Sunday, October 5, 2025

Weblogic 14.1.2 start managed server with Admin Channel

 

HOWTO


See also 


Git

Keep domain wide administration port disabled





Configure custom Admin Channel on Admin  server 





Configure custom Admin Channel on managed server 





Start managed server with Admin Channel

  • startManagedWebLogic.sh managed_server_name admin_url (UNIX)


dave@dave:/app/domains/dave_domain/bin$ ./startManagedWebLogic.sh dave-managed https://localhost:9002
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=dave-managed -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server   -Dweblogic.management.server=https://localhost:9002   weblogic.Server
[0.009s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 1:54:29 PM Central European Summer Time> <Info> <Security> <BEA-090065> <Getting boot identity from user.> 
Enter username to boot WebLogic server:weblogic    
Enter password to boot WebLogic server:
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090960> <The server's SSL configuration is not available. There will potentially be SSL handshake failures.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090924> <JSSE has been selected by default, since the SSLMBean is not available.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Info> <Security> <BEA-090908> <Using the default WebLogic SSL Wildcard Hostname Verifier implementation.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 1:54:42,345 PM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320400> <The log file /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms, such as Windows.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log00001. Log messages will continue to be logged in /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log.> 
<Oct 5, 2025, 1:54:42,380 PM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=303355457
Current log file=/home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log
Rotation dir=/home/app/domains/dave_domain/servers/dave-managed/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 1:54:42,410 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,447 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,448 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:42,465 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,495 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,501 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:44,453 PM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:44,753 PM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:46,072 PM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 1:54:46,213 PM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://localhost:9200/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "dave-managed-admin" is now listening on 127.0.0.1:9200 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:48,124 PM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 1:54:48,274 PM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 1:54:48,394 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
<Oct 5, 2025, 1:54:48,459 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 1:54:48,522 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 1:54:48,524 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,526 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000332> <Started the WebLogic Server Managed Server "dave-managed" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,529 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,532 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,533 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,537 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,538 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,640 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 1:54:48,653 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.>

Runtime monitoring in Remote Console

config.xml with managed server

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <server>
    <name>dave-managed</name>
    <ssl>
      <enabled>false</enabled>
    </ssl>
    <listen-port>9001</listen-port>
    <listen-address xsi:nil="true"></listen-address>
    <network-access-point>
      <name>dave-managed-admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9200</listen-port>
    </network-access-point>
  </server>
Posted by at 1 comment:
Labels: , ,

Create domain on Weblogic 14.1.2 with Oracle JDK 21

HOWTO


GitHub


Check current version 

dave@dave:~$ cd /app/weblogic/wlserver/server/lib
dave@dave:/app/weblogic/wlserver/server/lib$ java -cp weblogic.jar weblogic.version

WebLogic Server 14.1.1.0.0  Thu Mar 26 03:15:09 GMT 2020 2000885

Use 'weblogic.version -verbose' to get subsystem information

Use 'weblogic.utils.Versions' to get version information for all modules

Instal Oracle JDK 21 

Verify that a certified JDK already exists on your system; the installer requires a certified JDK. See Oracle Fusion Middleware Supported System Configurations. To download the JDK, see About JDK Requirements for an Oracle Fusion Middleware Installation.


dave@dave:~$ java -version
java version "21.0.5" 2024-10-15 LTS
Java(TM) SE Runtime Environment (build 21.0.5+9-LTS-239)
Java HotSpot(TM) 64-Bit Server VM (build 21.0.5+9-LTS-239, mixed mode, sharing)

Install Weblogic 14.1.2



Unzip 
$ unzip -l  ~/Downloads/V1045131-01.zip 
Archive:  /home/dave/Downloads/V1045131-01.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
686826498  12-05-2024 23:27   fmw_14.1.2.0.0_wls.jar
---------                     -------
686826498                     1 file
Install 
dave@dave:/app$ java -jar fmw_14.1.2.0.0_wls.jar

            
Launcher log file is /tmp/OraInstall2025-10-05_09-05-18AM/launcher2025-10-05_09-05-18AM.log.
Extracting the installer . . . . . . Done
Checking if CPU speed is above 300 MHz.   Actual 2599.988 MHz    Passed
Checking monitor: must be configured to display at least 256 colors.   Actual 16777216    Passed
Checking swap space: must be greater than 512 MB.   Actual 8191 MB    Passed
Checking temp space: must be greater than 300 MB.   Actual 7234 MB    Passed
Preparing to launch the Oracle Universal Installer from /tmp/OraInstall2025-10-05_09-05-18AM
Log: /tmp/OraInstall2025-10-05_09-05-18AM/install2025-10-05_09-05-18AM.log
Logs successfully copied to /home/dave/oraInventory/logs.






Start admin server 



dave@dave:/app/domains/dave_domain$ ./startWebLogic.sh 
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar::/home/app/weblogic/wlserver/common/derby/lib/derbynet.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyoptionaltools.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=AdminServer -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server      weblogic.Server
[0.016s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 9:13:28,654 AM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=1415466851
Current log file=/home/app/domains/dave_domain/servers/AdminServer/logs/AdminServer.log
Rotation dir=/home/app/domains/dave_domain/servers/AdminServer/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 9:13:28,783 AM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,295 AM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,985 AM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 9:13:30,235 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 9:13:30,544 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.domainruntime.> 
<Oct 5, 2025, 9:13:30,696 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.edit.> 
<Oct 5, 2025, 9:13:32,359 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 9:13:32,463 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 9:13:32,484 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 9:13:32,486 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 9:13:32,498 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 9:13:32,501 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 9:13:32,502 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration" is now listening on 192.168.0.115:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,504 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[3]" is now listening on 172.17.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,506 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[4]" is now listening on 192.168.49.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,507 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[5]" is now listening on 192.168.122.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[7]" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,526 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 9:13:32,527 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:32,585 AM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 9:13:34,817 AM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 9:13:34,894 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
Oct 05, 2025 9:13:34 AM weblogic.wsee.jaxws.provider.state.persistence.LogicalStoreStateManagerProvider <init>
INFO: Constructing LogicalStoreStateManagerProvider@1716684370, providerName=WseeStore, storeName=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo <init>
INFO: Constructing LogicalStoreInfo@966438498 [name=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedRequestQueue:weblogic.wsee.BufferedRequestQueue
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedResponseQueue:weblogic.wsee.BufferedResponseQueue
<Oct 5, 2025, 9:13:34,967 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 9:13:35,031 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,032 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[7]" is now listening on 127.0.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,034 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[5]" is now listening on 192.168.122.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,036 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 192.168.0.115:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000331> <Started the WebLogic Server Administration Server "AdminServer" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 9:13:35,038 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[4]" is now listening on 192.168.49.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,040 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,041 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[3]" is now listening on 172.17.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,043 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,118 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 9:13:35,130 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.> 
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo addPhysicalStore
INFO: Added physical store for server AdminServer PhysicalStore='WseeJaxwsFileStore' Current physical store count: 1
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper notifyServerSetListeners
INFO: 2 can not find  ServerSetListener

