~ahasenack/serverguide/use-sasl-external-for-config-changes-973981 : revision 308

7

msgstr ""

8

"Project-Id-Version: serverguide\n"

9

"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"

10

"POT-Creation-Date: 2016-05-13 09:11-0700\n"

10

"POT-Creation-Date: 2016-12-06 21:37-0800\n"

11

"PO-Revision-Date: 2014-11-09 18:10+0000\n"

12

"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

13

"Language-Team: Korean <ko@li.org>\n"

14

"MIME-Version: 1.0\n"

15

"Content-Type: text/plain; charset=UTF-8\n"

16

"Content-Transfer-Encoding: 8bit\n"

17

"X-Launchpad-Export-Date: 2016-05-13 21:07+0000\n"

18

"X-Generator: Launchpad (build 18025)\n"

17

"X-Launchpad-Export-Date: 2016-12-21 23:27+0000\n"

18

"X-Generator: Launchpad (build 18298)\n"

19

20

#: serverguide/C/web-servers.xml:11(title)

21

msgid "Web Servers"

97

"인기있는 스크립트 언어들과 함께 종종 사용되어 집니다. 이런 설정을 LAMP (Linux, Apache, MySQL 과 "

98

"Perl/Python/PHP)라 명명하고, 이것은 웹 기반의 프로그램을 개발하고 이행하기 위한 강력하고 튼튼한 플랫폼을 구성 합니다."

99

100

#: serverguide/C/web-servers.xml:51(title) serverguide/C/web-servers.xml:710(title) serverguide/C/web-servers.xml:857(title) serverguide/C/web-servers.xml:980(title) serverguide/C/virtualization.xml:70(title) serverguide/C/virtualization.xml:838(title) serverguide/C/virtualization.xml:1697(title) serverguide/C/vcs.xml:33(title) serverguide/C/vcs.xml:94(title) serverguide/C/vcs.xml:226(title) serverguide/C/samba.xml:81(title) serverguide/C/samba.xml:291(title) serverguide/C/remote-administration.xml:46(title) serverguide/C/remote-administration.xml:269(title) serverguide/C/remote-administration.xml:471(title) serverguide/C/network-config.xml:973(title) serverguide/C/network-config.xml:1141(title) serverguide/C/network-auth.xml:142(title) serverguide/C/network-auth.xml:2798(title) serverguide/C/network-auth.xml:3270(title) serverguide/C/monitoring.xml:40(title) serverguide/C/monitoring.xml:429(title) serverguide/C/mail.xml:38(title) serverguide/C/mail.xml:548(title) serverguide/C/mail.xml:737(title) serverguide/C/mail.xml:887(title) serverguide/C/mail.xml:1377(title) serverguide/C/lamp-applications.xml:110(title) serverguide/C/lamp-applications.xml:288(title) serverguide/C/lamp-applications.xml:435(title) serverguide/C/lamp-applications.xml:549(title) serverguide/C/installation.xml:11(title) serverguide/C/installation.xml:946(title) serverguide/C/installation.xml:1401(title) serverguide/C/file-server.xml:357(title) serverguide/C/file-server.xml:645(title) serverguide/C/dns.xml:21(title) serverguide/C/databases.xml:37(title) serverguide/C/databases.xml:300(title) serverguide/C/chat.xml:35(title) serverguide/C/chat.xml:135(title) serverguide/C/backups.xml:602(title)

100

#: serverguide/C/web-servers.xml:51(title) serverguide/C/web-servers.xml:710(title) serverguide/C/web-servers.xml:857(title) serverguide/C/web-servers.xml:991(title) serverguide/C/virtualization.xml:70(title) serverguide/C/virtualization.xml:906(title) serverguide/C/virtualization.xml:1765(title) serverguide/C/vcs.xml:33(title) serverguide/C/vcs.xml:94(title) serverguide/C/vcs.xml:226(title) serverguide/C/samba.xml:81(title) serverguide/C/samba.xml:291(title) serverguide/C/remote-administration.xml:46(title) serverguide/C/remote-administration.xml:269(title) serverguide/C/remote-administration.xml:471(title) serverguide/C/network-config.xml:973(title) serverguide/C/network-config.xml:1141(title) serverguide/C/network-auth.xml:142(title) serverguide/C/network-auth.xml:2791(title) serverguide/C/network-auth.xml:3263(title) serverguide/C/monitoring.xml:40(title) serverguide/C/monitoring.xml:429(title) serverguide/C/mail.xml:38(title) serverguide/C/mail.xml:548(title) serverguide/C/mail.xml:737(title) serverguide/C/mail.xml:887(title) serverguide/C/mail.xml:1377(title) serverguide/C/lamp-applications.xml:110(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:401(title) serverguide/C/installation.xml:11(title) serverguide/C/installation.xml:946(title) serverguide/C/installation.xml:1401(title) serverguide/C/file-server.xml:357(title) serverguide/C/file-server.xml:645(title) serverguide/C/dns.xml:21(title) serverguide/C/databases.xml:37(title) serverguide/C/databases.xml:300(title) serverguide/C/chat.xml:35(title) serverguide/C/chat.xml:135(title) serverguide/C/backups.xml:602(title)

101

msgid "Installation"

102

msgstr "설치"

103

115

msgid "sudo apt install apache2"

116

msgstr ""

117

118

#: serverguide/C/web-servers.xml:71(title) serverguide/C/web-servers.xml:763(title) serverguide/C/web-servers.xml:868(title) serverguide/C/web-servers.xml:1007(title) serverguide/C/web-servers.xml:1110(title) serverguide/C/virtualization.xml:869(title) serverguide/C/vcs.xml:44(title) serverguide/C/vcs.xml:103(title) serverguide/C/samba.xml:97(title) serverguide/C/samba.xml:308(title) serverguide/C/remote-administration.xml:68(title) serverguide/C/remote-administration.xml:289(title) serverguide/C/package-management.xml:417(title) serverguide/C/network-config.xml:995(title) serverguide/C/network-config.xml:1152(title) serverguide/C/network-auth.xml:2885(title) serverguide/C/network-auth.xml:3291(title) serverguide/C/monitoring.xml:185(title) serverguide/C/monitoring.xml:455(title) serverguide/C/mail.xml:557(title) serverguide/C/mail.xml:747(title) serverguide/C/mail.xml:970(title) serverguide/C/mail.xml:1406(title) serverguide/C/lamp-applications.xml:130(title) serverguide/C/lamp-applications.xml:315(title) serverguide/C/lamp-applications.xml:465(title) serverguide/C/lamp-applications.xml:570(title) serverguide/C/installation.xml:1446(title) serverguide/C/file-server.xml:370(title) serverguide/C/file-server.xml:671(title) serverguide/C/dns.xml:37(title) serverguide/C/databases.xml:73(title) serverguide/C/databases.xml:316(title) serverguide/C/clustering.xml:45(title) serverguide/C/chat.xml:55(title) serverguide/C/chat.xml:147(title) serverguide/C/backups.xml:631(title)

118

#: serverguide/C/web-servers.xml:71(title) serverguide/C/web-servers.xml:763(title) serverguide/C/web-servers.xml:868(title) serverguide/C/web-servers.xml:1018(title) serverguide/C/web-servers.xml:1121(title) serverguide/C/virtualization.xml:937(title) serverguide/C/vcs.xml:44(title) serverguide/C/vcs.xml:103(title) serverguide/C/samba.xml:97(title) serverguide/C/samba.xml:308(title) serverguide/C/remote-administration.xml:68(title) serverguide/C/remote-administration.xml:289(title) serverguide/C/package-management.xml:417(title) serverguide/C/network-config.xml:995(title) serverguide/C/network-config.xml:1152(title) serverguide/C/network-auth.xml:2878(title) serverguide/C/network-auth.xml:3284(title) serverguide/C/monitoring.xml:185(title) serverguide/C/monitoring.xml:455(title) serverguide/C/mail.xml:557(title) serverguide/C/mail.xml:747(title) serverguide/C/mail.xml:970(title) serverguide/C/mail.xml:1406(title) serverguide/C/lamp-applications.xml:130(title) serverguide/C/lamp-applications.xml:317(title) serverguide/C/lamp-applications.xml:422(title) serverguide/C/installation.xml:1446(title) serverguide/C/file-server.xml:370(title) serverguide/C/file-server.xml:671(title) serverguide/C/dns.xml:37(title) serverguide/C/databases.xml:73(title) serverguide/C/databases.xml:316(title) serverguide/C/clustering.xml:45(title) serverguide/C/chat.xml:55(title) serverguide/C/chat.xml:147(title) serverguide/C/backups.xml:631(title)

119

msgid "Configuration"

120

msgstr "설정"

121

366

msgid "sudo a2ensite mynewsite"

367

msgstr ""

368

369

#: serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:303(command) serverguide/C/web-servers.xml:544(command) serverguide/C/web-servers.xml:553(command) serverguide/C/web-servers.xml:612(command) serverguide/C/mail.xml:994(command) serverguide/C/lamp-applications.xml:238(command) serverguide/C/lamp-applications.xml:339(command) serverguide/C/lamp-applications.xml:610(command)

369

#: serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:303(command) serverguide/C/web-servers.xml:544(command) serverguide/C/web-servers.xml:553(command) serverguide/C/web-servers.xml:612(command) serverguide/C/mail.xml:994(command) serverguide/C/lamp-applications.xml:238(command) serverguide/C/lamp-applications.xml:462(command)

370

msgid "sudo systemctl restart apache2.service"

371

msgstr ""

372

777

"Access Control Lists (ACLs)."

778

msgstr ""

779

780

#: serverguide/C/web-servers.xml:659(title) serverguide/C/web-servers.xml:812(title) serverguide/C/web-servers.xml:962(title) serverguide/C/web-servers.xml:1057(title) serverguide/C/web-servers.xml:1282(title) serverguide/C/vpn.xml:919(title) serverguide/C/vcs.xml:546(title) serverguide/C/security.xml:876(title) serverguide/C/security.xml:1216(title) serverguide/C/security.xml:1630(title) serverguide/C/security.xml:1816(title) serverguide/C/remote-administration.xml:196(title) serverguide/C/remote-administration.xml:820(title) serverguide/C/package-management.xml:479(title) serverguide/C/network-config.xml:1033(title) serverguide/C/network-config.xml:1205(title) serverguide/C/monitoring.xml:392(title) serverguide/C/monitoring.xml:528(title) serverguide/C/mail.xml:511(title) serverguide/C/mail.xml:706(title) serverguide/C/mail.xml:859(title) serverguide/C/mail.xml:1279(title) serverguide/C/mail.xml:1746(title) serverguide/C/lamp-applications.xml:260(title) serverguide/C/lamp-applications.xml:400(title) serverguide/C/lamp-applications.xml:518(title) serverguide/C/lamp-applications.xml:673(title) serverguide/C/file-server.xml:305(title) serverguide/C/file-server.xml:445(title) serverguide/C/file-server.xml:615(title) serverguide/C/file-server.xml:802(title) serverguide/C/dns.xml:614(title) serverguide/C/clustering.xml:232(title) serverguide/C/chat.xml:106(title) serverguide/C/chat.xml:215(title) serverguide/C/backups.xml:301(title)

780

#: serverguide/C/web-servers.xml:659(title) serverguide/C/web-servers.xml:812(title) serverguide/C/web-servers.xml:973(title) serverguide/C/web-servers.xml:1068(title) serverguide/C/web-servers.xml:1293(title) serverguide/C/vpn.xml:919(title) serverguide/C/vcs.xml:546(title) serverguide/C/security.xml:876(title) serverguide/C/security.xml:1216(title) serverguide/C/security.xml:1630(title) serverguide/C/security.xml:1816(title) serverguide/C/remote-administration.xml:196(title) serverguide/C/remote-administration.xml:820(title) serverguide/C/package-management.xml:479(title) serverguide/C/network-config.xml:1033(title) serverguide/C/network-config.xml:1205(title) serverguide/C/monitoring.xml:392(title) serverguide/C/monitoring.xml:528(title) serverguide/C/mail.xml:511(title) serverguide/C/mail.xml:706(title) serverguide/C/mail.xml:859(title) serverguide/C/mail.xml:1279(title) serverguide/C/mail.xml:1746(title) serverguide/C/lamp-applications.xml:260(title) serverguide/C/lamp-applications.xml:370(title) serverguide/C/lamp-applications.xml:525(title) serverguide/C/file-server.xml:305(title) serverguide/C/file-server.xml:445(title) serverguide/C/file-server.xml:615(title) serverguide/C/file-server.xml:802(title) serverguide/C/dns.xml:614(title) serverguide/C/clustering.xml:232(title) serverguide/C/chat.xml:106(title) serverguide/C/chat.xml:215(title) serverguide/C/backups.xml:301(title)

781

msgid "References"

782

msgstr "참조"

783

1000

msgstr "터미널 프롬프트에서, Squid 서버를 설치하기 위하여 다음의 명령을 입력 합니다:"

1001

1002

#: serverguide/C/web-servers.xml:863(command)

1003

msgid "sudo apt install squid3"

1003

msgid "sudo apt install squid"

1004

msgstr ""

1005

1006

#: serverguide/C/web-servers.xml:869(para)

1007

msgid ""

1008

"Squid is configured by editing the directives contained within the "

1009

"<filename>/etc/squid3/squid.conf</filename> configuration file. The "

1010

"following examples illustrate some of the directives which may be modified "

1011

"to affect the behavior of the Squid server. For more in-depth configuration "

1012

"of Squid, see the References section."

1009

"<filename>/etc/squid/squid.conf</filename> configuration file. The following "

1010

"examples illustrate some of the directives which may be modified to affect "

1011

"the behavior of the Squid server. For more in-depth configuration of Squid, "

1012

"see the References section."

1013

msgstr ""

1014

"Squid는 <filename>/etc/squid/squid.conf</filename> 설정 파일 내의 지시자를 편집하는 것으로 설정 "

1015

"딥니다. 다음의 예는 Squid 서버의 동작에 영향을 주기 위하여 변경될 수 있는 몇 가지의 지시자들을 보여 줍니다. 더 깊은 "

1016

"Squid의 설정에 대한 것은, 참조 영역을 보십시오."

1014

1017

1015

1018

#: serverguide/C/web-servers.xml:875(para)

1016

1019

msgid ""

1021

1024

msgstr ""

1022

1025

1023

1026

#: serverguide/C/web-servers.xml:881(command)

1024

msgid "sudo cp /etc/squid3/squid.conf /etc/squid3/squid.conf.original"

1025

msgstr ""

1027

msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"

1028

msgstr "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"

1026

1029

1027

1030

#: serverguide/C/web-servers.xml:882(command)

1028

msgid "sudo chmod a-w /etc/squid3/squid.conf.original"

1029

msgstr ""

1031

msgid "sudo chmod a-w /etc/squid/squid.conf.original"

1032

msgstr "sudo chmod a-w /etc/squid/squid.conf.original"

1030

1033

1031

1034

#: serverguide/C/web-servers.xml:889(para)

1032

1035

msgid ""

1070

1073

#: serverguide/C/web-servers.xml:912(para) serverguide/C/web-servers.xml:932(para)

1071

1074

msgid ""

1072

1075

"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "

1073

"ACL section of your <filename>/etc/squid3/squid.conf</filename> file:"

1076

"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"

1074

1077

msgstr ""

1078

"다음을 여러분의 <filename>/etc/squid/squid.conf</filename> 파일의 ACL 영역의 <emphasis "

1079

"role=\"bold\">가장 아래</emphasis>에 추가 합니다:"

1075

1080

1076

1081

#: serverguide/C/web-servers.xml:915(programlisting)

1077

1082

#, no-wrap

1083

1088

#: serverguide/C/web-servers.xml:918(para) serverguide/C/web-servers.xml:939(para)

1084

1089

msgid ""

1085

1090

"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "

1086

"http_access section of your <filename>/etc/squid3/squid.conf</filename> file:"

1091

"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"

1087

1092

msgstr ""

1093

"그런 다음, <filename>/etc/squid/squid.conf</filename> 파일의 http_access 영역의 "

1094

"<emphasis role=\"bold\">가장 위</emphasis>에 다음을 추가 합니다:"

1088

1095

1089

1096

#: serverguide/C/web-servers.xml:922(programlisting)

1090

1097

#, no-wrap

1119

1126

1120

1127

#: serverguide/C/web-servers.xml:950(para)

1121

1128

msgid ""

1122

"After making changes to the <filename>/etc/squid3/squid.conf</filename> "

1123

"file, save the file and restart the <application>squid</application> server "

1129

"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "

1130

"save the file and restart the <application>squid</application> server "

1124

1131

"application to effect the changes using the following command entered at a "

1125

1132

"terminal prompt:"

1126

1133

msgstr ""

1134

"<filename>/etc/squid/squid.conf</filename> 파일에 변경을 만든 후에는, 그 파일을 저장하고 변경의 "

1135

"효과를 가지도록 터미널 프롬프트에서 다음의 명령을 입력하여 <application>squid</application> 서버 프로그램을 재 "

1136

"시작 합니다:"

1127

1137

1128

1138

#: serverguide/C/web-servers.xml:956(command)

1129

msgid "sudo systemctl restart squid3.service"

1130

msgstr ""

1131

1132

#: serverguide/C/web-servers.xml:964(ulink)

1139

msgid "sudo systemctl restart squid.service"

1140

msgstr ""

1141

1142

#: serverguide/C/web-servers.xml:961(para)

1143

msgid ""

1144

"If formerly a customized squid3 was used that set up the spool at "

1145

"<filename>/var/log/squid3</filename> to be a mountpoint, but otherwise kept "

1146

"the default configuration the upgrade will fail. The upgrade tries to "

1147

"rename/move files as needed, but it can't do so for an active mountpoint. In "

1148

"that case please either adapt the mountpoint or the config in "

1149

"<filename>/etc/squid/squid.conf</filename> so that they match."

1150

msgstr ""

1151

1152

#: serverguide/C/web-servers.xml:966(para)

1153

msgid ""

1154

"The same applies if the <emphasis role=\"bold\">include</emphasis> config "

1155

"statement was used to pull in more files from the old path at "

1156

"<filename>/etc/squid3/</filename>. In those cases you should move and adapt "

1157

"your configuration accordingly."

1158

msgstr ""

1159

1160

#: serverguide/C/web-servers.xml:975(ulink)

1133

1161

msgid "Squid Website"

1134

1162

msgstr "Squid 웹사이트"

1135

1163

1136

#: serverguide/C/web-servers.xml:966(para)

1164

#: serverguide/C/web-servers.xml:977(para)

1137

1165

msgid ""

1138

1166

"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "

1139

1167

"Squid</ulink> page."

1140

1168

msgstr ""

1141

1169

1142

#: serverguide/C/web-servers.xml:973(title)

1170

#: serverguide/C/web-servers.xml:984(title)

1143

1171

msgid "Ruby on Rails"

1144

1172

msgstr "루비 온 레일스"

1145

1173

1146

#: serverguide/C/web-servers.xml:974(para)

1174

#: serverguide/C/web-servers.xml:985(para)

1147

1175

msgid ""

1148

1176

"Ruby on Rails is an open source web framework for developing database backed "

1149

1177

"web applications. It is optimized for sustainable productivity of the "

1154

1182

"루비 온 레일스는 프로그래머의 지속적인 생산성을 위해 최적화되었습니다. since it lets the programmer to "

1155

1183

"write code by favouring convention over configuration."

1156

1184

1157

#: serverguide/C/web-servers.xml:981(para)

1185

#: serverguide/C/web-servers.xml:992(para)

1158

1186

msgid ""

1159

1187

"Before installing <application>Rails</application> you should install "

1160

1188

"<application>Apache</application> and <application>MySQL</application>. To "

1163

1191

"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."

1164

1192

msgstr ""

1165

1193

1166

#: serverguide/C/web-servers.xml:989(para)

1194

#: serverguide/C/web-servers.xml:1000(para)

1167

1195

msgid ""

1168

1196

"Once you have <application>Apache</application> and "

1169

1197

"<application>MySQL</application> packages installed, you are ready to "

1170

1198

"install <application>Ruby on Rails</application> package."

1171

1199

msgstr ""

1172

1200

1173

#: serverguide/C/web-servers.xml:996(para)

1201

#: serverguide/C/web-servers.xml:1007(para)

1174

1202

msgid ""

1175

1203

"To install the <application>Ruby</application> base packages and "

1176

1204

"<application>Ruby on Rails</application>, you can enter the following "

1177

1205

"command in the terminal prompt:"

1178

1206

msgstr ""

1179

1207

1180

#: serverguide/C/web-servers.xml:1002(command)

1208

#: serverguide/C/web-servers.xml:1013(command)

1181

1209

msgid "sudo apt install rails"

1182

1210

msgstr ""

1183

1211

1184

#: serverguide/C/web-servers.xml:1008(para)

1212

#: serverguide/C/web-servers.xml:1019(para)

1185

1213

msgid ""

1186

1214

"Modify the <filename>/etc/apache2/sites-available/000-"

1187

1215

"default.conf</filename> configuration file to setup your domains."

1188

1216

msgstr ""

1189

1217

1190

#: serverguide/C/web-servers.xml:1012(para)

1218

#: serverguide/C/web-servers.xml:1023(para)

1191

1219

msgid ""

1192

1220

"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"

1193

1221

msgstr ""

1194

1222

1195

#: serverguide/C/web-servers.xml:1016(programlisting)

1223

#: serverguide/C/web-servers.xml:1027(programlisting)

1196

1224

#, no-wrap

1197

1225

msgid ""

1198

1226

"\n"

1199

1227

"DocumentRoot /path/to/rails/application/public\n"

1200

1228

msgstr ""

1201

1229

1202

#: serverguide/C/web-servers.xml:1019(para)

1230

#: serverguide/C/web-servers.xml:1030(para)

1203

1231

msgid ""

1204

1232

"Next, change the <Directory \"/path/to/rails/application/public\"> "

1205

1233

"directive:"

1206

1234

msgstr ""

1207

1235

1208

#: serverguide/C/web-servers.xml:1023(programlisting)

1236

#: serverguide/C/web-servers.xml:1034(programlisting)

1209

1237

#, no-wrap

1210

1238

msgid ""

1211

1239

"\n"

1218

1246

"</Directory>\n"

1219

1247

msgstr ""

1220

1248

1221

#: serverguide/C/web-servers.xml:1033(para)

1249

#: serverguide/C/web-servers.xml:1044(para)

1222

1250

msgid ""

1223

1251

"You should also enable the <application>mod_rewrite</application> module for "

1224

1252

"Apache. To enable <application>mod_rewrite</application> module, please "

1225

1253

"enter the following command in a terminal prompt:"

1226

1254

msgstr ""

1227

1255

1228

#: serverguide/C/web-servers.xml:1039(command)

1256

#: serverguide/C/web-servers.xml:1050(command)

1229

1257

msgid "sudo a2enmod rewrite"

1230

1258

msgstr ""

1231

1259

1232

#: serverguide/C/web-servers.xml:1042(para)

1260

#: serverguide/C/web-servers.xml:1053(para)

1233

1261

msgid ""

1234

1262

"Finally you will need to change the ownership of the "

1235

1263

"<filename>/path/to/rails/application/public</filename> and "

1237

1265

"used to run the <application>Apache</application> process:"

1238

1266

msgstr ""

1239

1267

1240

#: serverguide/C/web-servers.xml:1048(command)

1268

#: serverguide/C/web-servers.xml:1059(command)

1241

1269

msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"

1242

1270

msgstr ""

1243

1271

1244

#: serverguide/C/web-servers.xml:1049(command)

1272

#: serverguide/C/web-servers.xml:1060(command)

1245

1273

msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"

1246

1274

msgstr ""

1247

1275

1248

#: serverguide/C/web-servers.xml:1052(para)

1276

#: serverguide/C/web-servers.xml:1063(para)

1249

1277

msgid ""

1250

1278

"That's it! Now you have your Server ready for your <application>Ruby on "

1251

1279

"Rails</application> applications."

1252

1280

msgstr ""

1253

1281

1254

#: serverguide/C/web-servers.xml:1061(para)

1282

#: serverguide/C/web-servers.xml:1072(para)

1255

1283

msgid ""

1256

1284

"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "

1257

1285

"for more information."

1258

1286

msgstr ""

1259

1287

1260

#: serverguide/C/web-servers.xml:1066(para)

1288

#: serverguide/C/web-servers.xml:1077(para)

1261

1289

msgid ""

1262

1290

"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"

1263

1291

"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "

1264

1292

"resource."

1265

1293

msgstr ""

1266

1294

1267

#: serverguide/C/web-servers.xml:1072(para)

1295

#: serverguide/C/web-servers.xml:1083(para)

1268

1296

msgid ""

1269

1297

"Another place for more information is the <ulink "

1270

1298

"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "

1271

1299

"Wiki</ulink> page."

1272

1300

msgstr ""

1273

1301

1274

#: serverguide/C/web-servers.xml:1083(title)

1302

#: serverguide/C/web-servers.xml:1094(title)

1275

1303

msgid "Apache Tomcat"

1276

1304

msgstr ""

1277

1305

1278

#: serverguide/C/web-servers.xml:1084(para)

1306

#: serverguide/C/web-servers.xml:1095(para)

1279

1307

msgid ""

1280

1308

"Apache Tomcat is a web container that allows you to serve Java Servlets and "

1281

1309

"JSP (Java Server Pages) web applications."

1282

1310

msgstr ""

1283

1311

1284

#: serverguide/C/web-servers.xml:1086(para)

1312

#: serverguide/C/web-servers.xml:1097(para)

1285

1313

msgid ""

1286

1314

"Ubuntu has supported packages for both Tomcat 6 and 7. Tomcat 6 is the "

1287

1315

"legacy version, and Tomcat 7 is the current version where new features are "

1289

1317

"but most configuration details are valid for both versions."

1290

1318

msgstr ""

1291

1319

1292

#: serverguide/C/web-servers.xml:1089(para)

1320

#: serverguide/C/web-servers.xml:1100(para)

1293

1321

msgid ""

1294

1322

"The Tomcat packages in Ubuntu support two different ways of running Tomcat. "

1295

1323

"You can install them as a classic unique system-wide instance, that will be "

1300

1328

"need to test on their own private Tomcat instances."

1301

1329

msgstr ""

1302

1330

1303

#: serverguide/C/web-servers.xml:1099(title)

1331

#: serverguide/C/web-servers.xml:1110(title)

1304

1332

msgid "System-wide installation"

1305

1333

msgstr ""

1306

1334

1307

#: serverguide/C/web-servers.xml:1100(para)

1335

#: serverguide/C/web-servers.xml:1111(para)

1308

1336

msgid ""

1309

1337

"To install the Tomcat server, you can enter the following command in the "

1310

1338

"terminal prompt:"

1311

1339

msgstr ""

1312

1340

1313

#: serverguide/C/web-servers.xml:1103(command)

1341

#: serverguide/C/web-servers.xml:1114(command)

1314

1342

msgid "sudo apt install tomcat7"

1315

1343

msgstr ""

1316

1344

1317

#: serverguide/C/web-servers.xml:1105(para)

1345

#: serverguide/C/web-servers.xml:1116(para)

1318

1346

msgid ""

1319

1347

"This will install a Tomcat server with just a default ROOT webapp that "

1320

1348

"displays a minimal \"It works\" page by default."

1321

1349

msgstr ""

1322

1350

1323

#: serverguide/C/web-servers.xml:1111(para)

1351

#: serverguide/C/web-servers.xml:1122(para)

1324

1352

msgid ""

1325

1353

"Tomcat configuration files can be found in "

1326

1354

"<filename>/etc/tomcat7</filename>. Only a few common configuration tweaks "

1329

1357

"documentation</ulink> for more."

1330

1358

msgstr ""

1331

1359

1332

#: serverguide/C/web-servers.xml:1117(title)

1360

#: serverguide/C/web-servers.xml:1128(title)

1333

1361

msgid "Changing default ports"

1334

1362

msgstr ""

1335

1363

1336

#: serverguide/C/web-servers.xml:1118(para)

1364

#: serverguide/C/web-servers.xml:1129(para)

1337

1365

msgid ""

1338

1366

"By default Tomcat runs a HTTP connector on port 8080 and an AJP connector on "

1339

1367

"port 8009. You might want to change those default ports to avoid conflict "

1341

1369

"following lines in <filename>/etc/tomcat7/server.xml</filename>:"

1342

1370

msgstr ""

1343

1371

1344

#: serverguide/C/web-servers.xml:1123(programlisting)

1372

#: serverguide/C/web-servers.xml:1134(programlisting)

1345

1373

#, no-wrap

1346

1374

msgid ""

1347

1375

"\n"

1353

1381

"/>\n"

1354

1382

msgstr ""

1355

1383

1356

#: serverguide/C/web-servers.xml:1132(title)

1384

#: serverguide/C/web-servers.xml:1143(title)

1357

1385

msgid "Changing JVM used"

1358

1386

msgstr ""

1359

1387

1360

#: serverguide/C/web-servers.xml:1133(para)

1388

#: serverguide/C/web-servers.xml:1144(para)

1361

1389

msgid ""

1362

1390

"By default Tomcat will run preferably with OpenJDK JVMs, then try the Sun "

1363

1391

"JVMs, then try some other JVMs. You can force Tomcat to use a specific JVM "

1364

1392

"by setting JAVA_HOME in <filename>/etc/default/tomcat7</filename>:"

1365

1393

msgstr ""

1366

1394

1367

#: serverguide/C/web-servers.xml:1137(programlisting)

1395

#: serverguide/C/web-servers.xml:1148(programlisting)

1368

1396

#, no-wrap

1369

1397

msgid ""

1370

1398

"\n"

1371

1399

"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"

1372

1400

msgstr ""

1373

1401

1374

#: serverguide/C/web-servers.xml:1142(title)

1402

#: serverguide/C/web-servers.xml:1153(title)

1375

1403

msgid "Declaring users and roles"

1376

1404

msgstr ""

1377

1405

1378

#: serverguide/C/web-servers.xml:1143(para)

1406

#: serverguide/C/web-servers.xml:1154(para)

1379

1407

msgid ""

1380

1408

"Usernames, passwords and roles (groups) can be defined centrally in a "

1381

1409

"Servlet container. This is done in the <filename>/etc/tomcat7/tomcat-"

1382

1410

"users.xml</filename> file:"

1383

1411

msgstr ""

1384

1412

1385

#: serverguide/C/web-servers.xml:1146(programlisting)

1413

#: serverguide/C/web-servers.xml:1157(programlisting)

1386

1414

#, no-wrap

1387

1415

msgid ""

1388

1416

"\n"

1390

1418

"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"

1391

1419

msgstr ""

1392

1420

1393

#: serverguide/C/web-servers.xml:1154(title)

1421

#: serverguide/C/web-servers.xml:1165(title)

1394

1422

msgid "Using Tomcat standard webapps"

1395

1423

msgstr ""

1396

1424

1397

#: serverguide/C/web-servers.xml:1155(para)

1425

#: serverguide/C/web-servers.xml:1166(para)

1398

1426

msgid ""

1399

1427

"Tomcat is shipped with webapps that you can install for documentation, "

1400

1428

"administration or demo purposes."

1401

1429

msgstr ""

1402

1430

1403

#: serverguide/C/web-servers.xml:1158(title)

1431

#: serverguide/C/web-servers.xml:1169(title)

1404

1432

msgid "Tomcat documentation"

1405

1433

msgstr ""

1406

1434

1407

#: serverguide/C/web-servers.xml:1159(para)

1435

#: serverguide/C/web-servers.xml:1170(para)

1408

1436

msgid ""

1409

1437

"The <application>tomcat7-docs</application> package contains Tomcat "

1410

1438

"documentation, packaged as a webapp that you can access by default at "

1412

1440

"command in the terminal prompt:"

1413

1441

msgstr ""

1414

1442

1415

#: serverguide/C/web-servers.xml:1164(command)

1443

#: serverguide/C/web-servers.xml:1175(command)

1416

1444

msgid "sudo apt install tomcat7-docs"

1417

1445

msgstr ""

1418

1446

1419

#: serverguide/C/web-servers.xml:1168(title)

1447

#: serverguide/C/web-servers.xml:1179(title)

1420

1448

msgid "Tomcat administration webapps"

1421

1449

msgstr ""

1422

1450

1423

#: serverguide/C/web-servers.xml:1169(para)

1451

#: serverguide/C/web-servers.xml:1180(para)

1424

1452

msgid ""

1425

1453

"The <application>tomcat7-admin</application> package contains two webapps "

1426

1454

"that can be used to administer the Tomcat server using a web interface. You "

1427

1455

"can install them by entering the following command in the terminal prompt:"

1428

1456

msgstr ""

1429

1457

1430

#: serverguide/C/web-servers.xml:1174(command)

1458

#: serverguide/C/web-servers.xml:1185(command)

1431

1459

msgid "sudo apt install tomcat7-admin"

1432

1460

msgstr ""

1433

1461

1434

#: serverguide/C/web-servers.xml:1176(para)

1462

#: serverguide/C/web-servers.xml:1187(para)

1435

1463

msgid ""

1436

1464

"The first one is the <emphasis>manager</emphasis> webapp, which you can "

1437

1465

"access by default at http://yourserver:8080/manager/html. It is primarily "

1438

1466

"used to get server status and restart webapps."

1439

1467

msgstr ""

1440

1468

1441

#: serverguide/C/web-servers.xml:1179(para)

1469

#: serverguide/C/web-servers.xml:1190(para)

1442

1470

msgid ""

1443

1471

"Access to the <emphasis>manager</emphasis> application is protected by "

1444

1472

"default: you need to define a user with the role \"manager-gui\" in "

1445

1473

"<filename>/etc/tomcat7/tomcat-users.xml</filename> before you can access it."

1446

1474

msgstr ""

1447

1475

1448

#: serverguide/C/web-servers.xml:1183(para)

1476

#: serverguide/C/web-servers.xml:1194(para)

1449

1477

msgid ""

1450

1478

"The second one is the <emphasis>host-manager</emphasis> webapp, which you "

1451

1479

"can access by default at http://yourserver:8080/host-manager/html. It can be "

1452

1480

"used to create virtual hosts dynamically."

1453

1481

msgstr ""

1454

1482

1455

#: serverguide/C/web-servers.xml:1187(para)

1483

#: serverguide/C/web-servers.xml:1198(para)

1456

1484

msgid ""

1457

1485

"Access to the <emphasis>host-manager</emphasis> application is also "

1458

1486

"protected by default: you need to define a user with the role \"admin-gui\" "

1460

1488

"it."

1461

1489

msgstr ""

1462

1490

1463

#: serverguide/C/web-servers.xml:1192(para)

1491

#: serverguide/C/web-servers.xml:1203(para)

1464

1492

msgid ""

1465

1493

"For security reasons, the tomcat7 user cannot write to the "

1466

1494

"<filename>/etc/tomcat7</filename> directory by default. Some features in "

1469

1497

"the following, to give users in the tomcat7 group the necessary rights:"

1470

1498

msgstr ""

1471

1499

1472

#: serverguide/C/web-servers.xml:1199(command)

1500

#: serverguide/C/web-servers.xml:1210(command)

1473

1501

msgid "sudo chgrp -R tomcat7 /etc/tomcat7"

1474

1502

msgstr ""

1475

1503

1476

#: serverguide/C/web-servers.xml:1200(command)

1504

#: serverguide/C/web-servers.xml:1211(command)

1477

1505

msgid "sudo chmod -R g+w /etc/tomcat7"

1478

1506

msgstr ""

1479

1507

1480

#: serverguide/C/web-servers.xml:1205(title)

1508

#: serverguide/C/web-servers.xml:1216(title)

1481

1509

msgid "Tomcat examples webapps"

1482

1510

msgstr ""

1483

1511

1484

#: serverguide/C/web-servers.xml:1206(para)

1512

#: serverguide/C/web-servers.xml:1217(para)

1485

1513

msgid ""

1486

1514

"The <application>tomcat7-examples</application> package contains two webapps "

1487

1515

"that can be used to test or demonstrate Servlets and JSP features, which you "

1489

1517

"install them by entering the following command in the terminal prompt:"

1490

1518

msgstr ""

1491

1519

1492

#: serverguide/C/web-servers.xml:1212(command)

1520

#: serverguide/C/web-servers.xml:1223(command)

1493

1521

msgid "sudo apt install tomcat7-examples"

1494

1522

msgstr ""

1495

1523

1496

#: serverguide/C/web-servers.xml:1218(title)

1524

#: serverguide/C/web-servers.xml:1229(title)

1497

1525

msgid "Using private instances"

1498

1526

msgstr ""

1499

1527

1500

#: serverguide/C/web-servers.xml:1219(para)

1528

#: serverguide/C/web-servers.xml:1230(para)

1501

1529

msgid ""

1502

1530

"Tomcat is heavily used in development and testing scenarios where using a "

1503

1531

"single system-wide instance doesn't meet the requirements of multiple users "

1507

1535

"system-installed libraries."

1508

1536

msgstr ""

1509

1537

1510

#: serverguide/C/web-servers.xml:1226(para)

1538

#: serverguide/C/web-servers.xml:1237(para)

1511

1539

msgid ""

1512

1540

"It is possible to run the system-wide instance and the private instances in "

1513

1541

"parallel, as long as they do not use the same TCP ports."

1514

1542

msgstr ""

1515

1543

1516

#: serverguide/C/web-servers.xml:1230(title)

1544

#: serverguide/C/web-servers.xml:1241(title)

1517

1545

msgid "Installing private instance support"

1518

1546

msgstr ""

1519

1547

1520

#: serverguide/C/web-servers.xml:1231(para)

1548

#: serverguide/C/web-servers.xml:1242(para)

1521

1549

msgid ""

1522

1550

"You can install everything necessary to run private instances by entering "

1523

1551

"the following command in the terminal prompt:"

1524

1552

msgstr ""

1525

1553

1526

#: serverguide/C/web-servers.xml:1234(command)

1554

#: serverguide/C/web-servers.xml:1245(command)

1527

1555

msgid "sudo apt install tomcat7-user"

1528

1556

msgstr ""

1529

1557

1530

#: serverguide/C/web-servers.xml:1238(title)

1558

#: serverguide/C/web-servers.xml:1249(title)

1531

1559

msgid "Creating a private instance"

1532

1560

msgstr ""

1533

1561

1534

#: serverguide/C/web-servers.xml:1239(para)

1562

#: serverguide/C/web-servers.xml:1250(para)

1535

1563

msgid ""

1536

1564

"You can create a private instance directory by entering the following "

1537

1565

"command in the terminal prompt:"

1538

1566

msgstr ""

1539

1567

1540

#: serverguide/C/web-servers.xml:1242(command)

1568

#: serverguide/C/web-servers.xml:1253(command)

1541

1569

msgid "tomcat7-instance-create my-instance"

1542

1570

msgstr ""

1543

1571

1544

#: serverguide/C/web-servers.xml:1244(para)

1572

#: serverguide/C/web-servers.xml:1255(para)

1545

1573

msgid ""

1546

1574

"This will create a new <filename>my-instance</filename> directory with all "

1547

1575

"the necessary subdirectories and scripts. You can for example install your "

1550

1578

"are deployed by default."

1551

1579

msgstr ""

1552

1580

1553

#: serverguide/C/web-servers.xml:1252(title)

1581

#: serverguide/C/web-servers.xml:1263(title)

1554

1582

msgid "Configuring your private instance"

1555

1583

msgstr ""

1556

1584

1557

#: serverguide/C/web-servers.xml:1253(para)

1585

#: serverguide/C/web-servers.xml:1264(para)

1558

1586

msgid ""

1559

1587

"You will find the classic Tomcat configuration files for your private "

1560

1588

"instance in the <filename>conf/</filename> subdirectory. You should for "

1563

1591

"conflict with other instances that might be running."

1564

1592

msgstr ""

1565

1593

1566

#: serverguide/C/web-servers.xml:1261(title)

1594

#: serverguide/C/web-servers.xml:1272(title)

1567

1595

msgid "Starting/stopping your private instance"

1568

1596

msgstr ""

1569

1597

1570

#: serverguide/C/web-servers.xml:1262(para)

1598

#: serverguide/C/web-servers.xml:1273(para)

1571

1599

msgid ""

1572

1600

"You can start your private instance by entering the following command in the "

1573

1601

"terminal prompt (supposing your instance is located in the <filename>my-"

1574

1602

"instance</filename> directory):"

1575

1603

msgstr ""

1576

1604

1577

#: serverguide/C/web-servers.xml:1266(command)

1605

#: serverguide/C/web-servers.xml:1277(command)

1578

1606

msgid "my-instance/bin/startup.sh"

1579

1607

msgstr ""

1580

1608

1581

#: serverguide/C/web-servers.xml:1268(para)

1609

#: serverguide/C/web-servers.xml:1279(para)

1582

1610

msgid ""

1583

1611

"You should check the <filename>logs/</filename> subdirectory for any error. "

1584

1612

"If you have a <emphasis>java.net.BindException: Address already in "

1586

1614

"is already taken and that you should change it."

1587

1615

msgstr ""

1588

1616

1589

#: serverguide/C/web-servers.xml:1273(para)

1617

#: serverguide/C/web-servers.xml:1284(para)

1590

1618

msgid ""

1591

1619

"You can stop your instance by entering the following command in the terminal "

1592

1620

"prompt (supposing your instance is located in the <filename>my-"

1593

1621

"instance</filename> directory):"

1594

1622

msgstr ""

1595

1623

1596

#: serverguide/C/web-servers.xml:1277(command)

1624

#: serverguide/C/web-servers.xml:1288(command)

1597

1625

msgid "my-instance/bin/shutdown.sh"

1598

1626

msgstr ""

1599

1627

1600

#: serverguide/C/web-servers.xml:1286(para)

1628

#: serverguide/C/web-servers.xml:1297(para)

1601

1629

msgid ""

1602

1630

"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "

1603

1631

"website for more information."

1604

1632

msgstr ""

1605

1633

1606

#: serverguide/C/web-servers.xml:1291(para)

1634

#: serverguide/C/web-servers.xml:1302(para)

1607

1635

msgid ""

1608

1636

"<ulink url=\"http://shop.oreilly.com/product/9780596003180.do\">Tomcat: The "

1609

1637

"Definitive Guide</ulink> is a good resource for building web applications "

1610

1638

"with Tomcat."

1611

1639

msgstr ""

1612

1640

1613

#: serverguide/C/web-servers.xml:1297(para)

1641

#: serverguide/C/web-servers.xml:1308(para)

1614

1642

msgid ""

1615

1643

"For additional books see the <ulink "

1616

1644

"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "

3007

3035

3008

3036

#: serverguide/C/virtualization.xml:95(para)

3009

3037

msgid ""

3038

"In more recent releases (>= Yakkety) the group was renamed to "

3039

"<emphasis>libvirt</emphasis>. Upgraded systems get a new "

3040

"<emphasis>libvirt</emphasis> group with the same gid as the "

3041

"<emphasis>libvirtd</emphasis> group to match that."

3042

msgstr ""

3043

3044

#: serverguide/C/virtualization.xml:98(para)

3045

msgid ""

3010

3046

"You are now ready to install a <emphasis>Guest</emphasis> operating system. "

3011

3047

"Installing a virtual machine follows the same process as installing the "

3012

3048

"operating system directly on the hardware. You either need a way to automate "

3014

3050

"physical machine."

3015

3051

msgstr ""

3016

3052

3017

#: serverguide/C/virtualization.xml:101(para)

3053

#: serverguide/C/virtualization.xml:104(para)

3018

3054

msgid ""

3019

3055

"In the case of virtual machines a Graphical User Interface (GUI) is "

3020

3056

"analogous to using a physical keyboard and mouse. Instead of installing a "

3023

3059

"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."

3024

3060

msgstr ""

3025

3061

3026

#: serverguide/C/virtualization.xml:108(para)

3062

#: serverguide/C/virtualization.xml:111(para)

3027

3063

msgid ""

3028

3064

"There are several ways to automate the Ubuntu installation process, for "

3029

3065

"example using preseeds, kickstart, etc. Refer to the <ulink "

3031

3067

"Installation Guide</ulink> for details."

3032

3068

msgstr ""

3033

3069

3034

#: serverguide/C/virtualization.xml:113(para)

3070

#: serverguide/C/virtualization.xml:116(para)

3035

3071

msgid ""

3036

3072

"Yet another way to install an Ubuntu virtual machine is to use "

3037

3073

"<application>uvtool</application>. This application, available as of 14.04, "

3039

3075

"scripts, etc. For details see <xref linkend=\"cloud-images-and-uvtool\"/>."

3040

3076

msgstr ""

3041

3077

3042

#: serverguide/C/virtualization.xml:119(para)

3078

#: serverguide/C/virtualization.xml:122(para)

3043

3079

msgid ""

3044

3080

"Libvirt can also be configured work with <application>Xen</application>. For "

3045

3081

"details, see the Xen Ubuntu community page referenced below."

