{"id":147,"date":"2021-11-08T09:29:02","date_gmt":"2021-11-08T09:29:02","guid":{"rendered":"https:\/\/virtualall.sk.website.tuke.sk\/?p=147"},"modified":"2026-09-11T14:45:55","modified_gmt":"2026-09-11T14:45:55","slug":"instalacia-ubuntu-sablony-pre-vrealize-automation","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2021\/11\/instalacia-ubuntu-sablony-pre-vrealize-automation\/","title":{"rendered":"Ubuntu Template for VRA"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Vytvorenie \u0161abl\u00f3ny opera\u010dn\u00e9ho syst\u00e9mu UBUNTU pre syst\u00e9m vmware automation mus\u00ed sp\u013a\u0148a\u0165 ur\u010dit\u00e9 po\u017eiadavky \u010di u\u017e zabezpe\u010denia pr\u00edpadne implementovanie bezpe\u010dnostn\u00fdch polit\u00edk danej organiz\u00e1cie alebo \u0161pecifick\u00fdch nastaven\u00ed. Medzi hlavn\u00e9 nastavenia, ktor\u00e9 je potrebn\u00e9 urobi\u0165 je zamedzenia vykon\u00e1vania opera\u010dn\u00e9ho syst\u00e9mu periodick\u00fdch oper\u00e1ci\u00ed ktor\u00e9 vy\u0165a\u017euj\u00fa syst\u00e9mov\u00e9 zdroje. Pri klonovan\u00fdch VM by doch\u00e1dzalo napr\u00edklad k vytvoreniu rovnak\u00fdch serverov s rovnak\u00fdmi machine-ID \u010do by sp\u00f4sobovalo chybovos\u0165 pri pride\u013eovan\u00ed IP adries alebo kol\u00edzi\u00e1m v sieti. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"instalacia-a-nastavnie-vmware-vm\">In\u0161tal\u00e1cia a nastavnie vmware VM<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ubuntu servr alebo desktop je potrebn\u00e9 nain\u0161talova\u0165 ako virtu\u00e1l so zvolen\u00fdm opera\u010dn\u00fdm syst\u00e9mom UBUNTU. Pre optimaliz\u00e1ciu nastaven\u00ed je odpor\u00fa\u010dane deaktiv\u00e1cia SWAP File ktor\u00fd sa automatick\u00fd vytv\u00e1ra. Deaktivovanie SWAP File sa vykon\u00e1va za predpokladu, \u017ee syst\u00e9m disponuje dostato\u010dnou kapacitou RAM pr\u00edpadne v syst\u00e9moch kde je ve\u010d\u0161ia fluktu\u00e1cia vytv\u00e1ran\u00fdch virtu\u00e1lov. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deaktiv\u00e1cia VSWAP spo\u010d\u00edva vo vytvoren\u00ed Custom atributes v nastaven\u00ed Virtu\u00e1ln\u00e9h stroja:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sched.swap.vmxSwapEnabled   false<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/blog.mhasin.eu\/wp-content\/uploads\/2019\/12\/obr%C3%A1zok-2-1024x868.png\" alt=\"In\u0161tal\u00e1cia a nastavnie vmware VM\" class=\"wp-image-31\"\/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"uprava-nastaveni-ubuntu\">\u00daprava nastaven\u00ed UBUNTU<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Nain\u0161talovan\u00fd syst\u00e9m ubuntu je v predvolenej in\u0161tal\u00e1ci\u00ed neopt\u00edmalne nastaven\u00fd pre potreby automatick\u00e9ho vytv\u00e1rania virtu\u00e1lov.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pre spr\u00e1vnu funkcionality je potrebn\u00e9 vytvorit heslo pre \u00fa\u010det ROOT<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>passwd root<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"1-instalacia-dodatocneho-sw\">1. In\u0161tal\u00e1cia dodato\u010dn\u00e9ho SW<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>apt update\napt upgrade -y\napt autoremove -y\napt install mc htop xinetd ssh net-tools ifupdown ntp\nsystemctl enable ssh ntp<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"2-uprava-machine-id-parametra\">2. \u00daprava machine-ID parametra<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>rm \/var\/lib\/dbus\/machine-id\nln -s \/etc\/machine-id \/var\/lib\/dbus\/machine-id\necho \"\" &gt; \/etc\/machine-id<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"3-zrusenie-cloud-init-a-network-manager\">3. Zru\u0161enie Cloud-init a network-manager<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt purge cloud-init network-manager -y\nsudo apt autoremove -y<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"4-zrusenie-netplan-nastavenie-siete-a-dns\">4. Zru\u0161enie NetPlan, nastavenie siete a DNS<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/netplan\/*\nunlink \/etc\/resolv.conf\ntee \/etc\/resolv.conf &gt;\/dev\/null &lt;&lt;EOL\nnameserver 192.168.3.2\nnameserver 192.168.16.16\nnameserver 8.8.8.8\nEOL\nsudo systemctl disable