Config.xml


dave@dave:/app$ cat  /app/domains/dave_domain/config/config.xml 
<?xml version="1.0" encoding="UTF-8"?>
<domain xsi:schemaLocation="http://xmlns.oracle.com/weblogic/security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic/security/xacml http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd" xmlns="http://xmlns.oracle.com/weblogic/domain" xmlns:sec="http://xmlns.oracle.com/weblogic/security" xmlns:wls="http://xmlns.oracle.com/weblogic/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <name>dave_domain</name>
  <domain-version>14.1.2.0.0</domain-version>
  <security-configuration xmlns:xacml="http://xmlns.oracle.com/weblogic/security/xacml" xmlns:pas="http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator">
    <name>dave_domain</name>
    <realm>
      <sec:authentication-provider xsi:type="wls:default-authenticatorType">
        <sec:name>DefaultAuthenticator</sec:name>
      </sec:authentication-provider>
      <sec:authentication-provider xsi:type="wls:default-identity-asserterType">
        <sec:name>DefaultIdentityAsserter</sec:name>
        <sec:active-type>AuthenticatedUser</sec:active-type>
        <sec:active-type>weblogic-jwt-token</sec:active-type>
      </sec:authentication-provider>
      <sec:role-mapper xsi:type="xacml:xacml-role-mapperType">
        <sec:name>XACMLRoleMapper</sec:name>
      </sec:role-mapper>
      <sec:authorizer xsi:type="xacml:xacml-authorizerType">
        <sec:name>XACMLAuthorizer</sec:name>
      </sec:authorizer>
      <sec:adjudicator xsi:type="wls:default-adjudicatorType">
        <sec:name>DefaultAdjudicator</sec:name>
      </sec:adjudicator>
      <sec:credential-mapper xsi:type="wls:default-credential-mapperType">
        <sec:name>DefaultCredentialMapper</sec:name>
      </sec:credential-mapper>
      <sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType">
        <sec:name>WebLogicCertPathProvider</sec:name>
      </sec:cert-path-provider>
      <sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
      <sec:name>myrealm</sec:name>
      <sec:password-validator xsi:type="pas:system-password-validatorType">
        <sec:name>SystemPasswordValidator</sec:name>
        <pas:min-password-length>8</pas:min-password-length>
        <pas:min-numeric-or-special-characters>1</pas:min-numeric-or-special-characters>
      </sec:password-validator>
    </realm>
    <default-realm>myrealm</default-realm>
    <credential-encrypted>{AES256}wLRjNyZr9HwkpIvZnt7prR1F0F58X1w55Rt0o2cUG1TsYT/fB5G3umETxFA8Ha30NEvPnXmPhKzVp7xAYVmfNe6jg4gGugEmZqQ7uvi2xR0BbXo60GxPSRkuVCCvHCa+</credential-encrypted>
    <node-manager-username>weblogic</node-manager-username>
    <node-manager-password-encrypted>{AES256}4uKCZCiWlVnsqKKDIE0PuTPZ3AaqVPaW5D8mJFw2zzw=</node-manager-password-encrypted>
  </security-configuration>
  <server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address/>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>true</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>
  <app-deployment>
    <name>state-management-provider-memory-rar</name>
    <target>AdminServer</target>
    <module-type>rar</module-type>
    <source-path>/home/app/weblogic/oracle_common/modules/com.oracle.state-management.state-management-provider-memory-rar-impl.rar</source-path>
    <staging-mode>nostage</staging-mode>
  </app-deployment>
  <jms-server>
    <name>WseeJaxwsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeJaxwsFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeSoapjmsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeSoapjmsFileStore</persistent-store>
  </jms-server>
  <self-tuning>
    <work-manager>
      <name>weblogic.wsee.jaxws.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
    <work-manager>
      <name>weblogic.wsee.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
  </self-tuning>
  <file-store>
    <name>WseeJaxwsFileStore</name>
    <directory>WseeJaxwsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeFileStore</name>
    <directory>WseeFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeSoapjmsFileStore</name>
    <directory>WseeSoapjmsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <jms-system-resource>
    <name>WseeJaxwsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeJaxwsJmsServerSub</name>
      <target>WseeJaxwsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejaxwsjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>BEA_JMS_MODULE_SUBDEPLOYMENT_WSEEJMSServer</name>
      <target>WseeJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeSoapjmsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeSoapjmsJmsServerSub</name>
      <target>WseeSoapjmsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseesoapjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <admin-server-name>AdminServer</admin-server-name>
  <saf-agent>
    <name>ReliableWseeJaxwsSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeJaxwsFileStore</store>
  </saf-agent>
  <saf-agent>
    <name>ReliableWseeSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeFileStore</store>
  </saf-agent>
  <ssl-enabled>true</ssl-enabled>
</domain>

Keystores - PKCS12 or JKS


 For PKCS12 keystores, keytool does not support different keystore and key passwords.
 Secure domain - use SSL Keystores Obtain properly signed certificate via CSR 

JKS 

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=IN" -storetype JKS -storepass Welcome1 -keypass Welcome1 -keystore identity.jks

keytool -export -alias server_cert -file root.cer -keystore identity.jks -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -storetype JKS -keystore trust.jks -storepass Welcome1

