http://wk.geanmartins.com.br/ 2026-04-15T12:55:32+00:00 http://wk.geanmartins.com.br/ http://wk.geanmartins.com.br/_media/wiki:dokuwiki.svg text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:add_ipv6?rev=1753560543&do=diff Adiocionando IPv6 Passo 1 - Habilitar o IPv6 no docker cat /etc/docker/daemon.json { "ipv6": true, "fixed-cidr-v6": "2001:db8:1::/64" } systemctl restart docker Passo 2 - Criar a rede com o IPv6 docker network create --driver bridge --ipv6 --subnet 2804:694:4c00:4007::/64 awx_netv6 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_adhoc?rev=1753560543&do=diff Gerenciar ambiente Linux com Ansible ad hoc Módulo user Adicionando um usuário $ echo 'senha123' | openssl passwd -1 -stdin $1$Q0ADxehE$IKy8PGjnj8xryj06jYBa61 $ sudo ansible local -m user -a 'name=helpdesk state=present shell=/bin/bash password=$1$Q0ADxehE$IKy8PGjnj8xryj06jYBa61' ansible-server | CHANGED => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python3" }, "changed": true, "comment": "", "create_home": true, "group": 1001, "hom… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_galaxy?rev=1753560543&do=diff Comandos essenciais do Ansible Galaxy $ cd /etc/ansible/roles $ sudo ansible-galaxy role --help usage: ansible-galaxy role [-h] ROLE_ACTION ... positional arguments: ROLE_ACTION init Initialize new role with the base structure of a role. remove Delete roles from roles_path. delete Removes the role from Galaxy. It does not remove or alter the actual GitHub repository. list Show the name and version of each role installed in the roles_path. search … text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_manager_roles_nfs?rev=1753560543&do=diff Gerenciar Roles no Ansible - NFS Server $ sudo ansible-galaxy role init nfs-server - Role nfs-server was created successfully $ sudo ansible-galaxy role list # /etc/ansible/roles - conf-base, 1.0.0 - nfs-server, (unknown version) $ sudo cp -r ~/roles/nfs-server/* nfs-server/ $ sudo cp -r ~/roles/nfs-server/*.* nfs-server/ text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_manager_roles?rev=1753560543&do=diff Gerenciar Roles no Ansible Crie uma Role de nome conf_base $ sudo ansible-galaxy role init conf_base - Role conf_base was created successfully $ sudo ansible-galaxy role list # /etc/ansible/roles - conf_base, (unknown version) $ tree conf_base/ conf_base/ ├── README.md ├── defaults │   └── main.yml ├── files ├── handlers │   └── main.yml ├── meta │   └── main.yml ├── tasks │   └── main.yml ├── templates ├── tests │   ├── inventory │   └── test.yml └── vars └── main.yml 8 directorie… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_module?rev=1753560543&do=diff Gerenciar Módulos no Ansible Módulos ansible.builtin.apt_key/ansible.builtin.apt_repository/apt --- - hosts: local tasks: - name: Adiciona chave GPG para o repositório oficial do Docker ansible.builtin.apt_key: url: https://download.docker.com/linux/ubuntu/gpg state: present register: apt_key_add - name: Adiciona repositório do Docker when: apt_key_add is succeeded ansible.builtin.apt_repository: repo: deb [arch=amd64] https://download.docker.c… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_playbooks?rev=1753560543&do=diff Gerenciando Playbooks Módulos através do ansible-doc ansible-doc é um comando que exibe uma documentação sobre componentes do Ansible. $ sudo ansible-doc -l FIXME A flag -l lista todos os módulos que podemos utilizar no Ansible. Para mostrar somente a descrição do módulo user, use o seguinte comando: text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_role?rev=1753560543&do=diff Gerenciando Roles Roles Roles são pacotes de configuração que podem ser usados para definir a configuração de um servidor. Cada role contém uma ou mais playbooks, que podem ser usados para configurar um servidor de acordo com as necessidades. text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_server_config?rev=1753560543&do=diff Configuração ansible server Configurando o ansible.cfg $ cd /etc/ansible/ $ ls ansible.cfg hosts roles * ansible.cfg: Arquivo de configuração do Ansible; * hosts: Arquivo de inventário; * roles: Diretório para armazenar as Roles no Ansible. text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_setup?rev=1753560543&do=diff Ansible setup $ sudo ansible local -m setup ansible-server | SUCCESS => { "ansible_facts": { "ansible_all_ipv4_addresses": [ "10.240.0.200", "192.168.121.208" ], "ansible_all_ipv6_addresses": [ "fe80::5054:ff:fe90:13ea", "fe80::5054:ff:fe93:bf55" ], "ansible_apparmor": { "status": "enabled" }, "ansible_architecture": "x86_64", "ansible_bios_date": "01/01/2011", … text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_template?rev=1753560543&do=diff Templates Templates são arquivos de configuração com conteúdo dinâmico, que substitui diversos arquivos estáticos em uma infraestrutura com um grande número de servidores. Através de Templates precisamos apenas de um único arquivo que leva entradas dinâmicas, que são específicos para o host que está sendo executado. text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible_variable?rev=1753560543&do=diff Variáveis no Ansible Tipos de variáveis * vars: Declara um ou mais valores em uma variável, através da diretiva vars; * vars_files: Declara um ou mais valores em um arquivo de variável, através da diretiva vars_files; * register: Declara uma variável a partir de uma tarefa concluída; text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ansible?rev=1753560543&do=diff Ansible * Cenário * Instalação Ansible * Configuração ansible server * Configuração das VMs * Gerenciar ambiente Linux com Ansible ad hoc * Ansible setup * Gerenciando Playbooks * Gerenciar PlayBooks no Ansible através de variáveis * Gerenciar Módulos no Ansible * Gerenciando Roles * Comandos essenciais do Ansible Galaxy * Gerenciar Roles no Ansible * Gerenciar Roles no Ansible - NFS Server * Templates text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:asterisk?rev=1753560543&do=diff Asterisk * Instalação - Asterisk * Redirecionamento do 0800 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:awx_deployment?rev=1753560543&do=diff AWX Database # CREATE ROLE awx LOGIN; postgres=# \password awx postgres=# CREATE DATABASE awx OWNER awx; postgres=# \q $ vim ${PGDATA}/pg_hba.conf [...] # Acesso AWX Kubernetes host awx awx 2804:694:4c00:4007::/64 scram-sha-256 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:awx?rev=1753560543&do=diff AWX * Adiocionando IPv6 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:bash_ps1?rev=1753560543&do=diff Fonte: * <https://www.thegeekstuff.com/2008/09/bash-shell-ps1-10-examples-to-make-your-linux-prompt-like-angelina-jolie/> * <https://www.sv.net.br/como-customizar-o-prompt-do-shell-bash-no-centos/> * Bash - Prompt and Colors Bash PS1 \u : exibe o nome do usuário, isto é, o login. \h : exibe o nome da máquina, ou seja, o hostname. \W : exibe o nome do diretório que você se encontra. \w : exibe o caminho completo do diretório onde você se encontra. \$ : exibe o caractere '$' caso você es… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:bash?rev=1753560543&do=diff Bash * Bash PS1 * Criar senhas text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:block_package_update?rev=1753560543&do=diff Bloquear atualizações de pacotes Método 1 – Desativar permanentemente a instalação/atualizações de pacotes (usando yum.conf) Impedir que um pacote, por exemplo, nginx seja instalado, atualizado ou removido, acrescente a seguinte linha no final do arquivo. text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:centos?rev=1753560543&do=diff CentOS * Instalação Ortacle Linux * Configuração inicial - CentOS 7 * Configuração inicial - CentOS 8/OracleLinux 8 * VLAN e Bridge * Bloquear atualizações de pacotes text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:cert-manager_install?rev=1753560543&do=diff Cert-manager deployment $ kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.crds.yaml customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io created customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io created customresourcedefinition.apiextensions.k8s.io/challenges.acme.cert-manager.io created customresourcedefinition.apiextensions.k8s.io/clusterissuers.cert-manager.io created customresourcedefi… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:commands_kubectl?rev=1753560543&do=diff Comando kubectl * kubectl create * kubectl run * kubectl set text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:con_vlan_and_bridge?rev=1753560543&do=diff VLAN e Bridge [gean@centos7-kvm ~]$ nmcli connect show NAME UUID TYPE DEVICE enp11s0f1 b156ef89-c4e8-4400-852f-fd3071b8f333 ethernet enp11s0f1 br0 fbb3a749-029f-4640-a303-3c7d96a6119f bridge br0 virbr0 54114bae-c6fd-4d9f-ba9f-9e5f9c49e284 bridge virbr0 vlan270 7a6e3c9c-68b0-4cbb-a605-e471cad628d0 vlan enp11s0f0.270 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:create_box_debian?rev=1753560543&do=diff Criando box Debian - libvirt Instalando a vm $ sudo virt-install \ --name debian11 \ --description="Debian 11 - bullseye" \ --ram 2048 \ --vcpus 2 \ --disk size=32,format=qcow2 \ --cdrom /datastore/imagens/isos/debian-11.3.0-amd64-netinst.iso \ --virt-type kvm \ --os-type=Linux \ --os-variant=debian10 \ --graphics vnc,listen=0.0.0.0 \ --noautoconsole text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:create_box_ubuntu?rev=1753560543&do=diff Criando box Ubuntu - libvirt Instalando a vm $ sudo virt-install \ --name ubuntu22 \ --description="Ubuntu Server 22.04" \ --ram 2048 \ --vcpus 2 \ --disk size=32,format=qcow2 \ --cdrom /datastore/imagens/isos/ubuntu-22.04.1-live-server-amd64.iso \ --virt-type kvm \ --os-type=Linux \ --os-variant=ubuntu20.04 \ --graphics vnc,listen=0.0.0.0 \ --noautoconsole text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:create_box?rev=1753560543&do=diff Criando uma box Instalando a vm $ sudo virt-install \ --name debian11 \ --description="Debian 11 - bullseye" \ --ram 2048 \ --vcpus 2 \ --disk size=32,format=qcow2 \ --cdrom /datastore/imagens/isos/debian-11.3.0-amd64-netinst.iso \ --virt-type kvm \ --os-type=Linux \ --os-variant=debian10 \ --graphics vnc,listen=0.0.0.0 \ --noautoconsole text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:create_vm_virsh?rev=1753560543&do=diff Criando vm por linha de comando Criando a rede de acesso Criando a rede com o comando nmcli - bridge e vlan $ sudo nmcli con add type bridge con-name br270 ifname br270 $ sudo nmcli c mod br270 ipv4.method disabled $ sudo nmcli c mod br270 ipv6.method ignore $ sudo nmcli c mod br270 bridge.stp no text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:create_vms_vagrant?rev=1753560543&do=diff Criação de vms Criando uma unica máquina # -*- mode: ruby -*- # vi: set ft=ruby : ENV['VAGRANT_DEFAULT_PROVIDER'] = 'libvirt' Vagrant.configure("2") do |config| config.vm.define :ol8 do |ol8| ol8.vm.box = "generic/oracle8" ol8.vm.hostname = "ol8" ol8.vm.provider :libvirt do |lv| lv.memory = 4096 lv.cpus = 2 end end end text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:databases?rev=1753560543&do=diff Databases * PostgreSQL * MySQL text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:debian?rev=1753560543&do=diff Debian * Configuração Inicial text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:descoberta_dns?rev=1753560543&do=diff Auto descoberta ipa dns-update-system-records --dry-run IPA DNS records: _kerberos-master._tcp.juntotelecom.com.br. 86400 IN SRV 0 100 88 sp-spo-ipa.juntotelecom.com.br. _kerberos-master._udp.juntotelecom.com.br. 86400 IN SRV 0 100 88 sp-spo-ipa.juntotelecom.com.br. _kerberos._tcp.juntotelecom.com.br. 86400 IN SRV 0 100 88 sp-spo-ipa.juntotelecom.com.br. _kerberos._udp.juntotelecom.com.br. 86400 IN SRV 0 100 88 sp-spo-ipa.juntotelecom.com.br. _kerberos.juntotelecom.com.br… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:docker_otobo_deploy?rev=1753560543&do=diff Deploy OTOBO no Docker $ git clone https://github.com/RotherOSS/otobo-docker.git --branch <BRANCH> --single-branch $ git clone https://github.com/RotherOSS/otobo-docker.git --branch rel-10_1 --single-branch $ cp -a otobo-docker otobo-ti $ cd otobo-ti $ cp .docker_compose_env_http .env text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:docker?rev=1753560543&do=diff Docker * Instalar o Docker no CentOS Serves * instalar o docker no Oracle Linux 8 * Instalar o Docker no Ubuntu Server * Instalação do Docker no Debian 11 * Comandos essenciais do Docker * Gerenciar Imagens * Criando imagem com Dockerfile text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:dokuwiki_helm_deploy?rev=1753560543&do=diff Dokuwiki via helm $ helm repo add bitnami https://charts.bitnami.com/bitnami "bitnami" has been added to your repositories $ helm show values bitnami/dokuwiki > values.yaml dokuwikiUsername: admin dokuwikiPassword: "YWRtaW4K" dokuwikiEmail: admin@juntotelecom.com.br dokuwikiFullName: Administrator Wiki dokuwikiWikiName: Wiki JuntoTelecom persistence: storageClass: "nfs-client" service: type: ClusterIP text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:dokuwiki?rev=1753560543&do=diff Dokuwiki * Wiki LDAP Authentication text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:environment_ansible?rev=1753560543&do=diff Cenário $ vim Vagrantfile # -*- mode: ruby -*- # vi: set ft=ruby : ENV['VAGRANT_DEFAULT_PROVIDER'] = 'libvirt' vms = { 'ansible-server' => {'memory' => '4096', 'cpus' => 2, 'ip' => '200', 'box' => 'g3anmart1ns/ubuntu22'}, 'ub-vm-01' => {'memory' => '2048', 'cpus' => 2, 'ip' => '201', 'box' => 'g3anmart1ns/ubuntu22'}, 'ol-vm-02' => {'memory' => '2048', 'cpus' => 2, 'ip' => '202', 'box' => 'g3anmart1ns/ol9'}, 'de-vm-03' => {'memory' => '2048', 'cpus' => 2, 'ip' => '203', 'box' => 'g3an… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:essential_commands?rev=1753560543&do=diff Comandos essenciais do Docker Informações do ambiente: $ docker system info Para listar containers, imagens e redes no Docker: $ docker container ls $ docker image ls $ docker network ls Para pesquisar imagem Debian no Docker Hub: $ docker search debian text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:export_yaml?rev=1753560543&do=diff Export YAML kubectl get deploy --all-namespaces -o yaml --export kubectl get deploy,sts,svc,configmap,secret -n default -o yaml --export > default.yaml for n in $(kubectl get -o=name pvc,configmap,serviceaccount,secret,ingress,service,deployment,statefulset,hpa,job,cronjob) do mkdir -p $(dirname $n) kubectl get -o=yaml $n > $n.yaml done text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:freeipa?rev=1753560543&do=diff FreeIPA * Instalação FreeIPA - Oracle Linux * Entrada SRV no DNS para a auto descoberta * Grupos e usuários * Web Authentication * Autenticação FreeRADIUS text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:gerencia_image?rev=1753560543&do=diff Gerenciar Imagens Liste as imagens e verifique o histórico de comandos utilizados para sua construção: $ docker image ls $ docker history debian Para inspecionar uma imagem, utilizamos o seguinte comando: $ docker inspect debian Antes de criar uma nova imagem, execute os seguintes comandos: text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:gitea_deploy?rev=1753560543&do=diff Gitea - SCM(Source Code Management) Deployment gitea Namespace $ kubectl create ns scm-system namespace/scm-system created PersistentVolumeClaim apiVersion: v1 kind: PersistentVolumeClaim metadata: name: pvc-scm namespace: scm-system spec: accessModes: - ReadWriteOnce resources: requests: storage: 8Gi storageClassName: nfs-client text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:google_cloud_terraform?rev=1753560543&do=diff Terraform Google Cloud * Lição Terraform GCP 01 * Lição Terraform GCP 02 * Lição dual stack CGP text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:grafana_deploy_ldap?rev=1753560543&do=diff Grafana com LDAP $ kubectl create ns monitoring-system namespace/monitoring-system created ConfigMaps ##################### Grafana Configuration Example ##################### # # Everything has defaults so you only need to uncomment things you want to # change # possible values : production, development ;app_mode = production # instance name, defaults to HOSTNAME environment variable value or hostname if HOSTNAME var is empty ;instance_name = ${HOSTNAME} ###############################… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:grafana?rev=1753560543&do=diff Grafana * Instalação Grafana * LDAP Grafana text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:groups_and_users?rev=1753560543&do=diff Grupos e usuários # kinit admin Password for admin@JUNTOTELECOM.COM.BR: # ipa group-add --desc='Gerente de Redes' gerente --nonposix # ipa group-add --desc='Analista de Redes' analista --nonposix # ipa group-add wikiadm --desc="WIKI Administrator" --nonposix # ipa group-add wikimgm --desc="Management WIKI" --nonposix # ipa group-add radiusgpadm --desc="RADIUS group administrator" --nonposix # ipa group-add radiusgpmgm --desc="RADIUS group Management" --nonposix text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:guacamole_ldap_auth?rev=1753560543&do=diff Autenticação LDAP Referências * Setup Apache Guacamole OpenLDAP Authentication * keeper/guacamole text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:guacamole_ssh_key?rev=1753560543&do=diff Acesso SSH sem senha - chave SSH Gerando a chave FIXME A versão do Guacamole 1.4 não suporta o tipo de chave ed25519 Guacamole SSH keys - Help $ ssh-keygen -t rsa -b 4096 -m PEM -f guacamole Esse comando gera um par de chave: pública e privado. $ ls guacamole guacamole.pub text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:guacamole?rev=1753560543&do=diff Apache Guacamole * Acesso SSH sem senha - chave SSH * Autenticação LDAP text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:harbor_heml_deploy?rev=1753560543&do=diff Harbor Instalando o harbor via helm Baixando o repositório $ helm repo add harbor https://helm.goharbor.io $ helm repo update Baixando e editando os values $ helm show values harbor/harbor > values.yaml expose: ingress: hosts: core: hub.juntotelecom.com.br notary: notary.juntotelecom.com.br className: "nginx" externalURL: https://hub.juntotelecom.com.br persistence: persistentVolumeClaim: registry: storageClass: "nfs-client" size: 32Gi cha… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:helm_install?rev=1753560543&do=diff Instalação do helm $ curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 11156 100 11156 0 0 22628 0 --:--:-- --:--:-- --:--:-- 22582 Downloading https://get.helm.sh/helm-v3.8.2-linux-amd64.tar.gz Verifying checksum... Done. Preparing to install helm into /usr/local/bin [sudo] senha para supor… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:image_dockerfile?rev=1753560543&do=diff Criando imagem com Dockerfile Acesse o diretório webserver e visualize o conteúdo do arquivo Dockerfile: $ cd webserver $ ls $ cat Dockerfile FROM debian:9 COPY sources.list /etc/apt/sources.list RUN apt update && apt install apache2 php libapache2-mod-php php-mysql php-curl php-gd php-mbstring php-xml php-xmlrpc php-soap php-intl php-zip php-cli -y COPY wordpress.conf /etc/apache2/sites-available/wordpress.conf RUN a2enmod rewrite COPY wordpress /var/www/html/wordpress RUN chown -R www-… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:initial_config_centos8?rev=1753560543&do=diff Configuração inicial - CentOS 8/OracleLinux 8 Configurando o sudo para o usuário suporte $ su - # usermod -aG wheel suporte # exit sair $ sudo vim /etc/sudoers [...] suporte ALL=(ALL) NOPASSWD: ALL [...] Para que a configuração surta efeito, é necessário sair e acessar o servidor novamente. text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:initial_config_deb?rev=1753560543&do=diff Configuração inicial Pacotes essenciais $ su - # apt update # apt install vim wget curl