{"id":6049,"date":"2023-06-09T09:42:38","date_gmt":"2023-06-09T00:42:38","guid":{"rendered":"\/blog\/?p=6049"},"modified":"2023-09-21T09:26:19","modified_gmt":"2023-09-21T00:26:19","slug":"rhel7%e2%86%92rhel8-%ec%a3%bc%ec%9a%94-%ec%b0%a8%ec%9d%b4%ec%a0%90","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=6049","title":{"rendered":"RHEL7\u2192RHEL8 \uc8fc\uc694 \ucc28\uc774\uc810"},"content":{"rendered":"\n\ucd9c\ucc98: https:\/\/weftnwarp.kr\/site-it\/archives\/centos-8%EC%97%90-%EB%8C%80%ED%95%98%EC%97%AC-%EB%A6%B4%EB%A6%AC%EC%8A%A4-%EB%85%B8%ED%8A%B8release-notes-%ED%8F%AC%ED%95%A8\/#application_stream_%EB%A6%AC%ED%8F%AC%EC%A7%80%ED%86%A0%EB%A6%AC<\/a><\/span>\n

 <\/h2>\n

\ub4e4\uc5b4\uac00\uba70<\/span><\/h2>\n

\ub808\ub4dc\ud587 \uc5d4\ud130\ud504\ub77c\uc774\uc988 \ub9ac\ub205\uc2a4(Red Hat Enterprise Linux, RHEL)\ub294 \uc804 \uc138\uacc4 \ubc0f \uad6d\ub0b4\uc5d0\uc11c \uac00\uc7a5 \ub9ce\uc774 \uc0ac\uc6a9\ud558\ub294 \uae30\uc5c5\uc6a9 \ub9ac\ub205\uc2a4 OS\uc785\ub2c8\ub2e4. 2000\ub144 \uccab \ubc84\uc804\uc744 \ucd9c\uc2dc\ud55c \uc774\ud6c4 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uacc4\uc18d\ud574 2021\ub144 5\uc6d4 \ud604\uc7ac 8.3 \ubc84\uc804\uc774 \ubc30\ud3ec\ub418\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub808\ub4dc\ud587\uc774 \uc9c0\uc6d0\ud558\ub294 \ud398\ub3c4\ub77c \ud504\ub85c\uc81d\ud2b8(Fedora Project)\uc5d0\uc11c \ub9cc\ub4e0 \ub9ac\ub205\uc2a4 \ubc30\ud3ec\ud310\uc778 \ud398\ub3c4\ub77c(Fedora)\ub97c \uae30\ubc18\uc73c\ub85c \ud569\ub2c8\ub2e4.<\/span>

RHEL\uc740 \ubc84\uc804\ubcc4\ub85c \ub77c\uc774\ud504 \uc0ac\uc774\ud074\uc774 \uc815\ud574\uc838 \uc788\uc2b5\ub2c8\ub2e4. \ubc84\uc804\ub9c8\ub2e4 10\ub144 \ub3d9\uc548 \ud558\ub4dc\uc6e8\uc5b4 \ub4dc\ub77c\uc774\ubc84, \ubcf4\uc548 \ud328\uce58 \ub4f1\uc758 \uc5c5\ub370\uc774\ud2b8\uac00 \uc81c\uacf5\ub429\ub2c8\ub2e4. RHEL 7\uacfc 8\uc758 \ub77c\uc774\ud504\uc0ac\uc774\ud074 \uc885\ub8cc\uc77c\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

\n<\/colgroup>\n\n\n\n\n\n
[\ud45c 1] RHEL \ub77c\uc774\ud504\uc0ac\uc774\ud074 \ube44\uad50<\/span><\/caption>
RHEL \ubc84\uc804<\/span><\/th>\n\ucd9c\uc2dc\uc77c<\/span><\/th>\n\ub77c\uc774\ud504\uc0ac\uc774\ud074 \uc885\ub8cc\uc77c<\/span><\/th>\n<\/tr>\n<\/thead>\n
7<\/span><\/td>\n2014\ub144 06\uc6d4 10\uc77c<\/span><\/td>\n2024\ub144 06\uc6d4 30\uc77c<\/span><\/td>\n<\/tr>\n
8<\/span><\/td>\n2019\ub144 05\uc6d4 07\uc77c<\/span><\/td>\n2029\ub144 05\uc6d4 31\uc77c<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
[\ud45c 1] RHEL \ub77c\uc774\ud504\uc0ac\uc774\ud074 \ube44\uad50<\/span><\/div>\n<\/div>\n

