docker单机部署rancher，启动脚本为：
docker run -d --restart=unless-stopped
-p 10080:80 -p 10443:443
–privileged
-e CATTLE_SYSTEM_DEFAULT_REGISTRY=“docker.m.daocloud.io”
-e CATTLE_SERVER_URL=“https://10.16.228.11:10443”
–name rancher
-v /opt/data/rancher_data:/var/lib/rancher
docker.m.daocloud.io/rancher/rancher:v2.13.3
一开始正常进入并配置了账号密码，然后想重启试试能不能正常
于是执行了
docker stop rancher
docker start rancher
则启动不了了，以下是日志：
docker logs -f rancher
2026/02/26 08:57:14 [INFO] Rancher version v2.13.3 (0ce54ba2a45d79e7a51ce6b35ccfd353413ab352) is starting
2026/02/26 08:57:14 [INFO] Rancher arguments {ACMEDomains: AddLocal:true Embedded:false BindHost: HTTPListenPort:80 HTTPSListenPort:443 K8sMode:auto Debug:false Trace:false NoCACerts:false AuditLogPath:/var/log/auditlog/rancher-api-audit.log AuditLogMaxage:10 AuditLogMaxsize:100 AuditLogMaxbackup:10 AuditLogLevel:0 AuditLogEnabled:false Features: ClusterRegistry: AggregationRegistrationTimeout:5m0s}
2026/02/26 08:57:14 [INFO] Listening on /tmp/log.sock
2026/02/26 08:57:14 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:16 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:18 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:20 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:22 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:24 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:26 [INFO] Waiting for server to become available: Get “https://127.0.0.1:6444/version?timeout=15m0s”: dial tcp 127.0.0.1:6444: connect: connection refused
2026/02/26 08:57:30 [FATAL] k3s exited with: exit status 1
Restoring git repositories:
- /var/lib/rancher-data/local-catalogs/v2/rancher-charts/4b40cac650031b74776e87c1a726b0484d0877c3ec137da0872547ff9b73a721/.git
Your branch is up to date with ‘origin/release-v2.13’.
/var/lib/rancher - /var/lib/rancher-data/local-catalogs/v2/rancher-rke2-charts/675f1b63a0a83905972dcab2794479ed599a6f41b86cd6193d69472d0fa889c9/.git
Your branch is up to date with ‘origin/main’.
/var/lib/rancher - /var/lib/rancher-data/local-catalogs/v2/rancher-partner-charts/8f17acdce9bffd6e05a58a3798840e408c4ea71783381ecd2e9af30baad65974/.git
Your branch is up to date with ‘origin/main’.
/var/lib/rancher
INFO: Running k3s server --cluster-init --cluster-reset
ERROR:
time=“2026-02-26T08:57:31Z” level=info msg=“Starting k3s v1.34.1+k3s1 (24fc436e)”
time=“2026-02-26T08:57:31Z” level=info msg=“Managed etcd cluster bootstrap already complete and initialized”
time=“2026-02-26T08:57:31Z” level=info msg=“certificate CN=kube-apiserver signed by CN=k3s-server-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:31 +0000 UTC”
time=“2026-02-26T08:57:31Z” level=info msg=“certificate CN=etcd-peer signed by CN=etcd-peer-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:31 +0000 UTC”
time=“2026-02-26T08:57:31Z” level=info msg=“certificate CN=etcd-server signed by CN=etcd-server-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:31 +0000 UTC”
time=“2026-02-26T08:57:31Z” level=info msg=“certificate CN=k3s,O=k3s signed by CN=k3s-server-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:31 +0000 UTC”
time=“2026-02-26T08:57:31Z” level=warning msg=“dynamiclistener [::]:6443: no cached certificate available for preload - deferring certificate load until storage initialization or first client request”