git sudo accountsservice software-properties-common \ bash-completion apt-transport-https \ ca-certificates gnupg2 lsb-release Outros # apt install lvm2 build-essential jq text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:initial_config?rev=1753560543&do=diff yum update yum check-update --security yum groupinstall "Development Tools" -y yum vim mlocate telnet wget bind-utils open-vm-tools tcpdump traceroute policycoreutils-python sysstat bash-completion yum-utils # opções para o vim echo "set incsearch" >> /etc/vimrc echo "set background=dark" >> /etc/vimrc text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_ansible?rev=1753560543&do=diff Instalação Ansible $ vagrant ssh ansible-server Welcome to Ubuntu 22.04.1 LTS (GNU/Linux 5.15.0-47-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/advantage This system has been minimized by removing packages and content that are not required on a system that users do not log into. To restore this content, you can run the 'unminimize' command. Last login: Fri Sep 2 21:44:29 2022 from 192.168… text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_asterisk?rev=1753560543&do=diff Install # yum install yum-priorities # cat /etc/yum/pluginconf.d/priorities.conf [main] enabled = 1 # cat /etc/yum.repos.d/CentOS-Base.repo [base] [...] priority=1 #released updates [updates] [...] priority=1 #additional packages that may be useful [extras] [...] priority=1 #additional packages that extend functionality of existing packages [centosplus] [...] priority=2 text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_centos?rev=1753560543&do=diff Instalar o Docker no CentOS Serves sudo yum install yum-utils device-mapper-persistent-data lvm2 -y sudo yum-config-manager --add-repo \ https://download.docker.com/linux/centos/docker-ce.repo sudo yum install docker-ce docker-ce-cli containerd.io -y text/html 2025-07-26T20:09:03+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_debian_docker?rev=1753560543&do=diff Instalação do Docker no Debian 11 Preparação inicial: Configuração inicial - Debian Partição deservada aos containers $ MOUNT_POINT=/var/lib/docker $ DISK_DEVICE=/dev/sdb $ echo -e "n\np\n1\n\n\nw" | sudo fdisk ${DISK_DEVICE} Bem-vindo ao fdisk (util-linux 2.36.1). As alterações permanecerão apenas na memória, até que você decida gravá-las. Tenha cuidado antes de usar o comando de gravação. A unidade não contém uma tabela de partição conhecida. Criado um novo rótulo de disco DOS com o i… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_distributed?rev=1753560544&do=diff Instalação distribuída Cenário +-------------+ +-------------+ +-------------+ +-------------+ +-------------+ | zbDB | | zbServer | | zbFront | | zbProxy | | Grafana | |10.0.140.100 | |10.0.140.110 | |10.0.140.120 | |10.0.140.130 | |10.0.140.140 | +-------------+ +-------------+ +-------------+ +-------------+ +-------------+ ↑ ↑ | ↑ ↑ |… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_eveng?rev=1753560544&do=diff Instalação do EVE-NG Instalando o KVM $ sudo yum install qemu-kvm libvirt virt-install bridge-utils $ sudo systemctl enable --now libvirtd ]$ sudo systemctl status libvirtd ● libvirtd.service - Virtualization daemon Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; vendor preset: enabled) Active: active (running) since Ter 2022-07-26 09:16:48 -03; 13s ago Docs: man:libvirtd(8) https://libvirt.org Main PID: 29488 (libvirtd) Tasks: 19 (limit: 32… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_fcos?rev=1753560544&do=diff Instalação do Fedora CoreOS ===== Passo 1 - gerar o arguivo ign ===== $ ssh-keygen Generating public/private rsa key pair. Enter file in which to save the key (/home/suporte/.ssh/id_rsa): Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in /home/suporte/.ssh/id_rsa. Your public key has been saved in /home/suporte/.ssh/id_rsa.pub. The key fingerprint is: SHA256:bKqsv9fAw/PkOhsBXnPPWrts71aOgCSGKT8e46nrCKI suporte@kvm The key's randomart… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_grafana?rev=1753560544&do=diff Instalação Grafana dnf install -y dnf-utils zip unzip tar gzip git vim bash-completion open-vm-tools cat <<EOF | sudo tee /etc/yum.repos.d/grafana.repo [grafana] name=grafana baseurl=https://packages.grafana.com/oss/rpm repo_gpgcheck=1 enabled=1 gpgcheck=1 gpgkey=https://packages.grafana.com/gpg.key sslverify=1 sslcacert=/etc/pki/tls/certs/ca-bundle.crt EOF text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_ipa_oracle_linux?rev=1753560544&do=diff Instalação FreeIPA - Oracle Linux # dnf module enable idm:DL1 # dnf distro-sync # dnf install ipa-server ipa-server-dns rng-tools # systemctl start rngd # systemctl enable rngd # systemctl status rngd # nmcli con mod ens160 ipv4.method manual ipv4.addresses 177.75.187.213/28 ipv4.gateway 177.75.187.209 # nmcli con mod ens160 ipv6.method manual ipv6.addresses 2804:694:4c00:4001::13/64 ipv6.gateway 2804:694:4c00:4001:177:75:187:195 # nmcli con mod ens160 ipv4.dns "177.75.187.213" # n… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_kvm_centos7?rev=1753560544&do=diff Instalação KVM no CentOS $ sudo yum install qemu-kvm libvirt virt-install bridge-utils libguestfs-tools $ sudo systemctl start libvirtd $ sudo systemctl enable libvirtd Refeência * [Solved] Cannot access storage file, Permission denied Error in KVM Libvirt * How to change the default Storage Pool from libvirt? * Bonding VLAN Bridge * Configure a bridge interface over a VLAN tagged bonded interface on CentOS / RHEL * ifcfg-vlan-bridge-example * KVM : Install text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_ol?rev=1753560544&do=diff Referências * Customizing Boot Loader Actions * Oracle Linux Installation Media text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_oracle_linux8?rev=1753560544&do=diff nstalar o docker no Oracle Linux 8 MOUNT_POINT=/var/lib/docker DISK_DEVICE=/dev/sdb echo -e "n\np\n1\n\n\nw" | fdisk ${DISK_DEVICE} mkfs.xfs -f ${DISK_DEVICE}1 UUID=`blkid -o export ${DISK_DEVICE}1 | grep UUID | grep -v PARTUUID` mkdir ${MOUNT_POINT} echo "${UUID} ${MOUNT_POINT} xfs defaults 1 2" >> /etc/fstab mount ${MOUNT_POINT} text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_pgsql_cod_fonte?rev=1753560544&do=diff Instalação por código fonte - Debian Vagranfile $ cat Vagrantfile # -*- mode: ruby -*- # vi: set ft=ruby : ENV['VAGRANT_DEFAULT_PROVIDER'] = 'libvirt' vms = { "pgsql-director" => {"memory" => "4096", "cpu" => "2", "ip" => "250", "box" => "g3anmart1ns/debian11" }, "pgsql-client" => {"memory" => "1024", "cpu" => "1", "ip" => "10", "box" => "g3anmart1ns/debian11" } } Vagrant.configure("2") do |config| config.vm.box_check_update = false vms.each do |name, conf| config.vm.define… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_podman_oraclelinux?rev=1753560544&do=diff Instalação no OracleLinux 8 Preparando a vm Configuração inicial - CentOS 8/OracleLinux 8 Preparando uma partição exclusiva para os containers $ sudo pvcreate /dev/sdb Physical volume "/dev/sdb" successfully created. $ sudo pvdisplay /dev/sdb "/dev/sdb" is a new physical volume of "32,00 GiB" --- NEW Physical volume --- PV Name /dev/sdb VG Name PV Size 32,00 GiB Allocatable NO PE Size 0 Total PE 0 Free P… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_postgres_ol8?rev=1753560544&do=diff Instalação no Oracle Linux 8 Preparando o sistema operacional Configuração inicial - CentOS 8/OracleLinux 8 Desativando o módulo padrão $ dnf module list postgresql Última verificação de data de vencimento de metadados: 0:00:27 atrás em qua 15 jun 2022 14:35:53 -03. Oracle Linux 8 Application Stream (x86_64) Name Stream Profiles Summary postgresql … text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_ubuntu?rev=1753560544&do=diff Instalar o Docker no Ubuntu Server sudo apt update sudo apt install apt-transport-https ca-certificates \ curl gnupg-agent software-properties-common -y sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg \ | sudo apt-key add - sudo add-apt-repository \ "deb [arch=amd64] https://download.docker.com/linux/ubuntu \ $(lsb_release -cs) stable" text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_vagrant_centos7?rev=1753560544&do=diff Instalação - CentOS 7 sudo yum group install "Virtualization Client" "Virtualization Hypervisor" "Virtualization Platform" "Virtualization Tools" "Development Tools" sudo yum install libvirt libvirt-devel ruby-devel gcc qemu-kvm libguestfs-tools wget https://releases.hashicorp.com/vagrant/2.2.19/vagrant_2.2.19_x86_64.rpm sudo yum install vagrant_2.2.19_x86_64.rpm sudo usermod -a -G libvirt $( id -un ) vagrant plugin install vagrant-libvirt text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:install_zb_srv?rev=1753560544&do=diff Referências WHEN TO USE TABLESPACES IN POSTGRESQL text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:key_ssh?rev=1753560544&do=diff Chave SSH $ ssh-keygen -t rsa -b 4096 Generating public/private rsa key pair. Enter file in which to save the key (/home/gean/.ssh/id_rsa): <ENTER> Created directory '/home/gean/.ssh'. Enter passphrase (empty for no passphrase): <ENTER> Enter same passphrase again: <ENTER> Your identification has been saved in /home/gean/.ssh/id_rsa Your public key has been saved in /home/gean/.ssh/id_rsa.pub The key fingerprint is: SHA256:FLDPaT4OL7Zdownz6uLB33bnCCCZ0qcFFCQ8WTcbaaQ gean@kube-ctrl-pl-01.juntot… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kompose_install?rev=1753560544&do=diff Instalação do compose $ curl -L https://github.com/kubernetes/kompose/releases/download/v1.26.1/kompose-linux-amd64 -o kompose $ chmod +x kompose $ sudo mv kompose /usr/local/bin/kompose $ kompose convert text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kube_troucleshooting?rev=1753560544&do=diff Troubleshooting $ kubectl create deploy nginx --image=nginx $ kubectl expose deploy nginx --port=80 --target-port=80 --cluster-ip='fd00::1' $ kubectl get services nginx NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE nginx ClusterIP fd00::1 <none> 80/TCP 15s text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubectl_create?rev=1753560544&do=diff kubectl create Todatas as opções $ kubectl create --help Create a resource from a file or from stdin. JSON and YAML formats are accepted. Examples: # Create a pod using the data in pod.json kubectl create -f ./pod.json # Create a pod based on the JSON passed into stdin cat pod.json | kubectl create -f - # Edit the data in registry.yaml in JSON then create the resource using the edited data kubectl create -f registry.yaml --edit -o json Available Commands: clusterrole … text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubectl_run?rev=1753560544&do=diff kubectl run $ kubectl run zabbix-agent --image=zabbix-agent --port=10050 --privileged=true --labels="app=zabbix-aget" --image-pull-policy=IfNotPresent --restart=Always --env="ZBX_SERVER_HOST=zabbix-server" --dry-run=client -o yaml > zabbix-agent.yaml text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubectl_set?rev=1753560544&do=diff kubectl set $ kubectl set resources pod zabbix-agent --limits=cpu=200m,memory=256Mi --requests=cpu=100m,memory=128Mi --dry-run=client -o yaml > zabbix-agent-resources.yaml apiVersion: v1 kind: Pod metadata: annotations: cni.projectcalico.org/containerID: 4e2eca4de6313dbc13c8740227852ee515899f8bdbf875ac6fc416dd3207bdec cni.projectcalico.org/podIP: 10.244.101.86/32 cni.projectcalico.org/podIPs: 10.244.101.86/32,fd00::33:2603:770f:59b3:71d5/128 creationTimestamp: "2022-06-23T21… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_ingress_nginx_v2?rev=1753560544&do=diff Ingress Nginx Requisito: MetalLB Bare Metal $ curl -L https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/provider/baremetal/deploy.yaml -o ingress-nginx.yaml % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 15064 100 15064 0 0 28913 0 --:--:-- --:--:-- --:--:-- 28858 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_ingress_nginx?rev=1753560544&do=diff Ingress Nginx Requisito: MetalLB Bare Metal $ curl -L https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/static/provider/baremetal/deploy.yaml -o ingress-nginx.yaml % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 15064 100 15064 0 0 28913 0 --:--:-- --:--:-- --:--:-- 28858 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_install_debian_v2?rev=1753560544&do=diff Cenário HostnameIPv4IPv6Data CenterESXIVLANk-ctrl-pl-1177.75.176.342804:694:3000:8000::34MarabáESXI 01270k-node-01177.75.176.352804:694:3000:8000::35MarabáESXI 01270k-node-02177.75.176.362804:694:3000:8000::36MarabáESXI 01270k-nfs-012804:694:3000:8000::37 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_install_debian?rev=1753560544&do=diff Instalação Kubernetes Preparando o Sistema Operacional Configuração inicial Cenário HostnameIPv4IPv6Data CenterESXIVLANkube-ctrl-pl-1.juntotelecom.com.br177.75.176.402804:694:3000:8000::40MarabáESXI 01270kube-worker-01.juntotelecom.com.br177.75.176.412804:694:3000:8000::41 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_metallb_baremetal_v2?rev=1753560544&do=diff MetalLB Bare Metal Sugindo esta instalação do kubernetes: Instalação Kubernetes $ kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.7/config/manifests/metallb-native.yaml namespace/metallb-system created