\ub77c\uc774\ud504\uc0ac\uc774\ud074\uc774 \uc885\ub8cc\ub418\uba74 \ubc84\uadf8 \ubc0f \ubcf4\uc548 \ud328\uce58, \uae30\uc220 \uc774\uc288\uc5d0 \ub300\ud55c \uc6d0\uc778 \ubd84\uc11d \uc11c\ube44\uc2a4\uc5d0 \uc81c\ud55c\uc774 \uc0dd\uae41\ub2c8\ub2e4. \ub2e4\ub9cc \uc774\uc804\uc5d0 \ub9b4\ub9ac\uc2a4\ub41c \ud328\uce58\uc5d0 \ub300\ud574\uc11c\ub294 \uc9c0\uc6d0\uc774 \uacc4\uc18d\ub418\uba70 \uc9c0\uc2dd\ubca0\uc774\uc2a4 \uace0\uac1d\ud3ec\ud138 \uc11c\ube44\uc2a4(Red Hat Knowledgebase)\ub3c4 \uacc4\uc18d \uc774\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/span>

\ucd5c\uc2e0 \ubc84\uc804\uc778 RHEL 8\uc774 \ubc30\ud3ec\ub418\uba74\uc11c \uc774\uc804 \ubc84\uc804\uc758 RHEL\uc744 \uc0ac\uc6a9 \uc911\uc778 \uc2dc\uc2a4\ud15c \uc6b4\uc601\uad00\ub9ac\uc790\ub97c \uc911\uc2ec\uc73c\ub85c RHEL 7 \ub300\ube44 8\uc740 \uc5b4\ub5a4 \uc810\uc774 \ubcc0\uacbd\ub418\uc5c8\ub294\uc9c0, \ub9c8\uc774\uadf8\ub808\uc774\uc158\uc744 \ud574\uc57c \ud558\ub294\uc9c0\uc5d0 \ub300\ud55c \uad81\uae08\uc99d\uc774 \ucee4\uc9c0\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ubcf8 \uc544\ud2f0\ud074\uc5d0\uc11c\ub294 \ud544\uc790\uac00 \uace0\uac1d\uc0ac\ub85c\ubd80\ud130 \uc790\uc8fc \ubb38\uc758\ubc1b\ub294 \uc0ac\ud56d\uc744 \uc911\uc2ec\uc73c\ub85c RHEL 7\uacfc 8 \uac04\uc758 \ucc28\uc774\uc810\uc744 \uc9da\uc5b4\ubcf4\uace0 \uc2dc\uc2a4\ud15c \uc6b4\uc601\uad00\ub9ac\uc790\ub77c\uba74 \uaf2d \uc54c\uc544\uc57c \ud560 RHEL 8\uc758 \ud2b9\uc9d5\uc744 \uc0b4\ud3b4\ubcf4\uaca0\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

 <\/h2>\n

RHEL 7\uacfc RHEL 8\uc758 \uc8fc\uc694 \ucc28\uc774\uc810<\/span><\/h2>\n

RHEL 7\uacfc 8\uc758 \uc8fc\uc694\ud55c \ucc28\uc774\uc810\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

\n<\/colgroup>\n\n\n\n\n\n\n\n\n\n\n\n
[\ud45c 2] RHEL \ubc84\uc804 \ube44\uad50<\/span><\/caption>
\ud56d\ubaa9<\/span><\/th>\nRHEL 7<\/span><\/th>\nRHEL 8<\/span><\/th>\n<\/tr>\n<\/thead>\n
\ucee4\ub110(Kernel)<\/span><\/td>\n• 3.10.0-x (Maipo)<\/span><\/td>\n• 4.18.0-x (Ootpa)<\/span><\/td>\n<\/tr>\n
\ucd5c\ub300 \ud30c\uc77c\uc2dc\uc2a4\ud15c \ud06c\uae30(XFS)<\/span><\/td>\n• 500 TB<\/span><\/td>\n• 1,000 TB<\/span><\/td>\n<\/tr>\n
\uc9c0\uc6d0 H\/W \uc544\ud0a4\ud14d\ucc98<\/span><\/td>\n• 64-bit Intel<\/span>
• 64-bit AMD<\/span>
• IBM Power LE<\/span>
• IBM z Systems<\/span><\/td>\n		• 64-bit Intel<\/span>
• 64-bit AMD<\/span>
• IBM Power LE<\/span>
• IBM z Systems<\/span>
• 64-bit ARM<\/span><\/td>\n<\/tr>\n
ISO \uc774\ubbf8\uc9c0<\/span><\/td>\n• Boot ISO<\/span>
• Binary DVD ISO<\/span>
• Supplementary Binary DVD<\/span><\/td>\n		• Boot ISO<\/span>
• Binary DVD ISO<\/span><\/td>\n<\/tr>\n
\uae30\ubcf8 I\/O \uc2a4\ucf00\uc904\ub7ec<\/span><\/td>\n• deadline<\/span>
\u203b \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uc2a4\ucf00\uc904\ub7ec:<\/span>
deadline, cfq, noop, anticipatory<\/span><\/td>\n		• mq-deadline<\/span>
\u203b \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uc2a4\ucf00\uc904\ub7ec:<\/span>
mq-deadline, kyber, bfq, none<\/span><\/td>\n<\/tr>\n
\ucee8\ud14c\uc774\ub108 \uae30\uc220<\/span><\/td>\n• docker<\/span><\/td>\n• podman, buildah, skopeo<\/span><\/td>\n<\/tr>\n
\uacc4\uc815<\/span><\/td>\n• 99\uc758 ID\ub97c \uac00\uc9c4 nobody \uc0ac\uc6a9\uc790 \ubc0f \uadf8\ub8f9<\/span>
• 65534\uc758 ID\ub97c \uac00\uc9c4 nfsnobody \uc0ac\uc6a9\uc790 \ubc0f \uadf8\ub8f9<\/span><\/td>\n		• 'nobody'\uc640 'nfsnobody' \uc0ac\uc6a9\uc790 \ubc0f \uadf8\ub8f9\uc774 'nobody' ID (65534)\ub85c \ubcd1\ud569<\/span><\/td>\n<\/tr>\n
NFS(Network Files System)<\/span><\/td>\n• \uae30\ubcf8 NFS \uad6c\uc131 \ud30c\uc77c: \"\/etc\/sysconfig\/nfs\"<\/span>
• NFS \uc11c\ube44\uc2a4<\/span>
- nfs-server.service<\/span>
- rpc-gssd.service<\/span>
- nfs-idmapd.service<\/span>
- rpc-statd.service<\/span><\/td>\n		• \uae30\ubcf8 NFS \uad6c\uc131 \ud30c\uc77c: \"\/etc\/nfs.conf\"<\/span>
• NFS \uc11c\ube44\uc2a4<\/span>
- nfs.service<\/span>
- nfs-secure.service<\/span>
- rpcgssd.service<\/span>
- nfs-idmap.service<\/span>
- rpcidmapd.service<\/span>
- nfs-lock.service<\/span>
- nfslock.service<\/span>
• UDP \ubbf8\uc9c0\uc6d0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
[\ud45c 2] RHEL \ubc84\uc804 \ube44\uad50<\/span><\/div>\n<\/div>\n

