pat98's always & forever

26ai 23.26.3 버전 LOG_REDO_PRIORITIZATION

pat98 — Mon, 24 Aug 2026 13:21:22 +0900

26ai 23.26.3 버전부터 LOG_REDO_PRIORITIZATION (자동 Redo 우선순위 지정) 라는 새로운 파라미터가 도입되었다.

https://blogs.oracle.com/maa/auto-redo-prioritization-helping-manage-redo-generation-spikes

SQL> show parameter log_redo_prioritization

NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
log_redo_prioritization boolean FALSE

기본값은 FALSE

SQL> ALTER SYSTEM SET LOG_REDO_PRIORITIZATION = TRUE SCOPE=BOTH;
재기동 필요없이 동적으로 적용가능함.

기본적으로는 Primary 에 설정, 하지만 switchover 되는 상황을 고려한다면 양쪽 다 셋팅.

: 대량의 DML이나 배치 작업으로 인해 Redo Log Buffer 경합이 발생할 때, OLTP 트랜잭션의 지연을 방지하기 위해 배치 세션의 Redo 생성을 일시적으로 조절하는 역할을 한다.

- 동작원리 및 매커니즘

1. 버퍼 사용률 모니터링 : 파라미터를 TRUE로 설정하면 오라클 인스턴스가 Redo Log Buffer의 여유 공간을 실시간으로 감시.

2. 자동 워크로드 분류 : 관리자가 Resource Manager 컨슈머 그룹을 사전에 수동 매핑하지 않아도, 데이터베이스가 세션의 Redo 발생량 및 호출 지속 시간(Call Duration) 등을 분석하여 OLTP 성격과 배치(Batch) 성격 세션을 자체 판별.

3. 선별적 쓰로틀링(Throttling) : 여유 공간이 내부 임계치 미만으로 떨어지면, 배치 세션에 대기를 유발하여 Redo 생성을 지연시킴. 이때 지연된 세션은 redo prioritization for log write lag 대기 이벤트를 기록.

4. OLTP 세션 보호 : Redo Log Buffer 여유 공간을 Latency에 민감한 OLTP 세션이 우선 선점하도록 하여 log buffer space 대기 발생을 최소화합니다.

우선순위는 OLTP가 동작하는 세션에는 영향을 주지 않으며, 배치 동작을 하는 세션에만 영향을 준다.

여기서, LOG_REDO_PRIORITIZATION의 내부 임계값은 사용자가 수동으로 지정하는 고정된 단일 수치(예: 80% 고정 등)가 아니라, 커널 내부 알고리즘에 의해 실시간 동적(Dynamic)으로 계산되는 적응형 임계치를 사용함.

- 오라클 백그라운드 프로세스(LGWR 및 워커 프로세스)가 판단에 활용하는 핵심 기준 지표는 다음과 같음.

1. Redo Log Buffer 가용 임계치 (Buffer Headroom)

동적 가용률 감시: Redo Log Buffer 전체 크기 중 미기록된 Redo가 차지하는 비중을 실시간 추적.

LGWR I/O 처리율 대비 생성 속도: 버퍼의 단순 점유율뿐만 아니라, LGWR의 초당 디스크 Write 처리량(Redo Write Rate) 대비 현재 전체 세션의 Redo 생성 속도(Redo Generation Rate)의 비율이 1을 초과하여 급격한 버퍼 소진(log buffer space 발생 위험)이 예측되는 시점을 임계 상태로 판별.

2. 세션별 Redo 생성률 임계치 (Batch vs. OLTP 분류 기준)

단위 호출당 Redo 생성량(Redo per Call / Transaction): 짧은 트랜잭션(일반적인 OLTP)과 달리, 단일 DB Call 또는 단위 시간(초) 동안 대량의 Redo Vector를 지속적으로 쏟아내는 세션을 시스템 통계(AWR 기준 상위 p95/p99 생성 패턴)와 비교하여 배치 세션으로 동적 마킹함

지속 시간(Burst Duration): 일시적인 짧은 스파이크가 아닌, 수 초 이상 지속적으로 높은 Redo 발생량을 유지하는 세션이 쓰로틀링 대상이 됨.

3. Data Guard 연계 시의 전송 지연 임계치 (Transport Lag Threshold)

LOG_ARCHIVE_DEST_n의 REDO_PRIORITIZATION_WHEN_TRANSPORT_LAGS_BY_SEC 옵션과 연계된 경우, 이 파라미터에 명시된 초(Seconds) 단위의 전송 지연 시간이 절대 임계값으로 작용합니다. (예: 30초 이상 Lag 발생 시 배치 쓰로틀링 강도 급증)

ADG 환경이라면 이렇게 활용할 수 있다.

ALTER SYSTEM SET LOG_ARCHIVE_DEST_3 = 'SERVICE=boston ASYNC NOAFFIRM VALID_FOR=(ONLINE_LOGFILES,PRIMARY_ROLE) DB_UNIQUE_NAME=boston REDO_PRIORITIZATION_WHEN_TRANSPORT_LAGS_BY_SEC=20';

DG broker 를 사용한다면..

EDIT DATABASE newyork SET PROPERTY
AdditionalLadAttributes='REDO_PRIORITIZATION_WHEN_TRANSPORT_LAGS_BY_SEC=20';

-> 우선순위 지정으로 Async physical standby destination 에 대한 목표 전송 지연을 정의합니다. 전송 지연이 목표를 초과하면 재전송이 자원 관리자에게 알림을 보내고, 자원 관리자가 재 우선순위를 적용한다.

23.26.2.0.0 8월 CSPU (Critical Security Patch Update) 패치 테스트

pat98 — Thu, 20 Aug 2026 10:58:46 +0900

클로드의 미소스가 유발한 AI Security Threats 로 인해 오라클 DB제품도 19c, 26ai 에 대해 매달 한번씩 보안패치가 나오는 상황이다.

현실상 매달 운영서버에 적용한다는건 말이 안되고..-_-;

23.26.2.0.0 8월 CSPU (Critical Security Patch Update) 패치 테스트

MRP 패치에 CPSU 패치가 포함되어 있기 때문에 사실상 MRP 패치 하는 작업이라고 보면 된다. (MRP 패치는 x86-64 플랫폼만 있다)

- 현재 Patch 상태 확인, 현재 상태는 gold-image 로 clean 하게 설치되어 있는 상태이다.

[CDB]oracle@26ai-clone:/home/oracle# opatch lspatches
39093711;Database Release Update : 23.26.2.0.0 (39093711)
38743688;OCW RELEASE UPDATE 23.26.1.0.0 (GOLD IMAGE) (38743688) Gold Image

OPatch succeeded.

