ONTAP 9.5でSVM DR設定


ONTAP 8.x 7-modeではボリューム単位でしかsnapmirrorができませんでしたが、ONTAP 9.5では、SVM DRという機能を使ってSVMの機能ごとsnapmirrorできるようになっています。

ONTAP 8.3時代の分かりやすい絵「SVMのディザスタ リカバリの設定
ONTAP 9.xのドキュメント「SnapMirror SVMレプリケーションの概要

参考になる日本語資料「ETERNUS AX series、ETERNUS HX series ONTAP 9 用SnapMirror 構成およびベストプラクティスガイド

下記の環境であるとした場合のコマンド実行例を書く。

送り元となるクラスタ名 netapp001c
送り元となるSVM名 netapp001
受け側となるクラスタ名 netapp002c
受け側となるSVM名 netapp001-dr

(1) クラスタピア設定

GUIなどでクラスタピアを設定

コマンドだとcluster peerコマンドで実施。

netapp001c::> cluster peer create -peer-addrs 相手のintercluster IP

Notice: Use a generated passphrase or choose a passphrase of 8 or more
        characters. To ensure the authenticity of the peering relationship, use
        a phrase or sequence of characters that would be hard to guess.

Enter the passphrase:
Confirm the passphrase:

Notice: Now use the same passphrase in the "cluster peer create" command in the
        other cluster.

netapp001c::>
netapp002c::> cluster peer create -peer-addrs 相手のintercluster IP

Notice: Use a generated passphrase or choose a passphrase of 8 or more
        characters. To ensure the authenticity of the peering relationship, use
        a phrase or sequence of characters that would be hard to guess.

Enter the passphrase:
Confirm the passphrase:

netapp002c::>

それぞれで同じパスフレーズを入力していれば「cluster peer show」で見た時に「Availability:Available」となる

netapp002c::> cluster peer show
Peer Cluster Name         Cluster Serial Number Availability   Authentication
------------------------- --------------------- -------------- --------------
netapp001c                   1-80-000008           Available      ok

netapp002c::>

(2) 受け側となるSVMを作成

受け側NetApp上で、受け側となるSVM(ピアSVM)を、dp-destinationというタイプで作成。

まずは、受け側に作られているSVMを確認するため「vserver show」を実行

netapp002c::> vserver show
                               Admin      Operational Root
Vserver     Type    Subtype    State      State       Volume     Aggregate
----------- ------- ---------- ---------- ----------- ---------- ----------
netapp002    data    default    running    running     netapp002tm netapp002c_
                                                      p_root     01_NL_SAS_1
netapp002c   admin   -          -          -           -          -
netapp002c-01
            node    -          -          -           -          -
netapp002c-02
            node    -          -          -           -          -
4 entries were displayed.

netapp002c::>

ピアSVMを「vserver create -vserver netapp001-dr -subtype dp-destination」で作成し、「vserver show」で作成されたことを確認

netapp002c::> vserver create -vserver netapp001-dr -subtype dp-destination
[Job 937] Job succeeded:
Vserver creation completed.

netapp002c::>
netapp002c::> vserver show
                               Admin      Operational Root
Vserver     Type    Subtype    State      State       Volume     Aggregate
----------- ------- ---------- ---------- ----------- ---------- ----------
netapp001-dr data    dp-destination        stopped     -          -
                               running
netapp002    data    default    running    running     netapp002tm netapp002c_
                                                      p_root     01_NL_SAS_1
netapp002c   admin   -          -          -           -          -
netapp002c-01
            node    -          -          -           -          -
netapp002c-02
            node    -          -          -           -          -
5 entries were displayed.

netapp002c::>

作成したピアSVM netapp001-drは「stopped」状態となっている。

(3) SVM peerを作成1 受け側で関係の設定

受け側NetApp上で、送り元SVMとのSVM peerを作成

「vserver peer create -vserver 受け側SVM -peer-vserver 送り元SVM -applications snapmirror -peer-cluster 送り元NetAppクラスタ」を実行

netapp002c::> vserver peer create -vserver netapp001-dr -peer-vserver netapp001 -applications snapmirror -peer-cluster netapp001c

Info: [Job 938] 'vserver peer create' job queued

netapp002c::> 

実行後、「vserver peer show」を実行し、作成の状況を確認。

netapp002c::> vserver peer show
            Peer        Peer                           Peering        Remote
Vserver     Vserver     State        Peer Cluster      Applications   Vserver
----------- ----------- ------------ ----------------- -------------- ---------
netapp001-dr netapp001    initializing netapp001c         snapmirror     netapp001

netapp002c::>

しばらく待つとPeer Stateが「initiated」に変化

netapp002c::> vserver peer show
            Peer        Peer                           Peering        Remote
Vserver     Vserver     State        Peer Cluster      Applications   Vserver
----------- ----------- ------------ ----------------- -------------- ---------
netapp001-dr netapp001    initiated    netapp001c         snapmirror     netapp001

netapp002c::> 

(4) SVM peerを作成2 送り元で関係受諾

送り元NetApp上で、受け側からのSVM peer要求を受諾。

まずは「vserver peer show」で状況を確認

netapp001c::> vserver peer show
            Peer        Peer                           Peering        Remote
Vserver     Vserver     State        Peer Cluster      Applications   Vserver
----------- ----------- ------------ ----------------- -------------- ---------
netapp001    netapp001-dr pending      netapp002c         snapmirror     netapp001-dr

netapp001c::> 

Peer Stateが「pending」となっていることを確認。

pending状態を「vserver peer accept -vserver 送り元SVM -peer-vserver 受け側SVM」を実行して受諾。

netapp001c::> vserver peer accept -vserver netapp001 -peer-vserver netapp001-dr

Info: [Job 922] 'vserver peer accept' job queued

netapp001c::> 
netapp001c::> vserver peer show
            Peer        Peer                           Peering        Remote
Vserver     Vserver     State        Peer Cluster      Applications   Vserver
----------- ----------- ------------ ----------------- -------------- ---------
netapp001    netapp001-dr peered       netapp002c         snapmirror     netapp001-dr

netapp001c::>

Peer Stateが「peered」に変わったら受諾処理が完了です。(処理中はpendingのままです)

(5) SVM peerを作成3 受け側でも受諾を確認

受け側NetApp上で、SVM peerが成立したことを確認

netapp002c::> vserver peer show
            Peer        Peer                           Peering        Remote
Vserver     Vserver     State        Peer Cluster      Applications   Vserver
----------- ----------- ------------ ----------------- -------------- ---------
netapp001-dr netapp001    peered       netapp001c         snapmirror     netapp001

netapp002c::>

(6) snapmirrorの作成

まず、現状のsnapmirrorの状態を送り元と受け側で確認しておく。

netapp001c::> snapmirror show
This table is currently empty.

netapp001c::> 

netapp002c::> snapmirror show
This table is currently empty.

netapp002c::> 

snapmirrorの作成は、受け側NetApp上で実行する。

「snapmirror create -source-vserver 送り元SVM -destination-vserver 受け側SVM -type DP -policy DPDefault -schedule hourly -identity-preserve true」と実行する。

-schedule hourly というのは1時間ごとに同期を取る、という設定となる。このスケジュールを別のものにすることもできる。

netapp002c::> snapmirror create -source-vserver netapp001 -destination-vserver netapp001-dr -type DP -policy DPDefault -schedule hourly -identity-preserve true

netapp002c::> 

作成後、「snapmirror show」を実行すると下記の様に、「Mirror State:Uninitialzied」「Relationship Status: Idle」で表示される。

netapp002c::> snapmirror show
                                                                       Progress
Source            Destination Mirror  Relationship   Total             Last
Path        Type  Path        State   Status         Progress  Healthy Updated
----------- ---- ------------ ------- -------------- --------- ------- --------
netapp001:   XDP  netapp001-dr: Uninitialized
                                      Idle           -         true    -

netapp002c::>

(7) snapmirrorの初期化開始

受け側NetApp上でsnapmirrorの初期化を開始する。

「snapmirror initialize -destination-path 受け側SVM:」を実行する。

netapp002c::> snapmirror initialize -destination-path  netapp001-dr:

netapp002c::> 

実行後、snapmirror showで実行し、「Relationship Status: Transferring」になっていることを確認。

netapp002c::> snapmirror show
                                                                       Progress
Source            Destination Mirror  Relationship   Total             Last
Path        Type  Path        State   Status         Progress  Healthy Updated
----------- ---- ------------ ------- -------------- --------- ------- --------
netapp001:   XDP  netapp001-dr: Uninitialized
                                      Transferring   -         true    -

netapp002c::>

(8) Snapmirrorの完了を確認

ボリュームを含めてすべてのデータ転送が終わると「Mirror State: Snapmirrored」「Relationship Status: Idle」に変化します。

netapp002c::> snapmirror show
                                                                       Progress
Source            Destination Mirror  Relationship   Total             Last
Path        Type  Path        State   Status         Progress  Healthy Updated
----------- ---- ------------ ------- -------------- --------- ------- --------
netapp001:   XDP  netapp001-dr: Snapmirrored
                                      Idle           -         true    -

netapp002c::> 

CentOS8をAlmaLinux8にコンバートしてみた


CentOS8の代替ディストリビューションの1つ、 AlmaLinuxのβ版がダウンロードできるようになったのでインストールしてみようとした。

が・・・ESXi7.0U1上でISOからインストールしようとしたけど、AlmaLinux-8.3-beta-1-x86_64-boot.iso 、AlmaLinux-8.3-beta-1-x86_64-dvd1.iso、AlmaLinux-8.3-beta-1-x86_64-minimal.iso のどれを使ってもメディアとして認識してくれず起動できない。

仕方が無いのでCentOS8.3のメディアでインストールしてから切り替えてみることにした。

なお、あとで判明したのだが、起動できないのはAlmaLinux 8は現段階ではセキュアブート非対応であることが原因で、仮想マシンオプションで「セキュアブート:有効」設定を無効に変更することで起動する様になった。

基本手順は「CentOS8からOracle Linux 8への移行2(成功例/非公式手順/EFI環境用

インストールが終わったCentOS8でAlmaLinux8のAlmaLinux-8.3-beta-1-x86_64-dvd1.isoを/mntにマウントしてから、下記の /etc/yum.repos.d/media.repo を用意

[root@almalinux ~]# cat /etc/yum.repos.d/media.repo
[media]
name=AlmaLinux 8 Media
baseurl=file:///mnt/BaseOS
gpgcheck=0
[root@almalinux ~]#

続いてISO内のalmalinux-releaseをインストール。

[root@almalinux ~]# rpm -Uvh --force /mnt/BaseOS/Packages/almalinux-release-8.3-2.el8.x86_64.rpm
警告: /mnt/BaseOS/Packages/almalinux-release-8.3-2.el8.x86_64.rpm: ヘッダー V4 RSA/SHA256 Signature、鍵 ID c21ad6ea: NOKEY
Verifying...                          ################################# [100%]
準備しています...              ################################# [100%]
更新中 / インストール中...
   1:almalinux-release-8.3-2.el8      ################################# [100%]
[root@almalinux ~]#

CentOS8のcentos-linux-releaseと centos-linux-reposを削除

[root@almalinux ~]# dnf remove centos-linux-release centos-linux-repos
Repository baseos is listed more than once in the configuration
Repository appstream is listed more than once in the configuration
Repository powertools is listed more than once in the configuration
Repository extras is listed more than once in the configuration
Repository baseos-source is listed more than once in the configuration
Repository appstream-source is listed more than once in the configuration
Repository extras-source is listed more than once in the configuration
依存関係が解決しました。
================================================================================
 パッケージ                Arch        バージョン          リポジトリー   サイズ
================================================================================
削除中:
 centos-linux-release      noarch      8.3-1.2011.el8      @anaconda       25 k
 centos-linux-repos        noarch      8-2.el8             @anaconda       26 k
未使用の依存関係の削除:
 centos-gpg-keys           noarch      1:8-2.el8           @anaconda      3.3 k

トランザクションの概要
================================================================================
削除  3 パッケージ

解放された容量: 54 k
これでよろしいですか? [y/N]: y
トランザクションの確認を実行中
トランザクションの確認に成功しました。
トランザクションのテストを実行中
トランザクションのテストに成功しました。
トランザクションを実行中
  準備             :                                                        1/1
  scriptletの実行中: centos-linux-release-8.3-1.2011.el8.noarch             1/1
  削除             : centos-linux-release-8.3-1.2011.el8.noarch             1/3
  削除             : centos-linux-repos-8-2.el8.noarch                      2/3
  削除             : centos-gpg-keys-1:8-2.el8.noarch                       3/3
  scriptletの実行中: centos-gpg-keys-1:8-2.el8.noarch                       3/3
  検証             : centos-gpg-keys-1:8-2.el8.noarch                       1/3
  検証             : centos-linux-release-8.3-1.2011.el8.noarch             2/3
  検証             : centos-linux-repos-8-2.el8.noarch                      3/3

削除しました:
  centos-gpg-keys-1:8-2.el8.noarch   centos-linux-release-8.3-1.2011.el8.noarch
  centos-linux-repos-8-2.el8.noarch

完了しました!
[root@almalinux ~]#

この段階でのレポジトリ登録を確認

[root@almalinux ~]# ls /etc/yum.repos.d/
almalinux.repo  media.repo
[root@almalinux ~]# dnf repolist
repo id                         repo の名前
appstream                       AlmaLinux 8.3 - AppStream
baseos                          AlmaLinux 8.3 - BaseOS
extras                          AlmaLinux 8.3 - Extras
media                           AlmaLinux 8 Media
powertools                      AlmaLinux 8.3 - PowerTools
[root@almalinux ~]#