3046

3082

msgstr ""

3047

3083

3048

#: serverguide/C/virtualization.xml:125(title)

3084

#: serverguide/C/virtualization.xml:128(title)

3049

3085

msgid "virt-install"

3050

3086

msgstr ""

3051

3087

3052

#: serverguide/C/virtualization.xml:127(para)

3088

#: serverguide/C/virtualization.xml:130(para)

3053

3089

msgid ""

3054

3090

"<application>virt-install</application> is part of the "

3055

3091

"<application>virtinst</application> package. To install it, from a terminal "

3056

3092

"prompt enter:"

3057

3093

msgstr ""

3058

3094

3059

#: serverguide/C/virtualization.xml:132(command)

3095

#: serverguide/C/virtualization.xml:135(command)

3060

3096

msgid "sudo apt install virtinst"

3061

3097

msgstr ""

3062

3098

3063

#: serverguide/C/virtualization.xml:135(para)

3099

#: serverguide/C/virtualization.xml:138(para)

3064

3100

msgid ""

3065

3101

"There are several options available when using <application>virt-"

3066

3102

"install</application>. For example:"

3067

3103

msgstr ""

3068

3104

3069

#: serverguide/C/virtualization.xml:139(command)

3105

#: serverguide/C/virtualization.xml:142(command)

3070

3106

msgid ""

3071

3107

"sudo virt-install -n web_devel -r 256 \\ --disk "

3072

3108

"path=/var/lib/libvirt/images/web_devel.img,bus=virtio,size=4 -c \\ ubuntu-"

3074

3110

"vnc,listen=0.0.0.0 --noautoconsole -v"

3075

3111

msgstr ""

3076

3112

3077

#: serverguide/C/virtualization.xml:147(para)

3113

#: serverguide/C/virtualization.xml:150(para)

3078

3114

msgid ""

3079

3115

"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "

3080

3116

"be <emphasis>web_devel</emphasis> in this example."

3081

3117

msgstr ""

3082

3118

3083

#: serverguide/C/virtualization.xml:153(para)

3119

#: serverguide/C/virtualization.xml:156(para)

3084

3120

msgid ""

3085

3121

"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "

3086

3122

"machine will use in megabytes."

3087

3123

msgstr ""

3088

3124

3089

#: serverguide/C/virtualization.xml:158(para)

3125

#: serverguide/C/virtualization.xml:161(para)

3090

3126

msgid ""

3091

3127

"<emphasis>--disk "

3092

3128

"path=/var/lib/libvirt/images/web_devel.img,size=4:</emphasis> indicates the "

3096

3132

"<emphasis>virtio</emphasis> for the disk bus."

3097

3133

msgstr ""

3098

3134

3099

#: serverguide/C/virtualization.xml:168(para)

3135

#: serverguide/C/virtualization.xml:171(para)

3100

3136

msgid ""

3101

3137

"<emphasis>-c ubuntu-16.04-server-i386.iso:</emphasis> file to be used as a "

3102

3138

"virtual CDROM. The file can be either an ISO file or the path to the host's "

3103

3139

"CDROM device."

3104

3140

msgstr ""

3105

3141

3106

#: serverguide/C/virtualization.xml:174(para)

3142

#: serverguide/C/virtualization.xml:177(para)

3107

3143

msgid ""

3108

3144

"<emphasis>--network</emphasis> provides details related to the VM's network "

3109

3145

"interface. Here the <emphasis>default</emphasis> network is used, and the "

3110

3146

"interface model is configured for <emphasis>virtio</emphasis>."

3111

3147

msgstr ""

3112

3148

3113

#: serverguide/C/virtualization.xml:181(para)

3149

#: serverguide/C/virtualization.xml:184(para)

3114

3150

msgid ""

3115

3151

"<emphasis>--graphics vnc,listen=0.0.0.0:</emphasis> exports the guest's "

3116

3152

"virtual console using VNC and on all host interfaces. Typically servers have "

3118

3154

"connect via VNC to complete the installation."

3119

3155

msgstr ""

3120

3156

3121

#: serverguide/C/virtualization.xml:189(para)

3157

#: serverguide/C/virtualization.xml:192(para)

3122

3158

msgid ""

3123

3159

"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "

3124

3160

"virtual machine's console."

3125

3161

msgstr ""

3126

3162

3127

#: serverguide/C/virtualization.xml:194(para)

3163

#: serverguide/C/virtualization.xml:197(para)

3128

3164

msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."

3129

3165

msgstr ""

3130

3166

3131

#: serverguide/C/virtualization.xml:199(para)

3167

#: serverguide/C/virtualization.xml:202(para)

3132

3168

msgid ""

3133

3169

"After launching <application>virt-install</application> you can connect to "

3134

3170

"the virtual machine's console either locally using a GUI (if your server has "

3135

3171

"a GUI), or via a remote VNC client from a GUI-based computer."

3136

3172

msgstr ""

3137

3173

3138

#: serverguide/C/virtualization.xml:206(title)

3174

#: serverguide/C/virtualization.xml:209(title)

3139

3175

msgid "virt-clone"

3140

3176

msgstr ""

3141

3177

3142

#: serverguide/C/virtualization.xml:208(para)

3178

#: serverguide/C/virtualization.xml:211(para)

3143

3179

msgid ""

3144

3180

"The <application>virt-clone</application> application can be used to copy "

3145

3181

"one virtual machine to another. For example:"

3146

3182

msgstr ""

3147

3183

3148

#: serverguide/C/virtualization.xml:212(command)

3184

#: serverguide/C/virtualization.xml:215(command)

3149

3185

msgid ""

3150

"sudo virt-clone -o web_devel -n database_devel -f "

3151

"/path/to/database_devel.img \\ --connect=qemu:///system"

3186

"sudo virt-clone -o web_devel -n database_devel -f /path/to/database_devel.img"

3152

3187

msgstr ""

3153

3188

3154

#: serverguide/C/virtualization.xml:218(para)

3189

#: serverguide/C/virtualization.xml:220(para)

3155

3190

msgid "<emphasis>-o:</emphasis> original virtual machine."

3156

3191

msgstr ""

3157

3192

3158

#: serverguide/C/virtualization.xml:222(para)

3193

#: serverguide/C/virtualization.xml:224(para)

3159

3194

msgid "<emphasis>-n:</emphasis> name of the new virtual machine."

3160

3195

msgstr ""

3161

3196

3162

#: serverguide/C/virtualization.xml:227(para)

3197

#: serverguide/C/virtualization.xml:229(para)

3163

3198

msgid ""

3164

3199

"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "

3165

3200

"be used by the new virtual machine."

3166

3201

msgstr ""

3167

3202

3168

#: serverguide/C/virtualization.xml:232(para)

3169

msgid ""

3170

"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."

3171

msgstr ""

3172

3173

#: serverguide/C/virtualization.xml:237(para)

3203

#: serverguide/C/virtualization.xml:234(para)

3174

3204

msgid ""

3175

3205

"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "

3176

3206

"help troubleshoot problems with <application>virt-clone</application>."

3177

3207

msgstr ""

3178

3208

3179

#: serverguide/C/virtualization.xml:242(para)

3209

#: serverguide/C/virtualization.xml:239(para)

3180

3210

msgid ""

3181

3211

"Replace <emphasis>web_devel</emphasis> and "

3182

3212

"<emphasis>database_devel</emphasis> with appropriate virtual machine names."

3183

3213

msgstr ""

3184

3214

3215

#: serverguide/C/virtualization.xml:246(title)

3216

msgid "Virtual Machine Management"

3217

msgstr ""

3218

3185

3219

#: serverguide/C/virtualization.xml:249(title)

3186

msgid "Virtual Machine Management"

3187

msgstr ""

3188

3189

#: serverguide/C/virtualization.xml:252(title)

3190

3220

msgid "virsh"

3191

3221

msgstr ""

3192

3222

3193

#: serverguide/C/virtualization.xml:254(para)

3223

#: serverguide/C/virtualization.xml:251(para)

3194

3224

msgid ""

3195

3225

"There are several utilities available to manage virtual machines and "

3196

3226

"<application>libvirt</application>. The <application>virsh</application> "

3197

3227

"utility can be used from the command line. Some examples:"

3198

3228

msgstr ""

3199

3229

3200

#: serverguide/C/virtualization.xml:261(para)

3230

#: serverguide/C/virtualization.xml:258(para)

3201

3231

msgid "To list running virtual machines:"

3202

3232

msgstr ""

3203

3233

3204

#: serverguide/C/virtualization.xml:264(command)

3205

msgid "virsh -c qemu:///system list"

3234

#: serverguide/C/virtualization.xml:261(command)

3235

msgid "virsh list"

3206

3236

msgstr ""

3207

3237

3208

#: serverguide/C/virtualization.xml:269(para)

3238

#: serverguide/C/virtualization.xml:266(para)

3209

3239

msgid "To start a virtual machine:"

3210

3240

msgstr ""

3211

3241

3212

#: serverguide/C/virtualization.xml:272(command)

3213

msgid "virsh -c qemu:///system start web_devel"

3242

#: serverguide/C/virtualization.xml:269(command)

3243

msgid "virsh start web_devel"

3214

3244

msgstr ""

3215

3245

3216

#: serverguide/C/virtualization.xml:277(para)

3246

#: serverguide/C/virtualization.xml:274(para)

3217

3247

msgid "Similarly, to start a virtual machine at boot:"

3218

3248

msgstr ""

3219

3249

3220

#: serverguide/C/virtualization.xml:280(command)

3221

msgid "virsh -c qemu:///system autostart web_devel"

3250

#: serverguide/C/virtualization.xml:277(command)

3251

msgid "virsh autostart web_devel"

3222

3252

msgstr ""

3223

3253

3224

#: serverguide/C/virtualization.xml:285(para)

3254

#: serverguide/C/virtualization.xml:282(para)

3225

3255

msgid "Reboot a virtual machine with:"

3226

3256

msgstr ""

3227

3257

3228

#: serverguide/C/virtualization.xml:288(command)

3229

msgid "virsh -c qemu:///system reboot web_devel"

3258

#: serverguide/C/virtualization.xml:285(command)

3259

msgid "virsh reboot web_devel"

3230

3260

msgstr ""

3231

3261

3232

#: serverguide/C/virtualization.xml:293(para)

3262

#: serverguide/C/virtualization.xml:290(para)

3233

3263

msgid ""

3234

3264

"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "

3235

3265

"order to be restored later. The following will save the virtual machine "

3236

3266

"state into a file named according to the date:"

3237

3267

msgstr ""

3238

3268

3239

#: serverguide/C/virtualization.xml:299(command)

3240

msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"

3269

#: serverguide/C/virtualization.xml:296(command)

3270

msgid "virsh save web_devel web_devel-022708.state"

3241

3271

msgstr ""

3242

3272

3243

#: serverguide/C/virtualization.xml:302(para)

3273

#: serverguide/C/virtualization.xml:299(para)

3244

3274

msgid "Once saved the virtual machine will no longer be running."

3245

3275

msgstr ""

3246

3276

3247

#: serverguide/C/virtualization.xml:307(para)

3277

#: serverguide/C/virtualization.xml:304(para)

3248

3278

msgid "A saved virtual machine can be restored using:"

3249

3279

msgstr ""

3250

3280

3251

#: serverguide/C/virtualization.xml:310(command)

3252

msgid "virsh -c qemu:///system restore web_devel-022708.state"

3281

#: serverguide/C/virtualization.xml:307(command)

3282

msgid "virsh restore web_devel-022708.state"

3253

3283

msgstr ""

3254

3284

3255

#: serverguide/C/virtualization.xml:315(para)

3285

#: serverguide/C/virtualization.xml:312(para)

3256

3286

msgid "To shutdown a virtual machine do:"

3257

3287

msgstr ""

3258

3288

3259

#: serverguide/C/virtualization.xml:318(command)

3260

msgid "virsh -c qemu:///system shutdown web_devel"

3289

#: serverguide/C/virtualization.xml:315(command)

3290

msgid "virsh shutdown web_devel"

3261

3291

msgstr ""

3262

3292

3263

#: serverguide/C/virtualization.xml:323(para)

3293

#: serverguide/C/virtualization.xml:320(para)

3264

3294

msgid "A CDROM device can be mounted in a virtual machine by entering:"

3265

3295

msgstr ""

3266

3296

3267

#: serverguide/C/virtualization.xml:327(command)

3268

msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"

3297

#: serverguide/C/virtualization.xml:324(command)

3298

msgid "virsh attach-disk web_devel /dev/cdrom /media/cdrom"

3269

3299

msgstr ""

3270

3300

3271

#: serverguide/C/virtualization.xml:333(para)

3301

#: serverguide/C/virtualization.xml:330(para)

3272

3302

msgid ""

3273

3303

"In the above examples replace <emphasis>web_devel</emphasis> with the "

3274

3304

"appropriate virtual machine name, and <filename>web_devel-"

3275

3305

"022708.state</filename> with a descriptive file name."

3276

3306

msgstr ""

3277

3307

3308

#: serverguide/C/virtualization.xml:334(para)

3309

msgid ""

3310

"If virsh (or other vir* tools) shall connect to something else than the "

3311

"default qemu-kvm/system hipervisor one can find alternatives for the "

3312

"<emphasis>connect</emphasis> option in <emphasis>man virsh</emphasis> or "

3313

"<ulink url=\"http://libvirt.org/uri.html\">libvirt doc</ulink>"

3314

msgstr ""

3315

3278

3316

#: serverguide/C/virtualization.xml:341(title)

3317

msgid "migration"

3318

msgstr ""

3319

3320

#: serverguide/C/virtualization.xml:342(para)

3321

msgid ""

3322

"There are different types of migration available depending on the versions "

3323

"of libvirt and the hipervisor being used. In general those types are:"

3324

msgstr ""

3325

3326

#: serverguide/C/virtualization.xml:345(ulink)

3327

msgid "offline migration"

3328

msgstr ""

3329

3330

#: serverguide/C/virtualization.xml:346(ulink)

3331

msgid "live migration"

3332

msgstr ""

3333

3334

#: serverguide/C/virtualization.xml:347(ulink)

3335

msgid "postcopy migration"

3336

msgstr ""

3337

3338

#: serverguide/C/virtualization.xml:349(para)

3339

msgid ""

3340

"There are various options to those methods, but the entry point for all of "

3341

"them is <emphasis>virsh migrate</emphasis>. Read the integrated help for "

3342

"more detail."

3343

msgstr ""

3344

3345

#: serverguide/C/virtualization.xml:350(command)

3346

msgid "virsh migrate --help"

3347

msgstr ""

3348

3349

#: serverguide/C/virtualization.xml:351(para)

3350

msgid ""

3351

"Some useful documentation on constraints and considerations about live "

3352

"migration can be found at the <ulink "

3353

"url=\"https://wiki.ubuntu.com/QemuKVMMigration\">Ubuntu Wiki</ulink>"

3354

msgstr ""

3355

3356

#: serverguide/C/virtualization.xml:355(title)

3279

3357

msgid "Virtual Machine Manager"

3280

3358

msgstr ""

3281

3359

3282

#: serverguide/C/virtualization.xml:343(para)

3360

#: serverguide/C/virtualization.xml:357(para)

3283

3361

msgid ""

3284

3362

"The <application>virt-manager</application> package contains a graphical "

3285

3363

"utility to manage local and remote virtual machines. To install virt-manager "

3286

3364

"enter:"

3287

3365

msgstr ""

3288

3366

3289

#: serverguide/C/virtualization.xml:348(command)

3367

#: serverguide/C/virtualization.xml:362(command)

3290

3368

msgid "sudo apt install virt-manager"

3291

3369

msgstr ""

3292

3370

3293

#: serverguide/C/virtualization.xml:351(para)

3371

#: serverguide/C/virtualization.xml:365(para)

3294

3372

msgid ""

3295

3373

"Since <application>virt-manager</application> requires a Graphical User "

3296

3374

"Interface (GUI) environment it is recommended to be installed on a "

3298

3376

"the local <application>libvirt</application> service enter:"

3299

3377

msgstr ""

3300

3378

3301

#: serverguide/C/virtualization.xml:358(command)

3379

#: serverguide/C/virtualization.xml:372(command)

3302

3380

msgid "virt-manager -c qemu:///system"

3303

3381

msgstr ""

3304

3382

3305

#: serverguide/C/virtualization.xml:361(para)

3383

#: serverguide/C/virtualization.xml:375(para)

3306

3384

msgid ""

3307

3385

"You can connect to the <application>libvirt</application> service running on "

3308

3386

"another host by entering the following in a terminal prompt:"

3309

3387

msgstr ""

3310

3388

3311

#: serverguide/C/virtualization.xml:366(command)

3389

#: serverguide/C/virtualization.xml:380(command)

3312

3390

msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"

3313

3391

msgstr ""

3314

3392

3315

#: serverguide/C/virtualization.xml:370(para)

3393

#: serverguide/C/virtualization.xml:384(para)

3316

3394

msgid ""

3317

3395

"The above example assumes that <application>SSH</application> connectivity "

3318

3396

"between the management system and virtnode1.mydomain.com has already been "

3323

3401

"linkend=\"openssh-server\"/>"

3324

3402

msgstr ""

3325

3403

3326

#: serverguide/C/virtualization.xml:383(title)

3404

#: serverguide/C/virtualization.xml:397(title)

3327

3405

msgid "Virtual Machine Viewer"

3328

3406

msgstr ""

3329

3407

3330

#: serverguide/C/virtualization.xml:385(para)

3408

#: serverguide/C/virtualization.xml:399(para)

3331

3409

msgid ""

3332

3410

"The <application>virt-viewer</application> application allows you to connect "

3333

3411

"to a virtual machine's console. <application>virt-viewer</application> does "

3335

3413

"machine."

3336

3414

msgstr ""

3337

3415

3338

#: serverguide/C/virtualization.xml:390(para)

3416

#: serverguide/C/virtualization.xml:404(para)

3339

3417

msgid ""

3340

3418

"To install <application>virt-viewer</application> from a terminal enter:"

3341

3419

msgstr ""

3342

3420

3343

#: serverguide/C/virtualization.xml:394(command)

3421

#: serverguide/C/virtualization.xml:408(command)

3344

3422

msgid "sudo apt install virt-viewer"

3345

3423

msgstr ""

3346

3424

3347

#: serverguide/C/virtualization.xml:397(para)

3425

#: serverguide/C/virtualization.xml:411(para)

3348

3426

msgid ""

3349

3427

"Once a virtual machine is installed and running you can connect to the "

3350

3428

"virtual machine's console by using:"

3351

3429

msgstr ""

3352

3430

3353

#: serverguide/C/virtualization.xml:401(command)

3354

msgid "virt-viewer -c qemu:///system web_devel"

3431

#: serverguide/C/virtualization.xml:415(command)

3432

msgid "virt-viewer web_devel"

3355

3433

msgstr ""

3356

3434

3357

#: serverguide/C/virtualization.xml:404(para)

3435

#: serverguide/C/virtualization.xml:418(para)

3358

3436

msgid ""

3359

3437

"Similar to <application>virt-manager</application>, <application>virt-"

3360

3438

"viewer</application> can connect to a remote host using "

3361

3439

"<emphasis>SSH</emphasis> with key authentication, as well:"

3362

3440

msgstr ""

3363

3441

3364

#: serverguide/C/virtualization.xml:409(command)

3442

#: serverguide/C/virtualization.xml:423(command)

3365

3443

msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"

3366

3444

msgstr ""

3367

3445

3368

#: serverguide/C/virtualization.xml:412(para)

3446

#: serverguide/C/virtualization.xml:426(para)

3369

3447

msgid ""

3370

3448

"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "

3371

3449

"appropriate virtual machine name."

3372

3450

msgstr ""

3373

3451

3374

#: serverguide/C/virtualization.xml:415(para)

3452

#: serverguide/C/virtualization.xml:429(para)

3375

3453

msgid ""

3376

3454

"If configured to use a <emphasis>bridged</emphasis> network interface you "

3377

3455

"can also setup <application>SSH</application> access to the virtual machine."

3378

3456

msgstr ""

3379

3457

3380

#: serverguide/C/virtualization.xml:421(title) serverguide/C/virtualization.xml:674(title) serverguide/C/virtualization.xml:745(title) serverguide/C/virtualization.xml:2680(title) serverguide/C/samba.xml:247(title) serverguide/C/samba.xml:345(title) serverguide/C/samba.xml:700(title) serverguide/C/samba.xml:1094(title) serverguide/C/samba.xml:1292(title) serverguide/C/reporting-bugs.xml:252(title) serverguide/C/remote-administration.xml:414(title) serverguide/C/other-apps.xml:151(title) serverguide/C/other-apps.xml:305(title) serverguide/C/other-apps.xml:399(title) serverguide/C/network-config.xml:588(title) serverguide/C/network-config.xml:843(title) serverguide/C/network-config.xml:1691(title) serverguide/C/network-auth.xml:2140(title) serverguide/C/network-auth.xml:2673(title) serverguide/C/network-auth.xml:3389(title) serverguide/C/network-auth.xml:3942(title) serverguide/C/network-auth.xml:4177(title) serverguide/C/installation.xml:880(title) serverguide/C/installation.xml:1166(title) serverguide/C/installation.xml:1677(title) serverguide/C/databases.xml:264(title) serverguide/C/databases.xml:419(title) serverguide/C/cgroups.xml:198(title) serverguide/C/backups.xml:870(title)

3458

#: serverguide/C/virtualization.xml:435(title) serverguide/C/virtualization.xml:742(title) serverguide/C/virtualization.xml:813(title) serverguide/C/virtualization.xml:2748(title) serverguide/C/samba.xml:247(title) serverguide/C/samba.xml:345(title) serverguide/C/samba.xml:700(title) serverguide/C/samba.xml:1094(title) serverguide/C/samba.xml:1292(title) serverguide/C/reporting-bugs.xml:252(title) serverguide/C/remote-administration.xml:414(title) serverguide/C/other-apps.xml:151(title) serverguide/C/other-apps.xml:305(title) serverguide/C/other-apps.xml:399(title) serverguide/C/network-config.xml:588(title) serverguide/C/network-config.xml:843(title) serverguide/C/network-config.xml:1945(title) serverguide/C/network-auth.xml:2140(title) serverguide/C/network-auth.xml:2666(title) serverguide/C/network-auth.xml:3382(title) serverguide/C/network-auth.xml:3935(title) serverguide/C/network-auth.xml:4170(title) serverguide/C/installation.xml:880(title) serverguide/C/installation.xml:1166(title) serverguide/C/installation.xml:1677(title) serverguide/C/databases.xml:264(title) serverguide/C/databases.xml:419(title) serverguide/C/cgroups.xml:198(title) serverguide/C/backups.xml:870(title)

3381

3459

msgid "Resources"

3382

3460

msgstr "자원들"

3383

3461

3384

#: serverguide/C/virtualization.xml:425(para)

3462

#: serverguide/C/virtualization.xml:439(para)

3385

3463

msgid ""

3386

3464

"See the <ulink url=\"http://www.linux-kvm.org/\">KVM</ulink> home page for "

3387

3465

"more details."

3388

3466

msgstr ""

3389

3467

3390

#: serverguide/C/virtualization.xml:430(para)

3468

#: serverguide/C/virtualization.xml:444(para)

3391

3469

msgid ""

3392

3470

"For more information on <application>libvirt</application> see the <ulink "

3393

3471

"url=\"http://libvirt.org/\">libvirt home page</ulink>"

3394

3472

msgstr ""

3395

3473

3396

#: serverguide/C/virtualization.xml:436(para)

3474

#: serverguide/C/virtualization.xml:450(para)

3397

3475

msgid ""

3398

3476

"The <ulink url=\"http://virt-manager.org/\">Virtual Machine Manager</ulink> "

3399

3477

"site has more information on <application>virt-manager</application> "

3400

3478

"development."

3401

3479

msgstr ""

3402

3480

3403

#: serverguide/C/virtualization.xml:442(para)

3481

#: serverguide/C/virtualization.xml:456(para)

3404

3482

msgid ""

3405

3483

"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "

3406

3484

"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "

3407

3485

"technology in Ubuntu."

3408

3486

msgstr ""

3409

3487

3410

#: serverguide/C/virtualization.xml:448(para)

3488

#: serverguide/C/virtualization.xml:462(para)

3411

3489

msgid ""

3412

3490

"Another good resource is the <ulink "

3413

3491

"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."

3414

3492

msgstr ""

3415

3493

3416

#: serverguide/C/virtualization.xml:454(para)

3494

#: serverguide/C/virtualization.xml:468(para)

3417

3495

msgid ""

3418

3496

"For information on Xen, including using Xen with libvirt, please see the "

3419

3497

"<ulink url=\"https://help.ubuntu.com/community/Xen\">Ubuntu Wiki Xen</ulink> "

3420

3498

"page."

3421

3499

msgstr ""

3422

3500

3423

#: serverguide/C/virtualization.xml:464(title)

3501

#: serverguide/C/virtualization.xml:478(title)

3502

msgid "Qemu"

3503

msgstr ""

3504

3505

#: serverguide/C/virtualization.xml:479(para)

3506

msgid ""

3507

"<ulink url=\"http://wiki.qemu.org/Main_Page\">Qemu</ulink> is a machine "

3508

"emulator that can run operating systems and programs for one machine on a "

3509

"different machine. Mostly it is not used as emulator but as virtualizer in "

3510

"collaboration with KVM or XEN kernel components. In that case it utilizes "

3511

"the virtualization technology of the hardware to virtualize guests."

3512

msgstr ""

3513

3514

#: serverguide/C/virtualization.xml:483(para)

3515

msgid ""

3516

"While qemu has a <ulink url=\"http://wiki.qemu.org/download/qemu-"

3517

"doc.html#sec_005finvocation\">command line interface</ulink> and a <ulink "

3518

"url=\"http://wiki.qemu.org/download/qemu-"

3519

"doc.html#pcsys_005fmonitor\">monitor</ulink> to interact with running guests "

3520

"those is rarely used that way for other means than development purposes. "

3521

"<link linkend=\"libvirt\">Libvirt</link> provides an abstraction from "

3522

"specific versions and hiperviors and encapsulates some workarounds and best "

3523

"practises."

3524

msgstr ""

3525

3526

#: serverguide/C/virtualization.xml:488(title)

3527

msgid "Upgrading the machine type"

3528

msgstr ""

3529

3530

#: serverguide/C/virtualization.xml:489(para)

3531

msgid ""

3532

"This also is documented along some more constraints and considerations at "

3533

"the <ulink "

3534

"url=\"https://wiki.ubuntu.com/QemuKVMMigration#Upgrade_machine_type\">Ubuntu "

3535

"Wiki</ulink>"

3536

msgstr ""

3537

3538

#: serverguide/C/virtualization.xml:490(para)

3539

msgid ""

3540

"You might want to update your machine type of an existing defined guest to:"

3541

msgstr ""

3542

3543

#: serverguide/C/virtualization.xml:492(para)

3544

msgid "to pick up latest security fixes and features"

3545

msgstr ""

3546

3547

#: serverguide/C/virtualization.xml:493(para)

3548

msgid "continue using a guest created on a now unsupported release"

3549

msgstr ""

3550

3551

#: serverguide/C/virtualization.xml:495(para)

3552

msgid ""

3553

"In general it is recommended to update machine types when upgrading qemu/kvm "

3554

"to a new major version. But this can likely never be an automated task as "

3555

"this change is guest visible. The guest devices might change in appearance, "

3556

"new features will be announced to the guest and so on. Linux is usually very "

3557

"good at tolerating such changes, but it depends so much on the setup and "

3558

"workload of the guest that this has to be evaluated by the owner/admin of "

3559

"the system. Other operating systems where known to often have severe impacts "

3560

"by changing the hardware. Consider a machine type change similar to "

3561

"replacing all devices and firmware of a physical machine to the latest "

3562

"revision - all considerations that apply there apply to evaluating a machine "

3563

"type upgrade as well."

3564

msgstr ""

3565

3566

#: serverguide/C/virtualization.xml:496(para)

3567

msgid ""

3568

"As usual with major configuration changes it is wise to back up your guest "

3569

"definition and disk state to be able to do a rollback just in case. There is "

3570

"no integrated single command to update the machine type via virsh or similar "

3571

"tools. It is a normal part of your machine definition. And therefore updated "

3572

"the same way as most others."

3573

msgstr ""

3574

3575

#: serverguide/C/virtualization.xml:498(para)

3576

msgid "First shutdown your machine and wait until it has reached that state."

3577

msgstr ""

3578

3579

#: serverguide/C/virtualization.xml:499(screen)

3580

#, no-wrap

3581

msgid ""

3582

"\n"

3583

"virsh shutdown <yourmachine>\n"

3584

"# wait\n"

3585

"virsh list --inactive\n"

3586

"# should now list your machine as \"shut off\"\n"

3587

" "

3588

msgstr ""

3589

3590

#: serverguide/C/virtualization.xml:505(para)

3591

msgid ""

3592

"Then edit the machine definition and find the type in the type tag at the "

3593

"machine attribute."

3594

msgstr ""

3595

3596

#: serverguide/C/virtualization.xml:506(screen)

3597

#, no-wrap

3598

msgid ""

3599

"\n"

3600

"virsh edit <yourmachine>\n"

3601

"<type arch='x86_64' machine='pc-i440fx-xenial'>hvm</type>\n"

3602

" "

3603

msgstr ""

3604

3605

#: serverguide/C/virtualization.xml:510(para)

3606

msgid ""

3607

"Change this to the value you want. If you need to check what types are "

3608

"available via \"-M ?\" Note that while providing upstream types as "

3609

"convenience only Ubuntu types are supported. There you can also see what the "

3610

"current default would be. In general it is strongly recommended that you "

3611

"change to newer types if possible to exploit newer features, but also to "

3612

"benefit of bugfixes that only apply to the newer device virtualization."

3613

msgstr ""

3614

3615

#: serverguide/C/virtualization.xml:511(screen)

3616

#, no-wrap

3617

msgid ""

3618

"\n"

3619

"kvm -M ?\n"

3620

"# lists machine types, e.g.\n"

3621

"pc-i440fx-xenial Ubuntu 16.04 PC (i440FX + PIIX, 1996) (default)\n"

3622

"...\n"

3623

" "

3624

msgstr ""

3625

3626

#: serverguide/C/virtualization.xml:517(para)

3627

msgid ""

3628

"After this you can start your guest again. You can check the current machine "

3629

"type from guest and host depending on your needs."

3630

msgstr ""

3631

3632

#: serverguide/C/virtualization.xml:518(screen)

3633

#, no-wrap

3634

msgid ""

3635

"\n"

3636

"virsh start <yourmachine>\n"

3637

"# check from host, via dumping the active xml definition\n"

3638

"virsh dumpxml <yourmachine> | xmllint --xpath "

3639

"\"string(//domain/os/type/@machine)\" -\n"

3640

"# or from the guest via dmidecode\n"

3641

"sudo dmidecode | grep Product -A 1\n"

3642

" Product Name: Standard PC (i440FX + PIIX, 1996)\n"

3643

" Version: pc-i440fx-xenial\n"

3644

" "

3645

msgstr ""

3646

3647

#: serverguide/C/virtualization.xml:527(para)

3648

msgid ""

3649

"If you keep non-live definitions around like xml files remember to update "

3650

"those as well."

3651

msgstr ""

3652

3653

#: serverguide/C/virtualization.xml:532(title)

3424

3654

msgid "Cloud images and uvtool"

3425

3655

msgstr ""

3426

3656

3427

#: serverguide/C/virtualization.xml:467(title) serverguide/C/security.xml:366(title) serverguide/C/samba.xml:23(title) serverguide/C/remote-administration.xml:18(title) serverguide/C/package-management.xml:18(title) serverguide/C/introduction.xml:11(title) serverguide/C/installation.xml:1374(title)

3657

#: serverguide/C/virtualization.xml:535(title) serverguide/C/security.xml:366(title) serverguide/C/samba.xml:23(title) serverguide/C/remote-administration.xml:18(title) serverguide/C/package-management.xml:18(title) serverguide/C/introduction.xml:11(title) serverguide/C/installation.xml:1374(title)

3428

3658

msgid "Introduction"

3429

3659

msgstr "소개"

3430

3660

3431

#: serverguide/C/virtualization.xml:469(para)

3661

#: serverguide/C/virtualization.xml:537(para)

3432

3662

msgid ""

3433

3663

"With Ubuntu being one of the most used operating systems on many cloud "

3434

3664

"platforms, the availability of stable and secure cloud images has become "

3438

3668

"installation."

3439

3669

msgstr ""

3440

3670

3441

#: serverguide/C/virtualization.xml:477(title)

3671

#: serverguide/C/virtualization.xml:545(title)

3442

3672

msgid "Creating virtual machines using uvtool"

3443

3673

msgstr ""

3444

3674

3445

#: serverguide/C/virtualization.xml:479(para)

3675

#: serverguide/C/virtualization.xml:547(para)

3446

3676

msgid ""

3447

3677

"Starting with 14.04 LTS, a tool called uvtool greatly facilitates the task "

3448

3678

"of generating virtual machines (VM) using the cloud images. "

3449

"<application>uvtool</application> provides a simple mechanism to to "

3450

"synchronize cloud-images locally and use them to create new VMs in minutes."

3679

"<application>uvtool</application> provides a simple mechanism to synchronize "

3680

"cloud-images locally and use them to create new VMs in minutes."

3451

3681

msgstr ""

3452

3682

3453

#: serverguide/C/virtualization.xml:486(title)

3683

#: serverguide/C/virtualization.xml:554(title)

3454

3684

msgid "Uvtool packages"

3455

3685

msgstr ""

3456

3686

3457

#: serverguide/C/virtualization.xml:488(para)

3687

#: serverguide/C/virtualization.xml:556(para)

3458

3688

msgid ""

3459

3689

"The following packages and their dependencies will be required in order to "

3460

3690

"use uvtool:"

3461

3691

msgstr ""

3462

3692

3463

#: serverguide/C/virtualization.xml:495(para)

3693

#: serverguide/C/virtualization.xml:563(para)

3464

3694

msgid "uvtool"

3465

3695

msgstr ""

3466

3696

3467

#: serverguide/C/virtualization.xml:499(para)

3697

#: serverguide/C/virtualization.xml:567(para)

3468

3698

msgid "uvtool-libvirt"

3469

3699

msgstr ""

3470

3700

3471

#: serverguide/C/virtualization.xml:504(para)

3701

#: serverguide/C/virtualization.xml:572(para)

3472

3702

msgid "To install <application>uvtool</application>, run:"

3473

3703

msgstr ""

3474

3704

3475

#: serverguide/C/virtualization.xml:505(programlisting)

3705

#: serverguide/C/virtualization.xml:573(programlisting)

3476

3706

#, no-wrap

3477

3707

msgid "$ apt -y install uvtool"

3478

3708

msgstr ""

3479

3709

3480

#: serverguide/C/virtualization.xml:507(para)

3710

#: serverguide/C/virtualization.xml:575(para)

3481

3711

msgid "This will install uvtool's main commands:"

3482

3712

msgstr ""

3483

3713

3484

#: serverguide/C/virtualization.xml:509(application)

3714

#: serverguide/C/virtualization.xml:577(application)

3485

3715

msgid "uvt-simplestreams-libvirt"

3486

3716

msgstr ""

3487

3717

3488

#: serverguide/C/virtualization.xml:510(application)

3718

#: serverguide/C/virtualization.xml:578(application)

3489

3719

msgid "uvt-kvm"

3490

3720

msgstr ""

3491

3721

3492

#: serverguide/C/virtualization.xml:515(title)

3722

#: serverguide/C/virtualization.xml:583(title)

3493

3723

msgid ""

3494

3724

"Get the Ubuntu Cloud Image with <application>uvt-simplestreams-"

3495

3725

"libvirt</application>"

3496

3726

msgstr ""

3497

3727

3498

#: serverguide/C/virtualization.xml:517(para)

3728

#: serverguide/C/virtualization.xml:585(para)

3499

3729

msgid ""

3500

3730

"This is one of the major simplifications that "

3501

3731

"<application>uvtool</application> brings. It is aware of where to find the "

3504

3734

"architecture, the uvtool command would be:"

3505

3735

msgstr ""

3506

3736

3507

#: serverguide/C/virtualization.xml:522(programlisting)

3737

#: serverguide/C/virtualization.xml:590(programlisting)

3508

3738

#, no-wrap

3509

3739

msgid "$ uvt-simplestreams-libvirt sync arch=amd64"

3510

3740

msgstr ""

3511

3741

3512

#: serverguide/C/virtualization.xml:524(para)

3742

#: serverguide/C/virtualization.xml:592(para)

3513

3743

msgid ""

3514

3744

"After an amount of time required to download all the images from the "

3515

3745

"Internet, you will have a complete set of cloud images stored locally. To "

3516

3746

"see what has been downloaded use the following command:"

3517

3747

msgstr ""

3518

3748

3519

#: serverguide/C/virtualization.xml:528(programlisting)

3749

#: serverguide/C/virtualization.xml:596(programlisting)

3520

3750

#, no-wrap

3521

3751

msgid ""

3522

3752

"$ uvt-simplestreams-libvirt query\n"

3533

3763

"\n"

3534

3764

msgstr ""

3535

3765

3536

#: serverguide/C/virtualization.xml:542(para)

3766

#: serverguide/C/virtualization.xml:610(para)

3537

3767

msgid ""

3538

3768

"In the case where you want to synchronize only one specific cloud-image, you "

3539

3769

"need to use the release= and arch= filters to identify which image needs to "

3540

3770

"be synchronized."

3541

3771

msgstr ""

3542

3772

3543

#: serverguide/C/virtualization.xml:545(programlisting)

3773

#: serverguide/C/virtualization.xml:613(programlisting)

3544

3774

#, no-wrap

3545

3775

msgid "$ uvt-simplestreams-libvirt sync release=xenial arch=amd64\n"

3546

3776

msgstr ""

3547

3777

3548

#: serverguide/C/virtualization.xml:550(title)

3778

#: serverguide/C/virtualization.xml:618(title)

3549

3779

msgid "Create the VM using uvt-kvm"

3550

3780

msgstr ""

3551

3781

3552

#: serverguide/C/virtualization.xml:552(para)

3782

#: serverguide/C/virtualization.xml:620(para)

3553

3783

msgid ""

3554

3784

"In order to connect to the virtual machine once it has been created, you "

3555

3785

"must have a valid SSH key available for the Ubuntu user. If your environment "

3557

3787

"command:"

3558

3788

msgstr ""

3559

3789

3560

#: serverguide/C/virtualization.xml:554(programlisting)

3790

#: serverguide/C/virtualization.xml:622(programlisting)

3561

3791

#, no-wrap

3562

3792

msgid ""

3563

3793

"\n"

3584

3814

"+-----------------+\n"

3585

3815

msgstr ""

3586

3816

3587

#: serverguide/C/virtualization.xml:577(para)

3817

#: serverguide/C/virtualization.xml:645(para)

3588

3818

msgid ""

3589

3819

"To create of a new virtual machine using uvtool, run the following in a "

3590

3820

"terminal:"

3591

3821

msgstr ""

3592

3822

3593

#: serverguide/C/virtualization.xml:579(programlisting)

3823

#: serverguide/C/virtualization.xml:647(programlisting)

3594

3824

#, no-wrap

3595

3825

msgid "$ uvt-kvm create firsttest"

3596

3826

msgstr ""

3597

3827

3598

#: serverguide/C/virtualization.xml:581(para)

3828

#: serverguide/C/virtualization.xml:649(para)

3599

3829

msgid ""

3600

3830

"This will create a VM named <emphasis role=\"bold\">firsttest</emphasis> "

3601

3831

"using the current LTS cloud image available locally. If you want to specify "

3603

3833

"role=\"bold\">release=</emphasis> filter:"

3604

3834

msgstr ""

3605

3835

3606

#: serverguide/C/virtualization.xml:584(programlisting)

3836

#: serverguide/C/virtualization.xml:652(programlisting)

3607

3837

#, no-wrap

3608

3838

msgid "$ uvt-kvm create secondtest release=xenial"

3609

3839

msgstr ""

3610

3840

3611

#: serverguide/C/virtualization.xml:586(para)

3841

#: serverguide/C/virtualization.xml:654(para)

3612

3842

msgid ""

3613

3843

"<application>uvt-kvm wait</application> can be used to wait until the "

3614

3844

"creation of the VM has completed:"

3615

3845

msgstr ""

3616

3846

3617

#: serverguide/C/virtualization.xml:589(programlisting)

3847

#: serverguide/C/virtualization.xml:657(programlisting)

3618

3848

#, no-wrap

3619

3849

msgid ""

3620

3850

"$ uvt-kvm wait secondttest --insecure\n"

3621

3851

"Warning: secure wait for boot-finished not yet implemented; use --insecure.\n"

3622

3852

msgstr ""

3623

3853

3624

#: serverguide/C/virtualization.xml:594(title)

3854

#: serverguide/C/virtualization.xml:662(title)

3625

3855

msgid "Connect to the running VM"

3626

3856

msgstr ""

3627

3857

3628

#: serverguide/C/virtualization.xml:595(para)

3858

#: serverguide/C/virtualization.xml:663(para)

3629

3859

msgid ""

3630

3860

"Once the virtual machine creation is completed, you can connect to it using "

3631

3861

"SSH:"

3632

3862

msgstr ""

3633

3863

3634

#: serverguide/C/virtualization.xml:598(programlisting)

3864

#: serverguide/C/virtualization.xml:666(programlisting)

3635

3865

#, no-wrap

3636

3866

msgid "$ uvt-kvm ssh secondtest --insecure"

3637

3867

msgstr ""

3638

3868

3639

#: serverguide/C/virtualization.xml:600(para)

3869

#: serverguide/C/virtualization.xml:668(para)

3640

3870

msgid ""

3641

3871

"For the time being, the <emphasis role=\"bold\">--insecure</emphasis> is "

3642

3872

"required, so use this mechanism to connect to your VM only if you completely "

3643

3873

"trust your network infrastructure."

3644

3874

msgstr ""

3645

3875

3646

#: serverguide/C/virtualization.xml:602(para)

3876

#: serverguide/C/virtualization.xml:670(para)

3647

3877

msgid ""

3648

3878

"You can also connect to your VM using a regular SSH session using the IP "

3649

3879

"address of the VM. The address can be queried using the following command:"

3650

3880

msgstr ""

3651

3881

3652

#: serverguide/C/virtualization.xml:604(programlisting)

3882

#: serverguide/C/virtualization.xml:672(programlisting)

3653

3883

#, no-wrap

3654

3884

msgid ""

3655

3885

"\n"

3691

3921

"\n"

3692

3922

msgstr ""

3693

3923

3694

#: serverguide/C/virtualization.xml:639(title)

3924

#: serverguide/C/virtualization.xml:707(title)

3695

3925

msgid "Get the list of running VMs"

3696

3926

msgstr ""

3697

3927

3698

#: serverguide/C/virtualization.xml:640(para)

3928

#: serverguide/C/virtualization.xml:708(para)

3699

3929

msgid "You can get the list of VMs running on your system with this command:"

3700

3930

msgstr ""

3701

3931

3702

#: serverguide/C/virtualization.xml:642(programlisting)

3932

#: serverguide/C/virtualization.xml:710(programlisting)

3703

3933

#, no-wrap

3704

3934

msgid ""

3705

3935

"$ uvt-kvm list\n"

3706

3936

"secondtest\n"

3707

3937

msgstr ""

3708

3938

3709

#: serverguide/C/virtualization.xml:647(title)

3939

#: serverguide/C/virtualization.xml:715(title)

3710

3940

msgid "Destroy your VM"

3711

3941

msgstr ""

3712

3942

3713

#: serverguide/C/virtualization.xml:648(para)

3943

#: serverguide/C/virtualization.xml:716(para)

3714

3944

msgid "Once you are done with your VM, you can destroy it with:"

3715

3945

msgstr ""

3716

3946

3717

#: serverguide/C/virtualization.xml:650(programlisting)

3947

#: serverguide/C/virtualization.xml:718(programlisting)

3718

3948

#, no-wrap

3719

3949

msgid "$ uvt-kvm destroy secondtest"

3720

3950

msgstr ""

3721

3951

3722

#: serverguide/C/virtualization.xml:652(title)

3952

#: serverguide/C/virtualization.xml:720(title)

3723

3953

msgid "More uvt-kvm options"

3724

3954

msgstr ""

3725

3955

3726

#: serverguide/C/virtualization.xml:654(para)

3956

#: serverguide/C/virtualization.xml:722(para)

3727

3957

msgid ""

3728

3958

"The following options can be used to change some of the characteristics of "

3729

3959

"the VM that you are creating:"

3730

3960

msgstr ""

3731

3961

3732

#: serverguide/C/virtualization.xml:657(para)

3962

#: serverguide/C/virtualization.xml:725(para)

3733

3963

msgid "--memory : Amount of RAM in megabytes. Default: 512."

3734

3964

msgstr ""

3735

3965

3736

#: serverguide/C/virtualization.xml:658(para)

3966

#: serverguide/C/virtualization.xml:726(para)

3737

3967

msgid "--disk : Size of the OS disk in gigabytes. Default: 8."

3738

3968

msgstr ""

3739

3969

3740

#: serverguide/C/virtualization.xml:659(para)

3970

#: serverguide/C/virtualization.xml:727(para)

3741

3971

msgid "--cpu : Number of CPU cores. Default: 1."

3742

3972

msgstr ""

3743

3973

3744

#: serverguide/C/virtualization.xml:662(para)

3974

#: serverguide/C/virtualization.xml:730(para)

3745

3975

msgid ""

3746

3976

"Some other parameters will have an impact on the cloud-init configuration:"

3747

3977

msgstr ""

3748

3978

3749

#: serverguide/C/virtualization.xml:664(para)

3979

#: serverguide/C/virtualization.xml:732(para)

3750

3980

msgid ""

3751

3981

"--password password : Allow login to the VM using the Ubuntu account and "

3752

3982

"this provided password."

