EX200 Korean試験無料問題集「RedHat Red Hat Certified System Administrator - RHCSA (EX200 Korean Version) 認定」
논리 볼륨 생성
주어진 요구 사항에 따라 새로운 논리 볼륨을 생성합니다.
- 볼륨 그룹 "myvg"에 속하는 "mylv"라는 논리 볼륨으로 크기는 50입니다.
- 볼륨 그룹 "myvg"의 논리 볼륨의 범위 크기는 16MiB여야 합니다.
- VFAT 파일 시스템으로 새로운 논리 볼륨을 포맷합니다.
- 논리 볼륨은 시스템 시작 시 자동으로 /mnt/mydata에 마운트되어야 합니다.
주어진 요구 사항에 따라 새로운 논리 볼륨을 생성합니다.
- 볼륨 그룹 "myvg"에 속하는 "mylv"라는 논리 볼륨으로 크기는 50입니다.
- 볼륨 그룹 "myvg"의 논리 볼륨의 범위 크기는 16MiB여야 합니다.
- VFAT 파일 시스템으로 새로운 논리 볼륨을 포맷합니다.
- 논리 볼륨은 시스템 시작 시 자동으로 /mnt/mydata에 마운트되어야 합니다.
正解：
# Check the disk layout
[root@node2 ~]# lsblk
# Partition the disk
[root@node2 ~]# fdisk /dev/vdb
Welcome to fdisk (util-linux 2.37.4).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.
Command (m for help): n # Add a new partition
Partition type
p primary (1 primary, 0 extended, 3 free) # Primary partition
e extended (container for logical partitions) # Extended partition
Select (default p): p
Partition number (2-4, default 2): # Press Enter
First sector (1026048-20971519, default 1026048): # Press Enter
***Note: The partition size must be larger than the total size, it should not be exactly equal to. It is recommended to add an extra 200M.
Last sector, +/-sectors or +/-size{K,M,G,T,P} (1026048-20971519, default 20971519): +1200M # Partition size
Created a new partition 2 of type 'Linux' and of size 512 MiB.
Command (m for help): w # Save and exit
The partition table has been altered.
Syncing disks.
# Create volume group and logical volume
[root@node2 ~]# vgcreate -s 16M myvg /dev/vdb4
[root@node2 ~]# lvcreate -l 50 -n mylv myvg
# Install vfat support
[root@node2 ~]# yum provides */mkfs.vfat
[root@node2 ~]# yum -y install dosfstools
# Format the logical volume with vfat filesystem
[root@node2 ~]# mkfs.vfat /dev/myvg/mylv
# Create mount point
[root@node2 ~]# mkdir /mnt/mydata
# Update /etc/fstab for automatic mounting
[root@node2 ~]# vim /etc/fstab
/dev/myvg/mylv /mnt/mydata vfat defaults 0 0
# Mount the logical volume
[root@node2 ~]# mount -a
[root@node2 ~]# lsblk
# Partition the disk
[root@node2 ~]# fdisk /dev/vdb
Welcome to fdisk (util-linux 2.37.4).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.
Command (m for help): n # Add a new partition
Partition type
p primary (1 primary, 0 extended, 3 free) # Primary partition
e extended (container for logical partitions) # Extended partition
Select (default p): p
Partition number (2-4, default 2): # Press Enter
First sector (1026048-20971519, default 1026048): # Press Enter
***Note: The partition size must be larger than the total size, it should not be exactly equal to. It is recommended to add an extra 200M.
Last sector, +/-sectors or +/-size{K,M,G,T,P} (1026048-20971519, default 20971519): +1200M # Partition size
Created a new partition 2 of type 'Linux' and of size 512 MiB.
Command (m for help): w # Save and exit
The partition table has been altered.
Syncing disks.