customresourcedefinition.apiextensions.k8s.io/addresspools.metallb.io created customresourcedefinition.apiextensions.k8s.io/bfdprofiles.metallb.io created customresourcedefinition.apiextensions.k8s.io/bgpadvertisements.metallb.io created customresourcedefinition.apiexte… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_metallb_baremetal?rev=1753560544&do=diff MetalLB Bare Metal Sugindo esta instalação do kubernetes: Instalação Kubernetes $ kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.12.1/manifests/namespace.yaml namespace/metallb-system created $ kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.12.1/manifests/metallb.yaml Warning: policy/v1beta1 PodSecurityPolicy is deprecated in v1.21+, unavailable in v1.25+ podsecuritypolicy.policy/controller created podsecuritypolicy.policy/speaker created servi… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes_nfs_dynamic?rev=1753560544&do=diff Volume dinâmico com NFS Passo anterior: Instalação Kubernetes $ sudo apt install nfs-kernel-server nfs-common Volume a ser exportado $ MOUNT_POINT=/nfs $ DISK_DEVICE=/dev/sdb $ echo -e "n\np\n1\n\n\nw" | sudo fdisk ${DISK_DEVICE} Bem-vindo ao fdisk (util-linux 2.36.1). As alterações permanecerão apenas na memória, até que você decida gravá-las. Tenha cuidado antes de usar o comando de gravação. A unidade não contém uma tabela de partição conhecida. Criado um novo rótulo de disco DOS … text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kubernetes?rev=1753560544&do=diff Kubernetes * Instalação Kubernetes - Debian 11 * Instalação Kubernetes - Debian 11, v2 * MetalLB Bare Metal * MetalLB Bare Metal, v2 * Ingress Nginx * Ingress Nginx, v2 * Volume dinâmico com NFS * Instalando o Helm * Comando kubectl * Troubleshooting Kubernetess * Instalação do kompose * Export YAML * Grafana deploy LDAP * Dokuwiki via helm * phpIPAM deployment * Harbor via helm - Docker registry * TeamPass deployment * Cert-manager deployment * Gitea - SCM… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:kvm?rev=1753560544&do=diff KVM * Instalação KVM no CentOS * Criando vm por linha de comando * Instalação do Fedora CoreOS * OKD 4 - Openshift * Instalação do EVE-NG text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ldap_grafana?rev=1753560544&do=diff LDAP Grafana setsebool -P httpd_can_connect_ldap on setsebool -P httpd_can_network_connect on vim /etc/grafana/grafana.ini [...] #################################### Auth LDAP ########################## [auth.ldap] ;enabled = false enabled = true config_file = /etc/grafana/ldap.toml allow_sign_up = true [...] text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ldap_wiki?rev=1753560544&do=diff Wiki LDAP Authentication # cat /var/lib/docker/volumes/wiki/_data/conf/local.php <?php /* * Dokuwiki's Main Configuration File - Local Settings * Auto-generated by config plugin * Run for user: * Date: Thu, 03 Mar 2022 15:02:34 +0000 */ $conf['title'] = 'Wiki JuntoTelecom'; $conf['license'] = 'cc-by-sa'; $conf['useacl'] = 1; $conf['authtype'] = 'authldap'; $conf['superuser'] = '@wikiadm'; $conf['userewrite'] = '1'; $conf['plugin']['authldap']['server'] = 'sp-spo-ipa.juntotelecom.com.br';… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:lession_terraform_gcp_dual_stack?rev=1753560544&do=diff Lição dual stack CGP $ vim provider.tf terraform { required_providers { google = { source = "hashicorp/google" version = "4.51.0" } } } provider "google" { credentials = "/home/gean/gcp/svc-account/singular-carver-376919-f09b67c64df6.json" project = "singular-carver-376919" region = "us-central1" } text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:lesson_terraform_cgp_01?rev=1753560544&do=diff Lição Terraform GCP 01 FIXME Fluxo: file.tf -> terraform init -> terraform plan -> terraform apply -> terraform destroy FIXME Para identar: terraform fmt Iniciando o provider $ mkdir lession01 $ cd lession01 terraform { required_providers { google = { source = "hashicorp/google" version = "4.51.0" } } } provider "google" { # Configuration options } text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:lesson_terraform_cgp_02?rev=1753560544&do=diff Lição Terraform GCP 02 Arquivos terraform { required_providers { google = { source = "hashicorp/google" version = "4.51.0" } } } provider "google" { credentials = "/home/gean/gcp/svc-account/singular-carver-376919-f09b67c64df6.json" project = "singular-carver-376919" region = "us-central1" } text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:libvirt_terraform?rev=1753560544&do=diff KVM Terraform * Terraform libvirt * Terraform KVM text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:make_passwd?rev=1753560544&do=diff Criar senhas $ < /dev/urandom tr -dc '!@#%*?^)('_A-Z-a-z-0-9 | head -c16;echo $ < /dev/urandom tr -dc 'a-zA-Z0-9/_\-\.\!\/\:\%\+\?=&' | head -c16;echo $ < /dev/urandom tr -dc ['a-zA-Z0-9/_\-\.\!\/\:\%\+\?=&'] | head -c16;echo $ < /dev/urandom tr -dc [a-zA-Z\/]['a-zA-Z0-9/_\-\.\!\/\:\%\+\?=&'] | head -c16;echo text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:netbox_deploy_v1?rev=1753560544&do=diff Netbox Deployment v1 PostgreSQL $ helm repo add bitnami https://charts.bitnami.com/bitnami $ helm show values bitnami/postgresql > postgresql-values.yaml $ vim postgresql-values.yaml [...] 4 global: [...] 16 storageClass: "nfs-client" [...] 121 auth: 122 ## @param auth.enablePostgresUser Assign a password to the "postgres" admin user. Otherwise, remote access will be blocked for this user [...] 130 username: "netbox" 131 ## @param auth.password Password for the custom user to cr… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:netbox_deploy_v2?rev=1753560544&do=diff Netbox Deployment v2 Database PostgreSQL # CREATE ROLE netbox LOGIN; # CREATE DATABASE netbox OWNER netbox; # \password netbox # \q $ vim ${PGDATA}/pg_hba.conf [...] # Acesso netbox Kubernetes host netbox netbox 2804:694:4c00:4007::/64 scram-sha-256 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ntp?rev=1753560544&do=diff NTP * Cenário * NTP - INstalação e configuração text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:okd4?rev=1753560544&do=diff OKD 4 - Openshift Requerimento PapelIPCPURAMStorageOSLoad Balance10.0.0.1022-Oracle Linux 8Bootstrap Node10.0.0.11416100Fedora CoreOSControl Plane Node10.0.0.12416100Fedora CoreOSCompute Node10.0.0.1328100Fedora CoreOS dnsmasq $ sudo dnf install dnsmasq text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:okd311_vagrant?rev=1753560544&do=diff OKD 3.11 $ mkdir files $ cd files $ ssh-keygen -f key Generating public/private rsa key pair. Enter passphrase (empty for no passphrase): Enter same passphrase again: Your identification has been saved in key. Your public key has been saved in key.pub. The key fingerprint is: SHA256:xOJlDfKsVH+ZjsZ5VaHPVQsRdabp/3LDIBLpEH0zKWA gean@kvm The key's randomart image is: +---[RSA 2048]----+ | .E= .