RHEL 8\uc740 \uc6b4\uc601\uccb4\uc81c\uc758 \ud575\uc2ec\uc778 \ucee4\ub110\ubd80\ud130 I\/O \uc2a4\ucf00\uc904\ub7ec, \ucee8\ud14c\uc774\ub108 \ub4f1\uc774 \ubcc0\uacbd\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub530\ub77c \uae30\uc5c5·\uae30\uad00\uc758 \uc2dc\uc2a4\ud15c \uc6b4\uc601\uad00\ub9ac\uc790\ub294 RHEL 8 \uc801\uc6a9\uc5d0 \uc55e\uc11c \ud604\uc7ac \uac00\ub3d9 \uc911\uc778 \uc11c\ube44\uc2a4\uc5d0 \ud544\uc694\ud55c \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc124\uce58 \uc720\ubb34\ub97c \ud655\uc778\ud558\uace0 \uc131\ub2a5\uc5d0 \ubbf8\uce60 \uc601\ud5a5\uc744 \uba3c\uc800 \uac80\ud1a0\ud574\uc57c \ud569\ub2c8\ub2e4.<\/span>

<\/p>\n

 <\/h2>\n

\uc800\uc7a5\uc18c(Repositories)<\/span><\/h2>\n

RHEL 8\uc740 \"BaseOS\", \"AppStream\" 2\uac1c \uc800\uc7a5\uc18c\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.<\/span><\/p>\n

 <\/h3>\n

BaseOS \uc800\uc7a5\uc18c<\/span><\/h3>\n

\uc6b4\uc601\uccb4\uc81c\uc758 \uae30\ubc18\uc774 \ub418\ub294 \uae30\ubcf8 \uae30\ub2a5\uc758 \ucf54\uc5b4 \uc138\ud2b8\ub97c \uc81c\uacf5\ud558\ub294\ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \ucee4\ub110\uacfc \uac19\uc740 \uae30\ubcf8 OS \uae30\ub2a5\uc758 \ud575\uc2ec \ud328\ud0a4\uc9c0 \uadf8\ub8f9\uc73c\ub85c \ubb3c\ub9ac\uc801 \ud558\ub4dc\uc6e8\uc5b4, \uac00\uc0c1\uba38\uc2e0, \ud074\ub77c\uc6b0\ub4dc \uc778\uc2a4\ud134\uc2a4 \ub610\ub294 \ucee8\ud14c\uc774\ub108\uc5d0\uc11c \uc2e4\ud589 \uac00\ub2a5\ud558\ub3c4\ub85d \ud558\ub294 \ud328\ud0a4\uc9c0\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/span><\/p>\n