# Create volume group and logical volume
[root@node2 ~]# vgcreate -s 16M myvg /dev/vdb4
[root@node2 ~]# lvcreate -l 50 -n mylv myvg
# Install vfat support
[root@node2 ~]# yum provides */mkfs.vfat
[root@node2 ~]# yum -y install dosfstools
# Format the logical volume with vfat filesystem
[root@node2 ~]# mkfs.vfat /dev/myvg/mylv
# Create mount point
[root@node2 ~]# mkdir /mnt/mydata
# Update /etc/fstab for automatic mounting
[root@node2 ~]# vim /etc/fstab
/dev/myvg/mylv /mnt/mydata vfat defaults 0 0
# Mount the logical volume
[root@node2 ~]# mount -a
다음 특성을 갖춘 협업 디렉토리/홈/관리자를 만듭니다.
/home/admins의 그룹 소유권은 adminuser입니다.
디렉토리는 adminuser의 멤버가 읽고 쓸 수 있고 액세스할 수 있어야 하지만 다른 사용자는 액세스할 수 없습니다. (루트는 시스템의 모든 파일과 디렉토리에 액세스할 수 있다는 것을 알고 있습니다.) /home/admins에서 생성된 파일은 자동으로 그룹 소유권이 adminuser 그룹으로 설정됩니다.
/home/admins의 그룹 소유권은 adminuser입니다.
디렉토리는 adminuser의 멤버가 읽고 쓸 수 있고 액세스할 수 있어야 하지만 다른 사용자는 액세스할 수 없습니다. (루트는 시스템의 모든 파일과 디렉토리에 액세스할 수 있다는 것을 알고 있습니다.) /home/admins에서 생성된 파일은 자동으로 그룹 소유권이 adminuser 그룹으로 설정됩니다.
正解：
mkdir /home/admins
chgrp -R adminuser /home/admins
chmodg+w /home/admins
chmodg+s /home/admins
chgrp -R adminuser /home/admins
chmodg+w /home/admins
chmodg+s /home/admins
랩에 하나의 도메인 RHCE가 구성되고 도메인 서버는 server1.example.com입니다. nisuser2001, nisuser2002, nisuser2003 사용자가 서버 192.168.0.254:/rhome/stationx/nisuser2001에 생성됩니다. 시스템에 NIS 사용자가 로그인할 때 자동으로 홈 디렉토리를 마운트하는지 확인하세요. 홈 디렉토리는 서버 /rhome/stationx/에서 별도로 공유되며 여기서 x는 스테이션 번호입니다.
正解：
use the authconfig --nisserver=<NIS SERVER> --nisdomain=<NIS DOMAIN> -- update Example: authconfig --niserver=192.168.0.254 --nisdomain=RHCE --update or system-config-authentication Click on Enable NIS Type the NIS Domain: RHCE Type Server 192.168.0.254 then click on next and ok You will get a ok message.
Create a Directory /rhome/stationx where x is your station number.
vi /etc/auto.master and write at the end of file /rhome/stationx /etc/auto.home --timeout=60 vi /etc/auto.home and write
* -rw,soft,intr 192.168.0.254:/rhome/stationx/&
Note: please specify your station number in the place of x.
Service autofs restart
Login as the nisuser2001 or nisuser2002 on another terminal will be Success. According to question, RHCE domain is already configured. We have to make a client of RHCE domain and automatically mount the home directory on your system. To make a member of domain, we use the authconfig with option or system-config authentication command. There a are lots of authentication server i.e NIS, LDAB, SMB etc. NIS is a RPC related Services, no need to configure the DNS, we should specify the NIS server address.
Here Automount feature is available. When user tried to login, home directory will automatically mount. The automount service used the /etc/auto.master file. On
/etc/auto.master file we specified the mount point the configuration file for mount point.
Create a Directory /rhome/stationx where x is your station number.
vi /etc/auto.master and write at the end of file /rhome/stationx /etc/auto.home --timeout=60 vi /etc/auto.home and write
* -rw,soft,intr 192.168.0.254:/rhome/stationx/&
Note: please specify your station number in the place of x.
Service autofs restart
Login as the nisuser2001 or nisuser2002 on another terminal will be Success. According to question, RHCE domain is already configured. We have to make a client of RHCE domain and automatically mount the home directory on your system. To make a member of domain, we use the authconfig with option or system-config authentication command. There a are lots of authentication server i.e NIS, LDAB, SMB etc. NIS is a RPC related Services, no need to configure the DNS, we should specify the NIS server address.