- Conflict 체크를 먼저 한다.

[CDB]oracle@26ai-clone:/home/oracle# opatch prereq CheckConflictAgainstOHWithDetail -ph /oradata/patch/39834065
Oracle Interim Patch Installer version 12.2.0.1.52
Copyright (c) 2026, Oracle Corporation.  All rights reserved.

PREREQ session

Oracle Home       : /u01/app/oracle/product/26.0.0.0/dbhome_1
Central Inventory : /u01/app/oraInventory
   from           : /u01/app/oracle/product/26.0.0.0/dbhome_1/oraInst.loc
OPatch version    : 12.2.0.1.52
OUI version       : 12.2.0.9.0
Log file location : /u01/app/oracle/product/26.0.0.0/dbhome_1/cfgtoollogs/opatch/opatch2026-08-20_10-32-25AM_1.log

Invoking prereq "checkconflictagainstohwithdetail"

Prereq "checkConflictAgainstOHWithDetail" passed.

OPatch succeeded.

- OPatch 최신확인

[CDB]oracle@26ai-clone:/home/oracle# opatch version
OPatch Version: 12.2.0.1.52

OPatch succeeded.

[CDB]oracle@26ai-clone:/home/oracle# opatch napply /oradata/patch/39834065
Oracle Interim Patch Installer version 12.2.0.1.52
Copyright (c) 2026, Oracle Corporation.  All rights reserved.

Oracle Home       : /u01/app/oracle/product/26.0.0.0/dbhome_1
Central Inventory : /u01/app/oraInventory
   from           : /u01/app/oracle/product/26.0.0.0/dbhome_1/oraInst.loc
OPatch version    : 12.2.0.1.52
OUI version       : 12.2.0.9.0
Log file location : /u01/app/oracle/product/26.0.0.0/dbhome_1/cfgtoollogs/opatch/opatch2026-08-20_09-59-43AM_1.log

Verifying environment and performing prerequisite checks...
OPatch continues with these patches:   38494116  39052286  39060241  39178204  39234501  39290842  39293442  39369197  39569695  39575331  39622694  39661066  39661082  39661089  39661105  39661114  39717289  39739695  39779336  39779540  39788260

Do you want to proceed? [y|n]
y
User Responded with: Y
All checks passed.

Please shutdown Oracle instances running out of this ORACLE_HOME on the local system.
(Oracle Home = '/u01/app/oracle/product/26.0.0.0/dbhome_1')

Is the local system ready for patching? [y|n]
y
User Responded with: Y
Backing up files...
Applying interim patch '38494116' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'
ApplySession: Optional component(s) [ oracle.oid.client, 23.0.0.0.0 ]  not present in the Oracle Home or a higher version is found.

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.ldap.rsf, 23.0.0.0.0...

Patching component oracle.ldap.client, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39052286' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39060241' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.dbscripts, 23.0.0.0.0...

Patching component oracle.ovm, 23.0.0.0.0...
Applying interim patch '39178204' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.db, 23.0.0.0.0...
Applying interim patch '39234501' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'
ApplySession: Optional component(s) [ oracle.network.cman, 23.0.0.0.0 ]  not present in the Oracle Home or a higher version is found.

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.network.rsf, 23.0.0.0.0...
Applying interim patch '39290842' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39293442' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.sdo, 23.0.0.0.0...
Applying interim patch '39369197' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39569695' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.onnx, 23.0.0.0.0...
Applying interim patch '39575331' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.dbscripts, 23.0.0.0.0...
Applying interim patch '39622694' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

--------------------------------------------------------------------------------
unbundling the  file
--------------------------------------------------------------------------------

Patching component oracle.dbjava.ic, 23.0.0.0.0...

--------------------------------------------------------------------------------
bundling the  file
--------------------------------------------------------------------------------

Applying interim patch '39661066' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39661082' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39661089' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39661105' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39661114' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.network.rsf, 23.0.0.0.0...

Patching component oracle.rdbms.rsf, 23.0.0.0.0...
Applying interim patch '39717289' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.crypto.rsf, 23.0.0.0.0...
Applying interim patch '39739695' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.dbdev, 23.0.0.0.0...
Applying interim patch '39779336' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'
ApplySession: Optional component(s) [ oracle.perlint, 5.38.2.0.0 ]  not present in the Oracle Home or a higher version is found.

Patching component oracle.perlint, 5.38.4.0.0...
Applying interim patch '39779540' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'
ApplySession: Optional component(s) [ oracle.python, 3.12.5.0.0 ]  not present in the Oracle Home or a higher version is found.

Patching component oracle.python, 3.12.3.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
Applying interim patch '39788260' to OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...
Patches 38494116,39052286,39060241,39178204,39234501,39290842,39293442,39369197,39569695,39575331,39622694,39661066,39661082,39661089,39661105,39661114,39717289,39739695,39779336,39779540,39788260 successfully applied.
Log file location: /u01/app/oracle/product/26.0.0.0/dbhome_1/cfgtoollogs/opatch/opatch2026-08-20_09-59-43AM_1.log

OPatch succeeded.

- 21개의 패치가 적용되었다. 기존 MRP 패치가 다 누적되지만 땜방식으로 보안패치하는 것이라 그래도 패치가 많다.

[CDB]oracle@26ai-clone:/home/oracle# opatch lspatches
39788260;Fix for Bug 39788260
39779540;39779540:Fix for Bug 39779540
39779336;Fix for Bug 39779336
39739695;Fix for Bug 39739695
39717289;MERGE ON DATABASE RU 23.26.2.0.0 OF 39421943 39533410
39661114;Fix for Bug 39661114
39661105;Fix for Bug 39661105
39661089;Fix for Bug 39661089
39661082;Fix for Bug 39661082
39661066;Fix for Bug 39661066
39622694;MERGE ON DATABASE RU 23.26.2.0.0 OF 39060101 39127997 39128024
39575331;Fix for Bug 39575331
39569695;Fix for Bug 39569695
39369197;Fix for Bug 39369197
39293442;Fix for Bug 39293442
39290842;Fix for Bug 39290842
39234501;Fix for Bug 39234501
39178204;Fix for Bug 39178204
39060241;Fix for Bug 39060241
39052286;Fix for Bug 39052286
38494116;Fix for Bug 38494116
39093711;Database Release Update : 23.26.2.0.0 (39093711)
38743688;OCW RELEASE UPDATE 23.26.1.0.0 (GOLD IMAGE) (38743688) Gold Image

OPatch succeeded.