「dnf distro-sync」を実行してCentOS由来のパッケージをAlmaLinuxのパッケージに入れ替える。

[root@almalinux ~]# dnf distro-sync
AlmaLinux 8.3 - BaseOS                          2.8 MB/s | 2.6 MB     00:00
AlmaLinux 8.3 - AppStream                       5.1 MB/s | 6.5 MB     00:01
AlmaLinux 8.3 - PowerTools                      2.0 MB/s | 1.9 MB     00:00
AlmaLinux 8.3 - Extras                          4.5 kB/s | 1.2 kB     00:00
依存関係が解決しました。
================================================================================
 パッケージ               Arch   バージョン                     Repo      サイズ
================================================================================
アップグレード:
 NetworkManager           x86_64 1:1.26.0-12.el8_3              baseos    2.4 M
 NetworkManager-libnm     x86_64 1:1.26.0-12.el8_3              baseos    1.7 M
 NetworkManager-team      x86_64 1:1.26.0-12.el8_3              baseos    141 k
 NetworkManager-tui       x86_64 1:1.26.0-12.el8_3              baseos    320 k
 curl                     x86_64 7.61.1-14.el8_3.1              baseos    352 k
 efi-filesystem           noarch 3-2.el8.alma                   baseos    7.9 k
 freetype                 x86_64 2.9.1-4.el8_3.1                baseos    393 k
 gnutls                   x86_64 3.6.14-7.el8_3                 baseos    1.0 M
 grub2-common             noarch 1:2.02-90.el8.alma             baseos    884 k
 grub2-efi-x64            x86_64 1:2.02-90.el8.alma             baseos    405 k
 grub2-tools              x86_64 1:2.02-90.el8.alma             baseos    2.0 M
 grub2-tools-extra        x86_64 1:2.02-90.el8.alma             baseos    1.1 M
 grub2-tools-minimal      x86_64 1:2.02-90.el8.alma             baseos    204 k
 iptables                 x86_64 1.8.4-15.el8_3.3               baseos    584 k
 iptables-ebtables        x86_64 1.8.4-15.el8_3.3               baseos     71 k
 iptables-libs            x86_64 1.8.4-15.el8_3.3               baseos    106 k
 kexec-tools              x86_64 2.0.20-34.el8_3.1              baseos    496 k
 libcurl                  x86_64 7.61.1-14.el8_3.1              baseos    298 k
 libgcc                   x86_64 8.3.1-5.1.el8.alma             baseos     77 k
 libgomp                  x86_64 8.3.1-5.1.el8.alma             baseos    203 k
 libreport-filesystem     x86_64 2.9.5-15.el8.alma              baseos     20 k
 libselinux               x86_64 2.9-4.el8_3                    baseos    165 k
 libselinux-utils         x86_64 2.9-4.el8_3                    baseos    242 k
 libstdc++                x86_64 8.3.1-5.1.el8.alma             baseos    450 k
 microcode_ctl            x86_64 4:20200609-2.20201112.1.el8_3  baseos    4.6 M
 openssl                  x86_64 1:1.1.1g-12.el8_3              baseos    706 k
 openssl-libs             x86_64 1:1.1.1g-12.el8_3              baseos    1.5 M
 python3-libselinux       x86_64 2.9-4.el8_3                    baseos    282 k
 shim-x64                 x86_64 15-16.el8.alma                 baseos    657 k
 sudo                     x86_64 1.8.29-6.el8_3.1               baseos    922 k
 systemd                  x86_64 239-41.el8_3.1                 baseos    3.5 M
 systemd-libs             x86_64 239-41.el8_3.1                 baseos    1.1 M
 systemd-pam              x86_64 239-41.el8_3.1                 baseos    456 k
 systemd-udev             x86_64 239-41.el8_3.1                 baseos    1.4 M
 tuned                    noarch 2.14.0-3.el8_3.1.alma          baseos    291 k
 tzdata                   noarch 2021a-1.el8                    baseos    472 k
再インストール:
 acl                      x86_64 2.2.53-1.el8                   baseos     81 k
 audit                    x86_64 3.0-0.17.20191104git1c2f876.el8
                                                                baseos    255 k
 audit-libs               x86_64 3.0-0.17.20191104git1c2f876.el8
                                                                baseos    117 k
 authselect               x86_64 1.2.1-2.el8                    baseos    114 k
 authselect-libs          x86_64 1.2.1-2.el8                    baseos    210 k
 basesystem               noarch 11-5.el8                       baseos     10 k
 bash                     x86_64 4.4.19-12.el8                  baseos    1.5 M
 bind-export-libs         x86_64 32:9.11.20-5.el8               baseos    1.1 M
 biosdevname              x86_64 0.7.3-2.el8                    baseos     44 k
 brotli                   x86_64 1.0.6-2.el8                    baseos    322 k
 bzip2-libs               x86_64 1.0.6-26.el8                   baseos     48 k
 c-ares                   x86_64 1.13.0-5.el8                   baseos     93 k
 ca-certificates          noarch 2020.2.41-80.0.el8_2           baseos    391 k
 chkconfig                x86_64 1.13-2.el8                     baseos    194 k
 coreutils                x86_64 8.30-8.el8                     baseos    1.2 M
 coreutils-common         x86_64 8.30-8.el8                     baseos    2.0 M
 cpio                     x86_64 2.12-8.el8                     baseos    265 k
 cracklib                 x86_64 2.9.6-15.el8                   baseos     93 k
 cracklib-dicts           x86_64 2.9.6-15.el8                   baseos    4.0 M
 cronie                   x86_64 1.5.2-4.el8                    baseos    118 k
 cronie-anacron           x86_64 1.5.2-4.el8                    baseos     41 k
 crontabs                 noarch 1.11-16.20150630git.el8        baseos     25 k
 crypto-policies          noarch 20200713-1.git51d1222.el8      baseos     61 k
 crypto-policies-scripts  noarch 20200713-1.git51d1222.el8      baseos     67 k
 cryptsetup-libs          x86_64 2.3.3-2.el8                    baseos    469 k
 cyrus-sasl-lib           x86_64 2.1.27-5.el8                   baseos    123 k
 dbus                     x86_64 1:1.12.8-11.el8                baseos     40 k
 dbus-common              noarch 1:1.12.8-11.el8                baseos     45 k
 dbus-daemon              x86_64 1:1.12.8-11.el8                baseos    239 k
 dbus-glib                x86_64 0.110-2.el8                    baseos    127 k
 dbus-libs                x86_64 1:1.12.8-11.el8                baseos    183 k
 dbus-tools               x86_64 1:1.12.8-11.el8                baseos     84 k
 dbxtool                  x86_64 8-5.el8                        baseos     37 k
 device-mapper            x86_64 8:1.02.171-5.el8               baseos    373 k
 device-mapper-event      x86_64 8:1.02.171-5.el8               baseos    267 k
 device-mapper-event-libs x86_64 8:1.02.171-5.el8               baseos    266 k
 device-mapper-libs       x86_64 8:1.02.171-5.el8               baseos    405 k
 device-mapper-persistent-data
                          x86_64 0.8.5-4.el8                    baseos    468 k
 dhcp-client              x86_64 12:4.3.6-41.el8                baseos    317 k
 dhcp-common              noarch 12:4.3.6-41.el8                baseos    206 k
 dhcp-libs                x86_64 12:4.3.6-41.el8                baseos    147 k
 diffutils                x86_64 3.6-6.el8                      baseos    361 k
 dmidecode                x86_64 1:3.2-6.el8                    baseos     91 k
 dnf                      noarch 4.2.23-4.el8                   baseos    512 k
 dnf-data                 noarch 4.2.23-4.el8                   baseos    148 k
 dnf-plugins-core         noarch 4.0.17-5.el8                   baseos     65 k
 dosfstools               x86_64 4.1-6.el8                      baseos    121 k
 dracut                   x86_64 049-95.git20200804.el8         baseos    366 k
 dracut-config-rescue     x86_64 049-95.git20200804.el8         baseos     55 k
 dracut-network           x86_64 049-95.git20200804.el8         baseos    102 k
 dracut-squash            x86_64 049-95.git20200804.el8         baseos     56 k
 e2fsprogs                x86_64 1.45.6-1.el8                   baseos    1.0 M
 e2fsprogs-libs           x86_64 1.45.6-1.el8                   baseos    232 k
 efibootmgr               x86_64 16-1.el8                       baseos     47 k
 efivar                   x86_64 37-4.el8                       baseos     35 k
 efivar-libs              x86_64 37-4.el8                       baseos    107 k
 elfutils-debuginfod-client
                          x86_64 0.180-1.el8                    baseos     63 k
 elfutils-default-yama-scope
                          noarch 0.180-1.el8                    baseos     48 k
 elfutils-libelf          x86_64 0.180-1.el8                    baseos    214 k
 elfutils-libs            x86_64 0.180-1.el8                    baseos    292 k
 ethtool                  x86_64 2:5.0-2.el8                    baseos    151 k
 expat                    x86_64 2.2.5-4.el8                    baseos    110 k
 file                     x86_64 5.33-16.el8                    baseos     76 k
 file-libs                x86_64 5.33-16.el8                    baseos    542 k
 filesystem               x86_64 3.8-3.el8                      baseos    1.1 M
 findutils                x86_64 1:4.6.0-20.el8                 baseos    528 k
 firewalld                noarch 0.8.2-2.el8                    baseos    487 k
 firewalld-filesystem     noarch 0.8.2-2.el8                    baseos     75 k
 fuse                     x86_64 2.9.7-12.el8                   baseos     82 k
 fuse-common              x86_64 3.2.1-12.el8                   baseos     21 k
 fuse-libs                x86_64 2.9.7-12.el8                   baseos    102 k
 gawk                     x86_64 4.2.1-1.el8                    baseos    1.1 M
 gdbm                     x86_64 1:1.18-1.el8                   baseos    130 k
 gdbm-libs                x86_64 1:1.18-1.el8                   baseos     60 k
 geolite2-city            noarch 20180605-1.el8                 baseos     19 M
 geolite2-country         noarch 20180605-1.el8                 baseos    1.0 M
 gettext                  x86_64 0.19.8.1-17.el8                baseos    1.1 M
 gettext-libs             x86_64 0.19.8.1-17.el8                baseos    312 k
 glib2                    x86_64 2.56.4-8.el8                   baseos    2.5 M
 glibc                    x86_64 2.28-127.el8                   baseos    3.6 M
 glibc-common             x86_64 2.28-127.el8                   baseos    1.3 M
 glibc-langpack-ja        x86_64 2.28-127.el8                   baseos    329 k
 gmp                      x86_64 1:6.1.2-10.el8                 baseos    322 k
 gnupg2                   x86_64 2.2.20-2.el8                   baseos    2.4 M
 gnupg2-smime             x86_64 2.2.20-2.el8                   baseos    283 k
 gobject-introspection    x86_64 1.56.1-1.el8                   baseos    255 k
 gpgme                    x86_64 1.13.1-3.el8                   baseos    335 k
 grep                     x86_64 3.1-6.el8                      baseos    274 k
 groff-base               x86_64 1.22.3-18.el8                  baseos    1.0 M
 grubby                   x86_64 8.40-41.el8                    baseos     49 k
 gzip                     x86_64 1.9-9.el8                      baseos    166 k
 hardlink                 x86_64 1:1.3-6.el8                    baseos     29 k
 hdparm                   x86_64 9.54-2.el8                     baseos    100 k
 hostname                 x86_64 3.20-6.el8                     baseos     32 k
 hwdata                   noarch 0.314-8.6.el8                  baseos    1.6 M
 ima-evm-utils            x86_64 1.1-5.el8                      baseos     55 k
 info                     x86_64 6.5-6.el8                      baseos    199 k
 initscripts              x86_64 10.00.9-1.el8                  baseos    338 k
 ipcalc                   x86_64 0.2.4-4.el8                    baseos     38 k
 iprutils                 x86_64 2.4.19-1.el8                   baseos    255 k
 ipset                    x86_64 7.1-1.el8                      baseos     45 k
 ipset-libs               x86_64 7.1-1.el8                      baseos     71 k
 iputils                  x86_64 20180629-2.el8                 baseos    148 k
 irqbalance               x86_64 2:1.4.0-4.el8                  baseos     55 k
 iwl100-firmware          noarch 39.31.5.1-99.el8.1             baseos    168 k
 iwl1000-firmware         noarch 1:39.31.5.1-99.el8.1           baseos    231 k
 iwl105-firmware          noarch 18.168.6.1-99.el8.1            baseos    252 k
 iwl135-firmware          noarch 18.168.6.1-99.el8.1            baseos    261 k
 iwl2000-firmware         noarch 18.168.6.1-99.el8.1            baseos    255 k
 iwl2030-firmware         noarch 18.168.6.1-99.el8.1            baseos    264 k
 iwl3160-firmware         noarch 1:25.30.13.0-99.el8.1          baseos    1.7 M
 iwl5000-firmware         noarch 8.83.5.1_1-99.el8.1            baseos    312 k
 iwl5150-firmware         noarch 8.24.2.2-99.el8.1              baseos    165 k
 iwl6000-firmware         noarch 9.221.4.1-99.el8.1             baseos    185 k
 iwl6000g2a-firmware      noarch 18.168.6.1-99.el8.1            baseos    328 k
 iwl6050-firmware         noarch 41.28.5.1-99.el8.1             baseos    261 k
 iwl7260-firmware         noarch 1:25.30.13.0-99.el8.1          baseos     15 M
 jansson                  x86_64 2.11-3.el8                     baseos     46 k
 json-c                   x86_64 0.13.1-0.2.el8                 baseos     40 k
 kbd                      x86_64 2.0.4-10.el8                   baseos    390 k
 kbd-legacy               noarch 2.0.4-10.el8                   baseos    481 k
 kbd-misc                 noarch 2.0.4-10.el8                   baseos    1.5 M
 kernel                   x86_64 4.18.0-240.el8                 baseos    4.3 M
 kernel-core              x86_64 4.18.0-240.el8                 baseos     30 M
 kernel-modules           x86_64 4.18.0-240.el8                 baseos     26 M
 kernel-tools             x86_64 4.18.0-240.el8                 baseos    4.5 M
 kernel-tools-libs        x86_64 4.18.0-240.el8                 baseos    4.3 M
 keyutils-libs            x86_64 1.5.10-6.el8                   baseos     33 k
 kmod                     x86_64 25-16.el8                      baseos    127 k
 kmod-libs                x86_64 25-16.el8                      baseos     69 k
 kpartx                   x86_64 0.8.4-5.el8                    baseos    108 k
 krb5-libs                x86_64 1.18.2-5.el8                   baseos    837 k
 langpacks-ja             noarch 1.0-12.el8                     appstream 9.4 k
 less                     x86_64 530-1.el8                      baseos    164 k
 libacl                   x86_64 2.2.53-1.el8                   baseos     35 k
 libaio                   x86_64 0.3.112-1.el8                  baseos     32 k
 libarchive               x86_64 3.3.2-9.el8                    baseos    357 k
 libassuan                x86_64 2.5.1-3.el8                    baseos     83 k
 libattr                  x86_64 2.4.48-3.el8                   baseos     27 k
 libbasicobjects          x86_64 0.1.1-39.el8                   baseos     31 k
 libblkid                 x86_64 2.32.1-24.el8                  baseos    216 k
 libcap                   x86_64 2.26-4.el8                     baseos     59 k
 libcap-ng                x86_64 0.7.9-5.el8                    baseos     33 k
 libcollection            x86_64 0.7.0-39.el8                   baseos     48 k
 libcom_err               x86_64 1.45.6-1.el8                   baseos     48 k
 libcomps                 x86_64 0.1.11-4.el8                   baseos     81 k
 libcroco                 x86_64 0.6.12-4.el8_2.1               baseos    112 k
 libdaemon                x86_64 0.14-15.el8                    baseos     36 k
 libdb                    x86_64 5.3.28-39.el8                  baseos    749 k
 libdb-utils              x86_64 5.3.28-39.el8                  baseos    149 k
 libdhash                 x86_64 0.5.0-39.el8                   baseos     34 k
 libdnf                   x86_64 0.48.0-5.el8                   baseos    649 k
 libdrm                   x86_64 2.4.101-1.el8                  appstream 164 k
 libedit                  x86_64 3.1-23.20170329cvs.el8         baseos    102 k
 libestr                  x86_64 0.1.10-1.el8                   appstream  27 k
 libevent                 x86_64 2.1.8-5.el8                    baseos    253 k
 libfastjson              x86_64 0.99.8-2.el8                   appstream  37 k
 libfdisk                 x86_64 2.32.1-24.el8                  baseos    249 k
 libffi                   x86_64 3.1-22.el8                     baseos     37 k
 libgcrypt                x86_64 1.8.5-4.el8                    baseos    462 k
 libgpg-error             x86_64 1.31-1.el8                     baseos    242 k
 libidn2                  x86_64 2.2.0-1.el8                    baseos     93 k
 libini_config            x86_64 1.3.1-39.el8                   baseos     70 k
 libkcapi                 x86_64 1.2.0-2.el8                    baseos     48 k
 libkcapi-hmaccalc        x86_64 1.2.0-2.el8                    baseos     31 k
 libksba                  x86_64 1.3.5-7.el8                    baseos    134 k
 libldb                   x86_64 2.1.3-2.el8                    baseos    178 k
 libmaxminddb             x86_64 1.2.0-10.el8                   baseos     33 k
 libmetalink              x86_64 0.1.3-7.el8                    baseos     32 k
 libmnl                   x86_64 1.0.4-6.el8                    baseos     30 k
 libmodulemd              x86_64 2.9.4-2.el8                    baseos    188 k
 libmount                 x86_64 2.32.1-24.el8                  baseos    231 k
 libmspack                x86_64 0.7-0.3.alpha.el8.4            appstream  71 k
 libndp                   x86_64 1.7-3.el8                      baseos     41 k
 libnetfilter_conntrack   x86_64 1.0.6-5.el8                    baseos     65 k
 libnfnetlink             x86_64 1.0.1-13.el8                   baseos     33 k
 libnfsidmap              x86_64 1:2.3.3-35.el8                 baseos    119 k
 libnftnl                 x86_64 1.1.5-4.el8                    baseos     83 k
 libnghttp2               x86_64 1.33.0-3.el8_2.1               baseos     77 k
 libnl3                   x86_64 3.5.0-1.el8                    baseos    324 k
 libnl3-cli               x86_64 3.5.0-1.el8                    baseos    198 k
 libnsl2                  x86_64 1.2.0-2.20180605git4a062cf.el8 baseos     58 k
 libpath_utils            x86_64 0.2.1-39.el8                   baseos     34 k
 libpcap                  x86_64 14:1.9.1-4.el8                 baseos    166 k
 libpciaccess             x86_64 0.14-1.el8                     baseos     32 k
 libpipeline              x86_64 1.5.0-2.el8                    baseos     54 k
 libpng                   x86_64 2:1.6.34-5.el8                 baseos    126 k
 libpsl                   x86_64 0.20.2-6.el8                   baseos     61 k
 libpwquality             x86_64 1.4.0-9.el8                    baseos    102 k
 libref_array             x86_64 0.1.5-39.el8                   baseos     33 k
 librepo                  x86_64 1.12.0-2.el8                   baseos     89 k
 libseccomp               x86_64 2.4.3-1.el8                    baseos     67 k
 libsecret                x86_64 0.18.6-1.el8                   baseos    163 k
 libsemanage              x86_64 2.9-3.el8                      baseos    164 k
 libsepol                 x86_64 2.9-1.el8                      baseos    340 k
 libsigsegv               x86_64 2.11-5.el8                     baseos     30 k
 libsmartcols             x86_64 2.32.1-24.el8                  baseos    175 k
 libsolv                  x86_64 0.7.11-1.el8                   baseos    358 k
 libss                    x86_64 1.45.6-1.el8                   baseos     53 k
 libssh                   x86_64 0.9.4-2.el8                    baseos    214 k
 libssh-config            noarch 0.9.4-2.el8                    baseos     18 k
 libsss_autofs            x86_64 2.3.0-9.el8                    baseos    108 k
 libsss_certmap           x86_64 2.3.0-9.el8                    baseos    140 k
 libsss_idmap             x86_64 2.3.0-9.el8                    baseos    110 k
 libsss_nss_idmap         x86_64 2.3.0-9.el8                    baseos    117 k
 libsss_sudo              x86_64 2.3.0-9.el8                    baseos    106 k
 libsysfs                 x86_64 2.1.0-24.el8                   baseos     53 k
 libtalloc                x86_64 2.3.1-2.el8                    baseos     49 k
 libtasn1                 x86_64 4.13-3.el8                     baseos     76 k
 libtdb                   x86_64 1.4.3-1.el8                    baseos     58 k
 libteam                  x86_64 1.31-2.el8                     baseos     64 k
 libtevent                x86_64 0.10.2-2.el8                   baseos     49 k
 libtirpc                 x86_64 1.1.4-4.el8                    baseos    112 k
 libtool-ltdl             x86_64 2.4.6-25.el8                   baseos     58 k
 libunistring             x86_64 0.9.9-3.el8                    baseos    422 k
 libuser                  x86_64 0.62-23.el8                    baseos    416 k
 libutempter              x86_64 1.1.6-14.el8                   baseos     31 k
 libuuid                  x86_64 2.32.1-24.el8                  baseos     94 k
 libverto                 x86_64 0.3.0-5.el8                    baseos     24 k
 libxcrypt                x86_64 4.1.1-4.el8                    baseos     73 k
 libxkbcommon             x86_64 0.9.1-1.el8                    baseos    116 k
 libxml2                  x86_64 2.9.7-8.el8                    baseos    695 k
 libxslt                  x86_64 1.1.32-5.el8                   baseos    249 k
 libyaml                  x86_64 0.1.7-5.el8                    baseos     61 k
 libzstd                  x86_64 1.4.4-1.el8                    baseos    266 k
 linux-firmware           noarch 20200619-99.git3890db36.el8    baseos    101 M
 logrotate                x86_64 3.14.0-4.el8                   baseos     85 k
 lshw                     x86_64 B.02.19.2-2.el8                baseos    340 k
 lsscsi                   x86_64 0.30-1.el8                     baseos     69 k
 lua-libs                 x86_64 5.3.4-11.el8                   baseos    118 k
 lvm2                     x86_64 8:2.03.09-5.el8                baseos    1.6 M
 lvm2-libs                x86_64 8:2.03.09-5.el8                baseos    1.1 M
 lz4-libs                 x86_64 1.8.3-2.el8                    baseos     65 k
 lzo                      x86_64 2.08-14.el8                    baseos     69 k
 man-db                   x86_64 2.7.6.1-17.el8                 baseos    887 k
 memstrack                x86_64 0.1.11-1.el8                   baseos     47 k
 mokutil                  x86_64 1:0.3.0-10.el8                 baseos     45 k
 mozjs60                  x86_64 60.9.0-4.el8                   baseos    6.7 M
 mpfr                     x86_64 3.1.6-1.el8                    baseos    221 k
 ncurses                  x86_64 6.1-7.20180224.el8             baseos    387 k
 ncurses-base             noarch 6.1-7.20180224.el8             baseos     81 k
 ncurses-libs             x86_64 6.1-7.20180224.el8             baseos    335 k
 nettle                   x86_64 3.4.1-2.el8                    baseos    300 k
 newt                     x86_64 0.52.20-11.el8                 baseos    121 k
 nftables                 x86_64 1:0.9.3-16.el8                 baseos    311 k
 npth                     x86_64 1.5-4.el8                      baseos     26 k
 numactl-libs             x86_64 2.0.12-11.el8                  baseos     36 k
 open-vm-tools            x86_64 11.1.0-2.el8                   appstream 715 k
 openldap                 x86_64 2.4.46-15.el8                  baseos    351 k
 openssh                  x86_64 8.0p1-5.el8                    baseos    520 k
 openssh-clients          x86_64 8.0p1-5.el8                    baseos    666 k
 openssh-server           x86_64 8.0p1-5.el8                    baseos    483 k
 openssl-pkcs11           x86_64 0.4.10-2.el8                   baseos     66 k
 os-prober                x86_64 1.74-6.el8                     baseos     51 k
 p11-kit                  x86_64 0.23.14-5.el8_0                baseos    272 k
 p11-kit-trust            x86_64 0.23.14-5.el8_0                baseos    139 k
 pam                      x86_64 1.3.1-11.el8                   baseos    738 k
 parted                   x86_64 3.2-38.el8                     baseos    555 k
 passwd                   x86_64 0.80-3.el8                     baseos    114 k
 pciutils                 x86_64 3.6.4-2.el8                    baseos    102 k
 pciutils-libs            x86_64 3.6.4-2.el8                    baseos     53 k
 pcre                     x86_64 8.42-4.el8                     baseos    208 k
 pcre2                    x86_64 10.32-2.el8                    baseos    246 k
 pigz                     x86_64 2.4-4.el8                      baseos     79 k
 pinentry                 x86_64 1.1.0-2.el8                    baseos    100 k
 platform-python          x86_64 3.6.8-31.el8                   baseos     83 k
 platform-python-pip      noarch 9.0.3-18.el8                   baseos    1.7 M
 platform-python-setuptools
                          noarch 39.2.0-6.el8                   baseos    632 k
 plymouth                 x86_64 0.9.4-7.20200615git1e36e30.el8 appstream 126 k
 plymouth-core-libs       x86_64 0.9.4-7.20200615git1e36e30.el8 appstream 121 k
 plymouth-scripts         x86_64 0.9.4-7.20200615git1e36e30.el8 appstream  42 k
 policycoreutils          x86_64 2.9-9.el8                      baseos    377 k
 polkit                   x86_64 0.115-11.el8                   baseos    154 k
 polkit-libs              x86_64 0.115-11.el8                   baseos     76 k
 polkit-pkla-compat       x86_64 0.1-12.el8                     baseos     46 k
 popt                     x86_64 1.16-14.el8                    baseos     61 k
 prefixdevname            x86_64 0.1.0-6.el8                    baseos    460 k
 procps-ng                x86_64 3.3.15-3.el8                   baseos    328 k
 publicsuffix-list-dafsa  noarch 20180723-1.el8                 baseos     56 k
 python3-configobj        noarch 5.0.6-11.el8                   baseos     68 k
 python3-dateutil         noarch 1:2.6.1-6.el8                  baseos    251 k
 python3-dbus             x86_64 1.2.4-15.el8                   baseos    134 k
 python3-decorator        noarch 4.2.1-2.el8                    baseos     27 k
 python3-dmidecode        x86_64 3.12.2-15.el8                  baseos     93 k
 python3-dnf              noarch 4.2.23-4.el8                   baseos    525 k
 python3-dnf-plugins-core noarch 4.0.17-5.el8                   baseos    220 k
 python3-firewall         noarch 0.8.2-2.el8                    baseos    391 k
 python3-gobject-base     x86_64 3.28.3-2.el8                   baseos    312 k
 python3-gpg              x86_64 1.13.1-3.el8                   baseos    244 k
 python3-hawkey           x86_64 0.48.0-5.el8                   baseos    110 k
 python3-libcomps         x86_64 0.1.11-4.el8                   baseos     52 k
 python3-libdnf           x86_64 0.48.0-5.el8                   baseos    755 k
 python3-libs             x86_64 3.6.8-31.el8                   baseos    7.8 M
 python3-libxml2          x86_64 2.9.7-8.el8                    baseos    236 k
 python3-linux-procfs     noarch 0.6.2-2.el8                    baseos     42 k
 python3-nftables         x86_64 1:0.9.3-16.el8                 baseos     26 k
 python3-perf             x86_64 4.18.0-240.el8                 baseos    4.4 M
 python3-pip-wheel        noarch 9.0.3-18.el8                   baseos    1.0 M
 python3-pyudev           noarch 0.21.0-7.el8                   baseos     84 k
 python3-rpm              x86_64 4.14.3-4.el8                   baseos    156 k
 python3-schedutils       x86_64 0.6-6.el8                      baseos     29 k
 python3-setuptools-wheel noarch 39.2.0-6.el8                   baseos    288 k
 python3-six              noarch 1.11.0-8.el8                   baseos     38 k
 python3-slip             noarch 0.6.4-11.el8                   baseos     38 k
 python3-slip-dbus        noarch 0.6.4-11.el8                   baseos     39 k
 python3-unbound          x86_64 1.7.3-14.el8                   baseos    118 k
 readline                 x86_64 7.0-10.el8                     baseos    199 k
 rng-tools                x86_64 6.8-3.el8                      baseos     59 k
 rootfiles                noarch 8.1-22.el8                     baseos     13 k
 rpm                      x86_64 4.14.3-4.el8                   baseos    540 k
 rpm-build-libs           x86_64 4.14.3-4.el8                   baseos    154 k
 rpm-libs                 x86_64 4.14.3-4.el8                   baseos    338 k
 rpm-plugin-selinux       x86_64 4.14.3-4.el8                   baseos     75 k
 rpm-plugin-systemd-inhibit
                          x86_64 4.14.3-4.el8                   baseos     76 k
 rsyslog                  x86_64 8.1911.0-6.el8                 appstream 731 k
 sed                      x86_64 4.5-2.el8                      baseos    297 k
 selinux-policy           noarch 3.14.3-54.el8                  baseos    621 k
 selinux-policy-targeted  noarch 3.14.3-54.el8                  baseos     15 M
 setup                    noarch 2.12.2-6.el8                   baseos    180 k
 sg3_utils                x86_64 1.44-5.el8                     baseos    919 k
 sg3_utils-libs           x86_64 1.44-5.el8                     baseos     99 k
 shadow-utils             x86_64 2:4.6-11.el8                   baseos    1.2 M
 shared-mime-info         x86_64 1.9-3.el8                      baseos    328 k
 slang                    x86_64 2.3.2-3.el8                    baseos    368 k
 snappy                   x86_64 1.1.8-3.el8                    baseos     37 k
 sqlite-libs              x86_64 3.26.0-11.el8                  baseos    580 k
 squashfs-tools           x86_64 4.3-19.el8                     baseos    165 k
 sssd-client              x86_64 2.3.0-9.el8                    baseos    170 k
 sssd-common              x86_64 2.3.0-9.el8                    baseos    1.5 M
 sssd-kcm                 x86_64 2.3.0-9.el8                    baseos    223 k
 sssd-nfs-idmap           x86_64 2.3.0-9.el8                    baseos    104 k
 tar                      x86_64 2:1.30-5.el8                   baseos    837 k
 teamd                    x86_64 1.31-2.el8                     baseos    130 k
 trousers                 x86_64 0.3.14-4.el8                   baseos    152 k
 trousers-lib             x86_64 0.3.14-4.el8                   baseos    168 k
 unbound-libs             x86_64 1.7.3-14.el8                   baseos    499 k
 util-linux               x86_64 2.32.1-24.el8                  baseos    2.5 M
 vim-minimal              x86_64 2:8.0.1763-15.el8              baseos    572 k
 virt-what                x86_64 1.18-6.el8                     baseos     35 k
 which                    x86_64 2.21-12.el8                    baseos     49 k
 xfsprogs                 x86_64 5.0.0-4.el8                    baseos    1.1 M
 xkeyboard-config         noarch 2.28-1.el8                     baseos    782 k
 xmlsec1                  x86_64 1.2.25-4.el8                   appstream 190 k
 xmlsec1-openssl          x86_64 1.2.25-4.el8                   appstream  93 k
 xz                       x86_64 5.2.4-3.el8                    baseos    153 k
 xz-libs                  x86_64 5.2.4-3.el8                    baseos     94 k
 yum                      noarch 4.2.23-4.el8                   baseos    191 k
 zlib                     x86_64 1.2.11-16.el8_2                baseos    102 k
依存関係のインストール:
 grub2-tools-efi          x86_64 1:2.02-90.el8.alma             baseos    469 k
ダウングレード:
 iproute                  x86_64 5.3.0-1.el8                    baseos    658 k
 libusbx                  x86_64 1.0.23-3.el8                   baseos     73 k

トランザクションの概要
================================================================================
インストール     1 パッケージ
アップグレード  36 パッケージ
ダウングレード   2 パッケージ

ダウンロードサイズの合計: 368 M
これでよろしいですか? [y/N]: y
パッケージのダウンロード:
(1/387): libusbx-1.0.23-3.el8.x86_64.rpm        433 kB/s |  73 kB     00:00
(2/387): acl-2.2.53-1.el8.x86_64.rpm            438 kB/s |  81 kB     00:00
(3/387): iproute-5.3.0-1.el8.x86_64.rpm         2.8 MB/s | 658 kB     00:00
<略>
  zlib-1.2.11-16.el8_2.x86_64

失敗しました:
  filesystem-3.8-3.el8.x86_64            filesystem-3.8-3.el8.x86_64

エラー: トランザクションが失敗しました
[root@almalinux ~]#

おや????