3753

3983

msgstr ""

3754

3984

3755

#: serverguide/C/virtualization.xml:665(para)

3985

#: serverguide/C/virtualization.xml:733(para)

3756

3986

msgid ""

3757

3987

"--run-script-once script_file : Run script_file as root on the VM the first "

3758

3988

"time it is booted, but never again."

3759

3989

msgstr ""

3760

3990

3761

#: serverguide/C/virtualization.xml:666(para)

3991

#: serverguide/C/virtualization.xml:734(para)

3762

3992

msgid ""

3763

3993

"--packages package_list : Install the comma-separated packages specified in "

3764

3994

"package_list on first boot."

3765

3995

msgstr ""

3766

3996

3767

#: serverguide/C/virtualization.xml:669(para)

3997

#: serverguide/C/virtualization.xml:737(para)

3768

3998

msgid ""

3769

3999

"A complete description of all available modifiers is available in the "

3770

4000

"manpage of uvt-kvm."

3771

4001

msgstr ""

3772

4002

3773

#: serverguide/C/virtualization.xml:676(para)

4003

#: serverguide/C/virtualization.xml:744(para)

3774

4004

msgid ""

3775

4005

"If you are interested in learning more, have questions or suggestions, "

3776

4006

"please contact the Ubuntu Server Team at:"

3777

4007

msgstr ""

3778

4008

3779

#: serverguide/C/virtualization.xml:681(para)

4009

#: serverguide/C/virtualization.xml:749(para)

3780

4010

msgid "IRC: #ubuntu-server on freenode"

3781

4011

msgstr ""

3782

4012

3783

#: serverguide/C/virtualization.xml:685(para)

4013

#: serverguide/C/virtualization.xml:753(para)

3784

4014

msgid ""

3785

4015

"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"

3786

4016

"server\">ubuntu-server at lists.ubuntu.com</ulink>"

3787

4017

msgstr ""

3788

4018

3789

#: serverguide/C/virtualization.xml:694(title)

4019

#: serverguide/C/virtualization.xml:762(title)

3790

4020

msgid "Ubuntu Cloud"

3791

4021

msgstr ""

3792

4022

3793

#: serverguide/C/virtualization.xml:696(para)

4023

#: serverguide/C/virtualization.xml:764(para)

3794

4024

msgid ""

3795

4025

"<application>Cloud computing</application> is a computing model that allows "

3796

4026

"vast pools of resources to be allocated on-demand. These resources such as "

3802

4032

"build highly scalable, cloud computing for both public and private clouds."

3803

4033

msgstr ""

3804

4034

3805

#: serverguide/C/virtualization.xml:707(title)

4035

#: serverguide/C/virtualization.xml:775(title)

3806

4036

msgid "Installation and Configuration"

3807

4037

msgstr ""

3808

4038

3809

#: serverguide/C/virtualization.xml:709(para)

4039

#: serverguide/C/virtualization.xml:777(para)

3810

4040

msgid ""

3811

4041

"Due to the current high rate of development of this complex technology we "

3812

4042

"refer the reader to <ulink url=\"http://docs.openstack.org/havana/install-"

3814

4044

"concerning installation and configuration."

3815

4045

msgstr ""

3816

4046

3817

#: serverguide/C/virtualization.xml:718(title) serverguide/C/network-config.xml:1660(title)

4047

#: serverguide/C/virtualization.xml:786(title) serverguide/C/network-config.xml:1698(title)

3818

4048

msgid "Support and Troubleshooting"

3819

4049

msgstr ""

3820

4050

3821

#: serverguide/C/virtualization.xml:720(para)

4051

#: serverguide/C/virtualization.xml:788(para)

3822

4052

msgid "Community Support"

3823

4053

msgstr ""

3824

4054

3825

#: serverguide/C/virtualization.xml:724(ulink)

4055

#: serverguide/C/virtualization.xml:792(ulink)

3826

4056

msgid "OpenStack Mailing list"

3827

4057

msgstr ""

3828

4058

3829

#: serverguide/C/virtualization.xml:729(ulink)

4059

#: serverguide/C/virtualization.xml:797(ulink)

3830

4060

msgid "The OpenStack Wiki search"

3831

4061

msgstr ""

3832

4062

3833

#: serverguide/C/virtualization.xml:734(ulink)

4063

#: serverguide/C/virtualization.xml:802(ulink)

3834

4064

msgid "Launchpad bugs area"

3835

4065

msgstr ""

3836

4066

3837

#: serverguide/C/virtualization.xml:739(para)

4067

#: serverguide/C/virtualization.xml:807(para)

3838

4068

msgid "Join the IRC channel #openstack on freenode."

3839

4069

msgstr ""

3840

4070

3841

#: serverguide/C/virtualization.xml:750(ulink)

4071

#: serverguide/C/virtualization.xml:818(ulink)

3842

4072

msgid "Cloud Computing - Service models"

3843

4073

msgstr ""

3844

4074

3845

#: serverguide/C/virtualization.xml:756(ulink)

4075

#: serverguide/C/virtualization.xml:824(ulink)

3846

4076

msgid "OpenStack Compute"

3847

4077

msgstr ""

3848

4078

3849

#: serverguide/C/virtualization.xml:762(ulink)

4079

#: serverguide/C/virtualization.xml:830(ulink)

3850

4080

msgid "OpenStack Image Service"

3851

4081

msgstr ""

3852

4082

3853

#: serverguide/C/virtualization.xml:768(ulink)

4083

#: serverguide/C/virtualization.xml:836(ulink)

3854

4084

msgid "OpenStack Object Storage Administration Guide"

3855

4085

msgstr ""

3856

4086

3857

#: serverguide/C/virtualization.xml:774(ulink)

4087

#: serverguide/C/virtualization.xml:842(ulink)

3858

4088

msgid "Installing OpenStack Object Storage on Ubuntu"

3859

4089

msgstr ""

3860

4090

3861

#: serverguide/C/virtualization.xml:780(ulink)

4091

#: serverguide/C/virtualization.xml:848(ulink)

3862

4092

msgid "http://cloudglossary.com/"

3863

4093

msgstr ""

3864

4094

3865

#: serverguide/C/virtualization.xml:790(title)

4095

#: serverguide/C/virtualization.xml:858(title)

3866

4096

msgid "LXD"

3867

4097

msgstr ""

3868

4098

3869

#: serverguide/C/virtualization.xml:792(para)

4099

#: serverguide/C/virtualization.xml:860(para)

3870

4100

msgid ""

3871

4101

"LXD (pronounced lex-dee) is the lightervisor, or lightweight container "

3872

4102

"hypervisor. While this claim has been controversial, it has been <ulink "

3876

4106

"url=\"https://help.ubuntu.com/lts/serverguide/lxc.html\">LXC</ulink>."

3877

4107

msgstr ""

3878

4108

3879

#: serverguide/C/virtualization.xml:801(para)

4109

#: serverguide/C/virtualization.xml:869(para)

3880

4110

msgid ""

3881

4111

"LXC (lex-see) is a program which creates and administers \"containers\" on a "

3882

4112

"local system. It also provides an API to allow higher level managers, such "

3884

4114

"while comparing LXD to libvirt."

3885

4115

msgstr ""

3886

4116

3887

#: serverguide/C/virtualization.xml:808(para)

4117

#: serverguide/C/virtualization.xml:876(para)

3888

4118

msgid ""

3889

4119

"The LXC API deals with a 'container'. The LXD API deals with 'remotes', "

3890

4120

"which serve images and containers. This extends the LXC functionality over "

3892

4122

"and container image publishing."

3893

4123

msgstr ""

3894

4124

3895

#: serverguide/C/virtualization.xml:815(para)

4125

#: serverguide/C/virtualization.xml:883(para)

3896

4126

msgid ""

3897

4127

"LXD uses LXC under the covers for some container management tasks. However, "

3898

4128

"it keeps its own container configuration information and has its own "

3901

4131

"LXD on Ubuntu systems."

3902

4132

msgstr ""

3903

4133

3904

#: serverguide/C/virtualization.xml:823(title)

4134

#: serverguide/C/virtualization.xml:891(title)

3905

4135

msgid "Online Resources"

3906

4136

msgstr ""

3907

4137

3908

#: serverguide/C/virtualization.xml:825(para)

4138

#: serverguide/C/virtualization.xml:893(para)

3909

4139

msgid ""

3910

4140

"There is excellent documentation for <ulink "

3911

4141

"url=\"http://github.com/lxc/lxd\">getting started with LXD</ulink> in the "

3919

4149

"juju</ulink>."

3920

4150

msgstr ""

3921

4151

3922

#: serverguide/C/virtualization.xml:832(para)

4152

#: serverguide/C/virtualization.xml:900(para)

3923

4153

msgid ""

3924

4154

"This document will offer an Ubuntu Server-specific view of LXD, focusing on "

3925

4155

"administration."

3926

4156

msgstr ""

3927

4157

3928

#: serverguide/C/virtualization.xml:840(para)

4158

#: serverguide/C/virtualization.xml:908(para)

3929

4159

msgid ""

3930

4160

"LXD is pre-installed on Ubuntu Server cloud images. On other systems, the "

3931

4161

"lxd package can be installed using:"

3932

4162

msgstr ""

3933

4163

3934

#: serverguide/C/virtualization.xml:846(command)

4164

#: serverguide/C/virtualization.xml:914(command)

3935

4165

msgid "sudo apt install lxd"

3936

4166

msgstr ""

3937

4167

3938

#: serverguide/C/virtualization.xml:851(para)

4168

#: serverguide/C/virtualization.xml:919(para)

3939

4169

msgid ""

3940

4170

"This will install LXD as well as the recommended dependencies, including the "

3941

4171

"LXC library and lxcfs."

3942

4172

msgstr ""

3943

4173

3944

#: serverguide/C/virtualization.xml:857(title)

4174

#: serverguide/C/virtualization.xml:925(title)

3945

4175

msgid "Kernel preparation"

3946

4176

msgstr ""

3947

4177

3948

#: serverguide/C/virtualization.xml:859(para)

4178

#: serverguide/C/virtualization.xml:927(para)

3949

4179

msgid ""

3950

4180

"In general, Ubuntu 16.04 should have all the desired features enabled by "

3951

4181

"default. One exception to this is that in order to enable swap accounting "

3955

4185

"then running 'update-grub' as root and rebooting."

3956

4186

msgstr ""

3957

4187

3958

#: serverguide/C/virtualization.xml:871(para)

4188

#: serverguide/C/virtualization.xml:939(para)

3959

4189

msgid ""

3960

4190

"By default, LXD is installed listening on a local UNIX socket, which members "

3961

4191

"of group LXD can talk to. It has no trust password setup. And it uses the "

3964

4194

"will allow you to choose:"

3965

4195

msgstr ""

3966

4196

3967

#: serverguide/C/virtualization.xml:881(para)

4197

#: serverguide/C/virtualization.xml:949(para)

3968

4198

msgid ""

3969

4199

"Directory or <ulink url=\"http://open-zfs.org\">ZFS</ulink> container "

3970

4200

"backend. If you choose ZFS, you can choose which block devices to use, or "

3971

4201

"the size of a file to use as backing store."

3972

4202

msgstr ""

3973

4203

3974

#: serverguide/C/virtualization.xml:885(para)

4204

#: serverguide/C/virtualization.xml:953(para)

3975

4205

msgid "Availability over the network"

3976

4206

msgstr ""

3977

4207

3978

#: serverguide/C/virtualization.xml:887(para)

4208

#: serverguide/C/virtualization.xml:955(para)

3979

4209

msgid ""

3980

4210

"A 'trust password' used by remote clients to vouch for their client "

3981

4211

"certificate"

3982

4212

msgstr ""

3983

4213

3984

#: serverguide/C/virtualization.xml:891(para)

4214

#: serverguide/C/virtualization.xml:959(para)

3985

4215

msgid ""

3986

4216

"You must run 'lxd init' as root. 'lxc' commands can be run as any user who "

3987

4217

"is member of group lxd. If user joe is not a member of group 'lxd', you may "

3988

4218

"run:"

3989

4219

msgstr ""

3990

4220

3991

#: serverguide/C/virtualization.xml:898(command)

4221

#: serverguide/C/virtualization.xml:966(command)

3992

4222

msgid "adduser joe lxd"

3993

4223

msgstr ""

3994

4224

3995

#: serverguide/C/virtualization.xml:903(para)

4225

#: serverguide/C/virtualization.xml:971(para)

3996

4226

msgid ""

3997

4227

"as root to change it. The new membership will take effect on the next login, "

3998

4228

"or after running 'newgrp lxd' from an existing login."

3999

4229

msgstr ""

4000

4230

4001

#: serverguide/C/virtualization.xml:908(para)

4231

#: serverguide/C/virtualization.xml:976(para)

4002

4232

msgid ""

4003

4233

"For more information on server, container, profile, and device "

4004

4234

"configuration, please refer to the definitive configuration provided with "

4007

4237

"link>"

4008

4238

msgstr ""

4009

4239

4010

#: serverguide/C/virtualization.xml:916(title)

4240

#: serverguide/C/virtualization.xml:984(title)

4011

4241

msgid "Creating your first container"

4012

4242

msgstr ""

4013

4243

4014

#: serverguide/C/virtualization.xml:918(para)

4244

#: serverguide/C/virtualization.xml:986(para)

4015

4245

msgid "This section will describe the simplest container tasks."

4016

4246

msgstr ""

4017

4247

4018

#: serverguide/C/virtualization.xml:922(title)

4248

#: serverguide/C/virtualization.xml:990(title)

4019

4249

msgid "Creating a container"

4020

4250

msgstr ""

4021

4251

4022

#: serverguide/C/virtualization.xml:924(para)

4252

#: serverguide/C/virtualization.xml:992(para)

4023

4253

msgid ""

4024

4254

"Every new container is created based on either an image, an existing "

4025

4255

"container, or a container snapshot. At install time, LXD is configured with "

4026

4256

"the following image servers:"

4027

4257

msgstr ""

4028

4258

4029

#: serverguide/C/virtualization.xml:932(para)

4259

#: serverguide/C/virtualization.xml:1000(para)

4030

4260

msgid ""

4031

4261

"<filename>ubuntu</filename>: this serves official Ubuntu server cloud image "

4032

4262

"releases."

4033

4263

msgstr ""

4034

4264

4035

#: serverguide/C/virtualization.xml:935(para)

4265

#: serverguide/C/virtualization.xml:1003(para)

4036

4266

msgid ""

4037

4267

"<filename>ubuntu-daily</filename>: this serves official Ubuntu server cloud "

4038

4268

"images of the daily development releases."

4039

4269

msgstr ""

4040

4270

4041

#: serverguide/C/virtualization.xml:939(para)

4271

#: serverguide/C/virtualization.xml:1007(para)

4042

4272

msgid ""

4043

4273

"<filename>images</filename>: this is a default-installed alias for "

4044

4274

"images.linuxcontainers.org. This is serves classical lxc images built using "

4047

4277

"recommended server for Ubuntu images."

4048

4278

msgstr ""

4049

4279

4050

#: serverguide/C/virtualization.xml:947(para)

4280

#: serverguide/C/virtualization.xml:1015(para)

4051

4281

msgid "The command to create and start a container is"

4052

4282

msgstr ""

4053

4283

4054

#: serverguide/C/virtualization.xml:952(command)

4284

#: serverguide/C/virtualization.xml:1020(command)

4055

4285

msgid "lxc launch remote:image containername"

4056

4286

msgstr ""

4057

4287

4058

#: serverguide/C/virtualization.xml:957(para)

4288

#: serverguide/C/virtualization.xml:1025(para)

4059

4289

msgid ""

4060

4290

"Images are identified by their hash, but are also aliased. The 'ubuntu' "

4061

4291

"server knows many aliases such as '16.04' and 'xenial'. A list of all images "

4062

4292

"available from the Ubuntu Server can be seen using:"

4063

4293

msgstr ""

4064

4294

4065

#: serverguide/C/virtualization.xml:964(command) serverguide/C/virtualization.xml:1488(command)

4295

#: serverguide/C/virtualization.xml:1032(command) serverguide/C/virtualization.xml:1556(command)

4066

4296

msgid "lxc image list ubuntu:"

4067

4297

msgstr ""

4068

4298

4069

#: serverguide/C/virtualization.xml:969(para)

4299

#: serverguide/C/virtualization.xml:1037(para)

4070

4300

msgid ""

4071

4301

"To see more information about a particular image, including all the aliases "

4072

4302

"it is known by, you can use:"

4073

4303

msgstr ""

4074

4304

4075

#: serverguide/C/virtualization.xml:975(command)

4305

#: serverguide/C/virtualization.xml:1043(command)

4076

4306

msgid "lxc image info ubuntu:xenial"

4077

4307

msgstr ""

4078

4308

4079

#: serverguide/C/virtualization.xml:980(para)

4309

#: serverguide/C/virtualization.xml:1048(para)

4080

4310

msgid ""

4081

4311

"You can generally refer to an Ubuntu image using the release name ('xenial') "

4082

4312

"or the release number (16.04). In addition, 'lts' is an alias for the latest "

4084

4314

"the desired architecture:"

4085

4315

msgstr ""

4086

4316

4087

#: serverguide/C/virtualization.xml:988(command)

4317

#: serverguide/C/virtualization.xml:1056(command)

4088

4318

msgid "lxc image info ubuntu:lts/arm64"

4089

4319

msgstr ""

4090

4320

4091

#: serverguide/C/virtualization.xml:993(para)

4321

#: serverguide/C/virtualization.xml:1061(para)

4092

4322

msgid "Now, let's start our first container:"

4093

4323

msgstr ""

4094

4324

4095

#: serverguide/C/virtualization.xml:998(command)

4325

#: serverguide/C/virtualization.xml:1066(command)

4096

4326

msgid "lxc launch ubuntu:xenial x1"

4097

4327

msgstr ""

4098

4328

4099

#: serverguide/C/virtualization.xml:1003(para)

4329

#: serverguide/C/virtualization.xml:1071(para)

4100

4330

msgid ""

4101

4331

"This will download the official current Xenial cloud image for your current "

4102

4332

"architecture, then create a container using that image, and finally start "

4103

4333

"it. Once the command returns, you can see it using:"

4104

4334

msgstr ""

4105

4335

4106

#: serverguide/C/virtualization.xml:1010(command)

4336

#: serverguide/C/virtualization.xml:1078(command)

4107

4337

msgid "lxc list lxc info x1"

4108

4338

msgstr ""

4109

4339

4110

#: serverguide/C/virtualization.xml:1016(para)

4340

#: serverguide/C/virtualization.xml:1084(para)

4111

4341

msgid "and open a shell in it using:"

4112

4342

msgstr ""

4113

4343

4114

#: serverguide/C/virtualization.xml:1021(command)

4344

#: serverguide/C/virtualization.xml:1089(command)

4115

4345

msgid "lxc exec x1 bash"

4116

4346

msgstr ""

4117

4347

4118

#: serverguide/C/virtualization.xml:1026(para)

4348

#: serverguide/C/virtualization.xml:1094(para)

4119

4349

msgid ""

4120

4350

"The try-it page gives a full synopsis of the commands you can use to "

4121

4351

"administer containers."

4122

4352

msgstr ""

4123

4353

4124

#: serverguide/C/virtualization.xml:1031(para)

4354

#: serverguide/C/virtualization.xml:1099(para)

4125

4355

msgid ""

4126

4356

"Now that the 'xenial' image has been downloaded, it will be kept in sync "

4127

4357

"until no new containers have been created based on it for (by default) 10 "

4128

4358

"days. After that, it will be deleted."

4129

4359

msgstr ""

4130

4360

4131

#: serverguide/C/virtualization.xml:1039(title)

4361

#: serverguide/C/virtualization.xml:1107(title)

4132

4362

msgid "LXD Server Configuration"

4133

4363

msgstr ""

4134

4364

4135

#: serverguide/C/virtualization.xml:1041(para)

4365

#: serverguide/C/virtualization.xml:1109(para)

4136

4366

msgid ""

4137

4367

"By default, LXD is socket activated and configured to listen only on a local "

4138

4368

"UNIX socket. While LXD may not be running when you first look at the process "

4139

4369

"listing, any LXC command will start it up. For instance:"

4140

4370

msgstr ""

4141

4371

4142

#: serverguide/C/virtualization.xml:1048(command)

4372

#: serverguide/C/virtualization.xml:1116(command)

4143

4373

msgid "lxc list"

4144

4374

msgstr ""

4145

4375

4146

#: serverguide/C/virtualization.xml:1053(para)

4376

#: serverguide/C/virtualization.xml:1121(para)

4147

4377

msgid ""

4148

4378

"This will create your client certificate and contact the LXD server for a "

4149

4379

"list of containers. To make the server accessible over the network you can "

4150

4380

"set the http port using:"

4151

4381

msgstr ""

4152

4382

4153

#: serverguide/C/virtualization.xml:1060(command)

4383

#: serverguide/C/virtualization.xml:1128(command)

4154

4384

msgid "lxc config set core.https_address :8443"

4155

4385

msgstr ""

4156

4386

4157

#: serverguide/C/virtualization.xml:1065(para)

4387

#: serverguide/C/virtualization.xml:1133(para)

4158

4388

msgid "This will tell LXD to listen to port 8843 on all addresses."

4159

4389

msgstr ""

4160

4390

4161

#: serverguide/C/virtualization.xml:1069(title)

4391

#: serverguide/C/virtualization.xml:1137(title)

4162

4392

msgid "Authentication"

4163

4393

msgstr ""

4164

4394

4165

#: serverguide/C/virtualization.xml:1071(para)

4395

#: serverguide/C/virtualization.xml:1139(para)

4166

4396

msgid ""

4167

4397

"By default, LXD will allow all members of group 'lxd' (which by default "

4168

4398

"includes all members of group admin) to talk to it over the UNIX socket. "

4170

4400

"certificates."

4171

4401

msgstr ""

4172

4402

4173

#: serverguide/C/virtualization.xml:1077(para)

4403

#: serverguide/C/virtualization.xml:1145(para)

4174

4404

msgid ""

4175

4405

"Before client c1 wishes to use remote r1, r1 must be registered using:"

4176

4406

msgstr ""

4177

4407

4178

#: serverguide/C/virtualization.xml:1082(command)

4408

#: serverguide/C/virtualization.xml:1150(command)

4179

4409

msgid "lxc remote add r1 r1.example.com:8443"

4180

4410

msgstr ""

4181

4411

4182

#: serverguide/C/virtualization.xml:1087(para)

4412

#: serverguide/C/virtualization.xml:1155(para)

4183

4413

msgid ""

4184

4414

"The fingerprint of r1's certificate will be shown, to allow the user at c1 "

4185

4415

"to reject a false certificate. The server in turn will verify that c1 may be "

4187

4417

"already-registered client, using:"

4188

4418

msgstr ""

4189

4419

4190

#: serverguide/C/virtualization.xml:1095(command)

4420

#: serverguide/C/virtualization.xml:1163(command)

4191

4421

msgid "lxc config trust add r1 certfile.crt"

4192

4422

msgstr ""

4193

4423

4194

#: serverguide/C/virtualization.xml:1100(para)

4424

#: serverguide/C/virtualization.xml:1168(para)

4195

4425

msgid ""

4196

4426

"Now when the client adds r1 as a known remote, it will not need to provide a "

4197

4427

"password as it is already trusted by the server."

4198

4428

msgstr ""

4199

4429

4200

#: serverguide/C/virtualization.xml:1105(para)

4430

#: serverguide/C/virtualization.xml:1173(para)

4201

4431

msgid ""

4202

4432

"The other is to configure a 'trust password' with r1, either at initial "

4203

4433

"configuration using 'lxd init', or after the fact using"

4204

4434

msgstr ""

4205

4435

4206

#: serverguide/C/virtualization.xml:1111(command)

4436

#: serverguide/C/virtualization.xml:1179(command)

4207

4437

msgid "lxc config set core.trust_password PASSWORD"

4208

4438

msgstr ""

4209

4439

4210

#: serverguide/C/virtualization.xml:1116(para)

4440

#: serverguide/C/virtualization.xml:1184(para)

4211

4441

msgid ""

4212

4442

"The password can then be provided when the client registers r1 as a known "

4213

4443

"remote."

4214

4444

msgstr ""

4215

4445

4216

#: serverguide/C/virtualization.xml:1123(title)

4446

#: serverguide/C/virtualization.xml:1191(title)

4217

4447

msgid "Backing store"

4218

4448

msgstr ""

4219

4449

4220

#: serverguide/C/virtualization.xml:1125(para)

4450

#: serverguide/C/virtualization.xml:1193(para)

4221

4451

msgid ""

4222

4452

"LXD supports several backing stores. The recommended backing store is ZFS, "

4223

4453

"however this is not available on all platforms. Supported backing stores "

4224

4454

"include:"

4225

4455

msgstr ""

4226

4456

4227

#: serverguide/C/virtualization.xml:1133(para)

4457

#: serverguide/C/virtualization.xml:1201(para)

4228

4458

msgid ""

4229

4459

"ext4: this is the default, and easiest to use. With an ext4 backing store, "

4230

4460

"containers and images are simply stored as directories on the host "

4232

4462

"and 10 containers will take up 10 times as much space as one container."

4233

4463

msgstr ""

4234

4464

4235

#: serverguide/C/virtualization.xml:1142(para)

4465

#: serverguide/C/virtualization.xml:1210(para)

4236

4466

msgid ""

4237

4467

"ZFS: if ZFS is supported on your architecture (amd64, arm64, or ppc64le), "

4238

4468

"you can set LXD up to use it using 'lxd init'. If you already have a ZFS "

4240

4470

"configuration key:"

4241

4471

msgstr ""

4242

4472

4243

#: serverguide/C/virtualization.xml:1150(command)

4473

#: serverguide/C/virtualization.xml:1218(command)

4244

4474

msgid "lxc config set storage.zfs_pool_name lxd"

4245

4475

msgstr ""

4246

4476

4247

#: serverguide/C/virtualization.xml:1155(para)

4477

#: serverguide/C/virtualization.xml:1223(para)

4248

4478

msgid ""

4249

4479

"With ZFS, launching a new container is fast because the filesystem starts as "

4250

4480

"a copy on write clone of the images' filesystem. Note that unless the "

4253

4483

"little of the actual filesystem data."

4254

4484

msgstr ""

4255

4485

4256

#: serverguide/C/virtualization.xml:1165(para)

4486

#: serverguide/C/virtualization.xml:1233(para)

4257

4487

msgid ""

4258

4488

"Btrfs: btrfs can be used with many of the same advantages as ZFS. To use "

4259

4489

"BTRFS as a LXD backing store, simply mount a Btrfs filesystem under "

4262

4492

"container."

4263

4493

msgstr ""

4264

4494

4265

#: serverguide/C/virtualization.xml:1175(para)

4495

#: serverguide/C/virtualization.xml:1243(para)

4266

4496

msgid ""

4267

4497

"LVM: To use a LVM volume group called 'lxd', you may tell LXD to use that "

4268

4498

"for containers and images using the command"

4269

4499

msgstr ""

4270

4500

4271

#: serverguide/C/virtualization.xml:1181(command)

4501

#: serverguide/C/virtualization.xml:1249(command)

4272

4502

msgid "lxc config set storage.lvm_vg_name lxd"

4273

4503

msgstr ""

4274

4504

4275

#: serverguide/C/virtualization.xml:1186(para)

4505

#: serverguide/C/virtualization.xml:1254(para)

4276

4506

msgid ""

4277

4507

"When launching a new container, its rootfs will start as a lv clone. It is "

4278

4508

"immediately mounted so that the file uids can be shifted, then unmounted. "

4279

4509

"Container snapshots also are created as lv snapshots."

4280

4510

msgstr ""

4281

4511

4282

#: serverguide/C/virtualization.xml:1196(title)

4512

#: serverguide/C/virtualization.xml:1264(title)

4283

4513

msgid "Container configuration"

4284

4514

msgstr ""

4285

4515

4286

#: serverguide/C/virtualization.xml:1198(para)

4516

#: serverguide/C/virtualization.xml:1266(para)

4287

4517

msgid ""

4288

4518

"Containers are configured according to a set of profiles, described in the "

4289

4519

"next section, and a set of container-specific configuration. Profiles are "

4291

4521

"configuration."

4292

4522

msgstr ""

4293

4523

4294

#: serverguide/C/virtualization.xml:1205(para)

4524

#: serverguide/C/virtualization.xml:1273(para)

4295

4525

msgid ""

4296

4526

"Container configuration includes properties like the architecture, limits on "

4297

4527

"resources such as CPU and RAM, security details including apparmor "

4298

4528

"restriction overrides, and devices to apply to the container."

4299

4529

msgstr ""

4300

4530

4301

#: serverguide/C/virtualization.xml:1211(para)

4531

#: serverguide/C/virtualization.xml:1279(para)

4302

4532

msgid ""

4303

4533

"Devices can be of several types, including UNIX character, UNIX block, "

4304

4534

"network interface, or 'disk'. In order to insert a host mount into a "

4306

4536

"in container c1 at /opt, you could use:"

4307

4537

msgstr ""

4308

4538

4309

#: serverguide/C/virtualization.xml:1219(command)

4539

#: serverguide/C/virtualization.xml:1287(command)

4310

4540

msgid "lxc config device add c1 opt disk source=/opt path=opt"

4311

4541

msgstr ""

4312

4542

4313

#: serverguide/C/virtualization.xml:1224(para)

4543

#: serverguide/C/virtualization.xml:1292(para)

4314

4544

msgid "See:"

4315

4545

msgstr ""

4316

4546

4317

#: serverguide/C/virtualization.xml:1229(command)

4547

#: serverguide/C/virtualization.xml:1297(command)

4318

4548

msgid "lxc help config"

4319

4549

msgstr ""

4320

4550

4321

#: serverguide/C/virtualization.xml:1234(para)

4551

#: serverguide/C/virtualization.xml:1302(para)

4322

4552

msgid ""

4323

4553

"for more information about editing container configurations. You may also "

4324

4554

"use:"

4325

4555

msgstr ""

4326

4556

4327

#: serverguide/C/virtualization.xml:1240(command)

4557

#: serverguide/C/virtualization.xml:1308(command)

4328

4558

msgid "lxc config edit c1"

4329

4559

msgstr ""

4330

4560

4331

#: serverguide/C/virtualization.xml:1245(para)

4561

#: serverguide/C/virtualization.xml:1313(para)

4332

4562

msgid ""

4333

4563

"to edit the whole of c1's configuration in your specified $EDITOR. Comments "

4334

4564

"at the top of the configuration will show examples of correct syntax to help "

4336

4566

"valid when the $EDITOR is exited, then $EDITOR will be restarted."

4337

4567

msgstr ""

4338

4568

4339

#: serverguide/C/virtualization.xml:1255(title) serverguide/C/security.xml:1065(title)

4569

#: serverguide/C/virtualization.xml:1323(title) serverguide/C/security.xml:1065(title)

4340

4570

msgid "Profiles"

4341

4571

msgstr ""

4342

4572

4343

#: serverguide/C/virtualization.xml:1257(para)

4573

#: serverguide/C/virtualization.xml:1325(para)

4344

4574

msgid ""

4345

4575

"Profiles are named collections of configurations which may be applied to "

4346

4576

"more than one container. For instance, all containers created with 'lxc "

4348

4578

"interface 'eth0'."

4349

4579

msgstr ""

4350

4580

4351

#: serverguide/C/virtualization.xml:1264(para)

4581

#: serverguide/C/virtualization.xml:1332(para)

4352

4582

msgid ""

4353

4583

"To mask a device which would be inherited from a profile but which should "

4354

4584

"not be in the final container, define a device by the same name but of type "

4355

4585

"'none':"

4356

4586

msgstr ""

4357

4587

4358

#: serverguide/C/virtualization.xml:1271(command)

4588

#: serverguide/C/virtualization.xml:1339(command)

4359

4589

msgid "lxc config device add c1 eth1 none"

4360

4590

msgstr ""

4361

4591

4362

#: serverguide/C/virtualization.xml:1277(title) serverguide/C/virtualization.xml:1869(title)

4592

#: serverguide/C/virtualization.xml:1345(title) serverguide/C/virtualization.xml:1937(title)

4363

4593

msgid "Nesting"

4364

4594

msgstr ""

4365

4595

4366

#: serverguide/C/virtualization.xml:1279(para)

4596

#: serverguide/C/virtualization.xml:1347(para)

4367

4597

msgid ""

4368

4598

"Containers all share the same host kernel. This means that there is always "

4369

4599

"an inherent trade-off between features exposed to the container and host "

4373

4603

"must be set to true:"

4374

4604

msgstr ""

4375

4605

4376

#: serverguide/C/virtualization.xml:1289(command)

4606

#: serverguide/C/virtualization.xml:1357(command)

4377

4607

msgid "lxc config set container1 security.nesting true"

4378

4608

msgstr ""

4379

4609

4380

#: serverguide/C/virtualization.xml:1294(para)

4610

#: serverguide/C/virtualization.xml:1362(para)

4381

4611

msgid "Once this is done, container1 will be able to start sub-containers."

4382

4612

msgstr ""

4383

4613

4384

#: serverguide/C/virtualization.xml:1298(para)

4614

#: serverguide/C/virtualization.xml:1366(para)

4385

4615

msgid ""

4386

4616

"In order to run unprivileged (the default in LXD) containers nested under an "

4387

4617

"unprivileged container, you will need to ensure a wide enough UID mapping. "

4388

4618

"Please see the 'UID mapping' section below."

4389

4619

msgstr ""

4390

4620

4391

#: serverguide/C/virtualization.xml:1304(title)

4621

#: serverguide/C/virtualization.xml:1372(title)

4392

4622

msgid "Docker"

4393

4623

msgstr ""

4394

4624

4395

#: serverguide/C/virtualization.xml:1306(para)

4625

#: serverguide/C/virtualization.xml:1374(para)

4396

4626

msgid ""

4397

4627

"In order to facilitate running docker containers inside a LXD container, a "

4398

4628

"'docker' profile is provided. To launch a new container with the docker "

4399

4629

"profile, you can run:"

4400

4630

msgstr ""

4401

4631

4402

#: serverguide/C/virtualization.xml:1313(command)

4632

#: serverguide/C/virtualization.xml:1381(command)

4403

4633

msgid "lxc launch xenial container1 -p default -p docker"

4404

4634

msgstr ""

4405

4635

4406

#: serverguide/C/virtualization.xml:1318(para)

4636

#: serverguide/C/virtualization.xml:1386(para)

4407

4637

msgid ""

4408

4638

"Note that currently the docker package in Ubuntu 16.04 is patched to "

4409

4639

"facilitate running in a container. This support is expected to land upstream "

4410

4640

"soon."

4411

4641

msgstr ""

4412

4642

4413

#: serverguide/C/virtualization.xml:1324(para)

4643

#: serverguide/C/virtualization.xml:1392(para)

4414

4644

msgid ""

4415

4645

"Note that 'cgroup namespace' support is also required. This is available in "

4416

4646

"the 16.04 kernel as well as in the 4.6 upstream source."

4417

4647

msgstr ""

4418

4648

4419

#: serverguide/C/virtualization.xml:1333(title)

4649

#: serverguide/C/virtualization.xml:1401(title)

4420

4650

msgid "Limits"

4421

4651

msgstr ""

4422

4652

4423

#: serverguide/C/virtualization.xml:1335(para)

4653

#: serverguide/C/virtualization.xml:1403(para)

4424

4654

msgid ""

4425

4655

"LXD supports flexible constraints on the resources which containers can "

4426

4656

"consume. The limits come in the following categories:"

4427

4657

msgstr ""

4428

4658

4429

#: serverguide/C/virtualization.xml:1342(para)

4659

#: serverguide/C/virtualization.xml:1410(para)

4430

4660

msgid "CPU: limit cpu available to the container in several ways."

4431

4661

msgstr ""

4432

4662

4433

#: serverguide/C/virtualization.xml:1345(para)

4663

#: serverguide/C/virtualization.xml:1413(para)

4434

4664

msgid "Disk: configure the priority of I/O requests under load"

4435

4665

msgstr ""

4436

4666

4437

#: serverguide/C/virtualization.xml:1348(para)

4667

#: serverguide/C/virtualization.xml:1416(para)

4438

4668

msgid "RAM: configure memory and swap availability"

4439

4669

msgstr ""

4440

4670

4441

#: serverguide/C/virtualization.xml:1351(para)

4671

#: serverguide/C/virtualization.xml:1419(para)

4442

4672

msgid "Network: configure the network priority under load"

4443

4673

msgstr ""

4444

4674

4445

#: serverguide/C/virtualization.xml:1354(para)

4675

#: serverguide/C/virtualization.xml:1422(para)

4446

4676

msgid "Processes: limit the number of concurrent processes in the container."

4447

4677

msgstr ""

4448

4678

4449

#: serverguide/C/virtualization.xml:1358(para)

4679

#: serverguide/C/virtualization.xml:1426(para)

4450

4680

msgid ""

4451

4681

"For a full list of limits known to LXD, see <ulink "

4452

4682

"url=\"https://github.com/lxc/lxd/blob/master/doc/configuration.md\"> the "

4453

4683

"configuration documentation</ulink>."

4454

4684

msgstr ""

4455

4685

4456

#: serverguide/C/virtualization.xml:1366(title)

4686

#: serverguide/C/virtualization.xml:1434(title)

4457

4687

msgid "UID mappings and Privileged containers"

4458

4688

msgstr ""

4459

4689

4460

#: serverguide/C/virtualization.xml:1368(para)

4690

#: serverguide/C/virtualization.xml:1436(para)

4461

4691

msgid ""

4462

4692

"By default, LXD creates unprivileged containers. This means that root in the "

4463

4693

"container is a non-root UID on the host. It is privileged against the "

4467

4697

"the system call interface)"

4468

4698

msgstr ""

4469

4699

4470

#: serverguide/C/virtualization.xml:1377(para)

4700

#: serverguide/C/virtualization.xml:1445(para)

4471

4701

msgid ""

4472

4702

"Briefly, in an unprivileged container, 65536 UIDs are 'shifted' into the "

4473

4703

"container. For instance, UID 0 in the container may be 100000 on the host, "

4479

4709

"subuid(5) manual page</ulink>."

4480

4710

msgstr ""

4481

4711

4482

#: serverguide/C/virtualization.xml:1387(para)

4712

#: serverguide/C/virtualization.xml:1455(para)

4483

4713

msgid ""

4484

4714

"It is possible to request a container to run without a UID mapping by "

4485

4715

"setting the security.privileged flag to true:"

4486

4716

msgstr ""

4487

4717

4488

#: serverguide/C/virtualization.xml:1393(command)

4718

#: serverguide/C/virtualization.xml:1461(command)

4489

4719

msgid "lxc config set c1 security.privileged true"

4490

4720

msgstr ""

4491

4721

4492

#: serverguide/C/virtualization.xml:1398(para)

4722

#: serverguide/C/virtualization.xml:1466(para)

4493

4723

msgid ""

4494

4724

"Note however that in this case the root user in the container is the root "

4495

4725

"user on the host."

4496

4726

msgstr ""

4497

4727

4498

#: serverguide/C/virtualization.xml:1405(title) serverguide/C/virtualization.xml:2144(title)

4728

#: serverguide/C/virtualization.xml:1473(title) serverguide/C/virtualization.xml:2212(title)

4499

4729

msgid "Apparmor"

4500

4730

msgstr ""

4501

4731

4502

#: serverguide/C/virtualization.xml:1407(para)

4732

#: serverguide/C/virtualization.xml:1475(para)

4503

4733

msgid ""

4504

4734

"LXD confines containers by default with an apparmor profile which protects "

4505

4735

"containers from each other and the host from containers. For instance this "

4509

4739

"/proc/sysrq-trigger</filename>."

4510

4740

msgstr ""

4511

4741

4512

#: serverguide/C/virtualization.xml:1416(para)

4742

#: serverguide/C/virtualization.xml:1484(para)

4513

4743

msgid ""

4514

4744

"If the apparmor policy for a container needs to be modified for a container "

4515

4745

"c1, specific apparmor policy lines can be added in the 'raw.apparmor' "

4516

4746

"configuration key."

4517

4747

msgstr ""

4518

4748

4519

#: serverguide/C/virtualization.xml:1424(title)

4749

#: serverguide/C/virtualization.xml:1492(title)

4520

4750

msgid "Seccomp"

4521

4751

msgstr ""

4522

4752

4523

#: serverguide/C/virtualization.xml:1426(para)

4753

#: serverguide/C/virtualization.xml:1494(para)

4524

4754

msgid ""

4525

4755

"All containers are confined by a default seccomp policy. This policy "

4526

4756

"prevents some dangerous actions such as forced umounts, kernel module "

4529

4759

"seccomp policy - or none - can be requested using raw.lxc (see below)."

4530

4760

msgstr ""

4531

4761

4532

#: serverguide/C/virtualization.xml:1436(title)

4762

#: serverguide/C/virtualization.xml:1504(title)

4533

4763

msgid "Raw LXC configuration"

4534

4764

msgstr ""

4535

4765

4536

#: serverguide/C/virtualization.xml:1438(para)

4766

#: serverguide/C/virtualization.xml:1506(para)

4537

4767

msgid ""

4538

4768

"LXD configures containers for the best balance of host safety and container "

4539

4769

"usability. Whenever possible it is highly recommended to use the defaults, "

4546

4776

".html\"> the lxc.container.conf(5) manual page</ulink>."

4547

4777

msgstr ""

4548

4778

4549

#: serverguide/C/virtualization.xml:1457(title)

4779

#: serverguide/C/virtualization.xml:1525(title)

4550

4780

msgid "Images and containers"

4551

4781

msgstr ""

4552

4782

4553

#: serverguide/C/virtualization.xml:1459(para)

4783

#: serverguide/C/virtualization.xml:1527(para)

4554

4784

msgid ""

4555

4785

"LXD is image based. When you create your first container, you will generally "

4556

4786

"do so using an existing image. LXD comes pre-configured with three default "

4557

4787

"image remotes:"

4558

4788

msgstr ""

4559

4789

4560

#: serverguide/C/virtualization.xml:1467(para)

4790

#: serverguide/C/virtualization.xml:1535(para)

4561

4791

msgid ""

4562

4792

"ubuntu: This is a <ulink "

4563

4793

"url=\"https://launchpad.net/simplestreams\">simplestreams-based</ulink> "

4564

4794

"remote serving released ubuntu cloud images."

4565

4795

msgstr ""

4566

4796

4567

#: serverguide/C/virtualization.xml:1472(para)

4797

#: serverguide/C/virtualization.xml:1540(para)

4568

4798

msgid ""

4569

4799

"ubuntu-daily: This is another simplestreams based remote which serves "

4570

4800

"'daily' ubuntu cloud images. These provide quicker but potentially less "

4571

4801

"stable images."

4572

4802

msgstr ""

4573

4803

4574

#: serverguide/C/virtualization.xml:1478(para)

4804

#: serverguide/C/virtualization.xml:1546(para)

4575

4805

msgid ""

4576

4806

"images: This is a remote publishing best-effort container images for many "

4577

4807

"distributions, created using community-provided build scripts."

4578

4808

msgstr ""

4579

4809

4580

#: serverguide/C/virtualization.xml:1483(para)

4810

#: serverguide/C/virtualization.xml:1551(para)

4581

4811

msgid "To view the images available on one of these servers, you can use:"

4582

4812

msgstr ""

4583

4813

4584

#: serverguide/C/virtualization.xml:1493(para)

4814

#: serverguide/C/virtualization.xml:1561(para)

4585

4815

msgid ""

4586

4816

"Most of the images are known by several aliases for easier reference. To see "

4587

4817

"the full list of aliases, you can use"

4588

4818

msgstr ""

4589

4819

4590

#: serverguide/C/virtualization.xml:1499(command)

4820

#: serverguide/C/virtualization.xml:1567(command)

4591

4821

msgid "lxc image alias list images:"

4592

4822

msgstr ""

4593

4823

4594

#: serverguide/C/virtualization.xml:1504(para)

4824

#: serverguide/C/virtualization.xml:1572(para)

4595

4825

msgid ""

4596

4826

"Any alias or image fingerprint can be used to specify how to create the new "

4597

4827

"container. For instance, to create an amd64 Ubuntu 14.04 container, some "

4598

4828

"options are:"

4599

4829

msgstr ""

4600

4830

4601

#: serverguide/C/virtualization.xml:1511(command)

4831

#: serverguide/C/virtualization.xml:1579(command)

4602

4832

msgid ""

4603

4833

"lxc launch ubuntu:14.04 trusty1 lxc launch ubuntu:trusty trusty1 lxc launch "

4604

4834

"ubuntu:trusty/amd64 trusty1 lxc launch ubuntu:lts trusty1"

4605

4835

msgstr ""

4606

4836

4607

#: serverguide/C/virtualization.xml:1519(para)

4837

#: serverguide/C/virtualization.xml:1587(para)

4608

4838

msgid "The 'lts' alias always refers to the latest released LTS image."