- 롤백할 때는 패치 id 를 구질구질하게 하나하나 다 지정해 줘야 한다. 한방에 지우지 못함.. -_-
  이때 기존에 개별패치 적용되어 있었던 환경이라면  패치가 많기 때문에 꼼꼼히 리스트를 확인해야 할것 같다.

[CDB]oracle@26ai-clone:/oradata/patch/39834065# opatch nrollback -id 39788260,39779540,39779336,39739695,39717289,39661114,39661105,39661089,39661082,39661066,39622694,39575331,39569695,39369197,39293442,39290842,39234501,39178204,39060241,39052286,38494116
Oracle Interim Patch Installer version 12.2.0.1.52
Copyright (c) 2026, Oracle Corporation.  All rights reserved.

Oracle Home       : /u01/app/oracle/product/26.0.0.0/dbhome_1
Central Inventory : /u01/app/oraInventory
   from           : /u01/app/oracle/product/26.0.0.0/dbhome_1/oraInst.loc
OPatch version    : 12.2.0.1.52
OUI version       : 12.2.0.9.0
Log file location : /u01/app/oracle/product/26.0.0.0/dbhome_1/cfgtoollogs/opatch/opatch2026-08-20_10-24-58AM_1.log

Patches will be rolled back in the following order:
   39788260   39779540   39779336   39739695   39717289   39661114   39661105   39661089   39661082   39661066   39622694   39575331   39569695   39369197   39293442   39290842   39234501   39178204   39060241   39052286   38494116
The following patch(es) will be rolled back: 39788260  39779540  39779336  39739695  39717289  39661114  39661105  39661089  39661082  39661066  39622694  39575331  39569695  39369197  39293442  39290842  39234501  39178204  39060241  39052286  38494116

Please shutdown Oracle instances running out of this ORACLE_HOME on the local system.
(Oracle Home = '/u01/app/oracle/product/26.0.0.0/dbhome_1')

Is the local system ready for patching? [y|n]
y
User Responded with: Y

Rolling back patch 39788260...

RollbackSession rolling back interim patch '39788260' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...
RollbackSession removing interim patch '39788260' from inventory

Rolling back patch 39779540...

RollbackSession rolling back interim patch '39779540' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.python, 3.12.3.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39779540' from inventory

Rolling back patch 39779336...

RollbackSession rolling back interim patch '39779336' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.perlint, 5.38.4.0.0...
RollbackSession removing interim patch '39779336' from inventory

Rolling back patch 39739695...

RollbackSession rolling back interim patch '39739695' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.dbdev, 23.0.0.0.0...
RollbackSession removing interim patch '39739695' from inventory

Rolling back patch 39717289...

RollbackSession rolling back interim patch '39717289' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.crypto.rsf, 23.0.0.0.0...
RollbackSession removing interim patch '39717289' from inventory

Rolling back patch 39661114...

RollbackSession rolling back interim patch '39661114' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.network.rsf, 23.0.0.0.0...

Patching component oracle.rdbms.rsf, 23.0.0.0.0...
RollbackSession removing interim patch '39661114' from inventory

Rolling back patch 39661105...

RollbackSession rolling back interim patch '39661105' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39661105' from inventory

Rolling back patch 39661089...

RollbackSession rolling back interim patch '39661089' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39661089' from inventory

Rolling back patch 39661082...

RollbackSession rolling back interim patch '39661082' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39661082' from inventory

Rolling back patch 39661066...

RollbackSession rolling back interim patch '39661066' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39661066' from inventory

Rolling back patch 39622694...

RollbackSession rolling back interim patch '39622694' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

--------------------------------------------------------------------------------
unbundling the  file
--------------------------------------------------------------------------------

Patching component oracle.dbjava.ic, 23.0.0.0.0...
RollbackSession removing interim patch '39622694' from inventory

--------------------------------------------------------------------------------
bundling the  file
--------------------------------------------------------------------------------

Rolling back patch 39575331...

RollbackSession rolling back interim patch '39575331' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.dbscripts, 23.0.0.0.0...
RollbackSession removing interim patch '39575331' from inventory

Rolling back patch 39569695...

RollbackSession rolling back interim patch '39569695' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.onnx, 23.0.0.0.0...
RollbackSession removing interim patch '39569695' from inventory

Rolling back patch 39369197...

RollbackSession rolling back interim patch '39369197' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39369197' from inventory

Rolling back patch 39293442...

RollbackSession rolling back interim patch '39293442' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.sdo, 23.0.0.0.0...
RollbackSession removing interim patch '39293442' from inventory

Rolling back patch 39290842...

RollbackSession rolling back interim patch '39290842' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39290842' from inventory

Rolling back patch 39234501...

RollbackSession rolling back interim patch '39234501' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...

Patching component oracle.network.rsf, 23.0.0.0.0...
RollbackSession removing interim patch '39234501' from inventory

Rolling back patch 39178204...

RollbackSession rolling back interim patch '39178204' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.db, 23.0.0.0.0...
RollbackSession removing interim patch '39178204' from inventory

Rolling back patch 39060241...

RollbackSession rolling back interim patch '39060241' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.dbscripts, 23.0.0.0.0...

Patching component oracle.ovm, 23.0.0.0.0...
RollbackSession removing interim patch '39060241' from inventory

Rolling back patch 39052286...

RollbackSession rolling back interim patch '39052286' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '39052286' from inventory

Rolling back patch 38494116...

RollbackSession rolling back interim patch '38494116' from OH '/u01/app/oracle/product/26.0.0.0/dbhome_1'

Patching component oracle.rdbms.rsf, 23.0.0.0.0...

Patching component oracle.ldap.rsf, 23.0.0.0.0...

Patching component oracle.ldap.client, 23.0.0.0.0...

Patching component oracle.rdbms, 23.0.0.0.0...
RollbackSession removing interim patch '38494116' from inventory
Log file location: /u01/app/oracle/product/26.0.0.0/dbhome_1/cfgtoollogs/opatch/opatch2026-08-20_10-24-58AM_1.log

OPatch succeeded.

- CSPU (Critical Security Patch Update) 패치 롤백 완료

[CDB]oracle@26ai-clone:/oradata/patch/39834065# opatch lspatches
39093711;Database Release Update : 23.26.2.0.0 (39093711)
38743688;OCW RELEASE UPDATE 23.26.1.0.0 (GOLD IMAGE) (38743688) Gold Image

OPatch succeeded.

