►
From YouTube: Running Containerd and k3s on MacOS - Akihiro Suda, NTT Corporation & Jan Dubois, SUSE
Description
Don’t miss out! Join us at our upcoming hybrid event: KubeCon + CloudNativeCon North America 2022 from October 24-28 in Detroit (and online!). Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Running Containerd and k3s on MacOS - Akihiro Suda, NTT Corporation & Jan Dubois, SUSE
It has been very hard to use Mac for developing containerized apps. A typical way is to use Docker for Mac, but it is not FLOSS. Another option is to install Docker and/or Kubernetes into VirtualBox, often via minikube, but it doesn't propagate localhost ports, and VirtualBox also doesn't support the ARM architecture. This session will show how to run containerd and k3s on macOS, using Lima and Rancher Desktop. Lima wraps QEMU in a simple CLI, with neat features for container users, such as filesystem sharing and automatic localhost port forwarding, as well as DNS and proxy propagation for enterprise networks. Rancher Desktop wraps Lima with k3s integration and GUI.
A
A
A
A
So
we
could
just
install
docker
and
kubernetes
inside
the
plain
old
linux
vm.
Perhaps
spear
mini
cube,
but
this
isn't
really
straightforward.
Summer.
Beams
such
as
premiere
and
parallels
are
proprietary
bottle.
Virtualbox
is
free
and
open
source,
but
virtualbox
is
specific
to
the
intel
architecture
and
badgerbox
will
not
support
apple's
m1
chip,
which
is
based
on
arm
architecture.
A
It's
called
lima
lima
is
similar
to
windows,
wsl
2,
but
dimmer
is
made
for
mac
os
host,
especially
made
for
running
continuity
or
macos,
but
other
applications
can
be
used
as
well
as
in
wrc.
2
dima
is
capable
of
exposing
host
file
system
to
the
list
and
providing
supports
automatically
and
lima
comes
with
built-in
integration
for
continuity
and
necessities,
which
is
a
cri
for
continuity.
A
A
A
A
A
And
you
can
even
run
an
amd64
container
on
an
arm.
64
machine
such
as
oppose
m1
with
lima
city,
run
platform,
equal
md64,
and
vice
versa.
You
can
even
run
an
arm
64
continent
on
md64
machine,
and
you
can
also
build
a
dual
platform
image
that
works
for
both
amd
and
arm
with
limanocity
build
dash
platform.
A
The
next
topic
is
three
is
k3s:
is
a
lightweight
kubernetes
distribution
hosted
at
cncf
as
a
sandbox
project?
J3S
adopts
continuity
as
the
cri
runtime
and,
of
course,
k3s
works
with
lima
2,
with
these
commands
showing
the
slide.
So
you
must
see.
Dl
start
template
constructors
k3s
to
create
lima
instance
or
ts3s,
and
lima
ctl,
shell,
k3s
cat
adc,
launcher
t3s
t3s
to
create
cubeconfig,
and
you
can
just
use
cubic
ctr
to
connect
to
the
k3s
cluster
running
inside
the
lima.
A
A
A
A
A
B
Qemu
provides
dns
to
the
virtual
machine
by
randomly
choosing
a
single
name
server
from
resolve.conf
on
the
host.
This
works
well
as
long
as
it
picks
a
working
name
server.
I
was
surprised
to
learn
how
many
lima
users
actually
had
a
broken
name
server
configured
along
their
working
ones,
resulting
in
random
dns
failures
in
their
virtual
machines.
B
B
This
is
compiled
with
c
bindings,
so
it
has
access
to
the
mac
os
resolver
running
on
the
host
itself,
so
it
gets
access
to
the
default
name.
Servers
has
access
to
the
vpn
name
servers,
it
uses
the
mdns
responder
and
it
uses
the
aliases
defined
in
etsy
host,
just
like
any
other
application
running
on
the
host
as
well.
B
B
B
A
B
B
So
if
the
proxy
requires
a
password,
the
password
has
to
be
included
in
the
url.
We
will
not
retrieve
the
password
from
the
key
keychain
and
then
expose
it
in
clear
text
and
an
environment
variable.
This
has
to
be
decided
by
the
user.
How
they
want
to
handle
this.
A
common
way
to
do
this
is
to
run
a
local
proxy
on
localhost
that
provides
authentication
internally
and
can
be
used
without
username
and
password
from
local
applications.
B
The
system
settings
can
be
overwritten
by
the
lima.gml
configuration
file
for
the
virtual
machine,
because
sometimes
the
user
wants
to
use
different
proxy
settings
for
the
vm
than
for
the
rest
of
the
host.
And
finally,
we
use
the
environment
variables
from
the
process
environment
when
the
instance
is
being
started.
B
B
There's
no
standard
of
using
uppercase
or
lowercase
variants
of
the
proxy
variables,
so
we
create
matching
uppercase
and
lowercase
names
if
one
variant
does
not
exist
and
we
make
sure
they
have
matching
values.
Finally,
we
store
those
values
in
etsy
environment
inside
the
vm,
so
any
shell
session
any
ssh
session.
Any
probes
program
started
from
those
sessions
will
automatically
inherit
these
proxy
settings.
B
Another
problem
could
be
that
the
port
is
already
in
use
on
the
host.
For
example,
you
may
be
running
a
web
server
on
the
host,
so
the
default
ingress
addresses
that
would
be
used
by
your
k3s.
Cluster
cannot
be
forwarded
to
the
host
and
the
cluster
is
inaccessible,
at
least
through
the
default
ports.
B
Another
issue
is
that
obviously
the
guest
ip
and
the
host
ip
are
different,
so
any
load,
balancer
or
note
ip
services
inside
a
kubernetes
cluster
will
show
the
guest
ip
as
the
external
ip
address,
but
that
address
is
not
routable
from
the
host,
which
means
any
applications
passing
the
service.
Configuration
would
not
work
on
the
host
and
finally,
we
have
not
implemented
udp
tunneling
over
ssh
port
forwarding.
B
B
B
B
There
are
three
network
types.
There
are
host
networks
that
are
purely
local
to
the
host.
There
are
shared
networks
that
have
an
additional
net
gateway
to
the
network
adapter
on
the
host,
and
there
are
bridge
networks
that
are
bridged
to
the
external
network,
so
are
being
routable
from
other
local
machines.
B
B
B
It
also
includes
the
rancher
dashboard
for
kubernetes,
which
we
borrowed
from
the
full
ranger
project,
but
narrowed
it
down
in
scope
to
just
the
local
cluster.
It
allows
you
to
drill
down
into
any
aspects
of
your
kubernetes
cluster.
To
look
at
the
events.
Inspect
the
logs
or
ssh
into
a
container
venture
desktop
also
makes
it
easy
to
change
between
kubernetes
versions.
B
B
We've
also
integrated
image,
vulnerability
scanning
using
the
trivi
service,
so
I
don't
have
a
screenshot
for
it,
but
there's
a
list
of
all
the
images
in
your
virtual
machine
that
you
can
inspect.
You
can
click
on
the
image
that
you
want
to
check
and
then
invoke
the
trivia
scanner
and
see
the
scan
results.
B
B
B
Please
let
us
know
how
you
are
using
lima
and
if
you
are
running
into
any
limitations,
share
your
thoughts
with
us
at
github
discussions
file,
your
enhancement,
requests
or
bug
reports
and
github
issues
or
contribute
with
a
pull
request.
If
you
can,
we
also
have
a
lima
channel
at
the
ranchers
user,
slack
co-located
with
the
rancher
desktop
channel.