How to run k3s rootless on the OpenRC system?

[GamePlayer-8]

Hello,

I have an issue in running k3s as non-root on Alpine Linux with OpenRC.
Whenever I do kubectl get nodes I get no resources.

I've wrote a custom OpenRC unit to start it:

#!/sbin/openrc-run

supervisor="supervise-daemon"
command_user="k3s"
command="/usr/bin/k3s"
command_args="server --rootless --snapshotter=fuse-overlayfs --log /home/$command_user/k3s.log"
respawn_delay=2
respawn_max=3
respawn_period=60

depend() {
    after net
    need localmount
    use dbus
}

start_pre() {
    # Get user UID/GID
    local uid=$(id -u "$command_user")
    local gid=$(id -g "$command_user")
    
    # Create required directories
    for dir in "/home/$command_user/.local/share/k3s" \
               "/home/$command_user/.rancher" "/home/$command_user/.kube"; do
        checkpath --directory --mode 0750 --owner $uid:$gid "$dir"
    done

    # Disable cgroup delegation (rootless workaround)
    echo "+pids" > /sys/fs/cgroup/cgroup.subtree_control
}

start() {
    local uid=$(id -u "$command_user")
    local gid=$(id -g "$command_user")
    
    # K3S environment variables
    export XDG_RUNTIME_DIR="/home/$command_user/xdg"
    export XDG_DATA_HOME="/home/$command_user/.local/share"
    export HOME="/home/$command_user"
    export USER="$command_user"
    export K3S_DATA_DIR="/home/$command_user/.local/share/k3s"
    export K3S_CONFIG_FILE="/home/$command_user/.k3s.yaml"
    
    # Create containerd directory
    mkdir -p "$XDG_RUNTIME_DIR/k3s/containerd"
    chown -R $uid:$gid "$XDG_RUNTIME_DIR/k3s"

    ebegin "Starting $RC_SVCNAME"
    supervise-daemon $RC_SVCNAME \
        --user $command_user \
        --env "XDG_RUNTIME_DIR=$XDG_RUNTIME_DIR" \
        --env "XDG_DATA_HOME=$XDG_DATA_HOME" \
        --env "HOME=$HOME" \
        --env "USER=$USER" \
        --env "K3S_DATA_DIR=$K3S_DATA_DIR" \
        --env "K3S_CONFIG_FILE=$K3S_CONFIG_FILE" \
        --start $command -- $command_args
    eend $?
}

stop() {
    ebegin "Stopping $RC_SVCNAME"
    supervise-daemon $RC_SVCNAME --stop
    eend $?
}

but I wasn't been able to get it working. Here's the log file.

I'm not sure how to configure cgroups for k3s in OpenRC.

[dereknola]

Cgroups is configured at the OS level. Note that pure cgroupsv2 is required for rootless K3s.

https://rootlesscontaine.rs/getting-started/common/cgroup2/
https://liet.me/2022/07/08/enable-cgroups-v2-in-alpine-linux/

You likely also need to configure openrc to use it
https://wiki.gentoo.org/wiki/OpenRC/CGroups

As we say in the docs

terminal sessions do not allow cgroup v2 delegation
so make sure openrc is handling that.