###ORACLE 21容器安装
步骤1：下载镜像
docker pull container-registry.oracle.com/database/free:latest
步骤2：运行
方法一：
执行以下命令，<oracle-db>可以自定义，运行后SYS, SYSTEM and PDBADMIN users会产生随机密码
podman run -d --name <oracle-db> container-registry.oracle.com/database/free:latest
改变随机密码：
podman exec <oracle-db> ./setPassword.sh <your_password>
访问告警日志
podman logs <oracle-db>
访问数据库容器
进容器内：
podman exec -it <oracle-db> sqlplus sys/<your_password>@FREE as sysdba podman exec -it <oracle-db> sqlplus system/<your_password>@FREE podman exec -it <oracle-db> sqlplus pdbadmin/<your_password>@FREEPDB1
外部连接端口
发现容器端口
podman port <oracle-db> sqlplus sys/<your password="">@//localhost:<port mapped="" to="" 1521="">/FREE as sysdba sqlplus system/<your password="">@//localhost:<port mapped="" to="" 1521="">/FREE sqlplus pdbadmin/<your password="">@//localhost:<port mapped="" to="" 1521="">/FREEPDB1
运行脚本：
安装后可运行脚本，运行时mount目录
podman run -d --name <oracle-db> -v \ /home/oracle/myScripts:/opt/oracle/scripts/startup \ container-registry.oracle.com/database/free:latest
###Oracle True Cache
建立网络
podman network create tc_net
检查网络
podman inspect tc_net | grep -iw ‘subnet’
运 行primary database
podman run -td –name pri-db-free \ –hostname pri-db-free \ –net=tc_net \ –ip \ -p :1521 \ –secret=oracle_pwd \ –secret=oracle_pwd_priv_key \ –add-host=”tru-cc-free:” \ -e ENABLE_ARCHIVELOG=true \ -e ENABLE_FORCE_LOGGING=true \ -v [:]/opt/oracle/oradata \ container-registry.oracle.com/database/free:latest
运 行free true cache
podman run -td –name tru-cc-free \ –hostname tru-cc-free \ –net=tc_net \ –ip \ -p :1521 \ –secret=oracle_pwd \ –secret=oracle_pwd_priv_key \ –add-host=”pri-db-free:” \ -e TRUE_CACHE=true \ -e PRIMARY_DB_CONN_STR=:1521/FREE \ -e PDB_TC_SVCS=”FREEPDB1:sales1:sales1_tc;FREEPDB1:sales2:sales2_tc;FREEPDB1:sales3:sales3_tc;FREEPDB1:sales4:sales4_tc” \ -v [:]/opt/oracle/oradata \ container-registry.oracle.com/database/free:latest
方法二：
podman run --name <container name=""> \ -P | -p <host port="">:1521 \ -e ORACLE_PWD=<your database="" passwords=""> \ -e ORACLE_CHARACTERSET=<your character="" set=""> \ -e ENABLE_ARCHIVELOG=true \ -e ENABLE_FORCE_LOGGING=true \ -v [<host mount="" point="">:]/opt/oracle/oradata \ container-registry.oracle.com/database/free:latest
character：AL32UTF8
Parameters:
--name: The name of the container (default: auto generated)
-P | -p: The port mapping of the host port to the container port.
Only one port is exposed: 1521 (Oracle Listener)
-e ORACLE_PWD: The Oracle AI Database SYS, SYSTEM and PDB_ADMIN password (default: auto generated)
-e ORACLE_CHARACTERSET:
The character set to use when creating the database (default: AL32UTF8)
-e ENABLE_ARCHIVELOG:
To enable archive log mode when creating the database (default: true)
-e ENABLE_FORCE_LOGGING:
To enable force logging mode when creating the database (default: true)
-v /opt/oracle/oradata
The data volume to use for the database.
Has to be writable by the Unix "oracle" (uid: 54321) user inside the container.
If omitted the database will not be persisted over container recreation.
-v /opt/oracle/scripts/startup
Optional: A volume with custom scripts to be run after database startup.
For further details see the "Running scripts after setup and on startup" section below.
-v /opt/oracle/scripts/setup
Optional: A volume with custom scripts to be run after database setup.
For further details see the "Running scripts after setup and on startup" section below.
####Podman 密码安全
步骤一：产生RSA
mkdir /opt/.secrets/ cd /opt/.secrets openssl genrsa -out key.pem openssl rsa -in key.pem -out key.pub -pubout
步骤二：创建明文密码文件
vi /opt/.secrets/pwdfile.txt
步骤三：用私钥加密密码文件
openssl pkeyutl -in /opt/.secrets/pwdfile.txt -out /opt/.secrets/pwdfile.enc -pubin -inkey /opt/.secrets/key.pub -encrypt rm -rf /opt/.secrets/pwdfile.txt
步骤四：创建podman secrets
podman secret create oracle_pwd /opt/.secrets/pwdfile.enc
podman secret create oracle_pwd_priv_key /opt/.secrets/key.pub
步骤五：将podman secret用于容器
podman run --name <container_name> --secret=oracle_pwd --secret=oracle_pwd_priv_key container-registry.oracle.com/database/free:latest