[root@almalinux ~]# dnf distro-sync
メタデータの期限切れの最終確認: 0:10:17 時間前の 2021年02月09日 17時08分11秒 に 実施しました。
依存関係が解決しました。
================================================================================
 パッケージ          Arch            バージョン           リポジトリー    サイズ
================================================================================
再インストール:
 filesystem          x86_64          3.8-3.el8            baseos          1.1 M

トランザクションの概要
================================================================================

ダウンロードサイズの合計: 1.1 M
インストール済みのサイズ: 0
これでよろしいですか? [y/N]: y
パッケージのダウンロード:
filesystem-3.8-3.el8.x86_64.rpm                 1.2 MB/s | 1.1 MB     00:00
--------------------------------------------------------------------------------
合計                                            1.2 MB/s | 1.1 MB     00:00
トランザクションの確認を実行中
トランザクションの確認に成功しました。
トランザクションのテストを実行中
トランザクションのテストに成功しました。
トランザクションを実行中
  scriptletの実行中: filesystem-3.8-3.el8.x86_64                            1/1
  準備             :                                                        1/1
  再インストール   : filesystem-3.8-3.el8.x86_64                            1/2
Error unpacking rpm package filesystem-3.8-3.el8.x86_64
  検証             : filesystem-3.8-3.el8.x86_64                            1/2
  検証             : filesystem-3.8-3.el8.x86_64                            2/2

失敗しました:
  filesystem-3.8-3.el8.x86_64            filesystem-3.8-3.el8.x86_64

エラー: トランザクションが失敗しました
[root@almalinux ~]#

filesystemの置き換えがうまくいってない模様。

とりあえずOracle Linuxへのコンバート時に問題となったgrub2-efi.cfgは生成されている

[root@almalinux ~]# ls -l /etc/grub2-efi.cfg
lrwxrwxrwx. 1 root root 31  1月 19 08:21 /etc/grub2-efi.cfg -> ../boot/efi/EFI/centos/grub.cfg
[root@almalinux ~]# ls -l /boot/efi/EFI/*
/boot/efi/EFI/BOOT:
合計 1568
-rwx------. 1 root root 1237503  1月 15 22:34 BOOTX64.EFI
-rwx------. 1 root root  362968  1月 15 22:34 fbx64.efi

/boot/efi/EFI/centos:
合計 5436
-rwx------. 1 root root     122  1月 15 22:34 BOOTX64.CSV
drwx------. 2 root root    4096  1月 19 08:21 fonts
-rwx------. 1 root root    6544  2月  9 16:45 grub.cfg
-rwx------. 1 root root    1024  2月  9 17:15 grubenv
-rwx------. 1 root root 1890896  1月 19 08:21 grubx64.efi
-rwx------. 1 root root 1171320  1月 15 22:34 mmx64.efi
-rwx------. 1 root root 1240144  1月 15 22:34 shimx64-almalinux.efi
-rwx------. 1 root root 1237503  1月 15 22:34 shimx64.efi
[root@almalinux ~]#

…いや、grub.cfgの作成時間が古いのでCentOS8で作成されたものなので再作成します。

[root@almalinux ~]# grub2-mkconfig -o /etc/grub2-efi.cfg
Generating grub configuration file ...
Adding boot menu entry for EFI firmware configuration
done
[root@almalinux ~]# ls -l /boot/efi/EFI/centos/grub.cfg
-rwx------. 1 root root 6544  2月  9 17:21 /boot/efi/EFI/centos/grub.cfg
[root@almalinux ~]#

「CentOS Linux … Security Violation」・・・・お??

あー、Secure Bootか

セキュアブートを無効化して電源ON

再起動後、「dnf distro-sync」を実行したところ正常に完了した。

で・・・改めてESXi7.0で仮想マシンを作る際にセキュアブート無効設定で仮想マシンを作ってからインストールを試みる。

無事起動

CLIでvSphere 7.0のvCenter Server アプライアンスを構築


現場でvSphere 7.0環境のvCSAが死んで再構築が必要になった。

Windows環境は無い。LinuxのX-Window環境があるので、vcsa-ui-installer/lin64/installer を実行してインストール、と思ったが要求されるライブラリが多くインストールされていないやつもあったので、断念。

CLIインストーラを使ってインストールを実施した。

vCenter Server アプライアンスの CLI デプロイ」に従って実行

まず必要なものは「vcsa-cli-installer/templates/install/embedded_vCSA_on_ESXi.json」を書き換えできる場所にコピーしての編集。

「cp embedded_vCSA_on_ESXi.json ~/」とかでコピーして、「vi ~/embedded_vCSA_on_ESXi.json」で編集という感じ。

変更前と変更後の差分はこんな感じ

[root@linux install]# diff -u embedded_vCSA_on_ESXi.json ~/embedded_vCSA_on_ESXi.json
--- embedded_vCSA_on_ESXi.json  2020-10-07 08:13:20.000000000 +0900
+++ /root/embedded_vCSA_on_ESXi.json    2021-02-05 13:14:42.125631193 +0900
@@ -3,11 +3,11 @@
     "__comments": "Sample template to deploy a vCenter Server Appliance with an embedded Platform Services Controller on an ESXi host.",
     "new_vcsa": {
         "esxi": {
-            "hostname": "<FQDN or IP address of the ESXi host on which to deploy the new appliance>",
+            "hostname": "ESXiサーバのIP",
             "username": "root",
-            "password": "<Password of the ESXi host root user. If left blank, or omitted, you will be prompted to enter it at the command console during template verification.>",
+            "password": "ESXiのrootユーザパスワード",
             "deployment_network": "VM Network",
-            "datastore": "<A specific ESXi host datastore, or a specific datastore in a datastore cluster.>"
+            "datastore": "配置するデータストア名"
         },
         "appliance": {
             "__comments": [
@@ -20,21 +20,21 @@
         "network": {
             "ip_family": "ipv4",
             "mode": "static",
-            "system_name": "<FQDN or IP address for the appliance. Optional when the mode is Static. Remove this if using dhcp.>",
-            "ip": "<Static IP address. Remove this if using dhcp.>",
-            "prefix": "<Network prefix length. Use only when the mode is 'static'. Remove if the mode is 'dhcp'. This is the number of bits set in the subnet mask; for instance, if the subnet mask is 255.255.255.0, there are 24 bits in the binary version of the subnet mask, so the prefix length is 24. If used, the values must be in the inclusive range of 0 to 32 for IPv4 and 0 to 128 for IPv6.>",
-            "gateway": "<Gateway IP address. Remove this if using dhcp.>",
+            "system_name": "vCSAのIPかホスト名",
+            "ip": "vCSAのIP",
+            "prefix": "ネットマスクの数字(255.255.0.0じゃなくて16という方)",
+            "gateway": "ゲートウェイIP",
             "dns_servers": [
-                "<DNS Server IP Address. Optional when the mode is Static. Remove this if using dhcp.>"
+                "DNSサーバIP"
             ]
         },
         "os": {
-            "password": "<Appliance root password; refer to --template-help for password policy. If left blank, or omitted, you will be prompted to enter it at the command console during template verification.>",
-            "ntp_servers": "time.nist.gov",
-            "ssh_enable": false
+            "password": "vCSAのrootユーザパスワード",
+            "ntp_servers": "ntp.jst.mfeed.ad.jp",
+            "ssh_enable": true
         },
         "sso": {
-            "password": "<vCenter Single Sign-On administrator password; refer to --template-help for password policy. If left blank, or omitted, you will be prompted to enter it at the command console during template verification.>",
+            "password": "administrator@vsphere.localのパスワード",
             "domain_name": "vsphere.local"
         }
     },
@@ -66,7 +66,7 @@
             ]
         },
         "settings": {
-            "ceip_enabled": true
+            "ceip_enabled": false
         }
     }
 }
[root@linux install]#

次に vcsa-cli-installer/lin64 に移動してjsonファイルのチェック

CLI を使用した vCenter Serverアプライアンスのデプロイ」では、「vcsa-deploy install –precheck-only path_to_the_json_file」と書かれているが、–accept-eulaオプションをつけないとチェックはエラーになった。

[root@linux lin64]# ./vcsa-deploy install --precheck-only ~/embedded_vCSA_o
n_ESXi.json
Run the installer with "-v" or "--verbose" to log detailed information
Updating log file location, copying '/tmp/vcsaCliInstaller-2021-02-05-04-21-htfiph1c/vcsa-cli-installer.log' to desired location as a backup: '/tmp/vcsaCliInstaller-2021-02-05-04-21-htfiph1c/workflow_1612498885977/vcsa-cli-installer.log.bak'
Consuming the installer build:16998074
Workflow log-dir
/tmp/vcsaCliInstaller-2021-02-05-04-21-htfiph1c/workflow_1612498885977
====== [START] Start executing Task: To validate CLI options at 04:21:26 ======
<略>

================ [FAILED] Task: CLIOptionsValidationTask: Executing CLI
optionsValidation task execution failed at 04:21:26 ================
================================================================================
Error message: You must pass in the --accept-eula option to accept the EULA and
install the product.
=================================== 04:21:26 ===================================
Result and Log File Information...
WorkFlow log directory:
/tmp/vcsaCliInstaller-2021-02-05-04-21-htfiph1c/workflow_1612498885977
[root@linux lin64]# 

改めて「./vcsa-deploy install –precheck-only ~/embedded_vCSA_o
n_ESXi.json」を実行

[root@linux lin64]# ./vcsa-deploy install --precheck-only ~/embedded_vCSA_on_ESXi.json --accept-eula
Run the installer with "-v" or "--verbose" to log detailed information
Updating log file location, copying '/tmp/vcsaCliInstaller-2021-02-05-04-21-it2_kphe/vcsa-cli-installer.log' to desired location as a backup: '/tmp/vcsaCliInstaller-2021-02-05-04-21-it2_kphe/workflow_1612498903626/vcsa-cli-installer.log.bak'
Consuming the installer build:16998074
Workflow log-dir
/tmp/vcsaCliInstaller-2021-02-05-04-21-it2_kphe/workflow_1612498903626
====== [START] Start executing Task: To validate CLI options at 04:21:43 ======
Command line arguments verfied.
 [SUCCEEDED] Successfully executed Task 'CLIOptionsValidationTask: Executing CLI
optionsValidation task' in TaskFlow 'template_validation' at 04:21:43
 [START] Start executing Task: To validate the syntax of the template. at
04:21:43
Template syntax validation for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Syntax validation for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'SyntaxValidationTask: Executing
Template Syntax Validation task' in TaskFlow 'template_validation' at 04:21:43
 [START] Start executing Task: To check the version of each template, and for
each older template that supports CEIP, convert it to the latest template
format, and save it to the Template Blackboard at 04:21:44
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
Template version processing for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Version processing for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'VersionProcessingTask: Executing
Template Version Processing task' in TaskFlow 'template_validation' at 04:21:44
 [START] Start executing Task: To validate the template structure against the
rules specified by a corresponding template schema. at 04:21:44
Template structure validation for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Structure validation for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'StructureValidationTask: Executing
Template Structure Validation task' in TaskFlow 'template_validation' at
04:21:46
 [START] Start executing Task: To create a dependency graph for the provided
templates, with an edge pairing two templates that are dependent on each other.
Such graph relationships will affect whether certain templates can be deployed
in parallel, or must be deployed sequentially. at 04:21:46
Dependency processing for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'DependencyProcessingTask: Executing
Template Dependency Processing task' in TaskFlow 'template_validation' at
04:21:46
 [START] Start executing Task: Validate that requirements are met in the source
VCSA. at 04:21:48
InstallRequirementCollector: Reached gathering requirement
 [SUCCEEDED] Successfully executed Task 'SrcRequirementTask: Running
SrcRequirementTask' in TaskFlow 'embedded_vCSA_on_ESXi' at 04:21:48
====== [START] Start executing Task: Perform precheck tasks. at 04:21:48 ======
 [START] Start executing Task: Verify that the provided credentials for the
target ESXi/VC are valid at 04:21:48
Retrying the connection with certificate thumbprint check...
If an untrusted SSL certificate is installed on '172.17.44.10', secure
communication cannot be guaranteed. Depending on your security policy, this
issue could represent a security concern.
The SHA-1 thumbprint of the certificate is
'1B:AE:E9:A0:98:6C:AF:D7:D4:30:73:22:0E:3D:AF:21:12:1C:9A:C7'
Do you accept the thumbprint?
1: Accept and continue.
2: Do not accept and exit.
Enter '1' or '2': 1
You have accepted the server certificate's thumbprint
'1B:AE:E9:A0:98:6C:AF:D7:D4:30:73:22:0E:3D:AF:21:12:1C:9A:C7'.
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetCredentials' in
TaskFlow 'install' at 04:22:01
 [START] Start executing Task: Verify the target host type matches the one given
in the template at 04:22:02
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetHostType' in
TaskFlow 'install' at 04:22:02
 [START] Start executing Task: Verify that the target ESXi or VC version meets
the minimum requirements at 04:22:02
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetVersion' in
TaskFlow 'install' at 04:22:02
 [START] Start executing Task: Validate that the OVA image has the required OVA
properties. at 04:22:02
 [SUCCEEDED] Successfully executed Task 'Running precheck: OVAProperties.' in
TaskFlow 'install' at 04:22:02
 [START] Start executing Task: Validate the provided ip/fqdn is available to use
at 04:22:03
Pinging IPv4 address 172.17.44.100
172.17.44.100 is unreachable.
Pinging IPv4 address 172.17.44.100
Pinging IPv4 address 172.17.44.100
Pinging IPv4 address 172.17.44.100
172.17.44.100 is unreachable.
 [SUCCEEDED] Successfully executed Task 'Running precheck: IpFqdnInUse' in
TaskFlow 'install' at 04:22:15
 [SUCCEEDED] Successfully executed Task 'Running precheck:
LinkingTargetHostnameValidation' in TaskFlow 'install' at 04:22:15
 [START] Start executing Task: Validate the target ESXi management status at
04:22:15
DRS Warning:  The target ESXi host '172.17.44.10' is managed by vCenter Server
'172.17.44.11'.  If any of these hosts are in a cluster, and DRS is enabled,
vMotion can take effect and adversely impact the installation, upgrade, or
migration processes.  It is recommended that you use the *_on_VC.json template
file for the target ESXi host if it is managed by a vCenter Server, and ensure
the ESXi hosts you have specified are not members of clusters with DRS set to
Fully Automated during the installation, upgrade, or migration processes.
 [SUCCEEDED] Successfully executed Task 'Running precheck: ESXManagementStatus'
in TaskFlow 'install' at 04:22:15
 [START] Start executing Task: Precheck CPU, memory and datastore size
requirements for a host. at 04:22:16
 [SUCCEEDED] Successfully executed Task 'Running precheck: HostConfigs' in
TaskFlow 'install' at 04:22:20
 [START] Start executing Task: Validate the provided target appliance name is
available to use at 04:22:20
 [SUCCEEDED] Successfully executed Task 'Running precheck: ApplianceName' in
TaskFlow 'install' at 04:22:21
================== [START] Start executing Task:  at 04:22:21 ==================
= [SUCCEEDED] Successfully executed Task '' in TaskFlow 'install' at 04:22:21 =
 [START] Start executing Task: Check whether the datastore's free space
accommodate the VCSA's deployment option at 04:22:22
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetDsFreespace' in
TaskFlow 'install' at 04:22:22
 [START] Start executing Task: Verify the provided SSO info is valid by
connecting to the STS service. at 04:22:22
 [SUCCEEDED] Successfully executed Task 'Running precheck: SSOCredentials' in
TaskFlow 'install' at 04:22:22
 [START] Start executing Task: Verify that the provided external SSO
(PSC)/Embedded info is valid at 04:22:22
 [SUCCEEDED] Successfully executed Task 'Running precheck: SSOExternal' in
TaskFlow 'install' at 04:22:22
 [SUCCEEDED] Successfully executed Task 'PrecheckTask: Running prechecks.' in
TaskFlow 'embedded_vCSA_on_ESXi' at 04:22:22
 [START] Start executing Task: Invoke OVF Tool to deploy VCSA for installation,
upgrade, and migration at 04:22:23
OVF Tool: Opening OVA source:
/mnt2/vcsa-cli-installer/lin64/../../vcsa/VMware-vCenter-Server-Appliance-7.0.1.00300-17491101_OVF10.ova
OVF Tool: The manifest validates
OVF Tool: The provided certificate is in valid period
OVF Tool: Source is signed but could not verify certificate (possibly
self-signed)
OVF Tool: Certificate information:
OVF Tool:   CertIssuer:/C=US/ST=California/L=Palo Alto/O=VMware, Inc.
OVF Tool:   CertSubject:/C=US/ST=California/L=Palo Alto/O=VMware, Inc.
OVF Tool:   -----BEGIN CERTIFICATE-----
OVF Tool:   MIIDyzCCArOgAwIBAgIJAIR/y018RgMXMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNV
OVF Tool:   BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlQYWxvIEFsdG8x
OVF Tool:   FTATBgNVBAoMDFZNd2FyZSwgSW5jLjAeFw0xNjA5MDgwMTE3MjFaFw0yOTEyMzEw
OVF Tool:   MTE3MjFaME0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYD
OVF Tool:   VQQHDAlQYWxvIEFsdG8xFTATBgNVBAoMDFZNd2FyZSwgSW5jLjCCASAwDQYJKoZI
OVF Tool:   hvcNAQEBBQADggENADCCAQgCggEBALU9NUtC39fqG7yo2XAswUmtli9uA+31uAMw
OVF Tool:   9FFHAEv/it8pzBQZ/4r+2bN+GnXOWhuDd1K4ApKMRvoO4LwQfZxrkx4pXrsu0gdb
OVF Tool:   4OunHw0D8MrdzSoob8Js/uq+IJ+8Bhsc6b7RzTUt9HeDWzHasAJVgMsjehGt23ay
OVF Tool:   9FKOT6dVD6D/Xi3qJnB/4t/XNS6L63dC3ea4guzKDyLaXIP5bf/m56jvVImFjhhT
OVF Tool:   W2ASbnEUlZIVrEuyVcdG7e3FvZufE553JmHL0YG/0m5bIHXKRzBRx0D3HHOAzOKw
OVF Tool:   kkOnxJHSTN4Hz8hSYCWvzUAjSYL3Q8qiTd7GHJ2ynsRnu3KlzKUCAQOjga8wgaww
OVF Tool:   HQYDVR0OBBYEFHg8KQJdm8NPQDmYP41uEgKG+VNwMH0GA1UdIwR2MHSAFHg8KQJd
OVF Tool:   m8NPQDmYP41uEgKG+VNwoVGkTzBNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
OVF Tool:   aWZvcm5pYTESMBAGA1UEBwwJUGFsbyBBbHRvMRUwEwYDVQQKDAxWTXdhcmUsIElu
OVF Tool:   Yy6CCQCEf8tNfEYDFzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAD
OVF Tool:   K9uUhsXzpuUcWJq83Vh2HHSxZ/DdR6h+FNYHfEX8h8DOIwhRHhIHoqXkwwnpbjip
OVF Tool:   FBtSzNKzTmzMQBwB7GwzGSsBO2TU8alX2ssnDg2AqwgIeLzclfaQlYoid678Krew
OVF Tool:   nFryr9PYMntr7uyU1duesmey12GS2z5UIhA4BaOnrPJcLCP22nXVlPEsa46ob7XH
OVF Tool:   j4ngZ0ck/qE58Z90GaAuxaa2R3OlHQ+AhXc3q5IixqMDa0MLPd41Qv2kC5iZ+tCf
OVF Tool:   XVdlf4/RqQBNHR8FFVxcjpaROId9Y9/yHdsMt55nN7pf7vRf5vSk1bHvLmlOYgiR
OVF Tool:   tAj6rdPq0c+/C+fct1cM
OVF Tool:   -----END CERTIFICATE-----
OVF Tool: Opening VI target: vi://root@172.17.44.10:443/
OVF Tool: Supported disk provisioning:
OVF Tool:   monolithicSparse
OVF Tool:   monolithicFlat
OVF Tool:   thin
OVF Tool:   thick
OVF Tool:   flat
OVF Tool:   seSparse
OVF Tool:   eagerZeroedThick
OVF Tool: Connected networks:
OVF Tool:   VM Network
OVF Tool:   iSCSI-VM
OVF Tool:   closednetwork
OVF Tool: Deploying to VI: vi://root@172.17.44.10:443/
OVF Tool: Transfer Completed
OVF Tool: Completed successfully
 [SUCCEEDED] Successfully executed Task 'Precheck ovftool commandline parameters
to deploy a vCenter Server Appliance' in TaskFlow 'embedded_vCSA_on_ESXi' at
04:22:36
=================================== 04:22:37 ===================================
Result and Log File Information...
WorkFlow log directory:
/tmp/vcsaCliInstaller-2021-02-05-04-21-it2_kphe/workflow_1612498903626
[root@linux lin64]#

問題は無いようだ。(上記はテストとして既にvCenter管轄下にあるESXiサーバ上にインストールしようとしているので、警告も出ている)

