minikube报错:Listen: listen tcp :53: bind: permission denied
[root@master01 minikube]# kubectl logs -n kube-system coredns-66bc5c9577-4brlp --previous
maxprocs: Leaving GOMAXPROCS=4: CPU quota undefined
Listen: listen tcp :53: bind: permission denied
[root@master01 minikube]#
错误日志显示 listen tcp :53: bind: permission denied,这表示 *CoreDNS 无法绑定到 53 端口*。在 Linux 系统中,1024 以下的端口是特权端口,普通进程默认没有权限监听。
[root@master01 minikube]# netstat -nplt
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1044/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1463/master
tcp 0 0 127.0.0.1:32768 0.0.0.0:* LISTEN 17539/docker-proxy
tcp 0 0 127.0.0.1:32769 0.0.0.0:* LISTEN 17553/docker-proxy
tcp 0 0 127.0.0.1:32770 0.0.0.0:* LISTEN 17565/docker-proxy
tcp 0 0 127.0.0.1:32771 0.0.0.0:* LISTEN 17579/docker-proxy
tcp 0 0 127.0.0.1:32772 0.0.0.0:* LISTEN 17592/docker-proxy
tcp6 0 0 :::22 :::* LISTEN 1044/sshd
tcp6 0 0 ::1:25 :::* LISTEN 1463/master
[root@master01 minikube]# netstat -tulpn | grep :53
53没有被用
# 1. 修改 CoreDNS 使用 1053 端口
kubectl edit configmap coredns -n kube-system
# 将 .:53 { 改为 .:1053 {
# 保存退出
# 2. 同时修改 Deployment 端口
kubectl patch deployment coredns -n kube-system -p '{
"spec": {
"template": {
"spec": {
"containers": [{
"name": "coredns",
"ports": [
{"containerPort": 1053, "name": "dns", "protocol": "UDP"},
{"containerPort": 1053, "name": "dns-tcp", "protocol": "TCP"}
]
}]
}
}
}
}'
# 3. 重启
kubectl rollout restart deployment coredns -n kube-system

1701

被折叠的 条评论
为什么被折叠?



