Debian on PolloChang 工作筆記

Debian13 安裝 Ansible

Thu, 26 Feb 2026 01:24:09 +0800

以下是我在 Debian 13 安裝 Ansible 紀錄

sudo apt install python3-venv -y
mkdir ~/ansible_legacy && cd ~/ansible_legacy
python3 -m venv venv
source venv/bin/activate
pip install "ansible-core<2.17"
vim ~/.zshrc
# source ~/ansible_legacy/venv/bin/activate

結果如下

❯ sudo apt install python3-venv -y
Installing:                     
  python3-venv

Installing dependencies:
  python3-pip-whl  python3-setuptools-whl  python3.13-venv

Summary:
  Upgrading: 0, Installing: 4, Removing: 0, Not Upgrading: 0
  Download size: 2,782 kB
  Space needed: 2,957 kB / 961 GB available

Get:1 http://ftp.tw.debian.org/debian trixie/main amd64 python3-pip-whl all 25.1.1+dfsg-1 [1,507 kB]
Get:2 http://ftp.tw.debian.org/debian trixie/main amd64 python3-setuptools-whl all 78.1.1-0.1 [1,268 kB]
Get:3 http://ftp.tw.debian.org/debian trixie/main amd64 python3.13-venv amd64 3.13.5-2 [5,472 B]
Get:4 http://ftp.tw.debian.org/debian trixie/main amd64 python3-venv amd64 3.13.5-1 [1,180 B]
Fetched 2,782 kB in 2s (1,679 kB/s)      
Selecting previously unselected package python3-pip-whl.
(Reading database ... 332994 files and directories currently installed.)
Preparing to unpack .../python3-pip-whl_25.1.1+dfsg-1_all.deb ...
Unpacking python3-pip-whl (25.1.1+dfsg-1) ...
Selecting previously unselected package python3-setuptools-whl.
Preparing to unpack .../python3-setuptools-whl_78.1.1-0.1_all.deb ...
Unpacking python3-setuptools-whl (78.1.1-0.1) ...
Selecting previously unselected package python3.13-venv.
Preparing to unpack .../python3.13-venv_3.13.5-2_amd64.deb ...
Unpacking python3.13-venv (3.13.5-2) ...
Selecting previously unselected package python3-venv.
Preparing to unpack .../python3-venv_3.13.5-1_amd64.deb ...
Unpacking python3-venv (3.13.5-1) ...
Setting up python3-setuptools-whl (78.1.1-0.1) ...
Setting up python3-pip-whl (25.1.1+dfsg-1) ...
Setting up python3.13-venv (3.13.5-2) ...
Setting up python3-venv (3.13.5-1) ...


❯ mkdir ~/ansible_legacy && cd ~/ansible_legacy

❯ python3 -m venv venv

❯ source venv/bin/activate

❯ pip install "ansible-core<2.17"
Collecting ansible-core<2.17
  Downloading ansible_core-2.16.17-py3-none-any.whl.metadata (6.9 kB)
Collecting jinja2>=3.0.0 (from ansible-core<2.17)
  Downloading jinja2-3.1.6-py3-none-any.whl.metadata (2.9 kB)
Collecting PyYAML>=5.1 (from ansible-core<2.17)
  Downloading pyyaml-6.0.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl.metadata (2.4 kB)
Collecting cryptography (from ansible-core<2.17)
  Downloading cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl.metadata (5.7 kB)
Collecting packaging (from ansible-core<2.17)
  Downloading packaging-26.0-py3-none-any.whl.metadata (3.3 kB)
Collecting resolvelib<1.1.0,>=0.5.3 (from ansible-core<2.17)
  Downloading resolvelib-1.0.1-py2.py3-none-any.whl.metadata (4.0 kB)
Collecting MarkupSafe>=2.0 (from jinja2>=3.0.0->ansible-core<2.17)
  Downloading markupsafe-3.0.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl.metadata (2.7 kB)
Collecting cffi>=2.0.0 (from cryptography->ansible-core<2.17)
  Downloading cffi-2.0.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (2.6 kB)
Collecting pycparser (from cffi>=2.0.0->cryptography->ansible-core<2.17)
  Downloading pycparser-3.0-py3-none-any.whl.metadata (8.2 kB)
Downloading ansible_core-2.16.17-py3-none-any.whl (2.2 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.2/2.2 MB 168.7 kB/s eta 0:00:00
Downloading resolvelib-1.0.1-py2.py3-none-any.whl (17 kB)
Downloading jinja2-3.1.6-py3-none-any.whl (134 kB)
Downloading markupsafe-3.0.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (22 kB)
Downloading pyyaml-6.0.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (801 kB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 801.6/801.6 kB 105.9 kB/s eta 0:00:00
Downloading cryptography-46.0.5-cp311-abi3-manylinux_2_34_x86_64.whl (4.5 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.5/4.5 MB 73.5 kB/s eta 0:00:00
Downloading cffi-2.0.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl (219 kB)
Downloading packaging-26.0-py3-none-any.whl (74 kB)
Downloading pycparser-3.0-py3-none-any.whl (48 kB)
Installing collected packages: resolvelib, PyYAML, pycparser, packaging, MarkupSafe, jinja2, cffi, cryptography, ansible-core
Successfully installed MarkupSafe-3.0.3 PyYAML-6.0.3 ansible-core-2.16.17 cffi-2.0.0 cryptography-46.0.5 jinja2-3.1.6 packaging-26.0 pycparser-3.0 resolvelib-1.0.1

