This procedure applies only if you are installing the standalone software
(.run file format).
Before you begin
You must be logged in as the root user or use sudo to
complete this task.Before you begin, download the Edge Gateway standalone file
(apphost-<version>.run) from IBM Support Fix Central.
If it is not already installed,
install the
createrepo
package:
sudo yum install -y createrepo
If it is not already installed,
install the
container-selinux package.
-
For example, for RHEL
7:
sudo subscription-manager repos --enable=rhel-7-server-extras-rpms &&
sudo yum install container-selinux
-
For example, for RHEL
8:
sudo subscription-manager repos --enable=rhel-8-for-x86_64-appstream-rpms &&
sudo yum install container-selinux
Procedure
- Make sure that your system is up to date with all of the required operating system
security updates.
- If downloaded to a different machine, transfer the software package that you acquired
from IBM Security to the system that is to host the Edge Gateway.
- Run the following firewall rules:
systemctl start firewalld
sudo firewall-cmd --permanent --zone=trusted --add-interface=cni0 &&
sudo firewall-cmd --permanent --zone=trusted --add-interface=flannel.1 &&
sudo firewall-cmd --permanent --zone=trusted --add-port=443/tcp &&
sudo firewall-cmd --permanent --zone=trusted --add-port=6443/tcp &&
sudo firewall-cmd --permanent --zone=trusted --add-port=10250/tcp
sudo firewall-cmd --permanent --zone=public --add-port=22/tcp
sudo firewall-cmd --reload &&
systemctl restart firewalld
-
Enter the following command to install the Edge Gateway, where <x.x.x> is
the version number.
sudo bash apphost-<x.x.x>.run
The apphost-<x.x.x>.run file prompts you for the
default Kubernetes k3s cluster settings. You can confirm by pressing the Y key to
proceed, or change as described below.
The default Kubernetes k3s cluster settings are:
- Cluster CIDR is
10.42.0.0/16
- Service CIDR is
10.43.0.0/16
The command line options available are:
--cluster-cidr=<CIDR> to specify the cluster CIDR, such as
10.44.0.0/16
--service-cidr=<CIDR> to specify the service CIDR, such as
10.45.0.0/16
--yes to accept the default Kubernetes k3s cluster settings.
To accept the default Kubernetes k3s cluster setting without requesting confirmation, enter the
following with the two hyphens -- before the option:
sudo apphost-<version>.run -- --yes
To change the Kubernetes k3s cluster CIDR to 10.44.0.0/16, enter the following
with the two hyphens -- before the option:
sudo apphost-<version>.run -- --cluster-cidr=10.44.0.0/16
To change the Kubernetes k3s cluster CIDR to 10.44.0/16 and the service CIDR to
10.45.0.0/16, enter the following with the two hyphens -- before
the option:
sudo apphost-<version>.run -- --cluster-cidr=10.44.0.0/16 --service-cidr=10.45.0.0/16
Results
The Edge Gateway image is successfully
installed.