4609

4839

msgstr ""

4610

4840

4611

#: serverguide/C/virtualization.xml:1523(title) serverguide/C/virtualization.xml:2352(title)

4841

#: serverguide/C/virtualization.xml:1591(title) serverguide/C/virtualization.xml:2420(title)

4612

4842

msgid "Snapshots"

4613

4843

msgstr ""

4614

4844

4615

#: serverguide/C/virtualization.xml:1525(para)

4845

#: serverguide/C/virtualization.xml:1593(para)

4616

4846

msgid ""

4617

4847

"Containers can be renamed and live-migrated using the 'lxc move' command:"

4618

4848

msgstr ""

4619

4849

4620

#: serverguide/C/virtualization.xml:1530(command)

4850

#: serverguide/C/virtualization.xml:1598(command)

4621

4851

msgid "lxc move c1 final-beta"

4622

4852

msgstr ""

4623

4853

4624

#: serverguide/C/virtualization.xml:1535(para)

4854

#: serverguide/C/virtualization.xml:1603(para)

4625

4855

msgid "They can also be snapshotted:"

4626

4856

msgstr ""

4627

4857

4628

#: serverguide/C/virtualization.xml:1540(command)

4858

#: serverguide/C/virtualization.xml:1608(command)

4629

4859

msgid "lxc snapshot c1 YYYY-MM-DD"

4630

4860

msgstr ""

4631

4861

4632

#: serverguide/C/virtualization.xml:1545(para)

4862

#: serverguide/C/virtualization.xml:1613(para)

4633

4863

msgid "Later changes to c1 can then be reverted by restoring the snapshot:"

4634

4864

msgstr ""

4635

4865

4636

#: serverguide/C/virtualization.xml:1550(command)

4866

#: serverguide/C/virtualization.xml:1618(command)

4637

4867

msgid "lxc restore u1 YYYY-MM-DD"

4638

4868

msgstr ""

4639

4869

4640

#: serverguide/C/virtualization.xml:1555(para)

4870

#: serverguide/C/virtualization.xml:1623(para)

4641

4871

msgid ""

4642

4872

"New containers can also be created by copying a container or snapshot:"

4643

4873

msgstr ""

4644

4874

4645

#: serverguide/C/virtualization.xml:1560(command)

4875

#: serverguide/C/virtualization.xml:1628(command)

4646

4876

msgid "lxc copy u1/YYYY-MM-DD testcontainer"

4647

4877

msgstr ""

4648

4878

4649

#: serverguide/C/virtualization.xml:1567(title)

4879

#: serverguide/C/virtualization.xml:1635(title)

4650

4880

msgid "Publishing images"

4651

4881

msgstr ""

4652

4882

4653

#: serverguide/C/virtualization.xml:1569(para)

4883

#: serverguide/C/virtualization.xml:1637(para)

4654

4884

msgid ""

4655

4885

"When a container or container snapshot is ready for consumption by others, "

4656

4886

"it can be published as a new image using;"

4657

4887

msgstr ""

4658

4888

4659

#: serverguide/C/virtualization.xml:1575(command)

4889

#: serverguide/C/virtualization.xml:1643(command)

4660

4890

msgid "lxc publish u1/YYYY-MM-DD --alias foo-2.0"

4661

4891

msgstr ""

4662

4892

4663

#: serverguide/C/virtualization.xml:1580(para)

4893

#: serverguide/C/virtualization.xml:1648(para)

4664

4894

msgid ""

4665

4895

"The published image will be private by default, meaning that LXD will not "

4666

4896

"allow clients without a trusted certificate to see them. If the image is "

4668

4898

"'public' flag can be set, either at publish time using"

4669

4899

msgstr ""

4670

4900

4671

#: serverguide/C/virtualization.xml:1588(command)

4901

#: serverguide/C/virtualization.xml:1656(command)

4672

4902

msgid "lxc publish u1/YYYY-MM-DD --alias foo-2.0 public=true"

4673

4903

msgstr ""

4674

4904

4675

#: serverguide/C/virtualization.xml:1593(para)

4905

#: serverguide/C/virtualization.xml:1661(para)

4676

4906

msgid "or after the fact using"

4677

4907

msgstr ""

4678

4908

4679

#: serverguide/C/virtualization.xml:1598(command)

4909

#: serverguide/C/virtualization.xml:1666(command)

4680

4910

msgid "lxc image edit foo-2.0"

4681

4911

msgstr ""

4682

4912

4683

#: serverguide/C/virtualization.xml:1603(para)

4913

#: serverguide/C/virtualization.xml:1671(para)

4684

4914

msgid "and changing the value of the public field."

4685

4915

msgstr ""

4686

4916

4687

#: serverguide/C/virtualization.xml:1609(title)

4917

#: serverguide/C/virtualization.xml:1677(title)

4688

4918

msgid "Image export and import"

4689

4919

msgstr ""

4690

4920

4691

#: serverguide/C/virtualization.xml:1611(para)

4921

#: serverguide/C/virtualization.xml:1679(para)

4692

4922

msgid "Image can be exported as, and imported from, tarballs:"

4693

4923

msgstr ""

4694

4924

4695

#: serverguide/C/virtualization.xml:1616(command)

4925

#: serverguide/C/virtualization.xml:1684(command)

4696

4926

msgid ""

4697

4927

"lxc image export foo-2.0 foo-2.0.tar.gz lxc image import foo-2.0.tar.gz --"

4698

4928

"alias foo-2.0 --public"

4699

4929

msgstr ""

4700

4930

4701

#: serverguide/C/virtualization.xml:1625(title) serverguide/C/virtualization.xml:2505(title) serverguide/C/mail.xml:390(title) serverguide/C/mail.xml:1698(title) serverguide/C/dns.xml:375(title)

4931

#: serverguide/C/virtualization.xml:1693(title) serverguide/C/virtualization.xml:2573(title) serverguide/C/mail.xml:390(title) serverguide/C/mail.xml:1698(title) serverguide/C/dns.xml:375(title)

4702

4932

msgid "Troubleshooting"

4703

4933

msgstr ""

4704

4934

4705

#: serverguide/C/virtualization.xml:1627(para)

4935

#: serverguide/C/virtualization.xml:1695(para)

4706

4936

msgid ""

4707

4937

"To view debug information about LXD itself, on a systemd based host use"

4708

4938

msgstr ""

4709

4939

4710

#: serverguide/C/virtualization.xml:1632(command)

4940

#: serverguide/C/virtualization.xml:1700(command)

4711

4941

msgid "journalctl -u LXD"

4712

4942

msgstr ""

4713

4943

4714

#: serverguide/C/virtualization.xml:1637(para)

4944

#: serverguide/C/virtualization.xml:1705(para)

4715

4945

msgid ""

4716

4946

"On an Upstart-based system, you can find the log in "

4717

4947

"<filename>/var/log/upstart/lxd.log</filename>. To make LXD provide much more "

4722

4952

"<filename>/etc/init/lxd.conf</filename>."

4723

4953

msgstr ""

4724

4954

4725

#: serverguide/C/virtualization.xml:1647(para)

4955

#: serverguide/C/virtualization.xml:1715(para)

4726

4956

msgid "Container logfiles for container c1 may be seen using:"

4727

4957

msgstr ""

4728

4958

4729

#: serverguide/C/virtualization.xml:1652(command)

4959

#: serverguide/C/virtualization.xml:1720(command)

4730

4960

msgid "lxc info c1 --show-log"

4731

4961

msgstr ""

4732

4962

4733

#: serverguide/C/virtualization.xml:1657(para)

4963

#: serverguide/C/virtualization.xml:1725(para)

4734

4964

msgid ""

4735

4965

"The configuration file which was used may be found under <filename> "

4736

4966

"/var/log/lxd/c1/lxc.conf</filename> while apparmor profiles can be found in "

4738

4968

"profiles in <filename> /var/lib/lxd/security/seccomp/c1</filename>."

4739

4969

msgstr ""

4740

4970

4741

#: serverguide/C/virtualization.xml:1667(title)

4971

#: serverguide/C/virtualization.xml:1735(title)

4742

4972

msgid "LXC"

4743

4973

msgstr ""

4744

4974

4745

#: serverguide/C/virtualization.xml:1669(para)

4975

#: serverguide/C/virtualization.xml:1737(para)

4746

4976

msgid ""

4747

4977

"Containers are a lightweight virtualization technology. They are more akin "

4748

4978

"to an enhanced chroot than to full virtualization like Qemu or VMware, both "

4754

4984

"and OpenVZ functionality."

4755

4985

msgstr ""

4756

4986

4757

#: serverguide/C/virtualization.xml:1679(para)

4987

#: serverguide/C/virtualization.xml:1747(para)

4758

4988

msgid ""

4759

4989

"There are two user-space implementations of containers, each exploiting the "

4760

4990

"same kernel features. Libvirt allows the use of containers through the LXC "

4765

4995

"there are peculiarities which can cause confusion."

4766

4996

msgstr ""

4767

4997

4768

#: serverguide/C/virtualization.xml:1688(para)

4998

#: serverguide/C/virtualization.xml:1756(para)

4769

4999

msgid ""

4770

5000

"In this document we will mainly describe the <application>lxc</application> "

4771

5001

"package. Use of libvirt-lxc is not generally recommended due to a lack of "

4772

5002

"Apparmor protection for libvirt-lxc containers."

4773

5003

msgstr ""

4774

5004

4775

#: serverguide/C/virtualization.xml:1693(para)

5005

#: serverguide/C/virtualization.xml:1761(para)

4776

5006

msgid "In this document, a container name will be shown as CN, C1, or C2."

4777

5007

msgstr ""

4778

5008

4779

#: serverguide/C/virtualization.xml:1699(para)

5009

#: serverguide/C/virtualization.xml:1767(para)

4780

5010

msgid "The <application>lxc</application> package can be installed using"

4781

5011

msgstr ""

4782

5012

4783

#: serverguide/C/virtualization.xml:1703(command)

5013

#: serverguide/C/virtualization.xml:1771(command)

4784

5014

msgid "sudo apt install lxc"

4785

5015

msgstr ""

4786

5016

4787

#: serverguide/C/virtualization.xml:1708(para)

5017

#: serverguide/C/virtualization.xml:1776(para)

4788

5018

msgid ""

4789

5019

"This will pull in the required and recommended dependencies, as well as set "

4790

5020

"up a network bridge for containers to use. If you wish to use unprivileged "

4793

5023

"containers to a bridge (see <xref linkend=\"lxc-unpriv\"/>)."

4794

5024

msgstr ""

4795

5025

4796

#: serverguide/C/virtualization.xml:1718(title) serverguide/C/vcs.xml:111(title)

5026

#: serverguide/C/virtualization.xml:1786(title) serverguide/C/vcs.xml:111(title)

4797

5027

msgid "Basic usage"

4798

5028

msgstr ""

4799

5029

4800

#: serverguide/C/virtualization.xml:1719(para)

5030

#: serverguide/C/virtualization.xml:1787(para)

4801

5031

msgid ""

4802

5032

"LXC can be used in two distinct ways - privileged, by running the lxc "

4803

5033

"commands as the root user; or unprivileged, by running the lxc commands as a "

4808

5038

"in the container is mapped to a non-root userid on the host."

4809

5039

msgstr ""

4810

5040

4811

#: serverguide/C/virtualization.xml:1731(title)

5041

#: serverguide/C/virtualization.xml:1799(title)

4812

5042

msgid "Basic privileged usage"

4813

5043

msgstr ""

4814

5044

4815

#: serverguide/C/virtualization.xml:1732(para)

5045

#: serverguide/C/virtualization.xml:1800(para)

4816

5046

msgid "To create a privileged container, you can simply do:"

4817

5047

msgstr ""

4818

5048

4819

#: serverguide/C/virtualization.xml:1736(command)

5049

#: serverguide/C/virtualization.xml:1804(command)

4820

5050

msgid "sudo lxc-create --template download --name u1"

4821

5051

msgstr ""

4822

5052

4823

#: serverguide/C/virtualization.xml:1740(command)

5053

#: serverguide/C/virtualization.xml:1808(command)

4824

5054

msgid "sudo lxc-create -t download -n u1"

4825

5055

msgstr ""

4826

5056

4827

#: serverguide/C/virtualization.xml:1735(screen)

5057

#: serverguide/C/virtualization.xml:1803(screen)

4828

5058

#, no-wrap

4829

5059

msgid ""

4830

5060

"\n"

4833

5063

"<placeholder-2/>\n"

4834

5064

msgstr ""

4835

5065

4836

#: serverguide/C/virtualization.xml:1744(para)

5066

#: serverguide/C/virtualization.xml:1812(para)

4837

5067

msgid ""

4838

5068

"This will interactively ask for a container root filesystem type to download "

4839

5069

"- in particular the distribution, release, and architecture. To create the "

4841

5071

"line:"

4842

5072

msgstr ""

4843

5073

4844

#: serverguide/C/virtualization.xml:1751(command)

5074

#: serverguide/C/virtualization.xml:1819(command)

4845

5075

msgid ""

4846

5076

"sudo lxc-create -t download -n u1 -- --dist ubuntu --release xenial --arch "

4847

5077

"amd64"

4848

5078

msgstr ""

4849

5079

4850

#: serverguide/C/virtualization.xml:1755(command)

5080

#: serverguide/C/virtualization.xml:1823(command)

4851

5081

msgid "sudo lxc-create -t download -n u1 -- -d ubuntu -r xenial -a amd64"

4852

5082

msgstr ""

4853

5083

4854

#: serverguide/C/virtualization.xml:1750(screen)

5084

#: serverguide/C/virtualization.xml:1818(screen)

4855

5085

#, no-wrap

4856

5086

msgid ""

4857

5087

"\n"

4860

5090

"<placeholder-2/>\n"

4861

5091

msgstr ""

4862

5092

4863

#: serverguide/C/virtualization.xml:1760(para)

5093

#: serverguide/C/virtualization.xml:1828(para)

4864

5094

msgid ""

4865

5095

"You can now use <command>lxc-ls</command> to list containers, <command>lxc-"

4866

5096

"info</command> to obtain detailed container information, <command>lxc-"

4872

5102

"look like:"

4873

5103

msgstr ""

4874

5104

4875

#: serverguide/C/virtualization.xml:1771(command)

5105

#: serverguide/C/virtualization.xml:1839(command)

4876

5106

msgid ""

4877

5107

"sudo lxc-ls --fancy sudo lxc-start --name u1 --daemon sudo lxc-info --name "

4878

5108

"u1 sudo lxc-stop --name u1 sudo lxc-destroy --name u1"

4879

5109

msgstr ""

4880

5110

4881

#: serverguide/C/virtualization.xml:1783(title)

5111

#: serverguide/C/virtualization.xml:1851(title)

4882

5112

msgid "User namespaces"

4883

5113

msgstr ""

4884

5114

4885

#: serverguide/C/virtualization.xml:1784(para)

5115

#: serverguide/C/virtualization.xml:1852(para)

4886

5116

msgid ""

4887

5117

"Unprivileged containers allow users to create and administer containers "

4888

5118

"without having any root privilege. The feature underpinning this is called "

4899

5129

"convention started at id 100000 to avoid conflicting with system users."

4900

5130

msgstr ""

4901

5131

4902

#: serverguide/C/virtualization.xml:1802(para)

5132

#: serverguide/C/virtualization.xml:1870(para)

4903

5133

msgid ""

4904

5134

"If a user was created on an earlier release, it can be granted a range of "

4905

5135

"ids using <command>usermod</command>, as follows:"

4906

5136

msgstr ""

4907

5137

4908

#: serverguide/C/virtualization.xml:1807(command)

5138

#: serverguide/C/virtualization.xml:1875(command)

4909

5139

msgid "sudo usermod -v 100000-200000 -w 100000-200000 user1"

4910

5140

msgstr ""

4911

5141

4912

#: serverguide/C/virtualization.xml:1812(para)

5142

#: serverguide/C/virtualization.xml:1880(para)

4913

5143

msgid ""

4914

5144

"The programs <command>newuidmap</command> and <command> newgidmap</command> "

4915

5145

"are setuid-root programs in the <filename>uidmap</filename> package, which "

4918

5148

"authorized by the host configuration."

4919

5149

msgstr ""

4920

5150

4921

#: serverguide/C/virtualization.xml:1823(title)

5151

#: serverguide/C/virtualization.xml:1891(title)

4922

5152

msgid "Basic unprivileged usage"

4923

5153

msgstr ""

4924

5154

4925

#: serverguide/C/virtualization.xml:1827(para)

5155

#: serverguide/C/virtualization.xml:1895(para)

4926

5156

msgid ""

4927

5157

"To create unprivileged containers, a few first steps are needed. You will "

4928

5158

"need to create a default container configuration file, specifying your "

4932

5162

"your actual user and group id ranges and modify the example accordingly:"

4933

5163

msgstr ""

4934

5164

4935

#: serverguide/C/virtualization.xml:1837(command)

5165

#: serverguide/C/virtualization.xml:1905(command)

4936

5166

msgid "grep $USER /etc/subuid grep $USER /etc/subgid"

4937

5167

msgstr ""

4938

5168

4939

#: serverguide/C/virtualization.xml:1843(command)

5169

#: serverguide/C/virtualization.xml:1911(command)

4940

5170

msgid ""

4941

5171

"mkdir -p ~/.config/lxc echo \"lxc.id_map = u 0 100000 65536\" > "

4942

5172

"~/.config/lxc/default.conf echo \"lxc.id_map = g 0 100000 65536\" >> "

4946

5176

"/etc/lxc/lxc-usernet"

4947

5177

msgstr ""

4948

5178

4949

#: serverguide/C/virtualization.xml:1853(para)

5179

#: serverguide/C/virtualization.xml:1921(para)

4950

5180

msgid ""

4951

5181

"After this, you can create unprivileged containers the same way as "

4952

5182

"privileged ones, simply without using sudo."

4953

5183

msgstr ""

4954

5184

4955

#: serverguide/C/virtualization.xml:1858(command)

5185

#: serverguide/C/virtualization.xml:1926(command)

4956

5186

msgid ""

4957

5187

"lxc-create -t download -n u1 -- -d ubuntu -r xenial -a amd64 lxc-start -n u1 "

4958

5188

"-d lxc-attach -n u1 lxc-stop -n u1 lxc-destroy -n u1"

4959

5189

msgstr ""

4960

5190

4961

#: serverguide/C/virtualization.xml:1870(para)

5191

#: serverguide/C/virtualization.xml:1938(para)

4962

5192

msgid ""

4963

5193

"In order to run containers inside containers - referred to as nested "

4964

5194

"containers - two lines must be present in the parent container configuration "

4975

5205

"information."

4976

5206

msgstr ""

4977

5207

4978

#: serverguide/C/virtualization.xml:1892(title)

5208

#: serverguide/C/virtualization.xml:1960(title)

4979

5209

msgid "Global configuration"

4980

5210

msgstr ""

4981

5211

4982

#: serverguide/C/virtualization.xml:1899(para)

5212

#: serverguide/C/virtualization.xml:1967(para)

4983

5213

msgid ""

4984

5214

"<filename>lxc.conf</filename> may optionally specify alternate values for "

4985

5215

"several lxc settings, including the lxcpath, the default configuration, "

4987

5217

"lvm and zfs."

4988

5218

msgstr ""

4989

5219

4990

#: serverguide/C/virtualization.xml:1905(para)

5220

#: serverguide/C/virtualization.xml:1973(para)

4991

5221

msgid ""

4992

5222

"<filename>default.conf</filename> specifies configuration which every newly "

4993

5223

"created container should contain. This usually contains at least a network "

4994

5224

"section, and, for unprivileged users, an id mapping section"

4995

5225

msgstr ""

4996

5226

4997

#: serverguide/C/virtualization.xml:1911(para)

5227

#: serverguide/C/virtualization.xml:1979(para)

4998

5228

msgid ""

4999

5229

"<filename>lxc-usernet.conf</filename> specifies how unprivileged users may "

5000

5230

"connect their containers to the host-owned network."

5001

5231

msgstr ""

5002

5232

5003

#: serverguide/C/virtualization.xml:1893(para)

5233

#: serverguide/C/virtualization.xml:1961(para)

5004

5234

msgid ""

5005

5235

"The following configuration files are consulted by LXC. For privileged use, "

5006

5236

"they are found under <filename>/etc/lxc</filename>, while for unprivileged "

5007

5237

"use they are under <filename>~/.config/lxc</filename>. <placeholder-1/>"

5008

5238

msgstr ""

5009

5239

5010

#: serverguide/C/virtualization.xml:1916(para)

5240

#: serverguide/C/virtualization.xml:1984(para)

5011

5241

msgid ""

5012

5242

"<filename>lxc.conf</filename> and <filename>default.conf</filename> are both "

5013

5243

"under <filename>/etc/lxc</filename> and "

5015

5245

"usernet.conf</filename> is only host-wide."

5016

5246

msgstr ""

5017

5247

5018

#: serverguide/C/virtualization.xml:1921(para)

5248

#: serverguide/C/virtualization.xml:1989(para)

5019

5249

msgid ""

5020

5250

"By default, containers are located under /var/lib/lxc for the root user, and "

5021

5251

"$HOME/.local/share/lxc otherwise. The location can be specified for all lxc "

5022

5252

"commands using the \"-P|--lxcpath\" argument."

5023

5253

msgstr ""

5024

5254

5025

#: serverguide/C/virtualization.xml:1930(title) serverguide/C/network-config.xml:11(title)

5255

#: serverguide/C/virtualization.xml:1998(title) serverguide/C/network-config.xml:11(title)

5026

5256

msgid "Networking"

5027

5257

msgstr "네트워킹"

5028

5258

5029

#: serverguide/C/virtualization.xml:1931(para)

5259

#: serverguide/C/virtualization.xml:1999(para)

5030

5260

msgid ""

5031

5261

"By default LXC creates a private network namespace for each container, which "

5032

5262

"includes a layer 2 networking stack. Containers usually connect to the "

5038

5268

"container is not usable on the host."

5039

5269

msgstr ""

5040

5270

5041

#: serverguide/C/virtualization.xml:1939(para)

5271

#: serverguide/C/virtualization.xml:2007(para)

5042

5272

msgid ""

5043

5273

"It is possible to create a container without a private network namespace. In "

5044

5274

"this case, the container will have access to the host networking like any "

5048

5278

"Unix domain socket to the host's upstart, and shut down the host."

5049

5279

msgstr ""

5050

5280

5051

#: serverguide/C/virtualization.xml:1945(para)

5281

#: serverguide/C/virtualization.xml:2013(para)

5052

5282

msgid ""

5053

5283

"To give containers on lxcbr0 a persistent ip address based on domain name, "

5054

5284

"you can write entries to <filename>/etc/lxc/dnsmasq.conf</filename> like: "

5058

5288

"</screen>"

5059

5289

msgstr ""

5060

5290

5061

#: serverguide/C/virtualization.xml:1953(para)

5291

#: serverguide/C/virtualization.xml:2021(para)

5062

5292

msgid ""

5063

5293

"If it is desirable for the container to be publicly accessible, there are a "

5064

5294

"few ways to go about it. One is to use <command>iptables</command> to "

5077

5307

"are preferred and more commonly used."

5078

5308

msgstr ""

5079

5309

5080

#: serverguide/C/virtualization.xml:1974(para)

5310

#: serverguide/C/virtualization.xml:2042(para)

5081

5311

msgid ""

5082

5312

"There are several ways to determine the ip address for a container. First, "

5083

5313

"you can use <command>lxc-ls --fancy</command> which will print the ip "

5093

5323

"</screen>"

5094

5324

msgstr ""

5095

5325

5096

#: serverguide/C/virtualization.xml:1989(para)

5326

#: serverguide/C/virtualization.xml:2057(para)

5097

5327

msgid ""

5098

5328

"For more information, see the lxc.conf manpage as well as the example "

5099

5329

"network configurations under "

5100

5330

"<filename>/usr/share/doc/lxc/examples/</filename>."

5101

5331

msgstr ""

5102

5332

5103

#: serverguide/C/virtualization.xml:1995(title)

5333

#: serverguide/C/virtualization.xml:2063(title)

5104

5334

msgid "LXC startup"

5105

5335

msgstr ""

5106

5336

5107

#: serverguide/C/virtualization.xml:1997(para)

5337

#: serverguide/C/virtualization.xml:2065(para)

5108

5338

msgid ""

5109

5339

"LXC does not have a long-running daemon. However it does have three upstart "

5110

5340

"jobs."

5111

5341

msgstr ""

5112

5342

5113

#: serverguide/C/virtualization.xml:2003(para)

5343

#: serverguide/C/virtualization.xml:2071(para)

5114

5344

msgid ""

5115

5345

"<filename>/etc/init/lxc-net.conf:</filename> is an optional job which only "

5116

5346

"runs if <filename> /etc/default/lxc-net</filename> specifies USE_LXC_BRIDGE "

5117

5347

"(true by default). It sets up a NATed bridge for containers to use."

5118

5348

msgstr ""

5119

5349

5120

#: serverguide/C/virtualization.xml:2011(para)

5350

#: serverguide/C/virtualization.xml:2079(para)

5121

5351

msgid ""

5122

5352

"<filename>/etc/init/lxc.conf</filename> loads the lxc apparmor profiles and "

5123

5353

"optionally starts any autostart containers. The autostart containers will be "

5126

5356

"more information on autostarted containers."

5127

5357

msgstr ""

5128

5358

5129

#: serverguide/C/virtualization.xml:2021(para)

5359

#: serverguide/C/virtualization.xml:2089(para)

5130

5360

msgid ""

5131

5361

"<filename>/etc/init/lxc-instance.conf</filename> is used by "

5132

5362

"<filename>/etc/init/lxc.conf</filename> to autostart a container."

5133

5363

msgstr ""

5134

5364

5135

#: serverguide/C/virtualization.xml:2030(title)

5365

#: serverguide/C/virtualization.xml:2098(title)

5136

5366

msgid "Backing Stores"

5137

5367

msgstr ""

5138

5368

5139

#: serverguide/C/virtualization.xml:2031(para)

5369

#: serverguide/C/virtualization.xml:2099(para)

5140

5370

msgid ""

5141

5371

"LXC supports several backing stores for container root filesystems. The "

5142

5372

"default is a simple directory backing store, because it requires no prior "

5151

5381

"<filename>$lxcpath/C1/rootfs</filename>."

5152

5382

msgstr ""

5153

5383

5154

#: serverguide/C/virtualization.xml:2045(para)

5384

#: serverguide/C/virtualization.xml:2113(para)

5155

5385

msgid ""

5156

5386

"A snapshot clone C2 of a directory backed container C1 becomes an overlayfs "

5157

5387

"backed container, with a rootfs called "

5159

5389

" Other backing store types include loop, btrfs, LVM and zfs."

5160

5390

msgstr ""

5161

5391

5162

#: serverguide/C/virtualization.xml:2053(para)

5392

#: serverguide/C/virtualization.xml:2121(para)

5163

5393

msgid ""

5164

5394

"A btrfs backed container mostly looks like a directory backed container, "

5165

5395

"with its root filesystem in the same location. However, the root filesystem "

5167

5397

"snapshot."

5168

5398

msgstr ""

5169

5399

5170

#: serverguide/C/virtualization.xml:2060(para)

5400

#: serverguide/C/virtualization.xml:2128(para)

5171

5401

msgid ""

5172

5402

"The root filesystem for an LVM backed container can be any separate LV. The "

5173

5403

"default VG name can be specified in lxc.conf. The filesystem type and size "

5174

5404

"are configurable per-container using lxc-create."

5175

5405

msgstr ""

5176

5406

5177

#: serverguide/C/virtualization.xml:2066(para)

5407

#: serverguide/C/virtualization.xml:2134(para)

5178

5408

msgid ""

5179

5409

"The rootfs for a zfs backed container is a separate zfs filesystem, mounted "

5180

5410

"under the traditional <filename>/var/lib/lxc/C1/rootfs</filename> location. "

5182

5412

"in lxc.system.conf."

5183

5413

msgstr ""

5184

5414

5185

#: serverguide/C/virtualization.xml:2073(para)

5415

#: serverguide/C/virtualization.xml:2141(para)

5186

5416

msgid ""

5187

5417

"More information on creating containers with the various backing stores can "

5188

5418

"be found in the lxc-create manual page."

5189

5419

msgstr ""

5190

5420

5191

#: serverguide/C/virtualization.xml:2080(title)

5421

#: serverguide/C/virtualization.xml:2148(title)

5192

5422

msgid "Templates"

5193

5423

msgstr ""

5194

5424

5195

#: serverguide/C/virtualization.xml:2081(para)

5425

#: serverguide/C/virtualization.xml:2149(para)

5196

5426

msgid ""

5197

5427

"Creating a container generally involves creating a root filesystem for the "

5198

5428

"container. <command>lxc-create</command> delegates this work to "

5203

5433

"others."

5204

5434

msgstr ""

5205

5435

5206

#: serverguide/C/virtualization.xml:2090(para)

5436

#: serverguide/C/virtualization.xml:2158(para)

5207

5437

msgid ""

5208

5438

"Creating distribution images in most cases requires the ability to create "

5209

5439

"device nodes, often requires tools which are not available in other "

5214

5444

"could not for instance easily run the <command>debootstrap</command> command."

5215

5445

msgstr ""

5216

5446

5217

#: serverguide/C/virtualization.xml:2100(para)

5447

#: serverguide/C/virtualization.xml:2168(para)

5218

5448

msgid ""

5219

5449

"When running <command>lxc-create</command>, all options which come after "

5220

5450

"<emphasis>--</emphasis> are passed to the template. In the following "

5227

5457

"</screen>"

5228

5458

msgstr ""

5229

5459

5230

#: serverguide/C/virtualization.xml:2112(para)

5460

#: serverguide/C/virtualization.xml:2180(para)

5231

5461

msgid ""

5232

5462

"You can obtain help for the options supported by any particular container by "

5233

5463

"passing <emphasis>--help</emphasis> and the template name to <command>lxc-"

5234

5464

"create</command>. For instance, for help with the download template,"

5235

5465

msgstr ""

5236

5466

5237

#: serverguide/C/virtualization.xml:2119(command)

5467

#: serverguide/C/virtualization.xml:2187(command)

5238

5468

msgid "lxc-create --template download --help"

5239

5469

msgstr ""

5240

5470

5241

#: serverguide/C/virtualization.xml:2125(title)

5471

#: serverguide/C/virtualization.xml:2193(title)

5242

5472

msgid "Autostart"

5243

5473

msgstr ""

5244

5474

5245

#: serverguide/C/virtualization.xml:2126(para)

5475

#: serverguide/C/virtualization.xml:2194(para)

5246

5476

msgid ""

5247

5477

"LXC supports marking containers to be started at system boot. Prior to "

5248

5478

"Ubuntu 14.04, this was done using symbolic links under the directory "

5259

5489

"lxc.container.conf for more information."

5260

5490

msgstr ""

5261

5491

5262

#: serverguide/C/virtualization.xml:2146(para)

5492

#: serverguide/C/virtualization.xml:2214(para)

5263

5493

msgid ""

5264

5494

"LXC ships with a default Apparmor profile intended to protect the host from "

5265

5495

"accidental misuses of privilege inside the container. For instance, the "

5267

5497

"trigger</filename> or to most <filename>/sys</filename> files."

5268

5498

msgstr ""

5269

5499

5270

#: serverguide/C/virtualization.xml:2152(para)

5500

#: serverguide/C/virtualization.xml:2220(para)

5271

5501

msgid ""

5272

5502

"The <filename>usr.bin.lxc-start</filename> profile is entered by running "

5273

5503

"<command>lxc-start</command>. This profile mainly prevents <command>lxc-"

5280

5510

"dangerous paths, and from mounting most filesystems."

5281

5511

msgstr ""

5282

5512

5283

#: serverguide/C/virtualization.xml:2163(para)

5513

#: serverguide/C/virtualization.xml:2231(para)

5284

5514

msgid ""

5285

5515

"Programs in a container cannot be further confined - for instance, MySQL "

5286

5516

"runs under the container profile (protecting the host) but will not be able "

5287

5517

"to enter the MySQL profile (to protect the container)."

5288

5518

msgstr ""

5289

5519

5290

#: serverguide/C/virtualization.xml:2168(para)

5520

#: serverguide/C/virtualization.xml:2236(para)

5291

5521

msgid ""

5292

5522

"<command>lxc-execute</command> does not enter an Apparmor profile, but the "

5293

5523

"container it spawns will be confined."

5294

5524

msgstr ""

5295

5525

5296

#: serverguide/C/virtualization.xml:2171(title)

5526

#: serverguide/C/virtualization.xml:2239(title)

5297

5527

msgid "Customizing container policies"

5298

5528

msgstr ""

5299

5529

5300

#: serverguide/C/virtualization.xml:2172(para)

5530

#: serverguide/C/virtualization.xml:2240(para)

5301

5531

msgid ""

5302

5532

"If you find that <command>lxc-start</command> is failing due to a legitimate "

5303

5533

"access which is being denied by its Apparmor policy, you can disable the lxc-"

5304

5534

"start profile by doing:"

5305

5535

msgstr ""

5306

5536

5307

#: serverguide/C/virtualization.xml:2176(screen)

5537

#: serverguide/C/virtualization.xml:2244(screen)

5308

5538

#, no-wrap

5309

5539

msgid ""

5310

5540

"\n"

5312

5542

"sudo ln -s /etc/apparmor.d/usr.bin.lxc-start /etc/apparmor.d/disabled/\n"

5313

5543

msgstr ""

5314

5544

5315

#: serverguide/C/virtualization.xml:2181(para)

5545

#: serverguide/C/virtualization.xml:2249(para)

5316

5546

msgid ""

5317

5547

"This will make <command>lxc-start</command> run unconfined, but continue to "

5318

5548

"confine the container itself. If you also wish to disable confinement of the "

5320

5550

"start</filename> profile, you must add:"

5321

5551

msgstr ""

5322

5552

5323

#: serverguide/C/virtualization.xml:2186(screen)

5553

#: serverguide/C/virtualization.xml:2254(screen)

5324

5554

#, no-wrap

5325

5555

msgid ""

5326

5556

"\n"

5327

5557

"lxc.aa_profile = unconfined\n"

5328

5558

msgstr ""

5329

5559

5330

#: serverguide/C/virtualization.xml:2190(para)

5560

#: serverguide/C/virtualization.xml:2258(para)

5331

5561

msgid "to the container's configuration file."

5332

5562

msgstr ""

5333

5563

5334

#: serverguide/C/virtualization.xml:2192(para)

5564

#: serverguide/C/virtualization.xml:2260(para)

5335

5565

msgid ""

5336

5566

"LXC ships with a few alternate policies for containers. If you wish to run "

5337

5567

"containers inside containers (nesting), then you can use the lxc-container-"

5346

5576

"\t</screen> and re-load the policy."

5347

5577

msgstr ""

5348

5578

5349

#: serverguide/C/virtualization.xml:2209(para)

5579

#: serverguide/C/virtualization.xml:2277(para)

5350

5580

msgid ""

5351

5581

"Note that the nesting policy with privileged containers is far less safe "

5352

5582

"than the default policy, as it allows containers to re-mount "

5356

5586

"<filename>proc</filename> and <filename>sys</filename> files."

5357

5587

msgstr ""

5358

5588

5359

#: serverguide/C/virtualization.xml:2217(para)

5589

#: serverguide/C/virtualization.xml:2285(para)

5360

5590

msgid ""

5361

5591

"Another profile shipped with lxc allows containers to mount block filesystem "

5362

5592

"types like ext4. This can be useful in some cases like maas provisioning, "

5364

5594

"have not been audited for safe handling of untrusted input."

5365

5595

msgstr ""

5366

5596

5367

#: serverguide/C/virtualization.xml:2223(para)

5597

#: serverguide/C/virtualization.xml:2291(para)

5368

5598

msgid ""

5369

5599

"If you need to run a container in a custom profile, you can create a new "

5370

5600

"profile under <filename>/etc/apparmor.d/lxc/</filename>. Its name must start "

5376

5606

"permissions at the bottom of your policy."

5377

5607

msgstr ""

5378

5608

5379

#: serverguide/C/virtualization.xml:2234(para)

5609

#: serverguide/C/virtualization.xml:2302(para)

5380

5610

msgid "After creating the policy, load it using:"

5381

5611

msgstr ""

5382

5612

5383

#: serverguide/C/virtualization.xml:2236(screen)

5613

#: serverguide/C/virtualization.xml:2304(screen)

5384

5614

#, no-wrap

5385

5615

msgid ""

5386

5616

"\n"

5387

5617

"sudo apparmor_parser -r /etc/apparmor.d/lxc-containers\n"

5388

5618

msgstr ""

5389

5619

5390

#: serverguide/C/virtualization.xml:2240(para)

5620

#: serverguide/C/virtualization.xml:2308(para)

5391

5621

msgid ""

5392

5622

"The profile will automatically be loaded after a reboot, because it is "

5393

5623

"sourced by the file <filename>/etc/apparmor.d/lxc-containers</filename>. "

5396

5626

"configuration file:"

5397

5627

msgstr ""

5398

5628

5399

#: serverguide/C/virtualization.xml:2247(screen)

5629

#: serverguide/C/virtualization.xml:2315(screen)

5400

5630

#, no-wrap

5401

5631

msgid ""

5402

5632

"\n"

5403

5633

"lxc.aa_profile = lxc-CN-profile\n"

5404

5634

msgstr ""

5405

5635

5406

#: serverguide/C/virtualization.xml:2255(title) serverguide/C/cgroups.xml:11(title)

5636

#: serverguide/C/virtualization.xml:2323(title) serverguide/C/cgroups.xml:11(title)

5407

5637

msgid "Control Groups"

5408

5638

msgstr ""

5409

5639

5410

#: serverguide/C/virtualization.xml:2257(para)

5640

#: serverguide/C/virtualization.xml:2325(para)

5411

5641

msgid ""

5412

5642

"Control groups (cgroups) are a kernel feature providing hierarchical task "

5413

5643

"grouping and per-cgroup resource accounting and limits. They are used in "

5416

5646

"i/o, guarantee minimum cpu shares, and to lock containers to specific cpus."

5417

5647

msgstr ""

5418

5648

5419

#: serverguide/C/virtualization.xml:2265(para)

5649

#: serverguide/C/virtualization.xml:2333(para)

5420

5650

msgid ""

5421

5651

"By default, a privileged container CN will be assigned to a cgroup called "

5422

5652

"<filename>/lxc/CN</filename>. In the case of name conflicts (which can occur "

5424

5654

"at 0, will be appended to the cgroup name."

5425

5655

msgstr ""

5426

5656

5427

#: serverguide/C/virtualization.xml:2271(para)

5657

#: serverguide/C/virtualization.xml:2339(para)

5428

5658

msgid ""

5429

5659

"By default, a privileged container CN will be assigned to a cgroup called "

5430

5660

"<filename>CN</filename> under the cgroup of the task which started the "

5433

5663

"all files) so that it is allowed to create new child cgroups."

5434

5664

msgstr ""

5435

5665

5436

#: serverguide/C/virtualization.xml:2278(para)

5666

#: serverguide/C/virtualization.xml:2346(para)

5437

5667

msgid ""

5438

5668

"As of Ubuntu 14.04, LXC uses the cgroup manager (cgmanager) to administer "

5439

5669

"cgroups. The cgroup manager receives D-Bus requests over the Unix socket "

5454

5684

"requests for which they are not authorized."

5455

5685

msgstr ""

5456

5686

5457

#: serverguide/C/virtualization.xml:2302(title)

5687

#: serverguide/C/virtualization.xml:2370(title)

5458

5688

msgid "Cloning"

5459

5689

msgstr ""

5460

5690

5461

#: serverguide/C/virtualization.xml:2304(para)

5691

#: serverguide/C/virtualization.xml:2372(para)

5462

5692

msgid ""

5463

5693

"For rapid provisioning, you may wish to customize a canonical container "

5464

5694

"according to your needs and then make multiple copies of it. This can be "

5465

5695

"done with the <command>lxc-clone</command> program."

5466

5696

msgstr ""

5467

5697

5468

#: serverguide/C/virtualization.xml:2308(para)

5698

#: serverguide/C/virtualization.xml:2376(para)

5469

5699

msgid ""

5470

5700

"Clones are either snapshots or copies of another container. A copy is a new "

5471

5701

"container copied from the original, and takes as much space on the host as "

5481

5711

"and apt to be slower."

5482

5712

msgstr ""

5483

5713

5484

#: serverguide/C/virtualization.xml:2322(para)

5714

#: serverguide/C/virtualization.xml:2390(para)

5485

5715

msgid ""

5486

5716

"Snapshots of directory-packed containers are created using the overlay "

5487

5717

"filesystem. For instance, a privileged directory-backed container C1 will "

5493

5723

"container, and to only use its snapshots."

5494

5724

msgstr ""

5495

5725

5496

#: serverguide/C/virtualization.xml:2334(para)

5726

#: serverguide/C/virtualization.xml:2402(para)

5497

5727

msgid "Given an existing container called C1, a copy can be created using:"

5498

5728

msgstr ""

5499

5729

5500

#: serverguide/C/virtualization.xml:2338(command)

5730

#: serverguide/C/virtualization.xml:2406(command)

5501

5731

msgid "sudo lxc-clone -o C1 -n C2"

5502

5732

msgstr ""

5503

5733

5504

#: serverguide/C/virtualization.xml:2343(para)

5734

#: serverguide/C/virtualization.xml:2411(para)

5505

5735

msgid "A snapshot can be created using:"

5506

5736

msgstr ""

5507

5737

5508

#: serverguide/C/virtualization.xml:2345(command)

5738

#: serverguide/C/virtualization.xml:2413(command)

5509

5739

msgid "sudo lxc-clone -s -o C1 -n C2"

5510

5740

msgstr ""

5511

5741

5512

#: serverguide/C/virtualization.xml:2349(para)

5742

#: serverguide/C/virtualization.xml:2417(para)

5513

5743

msgid "See the lxc-clone manpage for more information."

5514

5744

msgstr ""

5515

5745

5516

#: serverguide/C/virtualization.xml:2353(para)

5746

#: serverguide/C/virtualization.xml:2421(para)

5517

5747

msgid ""

5518

5748

"To more easily support the use of snapshot clones for iterative container "

5519

5749

"development, LXC supports <emphasis>snapshots</emphasis>. When working on a "

5531

5761

"is erased and replaced with the snap1 snapshot."

5532

5762

msgstr ""

5533

5763

5534

#: serverguide/C/virtualization.xml:2372(para)

5764

#: serverguide/C/virtualization.xml:2440(para)

5535

5765

msgid ""

5536

5766

"Snapshots are supported for btrfs, lvm, zfs, and overlayfs containers. If "

5537

5767

"lxc-snapshot is called on a directory-backed container, an error will be "

5552

5782

"</screen>"

5553

5783

msgstr ""

5554

5784

5555

#: serverguide/C/virtualization.xml:2396(title)

5785

#: serverguide/C/virtualization.xml:2464(title)

5556

5786

msgid "Ephemeral Containers"

5557

5787

msgstr ""

5558

5788

5559

#: serverguide/C/virtualization.xml:2397(para)

5789

#: serverguide/C/virtualization.xml:2465(para)

5560

5790

msgid ""

5561

5791

"While snapshots are useful for longer-term incremental development of "

5562

5792

"images, ephemeral containers utilize snapshots for quick, single-use "

5571

5801

"page for more options."

5572

5802

msgstr ""

5573

5803

5574

#: serverguide/C/virtualization.xml:2415(title)

5804

#: serverguide/C/virtualization.xml:2483(title)

5575

5805

msgid "Lifecycle management hooks"

5576

5806

msgstr ""

5577

5807

5578

#: serverguide/C/virtualization.xml:2417(para)

5808

#: serverguide/C/virtualization.xml:2485(para)

5579

5809

msgid ""

5580

5810

"Beginning with Ubuntu 12.10, it is possible to define hooks to be executed "

5581

5811

"at specific points in a container's lifetime:"

5582

5812

msgstr ""

5583

5813

5584

#: serverguide/C/virtualization.xml:2422(para)

5814

#: serverguide/C/virtualization.xml:2490(para)

5585

5815

msgid ""

5586

5816

"Pre-start hooks are run in the host's namespace before the container ttys, "

5587

5817

"consoles, or mounts are up. If any mounts are done in this hook, they should "

5588

5818

"be cleaned up in the post-stop hook."

5589

5819

msgstr ""

5590

5820

5591

#: serverguide/C/virtualization.xml:2429(para)

5821

#: serverguide/C/virtualization.xml:2497(para)

5592

5822

msgid ""

5593

5823

"Pre-mount hooks are run in the container's namespaces, but before the root "

5594

5824

"filesystem has been mounted. Mounts done in this hook will be automatically "

5595

5825

"cleaned up when the container shuts down."

5596

5826

msgstr ""

5597

5827

5598

#: serverguide/C/virtualization.xml:2436(para)

5828

#: serverguide/C/virtualization.xml:2504(para)

5599

5829

msgid ""

5600

5830

"Mount hooks are run after the container filesystems have been mounted, but "

5601

5831

"before the container has called <command>pivot_root</command> to change its "

5602

5832

"root filesystem."