チェックが終わったら「vcsa-deploy install ~/embedded_vCSA_on_ESXi.json –accept-eula」を実行する。

[root@linux lin64]# time ./vcsa-deploy install ~/embedded_vCSA_on_ESXi.json --accept-eula
Run the installer with "-v" or "--verbose" to log detailed information
Updating log file location, copying '/tmp/vcsaCliInstaller-2021-02-05-04-28-tzpju7l4/vcsa-cli-installer.log' to desired location as a backup: '/tmp/vcsaCliInstaller-2021-02-05-04-28-tzpju7l4/workflow_1612499337346/vcsa-cli-installer.log.bak'
Consuming the installer build:16998074
Workflow log-dir
/tmp/vcsaCliInstaller-2021-02-05-04-28-tzpju7l4/workflow_1612499337346
====== [START] Start executing Task: To validate CLI options at 04:28:57 ======
Command line arguments verfied.
 [SUCCEEDED] Successfully executed Task 'CLIOptionsValidationTask: Executing CLI
optionsValidation task' in TaskFlow 'template_validation' at 04:28:57
 [START] Start executing Task: To validate the syntax of the template. at
04:28:57
Template syntax validation for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Syntax validation for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'SyntaxValidationTask: Executing
Template Syntax Validation task' in TaskFlow 'template_validation' at 04:28:57
 [START] Start executing Task: To check the version of each template, and for
each older template that supports CEIP, convert it to the latest template
format, and save it to the Template Blackboard at 04:28:57
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
CEIP is not enabled because the template key 'ceip_enabled' in section 'ceip',
subsection 'settings' in template '/root/embedded_vCSA_on_ESXi.json' was set to
'false'.
Template version processing for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Version processing for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'VersionProcessingTask: Executing
Template Version Processing task' in TaskFlow 'template_validation' at 04:28:57
 [START] Start executing Task: To validate the template structure against the
rules specified by a corresponding template schema. at 04:28:58
Template structure validation for template '/root/embedded_vCSA_on_ESXi.json'
succeeded.
Structure validation for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'StructureValidationTask: Executing
Template Structure Validation task' in TaskFlow 'template_validation' at
04:28:58
 [START] Start executing Task: To create a dependency graph for the provided
templates, with an edge pairing two templates that are dependent on each other.
Such graph relationships will affect whether certain templates can be deployed
in parallel, or must be deployed sequentially. at 04:28:58
Dependency processing for all templates succeeded.
 [SUCCEEDED] Successfully executed Task 'DependencyProcessingTask: Executing
Template Dependency Processing task' in TaskFlow 'template_validation' at
04:28:58
 [START] Start executing Task: Validate that requirements are met in the source
VCSA. at 04:28:59
InstallRequirementCollector: Reached gathering requirement
 [SUCCEEDED] Successfully executed Task 'SrcRequirementTask: Running
SrcRequirementTask' in TaskFlow 'embedded_vCSA_on_ESXi' at 04:28:59
====== [START] Start executing Task: Perform precheck tasks. at 04:29:00 ======
 [START] Start executing Task: Verify that the provided credentials for the
target ESXi/VC are valid at 04:29:00
Retrying the connection with certificate thumbprint check...
If an untrusted SSL certificate is installed on '172.17.44.10', secure
communication cannot be guaranteed. Depending on your security policy, this
issue could represent a security concern.
The SHA-1 thumbprint of the certificate is
'1B:AE:E9:A0:98:6C:AF:D7:D4:30:73:22:0E:3D:AF:21:12:1C:9A:C7'
Do you accept the thumbprint?
1: Accept and continue.
2: Do not accept and exit.
Enter '1' or '2': 1
You have accepted the server certificate's thumbprint
'1B:AE:E9:A0:98:6C:AF:D7:D4:30:73:22:0E:3D:AF:21:12:1C:9A:C7'.
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetCredentials' in
TaskFlow 'install' at 04:29:03
 [START] Start executing Task: Verify the target host type matches the one given
in the template at 04:29:03
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetHostType' in
TaskFlow 'install' at 04:29:03
 [START] Start executing Task: Verify that the target ESXi or VC version meets
the minimum requirements at 04:29:03
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetVersion' in
TaskFlow 'install' at 04:29:03
 [START] Start executing Task: Validate that the OVA image has the required OVA
properties. at 04:29:04
 [SUCCEEDED] Successfully executed Task 'Running precheck: OVAProperties.' in
TaskFlow 'install' at 04:29:09
 [START] Start executing Task: Validate the provided ip/fqdn is available to use
at 04:29:09
Pinging IPv4 address 172.17.44.100
172.17.44.100 is unreachable.
Pinging IPv4 address 172.17.44.100
Pinging IPv4 address 172.17.44.100
Pinging IPv4 address 172.17.44.100
172.17.44.100 is unreachable.
 [SUCCEEDED] Successfully executed Task 'Running precheck: IpFqdnInUse' in
TaskFlow 'install' at 04:29:21
 [SUCCEEDED] Successfully executed Task 'Running precheck:
LinkingTargetHostnameValidation' in TaskFlow 'install' at 04:29:22
 [START] Start executing Task: Validate the target ESXi management status at
04:29:22
DRS Warning:  The target ESXi host '172.17.44.10' is managed by vCenter Server
'172.17.44.11'.  If any of these hosts are in a cluster, and DRS is enabled,
vMotion can take effect and adversely impact the installation, upgrade, or
migration processes.  It is recommended that you use the *_on_VC.json template
file for the target ESXi host if it is managed by a vCenter Server, and ensure
the ESXi hosts you have specified are not members of clusters with DRS set to
Fully Automated during the installation, upgrade, or migration processes.
 [SUCCEEDED] Successfully executed Task 'Running precheck: ESXManagementStatus'
in TaskFlow 'install' at 04:29:22
 [START] Start executing Task: Precheck CPU, memory and datastore size
requirements for a host. at 04:29:23
 [SUCCEEDED] Successfully executed Task 'Running precheck: HostConfigs' in
TaskFlow 'install' at 04:29:26
 [START] Start executing Task: Validate the provided target appliance name is
available to use at 04:29:26
 [SUCCEEDED] Successfully executed Task 'Running precheck: ApplianceName' in
TaskFlow 'install' at 04:29:27
================== [START] Start executing Task:  at 04:29:27 ==================
= [SUCCEEDED] Successfully executed Task '' in TaskFlow 'install' at 04:29:27 =
 [START] Start executing Task: Check whether the datastore's free space
accommodate the VCSA's deployment option at 04:29:27
 [SUCCEEDED] Successfully executed Task 'Running precheck: TargetDsFreespace' in
TaskFlow 'install' at 04:29:27
 [START] Start executing Task: Verify the provided SSO info is valid by
connecting to the STS service. at 04:29:28
 [SUCCEEDED] Successfully executed Task 'Running precheck: SSOCredentials' in
TaskFlow 'install' at 04:29:28
 [START] Start executing Task: Verify that the provided external SSO
(PSC)/Embedded info is valid at 04:29:28
 [SUCCEEDED] Successfully executed Task 'Running precheck: SSOExternal' in
TaskFlow 'install' at 04:29:28
 [SUCCEEDED] Successfully executed Task 'PrecheckTask: Running prechecks.' in
TaskFlow 'embedded_vCSA_on_ESXi' at 04:29:28
 [START] Start executing Task: Invoke OVF Tool to deploy VCSA for installation,
upgrade, and migration at 04:29:29
OVF Tool: Opening OVA source:
/mnt2/vcsa-cli-installer/lin64/../../vcsa/VMware-vCenter-Server-Appliance-7.0.1.00300-17491101_OVF10.ova
OVF Tool: The manifest validates
OVF Tool: The provided certificate is in valid period
OVF Tool: Source is signed but could not verify certificate (possibly
self-signed)
OVF Tool: Certificate information:
OVF Tool:   CertIssuer:/C=US/ST=California/L=Palo Alto/O=VMware, Inc.
OVF Tool:   CertSubject:/C=US/ST=California/L=Palo Alto/O=VMware, Inc.
OVF Tool:   -----BEGIN CERTIFICATE-----
OVF Tool:   MIIDyzCCArOgAwIBAgIJAIR/y018RgMXMA0GCSqGSIb3DQEBCwUAME0xCzAJBgNV
OVF Tool:   BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlQYWxvIEFsdG8x
OVF Tool:   FTATBgNVBAoMDFZNd2FyZSwgSW5jLjAeFw0xNjA5MDgwMTE3MjFaFw0yOTEyMzEw
OVF Tool:   MTE3MjFaME0xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYD
OVF Tool:   VQQHDAlQYWxvIEFsdG8xFTATBgNVBAoMDFZNd2FyZSwgSW5jLjCCASAwDQYJKoZI
OVF Tool:   hvcNAQEBBQADggENADCCAQgCggEBALU9NUtC39fqG7yo2XAswUmtli9uA+31uAMw
OVF Tool:   9FFHAEv/it8pzBQZ/4r+2bN+GnXOWhuDd1K4ApKMRvoO4LwQfZxrkx4pXrsu0gdb
OVF Tool:   4OunHw0D8MrdzSoob8Js/uq+IJ+8Bhsc6b7RzTUt9HeDWzHasAJVgMsjehGt23ay
OVF Tool:   9FKOT6dVD6D/Xi3qJnB/4t/XNS6L63dC3ea4guzKDyLaXIP5bf/m56jvVImFjhhT
OVF Tool:   W2ASbnEUlZIVrEuyVcdG7e3FvZufE553JmHL0YG/0m5bIHXKRzBRx0D3HHOAzOKw
OVF Tool:   kkOnxJHSTN4Hz8hSYCWvzUAjSYL3Q8qiTd7GHJ2ynsRnu3KlzKUCAQOjga8wgaww
OVF Tool:   HQYDVR0OBBYEFHg8KQJdm8NPQDmYP41uEgKG+VNwMH0GA1UdIwR2MHSAFHg8KQJd
OVF Tool:   m8NPQDmYP41uEgKG+VNwoVGkTzBNMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs
OVF Tool:   aWZvcm5pYTESMBAGA1UEBwwJUGFsbyBBbHRvMRUwEwYDVQQKDAxWTXdhcmUsIElu
OVF Tool:   Yy6CCQCEf8tNfEYDFzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAD
OVF Tool:   K9uUhsXzpuUcWJq83Vh2HHSxZ/DdR6h+FNYHfEX8h8DOIwhRHhIHoqXkwwnpbjip
OVF Tool:   FBtSzNKzTmzMQBwB7GwzGSsBO2TU8alX2ssnDg2AqwgIeLzclfaQlYoid678Krew
OVF Tool:   nFryr9PYMntr7uyU1duesmey12GS2z5UIhA4BaOnrPJcLCP22nXVlPEsa46ob7XH
OVF Tool:   j4ngZ0ck/qE58Z90GaAuxaa2R3OlHQ+AhXc3q5IixqMDa0MLPd41Qv2kC5iZ+tCf
OVF Tool:   XVdlf4/RqQBNHR8FFVxcjpaROId9Y9/yHdsMt55nN7pf7vRf5vSk1bHvLmlOYgiR
OVF Tool:   tAj6rdPq0c+/C+fct1cM
OVF Tool:   -----END CERTIFICATE-----
OVF Tool: Opening VI target: vi://root@172.17.44.10:443/
OVF Tool: Deploying to VI: vi://root@172.17.44.10:443/
OVF Tool: Disk progress: 99%
OVF Tool: Transfer Completed
OVF Tool: Powering on VM: Embedded-vCenter-Server-Appliance
OVF Tool: Task progress: 99%
OVF Tool: Task Completed
OVF Tool: Waiting for IP address...
OVF Tool: Received IP address: fe80::20c:29ff:fe7d:488b
OVF Tool: Completed successfully
 [SUCCEEDED] Successfully executed Task 'Deploying vCenter Server Appliance' in
TaskFlow 'embedded_vCSA_on_ESXi' at 04:38:32
 [START] Start executing Task: Monitor the entire VCSA deployment using
appliance REST API at 04:38:33
Checking if the target VCSA is powered on and ready for operations...
Successfully verified that the target VCSA 'Embedded-vCenter-Server-Appliance'
has been powered on and is now ready for operations
Checking if the target VCSA appliance API is available for query
Failed while trying the connection with certificate validation. Exception:
HTTPSConnectionPool(host='fe80::20c:29ff:fe7d:488b', port=5480): Max retries
exceeded with url: /rest/vcenter/deployment (Caused by
NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at
0x7f0fe50bcdd8>: Failed to establish a new connection: [Errno 22] Invalid
argument',))
Failed while trying the connection with certificate validation. Exception:
HTTPSConnectionPool(host='fe80::20c:29ff:fe7d:488b', port=5480): Max retries
exceeded with url: /rest/vcenter/deployment (Caused by
NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at
0x7f0fe4fbc710>: Failed to establish a new connection: [Errno 22] Invalid
argument',))
Successfully verified that the target VCSA appliance API is available for query
Start monitoring target VCSA deployment, deployment status will be written into:
/tmp/vcsaCliInstaller-2021-02-05-04-28-tzpju7l4/workflow_1612499337346/embedded_vCSA_on_ESXi/vcsa_deployment.json
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 5/100)   - Setting up storage
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 5/100)   - Setting up storage
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 55/100)  - Installed
vmware-afd-7.0.1.9466-17260200.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 57/100)  - Installed
vmware-certificate-server-7.0.1.9466-17260200.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 58/100)  - Installed
dbcc-7.0.1-17491161.noarch.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 72/100)  - Installed
VMware-vpxd-svcs-7.0.1-17491161.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 79/100)  - Installed
vmware-autodeploy-7.0.1-17491163.noarch.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 83/100)  - Installed
vmware-vsm-7.0.1-17491161.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 85/100)  - Installed
VMware-wcp-0.0.6-17201796.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 85/100)  - Installed
VMware-wcp-0.0.6-17201796.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 85/100)  - Installed
VMware-wcp-0.0.6-17201796.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(RUNNING 89/100)  - Installed
VMware-content-library-7.0.1-17491101.x86_64.rpm
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 4/100)     - Starting
VMware Authentication Framework...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 10/100)    - Starting
VMware Postgres...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 20/100)    - Starting
VMware Lookup Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 22/100)    - Starting
VMware Security Token Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 22/100)    - Starting
VMware Security Token Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 24/100)    - Starting
VMware Single Sign-On User Creation...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 28/100)    - Starting
VMware License Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 32/100)    - Starting
VMware vAPI Endpoint...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 36/100)    - Starting
VMware vCenter-Services...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 38/100)    - Starting
VMware Certificate Authority Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 46/100)    - Starting
VMware VCSA Observability VAPI Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 57/100)    - Starting
VMware Trust Management Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 59/100)    - Starting
VMware vCenter Server...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 65/100)    - Starting
VMware ESX Agent Manager...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 67/100)    - Starting
VMware Hybrid VC Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 69/100)    - Starting
VMware vSphere Profile-Driven Storage Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 71/100)    - Starting
VMware Update Manager...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 79/100)    - Starting
VMware VSAN Health Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 81/100)    - Starting
VMware vService Manager...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 89/100)    - Starting
Workload Control Plane...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 91/100)    - Starting
VMware Content Library Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 91/100)    - Starting
VMware Content Library Service...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(RUNNING 97/100)    - Starting
VMware Performance Charts...
VCSA Deployment is still running
==========VCSA Deployment Progress Report==========         Task: Install
required RPMs for the appliance.(SUCCEEDED 100/100)       - Task has completed
successfully.         Task: Run firstboot scripts.(SUCCEEDED 100/100) - Task has
completed successfully.
Successfully completed VCSA deployment.  VCSA Deployment Start Time:
2021-02-05T04:37:54.577Z VCSA Deployment End Time: 2021-02-05T04:57:45.067Z
 [SUCCEEDED] Successfully executed Task 'MonitorDeploymentTask: Monitoring
Deployment' in TaskFlow 'embedded_vCSA_on_ESXi' at 04:58:11
Monitoring VCSA Deploy task completed
== [START] Start executing Task: Join active domain if necessary at 04:58:11 ==
Domain join task not applicable, skipping task
 [SUCCEEDED] Successfully executed Task 'Running deployment: Domain Join' in
TaskFlow 'embedded_vCSA_on_ESXi' at 04:58:11
 [START] Start executing Task: Provide the login information about new
appliance. at 04:58:12
    Appliance Name: Embedded-vCenter-Server-Appliance
    System Name: dhcp100.example.com
    System IP: 172.17.44.100
    Log in as: Administrator@vsphere.local
 [SUCCEEDED] Successfully executed Task 'ApplianceLoginSummaryTask: Provide
appliance login information.' in TaskFlow 'embedded_vCSA_on_ESXi' at 04:58:12
=================================== 04:58:13 ===================================
Result and Log File Information...
WorkFlow log directory:
/tmp/vcsaCliInstaller-2021-02-05-04-28-tzpju7l4/workflow_1612499337346

real    29m18.141s
user    2m51.621s
sys     0m24.242s
[root@linux lin64]#

おや?vCenterのホスト名が指定したIPアドレスに設定してあった逆引きホスト名で勝手に設定されてしまいました。

これはちょっと予想外。

それ以外は特に問題無く完了しました。

Samba 4.13.xでActive Directoryを1から立てる(SELinux設定無視版)


Samba 4.11以降はPython 2環境で使えなくなり、また、CentOS7のサポート的にも先がないので、CentOS8とSamba 4.13.xベースで環境を作りました。

なお、CentOS7でもEPELレポジトリのpython36をインストールすることで利用することは可能です。

この手順はSELinuxの設定をちゃんとやるのが面倒になったので、SELINUX=permissive で逃げています。

作成するもの

・CentOS8を使用した ユーザ管理を行うためのActive Directoryサーバ構築
・ファイルサーバとしてのsamba利用はここでは扱わない
・既存Windows Active Directoryサーバの連携についても扱わない

この構成の利点

・Windows ServerがなくてもActive Directory環境を構築できる

Windows ServerがなくてもActive Directory環境を構築できるので、Windows Server上で必要となるCALが不要。
Windows フェイルオーバークラスターを作ることも可能。

・Active Directoryユーザの作成などの操作はWindows標準のツールを使える

ユーザーの作成/変更、コンピューターアカウントの作成、DNSの管理など、Active Directoryの管理を行う際に頻繁に使う操作については、WindowsのActive Directory管理ツールやDNS管理ツールを使用することができます。

普段の運用はLinuxのCLIコマンド(samba-toolsやnetコマンドなど)を使う必要はありません。

・sambaの細かい設定は不要

sambaに行う設定は「Active Directory名」「Active Directory上の役割」「管理者パスワード」ぐらいです。

あと、CentOS側でfirewalldに対してポートを開ける設定とsambaが自動起動するように設定を追加するだけです。

かつてはDNSサーバやLDAPサーバと連携させて、とか必要でしたが、現在は必要な機能がsambaに含まれている感じです。

この構成の欠点

・Active Directoryの全機能が搭載されていない

ドメイン/フォレストの機能レベルがWindows Server 2012R2レベルまで対応になったものの、「Kerberos関連機能が未搭載」となっています。(samba公式wiki「Raising the Functional Levels」)

構築手順

手順は、公式の「Setting up Samba as an Active Directory Domain Controller」と「Package Dependencies Required to Build Samba」を参照しながら実施していきます。

(1) CentOS8の最小限インストールを実施

CentOS8で「サーバー(GUI使用)」でインストールするとちょっと面倒くさいので「最小限のインストール」でインストールします。

再起動後は「yum update -y」でパッケージを最新にします。

(2) /etc/hostsの修正

自ホスト名を /etc/hosts に追加。
追加の際は、ショートのホスト名とドメイン付きのFQDNの両方を列挙する。

[root@centos8 ~]# vi /etc/hosts
[root@centos8 ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
172.17.44.48 centos8 centos8.adosakana.local
[root@centos8 ~]# hostname
centos8.adosakana.local
[root@centos8 ~]#

(3) 必要なパッケージをインストール

Samba公式の「Package Dependencies Required to Build Samba」に記載されているパッケージをインストールする。

2020/11/02現在では各OS用にセットアップ用シェルスクリプトが用意されているので、それを使用する。(CentOS7用もあります)

CentOS8の場合「https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos8/bootstrap.sh;hb=v4-13-test」をダウンロードするので、下記の様に実行する。

[root@centos8 ~]# curl -o bootstrap.sh "https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos8/bootstrap.sh;hb=v4-13-test"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2074    0  2074    0     0   1585      0 --:--:--  0:00:01 --:--:--  1585
[root@centos8 ~]#

ダウンロードが終わったら「sh bootstrap.sh」で実行します。
なお、この操作によりEPELレポジトリが追加されます。

[root@centos8 ~]# sh bootstrap.sh
+ yum update -y
メタデータの期限切れの最終確認: 0:12:05 時間前の 2020年11月02日 12時55分33秒 に 実施しました。
依存関係が解決しました。
行うべきことはありません。
完了しました!
+ yum install -y dnf-plugins-core
メタデータの期限切れの最終確認: 0:12:06 時間前の 2020年11月02日 12時55分33秒 に 実施しました。
パッケージ dnf-plugins-core-4.0.12-4.el8_2.noarch はすでにインストールされています。
依存関係が解決しました。
行うべきことはありません。
完了しました!
+ yum install -y epel-release
メタデータの期限切れの最終確認: 0:12:07 時間前の 2020年11月02日 12時55分33秒 に 実施しました。
依存関係が解決しました。
================================================================================
 パッケージ            Arch            バージョン         リポジトリー    サイズ
================================================================================
インストール中:
 epel-release          noarch          8-8.el8            extras           23 k

トランザクションの概要
================================================================================
インストール  1 パッケージ

ダウンロードサイズの合計: 23 k
インストール済みのサイズ: 32 k
パッケージのダウンロード:
epel-release-8-8.el8.noarch.rpm                 364 kB/s |  23 kB     00:00
--------------------------------------------------------------------------------
合計                                             35 kB/s |  23 kB     00:00
トランザクションの確認を実行中
トランザクションの確認に成功しました。
トランザクションのテストを実行中
トランザクションのテストに成功しました。
トランザクションを実行中
  準備              :                                                       1/1
  インストール中    : epel-release-8-8.el8.noarch                           1/1
  scriptlet の実行中: epel-release-8-8.el8.noarch                           1/1
  検証              : epel-release-8-8.el8.noarch                           1/1

インストール済み:
  epel-release-8-8.el8.noarch

完了しました!
+ yum -v repolist all
ロードされたプラグイン: builddep, changelog, config-manager, copr, debug, debuginfo-install, download, generate_completion_cache, needs-restarting, playground, repoclosure, repodiff, repograph, repomanage, reposync
YUM version: 4.2.17
cachedir: /var/cache/dnf
User-Agent: constructed: 'libdnf (CentOS Linux 8; generic; Linux.x86_64)'
repo: キャッシュを使用: AppStream
AppStream: は 2020年10月31日 02時58分38秒 から取得したメタデータを使用中
repo: キャッシュを使用: BaseOS
BaseOS: は 2020年10月31日 02時58分33秒 から取得したメタデータを使用中
repo: キャッシュを使用: extras
extras: は 2020年09月18日 00時13分28秒 から取得したメタデータを使用中
repo: リモートからダウンロード中: epel-modular
Extra Packages for Enterprise Linux Modular 8 - 108 kB/s |  97 kB     00:00
epel-modular: は 2020年10月16日 00時23分17秒 から取得したメタデータを使用中
repo: リモートからダウンロード中: epel
Extra Packages for Enterprise Linux 8 - x86_64  5.0 MB/s | 8.2 MB     00:01
epel: は 2020年11月01日 10時30分27秒 から取得したメタデータを使用中
Completion plugin: Generating completion cache...

Repo-id            : AppStream
Repo-name          : CentOS-8 - AppStream
Repo-status        : 有効化
Repo-revision      : 8.2.2004
Repo-distro-tags      : [cpe:/o:centos:centos:8]:  , 8, C, O, S, e, n, t
Repo-updated       : 2020年10月31日 02時58分38秒
Repo-pkgs          : 5,365
Repo-available-pkgs: 4,933
Repo-size          : 6.3 G
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock
Repo-baseurl       : http://ftp.iij.ad.jp/pub/linux/centos/8.2.2004/AppStream/x86_64/os/
                   : (9 more)
Repo-expire        : 172,800 秒 (最終: 2020年11月02日 12時55分26秒)
Repo-filename      : /etc/yum.repos.d/CentOS-AppStream.repo

Repo-id            : AppStream-source
Repo-name          : CentOS-8 - AppStream Sources
Repo-status        : 無効化
Repo-baseurl       : http://vault.centos.org/centos/8/AppStream/Source/
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Sources.repo

Repo-id            : BaseOS
Repo-name          : CentOS-8 - Base
Repo-status        : 有効化
Repo-revision      : 8.2.2004
Repo-distro-tags      : [cpe:/o:centos:centos:8]:  , 8, C, O, S, e, n, t
Repo-updated       : 2020年10月31日 02時58分33秒
Repo-pkgs          : 1,675
Repo-available-pkgs: 1,673
Repo-size          : 1.0 G
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=BaseOS&infra=stock
Repo-baseurl       : http://ftp.iij.ad.jp/pub/linux/centos/8.2.2004/BaseOS/x86_64/os/
                   : (9 more)
Repo-expire        : 172,800 秒 (最終: 2020年11月02日 12時55分32秒)
Repo-filename      : /etc/yum.repos.d/CentOS-Base.repo

Repo-id            : BaseOS-source
Repo-name          : CentOS-8 - BaseOS Sources
Repo-status        : 無効化
Repo-baseurl       : http://vault.centos.org/centos/8/BaseOS/Source/
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Sources.repo

Repo-id            : Devel
Repo-name          : CentOS-8 - Devel WARNING! FOR BUILDROOT USE ONLY!
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=Devel&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Devel.repo

Repo-id            : HighAvailability
Repo-name          : CentOS-8 - HA
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=HighAvailability&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-HA.repo

Repo-id            : PowerTools
Repo-name          : CentOS-8 - PowerTools
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=PowerTools&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-PowerTools.repo

Repo-id            : base-debuginfo
Repo-name          : CentOS-8 - Debuginfo
Repo-status        : 無効化
Repo-baseurl       : http://debuginfo.centos.org/8/x86_64/
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Debuginfo.repo

Repo-id            : c8-media-AppStream
Repo-name          : CentOS-AppStream-8 - Media
Repo-status        : 無効化
Repo-baseurl       : file:///media/CentOS/AppStream,
                   : file:///media/cdrom/AppStream,
                   : file:///media/cdrecorder/AppStream
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Media.repo

Repo-id            : c8-media-BaseOS
Repo-name          : CentOS-BaseOS-8 - Media
Repo-status        : 無効化
Repo-baseurl       : file:///media/CentOS/BaseOS, file:///media/cdrom/BaseOS,
                   : file:///media/cdrecorder/BaseOS
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Media.repo

Repo-id            : centosplus
Repo-name          : CentOS-8 - Plus
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=centosplus&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-centosplus.repo

Repo-id            : centosplus-source
Repo-name          : CentOS-8 - Plus Sources
Repo-status        : 無効化
Repo-baseurl       : http://vault.centos.org/centos/8/centosplus/Source/
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Sources.repo

Repo-id            : cr
Repo-name          : CentOS-8 - cr
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=cr&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-CR.repo

Repo-id            : epel
Repo-name          : Extra Packages for Enterprise Linux 8 - x86_64
Repo-status        : 有効化
Repo-revision      : 1604193488
Repo-updated       : 2020年11月01日 10時30分27秒
Repo-pkgs          : 6,605
Repo-available-pkgs: 6,604
Repo-size          : 9.2 G
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-8&arch=x86_64&infra=stock&content=centos
  Updated          : 2020年11月02日 13時07分46秒
Repo-baseurl       : https://nrt.edge.kernel.org/fedora-buffet/epel/8/Everything/x86_64/
                   : (28 more)
Repo-expire        : 172,800 秒 (最終: 2020年11月02日 13時07分46秒)
Repo-filename      : /etc/yum.repos.d/epel.repo

Repo-id            : epel-debuginfo
Repo-name          : Extra Packages for Enterprise Linux 8 - x86_64 - Debug
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-debug-8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel.repo