PKCS12 

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=KA" -storepass Welcome1 -keypass Welcome1 -keystore identity.p12

keytool -export -alias server_cert -file root.cer -keystore identity.p12 -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -keystore trust.p12 -storepass Welcome1

CA truststore

DemoTrustKeyStorePassPhrase

dave@dave:/app/weblogic$ keytool -list -keystore ./wlserver/server/lib/DemoTrust.jks
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

wlscertgenca, Dec 2, 2012, trustedCertEntry, 
Certificate fingerprint (SHA-256): 57:10:7C:2C:B3:07:B9:8B:F8:FD:EB:69:99:36:53:03:7A:E1:E7:CB:D3:7A:E7:CF:30:F3:B3:ED:F3:42:0A:D7

DemoIdentity

DOMAIN_HOME/security/DemoCerts.props 



dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoIdentity.p12 
/app/domains/dave_domain/security/DemoIdentity.p12
dave@dave:/app/weblogic$ keytool -list -keystore /app/domains/dave_domain/security/DemoIdentity.p12
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: PKCS12
Keystore provider: SUN

Your keystore contains 1 entry

demoidentity, Oct 5, 2025, PrivateKeyEntry, 
Certificate chain length: 0
Demo keystore passwords 
dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoCerts.props 
/app/domains/dave_domain/security/DemoCerts.props
dave@dave:/app/weblogic$ cat /app/domains/dave_domain/security/DemoCerts.props
#WebLogic User Configuration File; 2
#Sun Oct 05 09:10:56 CEST 2025
weblogic.security.DemoCACertificate=/app/domains/dave_domain/security/democacert.der
weblogic.security.DemoCAPrivateKey=/app/domains/dave_domain/security/democakey.der
weblogic.security.DemoCAPrivateKeyPassPhrase={AES256}ElpnZY1KC6DxJmXy8hPfnOr5rOh90wycyg+6HTTfRsUI2uIb6kN9xi3uBK4sUNIthKhrRa9namNKw7VkXB3U2Q\=\=
weblogic.security.DemoIdentityKeyStore=/app/domains/dave_domain/security/DemoIdentity.p12
weblogic.security.DemoIdentityKeyStoreAlias=DemoIdentity
weblogic.security.DemoIdentityKeyStorePassPhrase={AES256}IT7turw8Kw4BXgQhGuCWuNVPqIoIiF12XI/diC6BDO92Yl0OESNs/ptJnNK3vumyixx7U3C9Lz0n1B5TF3K8rw\=\=
weblogic.security.DemoIdentityKeyStoreType=pkcs12
weblogic.security.DemoIdentityPrivateKeyPassPhrase={AES256}gOybATaMsEKFwffWsu9F5ALMrldWt+O0MEd0peGxiBTOI5r3mIzyn8UU0DF9nxBtQa+t2JwwxJpbgfEXBSoYvg\=\=
weblogic.security.DemoTrustKeyStore=/app/domains/dave_domain/security/DemoTrust.p12
weblogic.security.DemoTrustKeyStorePassPhrase={AES256}EJ0dKjKO2dq3Pei1y0AbCoRuNHfKX26IDLZjcI4DsqXSu/zwSCjFYFKXvdJleRtH
weblogic.security.DemoTrustKeyStoreType=pkcs12

Open console https://dave:9002/console 









 Download remote console

Download RPM  file 


dave@dave:/app$ sudo dnf install weblogic-remote-console-2.4.17-linux.rpm
Updating and loading repositories:
 RPM Fusion for Fedora 41 - Nonfree - Updates                                                                                                                                                                                                                                         100% |   6.9 KiB/s |   8.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - Steam                                                                                                                                                                                                                                           100% |   7.4 KiB/s |   8.3 KiB |  00m01s
 Fedora 41 - x86_64                                                                                                                                                                                                                                                                   100% |  25.3 KiB/s |  26.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Free - Updates                                                                                                                                                                                                                                            100% |   9.0 KiB/s |   8.3 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - NVIDIA Driver                                                                                                                                                                                                                                   100% |  10.2 KiB/s |   8.6 KiB |  00m01s
 Hashicorp Stable - x86_64                                                                                                                                                                                                                                                            100% |   2.1 KiB/s |   1.5 KiB |  00m01s
 Google Cloud SDK                                                                                                                                                                                                                                                                     100% |   2.0 KiB/s |   1.4 KiB |  00m01s
 Kubernetes                                                                                                                                                                                                                                                                           100% |   2.6 KiB/s |   1.8 KiB |  00m01s
 google-chrome                                                                                                                                                                                                                                                                        100% |   2.1 KiB/s |   1.3 KiB |  00m01s
 Visual Studio Code                                                                                                                                                                                                                                                                   100% |   3.0 KiB/s |   1.5 KiB |  00m01s
 Fedora 41 - x86_64 - Updates                                                                                                                                                                                                                                                         100% |  11.1 KiB/s |   8.7 KiB |  00m01s
 Copr repo for PyCharm owned by phracek                                                                                                                                                                                                                                               100% |   4.4 KiB/s |   2.1 KiB |  00m00s
Repositories loaded.
Package                                                                                                        Arch                   Version                                                                                                        Repository                                                           Size
Installing:
 weblogic-remote-console                                                                                       x86_64                 2.4.17-1                                                                                                       @commandline                                                    453.6 MiB

Transaction Summary:
 Installing:         1 package

Total size of inbound packages is 180 MiB. Need to download 0 B.
After this operation, 454 MiB extra will be used (install 454 MiB, remove 0 B).
Is this ok [y/N]: y
Running transaction
[1/3] Verify package files                                                                                                                                                                                                                                                            100% |   1.0   B/s |   1.0   B |  00m01s
[2/3] Prepare transaction                                                                                                                                                                                                                                                             100% |   2.0   B/s |   1.0   B |  00m00s
[3/3] Installing weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                            100% |  27.6 MiB/s | 453.6 MiB |  00m16s
>>> Running %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                        
>>> Finished %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                       
>>> Scriptlet output:                                                                                                                                                                                                                                                                                                         
>>> update-alternatives is /sbin/update-alternatives                                                                                                                                                                                                                                                                          
>>>                                                                                                                                                                                                                                                                                                                           
Warning: skipped OpenPGP checks for 1 package from repository: @commandline
Complete!


