これは、AnsibleでWindowsを管理するために、WinRMにHTTPSで接続できるよう設定するためのドキュメントです。
自己証明書は、PowerShellの New-SelfSignedCertificate
ではなくLinux上でopensslコマンドで作成したものを使用します。
設定対象のWindows VMを
- ホスト名: wintest1
- IPアドレス: 192.168.122.70
#!/bin/bash | |
profile=blank | |
install_mode=hcp | |
cluster_name=hcp | |
#install_mode=classic | |
#cluster_name=classic | |
if [ x"$#" != x"1" ]; then |
[ori@fedora linux-6.3]$ cat /sys/firmware/devicetree/base/model | awk '1' | |
Apple MacBook Air (13-inch, M2, 2022) | |
[ori@fedora linux-6.3]$ uname -a | |
Linux fedora 6.2.11-450.asahi.fc38.aarch64 #1 SMP PREEMPT_DYNAMIC Mon Apr 17 00:28:53 UTC 2023 aarch64 GNU/Linux | |
[ori@fedora linux-6.3]$ time openssl speed 2>&1 | tee log.openssl | |
Doing md5 for 3s on 16 size blocks: 16773642 md5's in 3.00s | |
Doing md5 for 3s on 64 size blocks: 10167926 md5's in 3.00s | |
Doing md5 for 3s on 256 size blocks: 4570146 md5's in 3.00s | |
Doing md5 for 3s on 1024 size blocks: 1427362 md5's in 3.00s | |
Doing md5 for 3s on 8192 size blocks: 192390 md5's in 3.00s |
Hardware | CPU | # of cores (A) | OS | Time spent on make modules (B) | 1 / (B) / (A) |
---|---|---|---|---|---|
Apple MacBook Air M2 | Apple Silicon M2 (4 x efficiency cores @2.4GHz, 4 x performance cores @3.5GHz) | 8 | Fedora Linux Asahi Remix 38 | 30m4.815s | 6.926e-05 |
Lenovo ThinkPad P1 Gen 2 | Intel Core i7 9850H @2.60GHz | 12 | Fedora Linux 38 | 44m28.919s | 3.122e-05 |
Dell PowerEdge R640 | Intel Xeon Silver 4108 @1.80GHz | 32 | Fedora Linux 38 | 18m44.802s | 2.778e-05 |
Lenovo ThinkPad P16v Gen 1 | AMD Ryzen 7 PRO 7840HS @3.8GHz | 16 | Fedora Linux 39 | 15m2.816s | 6.923e-05 |
Minisforum MS-01 | 12th Gen Intel(R) Core(TM) i9-12900H | 20 | Fedora Linux 40 | 14m28.963s | 5.754e-05 |
Minisforum UM780 | AMD Ryzen 7 7840HS w/ Radeon 780M Graphics | 16 | Fedora Linux 40 | 13m8.684s | 7.922e-05 |
#!/bin/bash | |
# To build podman, you have enough resource on the instance. | |
# I tested this script on t2.xlarge. | |
topdir=${HOME}/work | |
mkdir -p ${topdir} | |
# Install prereq rpms | |
sudo dnf install -y git golang libseccomp-devel gpgme-devel autoconf automake libtool yajl yajl-devel libcap-devel systemd-devel cni-plugins iptables-nft rpm-build meson golang-github-cpuguy83-md2man.x86_64 |
#!/bin/bash | |
# https://github.com/openshift/os/blob/master/docs/faq.md#q-how-do-i-determine-what-version-of-an-rpm-is-included-in-an-rhcos-release | |
export REGISTRY_AUTH_FILE=~/.config/containers/auth.json | |
if [ x"$#" != x"2" ]; then | |
echo "$0 ocp_version package_name" | |
exit 1 | |
fi |
[ori@localhost ~]$ cat pvc1.yaml | |
apiVersion: v1 | |
kind: PersistentVolumeClaim | |
metadata: | |
name: cephfs-kernel | |
spec: | |
accessModes: | |
- ReadWriteOnce | |
resources: | |
requests: |
sudo dnf update | |
sudo reboot | |
sudo dnf install https://cbs.centos.org/kojifiles/packages/centos-release-kmods/2/4.el9s/noarch/centos-release-kmods-2-4.el9s.noarch.rpm | |
sudo dnf install kmod-btrfs-5.14.0.45-2.el9s.x86_64 | |
sudo modprobe btrfs | |
sudo mkfs.btrfs /dev/vdb | |
sudo mount /dev/vdb /mnt |
[core@worker-3 ~]$ sudo ovs-vsctl --columns=ofport find interface type=geneve options:remote_ip=172.16.13.108 | |
ofport : 7 | |
[core@worker-3 ~]$ sudo ovs-appctl ofproto/trace --ct-next new,trk br-int in_port=7,tun_id=0x15,tun_metadata0=0x10078,tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,metadata=0x16,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_ecn=0,nw_ttl=64,nw_frag=no | |
Flow: tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,tun_id=0x15,metadata=0x16,in_port=7,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=0,tcp_flags=0 | |
bridge("br-int") | |
---------------- | |
0. in_port=7, priority 100 | |
move:NXM_NX_TUN_ID[0..23]->OXM_OF_METADATA[0..23] | |
-> OXM_OF_METADATA[0..23] is now 0x15 |