mirror of
https://github.com/kairos-io/provider-rke2.git
synced 2025-09-23 19:07:17 +00:00
Merge pull request #62 from kairos-io/rke2-reset
PE-4727: Add uninstall scripts for rke2
This commit is contained in:
Rishi Anand
GitHub
141
scripts/rke2-killall.sh
Executable file
141
scripts/rke2-killall.sh
Executable file
@@ -0,0 +1,141 @@
|
||||
#!/bin/sh
|
||||
|
||||
# Ensure the script is run as root
|
||||
if [ ! $(id -u) -eq 0 ]; then
|
||||
echo "$(basename "${0}"): must be run as root" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Function to find child processes of a given parent process
|
||||
pschildren() {
|
||||
ps -e -o ppid= -o pid= | \
|
||||
sed -e 's/^\s*//g; s/\s\s*/\t/g;' | \
|
||||
grep -w "^$1" | \
|
||||
cut -f2
|
||||
}
|
||||
|
||||
# Function to recursively build a process tree starting from a given process
|
||||
pstree() {
|
||||
for pid in "$@"; do
|
||||
echo ${pid}
|
||||
for child in $(pschildren ${pid}); do
|
||||
pstree ${child}
|
||||
done
|
||||
done
|
||||
}
|
||||
|
||||
# Function to kill all processes in a tree starting from a given parent process
|
||||
killtree() {
|
||||
kill -9 $(
|
||||
{ set +x; } 2>/dev/null;
|
||||
pstree "$@";
|
||||
set -x;
|
||||
) 2>/dev/null
|
||||
}
|
||||
|
||||
# Function to find containerd-shim processes related to RKE2
|
||||
getshims() {
|
||||
COLUMNS=2147483647 ps -e -o pid= -o args= | sed -e 's/^ *//; s/\s\s*/\t/;' | grep -w "${RKE2_DATA_DIR}"'/data/[^/]*/bin/containerd-shim' | cut -f1
|
||||
}
|
||||
|
||||
# Function to unmount and remove directories
|
||||
do_unmount_and_remove() {
|
||||
{ set +x; } 2>/dev/null
|
||||
MOUNTS=
|
||||
while read ignore mount ignore; do
|
||||
MOUNTS="${mount}\n${MOUNTS}"
|
||||
done </proc/self/mounts
|
||||
MOUNTS=$(printf ${MOUNTS} | grep "^$1" | sort -r)
|
||||
if [ -n "${MOUNTS}" ]; then
|
||||
set -x
|
||||
umount ${MOUNTS}
|
||||
rm -rf --one-file-system ${MOUNTS}
|
||||
else
|
||||
set -x
|
||||
fi
|
||||
}
|
||||
|
||||
# Load custom environment variables from /etc/spectro/environment if it exists
|
||||
if [ -f /etc/spectro/environment ]; then
|
||||
. /etc/spectro/environment
|
||||
fi
|
||||
|
||||
# Ensure STYLUS_ROOT does not have a trailing slash
|
||||
STYLUS_ROOT="${STYLUS_ROOT%/}"
|
||||
|
||||
# Determine the base paths, use default if STYLUS_ROOT is not set
|
||||
RKE2_DATA_DIR=${STYLUS_ROOT}/var/lib/rancher/rke2
|
||||
RUN_DIR=/run/k3s
|
||||
KUBELET_PODS_DIR=${STYLUS_ROOT}/var/lib/kubelet/pods
|
||||
NETNS_CNI_DIR=/run/netns/cni-
|
||||
CNI_DIR=${STYLUS_ROOT}/var/lib/cni/
|
||||
|
||||
export PATH=$PATH:${RKE2_DATA_DIR}/bin
|
||||
|
||||
set -x
|
||||
|
||||
# Stop RKE2 services
|
||||
systemctl stop rke2-server.service || true
|
||||
systemctl stop rke2-agent.service || true
|
||||
|
||||
# Kill all relevant processes
|
||||
killtree $({ set +x; } 2>/dev/null; getshims; set -x)
|
||||
|
||||
# Unmount and remove directories
|
||||
do_unmount_and_remove "${RUN_DIR}"
|
||||
do_unmount_and_remove "${KUBELET_PODS_DIR}"
|
||||
do_unmount_and_remove "${NETNS_CNI_DIR}"
|
||||
|
||||
# Delete network interface(s) that match 'master cni0'
|
||||
ip link show 2>/dev/null | grep 'master cni0' | while read ignore iface ignore; do
|
||||
iface=${iface%%@*}
|
||||
[ -z "$iface" ] || ip link delete $iface
|
||||
done
|
||||
|
||||
# Delete additional network interfaces
|
||||
ip link delete cni0
|
||||
ip link delete flannel.1
|
||||
