Rancher Server 设置
- Rancher 版本：2.15.1
- 安装选项 (Docker install/Helm Chart): docker
- 如果是 Helm Chart 安装，需要提供 Local 集群的类型（RKE1, RKE2, k3s, EKS, 等）和版本：
- 在线或离线部署：在线
docker run -d --restart=unless-stopped -p 80:80 -p 443:443 --privileged -e CATTLE_SYSTEM_DEFAULT_REGISTRY=registry.cn-hangzhou.aliyuncs.com -e CATTLE_SYSTEM_CATALOG=bundled --name rancher registry.cn-hangzhou.aliyuncs.com/rancher/rancher:v2.15.1
使用docker 安装rancher 2.15.1时，启动不起来。
进入容器之后，发现coredns拉取镜像失败，但是我已经设置了CATTLE_SYSTEM_DEFAULT_REGISTRY。
日志
bash-4.4# kubectl -n kube-system describe pod/coredns-5f5694d56b-7xrgh
Name: coredns-5f5694d56b-7xrgh
Namespace: kube-system
Priority: 2000000000
Priority Class Name: system-cluster-critical
Service Account: coredns
Node: local-node/172.17.0.2
Start Time: Mon, 07 Sep 2026 03:24:11 +0000
Labels: k8s-app=kube-dns
pod-template-hash=5f5694d56b
Annotations: <none>
Status: Pending
IP: 10.42.0.8
IPs:
IP: 10.42.0.8
Controlled By: ReplicaSet/coredns-5f5694d56b
Containers:
coredns:
Container ID:
Image: rancher/mirrored-coredns-coredns:1.14.4
Image ID:
Ports: 53/UDP (dns), 53/TCP (dns-tcp), 9153/TCP (metrics)
Host Ports: 0/UDP (dns), 0/TCP (dns-tcp), 0/TCP (metrics)
Args:
-conf
/etc/coredns/Corefile
State: Waiting
Reason: ImagePullBackOff
Ready: False
Restart Count: 0
Limits:
memory: 170Mi
Requests:
cpu: 100m
memory: 70Mi
Liveness: http-get http://:8080/health delay=60s timeout=1s period=10s #success=1 #failure=3
Readiness: http-get http://:8181/ready delay=0s timeout=1s period=2s #success=1 #failure=3
Environment: <none>
Mounts:
/etc/coredns from config-volume (ro)
/etc/coredns/custom from custom-config-volume (ro)
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-pdvhs (ro)
Conditions:
Type Status
PodReadyToStartContainers True
Initialized True
Ready False
ContainersReady False
PodScheduled True
Volumes:
config-volume:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: coredns
Optional: false
custom-config-volume:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: coredns-custom
Optional: true
kube-api-access-pdvhs:
Type: Projected (a volume that contains injected data from multiple sources)
TokenExpirationSeconds: 3607
ConfigMapName: kube-root-ca.crt
Optional: false
DownwardAPI: true
QoS Class: Burstable
Node-Selectors: kubernetes.io/os=linux
Tolerations: CriticalAddonsOnly op=Exists
node-role.kubernetes.io/control-plane:NoSchedule op=Exists
node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Topology Spread Constraints: kubernetes.io/hostname:DoNotSchedule when max skew 1 is exceeded for selector k8s-app=kube-dns
topology.kubernetes.io/zone:ScheduleAnyway when max skew 1 is exceeded for selector k8s-app=kube-dns
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 6m40s default-scheduler Successfully assigned kube-system/coredns-5f5694d56b-7xrgh to local-node
Normal Pulling 3m11s (x4 over 6m39s) kubelet spec.containers{coredns}: Pulling image "rancher/mirrored-coredns-coredns:1.14.4"
Warning Failed 2m41s (x4 over 6m9s) kubelet spec.containers{coredns}: Failed to pull image "rancher/mirrored-coredns-coredns:1.14.4": rpc error: code = DeadlineExceeded desc = failed to pull and unpack image "docker.io/rancher/mirrored-coredns-coredns:1.14.4": failed to resolve reference "docker.io/rancher/mirrored-coredns-coredns:1.14.4": failed to do request: Head "https://registry-1.docker.io/v2/rancher/mirrored-coredns-coredns/manifests/1.14.4": dial tcp 108.160.162.102:443: i/o timeout
Warning Failed 2m41s (x4 over 6m9s) kubelet spec.containers{coredns}: Error: ErrImagePull
Normal BackOff 96s (x10 over 6m8s) kubelet spec.containers{coredns}: Back-off pulling image "rancher/mirrored-coredns-coredns:1.14.4"
Warning Failed 96s (x10 over 6m8s) kubelet spec.containers{coredns}: Error: ImagePullBackOff
Normal SandboxChanged 67s kubelet Pod sandbox changed, it will be killed and re-created.
Warning Failed 35s kubelet spec.containers{coredns}: Failed to pull image "rancher/mirrored-coredns-coredns:1.14.4": rpc error: code = DeadlineExceeded desc = failed to pull and unpack image "docker.io/rancher/mirrored-coredns-coredns:1.14.4": failed to resolve reference "docker.io/rancher/mirrored-coredns-coredns:1.14.4": failed to do request: Head "https://registry-1.docker.io/v2/rancher/mirrored-coredns-coredns/manifests/1.14.4": dial tcp 108.160.162.102:443: i/o timeout
Warning Failed 35s kubelet spec.containers{coredns}: Error: ErrImagePull
Normal BackOff 34s kubelet spec.containers{coredns}: Back-off pulling image "rancher/mirrored-coredns-coredns:1.14.4"
Warning Failed 34s kubelet spec.containers{coredns}: Error: ImagePullBackOff
Normal Pulling 23s (x2 over 65s) kubelet spec.containers{coredns}: Pulling image "rancher/mirrored-coredns-coredns:1.14.4"
bash-4.4#