지 모르겠지만 vm설치해서 3대 모두 부팅 및 접속까지 확인했습니다.

위에 링크 댓글 중 인증서를 강제로 넣었다는 글이 있어서 그대로 했구요. plugin 설치 시 https를 http로 고치니 인증서 에러는 발생했지만 plugin 설치는 됐습니다.

그리고 Vagrantfile 파일도 수정했습니다. 처음에는 vbguest plugin이 제대로 설치되지 않았는지 오류가 났었으나, plugin 설치된 후 vagrant up 명령이 실행됐습니다.

 curl -o "C:\HashiCorp\Vagrant\embedded\cacert.pem" https://curl.se/ca/cacert.pem
 vagrant plugin install --plugin-clean-sources --plugin-source http://rubygems.org vagrant-reload vagrant-vbguest winrm winrm-elevated

\k8s>vagrant plugin list
vagrant-reload (0.0.1, global)
vagrant-vbguest (0.31.0, global)

  config.vm.box = "centos/7"
  config.vm.synced_folder "./", "/vagrant", disabled: true
  config.vbguest.installer_options = { allow_kernel_upgrade: true }

네. k8s폴더를 지우고 재시도 해봤습니다.

시도하면 아래처럼 plugin 설치가 되지 않았습니다.

C:\Users\사용자\k8s>vagrant plugin install vagrant-vbguest
Installing the 'vagrant-vbguest' plugin. This can take a few minutes...
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /C=US/ST=California/L=San Jose/O=Zscaler Inc./OU=Zscaler Inc./CN=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
Vagrant failed to load a configured plugin source. This can be caused
by a variety of issues including: transient connectivity issues, proxy
filtering rejecting access to a configured plugin source, or a configured
plugin source not responding correctly. Please review the error message
below to help resolve the issue:

  SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate) (https://rubygems.org/specs.4.8.gz)

그래서 구글링 해보니 인증 오류시

C:\HashiCorp\Vagrant\embedded\gems\2.2.18\gems\vagrant-2.2.18\plugins\commands\plugin\command\mixin_install_opts.rb 파일을 수정해보라고 되어있어서 아래처럼 수정했습니다.

module VagrantPlugins
  module CommandPlugin
    module Command
      module MixinInstallOpts
        def build_install_opts(o, options)
          options[:plugin_sources] = [
            "http://rubygems.org",
            "http://gems.hashicorp.com",
          ]

          o.on("--entry-point NAME", String,
               "The name of the entry point file for loading the plugin.") do |entry_point|
            options[:entry_point] = entry_point
          end

          o.on("--plugin-clean-sources",
            "Remove all plugin sources defined so far (including defaults)") do |clean|
            options[:plugin_sources] = [] if clean
          end

          o.on("--plugin-source PLUGIN_SOURCE", String,
               "Add a RubyGems repository source") do |plugin_source|
            options[:plugin_sources] << plugin_source
          end

          o.on("--plugin-version PLUGIN_VERSION", String,
               "Install a specific version of the plugin") do |plugin_version|
            options[:plugin_version] = plugin_version
          end
        end
      end
    end
  end
end

그 후 plugin 설치를 시도하면 아래처럼 설치가 됐습니다.

C:\Users\사용자>mkdir k8s

C:\Users\사용자>cd k8s

C:\Users\사용자\k8s>curl -O https://kubetm.github.io/yamls/k8s-install/Vagrantfile
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  4240  100  4240    0     0   6947      0 --:--:-- --:--:-- --:--:--  6962

C:\Users\사용자\k8s>vagrant plugin install vagrant-vbguest
==> vagrant: A new version of Vagrant is available: 2.4.0 (installed version: 2.2.18)!
==> vagrant: To upgrade visit: https://www.vagrantup.com/downloads.html

Installing the 'vagrant-vbguest' plugin. This can take a few minutes...
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /C=US/ST=California/L=San Jose/O=Zscaler Inc./OU=Zscaler Inc./CN=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
Fetching micromachine-3.0.0.gem
Fetching vagrant-vbguest-0.31.0.gem
Installed the plugin 'vagrant-vbguest (0.31.0)'!

그 이후 vagrant up 하면 아래처럼 에러가 발생하네요.