Depending on setup use default 7001 port or Admin channel port 9002


Connected to Admin Console 






Configure admin channel

 





<Oct 5, 2025, 10:35:37,609 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 10:35:37,650 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 10:35:37,663 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 10:35:37,664 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 10:35:37,671 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Admin" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.>

config.xml with separately configured admin channel 

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>false</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>
Posted by at 1 comment:
Labels: , ,

Sunday, August 3, 2025

OCP k8s CRC local monitoring

 HOWTO



Add memory 


$ crc stop
INFO Stopping kubelet and all containers...       
INFO Stopping the instance, this may take a few minutes... 
Stopped the instance
dave@fedora:~/Downloads$ crc config set memory 14336
Changes to configuration property 'memory' are only applied when the CRC instance is started.
If you already have a running CRC instance, then for this configuration change to take effect, stop the CRC instance with 'crc stop' and restart it with 'crc start'.
dave@fedora:~/Downloads$  crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true
dave@fedora:~/Downloads$ crc start

Monitoring 


dave@fedora:~/Downloads$ oc config use-context crc-admin
Switched to context "crc-admin".
dave@fedora:~/Downloads$ oc whoami
kubeadmin
dave@fedora:~/Downloads$ oc get clusterversion version -ojsonpath='{range .spec.overrides[*]}{.name}{"\n"}{end}' | nl -v -2
    -2    cluster-monitoring-operator
    -1    monitoring
     0    cloud-credential-operator
     1    cloud-credential
     2    cluster-autoscaler-operator
     3    cluster-autoscaler
     4    cluster-cloud-controller-manager-operator
     5    cloud-controller-manager
dave@fedora:~/Downloads$ crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true



Pod YAML

kind: Pod
apiVersion: v1
metadata:
  name: demo
  namespace: demo
  uid: 6be00704-f3ca-4d4b-9af6-f6bee0494ba1
  resourceVersion: '37632'
  creationTimestamp: '2025-08-03T09:24:59Z'
  labels:
    run: demo
  annotations:
    k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.66/23"],"mac_address":"0a:58:0a:d9:00:42","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.66/23","gateway_ip":"10.217.0.1","role":"primary"}}'
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "ovn-kubernetes",
          "interface": "eth0",
          "ips": [
              "10.217.0.66"
          ],
          "mac": "0a:58:0a:d9:00:42",
          "default": true,
          "dns": {}
      }]
    openshift.io/scc: anyuid
  managedFields:
    - manager: crc
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.ovn.org/pod-networks': {}
      subresource: status
    - manager: kubectl-run
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:labels':
            .: {}
            'f:run': {}
        'f:spec':
          'f:containers':
            'k:{"name":"demo"}':
              .: {}
              'f:command': {}
              'f:image': {}
              'f:imagePullPolicy': {}
              'f:name': {}
              'f:resources': {}
              'f:terminationMessagePath': {}
              'f:terminationMessagePolicy': {}
          'f:dnsPolicy': {}
          'f:enableServiceLinks': {}
          'f:restartPolicy': {}
          'f:schedulerName': {}
          'f:securityContext': {}
          'f:terminationGracePeriodSeconds': {}
    - manager: multus-daemon
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.v1.cni.cncf.io/network-status': {}
      subresource: status
    - manager: kubelet
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:55:05Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:status':
          'f:conditions':
            'k:{"type":"ContainersReady"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Initialized"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"PodReadyToStartContainers"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Ready"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
          'f:containerStatuses': {}
          'f:hostIP': {}
          'f:hostIPs': {}
          'f:phase': {}
          'f:podIP': {}
          'f:podIPs':
            .: {}
            'k:{"ip":"10.217.0.66"}':
              .: {}
              'f:ip': {}
          'f:startTime': {}
      subresource: status
spec:
  restartPolicy: Always
  serviceAccountName: default
  imagePullSecrets:
    - name: default-dockercfg-p7cfm
  priority: 0
  schedulerName: default-scheduler
  enableServiceLinks: true
  terminationGracePeriodSeconds: 30
  preemptionPolicy: PreemptLowerPriority
  nodeName: crc
  securityContext:
    seLinuxOptions:
      level: 's0:c26,c0'
  containers:
    - resources: {}
      terminationMessagePath: /dev/termination-log
      name: demo
      command:
        - sleep
        - 600s
      securityContext:
        capabilities:
          drop:
            - MKNOD
      imagePullPolicy: Always
      volumeMounts:
        - name: kube-api-access-z7xrc
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePolicy: File
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
  serviceAccount: default
  volumes:
    - name: kube-api-access-z7xrc
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
          - configMap:
              name: openshift-service-ca.crt
              items:
                - key: service-ca.crt
                  path: service-ca.crt
        defaultMode: 420
  dnsPolicy: ClusterFirst
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
status:
  containerStatuses:
    - restartCount: 3
      started: true
      ready: true
      name: demo
      state:
        running:
          startedAt: '2025-08-03T09:55:04Z'
      volumeMounts:
        - name: kube-api-access-z7xrc
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
          readOnly: true
          recursiveReadOnly: Disabled
      imageID: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      lastState:
        terminated:
          exitCode: 0
          reason: Completed
          startedAt: '2025-08-03T09:45:03Z'
          finishedAt: '2025-08-03T09:55:03Z'
          containerID: 'cri-o://fe191488478ade4fb4fbd6f045f4896cdd3128a02cd23c9163dea85039de6efc'
      containerID: 'cri-o://f9351ee373330f42397d46be58820ae2d34616afcddf9be923e30bbd906b5238'
  qosClass: BestEffort
  hostIPs:
    - ip: 192.168.126.11
  podIPs:
    - ip: 10.217.0.66
  podIP: 10.217.0.66
  hostIP: 192.168.126.11
  startTime: '2025-08-03T09:24:59Z'
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:25:03Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
  phase: Running