5603

5833

msgstr ""

5604

5834

5605

#: serverguide/C/virtualization.xml:2443(para)

5835

#: serverguide/C/virtualization.xml:2511(para)

5606

5836

msgid ""

5607

5837

"Start hooks are run immediately before executing the container's init. Since "

5608

5838

"these are executed after pivoting into the container's filesystem, the "

5609

5839

"command to be executed must be copied into the container's filesystem."

5610

5840

msgstr ""

5611

5841

5612

#: serverguide/C/virtualization.xml:2450(para)

5842

#: serverguide/C/virtualization.xml:2518(para)

5613

5843

msgid "Post-stop hooks are executed after the container has been shut down."

5614

5844

msgstr ""

5615

5845

5616

#: serverguide/C/virtualization.xml:2455(para)

5846

#: serverguide/C/virtualization.xml:2523(para)

5617

5847

msgid ""

5618

5848

"If any hook returns an error, the container's run will be aborted. Any "

5619

5849

"<emphasis>post-stop</emphasis> hook will still be executed. Any output "

5620

5850

"generated by the script will be logged at the debug priority."

5621

5851

msgstr ""

5622

5852

5623

#: serverguide/C/virtualization.xml:2460(para)

5853

#: serverguide/C/virtualization.xml:2528(para)

5624

5854

msgid ""

5625

5855

"Please see the lxc.container.conf manual page for the configuration file "

5626

5856

"format with which to specify hooks. Some sample hooks are shipped with the "

5627

5857

"lxc package to serve as an example of how to write and use such hooks."

5628

5858

msgstr ""

5629

5859

5630

#: serverguide/C/virtualization.xml:2467(title)

5860

#: serverguide/C/virtualization.xml:2535(title)

5631

5861

msgid "Consoles"

5632

5862

msgstr ""

5633

5863

5634

#: serverguide/C/virtualization.xml:2469(para)

5864

#: serverguide/C/virtualization.xml:2537(para)

5635

5865

msgid ""

5636

5866

"Containers have a configurable number of consoles. One always exists on the "

5637

5867

"container's <filename>/dev/console</filename>. This is shown on the terminal "

5645

5875

"3 from the host, use:"

5646

5876

msgstr ""

5647

5877

5648

#: serverguide/C/virtualization.xml:2482(command)

5878

#: serverguide/C/virtualization.xml:2550(command)

5649

5879

msgid "sudo lxc-console -n container -t 3"

5650

5880

msgstr ""

5651

5881

5652

#: serverguide/C/virtualization.xml:2487(para)

5882

#: serverguide/C/virtualization.xml:2555(para)

5653

5883

msgid ""

5654

5884

"or if the <emphasis>-t N</emphasis> option is not specified, an unused "

5655

5885

"console will be automatically chosen. To exit the console, use the escape "

5658

5888

"d</emphasis> option."

5659

5889

msgstr ""

5660

5890

5661

#: serverguide/C/virtualization.xml:2493(para)

5891

#: serverguide/C/virtualization.xml:2561(para)

5662

5892

msgid ""

5663

5893

"Each container console is actually a Unix98 pty in the host's (not the "

5664

5894

"guest's) pty mount, bind-mounted over the guest's "

5671

5901

"<filename>/dev</filename>."

5672

5902

msgstr ""

5673

5903

5674

#: serverguide/C/virtualization.xml:2507(title) serverguide/C/network-auth.xml:794(title) serverguide/C/dns.xml:517(title)

5904

#: serverguide/C/virtualization.xml:2575(title) serverguide/C/network-auth.xml:794(title) serverguide/C/dns.xml:517(title)

5675

5905

msgid "Logging"

5676

5906

msgstr ""

5677

5907

5678

#: serverguide/C/virtualization.xml:2508(para)

5908

#: serverguide/C/virtualization.xml:2576(para)

5679

5909

msgid ""

5680

5910

"If something goes wrong when starting a container, the first step should be "

5681

5911

"to get full logging from LXC: <screen>\n"

5688

5918

"new log information will be appended."

5689

5919

msgstr ""

5690

5920

5691

#: serverguide/C/virtualization.xml:2523(title)

5921

#: serverguide/C/virtualization.xml:2591(title)

5692

5922

msgid "Monitoring container status"

5693

5923

msgstr ""

5694

5924

5695

#: serverguide/C/virtualization.xml:2525(para)

5925

#: serverguide/C/virtualization.xml:2593(para)

5696

5926

msgid ""

5697

5927

"Two commands are available to monitor container state changes. <command>lxc-"

5698

5928

"monitor</command> monitors one or more containers for any state changes. It "

5704

5934

"instance,"

5705

5935

msgstr ""

5706

5936

5707

#: serverguide/C/virtualization.xml:2535(command)

5937

#: serverguide/C/virtualization.xml:2603(command)

5708

5938

msgid "sudo lxc-monitor -n cont[0-5]*"

5709

5939

msgstr ""

5710

5940

5711

#: serverguide/C/virtualization.xml:2540(para)

5941

#: serverguide/C/virtualization.xml:2608(para)

5712

5942

msgid ""

5713

5943

"would print all state changes to any containers matching the listed regular "

5714

5944

"expression, whereas"

5715

5945

msgstr ""

5716

5946

5717

#: serverguide/C/virtualization.xml:2544(command)

5947

#: serverguide/C/virtualization.xml:2612(command)

5718

5948

msgid "sudo lxc-wait -n cont1 -s 'STOPPED|FROZEN'"

5719

5949

msgstr ""

5720

5950

5721

#: serverguide/C/virtualization.xml:2549(para)

5951

#: serverguide/C/virtualization.xml:2617(para)

5722

5952

msgid ""

5723

5953

"will wait until container cont1 enters state STOPPED or state FROZEN and "

5724

5954

"then exit."

5725

5955

msgstr ""

5726

5956

5727

#: serverguide/C/virtualization.xml:2554(title)

5957

#: serverguide/C/virtualization.xml:2622(title)

5728

5958

msgid "Attach"

5729

5959

msgstr ""

5730

5960

5731

#: serverguide/C/virtualization.xml:2555(para)

5961

#: serverguide/C/virtualization.xml:2623(para)

5732

5962

msgid ""

5733

5963

"As of Ubuntu 14.04, it is possible to attach to a container's namespaces. "

5734

5964

"The simplest case is to simply do <screen>\n"

5741

5971

"context. See the manual page for more information."

5742

5972

msgstr ""

5743

5973

5744

#: serverguide/C/virtualization.xml:2571(title)

5974

#: serverguide/C/virtualization.xml:2639(title)

5745

5975

msgid "Container init verbosity"

5746

5976

msgstr ""

5747

5977

5748

#: serverguide/C/virtualization.xml:2572(para)

5978

#: serverguide/C/virtualization.xml:2640(para)

5749

5979

msgid ""

5750

5980

"If LXC completes the container startup, but the container init fails to "

5751

5981

"complete (for instance, no login prompt is shown), it can be useful to "

5764

5994

"</screen>"

5765

5995

msgstr ""

5766

5996

5767

#: serverguide/C/virtualization.xml:2596(title)

5997

#: serverguide/C/virtualization.xml:2664(title)

5768

5998

msgid "LXC API"

5769

5999

msgstr ""

5770

6000

5771

#: serverguide/C/virtualization.xml:2598(para)

6001

#: serverguide/C/virtualization.xml:2666(para)

5772

6002

msgid ""

5773

6003

"Most of the LXC functionality can now be accessed through an API exported by "

5774

6004

"<filename>liblxc</filename> for which bindings are available in several "

5775

6005

"languages, including Python, lua, ruby, and go."

5776

6006

msgstr ""

5777

6007

5778

#: serverguide/C/virtualization.xml:2602(para)

6008

#: serverguide/C/virtualization.xml:2670(para)

5779

6009

msgid ""

5780

6010

"Below is an example using the python bindings (which are available in the "

5781

6011

"<application>python3-lxc</application> package) which creates and starts a "

5782

6012

"container, then waits until it has been shut down:"

5783

6013

msgstr ""

5784

6014

5785

#: serverguide/C/virtualization.xml:2608(programlisting)

6015

#: serverguide/C/virtualization.xml:2676(programlisting)

5786

6016

#, no-wrap

5787

6017

msgid ""

5788

6018

"\n"

5804

6034

"True\n"

5805

6035

msgstr ""

5806

6036

5807

#: serverguide/C/virtualization.xml:2628(title) serverguide/C/security.xml:11(title)

6037

#: serverguide/C/virtualization.xml:2696(title) serverguide/C/security.xml:11(title)

5808

6038

msgid "Security"

5809

6039

msgstr "보안"

5810

6040

5811

#: serverguide/C/virtualization.xml:2630(para)

6041

#: serverguide/C/virtualization.xml:2698(para)

5812

6042

msgid ""

5813

6043

"A namespace maps ids to resources. By not providing a container any id with "

5814

6044

"which to reference a resource, the resource can be protected. This is the "

5819

6049

"host."

5820

6050

msgstr ""

5821

6051

5822

#: serverguide/C/virtualization.xml:2639(para)

6052

#: serverguide/C/virtualization.xml:2707(para)

5823

6053

msgid ""

5824

6054

"By default, LXC containers are started under a Apparmor policy to restrict "

5825

6055

"some actions. The details of AppArmor integration with lxc are in section "

5830

6060

"host."

5831

6061

msgstr ""

5832

6062

5833

#: serverguide/C/virtualization.xml:2650(title)

6063

#: serverguide/C/virtualization.xml:2718(title)

5834

6064

msgid "Exploitable system calls"

5835

6065

msgstr ""

5836

6066

5837

#: serverguide/C/virtualization.xml:2652(para)

6067

#: serverguide/C/virtualization.xml:2720(para)

5838

6068

msgid ""

5839

6069

"It is a core container feature that containers share a kernel with the host. "

5840

6070

"Therefore if the kernel contains any exploitable system calls the container "

5842

6072

"fully control any resource known to the host."

5843

6073

msgstr ""

5844

6074

5845

#: serverguide/C/virtualization.xml:2658(para)

6075

#: serverguide/C/virtualization.xml:2726(para)

5846

6076

msgid ""

5847

6077

"Since Ubuntu 12.10 (Quantal) a container can also be constrained by a "

5848

6078

"seccomp filter. Seccomp is a new kernel feature which filters the system "

5854

6084

"by a list of numbers, one per line."

5855

6085

msgstr ""

5856

6086

5857

#: serverguide/C/virtualization.xml:2668(para)

6087

#: serverguide/C/virtualization.xml:2736(para)

5858

6088

msgid ""

5859

6089

"In general to run a full distribution container a large number of system "

5860

6090

"calls will be needed. However for application containers it may be possible "

5866

6096

"loaded."

5867

6097

msgstr ""

5868

6098

5869

#: serverguide/C/virtualization.xml:2684(para)

6099

#: serverguide/C/virtualization.xml:2752(para)

5870

6100

msgid ""

5871

6101

"The DeveloperWorks article <ulink "

5872

6102

"url=\"https://www.ibm.com/developerworks/linux/library/l-lxc-"

5874

6104

"to the use of containers."

5875

6105

msgstr ""

5876

6106

5877

#: serverguide/C/virtualization.xml:2691(para)

6107

#: serverguide/C/virtualization.xml:2759(para)

5878

6108

msgid ""

5879

6109

"The <ulink url=\"http://www.ibm.com/developerworks/linux/library/l-lxc-"

5880

6110

"security/index.html\"> Secure Containers Cookbook</ulink> demonstrated the "

5881

6111

"use of security modules to make containers more secure."

5882

6112

msgstr ""

5883

6113

5884

#: serverguide/C/virtualization.xml:2698(para) serverguide/C/cgroups.xml:202(para)

6114

#: serverguide/C/virtualization.xml:2766(para) serverguide/C/cgroups.xml:202(para)

5885

6115

msgid "Manual pages referenced above can be found at:"

5886

6116

msgstr ""

5887

6117

5888

#: serverguide/C/virtualization.xml:2700(ulink)

6118

#: serverguide/C/virtualization.xml:2768(ulink)

5889

6119

msgid "capabilities"

5890

6120

msgstr ""

5891

6121

5892

#: serverguide/C/virtualization.xml:2701(ulink)

6122

#: serverguide/C/virtualization.xml:2769(ulink)

5893

6123

msgid "lxc.conf"

5894

6124

msgstr ""

5895

6125

5896

#: serverguide/C/virtualization.xml:2706(para)

6126

#: serverguide/C/virtualization.xml:2774(para)

5897

6127

msgid ""

5898

6128

"The upstream LXC project is hosted at <ulink "

5899

6129

"url=\"http://linuxcontainers.org\">linuxcontainers.org</ulink>."

5900

6130

msgstr ""

5901

6131

5902

#: serverguide/C/virtualization.xml:2711(para)

6132

#: serverguide/C/virtualization.xml:2779(para)

5903

6133

msgid ""

5904

6134

"LXC security issues are listed and discussed at <ulink "

5905

6135

"url=\"http://wiki.ubuntu.com/LxcSecurity\">the LXC Security wiki page</ulink>"

5906

6136

msgstr ""

5907

6137

5908

#: serverguide/C/virtualization.xml:2717(para)

6138

#: serverguide/C/virtualization.xml:2785(para)

5909

6139

msgid ""

5910

6140

"For more on namespaces in Linux, see: S. Bhattiprolu, E. W. Biederman, S. E. "

5911

6141

"Hallyn, and D. Lezcano. Virtual Servers and Check- point/Restart in "

6491

6721

"service with the following command"

6492

6722

msgstr ""

6493

6723

6494

#: serverguide/C/vcs.xml:374(command) serverguide/C/lamp-applications.xml:508(command)

6724

#: serverguide/C/vcs.xml:374(command) serverguide/C/lamp-applications.xml:360(command)

6495

6725

msgid "sudo systemctl reload apache2.service"

6496

6726

msgstr ""

6497

6727

6836

7066

#: serverguide/C/serverguide.xml:11(para)

6837

7067

msgid ""

6838

7068

"A copy of the license is available here: <ulink "

6839

"url=\"http://creativecommons.org/licenses/by-sa/3.0/\">Creative Commons "

7069

"url=\"https://creativecommons.org/licenses/by-sa/3.0/\">Creative Commons "

6840

7070

"ShareAlike License</ulink>."

6841

7071

msgstr ""

6842

7072

9453

9683

msgid ""

9454

9684

"The main Samba configuration file is located in "

9455

9685

"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "

9456

"a significant amount of comments in order to document various configuration "

9686

"a significant number of comments in order to document various configuration "

9457

9687

"directives."

9458

9688

msgstr ""

9459

"메인 삼바 구성 파일은 <filename>/etc/samba/smb.conf</filename>에 있습니다. 기본 구성 파일에는 다양한 "

9460

"구성 방법을 알려주기 위해 매우 많은 주석들이 달려있습니다."

9461

9689

9462

9690

#: serverguide/C/samba.xml:104(para)

9463

9691

msgid ""

9613

9841

"new configuration:"

9614

9842

msgstr "끝으로, 새 구성이 적용되도록 <application>삼바</application>서비스를 다시 시작하세요:"

9615

9843

9616

#: serverguide/C/samba.xml:214(command) serverguide/C/samba.xml:335(command) serverguide/C/samba.xml:472(command) serverguide/C/samba.xml:571(command) serverguide/C/samba.xml:921(command) serverguide/C/samba.xml:1075(command) serverguide/C/samba.xml:1181(command) serverguide/C/network-auth.xml:2532(command) serverguide/C/network-auth.xml:4113(command)

9844

#: serverguide/C/samba.xml:214(command) serverguide/C/samba.xml:335(command) serverguide/C/samba.xml:472(command) serverguide/C/samba.xml:571(command) serverguide/C/samba.xml:921(command) serverguide/C/samba.xml:1075(command) serverguide/C/samba.xml:1181(command) serverguide/C/network-auth.xml:2525(command) serverguide/C/network-auth.xml:4106(command)

9617

9845

msgid "sudo systemctl restart smbd.service nmbd.service"

9618

9846

msgstr ""

9619

9847

15164

15392

15165

15393

#: serverguide/C/network-config.xml:1418(para)

15166

15394

msgid ""

15167

"The package dpdk provides init scripts that ease configuration of device "

15168

"assignment and huge pages. It also makes them persistent accross reboots."

15395

"The package <emphasis>dpdk</emphasis> provides init scripts that ease "

15396

"configuration of device assignment and huge pages. It also makes them "

15397

"persistent accross reboots."

15169

15398

msgstr ""

15170

15399

15171

15400

#: serverguide/C/network-config.xml:1422(para)

15183

15412

"# <id> Device ID on the specified bus\n"

15184

15413

"# <driver> Driver to bind against (vfio-pci or uio_pci_generic)\n"

15185

15414

"#\n"

15186

"# Be aware that the two dpdk compatible drivers uio_pci_generic and vfio-pci "

15187

"are \n"

15415

"# Be aware that the two DPDK compatible drivers uio_pci_generic and vfio-pci "

15416

"are\n"

15188

15417

"# part of linux-image-extra-<VERSION> package.\n"

15189

15418

"# This package is not always installed by default - for example in cloud-"

15190

"images. \n"

15419

"images.\n"

15191

15420

"# So please install it in case you run into missing module issues.\n"

15192

15421

"#\n"

15193

15422

"# <bus> <id> <driver>\n"

15246

15475

15247

15476

#: serverguide/C/network-config.xml:1471(para)

15248

15477

msgid ""

15249

"The dpdk package has a config file and scripts that try to ease hugepage "

15250

"configuration for dpdk in the form of /etc/dpdk/dpdk.conf. If you have more "

15251

"consumers of hugepages than dpdk in your system or very special requirements "

15252

"how your hugepages are going to be set up you likely want to "

15253

"allocate/control them by yourself. If not this can be a great simplification "

15254

"to get dpdk to run for yourself."

15478

"The <emphasis>dpdk</emphasis> package has a config file and scripts that try "

15479

"to ease hugepage configuration for DPDK in the form of "

15480

"<emphasis>/etc/dpdk/dpdk.conf</emphasis>. If you have more consumers of "

15481

"hugepages than just DPDK in your system or very special requirements how "

15482

"your hugepages are going to be set up you likely want to allocate/control "

15483

"them by yourself. If not this can be a great simplification to get DPDK "

15484

"configured for your needs."

15255

15485

msgstr ""

15256

15486

15257

15487

#: serverguide/C/network-config.xml:1476(para)

15299

15529

15300

15530

#: serverguide/C/network-config.xml:1501(para)

15301

15531

msgid ""

15302

"You will often find guides that tell you to fetch the dpdk sources, build "

15303

"them to your needs and eventually build your application based on dpdk by "

15532

"You will often find guides that tell you to fetch the DPDK sources, build "

15533

"them to your needs and eventually build your application based on DPDK by "

15304

15534

"setting values RTE_* for the build system. Since Ubunutu provides an already "

15305

15535

"compiled DPDK for you can can skip all that. To simplify setting the proper "

15306

15536

"variables you can source the file /usr/share/dpdk/dpdk-sdk-env.sh before "

15321

15551

#: serverguide/C/network-config.xml:1512(para)

15322

15552

msgid ""

15323

15553

"Depending on what you build it might be a good addition to install all of "

15324

"dpdk build dependencies before the make."

15554

"DPDK build dependencies before the make."

15325

15555

msgstr ""

15326

15556

15327

15557

#: serverguide/C/network-config.xml:1515(programlisting)

15371

15601

15372

15602

#: serverguide/C/network-config.xml:1538(para)

15373

15603

msgid ""

15374

"The section ''--vhost-owner libvirt-qemu:kvm --vhost-perm 0664'' will set "

15375

"vhost_user ports up with owner/permissions to be compatible with Ubuntus way "

15376

"of running qemu-kvm/libvirt with reduced privileges for more security."

15604

"The section <emphasis>--vhost-owner libvirt-qemu:kvm --vhost-perm "

15605

"0664</emphasis> will set vhost_user ports up with owner/permissions to be "

15606

"compatible with Ubuntus way of running qemu-kvm/libvirt with reduced "

15607

"privileges for more security."

15377

15608

msgstr ""

15378

15609

15379

15610

#: serverguide/C/network-config.xml:1541(para)

15380

15611

msgid ""

15612

"Please note that the section <emphasis>-m 2048</emphasis> is the most basic "

15613

"numa setup for a single socket system. If you have multiple sockets you "

15614

"might want to define how to split your memory among them, for example "

15615

"<emphasis>-m 1024, 1024</emphasis>. Please be aware that DPDK will try to "

15616

"work only with local memory to the network cards it works with (for "

15617

"performance reasons). That said if you have multiple nodes, but all network "

15618

"cards on one, you should consider spreading your cards. If not at least "

15619

"allocate your memory to the node where the cards reside, for example in a "

15620

"two node all to node #2: <emphasis>-m 0, 2048</emphasis>. You can use the "

15621

"tool <emphasis>lstopo</emphasis> from the package <emphasis>hwloc-"

15622

"nox</emphasis> to see on which socket your cards are located."

15623

msgstr ""

15624

15625

#: serverguide/C/network-config.xml:1549(para)

15626

msgid ""

15381

15627

"The OpenVswitch you now started supports all port types OpenVswitch usually "

15382

15628

"does, plus DPDK port types. Here an example how to create a bridge and - "

15383

15629

"instead of a normal external port - add an external DPDK port to it."

15384

15630

msgstr ""

15385

15631

15386

#: serverguide/C/network-config.xml:1545(programlisting)

15632

#: serverguide/C/network-config.xml:1553(programlisting)

15387

15633

#, no-wrap

15388

15634

msgid ""

15389

15635

"\n"

15392

15638

"\t\t "

15393

15639

msgstr ""

15394

15640

15395

#: serverguide/C/network-config.xml:1552(title)

15641

#: serverguide/C/network-config.xml:1558(para)

15642

msgid ""

15643

"The enablement of DPDK in Open vSwitch has changed in version 2.6. So for "

15644

"users of releases >=16.10, but also for users of the <ulink "

15645

"url=\"https://wiki.ubuntu.com/OpenStack/CloudArchive\">Ubuntu Cloud "

15646

"Archive</ulink> >=neutron the enablement has changed compared to that for "

15647

"users of Ubuntu 16.04. The options formerly passed via "

15648

"<emphasis>DPDK_OPTS</emphasis> are now configured via ovs-vsctl into the "

15649

"Open vSwitch configuration database."

15650

msgstr ""

15651

15652

#: serverguide/C/network-config.xml:1563(para)

15653

msgid "The same example as above would in the new way look like:"

15654

msgstr ""

15655

15656

#: serverguide/C/network-config.xml:1566(programlisting)

15657

#, no-wrap

15658

msgid ""

15659

"\n"

15660

"# Enable DPDK\n"

15661

"ovs-vsctl set Open_vSwitch . \"other_config:dpdk-init=true\"\n"

15662

"# run on core 0\n"

15663

"ovs-vsctl set Open_vSwitch . \"other_config:dpdk-lcore-mask=0x1\"\n"

15664

"# Allocate 2G huge pages (not Numa node aware)\n"

15665

"ovs-vsctl set Open_vSwitch . \"other_config:dpdk-alloc-mem=2048\"\n"

15666

"# group/permissions for vhost-user sockets (required to work with "

15667

"libvirt/qemu)\n"

15668

"ovs-vsctl set Open_vSwitch . \\\n"

15669

" \"other_config:dpdk-extra=--vhost-owner libvirt-qemu:kvm --vhost-perm "

15670

"0666\"\n"

15671

"\t\t "

15672

msgstr ""

15673

15674

#: serverguide/C/network-config.xml:1581(filename)

15675

msgid "/usr/share/doc/openvswitch-common/INSTALL.DPDK.md.gz"

15676

msgstr ""

15677

15678

#: serverguide/C/network-config.xml:1582(filename)

15679

msgid "/usr/share/doc/openvswitch-common/INSTALL.DPDK-ADVANCED.md.gz"

15680

msgstr ""

15681

15682

#: serverguide/C/network-config.xml:1583(command)

15683

msgid "man ovs-vswitchd.conf.db"

15684

msgstr ""

15685

15686

#: serverguide/C/network-config.xml:1577(para)

15687

msgid ""

15688

"Please see the associated upstream documentation and the man page of the "

15689

"vswitch configuration as provided by the package for more details: "

15690

"<placeholder-1/>"

15691

msgstr ""

15692

15693

#: serverguide/C/network-config.xml:1590(title)

15396

15694

msgid "OpenVswitch DPDK to KVM Guests"

15397

15695

msgstr ""

15398

15696

15399

#: serverguide/C/network-config.xml:1553(para)

15697

#: serverguide/C/network-config.xml:1591(para)

15400

15698

msgid ""

15401

15699

"If you are not building some sort of SDN switch or NFV on top of DPDK it is "

15402

15700

"very likely that you want to forward traffic to KVM guests. The good news "

15406

15704

"DPDK instance."

15407

15705

msgstr ""

15408

15706

15409

#: serverguide/C/network-config.xml:1558(para)

15707

#: serverguide/C/network-config.xml:1596(para)

15410

15708

msgid ""

15411

15709

"The Guest has to be backed by shared hugepages for DPDK/vhost_user to work. "

15412

15710

"To ensure in general that libvirt/qemu-kvm finds a proper hugepage "

15414

15712

"Afterwards restart the service to pick up the changed configuration."

15415

15713

msgstr ""

15416

15714

15417

#: serverguide/C/network-config.xml:1563(programlisting)

15715

#: serverguide/C/network-config.xml:1601(programlisting)

15418

15716

#, no-wrap

15419

15717

msgid ""

15420

15718

"\n"

15423

15721

"\t\t "

15424

15722

msgstr ""

15425

15723

15426

#: serverguide/C/network-config.xml:1567(para)

15724

#: serverguide/C/network-config.xml:1605(para)

15427

15725

msgid ""

15428

15726

"To let a guest be backed by hugepages is now also supported via recent "

15429

15727

"libvirt, just add the following snippet to your virsh xml (or the equivalent "

15431

15729

"easily spawn guests with \"uvt-kvm create\"."

15432

15730

msgstr ""

15433

15731

15434

#: serverguide/C/network-config.xml:1571(programlisting)

15732

#: serverguide/C/network-config.xml:1609(programlisting)

15435

15733

#, no-wrap

15436

15734

msgid ""

15437

15735

"\n"

15446

15744

"\t\t "

15447

15745

msgstr ""

15448

15746

15449

#: serverguide/C/network-config.xml:1580(para)

15747

#: serverguide/C/network-config.xml:1618(para)

15450

15748

msgid ""

15451

15749

"The new and recommended way to get to a KVM guest is using vhost_user. This "

15452

15750

"will cause DPDK to create a socket that qemu will connect the guest to. Here "

15453

15751

"an example how to add such a port to the bridge you created (see above)."

15454

15752

msgstr ""

15455

15753

15456

#: serverguide/C/network-config.xml:1585(programlisting)

15754

#: serverguide/C/network-config.xml:1623(programlisting)

15457

15755

#, no-wrap

15458

15756

msgid ""

15459

15757

"\n"

15462

15760

"\t\t "

15463

15761

msgstr ""

15464

15762

15465

#: serverguide/C/network-config.xml:1588(para)

15763

#: serverguide/C/network-config.xml:1626(para)

15466

15764

msgid ""

15467

15765

"This will create a vhost_user socket at /var/run/openvswitch/vhost-user-1"

15468

15766

msgstr ""

15469

15767

15470

#: serverguide/C/network-config.xml:1591(para)

15768

#: serverguide/C/network-config.xml:1629(para)

15471

15769

msgid ""

15472

15770

"To let libvirt/kvm consume this socket and create a guest virtio network "

15473

15771

"device for it add a snippet like this to your guest definition as the "

15474

15772

"network definition."

15475

15773

msgstr ""

15476

15774

15477

#: serverguide/C/network-config.xml:1594(programlisting)

15775

#: serverguide/C/network-config.xml:1632(programlisting)

15478

15776

#, no-wrap

15479

15777

msgid ""

15480

15778

"\n"

15487

15785

"\t\t "

15488

15786

msgstr ""

15489

15787

15490

#: serverguide/C/network-config.xml:1605(title)

15788

#: serverguide/C/network-config.xml:1643(title)

15491

15789

msgid "DPDK in KVM Guests"

15492

15790

msgstr ""

15493

15791

15494

#: serverguide/C/network-config.xml:1606(para)

15792

#: serverguide/C/network-config.xml:1644(para)

15495

15793

msgid ""

15496

15794

"If you have no access to DPDK supported network cards you can still work "

15497

15795

"with DPDK by using its support for virtio. To do so you have to create "

15498

15796

"guests backed by hugepages (see above)."

15499

15797

msgstr ""

15500

15798

15501

#: serverguide/C/network-config.xml:1610(para)

15799

#: serverguide/C/network-config.xml:1648(para)

15502

15800

msgid ""

15503

15801

"On top of that there it is required to have at least SSE3. The default CPU "

15504

15802

"model qemu/libvirt uses is only up to SSE2. So you will have to define a "

15507

15805

"virsh xml (or the equivalent virsh interface you use)."

15508

15806

msgstr ""

15509

15807

15510

#: serverguide/C/network-config.xml:1616(programlisting)

15808

#: serverguide/C/network-config.xml:1654(programlisting)

15511

15809

#, no-wrap

15512

15810

msgid ""

15513

15811

"\n"

15515

15813

"\t\t "

15516

15814

msgstr ""

15517

15815

15518

#: serverguide/C/network-config.xml:1619(para)

15816

#: serverguide/C/network-config.xml:1657(para)

15519

15817

msgid ""

15520

15818

"This example is rather offensive and passes all host features. That in turn "

15521

15819

"makes the guest not very migratable as the target would need all the "

15523

15821

"like the following example."

15524

15822

msgstr ""

15525

15823

15526

#: serverguide/C/network-config.xml:1624(programlisting)

15824

#: serverguide/C/network-config.xml:1662(programlisting)

15527

15825

#, no-wrap

15528

15826

msgid ""

15529

15827

"\n"

15534

15832

"\t\t "

15535

15833

msgstr ""

15536

15834

15537

#: serverguide/C/network-config.xml:1630(para)

15835

#: serverguide/C/network-config.xml:1668(para)

15538

15836

msgid ""

15539

15837

"Also virtio nowadays supports multiqueue which DPDK in turn can exploit for "

15540

15838

"better speed. To modify a normal virtio definition to have multiple queues "

15543

15841

"DPDK in the guest."

15544

15842

msgstr ""

15545

15843

15546

#: serverguide/C/network-config.xml:1635(programlisting)

15844

#: serverguide/C/network-config.xml:1673(programlisting)

15547

15845

#, no-wrap

15548

15846

msgid ""

15549

15847

"\n"

15551

15849

"\t\t "

15552

15850

msgstr ""

15553

15851

15554

#: serverguide/C/network-config.xml:1641(title)

15852

#: serverguide/C/network-config.xml:1679(title)

15555

15853

msgid "Tuning Openvswitch-DPDK"

15556

15854

msgstr ""

15557

15855

15558

#: serverguide/C/network-config.xml:1642(para)

15856

#: serverguide/C/network-config.xml:1680(para)

15559

15857

msgid ""

15560

15858

"DPDK has plenty of options - in combination with Openvswitch-DPDK the two "

15561

15859

"most commonly used are:"

15562

15860

msgstr ""

15563

15861

15564

#: serverguide/C/network-config.xml:1645(programlisting)

15862

#: serverguide/C/network-config.xml:1683(programlisting)

15565

15863

#, no-wrap

15566

15864

msgid ""

15567

15865

"\n"

15570

15868

"\t\t "

15571

15869

msgstr ""

15572

15870

15573

#: serverguide/C/network-config.xml:1649(para)

15871

#: serverguide/C/network-config.xml:1687(para)

15574

15872

msgid ""

15575

15873

"The first select how many rx queues are to be used for each DPDK interface, "

15576

15874

"while the second controls how many and where to run PMD threads. The example "

15579

15877

"installation\" at the end of this document for more."

15580

15878

msgstr ""

15581

15879

15582

#: serverguide/C/network-config.xml:1654(para)

15880

#: serverguide/C/network-config.xml:1692(para)

15583

15881

msgid ""

15584

15882

"As usual with tunings you have to know your system and workload really well -"

15585

15883

" so please verify any tunings with workloads matching your real use case."

15586

15884

msgstr ""

15587

15885

15588

#: serverguide/C/network-config.xml:1661(para)

15886

#: serverguide/C/network-config.xml:1699(para)

15589

15887

msgid ""

15590

15888

"DPDK is a fast evolving project. In any case of a search for support and "

15591

15889

"further guides it is highly recommended to first check if they apply to the "

15592

15890

"current version."

15593

15891

msgstr ""

15594

15892

15595

#: serverguide/C/network-config.xml:1668(ulink)

15893

#: serverguide/C/network-config.xml:1707(ulink)

15596

15894

msgid "DPDK Mailing Lists"

15597

15895

msgstr ""

15598

15896

15599

#: serverguide/C/network-config.xml:1672(para)

15897

#: serverguide/C/network-config.xml:1711(para)

15600

15898

msgid ""

15601

15899

"For OpenVswitch-DPDK <ulink url=\"http://openvswitch.org/mlists\">OpenStack "

15602

15900

"Mailing Lists</ulink>"

15603

15901

msgstr ""

15604

15902

15605

#: serverguide/C/network-config.xml:1677(para)

15903

#: serverguide/C/network-config.xml:1716(para)

15606

15904

msgid ""

15607

15905

"Known issues in <ulink "

15608

15906

"url=\"https://bugs.launchpad.net/ubuntu/+source/dpdk\">DPDK Launchpad "

15609

15907

"Area</ulink>"

15610

15908

msgstr ""

15611

15909

15612

#: serverguide/C/network-config.xml:1682(para)

15910

#: serverguide/C/network-config.xml:1721(para)

15613

15911

msgid "Join the IRC channels #DPDK or #openvswitch on freenode."

15614

15912

msgstr ""

15615

15913

15616

#: serverguide/C/network-config.xml:1696(ulink)

15914

#: serverguide/C/network-config.xml:1727(para)

15915

msgid ""

15916

"Issues are often due to missing small details in the general setup. Later "

15917

"on, these missing details cause problems which can be hard to track down to "

15918

"their root cause. A common case seems to be the \"could not open network "

15919

"device dpdk0 (No such device)\" issue. This occurs rather late when setting "

15920

"up a port in Open vSwitch with DPDK. But the root cause most of the time is "

15921

"very early in the setup and initialization. Here an example how a proper "

15922

"initialization of a device looks - this can be found in the syslog/journal "

15923

"when starting Open vSwitch with DPDK enabled."

15924

msgstr ""

15925

15926

#: serverguide/C/network-config.xml:1738(programlisting)

15927

#, no-wrap

15928

msgid ""

15929

"\n"

15930

"ovs-ctl[3560]: EAL: PCI device 0000:04:00.1 on NUMA socket 0\n"

15931

"ovs-ctl[3560]: EAL: probe driver: 8086:1528 rte_ixgbe_pmd\n"

15932

"ovs-ctl[3560]: EAL: PCI memory mapped at 0x7f2140000000\n"

15933

"ovs-ctl[3560]: EAL: PCI memory mapped at 0x7f2140200000\n"

15934

"\t\t "

15935

msgstr ""

15936

15937

#: serverguide/C/network-config.xml:1745(para)

15938

msgid ""

15939

"If this is missing, either by ignored cards, failed initialization or other "

15940

"reasons, later on there will be no DPDK device to refer to. Unfortunately "

15941

"the logging is spread across syslog/journal and the openvswitch log. To "

15942

"allow some cross checking here an example what can be found in these logs, "

15943

"relative to the entered command."

15944

msgstr ""

15945

15946

#: serverguide/C/network-config.xml:1753(programlisting)

15947

#, no-wrap

15948

msgid ""

15949

"\n"

15950

"#Note: This log was taken with dpdk 2.2 and openvswitch 2.5\n"

15951

"Captions:\n"

15952

"CMD: that you enter\n"

15953

"SYSLOG: (Inlcuding EAL and OVS Messages)\n"

15954

"OVS-LOG: (Openvswitch messages)\n"

15955

"\n"

15956

"#PREPARATION\n"

15957

"Bind an interface to DPDK UIO drivers, make Hugepages available, enable DPDK "

15958

"on OVS\n"

15959

"\n"

15960

"CMD: sudo service openvswitch-switch restart\n"

15961

"\n"

15962

"SYSLOG:\n"

15963

"2016-01-22T08:58:31.372Z|00003|daemon_unix(monitor)|INFO|pid 3329 died, "

15964

"killed (Terminated), exiting\n"

15965

"2016-01-22T08:58:33.377Z|00002|vlog|INFO|opened log file "

15966

"/var/log/openvswitch/ovs-vswitchd.log\n"

15967

"2016-01-22T08:58:33.381Z|00003|ovs_numa|INFO|Discovered 12 CPU cores on NUMA "

15968

"node 0\n"

15969

"2016-01-22T08:58:33.381Z|00004|ovs_numa|INFO|Discovered 1 NUMA nodes and 12 "

15970

"CPU cores\n"

15971

"2016-01-"

15972

"22T08:58:33.381Z|00005|reconnect|INFO|unix:/var/run/openvswitch/db.sock: "

15973

"connecting...\n"

15974

"2016-01-"

15975

"22T08:58:33.383Z|00006|reconnect|INFO|unix:/var/run/openvswitch/db.sock: "

15976

"connected\n"

15977

"2016-01-22T08:58:33.386Z|00007|bridge|INFO|ovs-vswitchd (Open vSwitch) "

15978

"2.5.0\n"

15979

"\n"

15980

"OVS-LOG:\n"

15981

"systemd[1]: Stopping Open vSwitch...\n"

15982

"systemd[1]: Stopped Open vSwitch.\n"

15983

"systemd[1]: Stopping Open vSwitch Internal Unit...\n"

15984

"ovs-ctl[3541]: * Killing ovs-vswitchd (3329)\n"

15985

"ovs-ctl[3541]: * Killing ovsdb-server (3318)\n"

15986

"systemd[1]: Stopped Open vSwitch Internal Unit.\n"

15987

"systemd[1]: Starting Open vSwitch Internal Unit...\n"

15988

"ovs-ctl[3560]: * Starting ovsdb-server\n"

15989

"ovs-vsctl: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait -- init -- set "

15990

"Open_vSwitch . db-version=7.12.1\n"

15991

"ovs-vsctl: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait set "

15992

"Open_vSwitch . ovs-version=2.5.0 \"external-ids:system-id=\\\"e7c5ba80-bb14-"

15993

"45c1-b8eb-628f3ad03903\\\"\" \"system-type=\\\"Ubuntu\\\"\" \"system-"

15994

"version=\\\"16.04-xenial\\\"\"\n"

15995

"ovs-ctl[3560]: * Configuring Open vSwitch system IDs\n"

15996

"ovs-ctl[3560]: 2016-01-22T08:58:31Z|00001|dpdk|INFO|No -vhost_sock_dir "

15997

"provided - defaulting to /var/run/openvswitch\n"

15998

"ovs-vswitchd: ovs|00001|dpdk|INFO|No -vhost_sock_dir provided - defaulting "

15999

"to /var/run/openvswitch\n"

16000

"ovs-ctl[3560]: EAL: Detected lcore 0 as core 0 on socket 0\n"

16001

"ovs-ctl[3560]: EAL: Detected lcore 1 as core 1 on socket 0\n"

16002

"ovs-ctl[3560]: EAL: Detected lcore 2 as core 2 on socket 0\n"

16003

"ovs-ctl[3560]: EAL: Detected lcore 3 as core 3 on socket 0\n"

16004

"ovs-ctl[3560]: EAL: Detected lcore 4 as core 4 on socket 0\n"

16005

"ovs-ctl[3560]: EAL: Detected lcore 5 as core 5 on socket 0\n"

16006

"ovs-ctl[3560]: EAL: Detected lcore 6 as core 0 on socket 0\n"

16007

"ovs-ctl[3560]: EAL: Detected lcore 7 as core 1 on socket 0\n"

16008

"ovs-ctl[3560]: EAL: Detected lcore 8 as core 2 on socket 0\n"

16009

"ovs-ctl[3560]: EAL: Detected lcore 9 as core 3 on socket 0\n"

16010

"ovs-ctl[3560]: EAL: Detected lcore 10 as core 4 on socket 0\n"

16011

"ovs-ctl[3560]: EAL: Detected lcore 11 as core 5 on socket 0\n"

16012

"ovs-ctl[3560]: EAL: Support maximum 128 logical core(s) by configuration.\n"

16013

"ovs-ctl[3560]: EAL: Detected 12 lcore(s)\n"

16014

"ovs-ctl[3560]: EAL: VFIO modules not all loaded, skip VFIO support...\n"

16015

"ovs-ctl[3560]: EAL: Setting up physically contiguous memory...\n"

16016

"ovs-ctl[3560]: EAL: Ask a virtual area of 0x100000000 bytes\n"

16017

"ovs-ctl[3560]: EAL: Virtual area found at 0x7f2040000000 (size = "

16018

"0x100000000)\n"

16019

"ovs-ctl[3560]: EAL: Requesting 4 pages of size 1024MB from socket 0\n"

16020

"ovs-ctl[3560]: EAL: TSC frequency is ~2397202 KHz\n"

16021

"ovs-vswitchd[3592]: EAL: TSC frequency is ~2397202 KHz\n"

16022

"ovs-vswitchd[3592]: EAL: Master lcore 0 is ready (tid=fc6cbb00;cpuset=[0])\n"

16023

"ovs-vswitchd[3592]: EAL: PCI device 0000:04:00.0 on NUMA socket 0\n"

16024

"ovs-vswitchd[3592]: EAL: probe driver: 8086:1528 rte_ixgbe_pmd\n"

16025

"ovs-vswitchd[3592]: EAL: Not managed by a supported kernel driver, "

16026

"skipped\n"

16027

"ovs-vswitchd[3592]: EAL: PCI device 0000:04:00.1 on NUMA socket 0\n"

16028

"ovs-vswitchd[3592]: EAL: probe driver: 8086:1528 rte_ixgbe_pmd\n"

16029

"ovs-vswitchd[3592]: EAL: PCI memory mapped at 0x7f2140000000\n"

16030

"ovs-vswitchd[3592]: EAL: PCI memory mapped at 0x7f2140200000\n"

16031

"ovs-ctl[3560]: EAL: Master lcore 0 is ready (tid=fc6cbb00;cpuset=[0])\n"

16032

"ovs-ctl[3560]: EAL: PCI device 0000:04:00.0 on NUMA socket 0\n"

16033

"ovs-ctl[3560]: EAL: probe driver: 8086:1528 rte_ixgbe_pmd\n"

16034

"ovs-ctl[3560]: EAL: Not managed by a supported kernel driver, skipped\n"

16035

"ovs-ctl[3560]: EAL: PCI device 0000:04:00.1 on NUMA socket 0\n"

16036

"ovs-ctl[3560]: EAL: probe driver: 8086:1528 rte_ixgbe_pmd\n"

16037

"ovs-ctl[3560]: EAL: PCI memory mapped at 0x7f2140000000\n"

16038

"ovs-ctl[3560]: EAL: PCI memory mapped at 0x7f2140200000\n"

16039

"ovs-vswitchd[3592]: PMD: eth_ixgbe_dev_init(): MAC: 4, PHY: 3\n"

16040

"ovs-vswitchd[3592]: PMD: eth_ixgbe_dev_init(): port 0 vendorID=0x8086 "

16041

"deviceID=0x1528\n"

16042

"ovs-ctl[3560]: PMD: eth_ixgbe_dev_init(): MAC: 4, PHY: 3\n"

16043

"ovs-ctl[3560]: PMD: eth_ixgbe_dev_init(): port 0 vendorID=0x8086 "

16044

"deviceID=0x1528\n"

16045

"ovs-ctl[3560]: Zone 0: name:<RG_MP_log_history>, phys:0x83fffdec0, "

16046

"len:0x2080, virt:0x7f213fffdec0, socket_id:0, flags:0\n"

16047

"ovs-ctl[3560]: Zone 1: name:<MP_log_history>, phys:0x83fd73d40, "

16048

"len:0x28a0c0, virt:0x7f213fd73d40, socket_id:0, flags:0\n"

16049

"ovs-ctl[3560]: Zone 2: name:<rte_eth_dev_data>, phys:0x83fd43380, "

16050

"len:0x2f700, virt:0x7f213fd43380, socket_id:0, flags:0\n"

16051

"ovs-ctl[3560]: * Starting ovs-vswitchd\n"

16052

"ovs-ctl[3560]: * Enabling remote OVSDB managers\n"

16053

"systemd[1]: Started Open vSwitch Internal Unit.\n"

16054

"systemd[1]: Starting Open vSwitch...\n"

16055

"systemd[1]: Started Open vSwitch.\n"

16056

"\n"

16057

"\n"

16058

"CMD: sudo ovs-vsctl add-br ovsdpdkbr0 -- set bridge ovsdpdkbr0 "

16059

"datapath_type=netdev\n"

16060

"\n"

16061

"SYSLOG:\n"

16062

"2016-01-22T08:58:56.344Z|00008|memory|INFO|37256 kB peak resident set size "

16063

"after 24.5 seconds\n"

16064

"2016-01-22T08:58:56.346Z|00009|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16065

"supports recirculation\n"

16066

"2016-01-22T08:58:56.346Z|00010|ofproto_dpif|INFO|netdev@ovs-netdev: MPLS "