++o*| | .B * = oo=+| | o O * *.+..| | o B + = oo .| | o S * o .o | | … text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:otobo?rev=1753560544&do=diff OTOBO * Deploy OTOBO no Docker text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:pfsense?rev=1753560544&do=diff pfSense * Remote access OpenVPN text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:phpipam_deploy?rev=1753560544&do=diff phpIPAM deployment $ kubectl create ns phpipam-system apiVersion: v1 kind: PersistentVolumeClaim metadata: labels: app: phpipam name: phpipam namespace: phpipam-system spec: accessModes: - ReadWriteOnce resources: requests: storage: 8Gi storageClassName: nfs-client volumeMode: Filesystem text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:podman?rev=1753560544&do=diff Podman * Instalação no OracleLinux 8 * Zabbix * Zabbix 6 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:postgresql?rev=1753560544&do=diff PostgreSQL * Instalação no Oracle Linux 8 * Instalação por código fonte - Debian text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:procedimentos?rev=1753560544&do=diff Clientes * Circuitos Clientes Fornecedores * Circuitos Fornecedores Telefonia * Tratamento de incidentes text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:radius_ipa?rev=1753560544&do=diff FreeRADIUS Alterar o hash padrão do FreeIPA # echo "dn: cn=config changetype: modify replace: passwordStorageScheme passwordStorageScheme: SSHA512" > passwordHashAlgorithm.ldif # ldapsearch -h sp-spo-ipa.juntotelecom.com.br -p 389 -x -D "cn=Directory Manager" -W -b "cn=config" | grep passwordStorageScheme Enter LDAP Password: passwordStorageScheme: PBKDF2_SHA256 text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:redirect_0800?rev=1753560544&do=diff Redirecionamento do 0800 As ligações do 0800 é controlado pelo Asterisk (PABX) de Brasília. A programação do 0800 da-se da segunde maneira: As ligações que chegam no PABX no período das 08:00 às 18:00 de Segunda-Feira a Quinta-Feira e nas Sextas-Feiras das 08:00 às 17:00 horas, as ligações são atendidas pela equipe de Brasília. Nos demais horários e dias da semana, as ligações são atendidas pela equipe de São Paulo. text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:remote_access_openvpn_pfsense?rev=1753560544&do=diff Remote access com o OpenVPN Cenário Passo 1 - Criar a Autoridade de certificação (Certificate authority - CA) * System > Cert. Manager > CAs > Add Passo 2 - Criar o sertificado * System > Cert. Manager > Certificates > Add/Sing text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:servidores?rev=1753560544&do=diff Servidores AWX * Adiocionando IPv6 Asterisk * Instalação - Asterisk * Redirecionamento do 0800 Bash * Bash PS1 * Criar senhas CentOS * Configuração inicial - CentOS 7 * VLAN e Bridge * Bloquear atualizações de pacotes Debian * Configuração Inicial Docker * Instalar o Docker no CentOS Serves * instalar o docker no Oracle Linux 8 * Instalar o Docker no Ubuntu Server * Comandos essenciais do Docker * Gerenciar Imagens * Criando imagem com Dockerfile DNS … text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:ssh?rev=1753560544&do=diff SSH * Chave SSH text/html 2025-07-27T01:25:15+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:start?rev=1753579515&do=diff Servidores * Ansible * AWX * Asterisk * Bash * CentOS * Databases * Debian * Docker * FreeIPA * Grafana * Apache Guacamole * Kubernetes * KVM * NTP * OTOBO * pfSense * Podman * SSH * Terraform * Vagrant * Vim * Wiki - Dokuwiki * Zabbix text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:teampass_deploy?rev=1753560544&do=diff TeamPass deployment $ kubectl create ns teampass-system namespace/teampass-system created apiVersion: v1 kind: PersistentVolumeClaim metadata: name: teampass namespace: teampass-system spec: accessModes: - ReadWriteOnce storageClassName: nfs-client resources: requests: storage: 4Gi text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:terraform_install?rev=1753560544&do=diff Instalação do Terraform no Linux Sistemas baseados em Debian sudo apt update sudo apt install wget curl unzip Sistemas baseados em RedHat # sudo yum install curl wget unzip TER_VER=`curl -s https://api.github.com/repos/hashicorp/terraform/releases/latest | grep tag_name | cut -d: -f2 | tr -d \"\,\v | awk '{$1=$1};1'` text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:terraform_kvm?rev=1753560544&do=diff Terraform libvirt $ mkdir -p ~/terraform/projects/libvirt $ cd ~/terraform/projects/libvirt $ sudo usermod -aG kvm,libvirt $USER $ sudo echo 'security_driver = [ "none" ]'> /etc/libvirt/qemu.conf $ sudo systemctl restart libvirtd Provider terraform { required_providers{ libvirt = { source = "dmacvicar/libvirt" } } } provider "libvirt" { uri = "qemu:///system" } text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:terraform_libvirt?rev=1753560544&do=diff Terraform KVM Install Terraform $ wget https://releases.hashicorp.com/terraform/1.3.2/terraform_1.3.2_linux_amd64.zip $ sudo unzip terraform_1.3.2_linux_amd64.zip -d /usr/local/bin/ Install provider $ mkdir ~/.terraform.d/plugins && cd ~/.terraform.d/plugins $ wget https://github.com/dmacvicar/terraform-provider-libvirt/releases/download/v0.6.14/terraform-provider-libvirt_0.6.14_linux_amd64.zip $ unzip terraform-provider-libvirt_0.6.14_linux_amd64.zip $ rm terraform-provider-libvirt_0.6.1… text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:terraform?rev=1753560544&do=diff Terraform * Instalação do Terraform no Linux * Terraform Google Cloud * Terraform KVM text/html 2025-07-26T20:09:04+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:upgrade_zabbix?rev=1753560544&do=diff Upgrade Zabbix Upgrade PostgreSQL Checando o PostgreSQL Atual $ sudo su - postgres $ psql # select version(); version --------------------------------------------------------------------------------------------------------- PostgreSQL 13.7 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.5.0 20210514 (Red Hat 8.5.0-10), 64-bit (1 row) text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vagrant?rev=1753560545&do=diff Vagrant * Instalação - CentOS 7 * Criação de vms * OKD 3.11 * Criando uma box * Criando box Debian - libvirt * Criando box Ubuntu - libvirt text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vim_options?rev=1753560545&do=diff Opções de operação do vim * :set nohlsearch ; Remove os destaques/realses feitos pelo set