26ai 양자내성 암호화 (PQC: Post-Quantum Cryptography) 테스트

pat98 — Wed, 12 Aug 2026 13:12:04 +0900

26ai 양자내성 암호화 테스트

26ai 부터 미국 국립표준기술연구소(NIST)가 승인한 양자 내성 암화화 알고리즘인 ML-KEM(Module-Lattice-Based Key-Encapsulation Mechanism) 을 구현하여 전송구간과 저장공간 모두에서 양자컴퓨팅 공격가능성에 대비한 보안을 제공한다고 한다.

양자내성 암호화가 뚫릴 확률은 지구상에 있는 모든 모래알중에 1개를 찾아내는 수준이라고 한다.

[서버 쪽 설정]
1. 우선  TCPS 통신이 가능해야 한다. (일반 Native 네트워트 암호화로는 안된다)

TCPS 를 사용하고 있지 않다면 간단하게 아래와 같이 서버 쪽에 설정한다.

-  autologin 설정 및 인증서 export (autologin은 이미 설정되어 있으면 생략가능)
orapki wallet create -wallet /u01/app/oracle/admin/TEST/wallet/ -auto_login -pwd "welcome1"

orapki wallet add -wallet /u01/app/oracle/admin/TEST/wallet -dn 'CN=root_test_CA,C=US' -keysize 2048 -self_signed -validity 3650 -pwd "welcome1"

orapki wallet export -wallet  /u01/app/oracle/admin/TEST/wallet/ -dn 'CN=root_test_CA,C=US' -cert /u01/app/oracle/admin/TEST/wallet/root_test_CA.cert

chmod 660 /u01/app/oracle/admin/TEST/wallet/cwallet.sso
chmod 660 /u01/app/oracle/admin/TEST/wallet/ewallet.p12

(oracle)
orapki wallet display -wallet /u01/app/oracle/admin/TEST/wallet/
keytool -printcert -file /u01/app/oracle/admin/TEST/wallet/root_test_CA.cert

- 다 했으면 listener.ora 화일을 설정한다. (난 4521 포트로 설정함)

--------------------------------------------------------
WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/u01/app/oracle/admin/TEST/wallet)))
SSL_CLIENT_AUTHENTICATION = FALSE

LISTENER =
  (DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS_LIST =
        (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
      )
      (ADDRESS_LIST =
        (ADDRESS = (PROTOCOL = TCPS)(HOST = 192.168.56.90)(PORT = 4521))
      )
    )
  )
--------------------------------------------------------

저장한 후

sqlnet.ora 에 아래와 같이 지정한다. 사실 이게 전부이긴 하다. 위에는 TCPS 설정하는 거였기 때문에..

--------------------------------------------------------
WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/u01/app/oracle/admin/TEST/wallet)))
SSL_CLIENT_AUTHENTICATION = FALSE

TLS_KEY_EXCHANGE_GROUPS = ml-kem
--------------------------------------------------------

로컬 리스너 지정한 후,  ALTER SYSTEM SET local_listener='(ADDRESS=(PROTOCOL=TCPS)(HOST=192.168.56.90)(PORT=4521))' SCOPE=BOTH;

lsnrctl  start 하고 상태확인

lsnrctl status

[CDB]oracle@26ai:/home/oracle# lsnrctl status

LSNRCTL for Linux: Version 23.26.2.0.0 - Production on 12-AUG-2026 11:29:39

Copyright (c) 1991, 2026, Oracle.  All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC0)))
STATUS of the LISTENER
------------------------
Alias                     LISTENER
Version                   TNSLSNR for Linux: Version 23.26.2.0.0 - Production
Start Date                12-AUG-2026 10:40:14
Uptime                    0 days 0 hr. 49 min. 24 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   /u01/app/oracle/product/26.0.0.0/dbhome_1/network/admin/listener.ora
Listener Log File         /u01/app/oracle/diag/tnslsnr/26ai/listener/alert/log.xml
Listening Endpoints Summary...
  (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(KEY=EXTPROC0)))
  (DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=192.168.56.90)(PORT=4521)))
Services Summary...
Service "5574b7966d2bb9fbe0635a38a8c0d85a" has 1 instance(s).
  Instance "CDB", status READY, has 1 handler(s) for this service...
Service "CDB" has 1 instance(s).
  Instance "CDB", status READY, has 1 handler(s) for this service...
Service "CDBXDB" has 1 instance(s).
  Instance "CDB", status READY, has 1 handler(s) for this service...
Service "pdb1" has 1 instance(s).
  Instance "CDB", status READY, has 1 handler(s) for this service...
The command completed successfully

- 정상적으로 서비스가 등록되었다면 이제 서버쪽에서 해 줄건 없다.

[클라이언트 설정]

서버에 접속하는 클라이언트는 26ai 를 사용하도록 한다. 귀찮으면 Instant Client 설치해서 해도 된다.

- tnsnames.ora

TCPS =
  (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCPS)(HOST = 192.168.56.90)(PORT = 4521))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = PDB1)
    )
  )


- sqlnet.ora

# sqlnet.ora Network Configuration File: /u01/app/oracle/product/26.0.0.0/dbhome_1/network/admin/sqlnet.ora
# Generated by Oracle configuration tools.

NAMES.DIRECTORY_PATH= (TNSNAMES, ONAMES, HOSTNAME)

WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/u01/app/oracle/admin/TEST/wallet)))
SSL_CLIENT_AUTHENTICATION = FALSE

TLS_KEY_EXCHANGE_GROUPS=ml-kem
#TLS_KEY_EXCHANGE_GROUPS=ec

- 접속 테스트

클라이언트에서 서버로 접속 해 본다.

sqlplus system/oracle@TCPS

[CDB]oracle@26ai-clone:/u01/app/oracle/product/26.0.0.0/dbhome_1/network/admin# sqlplus system/oracle@TCPS

SQL*Plus: Release 23.26.2.0.0 - Production on Wed Aug 12 12:57:25 2026
Version 23.26.2.0.0

Copyright (c) 1982, 2026, Oracle. All rights reserved.

Last Successful login time: Wed Aug 12 2026 11:07:35 +09:00

Connected to:
Oracle AI Database 26ai Enterprise Edition Release 23.26.2.0.0 - Production
Version 23.26.2.0.0

SQL> SELECT SYS_CONTEXT('USERENV', 'NETWORK_PROTOCOL') FROM DUAL;

SYS_CONTEXT('USERENV','NETWORK_PROTOCOL')
--------------------------------------------------------------------------------
tcps

SQL> SELECT SYS_CONTEXT('USERENV','TLS_VERSION') FROM DUAL;

SYS_CONTEXT('USERENV','TLS_VERSION')
--------------------------------------------------------------------------------
TLS 1.3

-> TLS 버전은 별도 셋팅하지 않아도 기본이 1.3 으로 설정된다.