 <\/h3>\n

AppStream \uc800\uc7a5\uc18c<\/span><\/h3>\n

\uc6b4\uc601 \uc11c\ube44\uc2a4\uc5d0\uc11c \uc218\ud589 \uac00\ub2a5\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158(Apache, Cyrus-imapd, Vim \ub4f1), \ub7f0\ud0c0\uc784 \uc5b8\uc5b4(Java, PHP, Python \ub4f1) \ubc0f \ub370\uc774\ud130\ubca0\uc774\uc2a4(MariaDB, PostgreSQL \ub4f1) \ub4f1\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4. BaseOS \uc800\uc7a5\uc18c\uc758 \ud575\uc2ec \uc6b4\uc601\uccb4\uc81c \ud328\ud0a4\uc9c0\ubcf4\ub2e4 \ub354 \uc790\uc8fc \uc5c5\ub370\uc774\ud2b8\ub429\ub2c8\ub2e4. BaseOS \uc800\uc7a5\uc18c\uc640 AppStream \uc800\uc7a5\uc18c\uc758 \ubd84\ub9ac\ub85c AppStream \uc800\uc7a5\uc18c \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8 \uc2dc \uc774\ubbf8 \uad6c\uc131\ub418\uc5b4 \uc788\ub294 \ud50c\ub7ab\ud3fc \ub610\ub294 \ud2b9\uc815 \ubc30\ud3ec\uc758 \uae30\ubcf8 \uc548\uc815\uc131\uc5d0 \uc601\ud5a5\uc744 \uc8fc\uc9c0 \uc54a\uace0 \uc5c5\ub370\uc774\ud2b8\uac00 \uac00\ub2a5\ud55c \uc720\uc5f0\uc131\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc608\ub4e4 \ub4e4\uc5b4, PostgreSQL\uc758 \uacbd\uc6b0 v10\uacfc v9.6\uc744 \uc81c\uacf5\ud558\uace0 \uc6d0\ud558\ub294 \ubc84\uc804\uc744 \uc124\uce58\ud574 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc804\uc5d0 \ub2e8\uc77c \ud328\ud0a4\uc9c0\ub85c \uad6c\uc131\ub418\uc5b4 \ucd5c\uc2e0 \ubc84\uc804\ub9cc\uc744 \uc9c0\uc6d0\ud588\uc9c0\ub9cc \uc81c\uacf5\ub418\ub294 \ubc84\uc804 \uc911 \uc6d0\ud558\ub294 \uac83\uc744 \uc120\ud0dd\ud574 \uc0ac\uc6a9 \uac00\ub2a5\ud569\ub2c8\ub2e4.<\/span>

<\/p>\n

 <\/h2>\n

\uc18c\ud504\ud2b8\uc6e8\uc5b4 \uad00\ub9ac<\/span><\/h2>\n

RHEL 8\uc5d0\uc11c \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uad00\ub9ac\ub294 \"yum\" \ub300\uc2e0 \"dnf\" \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \uc0c8\ub85c\uc6b4 \"dnf\"\ub294 \uae30\uc874 \"yum\"\uc758 \ub0ae\uc740 \uc131\ub2a5, \ub192\uc740 \uba54\ubaa8\ub9ac \uc0ac\uc6a9\ub7c9 \ubc0f \ube44\ud6a8\uc728\uc801\uc778 \uc758\uc874\uc131 \ub4f1\uc758 \uae30\uc220 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\uc600\uc2b5\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc778 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc124\uce58, \uc5c5\ub370\uc774\ud2b8, \uc0ad\uc81c\ub294 \uc544\ub798\uc640 \uac19\uc774 \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

== \uc0c8\ub85c\uc6b4 \ud328\ud0a4\uc9c0 \uc124\uce58<\/span>
# dnf install package-name<\/span>
== \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8<\/span>
# dnf update package-name<\/span>
== \ud328\ud0a4\uc9c0 \uc0ad\uc81c<\/span>
# dnf remove package-name<\/span><\/div>\n

RHEL 8\uc740 \"dnf\"\ub97c \uae30\ubc18\uc73c\ub85c \ud558\uc9c0\ub9cc RHEL 7\uc5d0\uc11c \uc0ac\uc6a9\ub418\ub294 \"yum\"\uacfc \ud638\ud658\ub429\ub2c8\ub2e4. \"yum\" \uba85\ub839\uacfc \ub300\ubd80\ubd84\uc758 \uc635\uc158\uc740 RHEL 7\uacfc \ub3d9\uc77c\ud55c \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud569\ub2c8\ub2e4.<\/span>

<\/p>\n

== \uc0c8\ub85c\uc6b4 \ud328\ud0a4\uc9c0 \uc124\uce58<\/span>
# yum install package-name<\/span>
== \ud328\ud0a4\uc9c0 \uc5c5\ub370\uc774\ud2b8<\/span>
# yum update package-name<\/span>
== \ud328\ud0a4\uc9c0 \uc0ad\uc81c<\/span>
# yum remove package-name<\/span><\/div>\n

