Install OpenShift Local (CRC) on Debian

Install prerequisites:

sudo apt-get install qemu-kvm libvirt-daemon libvirt-daemon-system bridge-utils virt-manager dnsmasq

Create this file:

cat /etc/resolv.dnsmasq.conf
nameserver 8.8.8.8

Modify dnsmasq config /etc/dnsmasq.conf:

...
resolv-file=/etc/resolv.dnsmasq.conf
...

Modify PATH for current user:

echo "export PATH=$HOME/local/bin:/usr/sbin/:$HOME/.crc/bin/oc/:$PATH: >> $HOME/.bashrc

And reboot

After reboot, navigate to OpenShift Local Homepage - login and download crc - usually it is placed in ~/Downloads

Create the directory in $HOME

mkdir -p $HOME/local/bin

Extract and move the binary to the above directory:

tar xvf crc-linux-amd64.tar.xz 
cd crc-linux-2.45.0-amd64/
mv crc $HOME/local/bin

Activate the user network mode:

crc config set network-mode user

Prepare the host machine:

crc setup

Set additional configuration:

# CPU
crc config set cpus 8
# Memory
crc config set memory 14786
# VM disk size
crc config set disk-size 50
# Enable monitoring
crc config set enable-cluster-monitoring true

Try to start the virtual machine:

crc start

Paste the secret.

Because of apparmor - you'll get the error like this:

Could not open '/home/dmitritelinov/.crc/cache/crc_libvirt_4.17.7_amd64/crc.qcow2': Permission denied')

Edit /etc/apparmor.d/libvirt/TEMPLATE.qemu and add qcow2 path:

profile LIBVIRT_TEMPLATE flags=(attach_disconnected) {
  #include <abstractions/libvirt-qemu>
  /home/dmitritelinov/.crc/cache/crc_libvirt_4.17.7_amd64/crc.qcow2 rk
}

Also open /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper and comment here these 3 lines - oc binary is placed in hidden .crc folder, so we need to disable those:

  # for backingstore -- allow access to non-hidden files in @{HOME} as well
  # as storage pools
#  audit deny @{HOME}/.* mrwkl,
#  audit deny @{HOME}/.*/ rw,
#  audit deny @{HOME}/.*/** mrwkl,

Restart apparmor:

sudo systemctl restart apparmor.service

Start the virtual machine as usual:

crc start

After machine is started, you'll get the cluster URL and credentials. If you want to get them again:

crc console --credentials

To be able to run oc - issue:

eval $(crc oc-env)

Login as kubeadmin or developer like this:

oc login -u kubeadmin https://api.crc.testing:6443
oc login -u developer https://api.crc.testing:6443

Open the OpenShift Local console in browser:

crc console