여기서 다른 알고리즘으로 했을 때 에러가 나는 부분을 한번 테스트 해보면..

sqlnet.ora 에 ml-kem 이 아닌 기존의 사용하던 타원곡선 디피 헬만 ECDHE(Elliptic Curve Diffie-Hellman Ephemeral) 알고리즘을 사용하면 이렇게 인증이 거부된다.

--------------------------------------------------------------------------------

#TLS_KEY_EXCHANGE_GROUPS=ml-kem
TLS_KEY_EXCHANGE_GROUPS=ec

--------------------------------------------------------------------------------

sqlplus system/oracle@TCPS

SQL*Plus: Release 23.26.2.0.0 - Production on Wed Aug 12 13:02:54 2026
Version 23.26.2.0.0

Copyright (c) 1982, 2026, Oracle. All rights reserved.

ERROR:
ORA-28860: Fatal SSL error
Help: https://docs.oracle.com/error-help/db/ora-28860/

끝~~

26ai Online Tablespace Encryption (Dataguard 환경)

pat98 — Tue, 11 Aug 2026 14:29:45 +0900

26ai 의 신기능 중 하나.

DG 환경에서 온라인으로 대용량 데이터를 암호화 할 경우 Standby서버의 부하 경감하는 방법중의 하나이다.

- Standby 서버

SQL> ALTER SYSTEM SET DB_RECOVERY_AUTO_REKEY=OFF;
-> Standby 에서 tablespace rekey 작업을 자동으로 수행하지 않게 설정. (기본이 ON)

- Primary 서버

SQL> ALTER TABLESPACE bigtbsp ENCRYPTION ONLINE ENCRYPT REKEY;

1. Primary 에서 Tablespace 암호화 시작함
2. mrp 프로세스는 Tablespace 가 Encrypting 되었다고 marking
3. mrp 프로세스는 간섭없이 복구작업 진행

- Standby 서버

SQL> ALTER TABLESPACE bigtbsp ENCRYPTION ONLINE FINISH REKEY;

4. User Process 는 Standby 서버의 Tablespace 를 암호화함

* Standby 의 CDB$ROOT 는 반드시 read-only 로 오픈되어 있어야 함 (ADG 라이센스 불필요)

10g RAC Add Node 작업

pat98 — Wed, 5 Aug 2026 13:22:14 +0900

========================================================================
10g RAC Add Node 작업  rac1,rac2

RAC 10.2.0.5, RHEL 5.5

시나리오
: OS해킹 의심으로 1번노드 삭제 후 재구성

oracle_HOME: /oracle/product/10.2.0

GRID_HOME : /oracle/crs/ORCL/

========================================================================
1. 파일백업

상태 반드시 백업
ocrchek
crsctl query css votedisk
crs_stat -t > /tmp/crs_stat_t
crs_stat -p > /tmp/crs_stat_p

mkdir /tmp/backup
cp /etc/hosts /tmp/backup
cp -rp /oracle/product/10.2.0/network/admin/* /tmp/backup
cp -rp /oracle/product/10.2.0/dbs /tmp/backup
cp -rp /etc/ora* /tmp/backup
cp -rp /etc/passwd /tmp/backup
cp -rp /etc/group /tmp/backup
cd /oracle/inventory
tar cvf /tmp/backup/inventory.tar .
cp -rp /home/oracle/.bash_profile /tmp/backup
cd /etc
tar cvf /tmp/backup/etc.tar .

init 화일은 수동으로 한번 더 받는다. link 화일 확인 필요..

crs stop 후 vote,ocr 백업 !!

root 유저로

dd if=/dev/raw/raw1 /tmp/backup/raw1
dd if=/dev/raw/raw2 /tmp/backup/raw2
dd if=/dev/raw/raw3 /tmp/backup/raw3
dd if=/dev/raw/raw4 /tmp/backup/raw4
dd if=/dev/raw/raw5 /tmp/backup/raw5

========================================================================
2. 노드삭제

- crs삭제(1번노드 root에서 )

crsctl stop crs

cd /oracle/crs/ORCL/install
./rootdelete.sh local nosharedvar nosharedhome

- 노드정보 update(2번노드 root에서)

/oracle/crs/ORCL/bin/olsnodes -n

cd /oracle/crs/ORCL/install
./rootdeletenode.sh rac1,1

/oracle/crs/ORCL/bin/olsnodes -n

- inventory update (2번노드 oracle에서)
cd $oracle_HOME/oui/bin
./runInstaller -updateNodelist oracle_HOME="/oracle/product/10.2.0" CLUSTER_NODES=rac2
./runInstaller -updateNodelist oracle_HOME="/oracle/crs/ORCL" CLUSTER_NODES=rac2 crs=TRUE

이때 노드정보 삭제가 fail 되고 rollback 될수가 있는데 무시하고 진행해도 상관없다.

========================================================================

3. 노드 OS재설치

========================================================================

4. AddNode 작업

- hosts 파일 복구
cp /backup/hosts /etc/hosts

- user/group 생성
groupadd -g 501 oinstall
groupadd -g 502 dba
groupadd -g 503 oper
useradd -u 500 -g oinstall -G dba oracle
passwd oracle

- ssh key setup
./sshUserSetup.sh -user oracle -hosts "rac1 rac2" -noPromptPassphrase -advanced

- 디렉터리 생성
mkdir -p /oracle/crs/ORCL
mkdir -p /oracle/product/10.2.0
chown -R oracle:dba /oracle

- profile설정:root 및 oracle계정 profile 설정

.bash_profile 설정

========================================================================
노드 Add 작업 진행

- crs AddNode.sh 수행(2번노드 oracle계정에서)

cd /oracle/crs/ORCL/oui/bin
./addNode.sh -silent "CLUSTER_NEW_NODES={rac1}" "CLUSTER_NEW_PRIVATE_NODE_NAMES={rac1-priv}" "CLUSTER_NEW_VIRTUAL_HOSTNAMES={rac1-vip}"

(root script수행)

- 1번노드

/oracle/oraInventory/orainstRoot.sh

- 2번노드

vi /oracle/crs/ORCL/install/rootaddnode.sh

-- Node id를 3번에서 1번으로 수정
-----------------------------------------
crs_NEW_HOST_NAME_LIST=rac1,3
crs_NEW_NODE_NAME_LIST=rac1,3
crs_NEW_PRIVATE_NAME_LIST=rac1-priv,3
-----------------------------------------
crs_NEW_HOST_NAME_LIST=rac1,1
crs_NEW_NODE_NAME_LIST=rac1,1
crs_NEW_PRIVATE_NAME_LIST=rac1-priv,1
-----------------------------------------