16067

"label stack length probed as 3\n"

16068

"2016-01-22T08:58:56.346Z|00011|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16069

"supports unique flow ids\n"

16070

"2016-01-22T08:58:56.346Z|00012|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16071

"does not support ct_state\n"

16072

"2016-01-22T08:58:56.346Z|00013|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16073

"does not support ct_zone\n"

16074

"2016-01-22T08:58:56.346Z|00014|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16075

"does not support ct_mark\n"

16076

"2016-01-22T08:58:56.346Z|00015|ofproto_dpif|INFO|netdev@ovs-netdev: Datapath "

16077

"does not support ct_label\n"

16078

"2016-01-22T08:58:56.360Z|00016|bridge|INFO|bridge ovsdpdkbr0: added "

16079

"interface ovsdpdkbr0 on port 65534\n"

16080

"2016-01-22T08:58:56.361Z|00017|bridge|INFO|bridge ovsdpdkbr0: using datapath "

16081

"ID 00005a4a1ed0a14d\n"

16082

"2016-01-22T08:58:56.361Z|00018|connmgr|INFO|ovsdpdkbr0: added service "

16083

"controller \"punix:/var/run/openvswitch/ovsdpdkbr0.mgmt\"\n"

16084

"\n"

16085

"OVS-LOG:\n"

16086

"ovs-vsctl: ovs|00001|vsctl|INFO|Called as ovs-vsctl add-br ovsdpdkbr0 -- set "

16087

"bridge ovsdpdkbr0 datapath_type=netdev\n"

16088

"systemd-udevd[3607]: Could not generate persistent MAC address for ovs-"

16089

"netdev: No such file or directory\n"

16090

"kernel: [50165.886554] device ovs-netdev entered promiscuous mode\n"

16091

"kernel: [50165.901261] device ovsdpdkbr0 entered promiscuous mode\n"

16092

"\n"

16093

"\n"

16094

"CMD: sudo ovs-vsctl add-port ovsdpdkbr0 dpdk0 -- set Interface dpdk0 "

16095

"type=dpdk\n"

16096

"\n"

16097

"SYSLOG:\n"

16098

"2016-01-22T08:59:06.369Z|00019|memory|INFO|peak resident set size grew 155% "

16099

"in last 10.0 seconds, from 37256 kB to 95008 kB\n"

16100

"2016-01-22T08:59:06.369Z|00020|memory|INFO|handlers:4 ports:1 revalidators:2 "

16101

"rules:5\n"

16102

"2016-01-22T08:59:30.989Z|00021|dpdk|INFO|Port 0: 8c:dc:d4:b3:6d:e9\n"

16103

"2016-01-22T08:59:31.520Z|00022|dpdk|INFO|Port 0: 8c:dc:d4:b3:6d:e9\n"

16104

"2016-01-22T08:59:31.521Z|00023|dpif_netdev|INFO|Created 1 pmd threads on "

16105

"numa node 0\n"

16106

"2016-01-22T08:59:31.522Z|00001|dpif_netdev(pmd16)|INFO|Core 0 processing "

16107

"port 'dpdk0'\n"

16108

"2016-01-22T08:59:31.522Z|00024|bridge|INFO|bridge ovsdpdkbr0: added "

16109

"interface dpdk0 on port 1\n"

16110

"2016-01-22T08:59:31.522Z|00025|bridge|INFO|bridge ovsdpdkbr0: using datapath "

16111

"ID 00008cdcd4b36de9\n"

16112

"2016-01-22T08:59:31.523Z|00002|dpif_netdev(pmd16)|INFO|Core 0 processing "

16113

"port 'dpdk0'\n"

16114

"\n"

16115

"OVS-LOG:\n"

16116

"ovs-vsctl: ovs|00001|vsctl|INFO|Called as ovs-vsctl add-port ovsdpdkbr0 "

16117

"dpdk0 -- set Interface dpdk0 type=dpdk\n"

16118

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a79ebc0 "

16119

"hw_ring=0x7f211a7a6c00 dma_addr=0x81a7a6c00\n"

16120

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16121

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16122

"ovs-vswitchd[3595]: PMD: ixgbe_dev_rx_queue_setup(): sw_ring=0x7f211a78a6c0 "

16123

"sw_sc_ring=0x7f211a786580 hw_ring=0x7f211a78e800 dma_addr=0x81a78e800\n"

16124

"ovs-vswitchd[3595]: PMD: ixgbe_set_rx_function(): Vector rx enabled, please "

16125

"make sure RX burst size no less than 4 (port=0).\n"

16126

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a79ebc0 "

16127

"hw_ring=0x7f211a7a6c00 dma_addr=0x81a7a6c00\n"

16128

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16129

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16130

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a76e4c0 "

16131

"hw_ring=0x7f211a776500 dma_addr=0x81a776500\n"

16132

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16133

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16134

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a756440 "

16135

"hw_ring=0x7f211a75e480 dma_addr=0x81a75e480\n"

16136

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16137

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16138

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a73e3c0 "

16139

"hw_ring=0x7f211a746400 dma_addr=0x81a746400\n"

16140

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16141

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16142

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a726340 "

16143

"hw_ring=0x7f211a72e380 dma_addr=0x81a72e380\n"

16144

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16145

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16146

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a70e2c0 "

16147

"hw_ring=0x7f211a716300 dma_addr=0x81a716300\n"

16148

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16149

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16150

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a6f6240 "

16151

"hw_ring=0x7f211a6fe280 dma_addr=0x81a6fe280\n"

16152

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16153

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16154

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a6de1c0 "

16155

"hw_ring=0x7f211a6e6200 dma_addr=0x81a6e6200\n"

16156

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16157

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16158

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a6c6140 "

16159

"hw_ring=0x7f211a6ce180 dma_addr=0x81a6ce180\n"

16160

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16161

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16162

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a6ae0c0 "

16163

"hw_ring=0x7f211a6b6100 dma_addr=0x81a6b6100\n"

16164

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16165

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16166

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a696040 "

16167

"hw_ring=0x7f211a69e080 dma_addr=0x81a69e080\n"

16168

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16169

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16170

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a67dfc0 "

16171

"hw_ring=0x7f211a686000 dma_addr=0x81a686000\n"

16172

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16173

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16174

"ovs-vswitchd[3595]: PMD: ixgbe_dev_tx_queue_setup(): sw_ring=0x7f211a665e40 "

16175

"hw_ring=0x7f211a66de80 dma_addr=0x81a66de80\n"

16176

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Using simple tx code path\n"

16177

"ovs-vswitchd[3595]: PMD: ixgbe_set_tx_function(): Vector tx enabled.\n"

16178

"ovs-vswitchd[3595]: PMD: ixgbe_dev_rx_queue_setup(): sw_ring=0x7f211a78a6c0 "

16179

"sw_sc_ring=0x7f211a786580 hw_ring=0x7f211a78e800 dma_addr=0x81a78e800\n"

16180

"ovs-vswitchd[3595]: PMD: ixgbe_set_rx_function(): Vector rx enabled, please "

16181

"make sure RX burst size no less than 4 (port=0).\n"

16182

"\n"

16183

"\n"

16184

"CMD: sudo ovs-vsctl add-port ovsdpdkbr0 vhost-user-1 -- set Interface vhost-"

16185

"user-1 type=dpdkvhostuser\n"

16186

"\n"

16187

"OVS-LOG:\n"

16188

"2016-01-22T09:00:35.145Z|00026|dpdk|INFO|Socket /var/run/openvswitch/vhost-"

16189

"user-1 created for vhost-user port vhost-user-1\n"

16190

"2016-01-22T09:00:35.145Z|00003|dpif_netdev(pmd16)|INFO|Core 0 processing "

16191

"port 'dpdk0'\n"

16192

"2016-01-22T09:00:35.145Z|00004|dpif_netdev(pmd16)|INFO|Core 0 processing "

16193

"port 'vhost-user-1'\n"

16194

"2016-01-22T09:00:35.145Z|00027|bridge|INFO|bridge ovsdpdkbr0: added "

16195

"interface vhost-user-1 on port 2\n"

16196

"\n"

16197

"SYSLOG:\n"

16198

"ovs-vsctl: ovs|00001|vsctl|INFO|Called as ovs-vsctl add-port ovsdpdkbr0 "

16199

"vhost-user-1 -- set Interface vhost-user-1 type=dpdkvhostuser\n"

16200

"ovs-vswitchd[3595]: VHOST_CONFIG: socket created, fd:46\n"

16201

"ovs-vswitchd[3595]: VHOST_CONFIG: bind to /var/run/openvswitch/vhost-user-1\n"

16202

"\n"

16203

"Eventually we can see the poll thread in top\n"

16204

" PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND\n"

16205

" 3595 root 10 -10 4975344 103936 9916 S 100.0 0.3 33:13.56 ovs-"

16206

"vswitchd\n"

16207

"\t\t "

16208

msgstr ""

16209

16210

#: serverguide/C/network-config.xml:1950(ulink)

15617

16211

msgid "DPDK Documentation"

15618

16212

msgstr ""

15619

16213

15620

#: serverguide/C/network-config.xml:1701(ulink)

16214

#: serverguide/C/network-config.xml:1955(ulink)

15621

16215

msgid "Release Notes matching the version packages in Ubuntu 16.04"

15622

16216

msgstr ""

15623

16217

15624

#: serverguide/C/network-config.xml:1706(ulink)

16218

#: serverguide/C/network-config.xml:1960(ulink)

15625

16219

msgid "Linux DPDK User Getting Started"

15626

16220

msgstr ""

15627

16221

15628

#: serverguide/C/network-config.xml:1711(ulink)

16222

#: serverguide/C/network-config.xml:1965(ulink)

15629

16223

msgid "EAL Command-line Options"

15630

16224

msgstr ""

15631

16225

15632

#: serverguide/C/network-config.xml:1716(ulink)

16226

#: serverguide/C/network-config.xml:1970(ulink)

15633

16227

msgid "DPDK Api Documentation"

15634

16228

msgstr ""

15635

16229

15636

#: serverguide/C/network-config.xml:1721(ulink)

16230

#: serverguide/C/network-config.xml:1975(ulink)

15637

16231

msgid "OpenVswitch DPDK installation"

15638

16232

msgstr ""

15639

16233

15640

#: serverguide/C/network-config.xml:1726(ulink)

16234

#: serverguide/C/network-config.xml:1980(ulink)

15641

16235

msgid "Wikipedias definition of DPDK"

15642

16236

msgstr ""

15643

16237

16653

17247

msgid "sudo ldapadd -Q -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"

16654

17248

msgstr ""

16655

17249

16656

#: serverguide/C/network-auth.xml:983(command) serverguide/C/network-auth.xml:1505(command) serverguide/C/network-auth.xml:1690(command) serverguide/C/network-auth.xml:3910(command)

17250

#: serverguide/C/network-auth.xml:983(command) serverguide/C/network-auth.xml:1505(command) serverguide/C/network-auth.xml:1690(command) serverguide/C/network-auth.xml:3903(command)

16657

17251

msgid "sudo systemctl restart slapd.service"

16658

17252

msgstr ""

16659

17253

18142

18736

"specifically you want Samba to do for you and then configure it accordingly."

18143

18737

msgstr ""

18144

18738

18145

#: serverguide/C/network-auth.xml:2218(title) serverguide/C/network-auth.xml:3999(title)

18739

#: serverguide/C/network-auth.xml:2218(title) serverguide/C/network-auth.xml:3992(title)

18146

18740

msgid "Software Installation"

18147

18741

msgstr ""

18148

18742

18394

18988

#: serverguide/C/network-auth.xml:2454(para)

18395

18989

msgid ""

18396

18990

"Next, configure the <application>smbldap-tools</application> package to "

18397

"match your environment. The package is supposed to come with a configuration "

18398

"helper script (smbldap-config.pl, formerly configure.pl) that will ask "

18399

"questions about the needed options but there is a <ulink "

18400

"url=\"https://bugs.launchpad.net/serverguide/+bug/997172\">bug</ulink> "

18401

"whereby it is not installed (but found in the source code; 'apt source "

18402

"smbldap-tools')."

18403

msgstr ""

18404

18405

#: serverguide/C/network-auth.xml:2461(para)

18406

msgid ""

18407

"To manually configure the package, you need to create and edit the files "

18408

"<filename>/etc/smbldap-tools/smbldap.conf</filename> and "

18409

"<filename>/etc/smbldap-tools/smbldap_bind.conf</filename>."

18410

msgstr ""

18411

18412

#: serverguide/C/network-auth.xml:2466(para)

18991

"match your environment. The package comes with a configuration helper "

18992

"script, smbldap-config.pl, that will ask questions."

18993

msgstr ""

18994

18995

#: serverguide/C/network-auth.xml:2459(para)

18413

18996

msgid ""

18414

18997

"The <application>smbldap-populate</application> script will then add the "

18415

18998

"LDAP objects required for Samba. It is a good idea to first make a backup of "

18416

18999

"your DIT using <application>slapcat</application>:"

18417

19000

msgstr ""

18418

19001

18419

#: serverguide/C/network-auth.xml:2472(command)

19002

#: serverguide/C/network-auth.xml:2465(command)

18420

19003

msgid "sudo slapcat -l backup.ldif"

18421

19004

msgstr ""

18422

19005

18423

#: serverguide/C/network-auth.xml:2475(para)

19006

#: serverguide/C/network-auth.xml:2468(para)

18424

19007

msgid "Once you have a backup proceed to populate your directory:"

18425

19008

msgstr ""

18426

19009

18427

#: serverguide/C/network-auth.xml:2480(command)

19010

#: serverguide/C/network-auth.xml:2473(command)

18428

19011

msgid "sudo smbldap-populate"

18429

19012

msgstr ""

18430

19013

18431

#: serverguide/C/network-auth.xml:2483(para)

19014

#: serverguide/C/network-auth.xml:2476(para)

18432

19015

msgid ""

18433

19016

"You can create a LDIF file containing the new Samba objects by executing "

18434

19017

"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "

18437

19020

"and import its data per usual."

18438

19021

msgstr ""

18439

19022

18440

#: serverguide/C/network-auth.xml:2489(para)

19023

#: serverguide/C/network-auth.xml:2482(para)

18441

19024

msgid ""

18442

19025

"Your LDAP directory now has the necessary information to authenticate Samba "

18443

19026

"users."

18444

19027

msgstr ""

18445

19028

18446

#: serverguide/C/network-auth.xml:2498(title) serverguide/C/network-auth.xml:4031(title)

19029

#: serverguide/C/network-auth.xml:2491(title) serverguide/C/network-auth.xml:4024(title)

18447

19030

msgid "Samba Configuration"

18448

19031

msgstr ""

18449

19032

18450

#: serverguide/C/network-auth.xml:2500(para)

19033

#: serverguide/C/network-auth.xml:2493(para)

18451

19034

msgid ""

18452

19035

"There are multiple ways to configure Samba. For details on some common "

18453

19036

"configurations see <xref linkend=\"samba\"/>. To configure Samba to use "

18456

19039

"adding some ldap-related ones:"

18457

19040

msgstr ""

18458

19041

18459

#: serverguide/C/network-auth.xml:2506(programlisting)

19042

#: serverguide/C/network-auth.xml:2499(programlisting)

18460

19043

#, no-wrap

18461

19044

msgid ""

18462

19045

"\n"

18476

19059

" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"

18477

19060

msgstr ""

18478

19061

18479

#: serverguide/C/network-auth.xml:2523(para)

19062

#: serverguide/C/network-auth.xml:2516(para)

18480

19063

msgid "Change the values to match your environment."

18481

19064

msgstr ""

18482

19065

18483

#: serverguide/C/network-auth.xml:2527(para)

19066

#: serverguide/C/network-auth.xml:2520(para)

18484

19067

msgid "Restart <application>samba</application> to enable the new settings:"

18485

19068

msgstr ""

18486

19069

18487

#: serverguide/C/network-auth.xml:2535(para)

19070

#: serverguide/C/network-auth.xml:2528(para)

18488

19071

msgid ""

18489

19072

"Now inform Samba about the rootDN user's password (the one set during the "

18490

19073

"installation of the slapd package):"

18491

19074

msgstr ""

18492

19075

18493

#: serverguide/C/network-auth.xml:2540(command)

19076

#: serverguide/C/network-auth.xml:2533(command)

18494

19077

msgid "sudo smbpasswd -w password"

18495

19078

msgstr ""

18496

19079

18497

#: serverguide/C/network-auth.xml:2543(para)

19080

#: serverguide/C/network-auth.xml:2536(para)

18498

19081

msgid ""

18499

19082

"If you have existing LDAP users that you want to include in your new LDAP-"

18500

19083

"backed Samba they will, of course, also need to be given some of the extra "

18504

19087

"<application>libnss-ldap</application>):"

18505

19088

msgstr ""

18506

19089

18507

#: serverguide/C/network-auth.xml:2551(command)

19090

#: serverguide/C/network-auth.xml:2544(command)

18508

19091

msgid "sudo smbpasswd -a username"

18509

19092

msgstr ""

18510

19093

18511

#: serverguide/C/network-auth.xml:2554(para)

19094

#: serverguide/C/network-auth.xml:2547(para)

18512

19095

msgid ""

18513

19096

"You will prompted to enter a password. It will be considered as the new "

18514

19097

"password for that user. Making it the same as before is reasonable."

18515

19098

msgstr ""

18516

19099

18517

#: serverguide/C/network-auth.xml:2558(para)

19100

#: serverguide/C/network-auth.xml:2551(para)

18518

19101

msgid ""

18519

19102

"To manage user, group, and machine accounts use the utilities provided by "

18520

19103

"the <application>smbldap-tools</application> package. Here are some examples:"

18521

19104

msgstr ""

18522

19105

18523

#: serverguide/C/network-auth.xml:2566(para)

19106

#: serverguide/C/network-auth.xml:2559(para)

18524

19107

msgid "To add a new user:"

18525

19108

msgstr ""

18526

19109

18527

#: serverguide/C/network-auth.xml:2571(command)

19110

#: serverguide/C/network-auth.xml:2564(command)

18528

19111

msgid "sudo smbldap-useradd -a -P username"

18529

19112

msgstr ""

18530

19113

18531

#: serverguide/C/network-auth.xml:2574(para)

19114

#: serverguide/C/network-auth.xml:2567(para)

18532

19115

msgid ""

18533

19116

"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "

18534

19117

"<emphasis>-P</emphasis> option calls the <application>smbldap-"

18536

19119

"a password for the user."

18537

19120

msgstr ""

18538

19121

18539

#: serverguide/C/network-auth.xml:2581(para)

19122

#: serverguide/C/network-auth.xml:2574(para)

18540

19123

msgid "To remove a user:"

18541

19124

msgstr ""

18542

19125

18543

#: serverguide/C/network-auth.xml:2586(command)

19126

#: serverguide/C/network-auth.xml:2579(command)

18544

19127

msgid "sudo smbldap-userdel username"

18545

19128

msgstr ""

18546

19129

18547

#: serverguide/C/network-auth.xml:2589(para)

19130

#: serverguide/C/network-auth.xml:2582(para)

18548

19131

msgid ""

18549

19132

"In the above command, use the <emphasis>-r</emphasis> option to remove the "

18550

19133

"user's home directory."

18551

19134

msgstr ""

18552

19135

18553

#: serverguide/C/network-auth.xml:2595(para)

19136

#: serverguide/C/network-auth.xml:2588(para)

18554

19137

msgid "To add a group:"

18555

19138

msgstr ""

18556

19139

18557

#: serverguide/C/network-auth.xml:2600(command)

19140

#: serverguide/C/network-auth.xml:2593(command)

18558

19141

msgid "sudo smbldap-groupadd -a groupname"

18559

19142

msgstr ""

18560

19143

18561

#: serverguide/C/network-auth.xml:2603(para)

19144

#: serverguide/C/network-auth.xml:2596(para)

18562

19145

msgid ""

18563

19146

"As for <application>smbldap-useradd</application>, the <emphasis>-"

18564

19147

"a</emphasis> adds the Samba attributes."

18565

19148

msgstr ""

18566

19149

18567

#: serverguide/C/network-auth.xml:2609(para)

19150

#: serverguide/C/network-auth.xml:2602(para)

18568

19151

msgid "To make an existing user a member of a group:"

18569

19152

msgstr ""

18570

19153

18571

#: serverguide/C/network-auth.xml:2614(command)

19154

#: serverguide/C/network-auth.xml:2607(command)

18572

19155

msgid "sudo smbldap-groupmod -m username groupname"

18573

19156

msgstr ""

18574

19157

18575

#: serverguide/C/network-auth.xml:2617(para)

19158

#: serverguide/C/network-auth.xml:2610(para)

18576

19159

msgid ""

18577

19160

"The <emphasis>-m</emphasis> option can add more than one user at a time by "

18578

19161

"listing them in comma-separated format."

18579

19162

msgstr ""

18580

19163

18581

#: serverguide/C/network-auth.xml:2623(para)

19164

#: serverguide/C/network-auth.xml:2616(para)

18582

19165

msgid "To remove a user from a group:"

18583

19166

msgstr ""

18584

19167

18585

#: serverguide/C/network-auth.xml:2628(command)

19168

#: serverguide/C/network-auth.xml:2621(command)

18586

19169

msgid "sudo smbldap-groupmod -x username groupname"

18587

19170

msgstr ""

18588

19171

18589

#: serverguide/C/network-auth.xml:2634(para)

19172

#: serverguide/C/network-auth.xml:2627(para)

18590

19173

msgid "To add a Samba machine account:"

18591

19174

msgstr ""

18592

19175

18593

#: serverguide/C/network-auth.xml:2639(command)

19176

#: serverguide/C/network-auth.xml:2632(command)

18594

19177

msgid "sudo smbldap-useradd -t 0 -w username"

18595

19178

msgstr ""

18596

19179

18597

#: serverguide/C/network-auth.xml:2642(para)

19180

#: serverguide/C/network-auth.xml:2635(para)

18598

19181

msgid ""

18599

19182

"Replace <emphasis>username</emphasis> with the name of the workstation. The "

18600

19183

"<emphasis>-t 0</emphasis> option creates the machine account without a "

18604

19187

"<application>smbldap-useradd</application>."

18605

19188

msgstr ""

18606

19189

18607

#: serverguide/C/network-auth.xml:2651(para)

19190

#: serverguide/C/network-auth.xml:2644(para)

18608

19191

msgid ""

18609

19192

"There are utilities in the <application>smbldap-tools</application> package "

18610

19193

"that were not covered here. Here is a complete list:"

18611

19194

msgstr ""

18612

19195

18613

#: serverguide/C/network-auth.xml:2656(ulink)

19196

#: serverguide/C/network-auth.xml:2649(ulink)

18614

19197

msgid "smbldap-groupadd"

18615

19198

msgstr ""

18616

19199

18617

#: serverguide/C/network-auth.xml:2657(ulink)

19200

#: serverguide/C/network-auth.xml:2650(ulink)

18618

19201

msgid "smbldap-groupdel"

18619

19202

msgstr ""

18620

19203

18621

#: serverguide/C/network-auth.xml:2658(ulink)

19204

#: serverguide/C/network-auth.xml:2651(ulink)

18622

19205

msgid "smbldap-groupmod"

18623

19206

msgstr ""

18624

19207

18625

#: serverguide/C/network-auth.xml:2659(ulink)

19208

#: serverguide/C/network-auth.xml:2652(ulink)

18626

19209

msgid "smbldap-groupshow"

18627

19210

msgstr ""

18628

19211

18629

#: serverguide/C/network-auth.xml:2660(ulink)

19212

#: serverguide/C/network-auth.xml:2653(ulink)

18630

19213

msgid "smbldap-passwd"

18631

19214

msgstr ""

18632

19215

18633

#: serverguide/C/network-auth.xml:2661(ulink)

19216

#: serverguide/C/network-auth.xml:2654(ulink)

18634

19217

msgid "smbldap-populate"

18635

19218

msgstr ""

18636

19219

18637

#: serverguide/C/network-auth.xml:2662(ulink)

19220

#: serverguide/C/network-auth.xml:2655(ulink)

18638

19221

msgid "smbldap-useradd"

18639

19222

msgstr ""

18640

19223

18641

#: serverguide/C/network-auth.xml:2663(ulink)

19224

#: serverguide/C/network-auth.xml:2656(ulink)

18642

19225

msgid "smbldap-userdel"

18643

19226

msgstr ""

18644

19227

18645

#: serverguide/C/network-auth.xml:2664(ulink)

19228

#: serverguide/C/network-auth.xml:2657(ulink)

18646

19229

msgid "smbldap-userinfo"

18647

19230

msgstr ""

18648

19231

18649

#: serverguide/C/network-auth.xml:2665(ulink)

19232

#: serverguide/C/network-auth.xml:2658(ulink)

18650

19233

msgid "smbldap-userlist"

18651

19234

msgstr ""

18652

19235

18653

#: serverguide/C/network-auth.xml:2666(ulink)

19236

#: serverguide/C/network-auth.xml:2659(ulink)

18654

19237

msgid "smbldap-usermod"

18655

19238

msgstr ""

18656

19239

18657

#: serverguide/C/network-auth.xml:2667(ulink)

19240

#: serverguide/C/network-auth.xml:2660(ulink)

18658

19241

msgid "smbldap-usershow"

18659

19242

msgstr ""

18660

19243

18661

#: serverguide/C/network-auth.xml:2678(para)

19244

#: serverguide/C/network-auth.xml:2671(para)

18662

19245

msgid ""

18663

19246

"For more information on installing and configuring Samba see <xref "

18664

19247

"linkend=\"samba\"/> of this Ubuntu Server Guide."

18665

19248

msgstr ""

18666

19249

18667

#: serverguide/C/network-auth.xml:2684(para)

19250

#: serverguide/C/network-auth.xml:2677(para)

18668

19251

msgid ""

18669

19252

"There are multiple places where LDAP and Samba is documented in the upstream "

18670

19253

"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba "

18671

19254

"HOWTO Collection</ulink>."

18672

19255

msgstr ""

18673

19256

18674

#: serverguide/C/network-auth.xml:2691(para)

19257

#: serverguide/C/network-auth.xml:2684(para)

18675

19258

msgid ""

18676

19259

"Regarding the above, see specifically the <ulink "

18677

19260

"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"

18678

19261

"Collection/passdb.html\">passdb section</ulink>."

18679

19262

msgstr ""

18680

19263

18681

#: serverguide/C/network-auth.xml:2697(para)

19264

#: serverguide/C/network-auth.xml:2690(para)

18682

19265

msgid ""

18683

19266

"Although dated (2007), the <ulink url=\"http://download.gna.org/smbldap-"

18684

19267

"tools/docs/samba-ldap-howto/\">Linux Samba-OpenLDAP HOWTO</ulink> contains "

18685

19268

"valuable notes."

18686

19269

msgstr ""

18687

19270

18688

#: serverguide/C/network-auth.xml:2703(para)

19271

#: serverguide/C/network-auth.xml:2696(para)

18689

19272

msgid ""

18690

19273

"The main page of the <ulink "

18691

19274

"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Samba Ubuntu "

18693

19276

"prove useful."

18694

19277

msgstr ""

18695

19278

18696

#: serverguide/C/network-auth.xml:2716(title)

19279

#: serverguide/C/network-auth.xml:2709(title)

18697

19280

msgid "Kerberos"

18698

19281

msgstr "Kerberos"

18699

19282

18700

#: serverguide/C/network-auth.xml:2718(para)

19283

#: serverguide/C/network-auth.xml:2711(para)

18701

19284

msgid ""

18702

19285

"<application>Kerberos</application> is a network authentication system based "

18703

19286

"on the principal of a trusted third party. The other two parties being the "

18706

19289

"network environment one step closer to being Single Sign On (SSO)."

18707

19290

msgstr ""

18708

19291

18709

#: serverguide/C/network-auth.xml:2724(para)

19292

#: serverguide/C/network-auth.xml:2717(para)

18710

19293

msgid ""

18711

19294

"This section covers installation and configuration of a Kerberos server, and "

18712

19295

"some example client configurations."

18713

19296

msgstr ""

18714

19297

18715

#: serverguide/C/network-auth.xml:2729(title) serverguide/C/monitoring.xml:13(title) serverguide/C/lamp-applications.xml:15(title) serverguide/C/installation.xml:916(title) serverguide/C/dns.xml:62(title) serverguide/C/dm-multipath.xml:135(title) serverguide/C/chat.xml:15(title) serverguide/C/cgroups.xml:38(title) serverguide/C/backups.xml:551(title)

19298

#: serverguide/C/network-auth.xml:2722(title) serverguide/C/monitoring.xml:13(title) serverguide/C/lamp-applications.xml:15(title) serverguide/C/installation.xml:916(title) serverguide/C/dns.xml:62(title) serverguide/C/dm-multipath.xml:135(title) serverguide/C/chat.xml:15(title) serverguide/C/cgroups.xml:38(title) serverguide/C/backups.xml:551(title)

18716

19299

msgid "Overview"

18717

19300

msgstr ""

18718

19301

18719

#: serverguide/C/network-auth.xml:2731(para)

19302

#: serverguide/C/network-auth.xml:2724(para)

18720

19303

msgid ""

18721

19304

"If you are new to Kerberos there are a few terms that are good to understand "

18722

19305

"before setting up a Kerberos server. Most of the terms will relate to things "

18723

19306

"you may be familiar with in other environments:"

18724

19307

msgstr ""

18725

19308

18726

#: serverguide/C/network-auth.xml:2738(para)

19309

#: serverguide/C/network-auth.xml:2731(para)

18727

19310

msgid ""

18728

19311

"<emphasis>Principal:</emphasis> any users, computers, and services provided "

18729

19312

"by servers need to be defined as Kerberos Principals."

18730

19313

msgstr ""

18731

19314

18732

#: serverguide/C/network-auth.xml:2743(para)

19315

#: serverguide/C/network-auth.xml:2736(para)

18733

19316

msgid ""

18734

19317

"<emphasis>Instances:</emphasis> are used for service principals and special "

18735

19318

"administrative principals."

18736

19319

msgstr ""

18737

19320

18738

#: serverguide/C/network-auth.xml:2748(para)

19321

#: serverguide/C/network-auth.xml:2741(para)

18739

19322

msgid ""

18740

19323

"<emphasis>Realms:</emphasis> the unique realm of control provided by the "

18741

19324

"Kerberos installation. Think of it as the domain or group your hosts and "

18744

19327

"as the realm."

18745

19328

msgstr ""

18746

19329

18747

#: serverguide/C/network-auth.xml:2757(para)

19330

#: serverguide/C/network-auth.xml:2750(para)

18748

19331

msgid ""

18749

19332

"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "

18750

19333

"a database of all principals, the authentication server, and the ticket "

18751

19334

"granting server. For each realm there must be at least one KDC."

18752

19335

msgstr ""

18753

19336

18754

#: serverguide/C/network-auth.xml:2763(para)

19337

#: serverguide/C/network-auth.xml:2756(para)

18755

19338

msgid ""

18756

19339

"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "

18757

19340

"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "

18758

19341

"password which is known only to the user and the KDC."

18759

19342

msgstr ""

18760

19343

18761

#: serverguide/C/network-auth.xml:2769(para)

19344

#: serverguide/C/network-auth.xml:2762(para)

18762

19345

msgid ""

18763

19346

"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "

18764

19347

"clients upon request."

18765

19348

msgstr ""

18766

19349

18767

#: serverguide/C/network-auth.xml:2774(para)

19350

#: serverguide/C/network-auth.xml:2767(para)

18768

19351

msgid ""

18769

19352

"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "

18770

19353

"One principal being a user and the other a service requested by the user. "

18772

19355

"authenticated session."

18773

19356

msgstr ""

18774

19357

18775

#: serverguide/C/network-auth.xml:2780(para)

19358

#: serverguide/C/network-auth.xml:2773(para)

18776

19359

msgid ""

18777

19360

"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "

18778

19361

"principal database and contain the encryption key for a service or host."

18779

19362

msgstr ""

18780

19363

18781

#: serverguide/C/network-auth.xml:2787(para)

19364

#: serverguide/C/network-auth.xml:2780(para)

18782

19365

msgid ""

18783

19366

"To put the pieces together, a Realm has at least one KDC, preferably more "

18784

19367

"for redundancy, which contains a database of Principals. When a user "

18790

19373

"entering another username and password."

18791

19374

msgstr ""

18792

19375

18793

#: serverguide/C/network-auth.xml:2796(title)

19376

#: serverguide/C/network-auth.xml:2789(title)

18794

19377

msgid "Kerberos Server"

18795

19378

msgstr ""

18796

19379

18797

#: serverguide/C/network-auth.xml:2800(para)

19380

#: serverguide/C/network-auth.xml:2793(para)

18798

19381

msgid ""

18799

19382

"For this discussion, we will create a MIT Kerberos domain with the following "

18800

19383

"features (edit them to fit your needs):"

18801

19384

msgstr ""

18802

19385

18803

#: serverguide/C/network-auth.xml:2807(para)

19386

#: serverguide/C/network-auth.xml:2800(para)

18804

19387

msgid "<emphasis>Realm:</emphasis> EXAMPLE.COM"

18805

19388

msgstr ""

18806

19389

18807

#: serverguide/C/network-auth.xml:2812(para)

19390

#: serverguide/C/network-auth.xml:2805(para)

18808

19391

msgid "<emphasis>Primary KDC:</emphasis> kdc01.example.com (192.168.0.1)"

18809

19392

msgstr ""

18810

19393

18811

#: serverguide/C/network-auth.xml:2817(para)

19394

#: serverguide/C/network-auth.xml:2810(para)

18812

19395

msgid "<emphasis>Secondary KDC:</emphasis> kdc02.example.com (192.168.0.2)"

18813

19396

msgstr ""

18814

19397

18815

#: serverguide/C/network-auth.xml:2822(para)

19398

#: serverguide/C/network-auth.xml:2815(para)

18816

19399

msgid "<emphasis>User principal:</emphasis> steve"

18817

19400

msgstr ""

18818

19401

19402

#: serverguide/C/network-auth.xml:2820(para)

19403

msgid "<emphasis>Admin principal:</emphasis> steve/admin"

19404

msgstr ""

19405

18819

19406

#: serverguide/C/network-auth.xml:2827(para)

18820

msgid "<emphasis>Admin principal:</emphasis> steve/admin"

18821

msgstr ""

18822

18823

#: serverguide/C/network-auth.xml:2834(para)

18824

19407

msgid ""

18825

19408

"It is <emphasis>strongly</emphasis> recommended that your network-"

18826

19409

"authenticated users have their uid in a different range (say, starting at "

18827

19410

"5000) than that of your local users."

18828

19411

msgstr ""

18829

19412

18830

#: serverguide/C/network-auth.xml:2840(para)

19413

#: serverguide/C/network-auth.xml:2833(para)

18831

19414

msgid ""

18832

19415

"Before installing the Kerberos server a properly configured DNS server is "

18833

19416

"needed for your domain. Since the Kerberos Realm by convention matches the "

18836

19419

"documentation."

18837

19420

msgstr ""

18838

19421

18839

#: serverguide/C/network-auth.xml:2846(para)

19422

#: serverguide/C/network-auth.xml:2839(para)

18840

19423

msgid ""

18841

19424

"Also, Kerberos is a time sensitive protocol. So if the local system time "

18842

19425

"between a client machine and the server differs by more than five minutes "

18846

19429

"setting up NTP see <xref linkend=\"NTP\"/>."

18847

19430

msgstr ""

18848

19431

18849

#: serverguide/C/network-auth.xml:2854(para)

19432

#: serverguide/C/network-auth.xml:2847(para)

18850

19433

msgid ""

18851

19434

"The first step in creating a Kerberos Realm is to install the "

18852

19435

"<application>krb5-kdc</application> and <application>krb5-admin-"

18853

19436

"server</application> packages. From a terminal enter:"

18854

19437

msgstr ""

18855

19438

18856

#: serverguide/C/network-auth.xml:2860(command) serverguide/C/network-auth.xml:3067(command)

19439

#: serverguide/C/network-auth.xml:2853(command) serverguide/C/network-auth.xml:3060(command)

18857

19440

msgid "sudo apt install krb5-kdc krb5-admin-server"

18858

19441

msgstr ""

18859

19442

18860

#: serverguide/C/network-auth.xml:2863(para)

19443

#: serverguide/C/network-auth.xml:2856(para)

18861

19444

msgid ""

18862

19445

"You will be asked at the end of the install to supply the hostname for the "

18863

19446

"Kerberos and Admin servers, which may or may not be the same server, for the "

18864

19447

"realm."

18865

19448

msgstr ""

18866

19449

18867

#: serverguide/C/network-auth.xml:2870(para)

19450

#: serverguide/C/network-auth.xml:2863(para)

18868

19451

msgid "By default the realm is created from the KDC's domain name."

18869

19452

msgstr ""

18870

19453

18871

#: serverguide/C/network-auth.xml:2875(para)

19454

#: serverguide/C/network-auth.xml:2868(para)

18872

19455

msgid ""

18873

19456

"Next, create the new realm with the <application>kdb5_newrealm</application> "

18874

19457

"utility:"

18875

19458

msgstr ""

18876

19459

18877

#: serverguide/C/network-auth.xml:2880(command)

19460

#: serverguide/C/network-auth.xml:2873(command)

18878

19461

msgid "sudo krb5_newrealm"

18879

19462

msgstr ""

18880

19463

18881

#: serverguide/C/network-auth.xml:2887(para)

19464

#: serverguide/C/network-auth.xml:2880(para)

18882

19465

msgid ""

18883

19466

"The questions asked during installation are used to configure the "

18884

19467

"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "

18888

19471

"typing"

18889

19472

msgstr ""

18890

19473

18891

#: serverguide/C/network-auth.xml:2894(command)

19474

#: serverguide/C/network-auth.xml:2887(command)

18892

19475

msgid "sudo dpkg-reconfigure krb5-kdc"

18893

19476

msgstr ""

18894

19477

18895

#: serverguide/C/network-auth.xml:2900(para)

19478

#: serverguide/C/network-auth.xml:2893(para)

18896

19479

msgid ""

18897

19480

"Once the KDC is properly running, an admin user -- the <emphasis>admin "

18898

19481

"principal</emphasis> -- is needed. It is recommended to use a different "

18900

19483

"<application>kadmin.local</application> utility in a terminal prompt enter:"

18901

19484

msgstr ""

18902

19485

18903

#: serverguide/C/network-auth.xml:2908(command) serverguide/C/network-auth.xml:3778(command)

19486

#: serverguide/C/network-auth.xml:2901(command) serverguide/C/network-auth.xml:3771(command)

18904

19487

msgid "sudo kadmin.local"

18905

19488

msgstr ""

18906

19489

18907

#: serverguide/C/network-auth.xml:2909(computeroutput)

19490

#: serverguide/C/network-auth.xml:2902(computeroutput)

18908

19491

#, no-wrap

18909

19492

msgid ""

18910

19493

"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"

18911

19494

"kadmin.local:"

18912

19495

msgstr ""

18913

19496

18914

#: serverguide/C/network-auth.xml:2910(userinput)

19497

#: serverguide/C/network-auth.xml:2903(userinput)

18915

19498

#, no-wrap

18916

19499

msgid " addprinc steve/admin"

18917

19500

msgstr ""

18918

19501

18919

#: serverguide/C/network-auth.xml:2911(computeroutput)

19502

#: serverguide/C/network-auth.xml:2904(computeroutput)

18920

19503

#, no-wrap

18921

19504

msgid ""

18922

19505

"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "

18927

19510

"kadmin.local:"

18928

19511

msgstr ""

18929

19512

18930

#: serverguide/C/network-auth.xml:2915(userinput)

19513

#: serverguide/C/network-auth.xml:2908(userinput)

18931

19514

#, no-wrap

18932

19515

msgid " quit"

18933

19516

msgstr ""

18934

19517

18935

#: serverguide/C/network-auth.xml:2918(para)

19518

#: serverguide/C/network-auth.xml:2911(para)

18936

19519

msgid ""

18937

19520

"In the above example <emphasis role=\"italic\">steve</emphasis> is the "

18938

19521

"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "

18944

19527

"rights."

18945

19528

msgstr ""

18946

19529

18947

#: serverguide/C/network-auth.xml:2928(para)

19530

#: serverguide/C/network-auth.xml:2921(para)

18948

19531

msgid ""

18949

19532

"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "

18950

19533

"your Realm and admin username."

18951

19534

msgstr ""

18952

19535

18953

#: serverguide/C/network-auth.xml:2936(para)

19536

#: serverguide/C/network-auth.xml:2929(para)

18954

19537

msgid ""

18955

19538

"Next, the new admin user needs to have the appropriate Access Control List "

18956

19539

"(ACL) permissions. The permissions are configured in the "

18957

19540

"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"

18958

19541

msgstr ""

18959

19542

18960

#: serverguide/C/network-auth.xml:2941(programlisting)

19543

#: serverguide/C/network-auth.xml:2934(programlisting)

18961

19544

#, no-wrap

18962

19545

msgid ""

18963

19546

"\n"

18964

19547

"steve/admin@EXAMPLE.COM *\n"

18965

19548

msgstr ""

18966

19549

18967

#: serverguide/C/network-auth.xml:2945(para)

19550

#: serverguide/C/network-auth.xml:2938(para)

18968

19551

msgid ""

18969

19552

"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "

18970

19553

"any operation on all principals in the realm. You can configure principals "

18973

19556

"<emphasis>kadm5.acl</emphasis> man page for details."

18974

19557

msgstr ""

18975

19558

18976

#: serverguide/C/network-auth.xml:2957(para)

19559

#: serverguide/C/network-auth.xml:2950(para)

18977

19560

msgid ""

18978

19561

"Now restart the <application>krb5-admin-server</application> for the new ACL "

18979

19562

"to take affect:"

18980

19563

msgstr ""

18981

19564

18982

#: serverguide/C/network-auth.xml:2962(command)

19565

#: serverguide/C/network-auth.xml:2955(command)

18983

19566

msgid "sudo systemctl restart krb5-admin-server.service"

18984

19567

msgstr ""

18985

19568

18986

#: serverguide/C/network-auth.xml:2968(para)

19569

#: serverguide/C/network-auth.xml:2961(para)

18987

19570

msgid ""

18988

19571

"The new user principal can be tested using the <application>kinit "

18989

19572

"utility</application>:"

18990

19573

msgstr ""

18991

19574

18992

#: serverguide/C/network-auth.xml:2973(command)

19575

#: serverguide/C/network-auth.xml:2966(command)

18993

19576

msgid "kinit steve/admin"

18994

19577

msgstr ""

18995

19578

18996

#: serverguide/C/network-auth.xml:2974(computeroutput)

19579

#: serverguide/C/network-auth.xml:2967(computeroutput)

18997

19580

#, no-wrap

18998

19581

msgid "steve/admin@EXAMPLE.COM's Password:"

18999

19582

msgstr ""

19000

19583

19001

#: serverguide/C/network-auth.xml:2977(para)

19584

#: serverguide/C/network-auth.xml:2970(para)

19002

19585

msgid ""

19003

19586

"After entering the password, use the <application>klist</application> "

19004

19587

"utility to view information about the Ticket Granting Ticket (TGT):"

19005

19588

msgstr ""

19006

19589

19007

#: serverguide/C/network-auth.xml:2983(command) serverguide/C/network-auth.xml:3360(command)

19590

#: serverguide/C/network-auth.xml:2976(command) serverguide/C/network-auth.xml:3353(command)

19008

19591

msgid "klist"

19009

19592

msgstr ""

19010

19593

19011

#: serverguide/C/network-auth.xml:2984(computeroutput)

19594

#: serverguide/C/network-auth.xml:2977(computeroutput)

19012

19595

#, no-wrap

19013

19596

msgid ""

19014

19597

"Credentials cache: FILE:/tmp/krb5cc_1000\n"

19018

19601

"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"

19019

19602

msgstr ""

19020

19603

19021

#: serverguide/C/network-auth.xml:2991(para)

19604

#: serverguide/C/network-auth.xml:2984(para)

19022

19605

msgid ""

19023

19606

"Where the cache filename <filename>krb5cc_1000</filename> is composed of the "

19024

19607

"prefix <filename>krb5cc_</filename> and the user id (uid), which in this "

19027

19610

"For example:"

19028

19611

msgstr ""

19029

19612

19030

#: serverguide/C/network-auth.xml:3000(programlisting)

19613

#: serverguide/C/network-auth.xml:2993(programlisting)

19031

19614

#, no-wrap

19032

19615

msgid ""

19033

19616

"\n"

19034

19617

"192.168.0.1 kdc01.example.com kdc01\n"

19035

19618

msgstr ""

19036

19619

19037

#: serverguide/C/network-auth.xml:3004(para)

19620

#: serverguide/C/network-auth.xml:2997(para)

19038

19621

msgid ""

19039

19622

"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC. "

19040

19623

"This usually happens when you have a Kerberos realm encompassing different "

19041

19624

"networks separated by routers."

