![[PukiWiki]](image/pukiwiki.png "[PukiWiki]")
「.NET 開発基盤部会 Wiki」は、「Open棟梁Project」,「OSSコンソーシアム .NET開発基盤部会」によって運営されています。
Azure上にUbuntu 24.04を構築（BastionのRDP経由）
参考の「DxCommon?/AzureIaC/Simplest」を動かすパラメタの例
location=japaneast azureBastionName=AzureBastion azureBastionRgName=AzureBastionRG azureBastionVnetName=AzureBastionVnet azureBastionSubnetName=AzureBastionSubnet jumpboxSubnetName=JumpboxSubnet azureBastionPubIPName=AzureBastionPubIP
vmSize=Standard_E2s_v3 vmOS=Ubuntu2404 vmName=JumpboxVM1 vmUser=XXXX vmPassword=XXXX
※ vm系パラメタは都度変えて運用。
参考の「Linux で xrdp を使用する」の内容を「How to Set Up RDP on Ubuntu 24.04」の内容でアップデート
sudo apt update && sudo apt upgrade -y sudo apt install xfce4 xfce4-goodies -y sudo apt install xrdp -y sudo adduser xrdp ssl-cert sudo ufw allow 3389/tcp sudo ufw reload echo xfce4-session >~/.xsession sudo systemctl restart xrdp
※ まとめてコピペすると上手く行かないので、1行、1行、確認しながら実行する。
RDPで接続し諸設定
wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb sudo apt install ./google-chrome-stable_current_amd64.deb
WSL2 Ubuntu 24.04 LTS 2025/1/21と同じ手順でPython（LLMツール）環境を構築する。
WSLでは言われないケド、Azure上では言われる。
sudo apt update
sudo apt upgrade -y
sudo apt full-upgrade -y
sudo apt autoremove -y
sudo reboot
sudo apt install unattended-upgrades sudo dpkg-reconfigure unattended-upgrades
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
Unattended-Upgrade::Allowed-Origins {
"${distro_id}:${distro_codename}";
"${distro_id}:${distro_codename}-updates";
"${distro_id}:${distro_codename}-security";
};Unattended-Upgrade::Allowed-Origins {
"${distro_id}:${distro_codename}";
"${distro_id}:${distro_codename}-security";
// Extended Security Maintenance; doesn't necessarily exist for
// every release and this system may not have it installed, but if
// available, the policy for updates is such that unattended-upgrades
// should also install from here by default.
"${distro_id}ESMApps:${distro_codename}-apps-security";
"${distro_id}ESM:${distro_codename}-infra-security";
// "${distro_id}:${distro_codename}-updates";
// "${distro_id}:${distro_codename}-proposed";
// "${distro_id}:${distro_codename}-backports";
};sudo systemctl restart unattended-upgrades
WSLでは言われないケド、Azure上では言われる。
https://www.youtube.com/watch?v=g0WehYfvMeQ
sudo apt update sudo apt install clamav clamav-daemon
clamd -V
sudo nano /etc/clamav/freshclam.conf
# Check for new database 24 times a day Checks 6
sudo systemctl stop clamav-freshclam
sudo freshclam
ls -l /var/lib/clamav/
sudo cat /var/log/clamav/freshclam.log
sudo systemctl enable clamav-freshclam sudo systemctl start clamav-freshclam sudo systemctl status clamav-freshclam.service
sudo clamscan -i -r /home/[ユーザー名]/Downloads/
sudo clamscan -r --verbose /
----------- SCAN SUMMARY ----------- Known viruses: 8706033 Engine version: 1.0.8 Scanned directories: 47259 Scanned files: 232247 Infected files: 2 Total errors: 692 Data scanned: 9225.77 MB Data read: 8193.84 MB (ratio 1.13:1) Time: 4270.920 sec (71 m 10 s) Start Date: 2025:03:25 07:39:31 End Date: 2025:03:25 08:50:42
sudo clamscan -r --verbose / | tee /home/[ユーザー名]/clamscan_result.txt
tail -f /home/[ユーザー名]/clamscan_result.txt
grep "FOUND" /home/[ユーザー名]/clamscan_result.txt
sudo systemctl start clamav-daemon.service sudo systemctl status clamav-daemon.service
clamdscan --fdpass /
JumpboxVM1とは、本来、踏み台VM。
sudo adduser [username] sudo passwd [username]
sudo usermod -aG xrdp [username] sudo usermod -aG sudo [username] groups [username]
echo xfce4-session >~/.xsession sudo systemctl restart xrdp
sudo apt install remmina
参考の「Azure Bastionの自動起動停止方法」同じこと考えてる奴いて草
az network bastion create \ --resource-group $azureBastionRgName \ --name $azureBastionName \ --vnet-name $azureBastionVnetName \ --public-ip-address $azureBastionPubIPName \ --location $location