2번 (root)

/oracle/crs/ORCL/install/rootaddnode.sh
/oracle/crs/ORCL/bin/olsnodes -n

- 1번노드
/oracle/crs/ORCL/root.sh

-완료후 상태

[root@rac1 /]# crs_stat -t
Name           Type           Target    State     Host
------------------------------------------------------------
ora....B1.lsnr application    ONLINE    UNKNOWN   rac1
ora.rac1.vip  application    ONLINE    ONLINE    rac1
ora....B2.lsnr application    ONLINE    ONLINE    rac2
ora.rac2.gsd  application    ONLINE    ONLINE    rac2
ora.rac2.ons  application    ONLINE    ONLINE    rac2
ora.rac2.vip  application    ONLINE    ONLINE    rac2
ora.orcl.db    application    ONLINE    ONLINE    rac2
ora....l1.inst application    ONLINE    UNKNOWN   rac1
ora....l2.inst application    ONLINE    ONLINE    rac2

- DB Home AddNode.sh 수행(2번노드 oracle계정에서)

cd /oracle/product/10.2.0/oui/bin
./addNode.sh -silent "CLUSTER_NEW_NODES={rac1}"

(root script수행)

- 1번노드에서
/oracle/product/10.2.0/root.sh

- DB Config 복구

cp -rp /backup/network/* /oracle/product/10.2.0/network/admin
cp -rp /backup/dbs/* /oracle/product/10.2.0/dbs

-- 리스너 기동

srvctl start listener -n rac1 -l LISTENER_rac1
srvctl start listener -n rac1 -l LISTENER_ORCL2_rac1

또는

srvctl stop nodeapps -n rac1
srvctl start nodeapps -n rac1

-- DB 디렉터리 생성

mkdir -p /oracle/LOG/ORCL/adump
mkdir -p /oracle/LOG/ORCL/bdump
mkdir -p /oracle/LOG/ORCL/cdump
mkdir -p /oracle/LOG/ORCL/udump

-- DB 기동

sqlplus / as sysdba
SQL> startup

or

srvctl add instance -d ORCL -i ORCL1
srvctl add instance -d ORCL -i ORCL2

srvctl start instance -d ORCL -i ORCL1
srvctl start instance -d ORCL -i ORCL2

-- 상태체크

[root@rac1 /]# crs_stat -t
Name           Type           Target    State     Host
------------------------------------------------------------
ora....B1.lsnr application    ONLINE    ONLINE    rac1
ora.rac1.vip  application  ONLINE    ONLINE    rac1
ora....B2.lsnr application    ONLINE    ONLINE    rac2
ora.rac2.gsd  application  ONLINE    ONLINE    rac2
ora.rac2.ons  application  ONLINE    ONLINE    rac2
ora.rac2.vip  application  ONLINE    ONLINE    rac2
ora.orcl.db    application    ONLINE    ONLINE    rac2
ora....l1.inst application    ONLINE    ONLINE    rac1
ora....l2.inst application    ONLINE    ONLINE    rac2

- 작업후 신규노드에서 ons, gsd 가 없으므로 등록해준다. (확장자는 반드시 .cap 이어야 함)

2번노드에서 아래의 정보로 화일 생성

crs_stat -p ora.rac2.ons > /oracle/crs/ORCL/crs/profile/ora.rac2.ons.cap
crs_stat -p ora.rac2.gsd > /oracle/crs/ORCL/crs/profile/ora.rac2.gsd.cap

해당화일의 정보를 2번에서 -> 1번으로 수정 (hastname 등)

vi /oracle/crs/ORCL/crs/profile/ora.rac2.ons.cap
vi /oracle/crs/ORCL/crs/profile/ora.rac2.gsd.cap

1번 노드에 화일 생성하여 삽입 (rac1)

vi /oracle/crs/ORCL/crs/profile/ora.rac1.ons.cap
vi /oracle/crs/ORCL/crs/profile/ora.rac1.gsd.cap

crs_register ora.rac1.ons
crs_register ora.rac1.gsd

crs_start ora.rac1.ons
crs_start ora.rac1.gsd

=============================
기타 리소스 Troubleshooting 시 사용

crs_stat -p ora.rac1.LISTENER_rac1.lsnr > /oracle/crs/ORCL/crs/profile/ora.rac1.LISTENER_rac1.lsnr.cap
crs_stat -p ora.rac2.LISTENER_rac2.lsnr > /oracle/crs/ORCL/crs/profile/ora.rac2.LISTENER_rac2.lsnr.cap

crs_stat -p ora.rac1.vip > /oracle/crs/ORCL/crs/profile/ora.rac1.vip.cap
crs_stat -p ora.rac2.vip > /oracle/crs/ORCL/crs/profile/ora.rac2.vip.cap

crs_stat -p ora.rac1.ons > /oracle/crs/ORCL/crs/profile/ora.rac1.ons.cap
crs_stat -p ora.rac2.ons > /oracle/crs/ORCL/crs/profile/ora.rac2.ons.cap

crs_stat -p ora.rac1.gsd > /oracle/crs/ORCL/crs/profile/ora.rac1.gsd.cap
crs_stat -p ora.rac2.gsd > /oracle/crs/ORCL/crs/profile/ora.rac2.gsd.cap

crs_stop ora.rac1.vip
crs_stop ora.rac2.vip

crs_stop ora.rac1.ons
crs_stop ora.rac2.ons

crs_stop ora.rac1.gsd
crs_stop ora.rac2.gsd

crs_start ora.rac1.vip
crs_start ora.rac2.vip

crs_start ora.rac1.ons
crs_start ora.rac2.ons

crs_start ora.rac1.gsd
crs_start ora.rac2.gsd

crs_register ora.rac1.vip
crs_register ora.rac2.vip

crs_register ora.rac1.LISTENER_rac1.lsnr
crs_register ora.rac2.LISTENER_rac2.lsnr

crs_register ora.rac1.ons
crs_register ora.rac2.ons

crs_register ora.rac1.gsd
crs_register ora.rac2.gsd

crs_unregister ora.rac1.LISTENER_rac1.lsnr
crs_unregister ora.rac2.LISTENER_rac2.lsnr

crs_unregister ora.rac1.vip
crs_unregister ora.rac2.vip

crs_unregister ora.rac1.ons
crs_unregister ora.rac2.ons

crs_unregister ora.rac1.gsd
crs_unregister ora.rac2.gsd

srvctl start listener -n rac1 -l LISTENER_rac1
srvctl start listener -n rac2 -l LISTENER_rac2

vi /oracle/crs/ORCL/crs/profile/ora.rac1.vip.cap
vi /oracle/crs/ORCL/crs/profile/ora.rac2.vip.cap

srvctl add nodeapps -n rac1 -o /oracle/product/10.2.0 -A 192.168.56.114/255.255.255.0/eth0
srvctl add nodeapps -n rac2 -o /oracle/product/10.2.0 -A 192.168.56.115/255.255.255.0/eth0

