Offline support

[ibuildthecloud]

It should be possible to run k3s with no internet access. Image preloading would be the preferred approach right now to getting images, but next what prevents us from offline install is helm and upstream DNS not being configurable.

[uablrek]

With containerd config template support it should be possible to re-direct pulls to a local insecure docker registry, which is really easy to setup. Just specify a mirror for the used registries;

[plugins.opt]
    path = "%OPT%"
[plugins.cri]
  stream_server_address = "%NODE%"
  stream_server_port = "10010"
[plugins.cri.registry.mirrors]
  [plugins.cri.registry.mirrors."docker.io"]
    endpoint = ["http://172.17.0.2:5000"]

I will try this myself as soon as I have learned how to re-build k3s with a PR applied.

[erikwilson]

@uablrek This issue is specifically for running air-gap using the images generated for the RC and placing them in the /var/lib/rancher/k3s/agent/images/ directory.

We would like to provide better support for secure private registries but that is a different issue.

[uablrek]

Sorry, I thought the "no internet access" was the issue. Then if networking still works a local registry is more flexible than pre-pulled images IMHO. I have a similar problem when working with VMs on my laptop while on mobile internet but I realize this is a different problem.

[erikwilson]

@uablrek running a registry server is probably more overhead than we need for air-gap if we just want to load some pre-saved images into containerd.

[erikwilson]

Verified by /issues/172