Posted by at 1 comment:
Labels: , , ,

Deploying a sample application into OCP CRC local with odo

HOWTO

See also


 Prerequisites


Installing odo



dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64 -o odo -o odo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 90.1M  100 90.1M    0     0  4255k      0  0:00:21  0:00:21 --:--:-- 4785k
dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64.sha256 -o odo.sha256
echo "$(<odo.sha256)  odo" | shasum -a 256 --check
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    64  100    64    0     0    181      0 --:--:-- --:--:-- --:--:--   181
bash: shasum: command not found...
Install package 'perl-Digest-SHA' to provide command 'shasum'? [N/y] y


 * Waiting in queue... 
 * Loading list of packages.... 
The following packages have to be installed:
 perl-Digest-SHA-1:6.04-513.fc42.x86_64    Perl extension for SHA-1/224/256/384/512
Proceed with changes? [N/y] y


 * Waiting in queue... 
 * Waiting for authentication... 
 * Waiting in queue... 
 * Downloading packages... 
 * Requesting data... 
 * Testing changes... 
 * Installing packages... 
shasum: standard input: no properly formatted SHA checksum lines found

dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64.sha256 -o odo.sha256
echo "$(<odo.sha256)  odo" | shasum -a 256 --check
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    64  100    64    0     0    385      0 --:--:-- --:--:-- --:--:--   385
odo: OK
dave@fedora:~/Downloads$ sudo install -o root -g root -m 0755 odo /usr/local/bin/odo
[sudo] password for dave: 


dave@fedora:~/Downloads$  odo login -u developer -p developer
Connecting to the OpenShift cluster

Login successful.

You don't have any projects. You can try to create a new project, by running

    odo create project <projectname>

dave@fedora:~/Downloads$ odo create project sample-app
 ✓  Creating the project "sample-app" [80ms]
 ✓  Project "sample-app" is ready for use
 ✓  New project created and now using project: sample-app
dave@fedora:~/Downloads$ mkdir sample-app
dave@fedora:~/Downloads$ cd sample-app
dave@fedora:~/Downloads/sample-app$ git clone https://github.com/openshift/nodejs-ex
Cloning into 'nodejs-ex'...
remote: Enumerating objects: 836, done.
remote: Counting objects: 100% (1/1), done.
remote: Total 836 (delta 0), reused 0 (delta 0), pack-reused 835 (from 2)
Receiving objects: 100% (836/836), 773.00 KiB | 908.00 KiB/s, done.
Resolving deltas: 100% (321/321), done.
dave@fedora:~/Downloads/sample-app$ cd nodejs-ex



Posted by at No comments:
Labels: , , ,

Install local Openshift - CRC

 HOWTO



Install prerequisites


[sudo] password for dave: 
Updating and loading repositories:
Repositories loaded.
Package "NetworkManager-1:1.52.1-1.fc42.x86_64" is already installed.

Package                                                Arch          Version                                                Repository                         Size
Installing:
 libvirt                                               x86_64        11.0.0-3.fc42                                          updates                         0.0   B
Installing dependencies:
 libvirt-client-qemu                                   x86_64        11.0.0-3.fc42                                          updates                        64.0 KiB
 libvirt-daemon-config-nwfilter                        x86_64        11.0.0-3.fc42                                          updates                        20.2 KiB
 libvirt-daemon-driver-ch                              x86_64        11.0.0-3.fc42                                          updates                       838.1 KiB
 libvirt-daemon-driver-libxl                           x86_64        11.0.0-3.fc42                                          updates                         1.0 MiB
 libvirt-daemon-driver-lxc                             x86_64        11.0.0-3.fc42                                          updates                         1.1 MiB
 libvirt-daemon-driver-vbox                            x86_64        11.0.0-3.fc42                                          updates                       949.7 KiB
 python3-libvirt                                       x86_64        11.0.0-1.fc42                                          fedora                          2.0 MiB