Repo-id            : epel-modular
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - x86_64
Repo-status        : 有効化
Repo-revision      : 1602775383
Repo-updated       : 2020年10月16日 00時23分17秒
Repo-pkgs          : 73
Repo-available-pkgs: 0
Repo-size          : 61 M
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-modular-8&arch=x86_64&infra=stock&content=centos
  Updated          : 2020年11月02日 13時07分45秒
Repo-baseurl       : rsync://ftp.jaist.ac.jp/pub/Linux/Fedora/epel/8/Modular/x86_64/
                   : (50 more)
Repo-expire        : 172,800 秒 (最終: 2020年11月02日 13時07分45秒)
Repo-filename      : /etc/yum.repos.d/epel-modular.repo

Repo-id            : epel-modular-debuginfo
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - x86_64 -
                   : Debug
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-modular-debug-8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-modular.repo

Repo-id            : epel-modular-source
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - x86_64 -
                   : Source
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-modular-source-8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-modular.repo

Repo-id            : epel-playground
Repo-name          : Extra Packages for Enterprise Linux 8 - Playground - x86_64
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=playground-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-playground.repo

Repo-id            : epel-playground-debuginfo
Repo-name          : Extra Packages for Enterprise Linux 8 - Playground - x86_64
                   : - Debug
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=playground-debug-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-playground.repo

Repo-id            : epel-playground-source
Repo-name          : Extra Packages for Enterprise Linux 8 - Playground - x86_64
                   : - Source
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=playground-source-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-playground.repo

Repo-id            : epel-source
Repo-name          : Extra Packages for Enterprise Linux 8 - x86_64 - Source
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=epel-source-8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel.repo

Repo-id            : epel-testing
Repo-name          : Extra Packages for Enterprise Linux 8 - Testing - x86_64
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing.repo

Repo-id            : epel-testing-debuginfo
Repo-name          : Extra Packages for Enterprise Linux 8 - Testing - x86_64 -
                   : Debug
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-debug-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing.repo

Repo-id            : epel-testing-modular
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - Testing -
                   : x86_64
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-modular-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing-modular.repo

Repo-id            : epel-testing-modular-debuginfo
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - Testing -
                   : x86_64 - Debug
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-modular-debug-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing-modular.repo

Repo-id            : epel-testing-modular-source
Repo-name          : Extra Packages for Enterprise Linux Modular 8 - Testing -
                   : x86_64 - Source
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-modular-source-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing-modular.repo

Repo-id            : epel-testing-source
Repo-name          : Extra Packages for Enterprise Linux 8 - Testing - x86_64 -
                   : Source
Repo-status        : 無効化
Repo-metalink      : https://mirrors.fedoraproject.org/metalink?repo=testing-source-epel8&arch=x86_64&infra=stock&content=centos
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/epel-testing.repo

Repo-id            : extras
Repo-name          : CentOS-8 - Extras
Repo-status        : 有効化
Repo-revision      : 1600355621
Repo-updated       : 2020年09月18日 00時13分28秒
Repo-pkgs          : 27
Repo-available-pkgs: 27
Repo-size          : 311 k
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=extras&infra=stock
Repo-baseurl       : http://ftp.yz.yamagata-u.ac.jp/pub/linux/centos/8.2.2004/extras/x86_64/os/
                   : (9 more)
Repo-expire        : 172,800 秒 (最終: 2020年11月02日 12時55分33秒)
Repo-filename      : /etc/yum.repos.d/CentOS-Extras.repo

Repo-id            : extras-source
Repo-name          : CentOS-8 - Extras Sources
Repo-status        : 無効化
Repo-baseurl       : http://vault.centos.org/centos/8/extras/Source/
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-Sources.repo