----------------------------
vipca silent 실행

/vipca -silent -nodelist rac1,rac1 -vipfile /oracle/crs/ORCL/vipfile -orahome /oracle/crs/ORCL

cat /oracle/crs/ORCL/vipfile

rac1-vip=192.168.56.114/255.255.255.0/eth0
rac2-vip=192.168.56.115/255.255.255.0/eth0

Oracle 26ai Standard Edition 출시

pat98 — Wed, 5 Aug 2026 10:42:25 +0900

처음 나올때 Enterprise Edition 만 나와서 의아했는데 조용히 Standard Edition 도 출시되었다.

이번에 Release 된 GOLD IMAGE 인 23.26.3 으로 설치하면 On-Premise 에서도 SE 사용이 가능하다.

아직 오라클 공식 메뉴얼에는 언급이 안된듯??

SQL*Plus: Release 23.26.3.0.0 - Production on Wed Aug 5 10:32:26 2026
Version 23.26.3.0.0

Copyright (c) 1982, 2026, Oracle. All rights reserved.
Connected to:
Oracle AI Database 26ai Standard Edition 2 Release 23.26.3.0.0 - Production
Version 23.26.3.0.0

SQL> select parameter, value from v$option order by 1;

PARAMETER                                     VALUE
--------------------------------------------- --------------------------------------------------
ASM Proxy Instance                            FALSE
Active Data Guard                             FALSE
Adaptive Execution Plans                      FALSE
Advanced Analytics                            TRUE
Advanced Compression                          FALSE
Advanced Index Compression                    FALSE
Advanced replication                          FALSE
Application Role                              FALSE
Auto SQL Plan Management                      FALSE
Automatic Data Optimization                   FALSE
Automatic Error Mitigation                    FALSE
Automatic Storage Management                  FALSE
Backup Encryption                             FALSE
Basic Compression                             FALSE
Bit-mapped indexes                            FALSE
Block Change Tracking                         FALSE
Block Media Recovery                          FALSE
Cache Fusion Lock Accelerator                 FALSE
Centrally Managed User                        FALSE
Change Data Capture                           FALSE
Coalesce Index                                TRUE
Connection multiplexing                       TRUE
Connection pooling                            TRUE
Cross Transportable Backups                   FALSE
DICOM                                         TRUE
Data Guard for Pluggable Databases            FALSE
Data Redaction                                FALSE
Database queuing                              TRUE
Database resource manager                     FALSE
Deferred Segment Creation                     FALSE
Duplexed backups                              FALSE
Enterprise User Security                      FALSE
Exadata Discovery                             FALSE
Export transportable tablespaces              FALSE
Fast-Start Fault Recovery                     FALSE
File Mapping                                  FALSE
Fine-grained Auditing                         FALSE
Fine-grained access control                   TRUE
Flashback Data Archive                        TRUE
Flashback Database                            FALSE
Flashback Table                               FALSE
Global Data Services                          FALSE
Heat Map                                      FALSE
I/O Server                                    FALSE
In-Memory Aggregation                         FALSE
In-Memory Column Store                        FALSE
Incremental backup and recovery               TRUE
Instead-of triggers                           TRUE
Java                                          TRUE
Join index                                    FALSE
Managed Standby                               FALSE
Management Database                           FALSE
Materialized view rewrite                     FALSE
OLAP                                          FALSE
OLAP Window Functions                         TRUE
Objects                                       TRUE
Online Index Build                            FALSE
Online Redefinition                           FALSE
Oracle Data Guard                             FALSE
Oracle Database Vault                         FALSE
Oracle Label Security                         FALSE
Parallel backup and recovery                  FALSE
Parallel execution                            FALSE
Parallel load                                 TRUE
Partitioning                                  FALSE
Plan Stability                                TRUE
Point-in-time tablespace recovery             FALSE
Privilege Analysis                            FALSE
Proxy authentication/authorization            TRUE
Real Application Clusters                     FALSE
Real Application Security                     TRUE
Real Application Testing                      FALSE
Result Cache                                  FALSE
SQL Firewall                                  FALSE
SQL Plan Management                           FALSE
Sample Scan                                   TRUE
SecureFiles Encryption                        FALSE
Server Flash Cache                            FALSE
Snapshot time recovery                        FALSE
Spatial                                       TRUE
Streams Capture                               FALSE
Table Clustering                              FALSE
Transparent Application Failover              TRUE
Transparent Data Encryption                   FALSE
Transparent Sensitive Data Protection         FALSE
Trial Recovery                                FALSE
Unified Auditing                              TRUE
Unused Block Compression                      FALSE
XStream                                       TRUE
Zone Maps                                     FALSE

90 rows selected.

끝 !!

10g rac 설치시 에러조치

pat98 — Tue, 4 Aug 2026 12:42:31 +0900

설치 환경

RHEL 5.5

2Node RAC 10.2.0.5
====================

- 10g rac 설치관련 오류처리

1. 설치 이미지에서 oraparam.ini 수정 반영

vi /10201_clusterware_linux_x86_64/install/oraparam.ini

   redhat-5 추가

2. runInstaller 실행시 오류나므로 libXp-1.0.0-8.i386.rpm 사전 설치

rac1:/install/clusterware> ./runInstaller
********************************************************************************

Please run the script rootpre.sh as root on all machines/nodes. The script can be found at the toplevel of the CD or stage-area. Once you have run the script, please type Y to proceed

Answer 'y' if root has run 'rootpre.sh' so you can proceed with oracle Clusterware installation.
Answer 'n' to abort installation and then ask root to run 'rootpre.sh'.

********************************************************************************

Has 'rootpre.sh' been run by root? [y/n] (n)
y

Starting oracle Universal Installer...

Checking installer requirements...

Checking operating system version: must be redhat-5, redhat-3, SuSE-9, redhat-4, UnitedLinux-1.0, asianux-1 or asianux-2
                                      Passed

All installer requirements met.