❯ ansible --version 
ansible [core 2.16.17]
  config file = None
  configured module search path = ['/home/pollochang/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
  ansible python module location = /home/pollochang/ansible_legacy/venv/lib/python3.13/site-packages/ansible
  ansible collection location = /home/pollochang/.ansible/collections:/usr/share/ansible/collections
  executable location = /home/pollochang/ansible_legacy/venv/bin/ansible
  python version = 3.13.5 (main, Jun 25 2025, 18:55:22) [GCC 14.2.0] (/home/pollochang/ansible_legacy/venv/bin/python3)
  jinja version = 3.1.6
  libyaml = True

常用 package

jenkins 安裝

Sun, 05 May 2024 12:03:56 +0800

環境
#

OS: Debian 12, Oracle Linux 9
jenkins version: 2.462.1
jre: adoptium jre 17

安裝
#

安裝必要package
#

Debian

`1`	`sudo apt install -y fontconfig tar zip git wget`

Oracle Linux 9

`1`	`sudo dnf install -y fontconfig tar zip git wget`

部署 tomcat
#

安裝 jre
#

從 adoptium 官方網站下載 java 17
安裝 jre

sudo mkdir -p /usr/local/lib/jvm
sudo tar -zxf ~/OpenJDK17U-jre_x64_linux_hotspot_17.0.12_7.tar.gz -C /usr/local/lib/jvm
cd /usr/local/lib/jvm/
sudo ln -s jdk-17.0.12+7-jre jre-17-latest

安裝 tomcat
#

設定使用者

`1`	`sudo useradd --system -r tomcat -s /sbin/nologin`

sudo useradd --system -r jenkins -s /bin/bash
passwd jenkins
sudo usermod -a -G tomcat jenkins

visudo

tee /etc/sudoers.d/tomcat <<EOF
Cmnd_Alias TOMCAT_SERVICE = /bin/systemctl stop tomcat-*, /bin/systemctl start tomcat-*, /bin/systemctl status tomcat-*, /bin/systemctl restart tomcat-*
jenkins ALL=(ALL)       NOPASSWD: TOMCAT_SERVICE
EOF

sudo mkdir -p /var/tomcat/dump/jenkins \
  /var/log/tomcat/jenkins \
  /opt/apache-tomcat/ \
  /usr/local/etc/catalina/jenkins/{webapps,temp,work} \
  /usr/local/jenkins
sudo chown -R tomcat: /var/log/tomcat
sudo chown -R tomcat: /usr/local/share/apache-tomcat

下載 tomcat 並安裝

wget https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.93/bin/apache-tomcat-9.0.93.tar.gz
sudo tar -zxf ~/apache-tomcat-9.0.93.tar.gz -C /usr/local/share/apache-tomcat
cd /usr/local/share/apache-tomcat
sudo ln -s apache-tomcat-9.0.93 apache-tomcat-9-latest
sudo rm -rf /usr/local/share/apache-tomcat/apache-tomcat-9-latest/webapps/*
sudo rm -rf /usr/local/share/apache-tomcat/apache-tomcat-9-latest/logs/*

sudo mkdir /usr/local/share/apache-tomcat/apache-tomcat-9-latest/logs

sudo chown -R tomcat: /usr/local/share/apache-tomcat
sudo chown -R root: /usr/local/share/apache-tomcat/*/logs
sudo chown -R tomcat: /usr/local/etc/catalina
sudo chown -R tomcat: /var/tomcat/dump
sudo chown -R tomcat: /home/tomcat

設定 tomcat 參數

1
2

sudo  ln -s /var/log/tomcat/jenkins /usr/local/etc/catalina/jenkins/logs
sudo -u tomcat cp -r /opt/apache-tomcat/apache-tomcat-9-latest/conf /usr/local/etc/catalina/jenkins/conf

tee /usr/local/etc/catalina/jenkins/conf/context.xml<<EOF
<?xml version="1.0" encoding="UTF-8"?>
<Context>
    <WatchedResource>WEB-INF/web.xml</WatchedResource>
    <WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
    <WatchedResource>\${catalina.base}/conf/web.xml</WatchedResource>
    <Resources cacheMaxSize="51200" cachingAllowed="true"/>
</Context>
EOF

jenkins/conf/server.xml

sudo -u tomcat tee /usr/local/etc/catalina/jenkins/conf/server.xml<<EOF
<?xml version="1.0" encoding="UTF-8"?>
<Server port="-1" shutdown="SHUTDOWN">
  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />

  <GlobalNamingResources>
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
            pathname="conf/tomcat-users.xml" 
            cachingAllowed="false"
            />
  </GlobalNamingResources>