 <\/h2>\n

\ub124\ud2b8\uc6cc\ud06c \uc2a4\ud2b8\ub9bd\ud2b8<\/span><\/h2>\n

RHEL 8\uc5d0\uc11c \ub124\ud2b8\uc6cc\ud06c \uc124\uc815\uc740 \"nmcli\", \"nmtui\" \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4. RHEL 8\ubd80\ud130\ub294 RHEL 7\uc5d0\uc11c \uc0ac\uc6a9\ub418\ub358 \"network-scripts\"\ub97c \ud1b5\ud55c ifup, ifdown \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4. \ub300\uc2e0 “NetworkManager” \uc11c\ube44\uc2a4\ub97c \uc0ac\uc6a9\ud558\uace0 \"nmcli\", \"nmtui\" \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 \uc81c\uc5b4\ud569\ub2c8\ub2e4. \"nmcli\" \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc774\ub354\ub137 \uc5f0\uacb0\uc744 \ucd94\uac00\ud558\ub294 \ubc29\ubc95\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

== \uc774\ub354\ub137 \uc5f0\uacb0\uc744 \uc704\ud55c \uc0c8 NetworkManager \uc5f0\uacb0 \ud504\ub85c\ud544 \ucd94\uac00<\/span>
# nmcli connection add con-name [NAME] ifname [NIC] type Ethernet<\/span>
== IPv4 \uc8fc\uc18c \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv4.addresses [IPv4 IP]<\/span>
== IPv6 \uc8fc\uc18c \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv6.addresses [IPv6 IP]<\/span>
== IPv4 \ubc0f IPv6 \uc5f0\uacb0 \ubc29\ubc95\uc744 \uc218\ub3d9\uc73c\ub85c \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv4.method manual<\/span>
# nmcli connection modify [NAME] ipv6.method manual<\/span>
IPv4 \ubc0f IPv6 \uae30\ubcf8 \uac8c\uc774\ud2b8\uc6e8\uc774 \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv4.gateway [IPv4 GW]<\/span>
# nmcli connection modify [NAME] ipv6.gateway [IPv6 GW]<\/span>
== IPv4 \ubc0f IPv6 DNS \uc11c\ubc84 \uc8fc\uc18c \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv4.dns [IPv4 DNS]<\/span>
# nmcli connection modify [NAME] ipv6.dns [IPv6 DNS]<\/span>
== IPv4 \ubc0f IPv6 \uc5f0\uacb0\uc744 \uc704\ud55c DNS \uac80\uc0c9 \ub3c4\uba54\uc778 \uc124\uc815<\/span>
# nmcli connection modify [NAME] ipv4.dns-search [IPv4 DNS-SEARCH]<\/span>
# nmcli connection modify [NAME] ipv6.dns-search [IPv6 DNS-SEARCH]<\/span>
== \uc5f0\uacb0 \ud504\ub85c\ud30c\uc77c \ud65c\uc131\ud654<\/span>
# nmcli connection up [NAME]<\/span>
Connection successfully activated (D-Bus active path: \/org\/freedesktop\/NetworkManager\/ActiveConnection\/13)<\/span>
== \uc7a5\uce58 \ubc0f \uc5f0\uacb0 \uc0c1\ud0dc \ud45c\uc2dc<\/span>
# nmcli device status<\/span>
DEVICE TYPE STATE CONNECTION<\/span>
[NIC] ethernet connected [NIC]<\/span>
== \uc5f0\uacb0 \ud504\ub85c\ud30c\uc77c\uc758 \ubaa8\ub4e0 \uc124\uc815\uc744 \ud45c\uc2dc<\/span>
# nmcli connection show [NIC]<\/span>
connection.id: [NIC]<\/span>
connection.uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx<\/span>
connection.stable-id: --<\/span>
connection.type: 802-3-ethernet<\/span>
connection.interface-name: [NIC]<\/span><\/div>\n

\uae30\ubcf8\uc73c\ub85c \uc81c\uacf5\ub418\uc9c0\ub294 \uc54a\uc9c0\ub9cc \"ifup\", \"ifdown\" \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\uae30 \uc704\ud574 \"network-scripts\"\ub97c \uc218\ub3d9\uc73c\ub85c \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud328\ud0a4\uc9c0\ub294 BaseOS \uc800\uc7a5\uc18c\uc5d0 \uc874\uc7ac\ud558\uba70 # dnf install network-scripts \uba85\ub839\uc73c\ub85c \uc124\uce58 \uac00\ub2a5\ud569\ub2c8\ub2e4. \uc124\uce58 \ud6c4 \/etc\/sysconfig\/network-scripts\/ \ud558\uc704\uc5d0\uc11c \"ifup\", \"ifdown\" \uba85\ub839\uc5b4\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

# dnf install network-scripts<\/span>
…<\/span>
# ls \/etc\/sysconfig\/network-scripts\/{ifup,ifdown}<\/span>
\/etc\/sysconfig\/network-scripts\/ifdown \/etc\/sysconfig\/network-scripts\/ifup<\/span><\/div>\n

