Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Documentation on how RD can be used on airgap environment

See original GitHub issue

Problem Description

I would like to know how RD can be configured and used in an airgap environment. I’ve raised this in the slack channel and was asked to create an issue here

Currently, it is unclear if RD can be used, and if able to what are the criteria, and what to note

Some of the unknown are:

setting up with self-hosted repository (e.g jfrog artifactory)
configuring authentication process
setting up with custom CA cert
how to bring the caches into airgap environment for installation
…and possibly more

Quoted from the slack @jandubois

The container runtime will need the CA cert to validate the registry (assuming that you are using a self-signed cert inside the airlock). Then you may need to provide credentials, unless you don't have authentication configured

But there are registries that require auth tokens that expire and need to be refreshed periodically, and this is when things become interesting...

It will not work automatically; it will download k3s and the k3s-airgap images on first run, so you would have to bring those as well and put them into the cache.

I suspect that RD will always try to download the list of available k3s versions on startup, so it may not actually work airgapped yet. It is definitely a goal, but it may not be working right now

Proposed Solution

To have the process of bringing RD to airgap environment, and the how-tos

Additional Information

Related to #888

Issue Analytics

State:
Created 2 years ago
Reactions:10
Comments:13 (7 by maintainers)

Top GitHub Comments

1reaction

taleodorcommented, Aug 1, 2022

Do you mean if WSL2 is not installed, it does not work? Would it be for machine that is with Hyper-V?

WSL2 is a requirement for Rancher Desktop overall. Hyper-V is not relevant here.

In a situation where you are doing an offline setup of Rancher Desktop, you need to have WSL2 pre-installed on the machine already - because it wouldn’t be able to go online and set it up.

1reaction

gaktivecommented, Jul 25, 2022

@btat we’ll move this over to the docs repo.

Top Results From Across the Web

Essential components of a Linux-based air-gapped network

Typical components needed within an air-gapped environment are Domain Name Service (DNS), Dynamic Host Configuration Protocol (DHCP), Trivial ...

Air Gap Environment | Cardano Developer Portal

Developers & Cardano stake pool operators generally need an air gap environment in which to work with payment keys, stake pool keys and ......

Air-gapped environments | Fleet and Elastic Agent Guide [8.5]

These steps use the standard Docker CLI, but you can create a Kubernetes manifest based on this information. These images can also be...

Preparing an air gap environment - IBM

Create a registry and make sure that it meets the requirements. It must be available and accessible from the OCP cluster nodes.

Air-Gap, Isolated Recovery, and Ransomware - Cost vs. Value

similar to Business Impact Analysis (BIA) used in. Disaster Recovery (DR) planning. To state the obvious, this can have varying degrees of financial...