Transaction Summary:
 Installing:         8 packages

Total size of inbound packages is 1 MiB. Need to download 1 MiB.
After this operation, 6 MiB extra will be used (install 6 MiB, remove 0 B).
Is this ok [y/N]: y
[1/8] libvirt-0:11.0.0-3.fc42.x86_64                                                                                       100% |  52.9 KiB/s |  10.8 KiB |  00m00s
[2/8] libvirt-client-qemu-0:11.0.0-3.fc42.x86_64                                                                           100% | 135.2 KiB/s |  31.2 KiB |  00m00s
[3/8] libvirt-daemon-config-nwfilter-0:11.0.0-3.fc42.x86_64                                                                100% |  98.9 KiB/s |  23.2 KiB |  00m00s
[4/8] libvirt-daemon-driver-ch-0:11.0.0-3.fc42.x86_64                                                                      100% | 772.5 KiB/s | 227.1 KiB |  00m00s
[5/8] libvirt-daemon-driver-libxl-0:11.0.0-3.fc42.x86_64                                                                   100% |   1.1 MiB/s | 299.4 KiB |  00m00s
[6/8] libvirt-daemon-driver-lxc-0:11.0.0-3.fc42.x86_64                                                                     100% | 969.8 KiB/s | 313.2 KiB |  00m00s
[7/8] python3-libvirt-0:11.0.0-1.fc42.x86_64                                                                               100% |   1.4 MiB/s | 363.5 KiB |  00m00s
[8/8] libvirt-daemon-driver-vbox-0:11.0.0-3.fc42.x86_64                                                                    100% |   1.0 MiB/s | 267.1 KiB |  00m00s
-------------------------------------------------------------------------------------------------------------------------------------------------------------------
[8/8] Total                                                                                                                100% |   1.4 MiB/s |   1.5 MiB |  00m01s
Running transaction
[ 1/10] Verify package files                                                                                               100% |   1.3 KiB/s |   8.0   B |  00m00s
[ 2/10] Prepare transaction                                                                                                100% |  41.0   B/s |   8.0   B |  00m00s
[ 3/10] Installing python3-libvirt-0:11.0.0-1.fc42.x86_64                                                                  100% | 137.1 MiB/s |   2.1 MiB |  00m00s
[ 4/10] Installing libvirt-client-qemu-0:11.0.0-3.fc42.x86_64                                                              100% |   2.5 MiB/s |  64.7 KiB |  00m00s
[ 5/10] Installing libvirt-daemon-driver-vbox-0:11.0.0-3.fc42.x86_64                                                       100% |  33.2 MiB/s | 952.0 KiB |  00m00s
[ 6/10] Installing libvirt-daemon-driver-lxc-0:11.0.0-3.fc42.x86_64                                                        100% |  33.1 MiB/s |   1.1 MiB |  00m00s
[ 7/10] Installing libvirt-daemon-driver-libxl-0:11.0.0-3.fc42.x86_64                                                      100% |  33.5 MiB/s |   1.0 MiB |  00m00s
[ 8/10] Installing libvirt-daemon-driver-ch-0:11.0.0-3.fc42.x86_64                                                         100% |  32.8 MiB/s | 840.2 KiB |  00m00s
[ 9/10] Installing libvirt-daemon-config-nwfilter-0:11.0.0-3.fc42.x86_64                                                   100% | 115.1 KiB/s |  14.2 KiB |  00m00s
[10/10] Installing libvirt-0:11.0.0-3.fc42.x86_64                                                                          100% | 147.0   B/s | 124.0   B |  00m01s
>>> Running %posttrans scriptlet: libvirt-daemon-driver-vbox-0:11.0.0-3.fc42.x86_64                                                                                
>>> Finished %posttrans scriptlet: libvirt-daemon-driver-vbox-0:11.0.0-3.fc42.x86_64                                                                               
>>> Scriptlet output:                                                                                                                                              
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtvboxd.socket' → '/usr/lib/systemd/system/virtvboxd.socket'.                                      
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtvboxd-ro.socket' → '/usr/lib/systemd/system/virtvboxd-ro.socket'.                                
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtvboxd-admin.socket' → '/usr/lib/systemd/system/virtvboxd-admin.socket'.                          
>>> Created symlink '/etc/systemd/system/multi-user.target.wants/virtvboxd.service' → '/usr/lib/systemd/system/virtvboxd.service'.                                 
>>>                                                                                                                                                                
>>> Running %posttrans scriptlet: libvirt-daemon-driver-lxc-0:11.0.0-3.fc42.x86_64                                                                                 
>>> Finished %posttrans scriptlet: libvirt-daemon-driver-lxc-0:11.0.0-3.fc42.x86_64                                                                                
>>> Scriptlet output:                                                                                                                                              
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtlxcd.socket' → '/usr/lib/systemd/system/virtlxcd.socket'.                                        
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtlxcd-ro.socket' → '/usr/lib/systemd/system/virtlxcd-ro.socket'.                                  
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtlxcd-admin.socket' → '/usr/lib/systemd/system/virtlxcd-admin.socket'.                            
>>> Created symlink '/etc/systemd/system/multi-user.target.wants/virtlxcd.service' → '/usr/lib/systemd/system/virtlxcd.service'.                                   
>>>                                                                                                                                                                
>>> Running %posttrans scriptlet: libvirt-daemon-driver-libxl-0:11.0.0-3.fc42.x86_64                                                                               
>>> Finished %posttrans scriptlet: libvirt-daemon-driver-libxl-0:11.0.0-3.fc42.x86_64                                                                              
>>> Scriptlet output:                                                                                                                                              
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtxend.socket' → '/usr/lib/systemd/system/virtxend.socket'.                                        
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtxend-ro.socket' → '/usr/lib/systemd/system/virtxend-ro.socket'.                                  
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtxend-admin.socket' → '/usr/lib/systemd/system/virtxend-admin.socket'.                            
>>> Created symlink '/etc/systemd/system/multi-user.target.wants/virtxend.service' → '/usr/lib/systemd/system/virtxend.service'.                                   
>>> Created symlink '/etc/systemd/system/sockets.target.wants/virtlockd-admin.socket' → '/usr/lib/systemd/system/virtlockd-admin.socket'.                          
>>>                                                                                                                                                                
Complete!

Download installation 






Install CRC



 
dave@fedora:~$ cd ~/Downloads/
dave@fedora:~/Downloads$ ls -l crc-linux-amd64.tar.xz 
-rw-r--r--. 1 dave dave 37031432 Aug  3 09:32 crc-linux-amd64.tar.xz
dave@fedora:~/Downloads$ tar xvf crc-linux-amd64.tar.xz
crc-linux-2.53.0-amd64/
crc-linux-2.53.0-amd64/LICENSE
crc-linux-2.53.0-amd64/crc
dave@fedora:~/Downloads$ mkdir -p ~/bin
dave@fedora:~/Downloads$  cp ~/Downloads/crc-linux-*-amd64/crc ~/bin
dave@fedora:~/Downloads$ export PATH=$PATH:$HOME/bin
dave@fedora:~/Downloads$ echo 'export PATH=$PATH:$HOME/bin' >> ~/.bashrc
dave@fedora:~/Downloads$ find ~/bin/
/home/dave/bin/
/home/dave/bin/crc
Creating CRC 
$ crc delete # Remove previous cluster (if present)
$ crc config set preset openshift # Configure to use openshift preset
$ crc setup # Initialize environment for cluster
$ crc start # Start the cluster