19042

19625

msgstr ""

19043

19626

19044

#: serverguide/C/network-auth.xml:3013(para)

19627

#: serverguide/C/network-auth.xml:3006(para)

19045

19628

msgid ""

19046

19629

"The best way to allow clients to automatically determine the KDC for the "

19047

19630

"Realm is using DNS SRV records. Add the following to "

19048

19631

"<filename>/etc/named/db.example.com</filename>:"

19049

19632

msgstr ""

19050

19633

19051

#: serverguide/C/network-auth.xml:3019(programlisting)

19634

#: serverguide/C/network-auth.xml:3012(programlisting)

19052

19635

#, no-wrap

19053

19636

msgid ""

19054

19637

"\n"

19060

19643

"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"

19061

19644

msgstr ""

19062

19645

19063

#: serverguide/C/network-auth.xml:3029(para)

19646

#: serverguide/C/network-auth.xml:3022(para)

19064

19647

msgid ""

19065

19648

"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "

19066

19649

"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "

19067

19650

"KDC."

19068

19651

msgstr ""

19069

19652

19653

#: serverguide/C/network-auth.xml:3028(para)

19654

msgid ""

19655

"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."

19656

msgstr ""

19657

19070

19658

#: serverguide/C/network-auth.xml:3035(para)

19071

msgid ""

19072

"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."

19073

msgstr ""

19074

19075

#: serverguide/C/network-auth.xml:3042(para)

19076

19659

msgid "Your new Kerberos Realm is now ready to authenticate clients."

19077

19660

msgstr ""

19078

19661

19079

#: serverguide/C/network-auth.xml:3049(title)

19662

#: serverguide/C/network-auth.xml:3042(title)

19080

19663

msgid "Secondary KDC"

19081

19664

msgstr ""

19082

19665

19083

#: serverguide/C/network-auth.xml:3051(para)

19666

#: serverguide/C/network-auth.xml:3044(para)

19084

19667

msgid ""

19085

19668

"Once you have one Key Distribution Center (KDC) on your network, it is good "

19086

19669

"practice to have a Secondary KDC in case the primary becomes unavailable. "

19089

19672

"of those networks."

19090

19673

msgstr ""

19091

19674

19092

#: serverguide/C/network-auth.xml:3062(para)

19675

#: serverguide/C/network-auth.xml:3055(para)

19093

19676

msgid ""

19094

19677

"First, install the packages, and when asked for the Kerberos and Admin "

19095

19678

"server names enter the name of the Primary KDC:"

19096

19679

msgstr ""

19097

19680

19098

#: serverguide/C/network-auth.xml:3073(para)

19681

#: serverguide/C/network-auth.xml:3066(para)

19099

19682

msgid ""

19100

19683

"Once you have the packages installed, create the Secondary KDC's host "

19101

19684

"principal. From a terminal prompt, enter:"

19102

19685

msgstr ""

19103

19686

19104

#: serverguide/C/network-auth.xml:3078(command)

19687

#: serverguide/C/network-auth.xml:3071(command)

19105

19688

msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""

19106

19689

msgstr ""

19107

19690

19108

#: serverguide/C/network-auth.xml:3082(para)

19691

#: serverguide/C/network-auth.xml:3075(para)

19109

19692

msgid ""

19110

19693

"After, issuing any <application>kadmin</application> commands you will be "

19111

19694

"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "

19112

19695

"password."

19113

19696

msgstr ""

19114

19697

19115

#: serverguide/C/network-auth.xml:3091(para)

19698

#: serverguide/C/network-auth.xml:3084(para)

19116

19699

msgid "Extract the <emphasis>keytab</emphasis> file:"

19117

19700

msgstr ""

19118

19701

19119

#: serverguide/C/network-auth.xml:3096(command)

19702

#: serverguide/C/network-auth.xml:3089(command)

19120

19703

msgid "kadmin -q \"ktadd -norandkey -k keytab.kdc02 host/kdc02.example.com\""

19121

19704

msgstr ""

19122

19705

19123

#: serverguide/C/network-auth.xml:3102(para)

19706

#: serverguide/C/network-auth.xml:3095(para)

19124

19707

msgid ""

19125

19708

"There should now be a <filename>keytab.kdc02</filename> in the current "

19126

19709

"directory, move the file to <filename>/etc/krb5.keytab</filename>:"

19127

19710

msgstr ""

19128

19711

19129

#: serverguide/C/network-auth.xml:3108(command)

19712

#: serverguide/C/network-auth.xml:3101(command)

19130

19713

msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"

19131

19714

msgstr ""

19132

19715

19133

#: serverguide/C/network-auth.xml:3112(para)

19716

#: serverguide/C/network-auth.xml:3105(para)

19134

19717

msgid ""

19135

19718

"If the path to the <filename>keytab.kdc02</filename> file is different "

19136

19719

"adjust accordingly."

19137

19720

msgstr ""

19138

19721

19139

#: serverguide/C/network-auth.xml:3117(para)

19722

#: serverguide/C/network-auth.xml:3110(para)

19140

19723

msgid ""

19141

19724

"Also, you can list the principals in a Keytab file, which can be useful when "

19142

19725

"troubleshooting, using the <application>klist</application> utility:"

19143

19726

msgstr ""

19144

19727

19145

#: serverguide/C/network-auth.xml:3123(command)

19728

#: serverguide/C/network-auth.xml:3116(command)

19146

19729

msgid "sudo klist -k /etc/krb5.keytab"

19147

19730

msgstr ""

19148

19731

19732

#: serverguide/C/network-auth.xml:3119(para)

19733

msgid ""

19734

"The <application>-k</application> option indicates the file is a keytab file."

19735

msgstr ""

19736

19149

19737

#: serverguide/C/network-auth.xml:3126(para)

19150

19738

msgid ""

19151

"The <application>-k</application> option indicates the file is a keytab file."

19152

msgstr ""

19153

19154

#: serverguide/C/network-auth.xml:3133(para)

19155

msgid ""

19156

19739

"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "

19157

19740

"that lists all KDCs for the Realm. For example, on both primary and "

19158

19741

"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"

19159

19742

msgstr ""

19160

19743

19161

#: serverguide/C/network-auth.xml:3138(programlisting)

19744

#: serverguide/C/network-auth.xml:3131(programlisting)

19162

19745

#, no-wrap

19163

19746

msgid ""

19164

19747

"\n"

19166

19749

"host/kdc02.example.com@EXAMPLE.COM\n"

19167

19750

msgstr ""

19168

19751

19169

#: serverguide/C/network-auth.xml:3146(para)

19752

#: serverguide/C/network-auth.xml:3139(para)

19170

19753

msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"

19171

19754

msgstr ""

19172

19755

19173

#: serverguide/C/network-auth.xml:3151(command)

19756

#: serverguide/C/network-auth.xml:3144(command)

19174

19757

msgid "sudo kdb5_util -s create"

19175

19758

msgstr ""

19176

19759

19177

#: serverguide/C/network-auth.xml:3157(para)

19760

#: serverguide/C/network-auth.xml:3150(para)

19178

19761

msgid ""

19179

19762

"Now start the <application>kpropd</application> daemon, which listens for "

19180

19763

"connections from the <application>kprop</application> utility. "

19181

19764

"<application>kprop</application> is used to transfer dump files:"

19182

19765

msgstr ""

19183

19766

19184

#: serverguide/C/network-auth.xml:3164(command)

19767

#: serverguide/C/network-auth.xml:3157(command)

19185

19768

msgid "sudo kpropd -S"

19186

19769

msgstr ""

19187

19770

19188

#: serverguide/C/network-auth.xml:3170(para)

19771

#: serverguide/C/network-auth.xml:3163(para)

19189

19772

msgid ""

19190

19773

"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "

19191

19774

"of the principal database:"

19192

19775

msgstr ""

19193

19776

19194

#: serverguide/C/network-auth.xml:3175(command)

19777

#: serverguide/C/network-auth.xml:3168(command)

19195

19778

msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"

19196

19779

msgstr ""

19197

19780

19198

#: serverguide/C/network-auth.xml:3181(para)

19781

#: serverguide/C/network-auth.xml:3174(para)

19199

19782

msgid ""

19200

19783

"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "

19201

19784

"<filename>/etc/krb5.keytab</filename>:"

19202

19785

msgstr ""

19203

19786

19204

#: serverguide/C/network-auth.xml:3186(command)

19787

#: serverguide/C/network-auth.xml:3179(command)

19205

19788

msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""

19206

19789

msgstr ""

19207

19790

19208

#: serverguide/C/network-auth.xml:3187(command)

19791

#: serverguide/C/network-auth.xml:3180(command)

19209

19792

msgid "sudo mv keytab.kdc01 /etc/krb5.keytab"

19210

19793

msgstr ""

19211

19794

19212

#: serverguide/C/network-auth.xml:3191(para)

19795

#: serverguide/C/network-auth.xml:3184(para)

19213

19796

msgid ""

19214

19797

"Make sure there is a <emphasis>host</emphasis> for "

19215

19798

"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."

19216

19799

msgstr ""

19217

19800

19218

#: serverguide/C/network-auth.xml:3199(para)

19801

#: serverguide/C/network-auth.xml:3192(para)

19219

19802

msgid ""

19220

19803

"Using the <application>kprop</application> utility push the database to the "

19221

19804

"Secondary KDC:"

19222

19805

msgstr ""

19223

19806

19224

#: serverguide/C/network-auth.xml:3204(command)

19807

#: serverguide/C/network-auth.xml:3197(command)

19225

19808

msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"

19226

19809

msgstr ""

19227

19810

19228

#: serverguide/C/network-auth.xml:3208(para)

19811

#: serverguide/C/network-auth.xml:3201(para)

19229

19812

msgid ""

19230

19813

"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "

19231

19814

"worked. If there is an error message check "

19233

19816

"information."

19234

19817

msgstr ""

19235

19818

19236

#: serverguide/C/network-auth.xml:3214(para)

19819

#: serverguide/C/network-auth.xml:3207(para)

19237

19820

msgid ""

19238

19821

"You may also want to create a <application>cron</application> job to "

19239

19822

"periodically update the database on the Secondary KDC. For example, the "

19241

19824

"split to fit the format of this document):"

19242

19825

msgstr ""

19243

19826

19244

#: serverguide/C/network-auth.xml:3219(programlisting)

19827

#: serverguide/C/network-auth.xml:3212(programlisting)

19245

19828

#, no-wrap

19246

19829

msgid ""

19247

19830

"\n"

19250

19833

"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"

19251

19834

msgstr ""

19252

19835

19253

#: serverguide/C/network-auth.xml:3228(para)

19836

#: serverguide/C/network-auth.xml:3221(para)

19254

19837

msgid ""

19255

19838

"Back on the <emphasis>Secondary KDC</emphasis>, create a "

19256

19839

"<emphasis>stash</emphasis> file to hold the Kerberos master key:"

19257

19840

msgstr ""

19258

19841

19259

#: serverguide/C/network-auth.xml:3234(command)

19842

#: serverguide/C/network-auth.xml:3227(command)

19260

19843

msgid "sudo kdb5_util stash"

19261

19844

msgstr ""

19262

19845

19263

#: serverguide/C/network-auth.xml:3240(para)

19846

#: serverguide/C/network-auth.xml:3233(para)

19264

19847

msgid ""

19265

19848

"Finally, start the <application>krb5-kdc</application> daemon on the "

19266

19849

"Secondary KDC:"

19267

19850

msgstr ""

19268

19851

19269

#: serverguide/C/network-auth.xml:3245(command) serverguide/C/network-auth.xml:3921(command)

19852

#: serverguide/C/network-auth.xml:3238(command) serverguide/C/network-auth.xml:3914(command)

19270

19853

msgid "sudo systemctl start krb5-kdc.service"

19271

19854

msgstr ""

19272

19855

19273

#: serverguide/C/network-auth.xml:3251(para)

19856

#: serverguide/C/network-auth.xml:3244(para)

19274

19857

msgid ""

19275

19858

"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "

19276

19859

"for the Realm. You can test this by stopping the <application>krb5-"

19281

19864

"<filename>/var/log/auth.log</filename> in the Secondary KDC."

19282

19865

msgstr ""

19283

19866

19284

#: serverguide/C/network-auth.xml:3262(title)

19867

#: serverguide/C/network-auth.xml:3255(title)

19285

19868

msgid "Kerberos Linux Client"

19286

19869

msgstr ""

19287

19870

19288

#: serverguide/C/network-auth.xml:3264(para)

19871

#: serverguide/C/network-auth.xml:3257(para)

19289

19872

msgid ""

19290

19873

"This section covers configuring a Linux system as a "

19291

19874

"<application>Kerberos</application> client. This will allow access to any "

19292

19875

"kerberized services once a user has successfully logged into the system."

19293

19876

msgstr ""

19294

19877

19295

#: serverguide/C/network-auth.xml:3272(para)

19878

#: serverguide/C/network-auth.xml:3265(para)

19296

19879

msgid ""

19297

19880

"In order to authenticate to a Kerberos Realm, the <application>krb5-"

19298

19881

"user</application> and <application>libpam-krb5</application> packages are "

19301

19884

"prompt:"

19302

19885

msgstr ""

19303

19886

19304

#: serverguide/C/network-auth.xml:3279(command)

19887

#: serverguide/C/network-auth.xml:3272(command)

19305

19888

msgid ""

19306

19889

"sudo apt install krb5-user libpam-krb5 libpam-ccreds auth-client-config"

19307

19890

msgstr ""

19308

19891

19309

#: serverguide/C/network-auth.xml:3282(para)

19892

#: serverguide/C/network-auth.xml:3275(para)

19310

19893

msgid ""

19311

19894

"The <application>auth-client-config</application> package allows simple "

19312

19895

"configuration of PAM for authentication from multiple sources, and the "

19317

19900

"be accessed off the network as well."

19318

19901

msgstr ""

19319

19902

19320

#: serverguide/C/network-auth.xml:3293(para)

19903

#: serverguide/C/network-auth.xml:3286(para)

19321

19904

msgid "To configure the client in a terminal enter:"

19322

19905

msgstr ""

19323

19906

19324

#: serverguide/C/network-auth.xml:3298(command)

19907

#: serverguide/C/network-auth.xml:3291(command)

19325

19908

msgid "sudo dpkg-reconfigure krb5-config"

19326

19909

msgstr ""

19327

19910

19328

#: serverguide/C/network-auth.xml:3301(para)

19911

#: serverguide/C/network-auth.xml:3294(para)

19329

19912

msgid ""

19330

19913

"You will then be prompted to enter the name of the Kerberos Realm. Also, if "

19331

19914

"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "

19333

19916

"Center (KDC) and Realm Administration server."

19334

19917

msgstr ""

19335

19918

19336

#: serverguide/C/network-auth.xml:3307(para)

19919

#: serverguide/C/network-auth.xml:3300(para)

19337

19920

msgid ""

19338

19921

"The <application>dpkg-reconfigure</application> adds entries to the "

19339

19922

"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "

19340

19923

"entries similar to the following:"

19341

19924

msgstr ""

19342

19925

19343

#: serverguide/C/network-auth.xml:3312(programlisting)

19926

#: serverguide/C/network-auth.xml:3305(programlisting)

19344

19927

#, no-wrap

19345

19928

msgid ""

19346

19929

"\n"

19354

19937

" }\n"

19355

19938

msgstr ""

19356

19939

19357

#: serverguide/C/network-auth.xml:3324(para)

19940

#: serverguide/C/network-auth.xml:3317(para)

19358

19941

msgid ""

19359

19942

"If you set the uid of each of your network-authenticated users to start at "

19360

19943

"5000, as suggested in <xref linkend=\"kerberos-server-installation\"/>, you "

19362

19945

"> 5000:"

19363

19946

msgstr ""

19364

19947

19365

#: serverguide/C/network-auth.xml:3332(command)

19948

#: serverguide/C/network-auth.xml:3325(command)

19366

19949

msgid ""

19367

19950

"# Kerberos should only be applied to ldap/kerberos users, not local ones. "

19368

19951

"for i in common-auth common-session common-account common-password; do sudo "

19370

19953

"minimum_uid=5000/' \\ /etc/pam.d/$i done"

19371

19954

msgstr ""

19372

19955

19373

#: serverguide/C/network-auth.xml:3339(para)

19956

#: serverguide/C/network-auth.xml:3332(para)

19374

19957

msgid ""

19375

19958

"This will avoid being asked for the (non-existent) Kerberos password of a "

19376

19959

"locally authenticated user when changing its password using "

19377

19960

"<command>passwd</command>."

19378

19961

msgstr ""

19379

19962

19380

#: serverguide/C/network-auth.xml:3346(para)

19963

#: serverguide/C/network-auth.xml:3339(para)

19381

19964

msgid ""

19382

19965

"You can test the configuration by requesting a ticket using the "

19383

19966

"<application>kinit</application> utility. For example:"

19384

19967

msgstr ""

19385

19968

19386

#: serverguide/C/network-auth.xml:3351(command)

19969

#: serverguide/C/network-auth.xml:3344(command)

19387

19970

msgid "kinit steve@EXAMPLE.COM"

19388

19971

msgstr ""

19389

19972

19390

#: serverguide/C/network-auth.xml:3352(computeroutput)

19973

#: serverguide/C/network-auth.xml:3345(computeroutput)

19391

19974

#, no-wrap

19392

19975

msgid "Password for steve@EXAMPLE.COM:"

19393

19976

msgstr ""

19394

19977

19395

#: serverguide/C/network-auth.xml:3355(para)

19978

#: serverguide/C/network-auth.xml:3348(para)

19396

19979

msgid ""

19397

19980

"When a ticket has been granted, the details can be viewed using "

19398

19981

"<application>klist</application>:"

19399

19982

msgstr ""

19400

19983

19401

#: serverguide/C/network-auth.xml:3361(computeroutput)

19984

#: serverguide/C/network-auth.xml:3354(computeroutput)

19402

19985

#, no-wrap

19403

19986

msgid ""

19404

19987

"Ticket cache: FILE:/tmp/krb5cc_1000\n"

19413

19996

"klist: You have no tickets cached"

19414

19997

msgstr ""

19415

19998

19416

#: serverguide/C/network-auth.xml:3373(para)

19999

#: serverguide/C/network-auth.xml:3366(para)

19417

20000

msgid ""

19418

20001

"Next, use the <application>auth-client-config</application> to configure the "

19419

20002

"<application>libpam-krb5</application> module to request a ticket during "

19420

20003

"login:"

19421

20004

msgstr ""

19422

20005

19423

#: serverguide/C/network-auth.xml:3379(command)

20006

#: serverguide/C/network-auth.xml:3372(command)

19424

20007

msgid "sudo auth-client-config -a -p kerberos_example"

19425

20008

msgstr ""

19426

20009

19427

#: serverguide/C/network-auth.xml:3382(para)

20010

#: serverguide/C/network-auth.xml:3375(para)

19428

20011

msgid ""

19429

20012

"You will should now receive a ticket upon successful login authentication."

19430

20013

msgstr ""

19431

20014

19432

#: serverguide/C/network-auth.xml:3393(para)

20015

#: serverguide/C/network-auth.xml:3386(para)

19433

20016

msgid ""

19434

20017

"For more information on MIT's version of Kerberos, see the <ulink "

19435

20018

"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."

19436

20019

msgstr ""

19437

20020

19438

#: serverguide/C/network-auth.xml:3398(para)

20021

#: serverguide/C/network-auth.xml:3391(para)

19439

20022

msgid ""

19440

20023

"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "

19441

20024

"Kerberos</ulink> page has more details."

19442

20025

msgstr ""

19443

20026

19444

#: serverguide/C/network-auth.xml:3403(para)

20027

#: serverguide/C/network-auth.xml:3396(para)

19445

20028

msgid ""

19446

20029

"O'Reilly's <ulink "

19447

20030

"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "

19448

20031

"Guide</ulink> is a great reference when setting up Kerberos."

19449

20032

msgstr ""

19450

20033

19451

#: serverguide/C/network-auth.xml:3409(para)

20034

#: serverguide/C/network-auth.xml:3402(para)

19452

20035

msgid ""

19453

20036

"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> and "

19454

20037

"<emphasis>#kerberos</emphasis> IRC channels on <ulink "

19455

20038

"url=\"http://freenode.net/\">Freenode</ulink> if you have Kerberos questions."

19456

20039

msgstr ""

19457

20040

19458

#: serverguide/C/network-auth.xml:3421(title)

20041

#: serverguide/C/network-auth.xml:3414(title)

19459

20042

msgid "Kerberos and LDAP"

19460

20043

msgstr ""

19461

20044

19462

#: serverguide/C/network-auth.xml:3423(para)

20045

#: serverguide/C/network-auth.xml:3416(para)

19463

20046

msgid ""

19464

20047

"Most people will not use Kerberos by itself; once an user is authenticated "

19465

20048

"(Kerberos), we need to figure out what this user can do (authorization). And "

19466

20049

"that would be the job of programs such as <application>LDAP</application>."

19467

20050

msgstr ""

19468

20051

19469

#: serverguide/C/network-auth.xml:3430(para)

20052

#: serverguide/C/network-auth.xml:3423(para)

19470

20053

msgid ""

19471

20054

"Replicating a Kerberos principal database between two servers can be "

19472

20055

"complicated, and adds an additional user database to your network. "

19476

20059

"<application>OpenLDAP</application> for the principal database."

19477

20060

msgstr ""

19478

20061

19479

#: serverguide/C/network-auth.xml:3438(para)

20062

#: serverguide/C/network-auth.xml:3431(para)

19480

20063

msgid ""

19481

20064

"The examples presented here assume <application>MIT Kerberos</application> "

19482

20065

"and <application>OpenLDAP</application>."

19483

20066

msgstr ""

19484

20067

19485

#: serverguide/C/network-auth.xml:3446(title)

20068

#: serverguide/C/network-auth.xml:3439(title)

19486

20069

msgid "Configuring OpenLDAP"

19487

20070

msgstr ""

19488

20071

19489

#: serverguide/C/network-auth.xml:3448(para)

20072

#: serverguide/C/network-auth.xml:3441(para)

19490

20073

msgid ""

19491

20074

"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "

19492

20075

"<application>OpenLDAP</application> server that has network connectivity to "

19495

20078

"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."

19496

20079

msgstr ""

19497

20080

19498

#: serverguide/C/network-auth.xml:3454(para)

20081

#: serverguide/C/network-auth.xml:3447(para)

19499

20082

msgid ""

19500

20083

"It is also required to configure OpenLDAP for TLS and SSL connections, so "

19501

20084

"that traffic between the KDC and LDAP server is encrypted. See <xref "

19502

20085

"linkend=\"openldap-tls\"/> for details."

19503

20086

msgstr ""

19504

20087

19505

#: serverguide/C/network-auth.xml:3460(para)

20088

#: serverguide/C/network-auth.xml:3453(para)

19506

20089

msgid ""

19507

20090

"<filename>cn=admin,cn=config</filename> is a user we created with rights to "

19508

20091

"edit the ldap database. Many times it is the RootDN. Change its value to "

19509

20092

"reflect your setup."

19510

20093

msgstr ""

19511

20094

19512

#: serverguide/C/network-auth.xml:3469(para)

20095

#: serverguide/C/network-auth.xml:3462(para)

19513

20096

msgid ""

19514

20097

"To load the schema into LDAP, on the LDAP server install the "

19515

20098

"<application>krb5-kdc-ldap</application> package. From a terminal enter:"

19516

20099

msgstr ""

19517

20100

19518

#: serverguide/C/network-auth.xml:3475(command)

20101

#: serverguide/C/network-auth.xml:3468(command)

19519

20102

msgid "sudo apt install krb5-kdc-ldap"

19520

20103

msgstr ""

19521

20104

19522

#: serverguide/C/network-auth.xml:3480(para)

20105

#: serverguide/C/network-auth.xml:3473(para)

19523

20106

msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"

19524

20107

msgstr ""

19525

20108

19526

#: serverguide/C/network-auth.xml:3485(command)

20109

#: serverguide/C/network-auth.xml:3478(command)

19527

20110

msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"

19528

20111

msgstr ""

19529

20112

19530

#: serverguide/C/network-auth.xml:3486(command)

20113

#: serverguide/C/network-auth.xml:3479(command)

19531

20114

msgid ""

19532

20115

"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"

19533

20116

msgstr ""

19534

20117

19535

#: serverguide/C/network-auth.xml:3492(para)

20118

#: serverguide/C/network-auth.xml:3485(para)

19536

20119

msgid ""

19537

20120

"The <emphasis>kerberos</emphasis> schema needs to be added to the "

19538

20121

"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "

19540

20123

"linkend=\"openldap-configuration\"/>."

19541

20124

msgstr ""

19542

20125

19543

#: serverguide/C/network-auth.xml:3500(para)

20126

#: serverguide/C/network-auth.xml:3493(para)

19544

20127

msgid ""

19545

20128

"First, create a configuration file named "

19546

20129

"<filename>schema_convert.conf</filename>, or a similar descriptive name, "

19547

20130

"containing the following lines:"

19548

20131

msgstr ""

19549

20132

19550

#: serverguide/C/network-auth.xml:3505(programlisting)

20133

#: serverguide/C/network-auth.xml:3498(programlisting)

19551

20134

#, no-wrap

19552

20135

msgid ""

19553

20136

"\n"

19566

20149

"include /etc/ldap/schema/kerberos.schema\n"

19567

20150

msgstr ""

19568

20151

19569

#: serverguide/C/network-auth.xml:3525(para)

20152

#: serverguide/C/network-auth.xml:3518(para)

19570

20153

msgid "Create a temporary directory to hold the LDIF files:"

19571

20154

msgstr ""

19572

20155

19573

#: serverguide/C/network-auth.xml:3529(command)

20156

#: serverguide/C/network-auth.xml:3522(command)

19574

20157

msgid "mkdir /tmp/ldif_output"

19575

20158

msgstr ""

19576

20159

19577

#: serverguide/C/network-auth.xml:3535(para)

20160

#: serverguide/C/network-auth.xml:3528(para)

19578

20161

msgid ""

19579

20162

"Now use <application>slapcat</application> to convert the schema files:"

19580

20163

msgstr ""

19581

20164

19582

#: serverguide/C/network-auth.xml:3540(command)

20165

#: serverguide/C/network-auth.xml:3533(command)

19583

20166

msgid ""

19584

20167

"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s \\ "

19585

20168

"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"

19586

20169

msgstr ""

19587

20170

20171

#: serverguide/C/network-auth.xml:3537(para)

20172

msgid ""

20173

"Change the above file and path names to match your own if they are different."

20174

msgstr ""

20175

19588

20176

#: serverguide/C/network-auth.xml:3544(para)

19589

20177

msgid ""

19590

"Change the above file and path names to match your own if they are different."

19591

msgstr ""

19592

19593

#: serverguide/C/network-auth.xml:3551(para)

19594

msgid ""

19595

20178

"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "

19596

20179

"changing the following attributes:"

19597

20180

msgstr ""

19598

20181

19599

#: serverguide/C/network-auth.xml:3555(programlisting)

20182

#: serverguide/C/network-auth.xml:3548(programlisting)

19600

20183

#, no-wrap

19601

20184

msgid ""

19602

20185

"\n"

19605

20188

"cn: kerberos\n"

19606

20189

msgstr ""

19607

20190

19608

#: serverguide/C/network-auth.xml:3561(para)

20191

#: serverguide/C/network-auth.xml:3554(para)

19609

20192

msgid "And remove the following lines from the end of the file:"

19610

20193

msgstr ""

19611

20194

19612

#: serverguide/C/network-auth.xml:3565(programlisting)

20195

#: serverguide/C/network-auth.xml:3558(programlisting)

19613

20196

#, no-wrap

19614

20197

msgid ""

19615

20198

"\n"

19622

20205

"modifyTimestamp: 20090111203515Z\n"

19623

20206

msgstr ""

19624

20207

20208

#: serverguide/C/network-auth.xml:3568(para)

20209

msgid ""

20210

"The attribute values will vary, just be sure the attributes are removed."

20211

msgstr ""

20212

19625

20213

#: serverguide/C/network-auth.xml:3575(para)

19626

msgid ""

19627

"The attribute values will vary, just be sure the attributes are removed."

19628

msgstr ""

19629

19630

#: serverguide/C/network-auth.xml:3582(para)

19631

20214

msgid "Load the new schema with <application>ldapadd</application>:"

19632

20215

msgstr ""

19633

20216

19634

#: serverguide/C/network-auth.xml:3587(command)

20217

#: serverguide/C/network-auth.xml:3580(command)

19635

20218

msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"

19636

20219

msgstr ""

19637

20220

19638

#: serverguide/C/network-auth.xml:3593(para)

20221

#: serverguide/C/network-auth.xml:3586(para)

19639

20222

msgid ""

19640

20223

"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"

19641

20224

msgstr ""

19642

20225

19643

#: serverguide/C/network-auth.xml:3598(command) serverguide/C/network-auth.xml:3615(command)

20226

#: serverguide/C/network-auth.xml:3591(command) serverguide/C/network-auth.xml:3608(command)

19644

20227

msgid "ldapmodify -x -D cn=admin,cn=config -W"

19645

20228

msgstr ""

19646

20229

19647

#: serverguide/C/network-auth.xml:3600(userinput)

20230

#: serverguide/C/network-auth.xml:3593(userinput)

19648

20231

#, no-wrap

19649

20232

msgid ""

19650

20233

"dn: olcDatabase={1}hdb,cn=config\n"

19652

20235

"olcDbIndex: krbPrincipalName eq,pres,sub"

19653

20236

msgstr ""

19654

20237

19655

#: serverguide/C/network-auth.xml:3599(computeroutput)

20238

#: serverguide/C/network-auth.xml:3592(computeroutput)

19656

20239

#, no-wrap

19657

20240

msgid ""

19658

20241

"Enter LDAP Password:\n"

19661

20244

"modifying entry \"olcDatabase={1}hdb,cn=config\""

19662

20245

msgstr ""

19663

20246

19664

#: serverguide/C/network-auth.xml:3610(para)

20247

#: serverguide/C/network-auth.xml:3603(para)

19665

20248

msgid "Finally, update the Access Control Lists (ACL):"

19666

20249

msgstr ""

19667

20250

19668

#: serverguide/C/network-auth.xml:3617(userinput)

20251

#: serverguide/C/network-auth.xml:3610(userinput)

19669

20252

#, no-wrap

19670

20253

msgid ""

19671

20254

"dn: olcDatabase={1}hdb,cn=config\n"

19681

20264

"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"

19682

20265

msgstr ""

19683

20266

19684

#: serverguide/C/network-auth.xml:3616(computeroutput)

20267

#: serverguide/C/network-auth.xml:3609(computeroutput)

19685

20268

#, no-wrap

19686

20269

msgid ""

19687

20270

"Enter LDAP Password: \n"

19690

20273

"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"

19691

20274

msgstr ""

19692

20275

19693

#: serverguide/C/network-auth.xml:3637(para)

20276

#: serverguide/C/network-auth.xml:3630(para)

19694

20277

msgid ""

19695

20278

"That's it, your LDAP directory is now ready to serve as a Kerberos principal "

19696

20279

"database."

19697

20280

msgstr ""

19698

20281

19699

#: serverguide/C/network-auth.xml:3643(title)

20282

#: serverguide/C/network-auth.xml:3636(title)

19700

20283

msgid "Primary KDC Configuration"

19701

20284

msgstr ""

19702

20285

19703

#: serverguide/C/network-auth.xml:3645(para)

20286

#: serverguide/C/network-auth.xml:3638(para)

19704

20287

msgid ""

19705

20288

"With <application>OpenLDAP</application> configured it is time to configure "

19706

20289

"the KDC."

19707

20290

msgstr ""

19708

20291

19709

#: serverguide/C/network-auth.xml:3651(para)

20292

#: serverguide/C/network-auth.xml:3644(para)

19710

20293

msgid "First, install the necessary packages, from a terminal enter:"

19711

20294

msgstr ""

19712

20295

19713

#: serverguide/C/network-auth.xml:3656(command) serverguide/C/network-auth.xml:3815(command)

20296

#: serverguide/C/network-auth.xml:3649(command) serverguide/C/network-auth.xml:3808(command)

19714

20297

msgid "sudo apt install krb5-kdc krb5-admin-server krb5-kdc-ldap"

19715

20298

msgstr ""

19716

20299

19717

#: serverguide/C/network-auth.xml:3662(para)

20300

#: serverguide/C/network-auth.xml:3655(para)

19718

20301

msgid ""

19719

20302

"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "

19720

20303

"under the appropriate sections:"

19721

20304

msgstr ""

19722

20305

19723

#: serverguide/C/network-auth.xml:3666(programlisting)

20306

#: serverguide/C/network-auth.xml:3659(programlisting)

19724

20307

#, no-wrap

19725

20308

msgid ""

19726

20309

"\n"

19770

20353

" }\n"

19771

20354

msgstr ""

19772

20355

19773

#: serverguide/C/network-auth.xml:3711(para)

20356

#: serverguide/C/network-auth.xml:3704(para)

19774

20357

msgid ""

19775

20358

"Change <emphasis>example.com</emphasis>, "

19776

20359

"<emphasis>dc=example,dc=com</emphasis>, "

19779

20362

"object, and LDAP server for your network."

19780

20363

msgstr ""

19781

20364

19782

#: serverguide/C/network-auth.xml:3720(para)

20365

#: serverguide/C/network-auth.xml:3713(para)

19783

20366

msgid ""

19784

20367

"Next, use the <application>kdb5_ldap_util</application> utility to create "

19785

20368

"the realm:"

19786

20369

msgstr ""

19787

20370

19788

#: serverguide/C/network-auth.xml:3725(command)

20371

#: serverguide/C/network-auth.xml:3718(command)

19789

20372

msgid ""

19790

20373

"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees \\ "

19791

20374

"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"

19792

20375

msgstr ""

19793

20376

19794

#: serverguide/C/network-auth.xml:3732(para)

20377

#: serverguide/C/network-auth.xml:3725(para)

19795

20378

msgid ""

19796

20379

"Create a stash of the password used to bind to the LDAP server. This "

19797

20380

"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "

19799

20382

"<filename>/etc/krb5.conf</filename>:"

19800

20383

msgstr ""

19801

20384

19802

#: serverguide/C/network-auth.xml:3738(command) serverguide/C/network-auth.xml:3877(command)

20385

#: serverguide/C/network-auth.xml:3731(command) serverguide/C/network-auth.xml:3870(command)

19803

20386

msgid ""

19804

20387

"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f \\ "

19805

20388

"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"

19806

20389

msgstr ""

19807

20390

19808

#: serverguide/C/network-auth.xml:3745(para)

20391

#: serverguide/C/network-auth.xml:3738(para)

19809

20392

msgid "Copy the CA certificate from the LDAP server:"

19810

20393

msgstr ""

19811

20394

19812

#: serverguide/C/network-auth.xml:3750(command)

20395

#: serverguide/C/network-auth.xml:3743(command)

19813

20396

msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."

19814

20397

msgstr ""

19815

20398

19816

#: serverguide/C/network-auth.xml:3751(command)

20399

#: serverguide/C/network-auth.xml:3744(command)

19817

20400

msgid "sudo cp cacert.pem /etc/ssl/certs"

19818

20401

msgstr ""

19819

20402

19820

#: serverguide/C/network-auth.xml:3754(para)

20403

#: serverguide/C/network-auth.xml:3747(para)

19821

20404

msgid ""

19822

20405

"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"

19823

20406

msgstr ""

19824

20407

19825

#: serverguide/C/network-auth.xml:3758(programlisting)

20408

#: serverguide/C/network-auth.xml:3751(programlisting)

19826

20409

#, no-wrap

19827

20410

msgid ""

19828

20411

"\n"

19829

20412

"TLS_CACERT /etc/ssl/certs/cacert.pem\n"

19830

20413

msgstr ""

19831

20414

19832

#: serverguide/C/network-auth.xml:3763(para)

20415

#: serverguide/C/network-auth.xml:3756(para)

19833

20416

msgid ""

19834

20417

"The certificate will also need to be copied to the Secondary KDC, to allow "

19835

20418

"the connection to the LDAP servers using LDAPS."

19836

20419

msgstr ""

19837

20420

19838

#: serverguide/C/network-auth.xml:3772(para)

20421

#: serverguide/C/network-auth.xml:3765(para)

19839

20422

msgid ""

19840

20423

"You can now add Kerberos principals to the LDAP database, and they will be "

19841

20424

"copied to any other LDAP servers configured for replication. To add a "

19842

20425

"principal using the <application>kadmin.local</application> utility enter:"

19843

20426

msgstr ""

19844

20427

19845

#: serverguide/C/network-auth.xml:3780(userinput)

20428

#: serverguide/C/network-auth.xml:3773(userinput)

19846

20429

#, no-wrap

19847

20430

msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"

19848

20431

msgstr ""

19849

20432

19850

#: serverguide/C/network-auth.xml:3779(computeroutput)

20433

#: serverguide/C/network-auth.xml:3772(computeroutput)

19851

20434

#, no-wrap

19852

20435

msgid ""

19853

20436

"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"

19858

20441

"Principal \"steve@EXAMPLE.COM\" created."

19859

20442

msgstr ""

19860

20443

19861

#: serverguide/C/network-auth.xml:3787(para)

20444

#: serverguide/C/network-auth.xml:3780(para)

19862

20445

msgid ""

19863

20446

"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "

19864

20447

"krbExtraData attributes added to the "

19867

20450

"utilities to test that the user is indeed issued a ticket."

19868

20451

msgstr ""

19869

20452

19870

#: serverguide/C/network-auth.xml:3794(para)

20453

#: serverguide/C/network-auth.xml:3787(para)

19871

20454

msgid ""

19872

20455

"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "

19873

20456

"option is needed to add the Kerberos attributes. Otherwise a new "

19874

20457

"<emphasis>principal</emphasis> object will be created in the realm subtree."

19875

20458

msgstr ""

19876

20459

19877

#: serverguide/C/network-auth.xml:3802(title)

20460

#: serverguide/C/network-auth.xml:3795(title)

19878

20461

msgid "Secondary KDC Configuration"

19879

20462

msgstr ""

19880

20463

19881

#: serverguide/C/network-auth.xml:3804(para)

20464

#: serverguide/C/network-auth.xml:3797(para)

19882

20465

msgid ""

19883

20466

"Configuring a Secondary KDC using the LDAP backend is similar to configuring "

19884

20467

"one using the normal Kerberos database."

19885

20468

msgstr ""

19886

20469

19887

#: serverguide/C/network-auth.xml:3810(para)

20470

#: serverguide/C/network-auth.xml:3803(para)

19888

20471

msgid "First, install the necessary packages. In a terminal enter:"

19889

20472

msgstr ""

19890

20473

19891

#: serverguide/C/network-auth.xml:3821(para)

20474

#: serverguide/C/network-auth.xml:3814(para)

19892

20475

msgid ""

19893

20476

"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"

19894

20477

msgstr ""

19895

20478

19896

#: serverguide/C/network-auth.xml:3825(programlisting)

20479

#: serverguide/C/network-auth.xml:3818(programlisting)

19897

20480

#, no-wrap

19898

20481

msgid ""

19899

20482

"\n"

19942

20525

" }\n"

19943

20526

msgstr ""

19944

20527

19945

#: serverguide/C/network-auth.xml:3872(para)

20528

#: serverguide/C/network-auth.xml:3865(para)

19946

20529

msgid "Create the stash for the LDAP bind password:"

19947

20530

msgstr ""

19948

20531

19949

#: serverguide/C/network-auth.xml:3884(para)

20532

#: serverguide/C/network-auth.xml:3877(para)

19950

20533

msgid ""

19951

20534

"Now, on the <emphasis>Primary KDC</emphasis> copy the "

19952

20535

"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "

19955

20538

"media."

19956

20539

msgstr ""

19957

20540

19958

#: serverguide/C/network-auth.xml:3891(command)

20541

#: serverguide/C/network-auth.xml:3884(command)

19959

20542

msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"

19960

20543

msgstr ""

19961

20544

19962

#: serverguide/C/network-auth.xml:3892(command)

20545

#: serverguide/C/network-auth.xml:3885(command)

19963

20546

msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"

19964

20547

msgstr ""

19965

20548

19966

#: serverguide/C/network-auth.xml:3896(para)

20549

#: serverguide/C/network-auth.xml:3889(para)

19967

20550

msgid ""

19968

20551

"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."

19969

20552

msgstr ""

19970

20553

19971

#: serverguide/C/network-auth.xml:3904(para)

20554

#: serverguide/C/network-auth.xml:3897(para)

19972

20555

msgid ""

19973

20556

"Back on the <emphasis>Secondary KDC</emphasis>, (re)start the ldap server "

19974

20557

"only,"

19975

20558

msgstr ""

19976

20559

19977

#: serverguide/C/network-auth.xml:3916(para)

20560

#: serverguide/C/network-auth.xml:3909(para)

19978

20561

msgid "Finally, start the <application>krb5-kdc</application> daemon:"

19979

20562

msgstr ""

19980

20563

20564

#: serverguide/C/network-auth.xml:3920(para)

20565

msgid "Verify the two ldap servers (and kerberos by extension) are in sync."

20566

msgstr ""

20567

19981

20568

#: serverguide/C/network-auth.xml:3927(para)

19982

msgid "Verify the two ldap servers (and kerberos by extension) are in sync."

19983

msgstr ""

19984

19985

#: serverguide/C/network-auth.xml:3934(para)

19986

20569

msgid ""

19987

20570

"You now have redundant KDCs on your network, and with redundant LDAP servers "

19988

20571

"you should be able to continue to authenticate users if one LDAP server, one "

19989

20572

"Kerberos server, or one LDAP and one Kerberos server become unavailable."

19990

20573

msgstr ""

19991

20574

19992

#: serverguide/C/network-auth.xml:3946(para)

20575

#: serverguide/C/network-auth.xml:3939(para)

19993

20576

msgid ""

19994

20577

"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"

19995

20578

"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "

19996

20579

"Guide</ulink> has some additional details."

19997

20580

msgstr ""

19998

20581

19999

#: serverguide/C/network-auth.xml:3952(para)

20582

#: serverguide/C/network-auth.xml:3945(para)

20000

20583

msgid ""

20001

20584

"For more information on <application>kdb5_ldap_util</application> see <ulink "

20002

20585

"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"

20006

20589

"l\">kdb5_ldap_util man page</ulink>."

20007

20590

msgstr ""

20008

20591

20009

#: serverguide/C/network-auth.xml:3960(para)

20592

#: serverguide/C/network-auth.xml:3953(para)

20010

20593

msgid ""

20011

20594

"Another useful link is the <ulink "

20012

20595

"url=\"http://manpages.ubuntu.com/manpages/xenial/en/man5/krb5.conf.5.html\">k"

20013

20596

"rb5.conf man page</ulink>."

20014

20597

msgstr ""

20015

20598

20016

#: serverguide/C/network-auth.xml:3965(para)

20599

#: serverguide/C/network-auth.xml:3958(para)

20017

20600

msgid ""

20018

20601

"Also, see the <ulink "

20019

20602

"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "

20020

20603

"and LDAP</ulink> Ubuntu wiki page."

20021

20604

msgstr ""

20022

20605

20023

#: serverguide/C/network-auth.xml:3974(title)

20606

#: serverguide/C/network-auth.xml:3967(title)

20024

20607

msgid "SSSD and Active Directory"

20025

20608

msgstr ""

20026

20609

20027

#: serverguide/C/network-auth.xml:3975(para)

20610

#: serverguide/C/network-auth.xml:3968(para)

20028

20611

msgid ""

20029

20612

"This section describes the use of sssd to authenticate user logins against "

20030

20613

"an Active Directory via using sssd's \"ad\" provider. In previous versions "

20035

20618

"requires no modifications to the AD structure."

20036

20619

msgstr ""

20037

20620

20038

#: serverguide/C/network-auth.xml:3979(title)

20621

#: serverguide/C/network-auth.xml:3972(title)

20039

20622

msgid "Prerequisites, Assumptions, and Requirements"

20040

20623

msgstr ""

20041

20624

20042

#: serverguide/C/network-auth.xml:3982(para)

20625

#: serverguide/C/network-auth.xml:3975(para)

20043

20626

msgid ""

20044

20627

"This guide does not explain Active Directory, how it works, how to set one "

20045

20628

"up, or how to maintain it. It may not provide <quote>best practices</quote> "

20046

20629

"for your environment."

20047

20630

msgstr ""

20048

20631

20049

#: serverguide/C/network-auth.xml:3984(para)

20632

#: serverguide/C/network-auth.xml:3977(para)

20050

20633

msgid ""

20051

20634

"This guide assumes that a working Active Directory domain is already "

20052

20635

"configured."

20053

20636

msgstr ""

20054

20637

20055

#: serverguide/C/network-auth.xml:3986(para)

20638

#: serverguide/C/network-auth.xml:3979(para)

20056

20639

msgid ""

20057

20640

"The domain controller is acting as an authoritative DNS server for the "

20058

20641

"domain."

20059

20642

msgstr ""

20060

20643

20061

#: serverguide/C/network-auth.xml:3988(para)

20644

#: serverguide/C/network-auth.xml:3981(para)

20062

20645

msgid ""

20063

20646

"The domain controller is the primary DNS resolver as specified in "

20064

20647

"<filename>/etc/resolv.conf</filename>."

20065

20648

msgstr ""

20066

20649

20067

#: serverguide/C/network-auth.xml:3991(para)

20650

#: serverguide/C/network-auth.xml:3984(para)

20068

20651

msgid ""

20069

20652

"The appropriate <emphasis>_kerberos</emphasis>, <emphasis>_ldap</emphasis>, "

20070

20653

"<emphasis>_kpasswd</emphasis>, etc. entries are configured in the DNS zone "

20071

20654

"(see Resources section for external links)."