time=“2026-02-26T08:57:31Z” level=info msg=“Active TLS secret / (ver=) (count 10): map[listener.cattle.io/cn-02d6d602dfad:02d6d602dfad listener.cattle.io/cn-10.43.0.1:10.43.0.1 listener.cattle.io/cn-10.88.0.37:10.88.0.37 listener.cattle.io/cn-127.0.0.1:127.0.0.1 listener.cattle.io/cn-__1-f16284:::1 listener.cattle.io/cn-kubernetes:kubernetes listener.cattle.io/cn-kubernetes.default:kubernetes.default listener.cattle.io/cn-kubernetes.default.svc:kubernetes.default.svc listener.cattle.io/cn-kubernetes.default.svc.cluster.local:kubernetes.default.svc.cluster.local listener.cattle.io/cn-localhost:localhost listener.cattle.io/fingerprint:SHA1=A9F5F12B36BE944AD14360DD2789110C6B8B0F36]”
time=“2026-02-26T08:57:32Z” level=info msg=“Updated load balancer k3s-agent-load-balancer default server: 127.0.0.1:6443”
time=“2026-02-26T08:57:32Z” level=info msg=“Running load balancer k3s-agent-load-balancer 127.0.0.1:6444 → [default: 127.0.0.1:6443]”
time=“2026-02-26T08:57:32Z” level=warning msg=“Failed to get apiserver address from etcd: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused"”
time=“2026-02-26T08:57:33Z” level=info msg=“Password verified locally for node 02d6d602dfad”
time=“2026-02-26T08:57:33Z” level=info msg=“certificate CN=02d6d602dfad signed by CN=k3s-server-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:33 +0000 UTC”
time=“2026-02-26T08:57:33Z” level=info msg=“certificate CN=system:node:02d6d602dfad,O=system:nodes signed by CN=k3s-client-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:33 +0000 UTC”
time=“2026-02-26T08:57:33Z” level=info msg=“certificate CN=system:kube-proxy signed by CN=k3s-client-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:33 +0000 UTC”
time=“2026-02-26T08:57:34Z” level=info msg=“certificate CN=system:k3s-controller signed by CN=k3s-client-ca@1772094497: notBefore=2026-02-26 08:28:17 +0000 UTC notAfter=2027-02-26 08:57:34 +0000 UTC”
time=“2026-02-26T08:57:34Z” level=fatal msg=“Error: starting kubernetes: failed to start cluster: start managed database: Managed etcd cluster membership was previously reset, please remove the cluster-reset flag and start k3s normally. If you need to perform another cluster reset, you must first manually delete the file at /var/lib/rancher/k3s/server/db/reset-flag”
Restoring git repositories: - /var/lib/rancher-data/local-catalogs/v2/rancher-charts/4b40cac650031b74776e87c1a726b0484d0877c3ec137da0872547ff9b73a721/.git
Your branch is up to date with ‘origin/release-v2.13’.
/var/lib/rancher - /var/lib/rancher-data/local-catalogs/v2/rancher-rke2-charts/675f1b63a0a83905972dcab2794479ed599a6f41b86cd6193d69472d0fa889c9/.git
Your branch is up to date with ‘origin/main’.
/var/lib/rancher - /var/lib/rancher-data/local-catalogs/v2/rancher-partner-charts/8f17acdce9bffd6e05a58a3798840e408c4ea71783381ecd2e9af30baad65974/.git
Your branch is up to date with ‘origin/main’.
/var/lib/rancher
INFO: Running k3s server --cluster-init --cluster-reset
2026/02/26 08:57:48 [INFO] Rancher version v2.13.3 (0ce54ba2a45d79e7a51ce6b35ccfd353413ab352) is starting
2026/02/26 08:57:48 [INFO] Rancher arguments {ACMEDomains: AddLocal:true Embedded:false BindHost: HTTPListenPort:80 HTTPSListenPort:443 K8sMode:auto Debug:false Trace:false NoCACerts:false AuditLogPath:/var/log/auditlog/rancher-api-audit.log AuditLogMaxage:10 AuditLogMaxsize:100 AuditLogMaxbackup:10 AuditLogLevel:0 AuditLogEnabled:false Features: ClusterRegistry: AggregationRegistrationTimeout:5m0s}
2026/02/26 08:57:48 [INFO] Listening on /tmp/log.sock