 <\/h2>\n

\uc2dc\uac04 \ub3d9\uae30\ud654<\/span><\/h2>\n

RHEL 8\uc5d0\uc11c \uc2dc\uac04 \ub3d9\uae30\ud654\ub294 \"chronyd\"\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4. NTP(Network Time Protocol)\ub97c \uc774\uc6a9\ud55c \uc2dc\uac04 \ub3d9\uae30\ud654\ub97c \uc704\ud574 RHEL 7\uc5d0\uc11c\ub294 \"ntpd\" \ud639\uc740 \"chronyd\"\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc5c8\uc9c0\ub9cc RHEL 8\uc740 \"chronyd\"\ub9cc \uc9c0\uc6d0\ud569\ub2c8\ub2e4. \uc989\uc2dc \uc2dc\uac04 \ub3d9\uae30\ud654\ub97c \uc704\ud574 \uc0ac\uc6a9\ud588\ub358 \"ntpdate\" \uba85\ub839\uc5b4\ub294 RHEL 8\uc5d0\uc11c\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc73c\uba70 \uc544\ub798\uc640 \uac19\uc774 \uc218\ud589\ud574\uc57c \ud569\ub2c8\ub2e4.<\/span>

<\/p>\n

== \uc11c\ube44\uc2a4 \uc911\uc9c0<\/span>
# systemctl stop chronyd<\/span>
== \uc989\uc2dc \ub3d9\uae30\ud654 (\uc11c\ube44\uc2a4 \uc911\uc9c0 \ud6c4 \uac00\ub2a5)<\/span>
# chronyd –q<\/span>
== \uc11c\ube44\uc2a4 \uc2dc\uc791<\/span>
# systemctl start chronyd<\/span>
\ub610\ub294<\/span>
== \uc989\uc2dc \ub3d9\uae30\ud654 (\uc11c\ube44\uc2a4 \uad6c\ub3d9 \uc911 \uac00\ub2a5)<\/span>
# chronyc -a makestep<\/span><\/div>\n

 <\/h2>\n

\ubcf4\uc548<\/span><\/h2>\n

 <\/h3>\n

tcp_wrappers<\/span><\/h3>\n

RHEL 8\uc740 \uc5ec\ub7ec \uac00\uc9c0 \uc11c\ube44\uc2a4\uc758 \uc811\uadfc \uc81c\uc5b4\uac00 \uac00\ub2a5\ud588\ub358 \"tcp_wrappers\" \uae30\ub2a5\uc744 \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc73c\uba70 \"firewalld\"\ub85c \ub300\uccb4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uae30\ubcf8 \ud328\ud0a4\uc9c0\uc5d0\uc11c \"tcp_wrappers\"\uac00 \uc81c\uc678\ub418\uc5b4 \/etc\/hosts.{allow,deny}\ub97c \ud1b5\ud55c \ubcf4\uc548 \uc124\uc815\uc740 \ubd88\uac00\ub2a5\ud569\ub2c8\ub2e4. 10.10.10.0\/24 \ub124\ud2b8\uc6cc\ud06c\uc5d0 SSH\ub97c \ud5c8\uc6a9\ud558\uace0 \ub2e4\ub978 \ubaa8\ub4e0 \ub124\ud2b8\uc6cc\ud06c\ub97c \ucc28\ub2e8\ud558\ub824\uba74 \uc544\ub798\uc640 \uac19\uc774 \uc124\uc815\ud558\uba74 \ub429\ub2c8\ub2e4.<\/span>

<\/p>\n

== ssh \uc11c\ube44\uc2a4\ub97c \uae30\ubcf8 \ubc29\ud654\ubcbd\uc5d0\uc11c \uc81c\uac70\ud569\ub2c8\ub2e4.<\/span>
# firewall-cmd --permanent --remove-service=ssh<\/span>
== newsshzone \uc774\ub984\uc73c\ub85c \uc0c8\ub85c\uc6b4 zone\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4.<\/span>
# firewall-cmd --permanent --new-zone=newsshzone<\/span>
# firewall-cmd --permanent --zone=newsshzone --add-source=10.10.10.0\/24<\/span>
== \ucd94\uac00\ub41c newsshzone\uc5d0 ssh \uc11c\ube44\uc2a4\ub97c \ucd94\uac00\ud569\ub2c8\ub2e4.<\/span>
# firewall-cmd --permanent --zone=newsshzone --add-service=ssh<\/span>
== \ubc29\ud654\ubcbd\uc744 \ub2e4\uc2dc \ub85c\ub4dc\ud558\uc5ec \uc0c8 \uad6c\uc131\uc744 \ud65c\uc131\ud654\ud569\ub2c8\ub2e4.<\/span>
# firewall-cmd –reload<\/span><\/div>\n