Repo-id            : fasttrack
Repo-name          : CentOS-8 - fasttrack
Repo-status        : 無効化
Repo-mirrors       : http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=fasttrack&infra=stock
Repo-expire        : 172,800 秒 (最終: 不明)
Repo-filename      : /etc/yum.repos.d/CentOS-fasttrack.repo
Total packages: 13,745
+ yum config-manager --set-enabled PowerTools -y
+ yum config-manager --set-enabled Devel -y
+ yum update -y
CentOS-8 - Devel WARNING! FOR BUILDROOT USE ONL  22 kB/s |  15 kB     00:00
CentOS-8 - PowerTools                           1.4 MB/s | 1.9 MB     00:01
依存関係が解決しました。
行うべきことはありません。
完了しました!
+ yum install -y --setopt=install_weak_deps=False '@Development Tools' acl attr autoconf avahi-devel bind-utils binutils bison ccache chrpath cups-devel curl dbus-devel docbook-dtds docbook-style-xsl flex gawk gcc gdb git glib2-devel glibc-common glibc-langpack-en glusterfs-api-devel glusterfs-devel gnutls-devel gpgme-devel gzip hostname htop jansson-devel keyutils-libs-devel krb5-devel krb5-server libacl-devel libarchive-devel libattr-devel libblkid-devel libbsd-devel libcap-devel libcephfs-devel libicu-devel libnsl2-devel libpcap-devel libtasn1-devel libtasn1-tools libtirpc-devel libunwind-devel libuuid-devel libxslt lmdb lmdb-devel make mingw64-gcc ncurses-devel openldap-devel pam-devel patch perl perl-Archive-Tar perl-ExtUtils-MakeMaker perl-Parse-Yapp perl-Test-Simple perl-generators perl-interpreter pkgconfig popt-devel procps-ng psmisc python3 python3-cryptography python3-devel python3-dns python3-gpg python3-libsemanage python3-markdown python3-policycoreutils python3-pyasn1 quota-devel readline-devel redhat-lsb rng-tools rpcgen rpcsvc-proto-devel rsync sed sudo systemd-devel tar tree wget which xfsprogs-devel yum-utils zlib-devel
メタデータの期限切れの最終確認: 0:00:05 時間前の 2020年11月02日 13時07分57秒 に 実施しました。
パッケージ acl-2.2.53-1.el8.x86_64 はすでにインストールされています。
パッケージ curl-7.61.1-12.el8.x86_64 はすでにインストールされています。
パッケージ gawk-4.2.1-1.el8.x86_64 はすでにインストールされています。
パッケージ glibc-common-2.28-101.el8.x86_64 はすでにインストールされています。
パッケージ gzip-1.9-9.el8.x86_64 はすでにインストールされています。
パッケージ hostname-3.20-6.el8.x86_64 はすでにインストールされています。
パッケージ libxslt-1.1.32-4.el8.x86_64 はすでにインストールされています。
パッケージ procps-ng-3.3.15-1.el8.x86_64 はすでにインストールされています。
パッケージ python3-cryptography-2.3-3.el8.x86_64 はすでにインストールされていま す。
パッケージ python3-gpg-1.10.0-6.el8.0.1.x86_64 はすでにインストールされています 。
パッケージ rng-tools-6.8-3.el8.x86_64 はすでにインストールされています。
パッケージ sed-4.5-1.el8.x86_64 はすでにインストールされています。
パッケージ sudo-1.8.29-5.el8.x86_64 はすでにインストールされています。
パッケージ tar-2:1.30-4.el8.x86_64 はすでにインストールされています。
パッケージ which-2.21-12.el8.x86_64 はすでにインストールされています。
依存関係が解決しました。
================================================================================
 パッケージ                      Arch   バージョン             Repo       サイズ
================================================================================
インストール中:
 attr                            x86_64 2.4.48-3.el8           BaseOS      68 k
 avahi-devel                     x86_64 0.7-19.el8             PowerTools  38 k
 bind-utils                      x86_64 32:9.11.13-6.el8_2.1   AppStream  443 k
 ccache                          x86_64 3.7.7-1.el8            epel       232 k
 chrpath                         x86_64 0.16-7.el8             BaseOS      33 k
 cups-devel                      x86_64 1:2.2.6-33.el8         AppStream  148 k
 dbus-devel                      x86_64 1:1.12.8-10.el8_2      AppStream   67 k
 docbook-dtds                    noarch 1.0-69.el8             AppStream  377 k
 docbook-style-xsl               noarch 1.79.2-7.el8           AppStream  1.6 M
 glib2-devel                     x86_64 2.56.4-8.el8           BaseOS     423 k
 glibc-langpack-en               x86_64 2.28-101.el8           BaseOS     821 k
 glusterfs-api-devel             x86_64 6.0-37.el8             PowerTools  28 k
 glusterfs-devel                 x86_64 6.0-37.el8             PowerTools 163 k
 gnutls-devel                    x86_64 3.6.8-11.el8_2         AppStream  2.2 M
 gpgme-devel                     x86_64 1.10.0-6.el8.0.1       PowerTools 163 k
 htop                            x86_64 2.2.0-6.el8            epel       112 k
 jansson-devel                   x86_64 2.11-3.el8             AppStream   16 k
 keyutils-libs-devel             x86_64 1.5.10-6.el8           BaseOS      48 k
 krb5-devel                      x86_64 1.17-18.el8            BaseOS     549 k
 krb5-server                     x86_64 1.17-18.el8            BaseOS     1.1 M
 libacl-devel                    x86_64 2.2.53-1.el8           BaseOS      79 k
 libarchive-devel                x86_64 3.3.2-8.el8_1          PowerTools 131 k
 libattr-devel                   x86_64 2.4.48-3.el8           BaseOS      34 k
 libblkid-devel                  x86_64 2.32.1-22.el8          BaseOS      83 k
 libbsd-devel                    x86_64 0.9.1-4.el8            epel       159 k
 libcap-devel                    x86_64 2.26-3.el8             BaseOS      33 k
 libcephfs-devel                 x86_64 1:12.2.7-9.el8         PowerTools  39 k
 libicu-devel                    x86_64 60.3-2.el8_1           BaseOS     922 k
 libnsl2-devel                   x86_64 1.2.0-2.20180605git4a062cf.el8
                                                               PowerTools  35 k
 libpcap-devel                   x86_64 14:1.9.0-3.el8         PowerTools 140 k
 libtasn1-devel                  x86_64 4.13-3.el8             AppStream  335 k
 libtasn1-tools                  x86_64 4.13-3.el8             AppStream   35 k
 libtirpc-devel                  x86_64 1.1.4-4.el8            BaseOS     127 k
 libunwind-devel                 x86_64 1.3.1-3.el8            epel        87 k
 libuuid-devel                   x86_64 2.32.1-22.el8          BaseOS      95 k
 lmdb                            x86_64 0.9.23-2.el8           epel        33 k
 lmdb-devel                      x86_64 0.9.23-2.el8           epel        28 k
 mingw64-gcc                     x86_64 7.2.0-2.el8            PowerTools 9.9 M
 ncurses-devel                   x86_64 6.1-7.20180224.el8     BaseOS     527 k
 openldap-devel                  x86_64 2.4.46-11.el8_1        BaseOS     811 k
 pam-devel                       x86_64 1.3.1-8.el8            BaseOS     209 k
 patch                           x86_64 2.7.6-11.el8           BaseOS     138 k
 perl                            x86_64 4:5.26.3-416.el8       AppStream   72 k
 perl-Archive-Tar                noarch 2.30-1.el8             AppStream   79 k
 perl-ExtUtils-MakeMaker         noarch 1:7.34-1.el8           AppStream  300 k
 perl-Parse-Yapp                 noarch 1.21-2.el8             BaseOS      53 k
 perl-Test-Simple                noarch 1:1.302135-1.el8       AppStream  516 k
 perl-interpreter                x86_64 4:5.26.3-416.el8       BaseOS     6.3 M
 popt-devel                      x86_64 1.16-14.el8            BaseOS      30 k
 psmisc                          x86_64 23.1-4.el8             BaseOS     150 k
 python3-dns                     noarch 1.15.0-10.el8          BaseOS     253 k
 python3-libsemanage             x86_64 2.9-2.el8              BaseOS     127 k
 python3-markdown                noarch 2.6.11-2.el8           PowerTools 133 k
 python3-policycoreutils         noarch 2.9-9.el8              BaseOS     2.2 M
 python3-pyasn1                  noarch 0.3.7-6.el8            AppStream  126 k
 python36                        x86_64 3.6.8-2.module_el8.1.0+245+c39af44f
                                                               AppStream   19 k
 python36-devel                  x86_64 3.6.8-2.module_el8.1.0+245+c39af44f
                                                               AppStream   16 k
 quota-devel                     x86_64 1:4.04-10.el8          Devel       36 k
 readline-devel                  x86_64 7.0-10.el8             BaseOS     204 k
 redhat-lsb                      x86_64 4.1-47.el8             AppStream   30 k
 rpcgen                          x86_64 1.3.1-4.el8            PowerTools  52 k
 rpcsvc-proto-devel              x86_64 1.3.1-4.el8            PowerTools  30 k
 rsync                           x86_64 3.1.3-7.el8            BaseOS     404 k
 systemd-devel                   x86_64 239-31.el8_2.2         BaseOS     365 k
 tree                            x86_64 1.7.0-15.el8           BaseOS      59 k
 wget                            x86_64 1.19.5-8.el8_1.1       AppStream  735 k
 xfsprogs-devel                  x86_64 5.0.0-2.el8            BaseOS      69 k
 yum-utils                       noarch 4.0.12-4.el8_2         BaseOS      66 k
 zlib-devel                      x86_64 1.2.11-16.el8_2        BaseOS      57 k
group/module パッケージをインストール中:
 asciidoc                        noarch 8.6.10-0.5.20180627gitf7c2274.el8
                                                               AppStream  216 k
 autoconf                        noarch 2.69-27.el8            AppStream  710 k
 automake                        noarch 1.16.1-6.el8           AppStream  713 k
 binutils                        x86_64 2.30-73.el8            BaseOS     5.7 M
 bison                           x86_64 3.0.4-10.el8           AppStream  688 k
 byacc                           x86_64 1.9.20170709-4.el8     AppStream   91 k
 ctags                           x86_64 5.8-22.el8             AppStream  170 k
 diffstat                        x86_64 1.61-7.el8             AppStream   44 k
 flex                            x86_64 2.6.1-9.el8            AppStream  320 k
 gcc                             x86_64 8.3.1-5.el8.0.2        AppStream   23 M
 gcc-c++                         x86_64 8.3.1-5.el8.0.2        AppStream   12 M
 gdb                             x86_64 8.2-11.el8             AppStream  297 k
 git                             x86_64 2.18.4-2.el8_2         AppStream  186 k
 glibc-devel                     x86_64 2.28-101.el8           BaseOS     1.0 M
 intltool                        noarch 0.51.0-11.el8          AppStream   66 k
 jna                             x86_64 4.5.1-5.el8            AppStream  242 k
 libtool                         x86_64 2.4.6-25.el8           AppStream  709 k
 ltrace                          x86_64 0.7.91-28.el8          AppStream  160 k
 make                            x86_64 1:4.2.1-10.el8         BaseOS     498 k
 patchutils                      x86_64 0.3.4-10.el8           AppStream  116 k
 perl-Fedora-VSP                 noarch 0.001-9.el8            AppStream   24 k
 perl-generators                 noarch 1.10-9.el8             AppStream   18 k
 pesign                          x86_64 0.112-25.el8           AppStream  181 k
 pkgconf                         x86_64 1.4.2-1.el8            BaseOS      38 k
 pkgconf-m4                      noarch 1.4.2-1.el8            BaseOS      17 k
 pkgconf-pkg-config              x86_64 1.4.2-1.el8            BaseOS      15 k
 redhat-rpm-config               noarch 122-1.el8              AppStream   83 k
 rpm-build                       x86_64 4.14.2-37.el8          AppStream  171 k
 rpm-sign                        x86_64 4.14.2-37.el8          BaseOS      78 k
 source-highlight                x86_64 3.1.8-16.el8           AppStream  661 k
 strace                          x86_64 4.24-9.el8             BaseOS     972 k
 systemtap                       x86_64 4.2-6.el8              AppStream   18 k
 valgrind                        x86_64 1:3.15.0-11.el8        AppStream   12 M
 valgrind-devel                  x86_64 1:3.15.0-11.el8        AppStream   91 k
依存関係のインストール中:
 adobe-mappings-cmap             noarch 20171205-3.el8         AppStream  2.1 M
 adobe-mappings-cmap-deprecated  noarch 20171205-3.el8         AppStream  119 k
 adobe-mappings-pdf              noarch 20180407-1.el8         AppStream  707 k
 alsa-lib                        x86_64 1.2.1.2-3.el8          AppStream  441 k
 annobin                         x86_64 8.90-1.el8.0.1         AppStream  201 k
 at                              x86_64 3.1.20-11.el8          BaseOS      81 k
 atk                             x86_64 2.28.1-1.el8           AppStream  272 k
 avahi                           x86_64 0.7-19.el8             BaseOS     282 k
 avahi-glib                      x86_64 0.7-19.el8             BaseOS      15 k
 avahi-libs                      x86_64 0.7-19.el8             BaseOS      62 k
 bc                              x86_64 1.07.1-5.el8           BaseOS     129 k
 bind-libs                       x86_64 32:9.11.13-6.el8_2.1   AppStream  172 k
 bind-libs-lite                  x86_64 32:9.11.13-6.el8_2.1   AppStream  1.2 M
 bind-license                    noarch 32:9.11.13-6.el8_2.1   AppStream  101 k
 boost-atomic                    x86_64 1.66.0-7.el8           AppStream   13 k
 boost-chrono                    x86_64 1.66.0-7.el8           AppStream   22 k
 boost-date-time                 x86_64 1.66.0-7.el8           AppStream   29 k
 boost-filesystem                x86_64 1.66.0-7.el8           AppStream   48 k
 boost-iostreams                 x86_64 1.66.0-7.el8           AppStream   39 k
 boost-program-options           x86_64 1.66.0-7.el8           AppStream  140 k
 boost-random                    x86_64 1.66.0-7.el8           AppStream   21 k
 boost-regex                     x86_64 1.66.0-7.el8           AppStream  281 k
 boost-system                    x86_64 1.66.0-7.el8           AppStream   18 k
 boost-thread                    x86_64 1.66.0-7.el8           AppStream   58 k
 boost-timer                     x86_64 1.66.0-7.el8           AppStream   20 k
 bzip2                           x86_64 1.0.6-26.el8           BaseOS      60 k
 cairo                           x86_64 1.15.12-3.el8          AppStream  721 k
 checkpolicy                     x86_64 2.9-1.el8              BaseOS     348 k
 cmake-filesystem                x86_64 3.11.4-7.el8           AppStream   40 k
 copy-jdk-configs                noarch 3.7-1.el8              AppStream   27 k
 cpp                             x86_64 8.3.1-5.el8.0.2        AppStream   10 M
 cups                            x86_64 1:2.2.6-33.el8         AppStream  1.4 M
 cups-client                     x86_64 1:2.2.6-33.el8         AppStream  168 k
 cups-filesystem                 noarch 1:2.2.6-33.el8         AppStream  108 k
 cups-filters                    x86_64 1.20.0-19.el8.0.1      AppStream  782 k
 cups-filters-libs               x86_64 1.20.0-19.el8.0.1      AppStream  135 k
 cups-libs                       x86_64 1:2.2.6-33.el8         BaseOS     432 k
 cyrus-sasl                      x86_64 2.1.27-1.el8           BaseOS      96 k
 cyrus-sasl-devel                x86_64 2.1.27-1.el8           BaseOS     128 k
 desktop-file-utils              x86_64 0.23-8.el8             AppStream   80 k
 dwz                             x86_64 0.12-9.el8             AppStream  109 k
 dyninst                         x86_64 10.1.0-4.el8           AppStream  3.8 M
 ed                              x86_64 1.14.2-4.el8           BaseOS      82 k
 efi-srpm-macros                 noarch 3-2.el8                AppStream   22 k
 efivar-libs                     x86_64 36-1.el8               BaseOS      97 k
 elfutils                        x86_64 0.178-7.el8            BaseOS     540 k
 emacs-filesystem                noarch 1:26.1-5.el8           BaseOS      69 k
 esmtp                           x86_64 1.2-15.el8             epel        57 k
 fontconfig                      x86_64 2.13.1-3.el8           BaseOS     275 k
 fontpackages-filesystem         noarch 1.44-22.el8            BaseOS      16 k
 fribidi                         x86_64 1.0.4-8.el8            AppStream   89 k
 gc                              x86_64 7.6.4-3.el8            AppStream  109 k
 gd                              x86_64 2.2.5-6.el8            AppStream  144 k
 gdb-headless                    x86_64 8.2-11.el8             AppStream  3.7 M
 gdk-pixbuf2                     x86_64 2.36.12-5.el8          BaseOS     467 k
 gdk-pixbuf2-modules             x86_64 2.36.12-5.el8          AppStream  109 k
 gettext-common-devel            noarch 0.19.8.1-17.el8        BaseOS     419 k
 gettext-devel                   x86_64 0.19.8.1-17.el8        BaseOS     331 k
 ghc-srpm-macros                 noarch 1.4.2-7.el8            AppStream  9.3 k
 ghostscript                     x86_64 9.25-5.el8_1.1         AppStream   82 k
 git-core                        x86_64 2.18.4-2.el8_2         AppStream  4.0 M
 git-core-doc                    noarch 2.18.4-2.el8_2         AppStream  2.3 M
 glibc-headers                   x86_64 2.28-101.el8           BaseOS     473 k
 glusterfs                       x86_64 6.0-37.el8             BaseOS     663 k
 glusterfs-api                   x86_64 6.0-37.el8             AppStream   95 k
 glusterfs-client-xlators        x86_64 6.0-37.el8             BaseOS     870 k
 glusterfs-libs                  x86_64 6.0-37.el8             BaseOS     413 k
 gmp-c++                         x86_64 1:6.1.2-10.el8         BaseOS      33 k
 gmp-devel                       x86_64 1:6.1.2-10.el8         BaseOS     187 k
 gnutls-c++                      x86_64 3.6.8-11.el8_2         AppStream   46 k
 gnutls-dane                     x86_64 3.6.8-11.el8_2         AppStream   45 k
 go-srpm-macros                  noarch 2-16.el8               AppStream   14 k
 google-droid-sans-fonts         noarch 20120715-13.el8        AppStream  2.5 M
 graphite2                       x86_64 1.3.10-10.el8          AppStream  122 k
 graphviz                        x86_64 2.40.1-40.el8          AppStream  1.7 M
 gtk-update-icon-cache           x86_64 3.22.30-5.el8          AppStream   32 k
 gtk2                            x86_64 2.24.32-4.el8          AppStream  3.4 M
 guile                           x86_64 5:2.0.14-7.el8         AppStream  3.5 M
 harfbuzz                        x86_64 1.7.5-3.el8            AppStream  295 k
 hicolor-icon-theme              noarch 0.17-2.el8             AppStream   49 k
 isl                             x86_64 0.16.1-6.el8           AppStream  841 k
 jasper-libs                     x86_64 2.0.14-4.el8           AppStream  167 k
 java-1.8.0-openjdk-headless     x86_64 1:1.8.0.272.b10-1.el8_2
                                                               AppStream   34 M
 javapackages-filesystem         noarch 5.3.0-1.module_el8.0.0+11+5b8c10bd
                                                               AppStream   30 k
 jbig2dec-libs                   x86_64 0.14-4.el8_2           AppStream   67 k
 jbigkit-libs                    x86_64 2.1-14.el8             AppStream   55 k
 kernel-headers                  x86_64 4.18.0-193.28.1.el8_2  BaseOS     4.0 M
 lcms2                           x86_64 2.9-2.el8              AppStream  165 k
 libICE                          x86_64 1.0.9-15.el8           AppStream   74 k
 libSM                           x86_64 1.2.3-1.el8            AppStream   48 k
 libX11                          x86_64 1.6.8-3.el8            AppStream  611 k
 libX11-common                   noarch 1.6.8-3.el8            AppStream  158 k
 libX11-xcb                      x86_64 1.6.8-3.el8            AppStream   14 k
 libXau                          x86_64 1.0.8-13.el8           AppStream   36 k
 libXaw                          x86_64 1.0.13-10.el8          AppStream  194 k
 libXcomposite                   x86_64 0.4.4-14.el8           AppStream   28 k
 libXcursor                      x86_64 1.1.15-3.el8           AppStream   36 k
 libXdamage                      x86_64 1.1.4-14.el8           AppStream   27 k
 libXext                         x86_64 1.3.3-9.el8            AppStream   45 k
 libXfixes                       x86_64 5.0.3-7.el8            AppStream   25 k
 libXft                          x86_64 2.3.2-10.el8           AppStream   66 k
 libXi                           x86_64 1.7.9-7.el8            AppStream   49 k
 libXinerama                     x86_64 1.1.4-1.el8            AppStream   16 k
 libXmu                          x86_64 1.1.2-12.el8           AppStream   74 k
 libXpm                          x86_64 3.5.12-8.el8           AppStream   58 k
 libXrandr                       x86_64 1.5.1-7.el8            AppStream   33 k
 libXrender                      x86_64 0.9.10-7.el8           AppStream   33 k
 libXt                           x86_64 1.1.5-12.el8           AppStream  186 k
 libXtst                         x86_64 1.2.3-7.el8            AppStream   22 k
 libXxf86misc                    x86_64 1.0.4-1.el8            AppStream   23 k
 libXxf86vm                      x86_64 1.1.4-9.el8            AppStream   19 k
 libatomic_ops                   x86_64 7.6.2-3.el8            AppStream   38 k
 libbabeltrace                   x86_64 1.5.4-2.el8            AppStream  201 k
 libbsd                          x86_64 0.9.1-4.el8            epel       106 k
 libcephfs2                      x86_64 1:12.2.7-9.el8         PowerTools 486 k
 libcom_err-devel                x86_64 1.45.4-3.el8           BaseOS      38 k
 libdatrie                       x86_64 0.2.9-7.el8            AppStream   33 k
 liberation-fonts-common         noarch 1:2.00.3-7.el8         BaseOS      25 k
 liberation-mono-fonts           noarch 1:2.00.3-7.el8         BaseOS     505 k
 libesmtp                        x86_64 1.0.6-18.el8           epel        70 k
 libfontenc                      x86_64 1.1.3-8.el8            AppStream   37 k
 libglvnd                        x86_64 1:1.2.0-6.el8          AppStream   98 k
 libglvnd-glx                    x86_64 1:1.2.0-6.el8          AppStream  136 k
 libgpg-error-devel              x86_64 1.31-1.el8             BaseOS      64 k
 libgs                           x86_64 9.25-5.el8_1.1         AppStream  3.1 M
 libicu                          x86_64 60.3-2.el8_1           BaseOS     8.8 M
 libidn                          x86_64 1.34-5.el8             AppStream  239 k
 libijs                          x86_64 0.35-5.el8             AppStream   30 k
 libipt                          x86_64 1.6.1-8.el8            AppStream   50 k
 libjpeg-turbo                   x86_64 1.5.3-10.el8           AppStream  156 k
 libkadm5                        x86_64 1.17-18.el8            BaseOS     185 k
 liblockfile                     x86_64 1.14-1.el8             AppStream   32 k
 libmcpp                         x86_64 2.7.2-20.el8           AppStream   81 k
 libmpc                          x86_64 1.0.2-9.el8            AppStream   59 k
 libpaper                        x86_64 1.1.24-22.el8          AppStream   45 k
 libpkgconf                      x86_64 1.4.2-1.el8            BaseOS      35 k
 libpng12                        x86_64 1.2.57-5.el8           AppStream  160 k
 librados-devel                  x86_64 1:12.2.7-9.el8         PowerTools 106 k
 librados2                       x86_64 1:12.2.7-9.el8         AppStream  2.9 M
 librsvg2                        x86_64 2.42.7-3.el8           AppStream  570 k
 libselinux-devel                x86_64 2.9-3.el8              BaseOS     199 k
 libsepol-devel                  x86_64 2.9-1.el8              BaseOS      86 k
 libstdc++-devel                 x86_64 8.3.1-5.el8.0.2        AppStream  2.0 M
 libthai                         x86_64 0.1.27-2.el8           AppStream  203 k
 libtiff                         x86_64 4.0.9-17.el8           AppStream  188 k
 libunwind                       x86_64 1.3.1-3.el8            epel        75 k
 libverto-devel                  x86_64 0.3.0-5.el8            BaseOS      18 k
 libverto-libevent               x86_64 0.3.0-5.el8            BaseOS      16 k
 libwebp                         x86_64 1.0.0-1.el8            AppStream  273 k
 libxcb                          x86_64 1.13.1-1.el8           AppStream  229 k
 libxcrypt-devel                 x86_64 4.1.1-4.el8            BaseOS      25 k
 libxshmfence                    x86_64 1.3-2.el8              AppStream   13 k
 lksctp-tools                    x86_64 1.0.18-3.el8           BaseOS     100 k
 lmdb-libs                       x86_64 0.9.23-5.el8           AppStream   58 k
 lua                             x86_64 5.3.4-11.el8           AppStream  193 k
 m4                              x86_64 1.4.18-7.el8           BaseOS     223 k
 mailcap                         noarch 2.1.48-3.el8           BaseOS      39 k
 mailx                           x86_64 12.5-29.el8            BaseOS     257 k
 mcpp                            x86_64 2.7.2-20.el8           AppStream   31 k
 mesa-libGL                      x86_64 19.3.4-2.el8           AppStream  184 k
 mesa-libGLU                     x86_64 9.0.0-15.el8           AppStream  185 k
 mesa-libglapi                   x86_64 19.3.4-2.el8           AppStream   63 k
 mingw-binutils-generic          x86_64 2.30-1.el8             PowerTools 1.5 M
 mingw-filesystem-base           noarch 104-1.el8              PowerTools  40 k
 mingw64-binutils                x86_64 2.30-1.el8             PowerTools 2.9 M
 mingw64-cpp                     x86_64 7.2.0-2.el8            PowerTools 7.0 M
 mingw64-crt                     noarch 5.0.2-2.el8            PowerTools 2.5 M
 mingw64-filesystem              noarch 104-1.el8              PowerTools 171 k
 mingw64-headers                 noarch 5.0.2-2.el8            PowerTools 5.4 M
 mingw64-winpthreads             noarch 5.0.2-2.el8            PowerTools  52 k
 mokutil                         x86_64 1:0.3.0-9.el8          BaseOS      44 k
 ncurses-c++-libs                x86_64 6.1-7.20180224.el8     BaseOS      58 k
 ncurses-compat-libs             x86_64 6.1-7.20180224.el8     BaseOS     331 k
 nettle-devel                    x86_64 3.4.1-1.el8            AppStream  636 k
 nspr                            x86_64 4.25.0-2.el8_2         AppStream  142 k
 nss                             x86_64 3.53.1-11.el8_2        AppStream  721 k
 nss-softokn                     x86_64 3.53.1-11.el8_2        AppStream  484 k
 nss-softokn-freebl              x86_64 3.53.1-11.el8_2        AppStream  289 k
 nss-sysinit                     x86_64 3.53.1-11.el8_2        AppStream   71 k
 nss-tools                       x86_64 3.53.1-11.el8_2        AppStream  559 k
 nss-util                        x86_64 3.53.1-11.el8_2        AppStream  135 k
 ocaml-srpm-macros               noarch 5-4.el8                AppStream  9.4 k
 openblas-srpm-macros            noarch 2-2.el8                AppStream  7.9 k
 openjpeg2                       x86_64 2.3.1-6.el8            AppStream  154 k
 p11-kit-devel                   x86_64 0.23.14-5.el8_0        BaseOS      86 k
 pango                           x86_64 1.42.4-6.el8           AppStream  298 k
 pcre-cpp                        x86_64 8.42-4.el8             BaseOS      47 k
 pcre-devel                      x86_64 8.42-4.el8             BaseOS     551 k
 pcre-utf16                      x86_64 8.42-4.el8             BaseOS     195 k
 pcre-utf32                      x86_64 8.42-4.el8             BaseOS     186 k
 pcre2-devel                     x86_64 10.32-1.el8            BaseOS     605 k
 pcre2-utf16                     x86_64 10.32-1.el8            BaseOS     228 k
 pcre2-utf32                     x86_64 10.32-1.el8            BaseOS     220 k
 perl-Algorithm-Diff             noarch 1.1903-9.el8           AppStream   52 k
 perl-Archive-Zip                noarch 1.60-3.el8             AppStream  108 k
 perl-Attribute-Handlers         noarch 0.99-416.el8           AppStream   88 k
 perl-B-Debug                    noarch 1.26-2.el8             AppStream   26 k
 perl-B-Lint                     noarch 1.20-11.el8            AppStream   25 k
 perl-CGI                        noarch 4.38-2.el8             AppStream  208 k
 perl-CPAN                       noarch 2.18-397.el8           AppStream  554 k
 perl-CPAN-Meta                  noarch 2.150010-396.el8       AppStream  191 k
 perl-CPAN-Meta-Requirements     noarch 2.140-396.el8          AppStream   37 k
 perl-CPAN-Meta-YAML             noarch 0.018-397.el8          AppStream   34 k
 perl-Carp                       noarch 1.42-396.el8           BaseOS      30 k
 perl-Class-ISA                  noarch 0.36-1022.el8          AppStream   15 k
 perl-Compress-Bzip2             x86_64 2.26-6.el8             AppStream   72 k
 perl-Compress-Raw-Bzip2         x86_64 2.081-1.el8            AppStream   40 k
 perl-Compress-Raw-Zlib          x86_64 2.081-1.el8            AppStream   68 k
 perl-Config-Perl-V              noarch 0.30-1.el8             AppStream   22 k
 perl-DB_File                    x86_64 1.842-1.el8            AppStream   83 k
 perl-Data-Dump                  noarch 1.23-7.el8             AppStream   36 k
 perl-Data-Dumper                x86_64 2.167-399.el8          BaseOS      58 k
 perl-Data-OptList               noarch 0.110-6.el8            AppStream   31 k
 perl-Data-Section               noarch 0.200007-3.el8         AppStream   30 k
 perl-Devel-PPPort               x86_64 3.36-5.el8             AppStream  118 k
 perl-Devel-Peek                 x86_64 1.26-416.el8           AppStream   93 k
 perl-Devel-SelfStubber          noarch 1.06-416.el8           AppStream   75 k
 perl-Devel-Size                 x86_64 0.81-2.el8             AppStream   34 k
 perl-Digest                     noarch 1.17-395.el8           AppStream   27 k
 perl-Digest-HMAC                noarch 1.03-17.el8            AppStream   20 k
 perl-Digest-MD5                 x86_64 2.55-396.el8           AppStream   37 k
 perl-Digest-SHA                 x86_64 1:6.02-1.el8           AppStream   66 k
 perl-Encode                     x86_64 4:2.97-3.el8           BaseOS     1.5 M
 perl-Encode-Locale              noarch 1.05-9.el8             AppStream   21 k
 perl-Encode-devel               x86_64 4:2.97-3.el8           AppStream   39 k
 perl-Env                        noarch 1.04-395.el8           AppStream   21 k
 perl-Errno                      x86_64 1.28-416.el8           BaseOS      76 k
 perl-Error                      noarch 1:0.17025-2.el8        AppStream   46 k
 perl-Exporter                   noarch 5.72-396.el8           BaseOS      34 k
 perl-ExtUtils-CBuilder          noarch 1:0.280230-2.el8       AppStream   48 k
 perl-ExtUtils-Command           noarch 1:7.34-1.el8           AppStream   19 k
 perl-ExtUtils-Embed             noarch 1.34-416.el8           AppStream   79 k
 perl-ExtUtils-Install           noarch 2.14-4.el8             AppStream   46 k
 perl-ExtUtils-MM-Utils          noarch 1:7.34-1.el8           AppStream   17 k
 perl-ExtUtils-Manifest          noarch 1.70-395.el8           AppStream   37 k
 perl-ExtUtils-Miniperl          noarch 1.06-416.el8           AppStream   76 k
 perl-ExtUtils-ParseXS           noarch 1:3.35-2.el8           AppStream   83 k
 perl-File-CheckTree             noarch 4.42-303.el8           AppStream   23 k
 perl-File-Fetch                 noarch 0.56-2.el8             AppStream   33 k
 perl-File-HomeDir               noarch 1.002-4.el8            AppStream   61 k
 perl-File-Listing               noarch 6.04-17.el8            AppStream   18 k
 perl-File-Path                  noarch 2.15-2.el8             BaseOS      38 k
 perl-File-Temp                  noarch 0.230.600-1.el8        BaseOS      63 k
 perl-File-Which                 noarch 1.22-2.el8             AppStream   23 k
 perl-Filter                     x86_64 2:1.58-2.el8           AppStream   82 k
 perl-Filter-Simple              noarch 0.94-2.el8             AppStream   29 k
 perl-Getopt-Long                noarch 1:2.50-4.el8           BaseOS      63 k
 perl-Git                        noarch 2.18.4-2.el8_2         AppStream   77 k
 perl-HTML-Parser                x86_64 3.72-14.el8            AppStream  119 k
 perl-HTML-Tagset                noarch 3.20-33.el8            AppStream   24 k
 perl-HTTP-Cookies               noarch 6.04-2.el8             AppStream   39 k
 perl-HTTP-Date                  noarch 6.02-18.el8            AppStream   19 k
 perl-HTTP-Message               noarch 6.18-1.el8             AppStream  100 k
 perl-HTTP-Negotiate             noarch 6.01-19.el8            AppStream   22 k
 perl-HTTP-Tiny                  noarch 0.074-1.el8            BaseOS      58 k
 perl-IO                         x86_64 1.38-416.el8           BaseOS     141 k
 perl-IO-Compress                noarch 2.081-1.el8            AppStream  258 k
 perl-IO-HTML                    noarch 1.001-10.el8           AppStream   28 k
 perl-IO-Socket-IP               noarch 0.39-5.el8             AppStream   47 k
 perl-IO-Socket-SSL              noarch 2.066-4.el8            AppStream  297 k
 perl-IO-Zlib                    noarch 1:1.10-416.el8         AppStream   80 k
 perl-IPC-Cmd                    noarch 2:1.02-1.el8           AppStream   43 k
 perl-IPC-SysV                   x86_64 2.07-397.el8           AppStream   43 k
 perl-IPC-System-Simple          noarch 1.25-17.el8            AppStream   43 k
 perl-JSON-PP                    noarch 1:2.97.001-3.el8       AppStream   68 k
 perl-LWP-MediaTypes             noarch 6.02-14.el8            AppStream   29 k
 perl-Locale-Codes               noarch 3.57-1.el8             AppStream  311 k
 perl-Locale-Maketext            noarch 1.28-396.el8           AppStream   99 k
 perl-Locale-Maketext-Simple     noarch 1:0.21-416.el8         AppStream   78 k
 perl-MIME-Base64                x86_64 3.15-396.el8           BaseOS      31 k
 perl-MRO-Compat                 noarch 0.13-4.el8             AppStream   24 k
 perl-Math-BigInt                noarch 1:1.9998.11-7.el8      BaseOS     196 k
 perl-Math-BigInt-FastCalc       x86_64 0.500.600-6.el8        AppStream   27 k
 perl-Math-BigRat                noarch 0.2614-1.el8           AppStream   40 k
 perl-Math-Complex               noarch 1.59-416.el8           BaseOS     108 k
 perl-Memoize                    noarch 1.03-416.el8           AppStream  118 k
 perl-Module-Build               noarch 2:0.42.24-5.el8        AppStream  273 k
 perl-Module-CoreList            noarch 1:5.20181130-1.el8     AppStream   87 k
 perl-Module-CoreList-tools      noarch 1:5.20181130-1.el8     AppStream   22 k
 perl-Module-Load                noarch 1:0.32-395.el8         AppStream   19 k
 perl-Module-Load-Conditional    noarch 0.68-395.el8           AppStream   24 k
 perl-Module-Loaded              noarch 1:0.08-416.el8         AppStream   74 k
 perl-Module-Metadata            noarch 1.000033-395.el8       AppStream   44 k
 perl-Module-Pluggable           noarch 2:5.2-7.el8            AppStream   34 k
 perl-NTLM                       noarch 1.09-17.el8            AppStream   24 k
 perl-Net-HTTP                   noarch 6.17-2.el8             AppStream   43 k
 perl-Net-Ping                   noarch 2.55-416.el8           AppStream  101 k
 perl-Net-SSLeay                 x86_64 1.88-1.el8             AppStream  379 k
 perl-Package-Generator          noarch 1.106-11.el8           AppStream   27 k
 perl-Params-Check               noarch 1:0.38-395.el8         AppStream   24 k
 perl-Params-Util                x86_64 1.07-22.el8            AppStream   44 k
 perl-PathTools                  x86_64 3.74-1.el8             BaseOS      90 k
 perl-Perl-OSType                noarch 1.010-396.el8          AppStream   29 k
 perl-PerlIO-via-QuotedPrint     noarch 0.08-395.el8           AppStream   13 k
 perl-Pod-Checker                noarch 4:1.73-395.el8         AppStream   33 k
 perl-Pod-Escapes                noarch 1:1.07-395.el8         BaseOS      20 k
 perl-Pod-Html                   noarch 1.22.02-416.el8        AppStream   87 k
 perl-Pod-LaTeX                  noarch 0.61-302.el8           AppStream   41 k
 perl-Pod-Parser                 noarch 1.63-396.el8           AppStream  108 k
 perl-Pod-Perldoc                noarch 3.28-396.el8           BaseOS      86 k
 perl-Pod-Plainer                noarch 1.04-7.el8             AppStream   14 k
 perl-Pod-Simple                 noarch 1:3.35-395.el8         BaseOS     213 k
 perl-Pod-Usage                  noarch 4:1.69-395.el8         BaseOS      34 k
 perl-Scalar-List-Utils          x86_64 3:1.49-2.el8           BaseOS      68 k
 perl-SelfLoader                 noarch 1.23-416.el8           AppStream   82 k
 perl-Socket                     x86_64 4:2.027-3.el8          BaseOS      59 k
 perl-Software-License           noarch 0.103013-2.el8         AppStream  138 k
 perl-Storable                   x86_64 1:3.11-3.el8           BaseOS      98 k
 perl-Sub-Exporter               noarch 0.987-15.el8           AppStream   73 k
 perl-Sub-Install                noarch 0.928-14.el8           AppStream   27 k
 perl-Sys-Syslog                 x86_64 0.35-397.el8           AppStream   50 k
 perl-Term-ANSIColor             noarch 4.06-396.el8           BaseOS      46 k
 perl-Term-Cap                   noarch 1.17-395.el8           BaseOS      23 k
 perl-TermReadKey                x86_64 2.37-7.el8             AppStream   40 k
 perl-Test                       noarch 1.30-416.el8           AppStream   89 k
 perl-Test-Harness               noarch 1:3.42-1.el8           AppStream  279 k
 perl-Text-Balanced              noarch 2.03-395.el8           AppStream   58 k
 perl-Text-Diff                  noarch 1.45-2.el8             AppStream   45 k
 perl-Text-Glob                  noarch 0.11-4.el8             AppStream   17 k
 perl-Text-ParseWords            noarch 3.30-395.el8           BaseOS      18 k
 perl-Text-Soundex               x86_64 3.05-8.el8             AppStream   32 k
 perl-Text-Tabs+Wrap             noarch 2013.0523-395.el8      BaseOS      24 k
 perl-Text-Template              noarch 1.51-1.el8             AppStream   64 k
 perl-Text-Unidecode             noarch 1.30-5.el8             AppStream  149 k
 perl-Thread-Queue               noarch 3.13-1.el8             AppStream   24 k
 perl-Time-HiRes                 x86_64 1.9758-1.el8           AppStream   61 k
 perl-Time-Local                 noarch 1:1.280-1.el8          BaseOS      34 k
 perl-Time-Piece                 x86_64 1.31-416.el8           AppStream   98 k
 perl-TimeDate                   noarch 1:2.30-13.el8          AppStream   53 k
 perl-Try-Tiny                   noarch 0.30-2.el8             AppStream   44 k
 perl-URI                        noarch 1.73-3.el8             AppStream  116 k
 perl-Unicode-Collate            x86_64 1.25-2.el8             AppStream  686 k
 perl-Unicode-Normalize          x86_64 1.25-396.el8           BaseOS      82 k
 perl-WWW-RobotRules             noarch 6.02-18.el8            AppStream   22 k
 perl-XML-LibXML                 x86_64 1:2.0132-2.el8         AppStream  372 k
 perl-XML-NamespaceSupport       noarch 1.12-4.el8             AppStream   30 k
 perl-XML-Parser                 x86_64 2.44-11.el8            AppStream  226 k
 perl-XML-SAX                    noarch 1.00-1.el8             AppStream   65 k
 perl-XML-SAX-Base               noarch 1.09-4.el8             AppStream   35 k
 perl-autodie                    noarch 2.29-396.el8           AppStream   98 k
 perl-bignum                     noarch 0.49-2.el8             AppStream   44 k
 perl-constant                   noarch 1.33-396.el8           BaseOS      25 k
 perl-devel                      x86_64 4:5.26.3-416.el8       AppStream  599 k
 perl-encoding                   x86_64 4:2.22-3.el8           AppStream   68 k
 perl-experimental               noarch 0.019-2.el8            AppStream   24 k
 perl-inc-latest                 noarch 2:0.500-9.el8          AppStream   25 k
 perl-libnet                     noarch 3.11-3.el8             AppStream  121 k
 perl-libnetcfg                  noarch 4:5.26.3-416.el8       AppStream   77 k
 perl-libs                       x86_64 4:5.26.3-416.el8       BaseOS     1.6 M
 perl-libwww-perl                noarch 6.34-1.el8             AppStream  212 k
 perl-local-lib                  noarch 2.000024-2.el8         AppStream   74 k
 perl-macros                     x86_64 4:5.26.3-416.el8       BaseOS      72 k
 perl-open                       noarch 1.11-416.el8           AppStream   77 k
 perl-parent                     noarch 1:0.237-1.el8          BaseOS      20 k
 perl-perlfaq                    noarch 5.20180605-1.el8       AppStream  386 k
 perl-podlators                  noarch 4.11-1.el8             BaseOS     118 k
 perl-srpm-macros                noarch 1-25.el8               AppStream   11 k
 perl-threads                    x86_64 1:2.21-2.el8           BaseOS      61 k
 perl-threads-shared             x86_64 1.58-2.el8             BaseOS      48 k
 perl-utils                      noarch 5.26.3-416.el8         AppStream  128 k
 perl-version                    x86_64 6:0.99.24-1.el8        AppStream   67 k
 pixman                          x86_64 0.38.4-1.el8           AppStream  257 k
 platform-python-devel           x86_64 3.6.8-23.el8           AppStream  246 k
 poppler                         x86_64 0.66.0-26.el8          AppStream  933 k
 poppler-data                    noarch 0.4.9-1.el8            AppStream  2.1 M
 poppler-utils                   x86_64 0.66.0-26.el8          AppStream  228 k
 python-rpm-macros               noarch 3-38.el8               AppStream   14 k
 python-srpm-macros              noarch 3-38.el8               AppStream   14 k
 python3-audit                   x86_64 3.0-0.17.20191104git1c2f876.el8
                                                               BaseOS      86 k
 python3-bind                    noarch 32:9.11.13-6.el8_2.1   AppStream  148 k
 python3-pip                     noarch 9.0.3-16.el8           AppStream   19 k
 python3-pyparsing               noarch 2.1.10-7.el8           BaseOS     142 k
 python3-rpm-generators          noarch 5-6.el8                AppStream   24 k
 python3-rpm-macros              noarch 3-38.el8               AppStream   13 k
 python3-setools                 x86_64 4.2.2-2.el8            BaseOS     601 k
 python3-setuptools              noarch 39.2.0-5.el8           BaseOS     162 k
 qpdf-libs                       x86_64 7.1.1-10.el8           AppStream  338 k
 qt5-srpm-macros                 noarch 5.12.5-3.el8           AppStream   10 k
 redhat-lsb-core                 x86_64 4.1-47.el8             AppStream   46 k
 redhat-lsb-cxx                  x86_64 4.1-47.el8             AppStream   23 k
 redhat-lsb-desktop              x86_64 4.1-47.el8             AppStream   26 k
 redhat-lsb-languages            x86_64 4.1-47.el8             AppStream   25 k
 redhat-lsb-printing             x86_64 4.1-47.el8             AppStream   23 k
 redhat-lsb-submod-multimedia    x86_64 4.1-47.el8             AppStream   22 k
 redhat-lsb-submod-security      x86_64 4.1-47.el8             AppStream   22 k
 rust-srpm-macros                noarch 5-2.el8                AppStream  9.2 k
 sgml-common                     noarch 0.6.3-50.el8           BaseOS      62 k
 spax                            x86_64 1.5.3-13.el8           BaseOS     217 k
 systemtap-client                x86_64 4.2-6.el8              AppStream  3.7 M
 systemtap-devel                 x86_64 4.2-6.el8              AppStream  2.3 M
 systemtap-runtime               x86_64 4.2-6.el8              AppStream  504 k
 systemtap-sdt-devel             x86_64 4.2-6.el8              AppStream   81 k
 tbb                             x86_64 2018.2-9.el8           AppStream  160 k
 time                            x86_64 1.9-3.el8              BaseOS      54 k
 tzdata-java                     noarch 2020d-1.el8            AppStream  190 k
 unzip                           x86_64 6.0-43.el8             BaseOS     195 k
 urw-base35-bookman-fonts        noarch 20170801-10.el8        AppStream  857 k
 urw-base35-c059-fonts           noarch 20170801-10.el8        AppStream  884 k
 urw-base35-d050000l-fonts       noarch 20170801-10.el8        AppStream   79 k
 urw-base35-fonts                noarch 20170801-10.el8        AppStream   12 k
 urw-base35-fonts-common         noarch 20170801-10.el8        AppStream   23 k
 urw-base35-gothic-fonts         noarch 20170801-10.el8        AppStream  654 k
 urw-base35-nimbus-mono-ps-fonts noarch 20170801-10.el8        AppStream  801 k
 urw-base35-nimbus-roman-fonts   noarch 20170801-10.el8        AppStream  865 k
 urw-base35-nimbus-sans-fonts    noarch 20170801-10.el8        AppStream  1.3 M
 urw-base35-p052-fonts           noarch 20170801-10.el8        AppStream  982 k
 urw-base35-standard-symbols-ps-fonts
                                 noarch 20170801-10.el8        AppStream   44 k
 urw-base35-z003-fonts           noarch 20170801-10.el8        AppStream  279 k
 util-linux-user                 x86_64 2.32.1-22.el8          BaseOS      98 k
 vim-filesystem                  noarch 2:8.0.1763-13.el8      AppStream   48 k
 words                           noarch 3.0-28.el8             BaseOS     1.4 M
 xdg-utils                       noarch 1.1.2-5.el8            AppStream   84 k
 xml-common                      noarch 0.6.3-50.el8           BaseOS      39 k
 xorg-x11-font-utils             x86_64 1:7.5-40.el8           AppStream  103 k
 xorg-x11-fonts-ISO8859-1-100dpi noarch 7.5-19.el8             AppStream  1.1 M
 xorg-x11-server-utils           x86_64 7.7-27.el8             AppStream  198 k
 zip                             x86_64 3.0-23.el8             BaseOS     270 k
 zstd                            x86_64 1.4.2-2.el8            AppStream  385 k
モジュールストリームの有効化中:
 javapackages-runtime                   201801
 python36                               3.6
グループのインストール中:
 Development Tools