20072

20655

msgstr ""

20073

20656

20074

#: serverguide/C/network-auth.xml:3993(para)

20657

#: serverguide/C/network-auth.xml:3986(para)

20075

20658

msgid ""

20076

20659

"System time is synchronized on the domain controller (necessary for "

20077

20660

"Kerberos)."

20078

20661

msgstr ""

20079

20662

20080

#: serverguide/C/network-auth.xml:3995(para)

20663

#: serverguide/C/network-auth.xml:3988(para)

20081

20664

msgid ""

20082

20665

"The domain used in this example is <emphasis>myubuntu.example.com</emphasis> "

20083

20666

"."

20084

20667

msgstr ""

20085

20668

20086

#: serverguide/C/network-auth.xml:4000(para)

20669

#: serverguide/C/network-auth.xml:3993(para)

20087

20670

msgid ""

20088

20671

"The following packages are needed: <emphasis>krb5-user</emphasis>, "

20089

20672

"<emphasis>samba</emphasis>, <emphasis>sssd</emphasis>, and "

20092

20675

"controllers are needed for this step."

20093

20676

msgstr ""

20094

20677

20095

#: serverguide/C/network-auth.xml:4001(para)

20678

#: serverguide/C/network-auth.xml:3994(para)

20096

20679

msgid "Install these packages now."

20097

20680

msgstr ""

20098

20681

20099

#: serverguide/C/network-auth.xml:4003(command)

20682

#: serverguide/C/network-auth.xml:3996(command)

20100

20683

msgid "sudo apt install krb5-user samba sssd ntp"

20101

20684

msgstr ""

20102

20685

20103

#: serverguide/C/network-auth.xml:4004(para)

20686

#: serverguide/C/network-auth.xml:3997(para)

20104

20687

msgid ""

20105

20688

"See the next section for the answers to the questions asked by the "

20106

20689

"<emphasis>krb5-user</emphasis> postinstall script."

20107

20690

msgstr ""

20108

20691

20109

#: serverguide/C/network-auth.xml:4007(title)

20692

#: serverguide/C/network-auth.xml:4000(title)

20110

20693

msgid "Kerberos Configuration"

20111

20694

msgstr ""

20112

20695

20113

#: serverguide/C/network-auth.xml:4008(para)

20696

#: serverguide/C/network-auth.xml:4001(para)

20114

20697

msgid ""

20115

20698

"The installation of <emphasis>krb5-user</emphasis> will prompt for the realm "

20116

20699

"name (in ALL UPPERCASE), the kdc server (i.e. domain controller) and admin "

20120

20703

"not, then both are needed."

20121

20704

msgstr ""

20122

20705

20123

#: serverguide/C/network-auth.xml:4009(para)

20706

#: serverguide/C/network-auth.xml:4002(para)

20124

20707

msgid ""

20125

20708

"If the domain is <emphasis>myubuntu.example.com</emphasis>, enter the realm "

20126

20709

"as <emphasis>MYUBUNTU.EXAMPLE.COM</emphasis>"

20127

20710

msgstr ""

20128

20711

20129

#: serverguide/C/network-auth.xml:4012(para)

20712

#: serverguide/C/network-auth.xml:4005(para)

20130

20713

msgid ""

20131

20714

"Optionally, edit <emphasis>/etc/krb5.conf</emphasis> with a few additional "

20132

20715

"settings to specify Kerberos ticket lifetime (these values are safe to use "

20133

20716

"as defaults):"

20134

20717

msgstr ""

20135

20718

20136

#: serverguide/C/network-auth.xml:4013(programlisting)

20719

#: serverguide/C/network-auth.xml:4006(programlisting)

20137

20720

#, no-wrap

20138

20721

msgid ""

20139

20722

"\n"

20145

20728

"\t\t"

20146

20729

msgstr ""

20147

20730

20148

#: serverguide/C/network-auth.xml:4021(para)

20731

#: serverguide/C/network-auth.xml:4014(para)

20149

20732

msgid ""

20150

20733

"If default_realm is not specified, it may be necessary to log in with "

20151

20734

"<quote>username@domain</quote> instead of <quote>username</quote>."

20152

20735

msgstr ""

20153

20736

20154

#: serverguide/C/network-auth.xml:4023(para)

20737

#: serverguide/C/network-auth.xml:4016(para)

20155

20738

msgid ""

20156

20739

"The system time on the Active Directory member needs to be consistent with "

20157

20740

"that of the domain controller, or Kerberos authentication may fail. Ideally, "

20159

20742

"<filename>/etc/ntp.conf</filename>:"

20160

20743

msgstr ""

20161

20744

20162

#: serverguide/C/network-auth.xml:4025(programlisting)

20745

#: serverguide/C/network-auth.xml:4018(programlisting)

20163

20746

#, no-wrap

20164

20747

msgid ""

20165

20748

"\n"

20166

20749

"server dc.myubuntu.example.com\n"

20167

20750

msgstr ""

20168

20751

20169

#: serverguide/C/network-auth.xml:4032(para)

20752

#: serverguide/C/network-auth.xml:4025(para)

20170

20753

msgid ""

20171

20754

"Samba will be used to perform netbios/nmbd services related to Active "

20172

20755

"Directory authentication, even if no file shares are exported. Edit the file "

20174

20757

"<emphasis>[global]</emphasis> section:"

20175

20758

msgstr ""

20176

20759

20177

#: serverguide/C/network-auth.xml:4034(programlisting)

20760

#: serverguide/C/network-auth.xml:4027(programlisting)

20178

20761

#, no-wrap

20179

20762

msgid ""

20180

20763

"\n"

20188

20771

"security = ads\n"

20189

20772

msgstr ""

20190

20773

20191

#: serverguide/C/network-auth.xml:4045(para)

20774

#: serverguide/C/network-auth.xml:4038(para)

20192

20775

msgid ""

20193

20776

"Some guides specify that \"password server\" should be specified and pointed "

20194

20777

"to the domain controller. This is only necessary if DNS is not properly set "

20196

20779

"server\" is specified with \"security = ads\"."

20197

20780

msgstr ""

20198

20781

20199

#: serverguide/C/network-auth.xml:4050(title)

20782

#: serverguide/C/network-auth.xml:4043(title)

20200

20783

msgid "SSSD Configuration"

20201

20784

msgstr ""

20202

20785

20203

#: serverguide/C/network-auth.xml:4052(para)

20786

#: serverguide/C/network-auth.xml:4045(para)

20204

20787

msgid ""

20205

20788

"There is no default/example config file for "

20206

20789

"<filename>/etc/sssd/sssd.conf</filename> included in the sssd package. It is "

20207

20790

"necessary to create one. This is a minimal working config file:"

20208

20791

msgstr ""

20209

20792

20210

#: serverguide/C/network-auth.xml:4054(programlisting)

20793

#: serverguide/C/network-auth.xml:4047(programlisting)

20211

20794

#, no-wrap

20212

20795

msgid ""

20213

20796

"\n"

20239

20822

"# enumerate = true\n"

20240

20823

msgstr ""

20241

20824

20242

#: serverguide/C/network-auth.xml:4081(para)

20825

#: serverguide/C/network-auth.xml:4074(para)

20243

20826

msgid ""

20244

20827

"After saving this file, set the ownership to root and the file permissions "

20245

20828

"to 600:"

20246

20829

msgstr ""

20247

20830

20248

#: serverguide/C/network-auth.xml:4082(command)

20831

#: serverguide/C/network-auth.xml:4075(command)

20249

20832

msgid "sudo chown root:root /etc/sssd/sssd.conf"

20250

20833

msgstr ""

20251

20834

20252

#: serverguide/C/network-auth.xml:4083(command)

20835

#: serverguide/C/network-auth.xml:4076(command)

20253

20836

msgid "sudo chmod 600 /etc/sssd/sssd.conf"

20254

20837

msgstr ""

20255

20838

20256

#: serverguide/C/network-auth.xml:4085(para)

20839

#: serverguide/C/network-auth.xml:4078(para)

20257

20840

msgid ""

20258

20841

"If the ownership or permissions are not correct, sssd will refuse to start."

20259

20842

msgstr ""

20260

20843

20261

#: serverguide/C/network-auth.xml:4089(title)

20844

#: serverguide/C/network-auth.xml:4082(title)

20262

20845

msgid "Verify nsswitch.conf Configuration"

20263

20846

msgstr ""

20264

20847

20265

#: serverguide/C/network-auth.xml:4090(para)

20848

#: serverguide/C/network-auth.xml:4083(para)

20266

20849

msgid ""

20267

20850

"The post-install script for the sssd package makes some modifications to "

20268

20851

"/etc/nsswitch.conf automatically. It should look something like this:"

20269

20852

msgstr ""

20270

20853

20271

#: serverguide/C/network-auth.xml:4092(programlisting)

20854

#: serverguide/C/network-auth.xml:4085(programlisting)

20272

20855

#, no-wrap

20273

20856

msgid ""

20274

20857

"\n"

20279

20862

"sudoers: files sss\n"

20280

20863

msgstr ""

20281

20864

20282

#: serverguide/C/network-auth.xml:4102(title)

20865

#: serverguide/C/network-auth.xml:4095(title)

20283

20866

msgid "Modify /etc/hosts"

20284

20867

msgstr ""

20285

20868

20286

#: serverguide/C/network-auth.xml:4103(para)

20869

#: serverguide/C/network-auth.xml:4096(para)

20287

20870

msgid ""

20288

20871

"Add an alias to the localhost entry in /etc/hosts specifying the FQDN. For "

20289

20872

"example:"

20290

20873

msgstr ""

20291

20874

20292

#: serverguide/C/network-auth.xml:4104(programlisting)

20875

#: serverguide/C/network-auth.xml:4097(programlisting)

20293

20876

#, no-wrap

20294

20877

msgid "192.168.1.10 myserver myserver.myubuntu.example.com"

20295

20878

msgstr ""

20296

20879

20297

#: serverguide/C/network-auth.xml:4106(para)

20880

#: serverguide/C/network-auth.xml:4099(para)

20298

20881

msgid "This is useful in conjunction with dynamic DNS updates."

20299

20882

msgstr ""

20300

20883

20301

#: serverguide/C/network-auth.xml:4110(title)

20884

#: serverguide/C/network-auth.xml:4103(title)

20302

20885

msgid "Join the Active Directory"

20303

20886

msgstr ""

20304

20887

20305

#: serverguide/C/network-auth.xml:4111(para)

20888

#: serverguide/C/network-auth.xml:4104(para)

20306

20889

msgid "Now, restart ntp and samba and start sssd."

20307

20890

msgstr ""

20308

20891

20309

#: serverguide/C/network-auth.xml:4112(command)

20892

#: serverguide/C/network-auth.xml:4105(command)

20310

20893

msgid "sudo systemctl restart ntp.service"

20311

20894

msgstr ""

20312

20895

20313

#: serverguide/C/network-auth.xml:4114(command)

20896

#: serverguide/C/network-auth.xml:4107(command)

20314

20897

msgid "sudo systemctl start sssd.service"

20315

20898

msgstr ""

20316

20899

20317

#: serverguide/C/network-auth.xml:4116(para)

20900

#: serverguide/C/network-auth.xml:4109(para)

20318

20901

msgid "Test the configuration by obtaining a Kerberos ticket:"

20319

20902

msgstr ""

20320

20903

20321

#: serverguide/C/network-auth.xml:4118(command)

20904

#: serverguide/C/network-auth.xml:4111(command)

20322

20905

msgid "sudo kinit Administrator"

20323

20906

msgstr ""

20324

20907

20325

#: serverguide/C/network-auth.xml:4120(para)

20908

#: serverguide/C/network-auth.xml:4113(para)

20326

20909

msgid "Verify the ticket with:"

20327

20910

msgstr ""

20328

20911

20329

#: serverguide/C/network-auth.xml:4121(command)

20912

#: serverguide/C/network-auth.xml:4114(command)

20330

20913

msgid "sudo klist"

20331

20914

msgstr ""

20332

20915

20333

#: serverguide/C/network-auth.xml:4123(para)

20916

#: serverguide/C/network-auth.xml:4116(para)

20334

20917

msgid ""

20335

20918

"If there is a ticket with an expiration date listed, then it is time to join "

20336

20919

"the domain:"

20337

20920

msgstr ""

20338

20921

20339

#: serverguide/C/network-auth.xml:4125(command)

20922

#: serverguide/C/network-auth.xml:4118(command)

20340

20923

msgid "sudo net ads join -k"

20341

20924

msgstr ""

20342

20925

20343

#: serverguide/C/network-auth.xml:4127(para)

20926

#: serverguide/C/network-auth.xml:4120(para)

20344

20927

msgid ""

20345

20928

"A warning about \"No DNS domain configured. Unable to perform DNS Update.\" "

20346

20929

"probably means that there is no (correct) alias in "

20350

20933

"\"Modify /etc/hosts\" above."

20351

20934

msgstr ""

20352

20935

20353

#: serverguide/C/network-auth.xml:4129(para)

20936

#: serverguide/C/network-auth.xml:4122(para)

20354

20937

msgid ""

20355

20938

"(The message \"NT_STATUS_UNSUCCESSFUL\" indicates the domain join failed and "

20356

20939

"something is incorrect. Review the prior steps before proceeding)."

20357

20940

msgstr ""

20358

20941

20359

#: serverguide/C/network-auth.xml:4131(para)

20942

#: serverguide/C/network-auth.xml:4124(para)

20360

20943

msgid ""

20361

20944

"Here are a couple of (optional) checks to verify that the domain join was "

20362

20945

"successful. Note that if the domain was successfully joined but one or both "

20364

20947

"Some of the changes appear to be asynchronous."

20365

20948

msgstr ""

20366

20949

20367

#: serverguide/C/network-auth.xml:4133(para)

20950

#: serverguide/C/network-auth.xml:4126(para)

20368

20951

msgid "Verification option #1:"

20369

20952

msgstr ""

20370

20953

20371

#: serverguide/C/network-auth.xml:4134(para)

20954

#: serverguide/C/network-auth.xml:4127(para)

20372

20955

msgid ""

20373

20956

"Check the default Organizational Unit for computer accounts in the Active "

20374

20957

"Directory to verify that the computer account was created. (Organizational "

20375

20958

"Units in Active Directory is a topic outside the scope of this guide)."

20376

20959

msgstr ""

20377

20960

20378

#: serverguide/C/network-auth.xml:4136(para)

20961

#: serverguide/C/network-auth.xml:4129(para)

20379

20962

msgid "Verification option #2"

20380

20963

msgstr ""

20381

20964

20382

#: serverguide/C/network-auth.xml:4137(para)

20965

#: serverguide/C/network-auth.xml:4130(para)

20383

20966

msgid "Execute this command for a specific AD user (e.g. administrator)"

20384

20967

msgstr ""

20385

20968

20386

#: serverguide/C/network-auth.xml:4138(command)

20969

#: serverguide/C/network-auth.xml:4131(command)

20387

20970

msgid "getent passwd username"

20388

20971

msgstr ""

20389

20972

20390

#: serverguide/C/network-auth.xml:4140(para)

20973

#: serverguide/C/network-auth.xml:4133(para)

20391

20974

msgid ""

20392

20975

"If <emphasis>enumerate = true</emphasis> is set in "

20393

20976

"<filename>sssd.conf</filename>, <emphasis>getent passwd</emphasis> with no "

20395

20978

"testing, but is slow and not recommended for production."

20396

20979

msgstr ""

20397

20980

20398

#: serverguide/C/network-auth.xml:4144(title)

20981

#: serverguide/C/network-auth.xml:4137(title)

20399

20982

msgid "Test Authentication"

20400

20983

msgstr ""

20401

20984

20402

#: serverguide/C/network-auth.xml:4145(para)

20985

#: serverguide/C/network-auth.xml:4138(para)

20403

20986

msgid ""

20404

20987

"It should now be possible to authenticate using an Active Directory User's "

20405

20988

"credentials:"

20406

20989

msgstr ""

20407

20990

20408

#: serverguide/C/network-auth.xml:4147(command)

20991

#: serverguide/C/network-auth.xml:4140(command)

20409

20992

msgid "su - username"

20410

20993

msgstr ""

20411

20994

20412

#: serverguide/C/network-auth.xml:4149(para)

20995

#: serverguide/C/network-auth.xml:4142(para)

20413

20996

msgid ""

20414

20997

"If this works, then other login methods (getty, ssh) should also work."

20415

20998

msgstr ""

20416

20999

20417

#: serverguide/C/network-auth.xml:4151(para)

21000

#: serverguide/C/network-auth.xml:4144(para)

20418

21001

msgid ""

20419

21002

"If the computer account was created, indicating that the system was "

20420

21003

"\"joined\" to the domain, but authentication is unsuccessful, it may be "

20423

21006

"earlier in this guide."

20424

21007

msgstr ""

20425

21008

20426

#: serverguide/C/network-auth.xml:4155(title)

21009

#: serverguide/C/network-auth.xml:4148(title)

20427

21010

msgid "Home directories with pam_mkhomedir (optional)"

20428

21011

msgstr ""

20429

21012

20430

#: serverguide/C/network-auth.xml:4156(para)

21013

#: serverguide/C/network-auth.xml:4149(para)

20431

21014

msgid ""

20432

21015

"When logging in using an Active Directory user account, it is likely that "

20433

21016

"user has no home directory. This can be fixed with pam_mkdhomedir.so, which "

20436

21019

"after <emphasis>session required pam_unix.so:</emphasis>"

20437

21020

msgstr ""

20438

21021

20439

#: serverguide/C/network-auth.xml:4157(programlisting)

21022

#: serverguide/C/network-auth.xml:4150(programlisting)

20440

21023

#, no-wrap

20441

21024

msgid ""

20442

21025

"\n"

20443

21026

"session required pam_mkhomedir.so skel=/etc/skel/ umask=0022\n"

20444

21027

msgstr ""

20445

21028

20446

#: serverguide/C/network-auth.xml:4161(para)

21029

#: serverguide/C/network-auth.xml:4154(para)

20447

21030

msgid ""

20448

21031

"This may also need <emphasis>override_homedir</emphasis> in "

20449

21032

"<filename>sssd.conf</filename> to function correctly, so make sure that's "

20450

21033

"set."

20451

21034

msgstr ""

20452

21035

20453

#: serverguide/C/network-auth.xml:4165(title)

21036

#: serverguide/C/network-auth.xml:4158(title)

20454

21037

msgid "Desktop Ubuntu Authentication"

20455

21038

msgstr ""

20456

21039

20457

#: serverguide/C/network-auth.xml:4166(para)

21040

#: serverguide/C/network-auth.xml:4159(para)

20458

21041

msgid ""

20459

21042

"It is possible to also authenticate logins to Ubuntu Desktop using Active "

20460

21043

"Directory accounts. The AD accounts will not show up in the pick list with "

20463

21046

"append the following two lines:"

20464

21047

msgstr ""

20465

21048

20466

#: serverguide/C/network-auth.xml:4168(programlisting)

21049

#: serverguide/C/network-auth.xml:4161(programlisting)

20467

21050

#, no-wrap

20468

21051

msgid ""

20469

21052

"\n"

20471

21054

"greeter-hide-users=true\n"

20472

21055

msgstr ""

20473

21056

20474

#: serverguide/C/network-auth.xml:4173(para)

21057

#: serverguide/C/network-auth.xml:4166(para)

20475

21058

msgid ""

20476

21059

"Reboot to restart lightdm. It should now be possible to log in using a "

20477

21060

"domain account using either <emphasis>username</emphasis> or "

20478

21061

"<emphasis>username/username@domain</emphasis> format."

20479

21062

msgstr ""

20480

21063

20481

#: serverguide/C/network-auth.xml:4179(ulink)

21064

#: serverguide/C/network-auth.xml:4172(ulink)

20482

21065

msgid "SSSD Project"

20483

21066

msgstr ""

20484

21067

20485

#: serverguide/C/network-auth.xml:4180(ulink)

21068

#: serverguide/C/network-auth.xml:4173(ulink)

20486

21069

msgid "DNS Server Configuration guidelines"

20487

21070

msgstr ""

20488

21071

20489

#: serverguide/C/network-auth.xml:4181(ulink)

21072

#: serverguide/C/network-auth.xml:4174(ulink)

20490

21073

msgid "Active Directory DNS Zone Entries"

20491

21074

msgstr ""

20492

21075

20493

#: serverguide/C/network-auth.xml:4182(ulink)

21076

#: serverguide/C/network-auth.xml:4175(ulink)

20494

21077

msgid "Kerberos config options"

20495

21078

msgstr ""

20496

21079

22071

22654

#: serverguide/C/mail.xml:249(para)

22072

22655

msgid ""

22073

22656

"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "

22074

"enable Dovecot SASL the <application>dovecot-common</application> package "

22075

"will need to be installed. From a terminal prompt enter the following:"

22657

"enable Dovecot SASL the <application>dovecot-core</application> package will "

22658

"need to be installed. From a terminal prompt enter the following:"

22076

22659

msgstr ""

22077

22660

22078

22661

#: serverguide/C/mail.xml:255(command)

22079

msgid "sudo apt install dovecot-common"

22662

msgid "sudo apt install dovecot-core"

22080

22663

msgstr ""

22081

22664

22082

22665

#: serverguide/C/mail.xml:257(para)

24422

25005

msgstr ""

24423

25006

24424

25007

#: serverguide/C/lamp-applications.xml:278(title)

24425

msgid "MediaWiki"

24426

msgstr "MediaWiki"

25008

msgid "phpMyAdmin"

25009

msgstr ""

24427

25010

24428

25011

#: serverguide/C/lamp-applications.xml:280(para)

24429

25012

msgid ""

24430

"MediaWiki is an web based Wiki software written in the PHP language. It can "

24431

"either use <application>MySQL</application> or "

24432

"<application>PostgreSQL</application> Database Management System."

24433

msgstr ""

24434

"미디어위키는 PHP 언어로 작성된 웹 기반의 위키 소프트웨어입니다. 미디어위키는 "

24435

"<application>MySQL</application> 혹은 <application>PostgreSQL</application> "

24436

"데이터베이스 관리 시스템을 사용할 수 있습니다."

24437

24438

#: serverguide/C/lamp-applications.xml:290(para)

24439

msgid ""

24440

"Before installing <application>MediaWiki</application> you should also "

24441

"install <application>Apache2</application>, the "

24442

"<application>PHP</application> scripting language and a Database Management "

24443

"System. <application>MySQL</application> or "

24444

"<application>PostgreSQL</application> are the most common, choose one "

24445

"depending on your need. Please refer to those sections in this manual for "

24446

"installation instructions."

24447

msgstr ""

24448

24449

#: serverguide/C/lamp-applications.xml:298(para)

24450

msgid ""

24451

"To install <application>MediaWiki</application>, run the following command "

24452

"in the command prompt:"

24453

msgstr "<application>MediaWiki</application>를 설치하려면, 명령행에서 다음을 실행하세요:"

24454

24455

#: serverguide/C/lamp-applications.xml:304(command)

24456

msgid "sudo apt install mediawiki php-gd"

24457

msgstr ""

24458

24459

#: serverguide/C/lamp-applications.xml:307(para)

24460

msgid ""

24461

"For additional <application>MediaWiki</application> functionality see the "

24462

"<application>mediawiki-extensions</application> package."

24463

msgstr ""

24464

24465

#: serverguide/C/lamp-applications.xml:317(para)

24466

msgid ""

24467

"The Apache configuration file <filename>mediawiki.conf</filename> for "

24468

"<application>MediaWiki</application> is installed in "

24469

"<filename>/etc/apache2/conf-available/</filename> directory. To access "

24470

"<application>MediaWiki</application>, uncomment the following line in the "

24471

"file."

24472

msgstr ""

24473

24474

#: serverguide/C/lamp-applications.xml:324(screen)

24475

#, no-wrap

24476

msgid ""

24477

"\n"

24478

"# Alias /mediawiki /var/lib/mediawiki\n"

24479

msgstr ""

24480

24481

#: serverguide/C/lamp-applications.xml:328(para)

24482

msgid ""

24483

"The <application>MediaWiki</application> configuration also needs to be "

24484

"enabled."

24485

msgstr ""

24486

24487

#: serverguide/C/lamp-applications.xml:332(command)

24488

msgid "sudo a2enconf mediawiki.conf"

24489

msgstr ""

24490

24491

#: serverguide/C/lamp-applications.xml:335(para)

24492

msgid "Restart Apache server."

24493

msgstr ""

24494

24495

#: serverguide/C/lamp-applications.xml:342(para)

24496

msgid ""

24497

"Access <application>MediaWiki</application> by visiting <ulink "

24498

"url=\"http://localhost/mediawiki/mw-"

24499

"config/index.php\">http://localhost/mediawiki/mw-config/index.php</ulink>. "

24500

"(Or <ulink url=\"http://NAME_OF_YOUR_VIRTUAL_HOST/mediawiki/mw-"

24501

"config/index.php\">http://NAME_OF_YOUR_VIRTUAL_HOST/mediawiki/mw-"

24502

"config/index.php</ulink> if your server has no GUI.)"

24503

msgstr ""

24504

24505

#: serverguide/C/lamp-applications.xml:350(para)

24506

msgid ""

24507

"Please read the <quote>Environmental checks</quote> section of the "

24508

"configuration page. You should be able to fix many issues by carefully "

24509

"reading this section."

24510

msgstr ""

24511

24512

#: serverguide/C/lamp-applications.xml:357(para)

24513

msgid ""

24514

"Once the configuration is complete, you should copy the "

24515

"<filename>LocalSettings.php</filename> file to "

24516

"<filename>/etc/mediawiki</filename> directory:"

24517

msgstr ""

24518

24519

#: serverguide/C/lamp-applications.xml:364(command)

24520

msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"

24521

msgstr ""

24522

24523

#: serverguide/C/lamp-applications.xml:367(para)

24524

msgid ""

24525

"You may also want to edit "

24526

"<filename>/etc/mediawiki/LocalSettings.php</filename> in order to set the "

24527

"memory limit (disabled by default):"

24528

msgstr ""

24529

24530

#: serverguide/C/lamp-applications.xml:372(programlisting)

24531

#, no-wrap

24532

msgid ""

24533

"\n"

24534

"ini_set( 'memory_limit', '64M' );\n"

24535

msgstr ""

24536

24537

#: serverguide/C/lamp-applications.xml:379(title)

24538

msgid "Extensions"

24539

msgstr ""

24540

24541

#: serverguide/C/lamp-applications.xml:380(para)

24542

msgid ""

24543

"The extensions add new features and enhancements for the MediaWiki "

24544

"application. The extensions give wiki administrators and end users the "

24545

"ability to customize MediaWiki to their requirements."

24546

msgstr ""

24547

24548

#: serverguide/C/lamp-applications.xml:386(para)

24549

msgid ""

24550

"You can download MediaWiki extensions as an archive file or checkout from "

24551

"the Subversion repository. You should copy it to "

24552

"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "

24553

"also add the following line at the end of file: "

24554

"<filename>/etc/mediawiki/LocalSettings.php</filename>."

24555

msgstr ""

24556

24557

#: serverguide/C/lamp-applications.xml:394(programlisting)

24558

#, no-wrap

24559

msgid ""

24560

"\n"

24561

"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"

24562

msgstr ""

24563

24564

#: serverguide/C/lamp-applications.xml:404(para)

24565

msgid ""

24566

"For more details, please refer to the <ulink "

24567

"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."

24568

msgstr ""

24569

"자세한 사항은 <ulink url=\"http://www.mediawiki.org\">MediaWiki</ulink> 웹사이트를 방문해 "

24570

"보십시오."

24571

24572

#: serverguide/C/lamp-applications.xml:410(para)

24573

msgid ""

24574

"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "

24575

"Administrators' Tutorial Guide</ulink> contains a wealth of information for "

24576

"new MediaWiki administrators."

24577

msgstr ""

24578

24579

#: serverguide/C/lamp-applications.xml:416(para)

24580

msgid ""

24581

"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "

24582

"Wiki MediaWiki</ulink> page is a good resource."

24583

msgstr ""

24584

24585

#: serverguide/C/lamp-applications.xml:426(title)

24586

msgid "phpMyAdmin"

24587

msgstr ""

24588

24589

#: serverguide/C/lamp-applications.xml:428(para)

24590

msgid ""

24591

25013

"<application>phpMyAdmin</application> is a LAMP application specifically "

24592

25014

"written for administering <application>MySQL</application> servers. Written "

24593

25015

"in <application>PHP</application>, and accessed through a web browser, "

24594

25016

"phpMyAdmin provides a graphical interface for database administration tasks."

24595

25017

msgstr ""

24596

25018

24597

#: serverguide/C/lamp-applications.xml:437(para)

25019

#: serverguide/C/lamp-applications.xml:289(para)

24598

25020

msgid ""

24599

25021

"Before installing <application>phpMyAdmin</application> you will need access "

24600

25022

"to a <application>MySQL</application> database either on the same host as "

24603

25025

"enter:"

24604

25026

msgstr ""

24605

25027

24606

#: serverguide/C/lamp-applications.xml:444(command)

25028

#: serverguide/C/lamp-applications.xml:296(command)

24607

25029

msgid "sudo apt install phpmyadmin"

24608

25030

msgstr ""

24609

25031

24610

#: serverguide/C/lamp-applications.xml:447(para)

25032

#: serverguide/C/lamp-applications.xml:299(para)

24611

25033

msgid ""

24612

25034

"At the prompt choose which web server to be configured for "

24613

25035

"<application>phpMyAdmin</application>. The rest of this section will use "

24614

25036

"<application>Apache2</application> for the web server."

24615

25037

msgstr ""

24616

25038

24617

#: serverguide/C/lamp-applications.xml:452(para)

25039

#: serverguide/C/lamp-applications.xml:304(para)

24618

25040

msgid ""

24619

25041

"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "

24620

25042

"replacing <emphasis role=\"italic\">servername</emphasis> with the server's "

24624

25046

"user's password."

24625

25047

msgstr ""

24626

25048

24627

#: serverguide/C/lamp-applications.xml:459(para)

25049

#: serverguide/C/lamp-applications.xml:311(para)

24628

25050

msgid ""

24629

25051

"Once logged in you can reset the <emphasis>root</emphasis> password if "

24630

25052

"needed, create users, create/destroy databases and tables, etc."

24631

25053

msgstr ""

24632

25054

24633

#: serverguide/C/lamp-applications.xml:467(para)

25055

#: serverguide/C/lamp-applications.xml:319(para)

24634

25056

msgid ""

24635

25057

"The configuration files for <application>phpMyAdmin</application> are "

24636

25058

"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "

24639

25061

"<application>phpMyAdmin</application>."

24640

25062

msgstr ""

24641

25063

24642

#: serverguide/C/lamp-applications.xml:473(para)

25064

#: serverguide/C/lamp-applications.xml:325(para)

24643

25065

msgid ""

24644

25066

"To use <application>phpMyAdmin</application> to administer a MySQL database "

24645

25067

"hosted on another server, adjust the following in "

24646

25068

"<filename>/etc/phpmyadmin/config.inc.php</filename>:"

24647

25069

msgstr ""

24648

25070

24649

#: serverguide/C/lamp-applications.xml:478(programlisting)

25071

#: serverguide/C/lamp-applications.xml:330(programlisting)

24650

25072

#, no-wrap

24651

25073

msgid ""

24652

25074

"\n"

24653

25075

"$cfg['Servers'][$i]['host'] = 'db_server';\n"

24654

25076

msgstr ""

24655

25077

24656

#: serverguide/C/lamp-applications.xml:483(para)

25078

#: serverguide/C/lamp-applications.xml:335(para)

24657

25079

msgid ""

24658

25080

"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "

24659

25081

"remote database server name or IP address. Also, be sure that the "

24661

25083

"remote database."

24662

25084

msgstr ""

24663

25085

24664

#: serverguide/C/lamp-applications.xml:489(para)

25086

#: serverguide/C/lamp-applications.xml:341(para)

24665

25087

msgid ""

24666

25088

"Once configured, log out of <application>phpMyAdmin</application> and back "

24667

25089

"in, and you should be accessing the new server."

24668

25090

msgstr ""

24669

25091

24670

#: serverguide/C/lamp-applications.xml:493(para)

25092

#: serverguide/C/lamp-applications.xml:345(para)

24671

25093

msgid ""

24672

25094

"The <filename>config.header.inc.php</filename> and "

24673

25095

"<filename>config.footer.inc.php</filename> files are used to add a HTML "

24674

25096

"header and footer to <application>phpMyAdmin</application>."

24675

25097

msgstr ""

24676

25098

24677

#: serverguide/C/lamp-applications.xml:498(para)

25099

#: serverguide/C/lamp-applications.xml:350(para)

24678

25100

msgid ""

24679

25101

"Another important configuration file is "

24680

25102

"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "

24685

25107

"a terminal type:"

24686

25108

msgstr ""

24687

25109

24688

#: serverguide/C/lamp-applications.xml:506(command)

25110

#: serverguide/C/lamp-applications.xml:358(command)

24689

25111

msgid ""

24690

25112

"sudo ln -s /etc/phpmyadmin/apache.conf /etc/apache2/conf-"

24691

25113

"available/phpmyadmin.conf"

24692

25114

msgstr ""

24693

25115

24694

#: serverguide/C/lamp-applications.xml:507(command)

25116

#: serverguide/C/lamp-applications.xml:359(command)

24695

25117

msgid "sudo a2enconf phpmyadmin.conf"

24696

25118

msgstr ""

24697

25119

24698

#: serverguide/C/lamp-applications.xml:511(para)

25120

#: serverguide/C/lamp-applications.xml:363(para)

24699

25121

msgid ""

24700

25122

"For more information on configuring <application>Apache2</application> see "

24701

25123

"<xref linkend=\"httpd\"/>."

24702

25124

msgstr ""

24703

25125

24704

#: serverguide/C/lamp-applications.xml:522(para)

25126

#: serverguide/C/lamp-applications.xml:374(para)

24705

25127

msgid ""

24706

25128

"The <application>phpMyAdmin</application> documentation comes installed with "

24707

25129

"the package and can be accessed from the <emphasis>phpMyAdmin "

24710

25132

"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."

24711

25133

msgstr ""

24712

25134

24713

#: serverguide/C/lamp-applications.xml:529(para)

25135

#: serverguide/C/lamp-applications.xml:381(para)

24714

25136

msgid ""

24715

25137

"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"

24716

25138

"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."

24717

25139

msgstr ""

24718

25140

24719

#: serverguide/C/lamp-applications.xml:534(para)

25141

#: serverguide/C/lamp-applications.xml:386(para)

24720

25142

msgid ""

24721

25143

"A third resource is the <ulink "

24722

25144

"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "

24723

25145

"Wiki</ulink> page."

24724

25146

msgstr ""

24725

25147

24726

#: serverguide/C/lamp-applications.xml:543(title)

25148

#: serverguide/C/lamp-applications.xml:395(title)

24727

25149

msgid "WordPress"

24728

25150

msgstr ""

24729

25151

24730

#: serverguide/C/lamp-applications.xml:544(para)

25152

#: serverguide/C/lamp-applications.xml:396(para)

24731

25153

msgid ""

24732

25154

"Wordpress is a blog tool, publishing platform and CMS implemented in PHP and "

24733

25155

"licensed under the GNU GPLv2."

24734

25156

msgstr ""

24735

25157

24736

#: serverguide/C/lamp-applications.xml:550(para)

25158

#: serverguide/C/lamp-applications.xml:402(para)

24737

25159

msgid ""

24738

25160

"To install <application>WordPress</application>, run the following comand in "

24739

25161

"the command prompt:"

24740

25162

msgstr ""

24741

25163

24742

#: serverguide/C/lamp-applications.xml:555(command)

25164

#: serverguide/C/lamp-applications.xml:407(command)

24743

25165

msgid "sudo apt install wordpress"

24744

25166

msgstr ""

24745

25167

24746

#: serverguide/C/lamp-applications.xml:558(para)

25168

#: serverguide/C/lamp-applications.xml:410(para)

24747

25169

msgid ""

24748

25170

"You should also install <application>apache2</application> web server and "

24749

25171

"<application>mysql</application> server. For installing "

24754

25176

"linkend=\"mysql\"/> section."

24755

25177

msgstr ""

24756

25178

24757

#: serverguide/C/lamp-applications.xml:572(para)

25179

#: serverguide/C/lamp-applications.xml:424(para)

24758

25180

msgid ""

24759

25181

"For configuring your first <application>WordPress</application> application, "

24760

25182

"configure an apache site. Open <filename>/etc/apache2/sites-"

24761

25183

"available/wordpress.conf</filename> and write the following lines:"

24762

25184

msgstr ""

24763

25185

24764

#: serverguide/C/lamp-applications.xml:579(programlisting)

25186

#: serverguide/C/lamp-applications.xml:431(programlisting)

24765

25187

#, no-wrap

24766

25188

msgid ""

24767

25189

"\n"

24781

25203

" "

24782

25204

msgstr ""

24783

25205

24784

#: serverguide/C/lamp-applications.xml:595(para)

25206

#: serverguide/C/lamp-applications.xml:447(para)

24785

25207

msgid "Enable this new <application>WordPress</application> site"

24786

25208

msgstr ""

24787

25209

24788

#: serverguide/C/lamp-applications.xml:598(command)

25210

#: serverguide/C/lamp-applications.xml:450(command)

24789

25211

msgid "sudo a2ensite wordpress"

24790

25212

msgstr ""

24791

25213

24792

#: serverguide/C/lamp-applications.xml:601(para)

25214

#: serverguide/C/lamp-applications.xml:453(para)

24793

25215

msgid ""

24794

25216

"Once you configure the <application>apache2</application> web server and "

24795

25217

"make it ready for your <application>WordPress</application> application, you "

24797

25219

"<application>apache2</application> web server:"

24798

25220

msgstr ""

24799

25221

24800

#: serverguide/C/lamp-applications.xml:613(para)

25222

#: serverguide/C/lamp-applications.xml:465(para)

24801

25223

msgid ""

24802

25224

"To facilitate multiple <application>WordPress</application> installations, "

24803

25225

"the name of this configuration file is based on the Host header of the HTTP "

24810

25232

"NAME_OF_YOUR_VIRTUAL_HOST.php."

24811

25233

msgstr ""

24812

25234

24813

#: serverguide/C/lamp-applications.xml:624(para)

25235

#: serverguide/C/lamp-applications.xml:476(para)

24814

25236

msgid ""

24815

25237

"Once the configuration file is written, it is up to you to choose a "

24816

25238

"convention for username and password to mysql for each "

24818

25240

"shows only one, localhost, example."

24819

25241

msgstr ""

24820

25242

24821

#: serverguide/C/lamp-applications.xml:631(para)

25243

#: serverguide/C/lamp-applications.xml:483(para)

24822

25244

msgid ""

24823

25245

"Now configure <application>WordPress</application> to use a mysql database. "

24824

25246

"Open <filename>/etc/wordpress/config-localhost.php</filename> file and write "

24825

25247

"the following lines:"

24826

25248

msgstr ""

24827

25249

24828

#: serverguide/C/lamp-applications.xml:637(programlisting)

25250

#: serverguide/C/lamp-applications.xml:489(programlisting)

24829

25251

#, no-wrap

24830

25252

msgid ""

24831

25253

"\n"

24838

25260

"?>\n"

24839

25261

msgstr ""

24840

25262

24841

#: serverguide/C/lamp-applications.xml:646(para)

25263

#: serverguide/C/lamp-applications.xml:498(para)

24842

25264

msgid ""

24843

25265

"Now create this mysql database. Open a temporary file with mysql commands "

24844

25266

"<filename>wordpress.sql</filename> and write the following lines:"

24845

25267

msgstr ""

24846

25268

24847

#: serverguide/C/lamp-applications.xml:649(programlisting)

25269

#: serverguide/C/lamp-applications.xml:501(programlisting)

24848

25270

#, no-wrap

24849

25271

msgid ""

24850

25272

"\n"

24856

25278

"FLUSH PRIVILEGES;\n"

24857

25279

msgstr ""

24858

25280

24859

#: serverguide/C/lamp-applications.xml:657(para)

25281

#: serverguide/C/lamp-applications.xml:509(para)

24860

25282

msgid "Execute these commands."

24861

25283

msgstr ""

24862

25284

24863

#: serverguide/C/lamp-applications.xml:659(command)

25285

#: serverguide/C/lamp-applications.xml:511(command)

24864

25286

msgid ""

24865

25287

"cat wordpress.sql | sudo mysql --defaults-extra-file=/etc/mysql/debian.cnf"

24866

25288

msgstr ""

24867

25289

24868

#: serverguide/C/lamp-applications.xml:661(para)

25290

#: serverguide/C/lamp-applications.xml:513(para)

24869

25291

msgid ""

24870

25292

"Your new <application>WordPress</application> can now be configured by "

24871

25293

"visiting <ulink url=\"http://localhost/blog/wp-"

24878

25300

"mail and click Install WordPress."

24879

25301

msgstr ""

24880

25302

24881

#: serverguide/C/lamp-applications.xml:668(para)

25303

#: serverguide/C/lamp-applications.xml:520(para)

24882

25304

msgid ""

24883

25305

"Note the generated password (if applicable) and click the login password. "

24884

25306

"Your <application>WordPress</application> is now ready for use."

24885

25307

msgstr ""

24886

25308

24887

#: serverguide/C/lamp-applications.xml:678(ulink)

25309

#: serverguide/C/lamp-applications.xml:530(ulink)

24888

25310

msgid "WordPress.org Codex"

24889

25311

msgstr ""

24890

25312

24891

#: serverguide/C/lamp-applications.xml:683(ulink)

25313

#: serverguide/C/lamp-applications.xml:535(ulink)

24892

25314

msgid "Ubuntu Wiki WordPress"

24893

25315

msgstr ""

24894

25316

31378

31800

msgstr ""

31379

31801

31380

31802

#: serverguide/C/clustering.xml:135(command)

31381

msgid "sudo systemctl start drdb.service"

31803

msgid "sudo systemctl start drbd.service"

31382

31804

msgstr ""

31383

31805

31384

31806

#: serverguide/C/clustering.xml:141(para)

33125

33547

#~ msgid "sudo apt-get install samba"

33126

33548

#~ msgstr "sudo apt-get install samba"

33127

33549

33550

#~ msgid ""

33551

#~ "The main Samba configuration file is located in "

33552

#~ "<filename>/etc/samba/smb.conf</filename>. The default configuration file has "

33553

#~ "a significant amount of comments in order to document various configuration "

33554

#~ "directives."

33555

#~ msgstr ""

33556

#~ "메인 삼바 구성 파일은 <filename>/etc/samba/smb.conf</filename>에 있습니다. 기본 구성 파일에는 다양한 "

33557

#~ "구성 방법을 알려주기 위해 매우 많은 주석들이 달려있습니다."

33558

33128

33559

#~ msgid "sudo chown nobody.nogroup /srv/samba/share/"

33129

33560

#~ msgstr "sudo chown nobody.nogroup /srv/samba/share/"

33130

33561

33393

33824

#~ "위키 프로그램을 이용할 수 있도록 <application>a아파치2</application> 웹 서버를 설정하고나면, 웹 서버를 "

33394

33825

#~ "재시작해야 합니다. <application>아파치2</application> 웹 서버를 재시작하려면 다음 명령을 실행하세요:"

33395

33826

33827

#~ msgid "MediaWiki"

33828

#~ msgstr "MediaWiki"

33829

33830

#~ msgid ""

33831

#~ "MediaWiki is an web based Wiki software written in the PHP language. It can "

33832

#~ "either use <application>MySQL</application> or "

33833

#~ "<application>PostgreSQL</application> Database Management System."

33834

#~ msgstr ""

33835

#~ "미디어위키는 PHP 언어로 작성된 웹 기반의 위키 소프트웨어입니다. 미디어위키는 "

33836

#~ "<application>MySQL</application> 혹은 <application>PostgreSQL</application> "

33837

#~ "데이터베이스 관리 시스템을 사용할 수 있습니다."

33838

33839

#~ msgid ""

33840

#~ "To install <application>MediaWiki</application>, run the following command "

33841

#~ "in the command prompt:"

33842

#~ msgstr "<application>MediaWiki</application>를 설치하려면, 명령행에서 다음을 실행하세요:"

33843

33396

33844

#~ msgid "sudo apt-get install mediawiki php5-gd"

33397

33845

#~ msgstr "sudo apt-get install mediawiki php5-gd"

33398

33846

33403

33851

#~ "이 페이지의 <quote>환경 점검...</quote> 부분을 읽어보십시오. 이 부분을 주의깊게 읽는다면 많은 문제점들을 해결할 수 있게 "

33404

33852

#~ "될 것입니다."

33405

33853

33854

#~ msgid ""

33855

#~ "For more details, please refer to the <ulink "

33856

#~ "url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."

33857

#~ msgstr ""

33858

#~ "자세한 사항은 <ulink url=\"http://www.mediawiki.org\">MediaWiki</ulink> 웹사이트를 방문해 "

33859

#~ "보십시오."

33860

33406

33861

#~ msgid "sudo apt-get install nfs-kernel-server"

33407

33862

#~ msgstr "sudo apt-get install nfs-kernel-server"

33408

33863