    <Service name="Catalina">

        <Connector port="8080"
               protocol="org.apache.coyote.http11.Http11NioProtocol"
               connectionTimeout="20000"
               redirectPort="8443"
                maxParameterCount="1000"
                disableUploadTimeout= "true"
                server="jenkins"
                URIEncoding= "UTF-8"
               />
    <Engine name="Catalina" defaultHost="localhost">

      <Realm className="org.apache.catalina.realm.LockOutRealm">
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
               resourceName="UserDatabase"/>
      </Realm>

      <Host name="localhost"  appBase="webapps"
            unpackWARs="false" autoDeploy="false" reloadable="false"
              >
        <Valve className="org.apache.catalina.valves.RemoteIpValve"
                    internalProxies=".*"
                    remoteIpHeader="x-forwarded-for" proxiesHeader="x-forwarded-by"  protocolHeader="x-forwarded-proto"
                    httpsServerPort="443"
                />
        <Valve className="org.apache.catalina.valves.ErrorReportValve" showReport="false" showServerInfo="false" />
        <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log" suffix=".txt"
               pattern="%h %l %u %t &quot;%r&quot; %s %b" />

      </Host>
    </Engine>
  </Service>
</Server>
EOF

設定 daemon

/etc/systemd/system/jenkins.service

sudo tee /etc/systemd/system/jenkins.service<<EOF
[Unit]
Description=Apache Tomcat Web Application Container
After=syslog.target network.target

[Service]
Type=forking

Environment=JAVA_HOME=/usr/local/lib/jvm/jdk17-latest
Environment=CATALINA_PID=/run/jenkins.pid
Environment=CATALINA_HOME=/opt/apache-tomcat/apache-tomcat-9-latest
Environment=CATALINA_BASE=/usr/local/etc/catalina/jenkins

Environment="JENKINS_PREFIX=/jenkins"
Environment="JENKINS_HOME=/usr/local/jenkins"

#CATALINA_OPTS
Environment='CATALINA_OPTS=-server -Xshare:off -Xms2g -Xmx2g -Djava.net.preferIPv4Stack=true -XX:+EliminateLocks -XX:+UseBiasedLocking -XX:MaxJavaStackTraceDepth=100 -XX:+UseG1GC -XX:MaxGCPauseMillis=95'
#JAVA_OPTS
Environment='JAVA_OPTS=-Duser.language=zh -Duser.region=TW -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/tomcat/dump'


ExecStart=/usr/local/share/apache-tomcat/apache-tomcat-9-latest/bin/startup.sh
ExecStop=/bin/kill -15 \$MAINPID

User=jenkins
Group=jenkins
UMask=0027
RestartSec=10
Restart=always

[Install]
WantedBy=multi-user.target
EOF

部署 jenkins war
#

1
2
3

wget https://get.jenkins.io/war-stable/2.462.1/jenkins.war
sudo -u tomcat mkdir -p /usr/local/etc/catalina/jenkins/webapps/jenkins
sudo unzip -q jenkins.war -d /usr/local/etc/catalina/jenkins/webapps/jenkins

啟動

1
2
3

sudo systemctl daemon-reload
sudo systemctl restart jenkins && sudo tail -f /var/log/tomcat/jenkins/catalina.out
sudo systemctl enable jenkins

防火牆設定

1
2

sudo firewall-cmd --permanent --add-port=8080/tcp
sudo firewall-cmd --reload

升級
#

sudo systemctl stop jenkins
sydoi rm -rf /usr/local/etc/catalina/jenkins/webapps/jenkins
sudo -u tomcat mkdir -p /usr/local/etc/catalina/jenkins/webapps/jenkins
sudo unzip -q jenkins.war -d /usr/local/etc/catalina/jenkins/webapps/jenkins

Linux 發行板核心版本整理

Sat, 09 Mar 2024 11:27:26 +0800

前幾天在工作中因為要導入GBC，但是在客戶的系統當中有非RedHat衍生發行板的系統，所以想說用相近的 Linux Kernel 作為導入的基礎，在這邊把整好的核心版本整理一下

筆記型電腦安裝 Debian 調整

Wed, 28 Feb 2024 19:20:17 +0800

筆記型電腦調整
#

筆記型電腦插入滑鼠裝置自動關閉滑鼠板 Gnome
#

`1`	`gsettings set org.gnome.desktop.peripherals.touchpad send-events disabled-on-external-mouse`

我發現在 Debian 10 (Gnome3.30.2) 不會正常作用

電源管理 tlp
#

sudo apt install tlp tlp-rdw
sudo tlp start
sudo tlp-stat -s
sudo systemctl enable tlp

參考資料
#

GNOME: How To Disable The Touchpad When A Mouse Is Plugged In And While Typing

Debian on PolloChang 工作筆記

Debian13 安裝 Ansible

jenkins 安裝

環境 #

安裝 #

安裝必要package #

部署 tomcat #

安裝 jre #

安裝 tomcat #

部署 jenkins war #

升級 #