This is a post in the saga about running Kubernetes on a cluster of Ubuntu powered Raspberry Pi 4.<\/p>\n\n\n\n
I see that I built that RPI4 cluster five years ago but it still works well and works both as a playground and fullfilling some actual needs. I have updated to Ubuntu 24.04 since then but otherwise it is pretty much the same.<\/p>\n\n\n\n
Sooner or later one needs a custom image and I did write about that earlier<\/a>. Yesterday I noticed that solution was not 100% correct. So for my own records and other microk8s users I sum up the steps here.<\/p>\n\n\n\n On the backplane host<\/strong><\/p>\n\n\n\n Install the microk8s registry plugin: Install the buildx plugin: Create a file Create a builder for multi-arch builds: Create your image description, for example: Build and push: Now you can refer to this image from your deployment.yaml (where compute is replaced with your backplane host): On all nodes that will pull from the registry<\/strong><\/p>\n\n\n\n Microk8s will assume https when trying to pull the image from the registry but the registry plugin only supports http. We tell containerd to use http by editing \/var\/snap\/microk8s\/current\/args\/containerd-template.toml and replacing the last section with:<\/p>\n\n\n\n Then restart with: That should be it, you can schedule a job on a specific node (“rpi4-6” in the example below) where you have done the changes to see that it works. For example by modifying the deployment with yq (sudo snap install yq) before applying: This is a post in the saga about running Kubernetes on a cluster of Ubuntu powered Raspberry Pi 4. I see that I built that RPI4 cluster five years ago but it still works well and works both as a … Continue reading microk8s enable registry<\/code><\/p>\n\n\n\ndocker-buildx-plugin<\/code><\/p>\n\n\n\nbuildkitd.toml<\/code> with this content (replace compute with your backplane host):<\/p>\n\n\n\n[registry.\"compute:32000\"]
http = true<\/pre>\n\n\n\ndocker buildx create --use --name mybuilder --driver-opt network=host --buildkitd-flags '--allow-insecure-entitlement network.host' --buildkitd-flags '--allow-insecure-entitlement network.host' --config buildkitd.toml<\/code><\/p>\n\n\n\nFROM debian:stable
RUN <<EOF
apt-get update && apt-get install -y ffmpeg mediainfo wget ca-certificates python3 python3-pip procps elinks curl python3-bs4<\/code>
EOF <\/p>\n\n\n\ndocker buildx build -f podcast-stable-image -t compute:32000\/mydebianstable:registry-20250811 --platform linux\/amd64,linux\/arm64 . --builder mybuilder --push<\/code><\/p>\n\n\n\nimage: compute:32000\/mydebianstable:registry-20250811<\/code><\/code><\/p>\n\n\n\n[plugins.\"io.containerd.grpc.v1.cri\".registry]\n [plugins.\"io.containerd.grpc.v1.cri\".registry.mirrors.\"compute:32000\"]\n endpoint = [\"http:\/\/compute:32000\"]\n [plugins.\"io.containerd.grpc.v1.cri\".registry.configs.\"compute:32000\".tls]\n insecure_skip_verify = true\n<\/code><\/pre>\n\n\n\nsudo snap stop microk8s && sudo snap start microk8s<\/code><\/p>\n\n\n\nkubectl create job --from=cronjob\/cronjobnamehere makeupapodnamehere -o yaml | yq e '.spec.template.spec.nodeName = \"rpi4-6\"' - | kubectl apply -f -<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"