 <\/h3>\n

PAM<\/span><\/h3>\n

\uacc4\uc815 \uc7a0\uae08 \uc81c\uc5b4 \uc2dc \uc0ac\uc6a9\ud558\ub358 PAM \ud328\ud0a4\uc9c0\uc758 \"pam_faillock\" \ubaa8\ub4c8 \uc0ac\uc6a9\ubc95\uc774 \ubcc0\uacbd\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uae30\uc874\uc758 \"authconfig\"\ub97c \ub300\uccb4\ud55c \"authselect\"\ub97c \uc0ac\uc6a9\ud558\uc5ec \"pam_faillock\" \ubaa8\ub4c8\uc744 \ud65c\uc131\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. RHEL 7\uc5d0\uc11c\ub294 \/etc\/pam.d\/system-auth \ubc0f \/etc\/pam.d\/password-auth\uc5d0 pam_faillockd\uc744 \uc124\uc815\ud569\ub2c8\ub2e4. (\ub450 \ud30c\uc77c\uc744 \ubaa8\ub450 \ubcc0\uacbd\ud574\uc57c \uc801\uc6a9\ub429\ub2c8\ub2e4.)<\/span>

<\/p>\n

…<\/span>
auth required pam_faillock.so preauth silent audit deny=3 unlock_time=600<\/span>
…<\/span>
auth [default=die] pam_faillock.so authfail audit deny=3 unlock_time=600<\/span>
…<\/span>
account required pam_faillock.so<\/span>
…<\/span><\/div>\n

RHEL 8\uc740 RHEL 7\uc640 \ub2ec\ub9ac \/etc\/pam.d\/system-auth \ubc0f \/etc\/pam.d\/password-auth\ub97c \uc218\ub3d9\uc73c\ub85c \ud3b8\uc9d1\ud558\ub294 \uac83\uc740 \uad8c\uc7a5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \"pam_faillock\" \ubaa8\ub4c8\uc744 \uc0ac\uc6a9\ud558\ub824\uba74 \uc544\ub798\uc640 \uac19\uc774 \ud558\uba74 \ub429\ub2c8\ub2e4.<\/span>

<\/p>\n

== faillock \ud65c\uc131\ud654<\/span>
# authselect enable-feature with-faillock<\/span>
== faillock \ube44\ud65c\uc131\ud654<\/span>
# authselect disable-feature with-faillock<\/span>
== \/etc\/security\/faillock.conf \uad6c\uc131 \ud30c\uc77c\uc5d0\uc11c \uc124\uc815\uc744 \uc77d\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/span>
# grep -vE '^#|^$' \/etc\/security\/faillock.conf<\/span>
silent<\/span>
deny = 3<\/span>
unlock_time = 1200<\/span>
== test2 \uacc4\uc815\uc5d0 \ub300\ud55c \uc2e4\ud328\ud55c \ub85c\uadf8\uc778 \uc815\ubcf4 \ud655\uc778<\/span>
# faillock --user test2<\/span>
test2:<\/span>
When Type Source Valid<\/span>
2021-04-22 12:12:12 RHOST 127.0.0.1 V<\/span>
2021-04-22 12:12:13 RHOST 127.0.0.1 V<\/span>
2021-04-22 12:12:17 RHOST 127.0.0.1 V<\/span>
== test2 \uacc4\uc815 \uc7a0\uae08 \ud574\uc81c<\/span>
# faillock --reset --user test2<\/span><\/div>\n

 <\/h2>\n

\uae30\ubcf8 \ub124\ud2b8\uc6cc\ud06c \ud328\ud0b7 \ud544\ud130\ub9c1<\/span><\/h2>\n

RHEL 8\uc5d0\uc11c \ud328\ud0b7 \ud544\ud130\ub9c1\uc740 “iptables” \ub300\uc2e0 \"nft\" \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4. RHEL 7\uc5d0\uc11c \uc0ac\uc6a9\ub418\ub358 \"iptables\" \uba85\ub839\uc5b4\ub3c4 \uc5ec\uc804\ud788 \uc9c0\uc6d0\ub418\uc9c0\ub9cc, \ucd94\ud6c4 “iptables” \uba85\ub839\uc5b4\ub294 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc744 \uc218 \uc788\uc5b4 \uc2e0\uaddc \uc2a4\ud06c\ub9bd\ud2b8 \uc791\uc131\uc2dc\uc5d0\ub294 “nft” \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc744 \uad8c\uc7a5\ud569\ub2c8\ub2e4. \"nft\" \uba85\ub839\uc5b4\ub294 \uae30\uc874 \"iptables\" \uba85\ub839\uc5b4\uc5d0 \ube44\ud574 \ud3b8\uc758\uc131, \uae30\ub2a5 \ubc0f \uc131\ub2a5\uc774 \ud06c\uac8c \ud5a5\uc0c1\ub418\uc5c8\uc2b5\ub2c8\ub2e4. “iptables” \ubc0f “nft” \uba85\ub839\uc5b4\ub97c \ube44\uad50\ud558\uba74 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/span><\/p>\n

 <\/h3>\n

\ubaa8\ub4e0 \uaddc\uce59 \ub098\uc5f4<\/span><\/h3>\n
\n<\/colgroup>\n\n\n\n
iptables<\/span><\/td>\nnft<\/span><\/td>\n<\/tr>\n
# iptables-save<\/span><\/td>\n# nft list ruleset<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