トランザクションの概要
================================================================================
インストール  521 パッケージ

ダウンロードサイズの合計: 277 M
インストール済みのサイズ: 1.0 G
パッケージのダウンロード:
(1/521): adobe-mappings-cmap-deprecated-2017120 1.2 MB/s | 119 kB     00:00
<略>
  zstd-1.4.2-2.el8.x86_64

完了しました!
+ yum clean all
57 ファイルが削除されました
[root@centos8 ~]#

(3.5) 追加パッケージ

ドキュメントに書いていないのだが、Kerberosの動作確認で使用するコマンドklist, kinitは「krb5-workstation」というパッケージに入っているのでインストールする。

[root@centos8 ~]# yum install krb5-workstation
メタデータの期限切れの最終確認: 0:02:13 時間前の 2020年11月02日 15時41分35秒 に実施し ました。
依存関係が解決しました。
======================================================================================
 パッケージ                Arch            バージョン           リポジトリー    サイズ
======================================================================================
インストール中:
 krb5-workstation          x86_64          1.17-18.el8          BaseOS          940 k

トランザクションの概要
======================================================================================
インストール  1 パッケージ

ダウンロードサイズの合計: 940 k
インストール済みのサイズ: 3.3 M
これでよろしいですか? [y/N]: y
パッケージのダウンロード:
krb5-workstation-1.17-18.el8.x86_64.rpm               3.9 MB/s | 940 kB     00:00
--------------------------------------------------------------------------------------
合計                                                  1.1 MB/s | 940 kB     00:00
トランザクションの確認を実行中
トランザクションの確認に成功しました。
トランザクションのテストを実行中
トランザクションのテストに成功しました。
トランザクションを実行中
  準備              :                                                             1/1
  インストール中    : krb5-workstation-1.17-18.el8.x86_64                         1/1
  scriptlet の実行中: krb5-workstation-1.17-18.el8.x86_64                         1/1
  検証              : krb5-workstation-1.17-18.el8.x86_64                         1/1

インストール済み:
  krb5-workstation-1.17-18.el8.x86_64

完了しました!
[root@centos8 ~]#

(4) sambaのtar.gzをダウンロード

samba.orgからsambaをダウンロードします。

[root@centos8 ~]# curl -O https://download.samba.org/pub/samba/stable/samba-4.13.3.tar.gz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 17.5M  100 17.5M    0     0   565k      0  0:00:31  0:00:31 --:--:-- 1384k
[root@centos8 ~]#

(5) 展開とconfigure実施

sambaのtar.gz展開とconfigureを実行します。

[root@centos8 ~]# tar xfz samba-4.13.3.tar.gz
[root@centos8 ~]# cd samba-4.13.3
[root@centos8 samba-4.13.3]# ./configure
Setting top to                           : /root/samba-4.13.3
Setting out to                           : /root/samba-4.13.3/bin
Checking for 'gcc' (C compiler)          : /usr/bin/gcc
Checking for program 'git'               : /usr/bin/git
Checking for c flags '-MMD'              : yes
Checking for program 'gdb'               : /usr/bin/gdb
Checking for header sys/utsname.h        : yes
Checking uname sysname type              : Linux
Checking uname machine type              : x86_64
Checking uname release type              : 4.18.0-240.el8.x86_64
Checking uname version type              : #1 SMP Fri Sep 25 19:48:47 UTC 2020
Checking for header stdio.h              : yes
Checking simple C program                : ok
Checking compiler accepts ['-Werror']    : yes
Checking linker accepts ['-Wl,-rpath,.'] : yes
Checking for rpath library support       : yes
<略>
Checking if compiler accepts -fstack-protector-strong                                           : no
Checking if compiler accepts -fstack-protector                                                  : no
Checking if compiler accepts -fstack-clash-protection                                           : yes
'configure' finished successfully (2m51.769s)
[root@centos8 samba-4.13.3]#

(6) make & make install

単純にmake ,make installを実行します。

[root@centos8 samba-4.13.3]# make
PYTHONHASHSEED=1 WAF_MAKE=1  ./buildtools/bin/waf build
Waf: Entering directory `/root/samba-4.13.3/bin/default'
symlink: tevent.py -> python/tevent.py
symlink: _tdb_text.py -> python/_tdb_text.py
symlink: _ldb_text.py -> python/_ldb_text.py
symlink: samba/__init__.py -> python/samba/__init__.py
symlink: samba/auth_util.py -> python/samba/auth_util.py
symlink: samba/colour.py -> python/samba/colour.py
symlink: samba/common.py -> python/samba/common.py
symlink: samba/compat.py -> python/samba/compat.py
symlink: samba/dbchecker.py -> python/samba/dbchecker.py
symlink: samba/descriptor.py -> python/samba/descriptor.py
symlink: samba/dnsresolver.py -> python/samba/dnsresolver.py
<略>
Note: Writing samba-gpupdate.8

Waf: Leaving directory `/root/samba-4.13.3/bin/default'
Build commands will be stored in bin/default/compile_commands.json
'build' finished successfully (33m0.654s)
[root@centos8 samba-4.13.3]#
[root@centos8 samba-4.13.3]# make install
PYTHONHASHSEED=1 WAF_MAKE=1  ./buildtools/bin/waf install
Waf: Entering directory `/root/samba-4.13.3/bin/default'
* create /usr/local/samba/etc
* create /usr/local/samba/var
* create /usr/local/samba/var/lib
* create /usr/local/samba/private
* create /usr/local/samba/bind-dns
* create /usr/local/samba/var/locks
* create /usr/local/samba/var/cache
* create /usr/local/samba/var/lock
* create /usr/local/samba/var/run
        Selected embedded Heimdal build
Checking project rules ...
<略>
+ install /usr/local/samba/share/man/man8/samba-gpupdate.8 (from bin/default/source4/scripting/man/samba-gpupdate.8)
Waf: Leaving directory `/root/samba-4.13.3/bin/default'
Build commands will be stored in bin/default/compile_commands.json
'install' finished successfully (14m32.055s)
[root@centos8 samba-4.13.3]#

(7) インストール完了確認

インストールされたsambaのバージョンを確認します。

[root@centos8 samba-4.13.3]# /usr/local/samba/sbin/samba -V
Version 4.13.3
[root@centos8 samba-4.13.3]#

(8) Active Directoryのセットアップ

ドメイン「teatad2.local」を作成します。

sama-tools domain provisionを実行する際のオプションは「–use-rfc2307」を付けて、NIS連携機能を使えるようにします。これによりActiveDirectory上にUID/GID/shellなどの情報も格納できるようになります。

[root@centos8 samba-4.13.3]# /usr/local/samba/bin/samba-tool domain provision --use-rfc2307 --interactive
Realm [TESTAD2.LOCAL]:  testad2.local
Domain [testad2]:
Server Role (dc, member, standalone) [dc]:
DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE) [SAMBA_INTERNAL]: 
DNS forwarder IP address (write 'none' to disable forwarding) [172.17.44.49]:
Administrator password:
Retype password:
INFO 2021-01-21 16:49:45,252 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2122: Looking up IPv4 addresses
INFO 2021-01-21 16:49:45,257 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2139: Looking up IPv6 addresses
WARNING 2021-01-21 16:49:45,259 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2146: No IPv6 address will be assigned
INFO 2021-01-21 16:49:46,177 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2290: Setting up share.ldb
INFO 2021-01-21 16:49:46,212 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2294: Setting up secrets.ldb
INFO 2021-01-21 16:49:46,246 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2299: Setting up the registry
INFO 2021-01-21 16:49:46,348 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2302: Setting up the privileges database
INFO 2021-01-21 16:49:46,399 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2305: Setting up idmap db
INFO 2021-01-21 16:49:46,435 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2312: Setting up SAM db
INFO 2021-01-21 16:49:46,448 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #897: Setting up sam.ldb partitions and settings
INFO 2021-01-21 16:49:46,449 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #909: Setting up sam.ldb rootDSE
INFO 2021-01-21 16:49:46,455 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1322: Pre-loading the Samba 4 and AD schema
Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs

INFO 2021-01-21 16:49:46,523 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1400: Adding DomainDN: DC=testad2,DC=local
INFO 2021-01-21 16:49:46,555 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1432: Adding configuration container
INFO 2021-01-21 16:49:46,585 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1447: Setting up sam.ldb schema
INFO 2021-01-21 16:49:51,918 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1465: Setting up sam.ldb configuration data
INFO 2021-01-21 16:49:52,194 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1506: Setting up display specifiers
INFO 2021-01-21 16:49:55,576 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1514: Modifying display specifiers and extended rights
INFO 2021-01-21 16:49:55,641 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1521: Adding users container
INFO 2021-01-21 16:49:55,644 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1527: Modifying users container
INFO 2021-01-21 16:49:55,645 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1530: Adding computers container
INFO 2021-01-21 16:49:55,647 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1536: Modifying computers container
INFO 2021-01-21 16:49:55,649 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1540: Setting up sam.ldb data
INFO 2021-01-21 16:49:55,905 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1570: Setting up well known security principals
INFO 2021-01-21 16:49:55,979 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1584: Setting up sam.ldb users and groups
INFO 2021-01-21 16:49:56,534 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #1592: Setting up self join
Repacking database from v1 to v2 format (first record CN=MSMQ-Migrated-User,CN=Schema,CN=Configuration,DC=testad2,DC=local)
Repack: re-packed 10000 records so far
Repacking database from v1 to v2 format (first record CN=serviceAdministrationPoint-Display,CN=408,CN=DisplaySpecifiers,CN=Configuration,DC=testad2,DC=local)
Repacking database from v1 to v2 format (first record CN=6bcd568d-8314-11d6-977b-00c04f613221,CN=Operations,CN=DomainUpdates,CN=System,DC=testad2,DC=local)
INFO 2021-01-21 16:50:00,299 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/sambadns.py #1143: Adding DNS accounts
INFO 2021-01-21 16:50:00,350 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/sambadns.py #1177: Creating CN=MicrosoftDNS,CN=System,DC=testad2,DC=local
INFO 2021-01-21 16:50:00,422 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/sambadns.py #1190: Creating DomainDnsZones and ForestDnsZones partitions
INFO 2021-01-21 16:50:00,563 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/sambadns.py #1195: Populating DomainDnsZones and ForestDnsZones partitions
Repacking database from v1 to v2 format (first record DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=testad2,DC=local)
Repacking database from v1 to v2 format (first record DC=_msdcs.testad2.local,CN=MicrosoftDNS,DC=ForestDnsZones,DC=testad2,DC=local)
INFO 2021-01-21 16:50:01,185 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2026: Setting up sam.ldb rootDSE marking as synchronized
INFO 2021-01-21 16:50:01,192 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2031: Fixing provision GUIDs
INFO 2021-01-21 16:50:04,392 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2365: A Kerberos configuration suitable for Samba AD has been generated at /usr/local/samba/private/krb5.conf
INFO 2021-01-21 16:50:04,393 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2366: Merge the contents of this file with your system krb5.conf or replace it with this one. Do not create a symlink!
INFO 2021-01-21 16:50:04,774 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #2096: Setting up fake yp server settings
INFO 2021-01-21 16:50:04,899 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #490: Once the above files are installed, your Samba AD server will be ready to use
INFO 2021-01-21 16:50:04,900 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #494: Server Role:           active directory domain controller
INFO 2021-01-21 16:50:04,900 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #495: Hostname:              centos8
INFO 2021-01-21 16:50:04,900 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #496: NetBIOS Domain:        TESTAD2
INFO 2021-01-21 16:50:04,900 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #497: DNS Domain:            testad2.local
INFO 2021-01-21 16:50:04,900 pid:88031 /usr/local/samba/lib64/python3.6/site-packages/samba/provision/__init__.py #498: DOMAIN SID:            S-1-5-21-1972786440-1566357171-3630376140
[root@centos8 samba-4.13.3]#

このコマンドにより/usr/local/samba/etc/smb.conf が作成されます。

[root@centos8 samba-4.13.3]# cat /usr/local/samba/etc/smb.conf
# Global parameters
[global]
        dns forwarder = 172.17.44.49
        netbios name = CENTOS8
        realm = TESTAD2.LOCAL
        server role = active directory domain controller
        workgroup = TESTAD2
        idmap_ldb:use rfc2307 = yes

[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/testad2.local/scripts
        read only = No
[root@centos8 samba-4.13.3]#

(9) resolv.confの書き換え

/etc/resolv.conf のnameserverをCentOS8のネットワークインタフェースIPに変更し、またsearchをActive Directory名に変更します。

[root@centos8 samba-4.13.3]# cat /etc/resolv.conf
# Generated by NetworkManager
search testad2.local
nameserver 172.17.44.47
[root@centos8 samba-4.13.3]#

(10) /etc/krb5.conf の書き換え

/usr/local/samba/private/krb5.conf に元となるものが自動生成されているので、それを使用して /etc/krb5.conf を置き換えます。

[root@centos8 samba-4.13.3]# ls -l /etc/krb5.conf /usr/local/samba/private/krb5.conf
-rw-r--r--. 1 root root 812  8月 12 04:52 /etc/krb5.conf
-rw-r--r--. 1 root root 197  1月 21 16:50 /usr/local/samba/private/krb5.conf
[root@centos8 samba-4.13.3]# cat /usr/local/samba/private/krb5.conf
[libdefaults]
        default_realm = TESTAD2.LOCAL
        dns_lookup_realm = false
        dns_lookup_kdc = true

[realms]
TESTAD2.LOCAL = {
        default_domain = testad2.local
}

[domain_realm]
        centos8 = TESTAD2.LOCAL
[root@centos8 samba-4.13.3]# cp /usr/local/samba/private/krb5.conf /etc/krb5.conf
cp: '/etc/krb5.conf' を上書きしますか? y
[root@centos8 samba-4.13.3]# cat /etc/krb5.conf
[libdefaults]
        default_realm = TESTAD2.LOCAL
        dns_lookup_realm = false
        dns_lookup_kdc = true

[realms]
TESTAD2.LOCAL = {
        default_domain = testad2.local
}

[domain_realm]
        centos8 = TESTAD2.LOCAL
[root@centos8 samba-4.13.3]#

(11) sambaの起動

sambaが起動していないことを確認した上で、sambaを起動します。

[root@centos8 samba-4.13.3]# ps -ef|grep samba
root       88045    1640  0 16:51 pts/0    00:00:00 grep --color=auto samba
[root@centos8 samba-4.13.3]# /usr/local/samba/sbin/samba
[root@centos8 samba-4.13.3]# ps -ef|grep samba
root       88047       1 31 16:51 ?        00:00:00 samba: root process        .
root       88048   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88049)
root       88049   88048  0 16:51 ?        00:00:00 samba: task[s3fs] pre-fork master
root       88050   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88051)
root       88051   88050  1 16:51 ?        00:00:00 samba: task[rpc] pre-fork master
root       88052   88049  0 16:51 ?        00:00:00 samba: tfork waiter process(88053)
root       88053   88052 29 16:51 ?        00:00:00 /usr/local/samba/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root       88054   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88055)
root       88055   88054  0 16:51 ?        00:00:00 samba: task[nbt] pre-fork master
root       88056   88051  0 16:51 ?        00:00:00 samba: tfork waiter process(88058)
root       88057   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88060)
root       88058   88056  1 16:51 ?        00:00:00 samba: task[rpc] pre-forked worker(0)
root       88059   88051  0 16:51 ?        00:00:00 samba: tfork waiter process(88061)
root       88060   88057  0 16:51 ?        00:00:00 samba: task[wrepl] pre-fork master
root       88061   88059  0 16:51 ?        00:00:00 samba: task[rpc] pre-forked worker(1)
root       88062   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88065)
root       88063   88051  0 16:51 ?        00:00:00 samba: tfork waiter process(88064)
root       88064   88063  0 16:51 ?        00:00:00 samba: task[rpc] pre-forked worker(2)
root       88065   88062 89 16:51 ?        00:00:01 samba: task[ldap] pre-fork master
root       88066   88051  0 16:51 ?        00:00:00 samba: tfork waiter process(88068)
root       88067   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88069)
root       88068   88066  0 16:51 ?        00:00:00 samba: task[rpc] pre-forked worker(3)
root       88069   88067  0 16:51 ?        00:00:00 samba: task[cldap] pre-fork master
root       88070   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88071)
root       88071   88070  1 16:51 ?        00:00:00 samba: task[kdc] pre-fork master
root       88072   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88073)
root       88073   88072  1 16:51 ?        00:00:00 samba: task[drepl] pre-fork master
root       88074   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88079)
root       88075   88071  0 16:51 ?        00:00:00 samba: tfork waiter process(88076)
root       88076   88075  0 16:51 ?        00:00:00 samba: task[kdc] pre-forked worker(0)
root       88077   88071  0 16:51 ?        00:00:00 samba: tfork waiter process(88078)
root       88078   88077  0 16:51 ?        00:00:00 samba: task[kdc] pre-forked worker(1)
root       88079   88074  0 16:51 ?        00:00:00 samba: task[winbindd] pre-fork master
root       88080   88071  0 16:51 ?        00:00:00 samba: tfork waiter process(88084)
root       88081   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88083)
root       88082   88079  0 16:51 ?        00:00:00 samba: tfork waiter process(88086)
root       88083   88081  0 16:51 ?        00:00:00 samba: task[ntp_signd] pre-fork master
root       88084   88080  0 16:51 ?        00:00:00 samba: task[kdc] pre-forked worker(2)
root       88085   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88088)
root       88086   88082 25 16:51 ?        00:00:00 /usr/local/samba/sbin/winbindd -D --option=server role check:inhibit=yes --foreground
root       88087   88071  0 16:51 ?        00:00:00 samba: tfork waiter process(88089)
root       88088   88085  0 16:51 ?        00:00:00 samba: task[kcc] pre-fork master
root       88089   88087  0 16:51 ?        00:00:00 samba: task[kdc] pre-forked worker(3)
root       88090   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88091)
root       88091   88090  0 16:51 ?        00:00:00 samba: task[dnsupdate] pre-fork master
root       88092   88047  0 16:51 ?        00:00:00 samba: tfork waiter process(88093)
root       88093   88092  1 16:51 ?        00:00:00 samba: task[dns] pre-fork master
root       88100   88053  0 16:51 ?        00:00:00 /usr/local/samba/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root       88101   88053  0 16:51 ?        00:00:00 /usr/local/samba/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root       88106   88053  0 16:51 ?        00:00:00 /usr/local/samba/sbin/smbd -D --option=server role check:inhibit=yes --foreground
root       88110   88065  0 16:51 ?        00:00:00 samba: tfork waiter process(88111)
root       88111   88110  0 16:51 ?        00:00:00 samba: task[ldap] pre-forked worker(0)
root       88112   88065  0 16:51 ?        00:00:00 samba: tfork waiter process(88113)
root       88113   88112  0 16:51 ?        00:00:00 samba: task[ldap] pre-forked worker(1)
root       88114   88065  0 16:51 ?        00:00:00 samba: tfork waiter process(88115)
root       88115   88114  0 16:51 ?        00:00:00 samba: task[ldap] pre-forked worker(2)
root       88116   88065  0 16:51 ?        00:00:00 samba: tfork waiter process(88117)
root       88117   88116  0 16:51 ?        00:00:00 samba: task[ldap] pre-forked worker(3)
root       88119    1640  0 16:51 pts/0    00:00:00 grep --color=auto samba
[root@centos8 samba-4.13.3]#

(12) sambaの動作確認

CentOS内部からSMB接続を行うテストを行います。

[root@centos8 samba-4.13.3]# /usr/local/samba/bin/smbclient --version
Version 4.13.3
[root@centos8 samba-4.13.3]# /usr/local/samba/bin/smbclient -L localhost -U%

        Sharename       Type      Comment
        ---------       ----      -------
        sysvol          Disk
        netlogon        Disk
        IPC$            IPC       IPC Service (Samba 4.13.3)
SMB1 disabled -- no workgroup available
[root@centos8 samba-4.13.3]#

次にnetlogon共有にAdministrator権限でアクセスできるか確認します。

[root@centos8 samba-4.13.3]# /usr/local/samba/bin/smbclient //localhost/netlogon -UAdministrator -c 'ls'
Enter TESTAD2\Administrator's password:
  .                                   D        0  Thu Jan 21 16:49:46 2021
  ..                                  D        0  Thu Jan 21 16:49:56 2021

                63747676 blocks of size 1024. 59865376 blocks available
[root@centos8 samba-4.13.3]#

(13) AD DNSの動作確認

AD DNSが想定通りに動作しているかをテストします。

まず「/usr/local/samba/bin/samba-tool dns zonelist 127.0.0.1 -U Administrator」を実行して、登録されているDNSゾーンを確認します。

