Hello World

安裝 windows 11 過程中，預設只能抓dhcp 連上網路
介面上也沒提供變更成固定ip的選項
只能透過文字介面，以指令方式實現
按下 shift + F10，叫出 cmd
輸入以下指令

編輯 /etc/systemd/journald.conf
[Journal]
SystemMaxUse=500M
Compress=yes
重啟服務
systemctl restart systemd-journald

檢查方式
nmap -p445 --script smb-protocols FILESERVER
是否會有以下關鍵字，如果沒有就是連不上
NT LM 0.12 (SMBv1) [dangerous, but default]

透過esxi 介面將 guest os 關機失敗時
解決方式，進入 cli 介面
1. 輸入 esxcli vm process list
2. 記錄該 guest os 的 World ID
3. 執行 esxcli vm process kill -t=soft -w=(World ID)
如 esxcli vm process kill -t=soft -w=3624320

ubuntu linux 開機時停在 initramfs 提示畫面，可能原因是有不正常的重開機
需要手動介入 fsck
1. 執行 blkid
列出ext4 filesystem
2. 手動執行 fsck
fsck -y /dev/sda1
3. exit 離開，即進入開機流程

configure
只允許一個mac address
set ethernet-switching-options secure-access-port interface ge-0/0/10 mac-limit 1
set ethernet-switching-options secure-access-port interface ge-0/0/10 static-mac 00:11:22:33:44:55
清空 mac address 設定
configure
delete ethernet-switching-options secure-access-port interface ge-0/0/10.0

開機時按下空白鍵，出現 loader> 提示符號後，輸入 boot -s 進入單人模式
Hit [Enter] to boot immediately, or space bar for command prompt.
Type '?' for a list of commands, 'help' for more detailed help.
loader> boot -s
出現以下畫面，輸入 recovery
Enter full pathname of shell or 'recovery' for root password recovery or RETURN for /bin/sh: recovery
輸入 configure
root@switch> configure
Entering configuration mode
{linecard:0}[edit]
輸入 set system root-authentication plain-text-password ，並重複輸入兩次新密碼
root@switch# set system root-authentication plain-text-password
New password:
Retype new password:
{linecard:0}[edit]
輸入 commit
root@switch# commit
commit complete
離開 configuration mode
root@switch# exit
Exiting configuration mode
離開 operational mode
root@switch> exit
回答 y 重開機
Reboot the system? [y/n]

root@zentyal-ad:~# samba-tool fsmo transfer --role=all -Uadministrator
FSMO transfer of 'rid' role successful
FSMO transfer of 'pdc' role successful
FSMO transfer of 'naming' role successful
FSMO transfer of 'infrastructure' role successful
Schema refresh needed 27 != 28
FSMO transfer of 'schema' role successful
lpcfg_load: refreshing parameters from /etc/samba/smb.conf
resolve_lmhosts: Attempting lmhosts lookup for name d7a4d593-e3cc-4ad8-aa42-0147646643ba._msdcs.mybox.tw<0x20>
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'http_negotiate' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Password for [MYBOX\administrator]:
Using binding ncacn_ip_tcp:zentyal-ad.mybox.tw[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name zentyal-ad.mybox.tw<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name zentyal-ad.mybox.tw<0x20>
FSMO transfer of 'domaindns' role successful
lpcfg_load: refreshing parameters from /etc/samba/smb.conf
resolve_lmhosts: Attempting lmhosts lookup for name d7a4d593-e3cc-4ad8-aa42-0147646643ba._msdcs.mybox.tw<0x20>
Using binding ncacn_ip_tcp:zentyal-ad.mybox.tw[,seal]
resolve_lmhosts: Attempting lmhosts lookup for name zentyal-ad.mybox.tw<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name zentyal-ad.mybox.tw<0x20>
FSMO transfer of 'forestdns' role successful

測試環境
舊DC: zentyal-ad
新DC: zentyal8
確認目前五大角色都在舊DC上
登入舊DC
root@zentyal-ad:~# samba-tool fsmo show
ldb_wrap open of secrets.ldb
SchemaMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
InfrastructureMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
RidAllocationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainNamingMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
登入新DC
root@zentyal8:~# samba-tool fsmo show
ldb_wrap open of secrets.ldb
SchemaMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
InfrastructureMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
RidAllocationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainNamingMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
輸入寫的Y，開始轉移
root@zentyal8:~# cd /usr/share/zentyal-samba
root@zentyal8:/usr/share/zentyal-samba# ./ad-migrate
WARNING: This script will transfer all FSMO roles from the current owners to
the local server.
After all roles has been successfully transferred, you can shutdown
the other domain controllers.
Do you want to continue [Y/n]? Y
Checking server mode...
Checking if server is provisioned...
Transferring FSMO roles...
Transferring Schema Master role from owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
Transferring Domain Naming Master role from owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
Transferring PDC Emulation Master role from owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
Transferring RID Allocation Master role from owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
Transferring Infrastructure Master role from owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
Migrated successfully!
最後確認兩台五大角色是否都已經顯示成新的DC
舊DC
root@zentyal-ad:~# samba-tool fsmo show
ldb_wrap open of secrets.ldb
SchemaMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
InfrastructureMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
RidAllocationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainNamingMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
新DC
root@zentyal8:/usr/share/zentyal-samba# samba-tool fsmo show
ldb_wrap open of secrets.ldb
SchemaMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
InfrastructureMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
RidAllocationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainNamingMasterRole owner: CN=NTDS Settings,CN=ZENTYAL8,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mydc,DC=lab

以前的位置在設定> 應用程式 > 選用功能新版windows 11 pro 路徑改成 系統 > 選用功能 > 檢視或編輯選用功能 > 選擇要安裝的功能

略過windows 11 安裝檢查，讓老電腦或是舊版的esx續命
安裝過程中，輸入 shift + F10 ，叫出 cmd 命令提示字元
輸入以下指令
reg add "HKCU\SOFTWARE\Microsoft\PCHC" /v UpgradeEligibility /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f

編輯 /etc/systemd/timesyncd.conf
找到[Time]
NTP=ntp-server
執行 timdatectl 列出目前狀態
確認 NTP service 是否是 active 或是 inactive
如果是 inactive
執行 timdatectl set-ntp true
重啟 systemd-timesyncd 服務
systemctl restart systemd-timesyncd