Here Automount feature is available. When user tried to login, home directory will automatically mount. The automount service used the /etc/auto.master file. On
/etc/auto.master file we specified the mount point the configuration file for mount point.
호스트 이름, IP 주소, 게이트웨이, DNS를 구성하세요.
호스트 이름: dtop5.dn.ws.com
IP 주소: 172.28.10.5/4
게이트웨이: 172.28.10.1
주소: 172.28.10.1
호스트 이름: dtop5.dn.ws.com
IP 주소: 172.28.10.5/4
게이트웨이: 172.28.10.1
주소: 172.28.10.1
正解：
Configure Host Name
vim /etc/sysconfig/network NETWORKING=yes HOSTNAME=dtop5.dn.ws.com GATEWAY=172.28.10.1
2. Configure IP Address, Gateway and DNS
Configure the network by Network Manager:
Note: Please remember to choose two options:
Connect automatically
Available to all users
Click "Apply", save and exit, and restart your network services:
# Service network restart
3. Validate these profiles:
a) Check gateway: # vim / etc / sysconfig / network
NETWORKING=yes
HOSTNAME=dtop5.dn.ws.com
GATEWAY=172.28.10.1
b) Check Host Name: # vim /etc/hosts
c) Check DNS: # vim /etc/resolv.conf
# Generated by NetworkManager
Search dn.ws.com
Nameserver 172.28.10.1
d) Check Gateway: # vim /etc/sysconfig/network-scripts/ifcfg-eth0
vim /etc/sysconfig/network NETWORKING=yes HOSTNAME=dtop5.dn.ws.com GATEWAY=172.28.10.1
2. Configure IP Address, Gateway and DNS
Configure the network by Network Manager:
Note: Please remember to choose two options:
Connect automatically
Available to all users
Click "Apply", save and exit, and restart your network services:
# Service network restart
3. Validate these profiles:
a) Check gateway: # vim / etc / sysconfig / network
NETWORKING=yes
HOSTNAME=dtop5.dn.ws.com
GATEWAY=172.28.10.1
b) Check Host Name: # vim /etc/hosts
c) Check DNS: # vim /etc/resolv.conf
# Generated by NetworkManager
Search dn.ws.com
Nameserver 172.28.10.1
d) Check Gateway: # vim /etc/sysconfig/network-scripts/ifcfg-eth0
크기가 100MB인 파티션 하나를 생성하여 데이터에 마운트합니다.
正解：
1. Use fdisk /dev/hda to create new partition.
2. Type n For New partitions.
3. It will ask for Logical or Primary Partitions. Press l for logical.
4. It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.
5. Type the Size: +100M you can specify either Last cylinder of size here.
6. Press P to verify the partitions lists and remember the partitions name.
7. Press w to write on partitions table.
8. Either Reboot or use partprobe command.
9. Use mkfs -t ext3 /dev/hda?
OR
mke2fs -j /dev/hda? To create ext3 filesystem.
vi /etc/fstab
Write:
/dev/hda? /data ext3 defaults 1 2
Verify by mounting on current Sessions also: mount /dev/hda? /data
2. Type n For New partitions.
3. It will ask for Logical or Primary Partitions. Press l for logical.
4. It will ask for the Starting Cylinder: Use the Default by pressing Enter Key.
5. Type the Size: +100M you can specify either Last cylinder of size here.
6. Press P to verify the partitions lists and remember the partitions name.
7. Press w to write on partitions table.
8. Either Reboot or use partprobe command.
9. Use mkfs -t ext3 /dev/hda?
OR
mke2fs -j /dev/hda? To create ext3 filesystem.
vi /etc/fstab
Write:
/dev/hda? /data ext3 defaults 1 2
Verify by mounting on current Sessions also: mount /dev/hda? /data
부팅 시 자동으로 적용되는 2G 스왑 파티션을 생성하면 원래 스왑 파티션에 영향을 미치지 않습니다.