ip link delete flannel.4096
|
||||
ip link delete flannel-v6.1
|
||||
ip link delete flannel-v6.4096
|
||||
ip link delete flannel-wg
|
||||
ip link delete flannel-wg-v6
|
||||
ip link delete vxlan.calico
|
||||
ip link delete vxlan-v6.calico
|
||||
ip link delete cilium_vxlan
|
||||
ip link delete cilium_net
|
||||
ip link delete cilium_wg0
|
||||
ip link delete kube-ipvs0
|
||||
|
||||
# Delete nodeLocalDNS objects
|
||||
if [ -d /sys/class/net/nodelocaldns ]; then
|
||||
for i in $(ip address show nodelocaldns | grep inet | awk '{print $2}'); do
|
||||
iptables-save | grep -v $i | iptables-restore
|
||||
done
|
||||
ip link delete nodelocaldns || true
|
||||
fi
|
||||
|
||||
# Remove directories related to CNI and pod logs
|
||||
rm -rf ${CNI_DIR} ${STYLUS_ROOT}/var/log/pods/ ${STYLUS_ROOT}/var/log/containers
|
||||
|
||||
# Remove pod manifest files for RKE2 components
|
||||
POD_MANIFESTS_DIR=${RKE2_DATA_DIR}/agent/pod-manifests
|
||||
|
||||
rm -f "${POD_MANIFESTS_DIR}/etcd.yaml" \
|
||||
"${POD_MANIFESTS_DIR}/kube-apiserver.yaml" \
|
||||
"${POD_MANIFESTS_DIR}/kube-controller-manager.yaml" \
|
||||
"${POD_MANIFESTS_DIR}/cloud-controller-manager.yaml" \
|
||||
"${POD_MANIFESTS_DIR}/kube-scheduler.yaml" \
|
||||
"${POD_MANIFESTS_DIR}/kube-proxy.yaml"
|
||||
|
||||
# Cleanup iptables created by CNI plugins or Kubernetes (kube-proxy)
|
||||
iptables-save | grep -v KUBE- | grep -v CNI- | grep -v cali- | grep -v cali: | grep -v CILIUM_ | grep -v flannel | iptables-restore
|
||||
ip6tables-save | grep -v KUBE- | grep -v CNI- | grep -v cali- | grep -v cali: | grep -v CILIUM_ | grep -v flannel | ip6tables-restore
|
||||
|
||||
set +x
|
||||
|
||||
# Provide a message for additional iptables cleanup if needed
|
||||
echo 'If this cluster was upgraded from an older release of the Canal CNI, you may need to manually remove some flannel iptables rules:'
|
||||
echo -e '\texport cluster_cidr=YOUR-CLUSTER-CIDR'
|
||||
echo -e '\tiptables -D POSTROUTING -s $cluster_cidr -j MASQUERADE --random-fully'
|
||||
echo -e '\tiptables -D POSTROUTING ! -s $cluster_cidr -d -j MASQUERADE --random-fully'
|
||||
135
scripts/rke2-uninstall.sh
Executable file
135
scripts/rke2-uninstall.sh
Executable file
@@ -0,0 +1,135 @@
|
||||
#!/bin/sh
|
||||
set -ex
|
||||
|
||||
# Ensure the script is run as root
|
||||
if [ ! $(id -u) -eq 0 ]; then
|
||||
echo "$(basename "${0}"): must be run as root" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Load custom environment variables from /etc/spectro/environment if it exists
|
||||
if [ -f /etc/spectro/environment ]; then
|
||||
. /etc/spectro/environment
|
||||
fi
|
||||
|
||||
# Ensure STYLUS_ROOT does not have a trailing slash
|
||||
STYLUS_ROOT="${STYLUS_ROOT%/}"
|
||||
|
||||
# Set RKE2_DATA_DIR, defaulting to /var/lib/rancher/rke2 if STYLUS_ROOT is not set
|
||||
RKE2_DATA_DIR=${STYLUS_ROOT}/var/lib/rancher/rke2
|
||||
|
||||
# Function to check if the target directory is a mountpoint
|
||||
check_target_mountpoint() {
|
||||
mountpoint -q "$1"
|
||||
}
|
||||
|
||||
# Function to check if the target directory is read-only
|
||||
check_target_ro() {
|
||||
touch "$1"/.rke2-ro-test && rm -rf "$1"/.rke2-ro-test
|
||||
test $? -ne 0
|
||||
}
|
||||
|
||||
# OS check and INSTALL_RKE2_ROOT setup
|
||||
. /etc/os-release
|
||||
if [ -r /etc/redhat-release ] || [ -r /etc/centos-release ] || [ -r /etc/oracle-release ] || [ -r /etc/amazon-linux-release ]; then