systemd-resolved\nsudo systemctl stop systemd-resolved<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"5-optimalizacia-openvmtools\">5. Optimaliz\u00e1cia OpenVMtools <\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo sed -i 's\/Before=cloud-init-local.service\/After=dbus.service\/g' \/lib\/systemd\/system\/open-vm-tools.service\nsudo sed -i 's\/D \/tmp 1777 root root -\/#D \/tmp 1777 root root -\/g' \/usr\/lib\/tmpfiles.d\/tmp.conf <\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"6-nastavenie-ssh-aktivacia-rc-local\">6. Nastavenie SSH, aktiv\u00e1cia rc.local<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo tee \/etc\/rc.local &gt;\/dev\/null &lt;&lt;EOL\n#!\/bin\/sh -e\n#\n# rc.local\n#\n# This script is executed at the end of each multiuser runlevel.\n# Make sure that the script will \"\" on success or any other\n# value on error.\n#\n# In order to enable or disable this script just change the execution\n# bits.\n#\n\n# By default this script does nothing.\ntest -f \/etc\/ssh\/ssh_host_dsa_key || dpkg-reconfigure openssh-server\nexit 0\nEOL\nsudo chmod +x \/etc\/rc.local\n\ntee \/etc\/systemd\/system\/rc-local.service &gt;\/dev\/null &lt;&lt;EOL\n&#91;Unit]\n Description=\/etc\/rc.local Compatibility\n ConditionPathExists=\/etc\/rc.local\n\n&#91;Service]\n Type=forking\n ExecStart=\/etc\/rc.local start\n TimeoutSec=0\n StandardOutput=tty\n RemainAfterExit=yes\n SysVStartPriority=99\n\n&#91;Install]\n WantedBy=multi-user.target\nEOL\nsystemctl enable rc-local\nrm -rf \/etc\/ssh\/ssh_host_*<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Pri verzi\u00ed server je potrebn\u00e9 povolit na strane SSH root pripojenie a deaktivova\u0165 predvytvoren\u00fd \u00fa\u010det vmware<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sed -i '\/^#PermitRootLogin prohibit-password\/a PermitRootLogin yes' \/etc\/ssh\/sshd_config\nsed -i '\/^PermitRootLogin yes\/a DenyUsers vmware' \/etc\/ssh\/sshd_config<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"7-nastavnie-casu-a-ntp-servera\">7. Nastavnie \u010dasu a NTP servera<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>timedatectl set-timezone Europe\/Bratislava\ntimedatectl set-ntp no\nsed -i '\/^&#91;^#]\/ s\/\\(^.*pool.*$\\)\/#\\ \\1\/' \/etc\/ntp.conf \necho \"pool ntp.local.sk iburst\" &gt;&gt; \/etc\/ntp.conf\nsystemctl restart ntp\nntpq -p<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"8-nastavenie-rdp\">8. Nastavenie RDP<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/tmp\nwget https:\/\/www.c-nergy.be\/downloads\/xRDP\/xrdp-installer-1.2.3.zip\nunzip xrdp-installer-1.2.3.zip \nchmod +x  xrdp-installer-1.2.3.sh\n.\/xrdp-installer-1.2.3.sh -s -l<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"9-nastavenie-multipathd\"><strong>9. Nastavenie multipathd <\/strong><\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/multipath.conf<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Do konfigura\u010dn\u00e9ho s\u00faboru je potrebn\u00e9 prida\u0165 parameter: <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>blacklist {\n    devnode \"^(ram|raw|loop|fd|md|dm-|sr|scd|st|sda)&#91;0-9]*\"\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>10. Autoupdate<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano first-boot-update.sh\n\n#!\/bin\/bash\n\n# S\u00fabor na sledovanie po\u010dtu re\u0161tartov\nREBOOT_COUNTER_FILE=\"\/etc\/reboot-counter\"\n\n# S\u00fa\u010dasn\u00fd po\u010det re\u0161tartov\nif &#91; ! -f \"$REBOOT_COUNTER_FILE\" ]; then\n    REBOOT_COUNTER=0\nelse\n    REBOOT_COUNTER=$(cat \"$REBOOT_COUNTER_FILE\")\nfi\n\n# Zv\u00fd\u0161enie a ulo\u017eenie po\u010dtu re\u0161tartov\nREBOOT_COUNTER=$((REBOOT_COUNTER+1))\necho $REBOOT_COUNTER &gt; \"$REBOOT_COUNTER_FILE\"\n\n# Vykonanie aktualiz\u00e1cie len po 4. re\u0161tarte\nif &#91; $REBOOT_COUNTER -eq 4 ]; then\n    # Aktualiz\u00e1cia zoznamu bal\u00ed\u010dkov v silent mode\n    apt-get update -qq\n\n    # Bezpe\u010dn\u00e1 aktualiz\u00e1cia bal\u00ed\u010dkov v silent mode\n    apt-get upgrade -yqq\n\n    # \u010cistenie stiahnut\u00fdch arch\u00edvov bal\u00ed\u010dkov v silent mode\n    apt-get clean\n\n    # Ozna\u010denie, \u017ee skript bol u\u017e vykonan\u00fd\n    touch \/etc\/first-boot-done\nfi\n\n# Kontrola, \u010di bol skript u\u017e vykonan\u00fd, a v tom pr\u00edpade re\u0161tartovanie\nif &#91; ! -f \"\/etc\/first-boot-done\" ]; then\n    # Re\u0161tartovanie syst\u00e9mu na zv\u00fd\u0161enie po\u010dtu re\u0161tartov, ak to nie je 4. \u0161tart\n    reboot\nfi<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>nano \/etc\/systemd\/system\/first-boot-update.service\n\n&#91;Unit]\nDescription=Run apt update and upgrade at first boot\nAfter=network.target\n\n&#91;Service]\nType=oneshot\nExecStart=\/bin\/first-boot-update.sh\nRemainAfterExit=true\nConditionPathExists=!