正解：
# fdisk /dev/sda
p
(check Partition table)
n
(create new partition: press e to create extended partition, press p to create the main partition, and the extended partition is further divided into logical partitions) Enter
+2G t
8 I
82
W
partx -a /dev/sda
partprobe
mkswap /dev/sda8
Copy UUID
swapon -a
vim /etc/fstab
UUID=XXXXX swap swap defaults 0 0
(swapon -s)
p
(check Partition table)
n
(create new partition: press e to create extended partition, press p to create the main partition, and the extended partition is further divided into logical partitions) Enter
+2G t
8 I
82
W
partx -a /dev/sda
partprobe
mkswap /dev/sda8
Copy UUID
swapon -a
vim /etc/fstab
UUID=XXXXX swap swap defaults 0 0
(swapon -s)
다음과 같이 LDAP 사용자의 홈 디렉토리를 자동으로 마운트하도록 autofs를 구성합니다.
host.domain11.example.com은 /home을 시스템으로 NFS로 내보냅니다.
이 파일 시스템은 사용자 ldapuser11에 대한 미리 구성된 홈 디렉토리를 포함합니다. ldapuser11의 홈 디렉토리는 host.domain11.example.com /rhome/ldapuser11입니다. ldapuser11의 홈 디렉토리는 /rhome/ldapuser11로 로컬로 자동 마운트되어야 합니다. 홈 디렉토리는 해당 사용자가 쓸 수 있어야 합니다. ldapuser11의 비밀번호는 'password'입니다.
host.domain11.example.com은 /home을 시스템으로 NFS로 내보냅니다.
이 파일 시스템은 사용자 ldapuser11에 대한 미리 구성된 홈 디렉토리를 포함합니다. ldapuser11의 홈 디렉토리는 host.domain11.example.com /rhome/ldapuser11입니다. ldapuser11의 홈 디렉토리는 /rhome/ldapuser11로 로컬로 자동 마운트되어야 합니다. 홈 디렉토리는 해당 사용자가 쓸 수 있어야 합니다. ldapuser11의 비밀번호는 'password'입니다.
正解：
vim /etc/auto.master /rhome /etc/auto.misc
wq!
# vim /etc/auto.misc
ldapuser11 --rw,sync host.domain11.example.com:/rhome/ldpauser11 :wq!
#service autofs restart
service autofs reload
chkconfig autofs on
su -ldapuser11
Login ldapuser with home directory
# exit
wq!
# vim /etc/auto.misc
ldapuser11 --rw,sync host.domain11.example.com:/rhome/ldpauser11 :wq!
#service autofs restart
service autofs reload
chkconfig autofs on
su -ldapuser11
Login ldapuser with home directory
# exit
2부(Node2 서버)
과제 8 [시스템 성능 튜닝]
권장되는 조정된 프로필을 사용하도록 서버를 설정하세요.
과제 8 [시스템 성능 튜닝]
권장되는 조정된 프로필을 사용하도록 서버를 설정하세요.
正解：
[root@node2 ~]# tuned-adm list
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# tuned-adm recommend
virtual-guest
[root@node2 ~]# tuned-adm profile virtual-guest
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# reboot
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# tuned-adm recommend
virtual-guest
[root@node2 ~]# tuned-adm profile virtual-guest
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
[root@node2 ~]# reboot
[root@node2 ~]# tuned-adm active
Current active profile: virtual-guest
1부(Node1 서버)
작업 16 [컨테이너 실행]
재부팅 시 모든 저널을 저장하도록 호스트 저널을 구성하세요.
/var/log/journal/에서 모든 저널 파일을 복사하여 /home/shangrila/container-logserver에 넣습니다. 컨테이너가 시작될 때 /home/shangrila/container-logserver를 컨테이너의 영구 저장소로 생성하여 마운트합니다.
작업 16 [컨테이너 실행]
재부팅 시 모든 저널을 저장하도록 호스트 저널을 구성하세요.
/var/log/journal/에서 모든 저널 파일을 복사하여 /home/shangrila/container-logserver에 넣습니다. 컨테이너가 시작될 때 /home/shangrila/container-logserver를 컨테이너의 영구 저장소로 생성하여 마운트합니다.