hlsearch * :options ; traz todas as opções * :set paste ; mantem a identação ao colar um arquivo. Referências * VIM Cheat Sheet * Top 50 Vim Configuration Options text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vim?rev=1753560545&do=diff Vim * vimrc basic * vimrc * Vimrc V2 * Ajustes para YAML * vimrc * Opções de operação do vim text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vimrc_basic?rev=1753560545&do=diff vimrc basic """"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""" " Maintainer: " Amir Salihefendic — @amix3k " " Awesome_version: " Get this config, nice color schemes and lots of plugins! " " Install the awesome version from: " " https://github.com/amix/vimrc " " Sections: " -> General " -> VIM user interface " -> Colors and Fonts " -> Files and backups " -> Text, tab and indent related " -> Visual mode related " -> Moving around, ta… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vimrc_outher?rev=1753560545&do=diff " ============================================================================= " Miller Medeiros .vimrc file " ----------------------------------------------------------------------------- " heavily inspired by: @factorylabs, @scrooloose, @nvie, @gf3, @bit-theory. " ============================================================================= " ----------------------------------------------------------------------------- " BEHAVIOR " ----------------------------------------------------------… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vimrc_v2?rev=1753560545&do=diff # vim ~/.vimrc "Opções de recuo set autoindent" : Novas linhas herdam o recuo das linhas anteriores. set smartindent" : Auto-indenta " Opções para arquivos yaml yml set expandtab" : Converte tabulações em espaços. set tabstop=2" : Quantidade de espaços por indentação set softtabstop=2 set shiftwidth=2" : Quantidade de espaços da auto-indentação filetype indent plugin on "Opções de busca set hlsearch" : Habilita o realce de pesquisa. set ignorecase" : Ignora maiúsculas e minúsculas ao pesquisar… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vimrc_yaml?rev=1753560545&do=diff Ajustes para YAML $ vim ~/.vimrc syntax on " modo visual/colorido ativo set nocompatible " Use os padrões do Vim e não vi set ruler " Mostrar a posição do cursor o tempo todo set number " Numera as linhas set showmode " apresenta o modo de utilização atual (command/insert) set linebreak " Quebra a linha sem quebrar a palavra set nobackup " Não salva arquivos de backup~ set wi… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vimrc?rev=1753560545&do=diff Fonte: <https://www.debreuil.fr/blog/vim-outil-indispensable> # vim ~/.vimrc set nocompatible syntax on au! BufNewFile,BufReadPost *.{yaml,yml} set filetype=yaml foldmethod=indent autocmd FileType yaml setlocal ts=2 sts=2 sw=2 expandtab indentkeys-=0# indentkeys-=<:> foldmethod=indent nofoldenable colors torte hi TrailingSpace ctermbg=1 noremap <f11> :bprev!<CR> noremap <f12> :bnext!<CR> filetype plugin on filetype indent on set encoding=utf8 "set mouse=a set autoindent set smartindent set sma… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:vms_config?rev=1753560545&do=diff Configuração das VMs - name: MVs config base hosts: all tasks: - name: Testing entries in the /etc/hosts file lineinfile: path: /etc/hosts line: "10.240.0.200 ansible-server.juntotelecom.com.br ansible-server" register: etc_hosts_result - name: Clear file /etc/hosts when: etc_hosts_result is changed shell: echo '' > /etc/hosts register: etc_hosts_clear tags: hosts - name: Config file /etc/hosts when: etc_hosts_clear i… text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:web_auth?rev=1753560545&do=diff Web Authentication # ipa permission-add 'userPassword service read' --attrs=userPassword --type=user --right=read # ipa privilege-add 'Privilege web services' --desc='Privileges needed to allow web services to operate' # ipa privilege-add-permission 'Privilege web services' --permissions='userPassword service read' text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:wordpress-deploy?rev=1753560545&do=diff WordPress Deployment $ kubectl create namespace wp-system -o yaml \ --dry-run=client > namespace-wp.yaml $ kubectl apply -f namespace-wp.yaml namespace/wp-system created $ cat secret-wp password=ga3isgBT4dXG username=userwp passworduser=ga3isgBT4dXG database=wpdb text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:yaml_edit?rev=1753560545&do=diff vim ~/.vimrc syntax enable set paste set background=dark filetype on autocmd FileType yaml,yml setlocal ts=2 sts=2 sw=2 expandtab indentkeys-=0# indentkeys-=<:> text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:zabbix_deploy_v2?rev=1753560545&do=diff Zabbix Deployment V2 Secret $ cat pgsql-secret dbname=zabbix host=pgsql.juntotelecom.com.br password=senha port=5432 user=zabbix kubectl create secret generic pgsql-secret -n zabbix \ --from-env-file=pgsql-secret -o yaml \ --dry-run=client > pgsql-secret.yaml text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:zabbix_deploy?rev=1753560545&do=diff Zabbix Deployment Criando a database FIXME Executar no servidor PostgreSQL Instalação no Oracle Linux 8 Criando o armazenamento $ sudo fdisk -l /dev/sdb Disco /dev/sdb: 256 GiB, 274877906944 bytes, 536870912 setores Unidades: setor de 1 * 512 = 512 bytes Tamanho de setor (lógico/físico): 512 bytes / 512 bytes Tamanho E/S (mínimo/ótimo): 512 bytes / 512 bytes text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:zabbix_podman?rev=1753560545&do=diff Zabbix podman pod create --name zabbix podman volume create mysql podman volume create snmptraps podman volume create mibs podman run --name agent-zabbix-server \ -e ZBX_SERVER_HOST="192.168.0.251" \ --restart=always --pod=zabbix --net=zabbix \ -d zabbix/zabbix-agent2:alpine-6.0-latest text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:zabbix?rev=1753560545&do=diff Zabbix * Cenário * Instalação - Zabbix Server * Instalação distribuída * Upgrade Zabbix * Instalação - Zabbix Proxy text/html 2025-07-26T20:09:05+00:00 Anonymous (anonymous@undisclosed.example.com) http://wk.geanmartins.com.br/wikiv1:zabbix6_podman?rev=1753560545&do=diff Zabbix 6 $ sudo podman pod create --name zabbix -p 80:8080 -p 10051:10051 $ sudo podman volume create mysql $ sudo podman run --name mysql-server -t \ -e MYSQL_DATABASE="zabbix" \ -e MYSQL_USER="zabbix" \ -e MYSQL_PASSWORD="Kasar@123" \ -e MYSQL_ROOT_PASSWORD="Kasar@123" \ -v mysql:/var/lib/mysql/:Z \ --restart=always \ --pod=zabbix \ -d mysql:8.0 \ --character-set-server=utf8 \ --collation-server=utf8_bin \ --default-authentication-plugin=mysql_native_password