|
||||
# If redhat/oracle family OS is detected, check whether RKE2 was installed via yum or tar.
|
||||
if rpm -q rke2-common >/dev/null 2>&1; then
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/usr
|
||||
else
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/usr/local
|
||||
fi
|
||||
# Check if the OS is SUSE
|
||||
elif [ "${ID_LIKE%%[ ]*}" = "suse" ]; then
|
||||
if rpm -q rke2-common >/dev/null 2>&1; then
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/usr
|
||||
if [ -x /usr/sbin/transactional-update ]; then
|
||||
transactional_update="transactional-update -c --no-selfupdate -d run"
|
||||
fi
|
||||
elif check_target_mountpoint "${STYLUS_ROOT}/usr/local" || check_target_ro "${STYLUS_ROOT}/usr/local"; then
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/opt/rke2
|
||||
else
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/usr/local
|
||||
fi
|
||||
# Default to /usr for other OSes
|
||||
else
|
||||
INSTALL_RKE2_ROOT=${STYLUS_ROOT}/usr
|
||||
fi
|
||||
|
||||
# Uninstall killall script
|
||||
uninstall_killall() {
|
||||
_killall="$(dirname "$0")/rke2-killall.sh"
|
||||
if [ -e "${_killall}" ]; then
|
||||
eval "${_killall}"
|
||||
fi
|
||||
}
|
||||
|
||||
# Disable services
|
||||
uninstall_disable_services() {
|
||||
if command -v systemctl >/dev/null 2>&1; then
|
||||
systemctl disable rke2-server || true
|
||||
systemctl disable rke2-agent || true
|
||||
systemctl reset-failed rke2-server || true
|
||||
systemctl reset-failed rke2-agent || true
|
||||
systemctl daemon-reload
|
||||
fi
|
||||
}
|
||||
|
||||
# Remove files
|
||||
uninstall_remove_files() {
|
||||
if [ -r /etc/redhat-release ] || [ -r /etc/centos-release ] || [ -r /etc/oracle-release ] || [ -r /etc/amazon-linux-release ]; then
|
||||
yum remove -y "rke2-*"
|
||||
rm -f ${STYLUS_ROOT}/etc/yum.repos.d/rancher-rke2*.repo
|
||||
fi
|
||||
|
||||
if [ "${ID_LIKE%%[ ]*}" = "suse" ]; then
|
||||
if rpm -q rke2-common >/dev/null 2>&1; then
|
||||
uninstall_cmd="zypper remove -y rke2-server rke2-agent rke2-common rke2-selinux"
|
||||
if [ "${TRANSACTIONAL_UPDATE=false}" != "true" ] && [ -x /usr/sbin/transactional-update ]; then
|
||||
uninstall_cmd="transactional-update -c --no-selfupdate -d run $uninstall_cmd"
|
||||
fi
|
||||
$uninstall_cmd
|
||||
rm -f ${STYLUS_ROOT}/etc/zypp/repos.d/rancher-rke2*.repo
|
||||
fi
|
||||
fi
|
||||
|
||||
$transactional_update find "${INSTALL_RKE2_ROOT}/lib/systemd/system" -name rke2-*.service -type f -delete
|
||||
$transactional_update find "${INSTALL_RKE2_ROOT}/lib/systemd/system" -name rke2-*.env -type f -delete
|
||||
find ${STYLUS_ROOT}/etc/systemd/system -name rke2-*.service -type f -delete
|
||||
$transactional_update rm -f "${INSTALL_RKE2_ROOT}/bin/rke2"
|
||||
$transactional_update rm -f "${INSTALL_RKE2_ROOT}/bin/rke2-killall.sh"
|
||||
$transactional_update rm -rf "${INSTALL_RKE2_ROOT}/share/rke2"
|
||||
|
||||
# Removing directories with STYLUS_ROOT support
|
||||
rm -rf ${STYLUS_ROOT}/etc/rancher/rke2
|
||||
rm -rf ${STYLUS_ROOT}/etc/rancher/node
|
||||
rm -d ${STYLUS_ROOT}/etc/rancher || true
|
||||
rm -rf ${STYLUS_ROOT}/etc/cni
|
||||
rm -rf ${STYLUS_ROOT}/opt/cni/bin
|
||||
rm -rf ${STYLUS_ROOT}/var/lib/kubelet || true
|
||||
rm -rf "${RKE2_DATA_DIR}"
|
||||
rm -d ${STYLUS_ROOT}/var/lib/rancher || true
|
||||
|
||||
if type fapolicyd >/dev/null 2>&1; then
|
||||
if [ -f ${STYLUS_ROOT}/etc/fapolicyd/rules.d/80-rke2.rules ]; then
|
||||
rm -f ${STYLUS_ROOT}/etc/fapolicyd/rules.d/80-rke2.rules
|
||||
fi
|
||||
fagenrules --load
|
||||
systemctl try-restart fapolicyd
|
||||
fi
|
||||
}
|
||||
|
||||
# Remove uninstall script
|
||||
uninstall_remove_self() {
|
||||
$transactional_update rm -f "${INSTALL_RKE2_ROOT}/bin/rke2-uninstall.sh"
|
||||
}
|
||||
|
||||
# Remove SELinux policies
|
||||
uninstall_remove_policy() {
|
||||
semodule -r rke2 || true
|
||||
}
|
||||
|
||||
uninstall_killall
|
||||
trap uninstall_remove_self EXIT
|
||||
uninstall_disable_services
|
||||
uninstall_remove_files
|
||||
uninstall_remove_policy
|
||||
Reference in New Issue
Block a user