正解：
* [shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d5ffe018a53c registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 5 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ podman stats logserver
Error: stats is not supported in rootless mode without cgroups v2
[shangrila@node1 ~]$ podman stop logserver
d5ffe018a53ca7eb075bf560d1f30822ab6fe51eba58fd1a8f370eda79806496
[shangrila@node1 ~]$ podman rm logserver
Error: no container with name or ID logserver found: no such container
[shangrila@node1 ~]$ mkdir -p container-journal/
* [shangrila@node1 ~]$ sudo systemctl restart systemd-journald
[sudo] password for shangrila:
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo chown -R shangrila container-journal/
[shangrila@node1 ~]$ podman run -d --name logserver -v /home/shangrila/container-journal/:/var/log/journal:Z registry.domain15.example.com:5000/rhel8/rsyslog
[shangrila@node1 ~]$ podman ps
[shangrila@node1 ~]$ loginctl enable-linger
[shangrila@node1 ~]$ loginctl show-user shangrila|grep -i linger
Linger=yes
* [shangrila@node1 ~]$ podman stop logserver
[shangrila@node1 ~]$ podman rm logserver
[shangrila@node1 ~]$ systemctl --user daemon-reload
[shangrila@node1 ~]$ systemctl --user enable --now container-logserver
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3903e1d09170 registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 4 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ systemctl --user stop container-logserver.service
* [shangrila@node1 ~]$ sudo reboot
[shangrila@node1 ~]$ podman ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7e6cd59c506a registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 10 seconds ago Up 9 seconds ago logserver
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d5ffe018a53c registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 5 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ podman stats logserver
Error: stats is not supported in rootless mode without cgroups v2
[shangrila@node1 ~]$ podman stop logserver
d5ffe018a53ca7eb075bf560d1f30822ab6fe51eba58fd1a8f370eda79806496
[shangrila@node1 ~]$ podman rm logserver
Error: no container with name or ID logserver found: no such container
[shangrila@node1 ~]$ mkdir -p container-journal/
* [shangrila@node1 ~]$ sudo systemctl restart systemd-journald
[sudo] password for shangrila:
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo cp -av /var/log/journal/* container-journal/
[shangrila@node1 ~]$ sudo chown -R shangrila container-journal/
[shangrila@node1 ~]$ podman run -d --name logserver -v /home/shangrila/container-journal/:/var/log/journal:Z registry.domain15.example.com:5000/rhel8/rsyslog
[shangrila@node1 ~]$ podman ps
[shangrila@node1 ~]$ loginctl enable-linger
[shangrila@node1 ~]$ loginctl show-user shangrila|grep -i linger
Linger=yes
* [shangrila@node1 ~]$ podman stop logserver
[shangrila@node1 ~]$ podman rm logserver
[shangrila@node1 ~]$ systemctl --user daemon-reload
[shangrila@node1 ~]$ systemctl --user enable --now container-logserver
[shangrila@node1 ~]$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
3903e1d09170 registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 4 seconds ago Up 4 seconds ago logserver
[shangrila@node1 ~]$ systemctl --user stop container-logserver.service
* [shangrila@node1 ~]$ sudo reboot
[shangrila@node1 ~]$ podman ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7e6cd59c506a registry.domain15.example.com:5000/rhel8/rsyslog:latest /bin/rsyslog.sh 10 seconds ago Up 9 seconds ago logserver
sudo 권한 구성 추가
sysmgrs 그룹의 멤버가 비밀번호를 입력하지 않고도 sudo를 사용할 수 있도록 허용합니다.
sysmgrs 그룹의 멤버가 비밀번호를 입력하지 않고도 sudo를 사용할 수 있도록 허용합니다.
正解：
[root@node1 ~]# visudo
...
%wheel ALL=(ALL) NOPASSWD: ALL
%sysmgrs ALL=(ALL) NOPASSWD: ALL
# Verification (mandatory operation)
[root@node1 ~]# su - natasha
[natasha@node1 ~]# sudo cat /etc/shadow
...
%wheel ALL=(ALL) NOPASSWD: ALL
%sysmgrs ALL=(ALL) NOPASSWD: ALL
# Verification (mandatory operation)
[root@node1 ~]# su - natasha
[natasha@node1 ~]# sudo cat /etc/shadow