Setup CRC


dave@fedora:~/Downloads$ crc config set preset openshift 
To confirm your system is ready, and you have the needed system bundle, please run 'crc setup' before 'crc start'.
dave@fedora:~/Downloads$ crc setup 
CRC is constantly improving and we would like to know more about usage (more details at https://developers.redhat.com/article/tool-data-collection)
Your preference can be changed manually if desired using 'crc config set consent-telemetry <yes/no>'
Would you like to contribute anonymous usage statistics? [y/N]: y
Thanks for helping us! You can disable telemetry with the command 'crc config set consent-telemetry no'.
INFO Using bundle path /home/dave/.crc/cache/crc_libvirt_4.19.3_amd64.crcbundle 
INFO Checking if running as non-root              
INFO Checking if running inside WSL2              
INFO Checking if crc-admin-helper executable is cached 
INFO Caching crc-admin-helper executable          
INFO Using root access: Changing ownership of /home/dave/.crc/bin/crc-admin-helper-linux-amd64 
[sudo] password for dave: 
INFO Using root access: Setting suid for /home/dave/.crc/bin/crc-admin-helper-linux-amd64 
INFO Checking if running on a supported CPU architecture 
INFO Checking if crc executable symlink exists    
INFO Creating symlink for crc executable          
INFO Checking minimum RAM requirements            
INFO Check if Podman binary exists in: /home/dave/.crc/bin/oc 
INFO Checking if Virtualization is enabled        
INFO Checking if KVM is enabled                   
INFO Checking if libvirt is installed             
INFO Checking if user is part of libvirt group    
INFO Adding user to libvirt group                 
INFO Using root access: Adding user to the libvirt group 
INFO Checking if active user/process is currently part of the libvirt group 
INFO Checking if libvirt daemon is running        
INFO Checking if a supported libvirt version is installed 
INFO Checking if crc-driver-libvirt is installed  
INFO Installing crc-driver-libvirt                
INFO Checking crc daemon systemd service          
INFO Setting up crc daemon systemd service        
INFO Checking crc daemon systemd socket units     
INFO Setting up crc daemon systemd socket units   
INFO Checking if vsock is correctly configured    
INFO Setting up vsock support                     
INFO Using root access: Setting CAP_NET_BIND_SERVICE capability for /home/dave/bin/crc executable 
INFO Using root access: Creating udev rule for /dev/vsock 
INFO Using root access: Changing permissions for /etc/udev/rules.d/99-crc-vsock.rules to 644  
INFO Using root access: Reloading udev rules database 
INFO Using root access: Loading vhost_vsock kernel module 
INFO Using root access: Creating file /etc/modules-load.d/vhost_vsock.conf 
INFO Using root access: Changing permissions for /etc/modules-load.d/vhost_vsock.conf to 644  
INFO Checking if CRC bundle is extracted in '$HOME/.crc' 
INFO Checking if /home/dave/.crc/cache/crc_libvirt_4.19.3_amd64.crcbundle exists 
INFO Getting bundle for the CRC executable        
INFO Downloading bundle: /home/dave/.crc/cache/crc_libvirt_4.19.3_amd64.crcbundle...
Start CRC


dave@fedora:~/Downloads$ crc start
INFO Using bundle path /home/dave/.crc/cache/crc_libvirt_4.19.3_amd64.crcbundle 
INFO Checking if running as non-root              
INFO Checking if running inside WSL2              
INFO Checking if crc-admin-helper executable is cached 
INFO Checking if running on a supported CPU architecture 
INFO Checking if crc executable symlink exists    
INFO Checking minimum RAM requirements            
INFO Check if Podman binary exists in: /home/dave/.crc/bin/oc 
INFO Checking if Virtualization is enabled        
INFO Checking if KVM is enabled                   
INFO Checking if libvirt is installed             
INFO Checking if user is part of libvirt group    
INFO Checking if active user/process is currently part of the libvirt group 
INFO Checking if libvirt daemon is running        
INFO Checking if a supported libvirt version is installed 
INFO Checking if crc-driver-libvirt is installed  
INFO Checking crc daemon systemd socket units     
INFO Checking if vsock is correctly configured    
INFO Loading bundle: crc_libvirt_4.19.3_amd64...  
CRC requires a pull secret to download content from Red Hat.
You can copy it from the Pull Secret section of https://console.redhat.com/openshift/create/local.
? Please enter the pull secret *********
X Sorry, your reply was invalid: invalid pull secret: invalid character 'c' looking for beginning of value
? Please enter the pull secret ******************************************************************************************************************
INFO Creating CRC VM for OpenShift 4.19.3...      
INFO Generating new SSH key pair...               
INFO Generating new password for the kubeadmin user 
INFO Starting CRC VM for openshift 4.19.3...      
INFO CRC instance is running with IP 127.0.0.1    
INFO CRC VM is running                            
INFO Updating authorized keys...                  
INFO Configuring shared directories               
INFO Check internal and public DNS query...       
INFO Check DNS query from host...                 
INFO Verifying validity of the kubelet certificates... 
INFO Starting kubelet service                     
INFO Waiting for kube-apiserver availability... [takes around 2min] 
INFO Adding user's pull secret to the cluster...  
INFO Updating SSH key to machine config resource... 
INFO Waiting until the user's pull secret is written to the instance disk...

Started OCP cluster 


Started the OpenShift cluster.

The server is accessible via web console at:
  https://console-openshift-console.apps-crc.testing

Log in as administrator:
  Username: kubeadmin
  Password: SOME-PASSWORD

Log in as user:
  Username: developer
  Password: developer

Use the 'oc' command line interface:
  $ eval $(crc oc-env)
  $ oc login -u developer https://api.crc.testing:6443
oc projects 
ave@fedora:~/Downloads$ oc projects
You have access to the following projects and can switch between them with ' project <projectname>':

  * default
    hostpath-provisioner
    kube-node-lease
    kube-public
    kube-system
    openshift
    openshift-apiserver
    openshift-apiserver-operator
    openshift-authentication
    openshift-authentication-operator
    openshift-cloud-network-config-controller
    openshift-cloud-platform-infra
    openshift-cluster-machine-approver
    openshift-cluster-samples-operator
    openshift-cluster-storage-operator
    openshift-cluster-version
    openshift-config
    openshift-config-managed
    openshift-config-operator
    openshift-console
    openshift-console-operator
    openshift-console-user-settings
    openshift-controller-manager
    openshift-controller-manager-operator
    openshift-dns
    openshift-dns-operator
    openshift-etcd
    openshift-etcd-operator
    openshift-host-network
    openshift-image-registry
    openshift-infra
    openshift-ingress
    openshift-ingress-canary
    openshift-ingress-operator
    openshift-kni-infra
    openshift-kube-apiserver
    openshift-kube-apiserver-operator
    openshift-kube-controller-manager
    openshift-kube-controller-manager-operator
    openshift-kube-scheduler
    openshift-kube-scheduler-operator
    openshift-kube-storage-version-migrator
    openshift-kube-storage-version-migrator-operator
    openshift-machine-api
    openshift-machine-config-operator
    openshift-marketplace
    openshift-monitoring
    openshift-multus
    openshift-network-console
    openshift-network-diagnostics
    openshift-network-node-identity
    openshift-network-operator
    openshift-node
    openshift-nutanix-infra
    openshift-oauth-apiserver
    openshift-openstack-infra
    openshift-operator-lifecycle-manager
    openshift-operators
    openshift-ovirt-infra
    openshift-ovn-kubernetes
    openshift-route-controller-manager
    openshift-service-ca
    openshift-service-ca-operator
    openshift-user-workload-monitoring
    openshift-vsphere-infra

Using project "default" on server "https://api.crc.testing:6443".

