calicoctl node checksystem
This section describes the calicoctl node checksystem
command.
Read the calicoctl Overview for a full list of calicoctl commands.
Displaying the help text for ‘calicoctl node checksystem’ command
Run calicoctl node checksystem --help
to display the following help menu for the command.
Usage:
calicoctl node checksystem [--kernel-config=<kernel-config>]
Options:
-h --help Show this screen.
-f --kernel-config=<kernel-config> Override the Kernel config file location.
Expected format is plain text.
default search locations:
"/usr/src/linux/.config",
"/boot/config-kernelVersion,
"/usr/src/linux-kernelVersion/.config",
"/usr/src/linux-headers-kernelVersion/.config",
"/lib/modules/kernelVersion/build/.config"
Description:
Check the compatibility of this compute host to run a Calico node instance.
Procedure
These are the steps that calicoctl
takes to pinpoint what modules are available in your system.
calicoctl
checks the kernel version.- By executing
lsmod
it tries to find out what modules are enabled. - Modules without a match in step 2 will be checked against
/lib/modules/<YOUR_KERNEL_VERSION>/modules.dep
file. - Modules without a match in step 2 & 3 will be checked against
/lib/modules/<YOUR_KERNEL_VERSION>/modules.builtin
file. - Modules without a match in previous steps will be tested against
kernelconfig
file/usr/src/linux/.config
. - Any remaining module will be tested against loaded iptables modules in
/proc/net/ip_tables_matches
.
Examples
calicoctl node checksystem
An example response follows.
xt_conntrack OK
xt_u32 OK
WARNING: Unable to detect the xt_set module. Load with `modprobe xt_set`
WARNING: Unable to detect the ipip module. Load with `modprobe ipip`
It is possible to override the kernel-config
file using --kernel-config
argument. In this case calicoctl
will try to resolve the modules against the provided file and skip the default locations.
calicoctl node checksystem --kernel-config /root/MYKERNELFILE