节点 CPU 架构、操作系统和版本：:
Linux node-15-55 6.5.0-41-generic #41~22.04.2-Ubuntu SMP PREEMPT_DYNAMIC Mon Jun 3 11:32:55 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
问题描述:
- 某些机器 k3s无法安装(批量安装了30多台后，所有机器都无法访问https://rancher-mirror.rancher.cn/k3s/k3s-install.sh），curl安装命令无响应。
- wget https://rancher-mirror.rancher.cn/k3s/k3s-install.sh出现 http 403错误，wget http://www.baidu.com 可正常工作
- 使用k3s-install.sh本地安装出错，IP地址被目标服务器的访问控制列表（ACL）所阻止。
复现步骤:
- 安装 K3s 的命令:
curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh |
INSTALL_K3S_MIRROR=cn
K3S_URL=https://10.x.xx.xx:6443
K3S_TOKEN=xxxxx sh -s - --docker - 某些机器 k3s无法安装，curl安装命令无响应。
- wget https://rancher-mirror.rancher.cn/k3s/k3s-install.sh出现 http 403错误，wget http://www.baidu.com 可正常工作
- INSTALL_K3S_MIRROR=cn K3S_URL=https://10.x.x.x:6443 K3S_TOKEN=xxxxx./k3s-install.sh --docker
预期结果:
curl安装命令可以安装k3s
实际结果:
安装命令无任何输出；
附加上下文/日志:
-
wget出现 http 403错误。wget https://rancher-mirror.rancher.cn/k3s/k3s-install.sh
–2024-12-16 11:52:49-- https://rancher-mirror.rancher.cn/k3s/k3s-install.sh
Resolving rancher-mirror.rancher.cn (rancher-mirror.rancher.cn)… 111.170.24.252
Connecting to rancher-mirror.rancher.cn (rancher-mirror.rancher.cn)|111.170.24.252|:443… connected.
HTTP request sent, awaiting response… 403 Forbidden
2024-12-16 11:52:49 ERROR 403: Forbidden."] -
INSTALL_K3S_MIRROR=cn K3S_URL=https://10.x.x.x:6443 K3S_TOKEN=xxxxx ./k3s-install.sh --docker
[sudo] password for test:
[INFO] Finding release for channel stable
[INFO] Using 403 Forbidden403 Forbidden
You don’t have permission to access the URL on this server.
denied by IP ACL = blacklist
Powered by Tengine
CDN Request Id: 1b98b91e17343220777622108e as release
[INFO] Downloading hash rancher-mirror.rancher.cn/k3s/403 Forbidden403 Forbidden
You don’t have permission to access the URL on this server.
denied by IP ACL = blacklist
Powered by Tengine
CDN Request Id: 1b98b91e17343220777622108e/sha256sum-amd64.txt
[ERROR] download needs exactly 2 arguments