Login to OCP console



Login using CLI


ave@fedora:~/Downloads$ oc login -u developer https://api.crc.testing:6443
Logged into "https://api.crc.testing:6443" as "developer" using existing credentials.

You don't have any projects. You can try to create a new project, by running

    oc new-project <projectname>

dave@fedora:~/Downloads$ oc whoami
developer
Become admin via CLI

ave@fedora:~/Downloads$ oc whoami
developer
dave@fedora:~/Downloads$ oc config use-context crc-admin
$ oc whoami
Switched to context "crc-admin".
bash: $: command not found...
dave@fedora:~/Downloads$ oc whoami
kubeadmin
dave@fedora:~/Downloads$ oc get co
NAME                                       VERSION   AVAILABLE   PROGRESSING   DEGRADED   SINCE   MESSAGE
authentication                             4.19.3    True        False         False      12m     
config-operator                            4.19.3    True        False         False      23d     
console                                    4.19.3    True        False         False      15m     
control-plane-machine-set                  4.19.3    True        False         False      23d     
dns                                        4.19.3    True        False         False      16m     
etcd                                       4.19.3    True        False         False      23d     
image-registry                             4.19.3    True        False         False      15m     
ingress                                    4.19.3    True        False         False      23d     
kube-apiserver                             4.19.3    True        False         False      23d     
kube-controller-manager                    4.19.3    True        False         False      23d     
kube-scheduler                             4.19.3    True        False         False      23d     
kube-storage-version-migrator              4.19.3    True        False         False      16m     
machine-api                                4.19.3    True        False         False      23d     
machine-approver                           4.19.3    True        False         False      23d     
machine-config                             4.19.3    True        False         False      23d     
marketplace                                4.19.3    True        False         False      23d     
network                                    4.19.3    True        False         False      23d     
openshift-apiserver                        4.19.3    True        False         False      16m     
openshift-controller-manager               4.19.3    True        False         False      5m57s   
openshift-samples                          4.19.3    True        False         False      23d     
operator-lifecycle-manager                 4.19.3    True        False         False      23d     
operator-lifecycle-manager-catalog         4.19.3    True        False         False      23d     
operator-lifecycle-manager-packageserver   4.19.3    True        False         False      16m     
service-ca                                 4.19.3    True        False         False      23d     
dave@fedora:~/Downloads$


Create demo project via CLI 

dave@fedora:~/Downloads$ oc whoami
kubeadmin
dave@fedora:~/Downloads$  oc registry login --insecure=true
info: Using registry public hostname default-route-openshift-image-registry.apps-crc.testing
Saved credentials for default-route-openshift-image-registry.apps-crc.testing into /run/user/1000/containers/auth.json
dave@fedora:~/Downloads$  oc new-project demo
Now using project "demo" on server "https://api.crc.testing:6443".

You can add applications to this project with the 'new-app' command. For example, try:

    oc new-app rails-postgresql-example

to build a new example application in Ruby. Or use kubectl to deploy a simple Kubernetes application:

    kubectl create deployment hello-node --image=registry.k8s.io/e2e-test-images/agnhost:2.43 -- /agnhost serve-hostname

dave@fedora:~/Downloads$ oc image mirror registry.access.redhat.com/ubi8/ubi:latest=default-route-openshift-image-registry.apps-crc.testing/demo/ubi8:latest --insecure=true --filter-by-os=linux/amd64
default-route-openshift-image-registry.apps-crc.testing/
  demo/ubi8
    blobs:
      registry.access.redhat.com/ubi8/ubi sha256:2ff9823b0bdc42e2d925ed7de8114a50e10c0efc5ba3b71f9828cdd8b4463294 5.018KiB
      registry.access.redhat.com/ubi8/ubi sha256:6a22c1a537480d7699f4f391f3810de860e3dbe23b3fc4128ed78dda4189dda4 74.23MiB
    manifests:
      sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c -> latest
  stats: shared=0 unique=2 size=74.24MiB ratio=1.00

phase 0:
  default-route-openshift-image-registry.apps-crc.testing demo/ubi8 blobs=2 mounts=0 manifests=1 shared=0

info: Planning completed in 1.09s
uploading: default-route-openshift-image-registry.apps-crc.testing/demo/ubi8 sha256:6a22c1a537480d7699f4f391f3810de860e3dbe23b3fc4128ed78dda4189dda4 74.23MiB
sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c default-route-openshift-image-registry.apps-crc.testing/demo/ubi8:latest
info: Mirroring completed in 20.67s (3.765MB/s)
dave@fedora:~/Downloads$ oc get is
NAME   IMAGE REPOSITORY                                                    TAGS     UPDATED
ubi8   default-route-openshift-image-registry.apps-crc.testing/demo/ubi8   latest   8 seconds ago
dave@fedora:~/Downloads$ oc set image-lookup ubi8
imagestream.image.openshift.io/ubi8 image lookup updated
dave@fedora:~/Downloads$ oc run demo --image=ubi8 --command -- sleep 600s
Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "demo" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "demo" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "demo" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "demo" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
pod/demo created

Check demo app via OCP console


Project 


Topology

Pod 


Events






Posted by at No comments:
Labels: , , ,
Subscribe to: Posts (Atom)