\/etc\/first-boot-done\n\n&#91;Install]\nWantedBy=multi-user.target\n<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl enable first-boot-update.service\nchmod +x \/bin\/first-boot-update.sh<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"10-zmazanie-docasnych-suborov-a-zakazanie-swap-particie\">11. Zmazanie do\u010dasn\u00fdch s\u00faborov a zakazanie SWAP part\u00edcie<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo swapoff --all\nsudo sed -ri '\/\\sswap\\s\/s\/^#?\/#\/' \/etc\/fstab\necho \"Acquire::ForceIPv4 \"true\";\" &gt; \/etc\/apt\/apt.conf.d\/99force-ipv4\nif &#91; -f \/var\/log\/audit\/audit.log ]; then\n    cat \/dev\/null &gt; \/var\/log\/audit\/audit.log\nfi\nif &#91; -f \/var\/log\/wtmp ]; then\n    cat \/dev\/null &gt; \/var\/log\/wtmp\nfi\nif &#91; -f \/var\/log\/lastlog ]; then\n    cat \/dev\/null &gt; \/var\/log\/lastlog\nfi\nif &#91; -f \/etc\/udev\/rules.d\/70-persistent-net.rules ]; then\n    rm \/etc\/udev\/rules.d\/70-persistent-net.rules\nfi\nrm -rf \/tmp\/*\nrm -rf \/var\/tmp\/*\nrm -f \/etc\/ssh\/ssh_host_*\necho \"\" &gt; \/etc\/machine-id\napt clean\necho 0 &gt; \/etc\/reboot-counter\nhistory -w\nhistory -c<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/virtualall.sk\/2026\/05\/vra-ubuntu-2604-desktop-template\/\">VRA Ubuntu 26.04 Desktop Template \u2014 Kompletn\u00e1 \u0161abl\u00f3na pre vRealize Automation<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2026\/05\/vra-ubuntu-2604-server-template\/\">VRA Ubuntu 26.04 Server Template \u2014 Kompletn\u00e1 \u0161abl\u00f3na pre vRealize Automation<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2024\/07\/vra-ubuntu-template\/\">VRA Ubuntu Template<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2024\/05\/vra-windows-vytvorenie-sablony\/\">VRA Windows vytvorenie \u0161abl\u00f3ny<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/03\/vrealize-automation-7-windows-11-sablona\/\">VRA Windows 11 \u0161abl\u00f3na<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/01\/instalacia-sablonz-centos-stream-9-pre-vra-7-6\/\">CentOS Stream 9 \u0161abl\u00f3na pre VRA<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Vytvorenie \u0161abl\u00f3ny opera\u010dn\u00e9ho syst\u00e9mu UBUNTU pre syst\u00e9m vmware automation mus\u00ed sp\u013a\u0148a\u0165 ur\u010dit\u00e9 po\u017eiadavky \u010di u\u017e zabezpe\u010denia pr\u00edpadne implementovanie bezpe\u010dnostn\u00fdch polit\u00edk danej organiz\u00e1cie alebo \u0161pecifick\u00fdch nastaven\u00ed. Medzi hlavn\u00e9 nastavenia, ktor\u00e9 je potrebn\u00e9 urobi\u0165 je zamedzenia vykon\u00e1vania opera\u010dn\u00e9ho syst\u00e9mu periodick\u00fdch oper\u00e1ci\u00ed ktor\u00e9 vy\u0165a\u017euj\u00fa syst\u00e9mov\u00e9 zdroje. Pri klonovan\u00fdch VM by doch\u00e1dzalo napr\u00edklad k vytvoreniu rovnak\u00fdch serverov s rovnak\u00fdmi&#8230;<\/p>\n<p class=\"more-link-wrap\"><a href=\"https:\/\/virtualall.sk\/en\/2021\/11\/instalacia-ubuntu-sablony-pre-vrealize-automation\/\" class=\"more-link\">Read More<span class=\"screen-reader-text\"> &ldquo;Ubuntu Template for VRA&rdquo;<\/span> &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[69,70,71,72],"class_list":["post-147","post","type-post","status-publish","format-standard","hentry","category-automation","tag-centos","tag-centos-9","tag-centos-stream","tag-centos-stream-9"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=147"}],"version-history":[{"count":27,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/147\/revisions"}],"predecessor-version":[{"id":2469,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/147\/revisions\/2469"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}