C:\Users\사용자\k8s>vagrant up
Bringing machine 'k8s-master' up with 'virtualbox' provider...
Bringing machine 'k8s-node1' up with 'virtualbox' provider...
Bringing machine 'k8s-node2' up with 'virtualbox' provider...
==> k8s-master: Box 'centos/7' could not be found. Attempting to find and install...
    k8s-master: Box Provider: virtualbox
    k8s-master: Box Version: >= 0
==> k8s-master: Loading metadata for box 'centos/7'
    k8s-master: URL: https://vagrantcloud.com/centos/7
==> k8s-master: Adding box 'centos/7' (v2004.01) for provider: virtualbox
    k8s-master: Downloading: https://vagrantcloud.com/centos/boxes/7/versions/2004.01/providers/virtualbox/unknown/vagrant.box
Download redirected to host: cloud.centos.org
    k8s-master:
    k8s-master: Calculating and comparing box checksum...
==> k8s-master: Successfully added box 'centos/7' (v2004.01) for 'virtualbox'!
==> k8s-master: Importing base box 'centos/7'...
==> k8s-master: Matching MAC address for NAT networking...
==> k8s-master: Checking if box 'centos/7' version '2004.01' is up to date...
==> k8s-master: Setting the name of the VM: k8s_k8s-master_1697513201415_65754
==> k8s-master: Clearing any previously set network interfaces...
==> k8s-master: Preparing network interfaces based on configuration...
    k8s-master: Adapter 1: nat
    k8s-master: Adapter 2: hostonly
==> k8s-master: Forwarding ports...
    k8s-master: 22 (guest) => 2222 (host) (adapter 1)
==> k8s-master: Running 'pre-boot' VM customizations...
==> k8s-master: Booting VM...
==> k8s-master: Waiting for machine to boot. This may take a few minutes...
    k8s-master: SSH address: 127.0.0.1:2222
    k8s-master: SSH username: vagrant
    k8s-master: SSH auth method: private key
    k8s-master:
    k8s-master: Vagrant insecure key detected. Vagrant will automatically replace
    k8s-master: this with a newly generated keypair for better security.
    k8s-master:
    k8s-master: Inserting generated public key within guest...
    k8s-master: Removing insecure key from the guest if it's present...
    k8s-master: Key inserted! Disconnecting and reconnecting using new SSH key...
==> k8s-master: Machine booted and ready!
[k8s-master] No Virtualbox Guest Additions installation found.
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: ftp.jaist.ac.jp
 * extras: ftp.jaist.ac.jp
 * updates: ftp.jaist.ac.jp
Resolving Dependencies
--> Running transaction check
---> Package centos-release.x86_64 0:7-8.2003.0.el7.centos will be updated
---> Package centos-release.x86_64 0:7-9.2009.1.el7.centos will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package             Arch        Version                     Repository    Size
================================================================================
Updating:
 centos-release      x86_64      7-9.2009.1.el7.centos       updates       27 k

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 27 k
Downloading packages:
No Presto metadata available for updates
warning: /var/cache/yum/x86_64/7/updates/packages/centos-release-7-9.2009.1.el7.centos.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID f4a80eb5: NOKEY
Public key for centos-release-7-9.2009.1.el7.centos.x86_64.rpm is not installed
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Importing GPG key 0xF4A80EB5:
 Userid     : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>"
 Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5
 Package    : centos-release-7-8.2003.0.el7.centos.x86_64 (@anaconda)
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : centos-release-7-9.2009.1.el7.centos.x86_64                  1/2
  Cleanup    : centos-release-7-8.2003.0.el7.centos.x86_64                  2/2
  Verifying  : centos-release-7-9.2009.1.el7.centos.x86_64                  1/2
  Verifying  : centos-release-7-8.2003.0.el7.centos.x86_64                  2/2

Updated:
  centos-release.x86_64 0:7-9.2009.1.el7.centos

Complete!
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: ftp.jaist.ac.jp
 * extras: ftp.jaist.ac.jp
 * updates: ftp.jaist.ac.jp
No package kernel-devel-3.10.0-1127.el7.x86_64 available.
Error: Nothing to do
Unmounting Virtualbox Guest Additions ISO from: /mnt
umount: /mnt: not mounted
==> k8s-master: Checking for guest additions in VM...
    k8s-master: No guest additions were detected on the base box for this VM! Guest
    k8s-master: additions are required for forwarded ports, shared folders, host only
    k8s-master: networking, and more. If SSH fails on this machine, please install
    k8s-master: the guest additions and repackage the box to continue.
    k8s-master:
    k8s-master: This is not an error message; everything may continue to work properly,
    k8s-master: in which case you may ignore this message.
The following SSH command responded with a non-zero exit status.
Vagrant assumes that this means the command failed!

umount /mnt

Stdout from the command:



Stderr from the command:

umount: /mnt: not mounted

C:\Users\사용자\k8s>
C:\Users\사용자\k8s>vagrant plugin list
vagrant-vbguest (0.31.0, global)

그래서 plugin 버전을 0.21.0으로 바꿔 설치한 결과가 처음 질문에 올린 내용입니다.

C:\Users\사용자\k8s>vagrant plugin install --plugin-version "= 0.21" vagrant-vbguest
==> vagrant: A new version of Vagrant is available: 2.4.0 (installed version: 2.2.18)!
==> vagrant: To upgrade visit: https://www.vagrantup.com/downloads.html

Installing the 'vagrant-vbguest --version '= 0.21'' plugin. This can take a few minutes...
ERROR:  SSL verification error at depth 2: unable to get local issuer certificate (20)
ERROR:  You must add /C=US/ST=California/L=San Jose/O=Zscaler Inc./OU=Zscaler Inc./CN=Zscaler Root CA/emailAddress=support@zscaler.com to your local trusted store
Fetching micromachine-3.0.0.gem
Fetching vagrant-vbguest-0.21.0.gem
Installed the plugin 'vagrant-vbguest (0.21.0)'!