 <\/h3>\n

\ud2b9\uc815 \ud14c\uc774\ube14 \ubc0f \uccb4\uc778 \ub098\uc5f4<\/span><\/h3>\n
\n<\/colgroup>\n\n\n\n\n\n
iptables<\/span><\/td>\nnft<\/span><\/td>\n<\/tr>\n
# iptables –L<\/span><\/td>\n# nft list table ip filter<\/span><\/td>\n<\/tr>\n
# iptables -L INPUT<\/span><\/td>\n# nft list chain ip filter INPUT<\/span><\/td>\n<\/tr>\n
# iptables -t nat -L PREROUTING<\/span><\/td>\n# nft list chain ip nat PREROUTING<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

\uae30\uc874 “iptables”\uc758 \uaddc\uce59\uc744 \ub3d9\uc77c\ud55c “nft” \uaddc\uce59\uc73c\ub85c \ubcc0\ud658\ud558\uae30 \uc704\ud55c “iptables-translate”, “ip6tables-translate” \ub3c4\uad6c\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc544\ub798\uc640 \uac19\uc774 “iptables” \uaddc\uce59\uc744 “nft” \uaddc\uce59\uc73c\ub85c \ubcc0\ud658\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/span>

<\/p>\n

# iptables-translate -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3000 | nft add rule ip nat PREROUTING tcp dport 80 counter<\/span>
redirect to :3000<\/span><\/div>\n

 <\/h2>\n

\ub9c8\uce58\uba70<\/span><\/h2>\n

RHEL 8\uc740 \uc774\uc804 \ubc84\uc804\uc5d0 \ube44\ud574 \ub2e4\uc591\ud55c \uc6cc\ud06c\ub85c\ub4dc\uc5d0\uc11c \ud5a5\uc0c1\ub41c \uc131\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \ub610\ud55c \uc9c0\uc18d\uc801\uc778 \ucde8\uc57d\uc810 \ubaa8\ub2c8\ud130\ub9c1\uc744 \ud1b5\ud574 \uc911\ub300 \uc774\uc288 \ubc1c\uc0dd \uc2dc \uc2e0\uc18d\ud55c \uc5c5\ub370\uc774\ud2b8\ub97c \uc81c\uacf5\ud568\uc73c\ub85c\uc368 \uc2dc\uc2a4\ud15c \uc804\ubc18\uc758 \ubcf4\uc548\uacfc \uc548\uc815\uc131\uc774 \ud5a5\uc0c1\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\ucd9c\ucc98: https:\/\/weftnwarp.kr\/site-it\/archives\/centos-8%EC%97%90-%EB%8C%80%ED%95%98%EC%97%AC-%EB%A6%B4%EB%A6%AC%EC%8A%A4-%EB%85%B8%ED%8A%B8release-notes-%ED%8F%AC%ED%95%A8\/#application_stream_%EB%A6%AC%ED%8F%AC%EC%A7%80%ED%86%A0%EB%A6%AC   \ub4e4\uc5b4\uac00\uba70 \ub808\ub4dc\ud587 \uc5d4\ud130\ud504\ub77c\uc774\uc988 \ub9ac\ub205\uc2a4(Red Hat Enterprise Linux, RHEL)\ub294 \uc804 \uc138\uacc4 \ubc0f \uad6d\ub0b4\uc5d0\uc11c \uac00\uc7a5 \ub9ce\uc774 \uc0ac\uc6a9\ud558\ub294 \uae30\uc5c5\uc6a9 \ub9ac\ub205\uc2a4 OS\uc785\ub2c8\ub2e4. 2000\ub144 \uccab \ubc84\uc804\uc744 \ucd9c\uc2dc\ud55c \uc774\ud6c4 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uacc4\uc18d\ud574 2021\ub144 5\uc6d4 \ud604\uc7ac 8.3 \ubc84\uc804\uc774 \ubc30\ud3ec\ub418\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub808\ub4dc\ud587\uc774 \uc9c0\uc6d0\ud558\ub294 \ud398\ub3c4\ub77c \ud504\ub85c\uc81d\ud2b8(Fedora Project)\uc5d0\uc11c \ub9cc\ub4e0 \ub9ac\ub205\uc2a4 \ubc30\ud3ec\ud310\uc778 \ud398\ub3c4\ub77c(Fedora)\ub97c \uae30\ubc18\uc73c\ub85c \ud569\ub2c8\ub2e4. RHEL\uc740 \ubc84\uc804\ubcc4\ub85c \ub77c\uc774\ud504 \uc0ac\uc774\ud074\uc774 \uc815\ud574\uc838 \uc788\uc2b5\ub2c8\ub2e4. \ubc84\uc804\ub9c8\ub2e4 10\ub144 \ub3d9\uc548 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[39],"tags":[],"class_list":["post-6049","post","type-post","status-publish","format-standard","hentry","category-os_linux_unix_macos"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6049"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6049\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}