[root@centos8 samba-4.13.3]# /usr/local/samba/bin/samba-tool dns zonelist 127.0.0.1 -U Administrator
Password for [TESTAD2\Administrator]:
  2 zone(s) found

  pszZoneName                 : testad2.local
  Flags                       : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE
  ZoneType                    : DNS_ZONE_TYPE_PRIMARY
  Version                     : 50
  dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED
  pszDpFqdn                   : DomainDnsZones.testad2.local

  pszZoneName                 : _msdcs.testad2.local
  Flags                       : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE
  ZoneType                    : DNS_ZONE_TYPE_PRIMARY
  Version                     : 50
  dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_FOREST_DEFAULT DNS_DP_ENLISTED
  pszDpFqdn                   : ForestDnsZones.testad2.local
[root@centos8 samba-4.13.3]#

Active Directoryで使用するDNSのSRVレコードが登録されているかをhostコマンドを使って確認します。

[root@centos8 samba-4.13.3]# host -t SRV _ldap._tcp.testad2.local 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

_ldap._tcp.testad2.local has SRV record 0 100 389 centos8.testad2.local.
[root@centos8 samba-4.13.3]# host -t SRV _kerberos._udp.testad2.local 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

_kerberos._udp.testad2.local has SRV record 0 100 88 centos8.testad2.local.
[root@centos8 samba-4.13.3]#

ADサーバのホスト名が登録されているか確認します。

[root@centos8 samba-4.13.3]# host -t A centos8.testad2.local 127.0.0.1
Using domain server:
Name: 127.0.0.1
Address: 127.0.0.1#53
Aliases:

centos8.testad2.local has address 172.17.44.47
[root@centos8 samba-4.13.3]#

こんな感じで応答があればOKです。「Host ~ not found: 3(NXDOMAIN)」なんて言われたらホスト名が登録されていません。

(14) Kerberosの動作確認

「kinit administrator」を実行して確認します。

(なお、kinit,klistがインストールされていない場合は「yum install krb5-workstation」でインストールします。

[root@centos8 samba-4.13.3]# kinit administrator
Password for administrator@TESTAD2.LOCAL:
Warning: Your password will expire in 41 days on 2021年03月04日 16時49分56秒
[root@centos8 samba-4.13.3]#

正常に設定されていると、Administratorユーザのパスワード有効期限が表示されます。

「klist」コマンドでも確認します。

[root@centos8 samba-4.13.3]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@TESTAD2.LOCAL

Valid starting       Expires              Service principal
2021-01-21T16:58:49  2021-01-22T02:58:49  krbtgt/TESTAD2.LOCAL@TESTAD2.LOCAL
        renew until 2021-01-22T16:58:46
[root@centos8 samba-4.13.3]#

なお、DNSサーバ指定が誤っていてAD DNS以外を指定してしまっている場合やsambaが起動していない場合は下記の様になります。

[root@centos8 samba-4.13.3]# kinit administrator
kinit: Cannot find KDC for realm "TESTAD2.LOCAL" while getting initial credentials
[root@centos8 samba-4.13.3]#

(15) フォレストとドメインの機能レベル確認

作成したActive Directoryのドメインの機能レベルとフォレストの機能レベルを確認します。

[root@centos8 samba-4.13.3]# /usr/local/samba/bin/samba-tool domain level show
Domain and forest function level for domain 'DC=testad2,DC=local'

Forest function level: (Windows) 2008 R2
Domain function level: (Windows) 2008 R2
Lowest function level of a DC: (Windows) 2008 R2
[root@centos8 samba-4.13.3]#

samba 4.13.3でもWindows Server 2008 R2が標準設定となっています。

(16) firewalldの設定

CentOS8ではfirewalldによりポートへのアクセスが制限されています。

まずは「firewall-cmd –list-all」コマンドで確認します。

[root@centos8 ~]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens192
  sources:
  services: cockpit dhcpv6-client ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
[root@centos8 ~]#

開けるべきポートのテンプレートがいくつか用意されているので「firewall-cmd –get-services」を実行して確認します。

[root@centos8 ~]# firewall-cmd --get-services
RH-Satellite-6 amanda-client amanda-k5-client amqp amqps apcupsd audit bacula bacula-client bb bgp bitcoin bitcoin-rpc bitcoin-testnet bitcoin-testnet-rpc bittorrent-lsd ceph ceph-mon cfengine cockpit condor-collector ctdb dhcp dhcpv6 dhcpv6-client distcc dns dns-over-tls docker-registry docker-swarm dropbox-lansync elasticsearch etcd-client etcd-server finger freeipa-4 freeipa-ldap freeipa-ldaps freeipa-replication freeipa-trust ftp ganglia-client ganglia-master git grafana gre high-availability http https imap imaps ipp ipp-client ipsec irc ircs iscsi-target isns jenkins kadmin kdeconnect kerberos kibana klogin kpasswd kprop kshell kube-apiserver ldap ldaps libvirt libvirt-tls lightning-network llmnr managesieve matrix mdns memcache minidlna mongodb mosh mountd mqtt mqtt-tls ms-wbt mssql murmur mysql nfs nfs3 nmea-0183 nrpe ntp nut openvpn ovirt-imageio ovirt-storageconsole ovirt-vmconsole plex pmcd pmproxy pmwebapi pmwebapis pop3 pop3s postgresql privoxy prometheus proxy-dhcp ptp pulseaudio puppetmaster quassel radius rdp redis redis-sentinel rpc-bind rsh rsyncd rtsp salt-master samba samba-client samba-dc sane sip sips slp smtp smtp-submission smtps snmp snmptrap spideroak-lansync spotify-sync squid ssdp ssh steam-streaming svdrp svn syncthing syncthing-gui synergy syslog syslog-tls telnet tentacle tftp tftp-client tile38 tinc tor-socks transmission-client upnp-client vdsm vnc-server wbem-http wbem-https wsman wsmans xdmcp xmpp-bosh xmpp-client xmpp-local xmpp-server zabbix-agent zabbix-server
[root@centos8 ~]#

「samba」「samba-client」「samba-dc」という3種類の定義がある。

それぞれどういう設定されているかは/usr/lib/firewalld/services ディレクトリにあるxmlファイルを確認する。

[root@centos8 ~]# ls /usr/lib/firewalld/services/sam*
/usr/lib/firewalld/services/samba-client.xml
/usr/lib/firewalld/services/samba-dc.xml
/usr/lib/firewalld/services/samba.xml
[root@centos8 ~]# cat /usr/lib/firewalld/services/samba.xml
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>Samba</short>
  <description>This option allows you to access and participate in Windows file and printer sharing networks. You need the samba package installed for this option to be useful.</description>
  <port protocol="udp" port="137"/>
  <port protocol="udp" port="138"/>
  <port protocol="tcp" port="139"/>
  <port protocol="tcp" port="445"/>
  <helper name="netbios-ns"/>
</service>
[root@centos8 ~]# cat /usr/lib/firewalld/services/samba-dc.xml
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>Samba DC</short>
  <description>This option allows you to use this computer as a Samba Active Directory Domain Controller. You need the samba-dc package installed for this option to be useful.</description>
  <port protocol="tcp" port="53"/><!-- DNS -->
  <port protocol="udp" port="53"/><!-- DNS -->
  <port protocol="tcp" port="88"/><!-- Kerberos -->
  <port protocol="udp" port="88"/><!-- Kerberos -->
  <port protocol="tcp" port="135"/><!-- End Point Mapper (DCE/RPC Locator Service -->
  <port protocol="udp" port="137"/><!-- NetBIOS Name Service -->
  <port protocol="udp" port="138"/><!-- NetBIOS Datagram -->
  <port protocol="tcp" port="139"/><!-- NetBIOS Session -->
  <port protocol="tcp" port="389"/><!-- LDAP -->
  <port protocol="udp" port="389"/><!-- CLDAP -->
  <port protocol="tcp" port="445"/><!-- SMB over TCP -->
  <port protocol="tcp" port="464"/><!-- Kerberos kpasswd -->
  <port protocol="udp" port="464"/><!-- Kerberos kpasswd -->
  <port protocol="tcp" port="636"/><!-- LDAPS -->
  <port protocol="tcp" port="49152-65535"/><!-- Dynamic RPC Ports -->
  <port protocol="tcp" port="3268"/><!-- Global Catalog -->
  <port protocol="tcp" port="3269"/><!-- Global Catalog SSL -->
  <helper name="netbios-ns"/>
</service>
[root@centos8 ~]# cat /usr/lib/firewalld/services/samba-client.xml
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>Samba Client</short>
  <description>This option allows you to access Windows file and printer sharing networks. You need the samba-client package installed for this option to be useful.</description>
  <port protocol="udp" port="137"/>
  <port protocol="udp" port="138"/>
  <helper name="netbios-ns"/>
</service>
[root@centos8 ~]#

次にsambaで使用するポート一覧を「Samba AD DC Port Usage」で確認します。

サービスポートプロトコルfirewalld定義
DNS53tcp/udpsamba-dc
Kerberos88tcp/udpsamba-dc
ntp(注1)123udpntp
End Point Mapper (DCE/RPC Locator Service)135tcpsamba-dc
NetBIOS Name Service137udpsamba-dc,samba,samba-client
NetBIOS Datagram138udpsamba-dc,samba,samba-client
NetBIOS Session139tcpsamba-dc,samba
LDAP389tcp/udpsamba-dc
SMB over TCP445tcpsamba-dc,samba
Kerberos kpasswd464tcp/udpsamba-dc
LDAPS 注2636tcpsamba-dc
Global Catalog3268tcpsamba-dc
Global Catalog SSL 注23269tcpsamba-dc
Dynamic RPC Ports 注349152-65535tcpsamba-dc

注1: ntpはADのDCサーバとして動作させる場合に設定するべきもの
注2: smb.conf内で「tls enabled=yes」設定を行った場合に必要なポート
注3: samba 4.7以降で必要なポート範囲。samba 4.7より前はTCP 1024~1300だった。smb.confの「rpc server port」でポートの範囲を変更することも可能

CentOS8では「samba-dc」と「ntp」を使用すれば良いようだ。

[root@centos8 ~]# firewall-cmd --permanent --zone=public --add-service=samba-dc
success
[root@centos8 ~]# firewall-cmd --permanent --zone=public --add-service=ntp
success
[root@centos8 ~]# firewall-cmd --reload
success
[root@centos8 ~]# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens192
  sources:
  services: cockpit dhcpv6-client ntp samba-dc ssh
  ports:
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:
[root@centos8 ~]#

なお、CentOS7の場合は下記だった。

# firewall-cmd --permanent --zone=public --add-service=samba
# firewall-cmd --permanent --zone=public --add-service=dns
# firewall-cmd --permanent --zone=public --add-service=freeipa-ldaps
# firewall-cmd --permanent --zone=public --add-service=freeipa-trust
# firewall-cmd --permanent --zone=public --add-port=49152-65535/tcp
# firewall-cmd --permanent --zone=public --add-port=3269/tcp
# firewall-cmd --reload

(17) systemdへの登録

自動起動をするためにsystemdへ登録します。

CentOS7以降のsystemd環境については「Managing the Samba AD DC Service Using Systemd」、CentOS6などのinit script環境は「Managing the Samba AD DC Service Using an Init Script」を参照して実行します。

CentOS8の場合はまず既存でSamba関連の登録がないことを確認します。

登録されている可能性がある名前は「smbd」「nmbd」「winbind」「samba」なので下記の様に確認します

[root@centos8 ~]# systemctl list-unit-files|grep -e smb -e nmb -e winb -e samba
[root@centos8 ~]#

何も表示されなければ問題ありません。

既に登録がある場合は、それを使用しないように「systemctl mask 名前」「systemctl disable 名前」とコマンドを2つ実行して無効化します。

次にsystemdへ登録するサービス起動用のファイル /etc/systemd/system/samba-ad-dc.service を作成します。

[root@centos8 ~]# vi /etc/systemd/system/samba-ad-dc.service
[root@centos8 ~]# cat /etc/systemd/system/samba-ad-dc.service
[Unit]
Description=Samba Active Directory Domain Controller
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=forking
ExecStart=/usr/local/samba/sbin/samba -D
PIDFile=/usr/local/samba/var/run/samba.pid
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target
[root@centos8 ~]#

上記ファイル作成後「systemctl daemon-reload」を実行するとsystemd上で認識されます。

[root@centos8 ~]# systemctl daemon-reload
[root@centos8 ~]# systemctl list-unit-files|grep -e smb -e nmb -e winb -e samba
samba-ad-dc.service                        disabled
[root@centos8 ~]#

初期状態は「disabled」なので、有効化します。

[root@centos8 ~]# systemctl enable samba-ad-dc
Created symlink /etc/systemd/system/multi-user.target.wants/samba-ad-dc.service → /etc/systemd/system/samba-ad-dc.service.
[root@centos8 ~]# systemctl list-unit-files|grep -e smb -e nmb -e winb -e samba
samba-ad-dc.service                        enabled
[root@centos8 ~]#

いま手動で起動しているsambaをsystemd管轄下に変えるため、sambaを強制停止します。

[root@centos8 ~]# pkill samba
[root@centos8 ~]# ps -ef|grep samba
root       88681    1640  0 17:02 pts/0    00:00:00 grep --color=auto samba
[root@centos8 ~]#

(18) SELinux対応

systemdで起動しようとすると失敗します。

[root@centos8 ~]# systemctl start samba-ad-dc
Job for samba-ad-dc.service failed because the control process exited with error code.
See "systemctl status samba-ad-dc.service" and "journalctl -xe" for details.
[root@centos8 ~]# journalctl -xe
 1月 21 17:02:40 centos8.testad2.local systemd[88684]: samba-ad-dc.service: Fai>
-- Subject: Process /usr/local/samba/sbin/samba could not be executed
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
--
-- The process /usr/local/samba/sbin/samba could not be executed and failed.
--
-- The error number returned by this process is 13.
 1月 21 17:02:40 centos8.testad2.local systemd[1]: samba-ad-dc.service: Control>
 1月 21 17:02:40 centos8.testad2.local systemd[1]: samba-ad-dc.service: Failed >
-- Subject: Unit failed
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
--
-- The unit samba-ad-dc.service has entered the 'failed' state with result 'exi>
 1月 21 17:02:40 centos8.testad2.local systemd[1]: Failed to start Samba Active>
-- Subject: Unit samba-ad-dc.service has failed
-- Defined-By: systemd
-- Support: https://access.redhat.com/support
--
-- Unit samba-ad-dc.service has failed.
--
-- The result is failed.
[root@centos8 ~]#

/var/log/messages を確認すると、下記の様な出力です。

Nov  2 16:48:07 centos8 systemd[1]: Starting Samba Active Directory Domain Controller...
Nov  2 16:48:07 centos8 systemd[48877]: samba-ad-dc.service: Failed to execute command: Permission denied
Nov  2 16:48:07 centos8 systemd[48877]: samba-ad-dc.service: Failed at step EXEC spawning /usr/local/samba/sbin/samba: Permission denied
Nov  2 16:48:07 centos8 systemd[1]: samba-ad-dc.service: Control process exited, code=exited status=203
Nov  2 16:48:07 centos8 systemd[1]: samba-ad-dc.service: Failed with result 'exit-code'.
Nov  2 16:48:07 centos8 systemd[1]: Failed to start Samba Active Directory Domain Controller.

これはSELinuxによりsystemdから/usr/local/samba/sbin/samba へのアクセスが制限されているために発生しています。

samba公式だと「Troubleshooting SELinux on a Samba AD DC」というページがありますが、かなり雑な対応策になっています。

ちゃんと対応すると面倒くさいので、ひとまず「SELINUX=permissive」で逃げます。

(18-0) SELinuxをちゃんと使わない設定

いろいろ面倒なので、とりあえず、SELinuxを警告だけする形で設定します。

/etc/selinux/config内の「SELINUX=enforcing」を「SELINUX=permissive」に変更して、OS再起動します。

これで、sambaがひとまず起動する様になっているはずです

で・・・本来はここからSELinux用にちゃんと設定していく必要があるのですが、まだまとめ切れていません。

なので、ここから先は参考情報のみとなります。

(18-1) SELinux対応のための調査

現状、/usr/local/sambaに設定されているコンテキスト情報を確認

[root@centos8 ~]# ls -lZd /usr/local/samba/
drwxr-xr-x. 13 root root unconfined_u:object_r:usr_t:s0 149 11月  2 14:10 /usr/local/samba/
[root@centos8 ~]#

/var/log/audit/audit.log に出力されているsamba関連のSELinuxの動作ログを確認します。

[root@centos8 ~]# grep samba /var/log/audit/audit.log
type=AVC msg=audit(1604303085.462:635): avc:  denied  { execute } for  pid=48851 comm="(samba)" name="samba" dev="dm-0" ino=2049192 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file permissive=0
type=SERVICE_START msg=audit(1604303085.468:636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=samba-ad-dc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=AVC msg=audit(1604303085.468:637): avc:  denied  { unlink } for  pid=1 comm="systemd" name="samba.pid" dev="dm-0" ino=52125406 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1604303092.550:638): avc:  denied  { execute } for  pid=48859 comm="(samba)" name="samba" dev="dm-0" ino=2049192 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file permissive=0
type=SERVICE_START msg=audit(1604303092.555:639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=samba-ad-dc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=AVC msg=audit(1604303092.555:640): avc:  denied  { unlink } for  pid=1 comm="systemd" name="samba.pid" dev="dm-0" ino=52125406 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
type=AVC msg=audit(1604303287.537:641): avc:  denied  { execute } for  pid=48877 comm="(samba)" name="samba" dev="dm-0" ino=2049192 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file permissive=0
type=SERVICE_START msg=audit(1604303287.541:642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=samba-ad-dc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=AVC msg=audit(1604303287.541:643): avc:  denied  { unlink } for  pid=1 comm="systemd" name="samba.pid" dev="dm-0" ino=52125406 scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
[root@centos8 ~]#

次に /etc/selinux/targeted/contexts/ にある既存定義でsambaに関するものを調べて見る。

[root@centos8 ~]# grep -e smb -e nmbd -e samba -e winbind /etc/selinux/targeted/contexts/files/file_contexts
/var/nmbd(/.*)? system_u:object_r:samba_var_t:s0
/etc/samba(/.*)?        system_u:object_r:samba_etc_t:s0
/opt/vmware/(workstation|player)/bin/vmware-nmbd        --      system_u:object_r:vmware_host_exec_t:s0
/opt/vmware/(workstation|player)/bin/vmware-smbd        --      system_u:object_r:vmware_host_exec_t:s0
/opt/vmware/(workstation|player)/bin/vmware-smbpasswd   --      system_u:object_r:vmware_host_exec_t:s0
/opt/vmware/(workstation|player)/bin/vmware-smbpasswd\.bin      --      system_u:object_r:vmware_host_exec_t:s0
/var/run/nmbd(/.*)?     system_u:object_r:nmbd_var_run_t:s0
/var/lib/samba(/.*)?    system_u:object_r:samba_var_t:s0
/var/log/samba(/.*)?    system_u:object_r:samba_log_t:s0
/var/run/samba(/.*)?    system_u:object_r:smbd_var_run_t:s0
/var/cache/samba(/.*)?  system_u:object_r:samba_var_t:s0
/var/spool/samba(/.*)?  system_u:object_r:samba_spool_t:s0
/var/run/winbindd(/.*)? system_u:object_r:winbind_var_run_t:s0
/var/run/samba/nmbd(/.*)?       system_u:object_r:nmbd_var_run_t:s0
/var/lib/samba/scripts(/.*)?    system_u:object_r:samba_unconfined_script_exec_t:s0
/var/run/samba/winbindd(/.*)?   system_u:object_r:winbind_var_run_t:s0
/usr/lib/systemd/system/nmb.*   --      system_u:object_r:samba_unit_file_t:s0
/usr/lib/systemd/system/smb.*   --      system_u:object_r:samba_unit_file_t:s0
/usr/lib/systemd/system/winbind.*       --      system_u:object_r:samba_unit_file_t:s0
/var/lib/samba/winbindd_privileged(/.*)?        system_u:object_r:winbind_var_run_t:s0
/var/cache/samba/winbindd_privileged(/.*)?      system_u:object_r:winbind_var_run_t:s0
/usr/bin/net    --      system_u:object_r:samba_net_exec_t:s0
/usr/sbin/nmbd  --      system_u:object_r:nmbd_exec_t:s0
/usr/sbin/smbd  --      system_u:object_r:smbd_exec_t:s0
/usr/bin/smbmnt --      system_u:object_r:smbmount_exec_t:s0
/usr/bin/smbmount       --      system_u:object_r:smbmount_exec_t:s0
/usr/bin/ntlm_auth      --      system_u:object_r:winbind_helper_exec_t:s0
/usr/sbin/winbindd      --      system_u:object_r:winbind_exec_t:s0
/usr/bin/smbcontrol     --      system_u:object_r:smbcontrol_exec_t:s0
/etc/rc\.d/init\.d/nmb  --      system_u:object_r:samba_initrc_exec_t:s0
/etc/rc\.d/init\.d/smb  --      system_u:object_r:samba_initrc_exec_t:s0
/etc/samba/smbpasswd    --      system_u:object_r:samba_secrets_t:s0
/usr/bin/vmware-nmbd    --      system_u:object_r:vmware_host_exec_t:s0
/usr/bin/vmware-smbd    --      system_u:object_r:vmware_host_exec_t:s0
/etc/samba/passdb\.tdb  --      system_u:object_r:samba_secrets_t:s0
/etc/samba/MACHINE\.SID --      system_u:object_r:samba_secrets_t:s0
/etc/samba/secrets\.tdb --      system_u:object_r:samba_secrets_t:s0
/var/run/samba/nmbd\.pid        --      system_u:object_r:nmbd_var_run_t:s0
/var/run/samba/smbd\.pid        --      system_u:object_r:smbd_var_run_t:s0
/etc/rc\.d/init\.d/winbind      --      system_u:object_r:samba_initrc_exec_t:s0
/usr/bin/vmware-smbpasswd       --      system_u:object_r:vmware_host_exec_t:s0
/var/run/samba/brlock\.tdb      --      system_u:object_r:smbd_var_run_t:s0
/var/run/samba/locking\.tdb     --      system_u:object_r:smbd_var_run_t:s0
/var/run/samba/gencache\.tdb    --      system_u:object_r:smbd_var_run_t:s0
/var/run/samba/messages\.tdb    --      system_u:object_r:nmbd_var_run_t:s0
/var/run/samba/sessionid\.tdb   --      system_u:object_r:smbd_var_run_t:s0
/usr/bin/vmware-smbpasswd\.bin  --      system_u:object_r:vmware_host_exec_t:s0
/var/run/samba/namelist\.debug  --      system_u:object_r:nmbd_var_run_t:s0
/var/run/samba/share_info\.tdb  --      system_u:object_r:smbd_var_run_t:s0
/var/run/samba/unexpected\.tdb  --      system_u:object_r:nmbd_var_run_t:s0
/usr/share/munin/plugins/samba  --      system_u:object_r:services_munin_plugin_exec_t:s0
/var/run/samba/connections\.tdb --      system_u:object_r:smbd_var_run_t:s0
/usr/lib/nagios/plugins/check_disk_smb  --      system_u:object_r:nagios_checkdisk_plugin_exec_t:s0
/usr/share/system-config-samba/system-config-samba\.py  --      system_u:object_r:bin_t:s0
/usr/share/system-config-samba/system-config-samba-mechanism\.py        --      system_u:object_r:sambagui_exec_t:s0
[root@centos8 ~]#

なお、今回は扱わないが、ファイルサーバとして使う場合は、SELinuxの下記パラメータも関係してくる

[root@centos8 ~]# getsebool -a|grep samba
samba_create_home_dirs --> off
samba_domain_controller --> off
samba_enable_home_dirs --> off
samba_export_all_ro --> off
samba_export_all_rw --> off
samba_load_libgfapi --> off
samba_portmapper --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off
sanlock_use_samba --> off
tmpreaper_use_samba --> off
use_samba_home_dirs --> off
virt_use_samba --> off
[root@centos8 ~]#