Preparing to launch oracle Universal Installer from /tmp/OraInstall2018-11-30_09-32-42PM. Please wait ...rac1:/install/clusterware> oracle Universal Installer, Version 10.2.0.1.0 Production
Copyright (C) 1999, 2005, oracle. All rights reserved.

Exception java.lang.UnsatisfiedLinkError: /tmp/OraInstall2018-11-30_09-32-42PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory occurred..
java.lang.UnsatisfiedLinkError: /tmp/OraInstall2018-11-30_09-32-42PM/jre/1.4.2/lib/i386/libawt.so: libXp.so.6: cannot open shared object file: No such file or directory
        at java.lang.ClassLoader$NativeLibrary.load(Native Method)
        at java.lang.ClassLoader.loadLibrary0(Unknown Source)
        at java.lang.ClassLoader.loadLibrary(Unknown Source)
        at java.lang.Runtime.loadLibrary0(Unknown Source)
        at java.lang.System.loadLibrary(Unknown Source)
        at sun.security.action.LoadLibraryAction.run(Unknown Source)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.awt.NativeLibLoader.loadLibraries(Unknown Source)
        at sun.awt.DebugHelper.<clinit>(Unknown Source)
        at java.awt.Component.<clinit>(Unknown Source)
        at oracle.sysman.oii.oiif.oiifm.OiifmGraphicInterfaceManager.<init>(OiifmGraphicInterfaceManager.java:222)
        at oracle.sysman.oii.oiic.OiicSessionInterfaceManager.createInterfaceManager(OiicSessionInterfaceManager.java:193)
        at oracle.sysman.oii.oiic.OiicSessionInterfaceManager.getInterfaceManager(OiicSessionInterfaceManager.java:202)
        at oracle.sysman.oii.oiic.OiicInstaller.getInterfaceManager(OiicInstaller.java:436)
        at oracle.sysman.oii.oiic.OiicInstaller.runInstaller(OiicInstaller.java:926)
        at oracle.sysman.oii.oiic.OiicInstaller.main(OiicInstaller.java:866)
Exception in thread "main" java.lang.NoClassDefFoundError
        at oracle.sysman.oii.oiif.oiifm.OiifmGraphicInterfaceManager.<init>(OiifmGraphicInterfaceManager.java:222)
        at oracle.sysman.oii.oiic.OiicSessionInterfaceManager.createInterfaceManager(OiicSessionInterfaceManager.java:193)
        at oracle.sysman.oii.oiic.OiicSessionInterfaceManager.getInterfaceManager(OiicSessionInterfaceManager.java:202)
        at oracle.sysman.oii.oiif.oiifm.OiifmAlert.<clinit>(OiifmAlert.java:151)
        at oracle.sysman.oii.oiic.OiicInstaller.runInstaller(OiicInstaller.java:984)
        at oracle.sysman.oii.oiic.OiicInstaller.main(OiicInstaller.java:866)

3. root.sh 실행시 에러발생하므로 사전 대처

[root@rac1 crs]# /oracle/oraInventory/orainstRoot.sh
Changing permissions of /oracle/oraInventory to 770.
Changing groupname of /oracle/oraInventory to dba.
The execution of the script is complete

[root@rac1 crs]# /oracle/crs/ORCL/root.sh
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
Checking to see if oracle crs stack is already configured
/etc/oracle does not exist. Creating it now.

Setting the permissions on OCR backup directory
Setting up NS directories
Failed to upgrade oracle Cluster Registry configuration

조치방법

cd $crs_HOME/bin

p4679769_10201_Linux-x86-64 을 다운받아 clsfmt.bin 화일을 대체해 준다.

기존 화일은 rename 해주고 해당 화일로 대체한다.

[root@rac1 bin]# chown oracle:dba clsfmt.bin
[root@rac1 bin]# chmod 755 clsfmt.bin

dd 로 ocr, vote 화일을 다시 초기화한다.

root.sh 실행...

[root@rac1 ORCL]# ./root.sh
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
Checking to see if oracle crs stack is already configured

Setting the permissions on OCR backup directory
Setting up NS directories
oracle Cluster Registry configuration upgraded successfully
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
Successfully accumulated necessary OCR keys.
Using ports: CSS=49895 crs=49896 EVMC=49898 and EVMR=49897.
node <nodenumber>: <nodename> <private interconnect name> <hostname>
node 1: rac1 rac1-priv rac1
node 2: rac2 rac2-priv rac2
Creating OCR keys for user 'root', privgrp 'root'..
Operation successful.
Now formatting voting device: /dev/raw/raw1
Now formatting voting device: /dev/raw/raw2
Now formatting voting device: /dev/raw/raw3
Format of 3 voting devices complete.
Startup will be queued to init within 90 seconds.
Adding daemons to inittab
Expecting the crs daemons to be up within 600 seconds.
CSS is active on these nodes.
        rac1
CSS is inactive on these nodes.
        rac2
Local node checking complete.
Run root.sh on remaining nodes to start crs daemons.

3. vip 실행관련 에러 사전작업 (1번에서만 해도 된다)

증상 :

1번은 잘 되나 2번에서 또 에러

[root@rac2 ORCL]# ./root.sh
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
Checking to see if oracle crs stack is already configured
/etc/oracle does not exist. Creating it now.

Setting the permissions on OCR backup directory
Setting up NS directories
oracle Cluster Registry configuration upgraded successfully
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
clscfg: EXISTING configuration version 3 detected.
clscfg: version 3 is 10G Release 2.
Successfully accumulated necessary OCR keys.
Using ports: CSS=49895 crs=49896 EVMC=49898 and EVMR=49897.
node <nodenumber>: <nodename> <private interconnect name> <hostname>
node 1: rac1 rac1-priv rac1
node 2: rac2 rac2-priv rac2
clscfg: Arguments check out successfully.

NO KEYS WERE WRITTEN. Supply -force parameter to override.
-force is destructive and will destroy any previous cluster
configuration.
oracle Cluster Registry for cluster has already been initialized
Startup will be queued to init within 90 seconds.
Adding daemons to inittab
Expecting the crs daemons to be up within 600 seconds.
CSS is active on these nodes.
        rac1
        rac2
CSS is active on all nodes.
Waiting for the oracle crsD and EVMD to start
oracle crs stack installed and running under init(1M)
Running vipca(silent) for configuring nodeapps
/oracle/crs/ORCL/jdk/jre//bin/java: error while loading shared libraries: libpthread.so.0: cannot open shared object file: No such file or directory

일단 continue 눌러서 진행하고 완료한다.

vip가 fail되는 상황이므로 root유저로 수동으로 생성해 줘야된다.. <------- vip 가 생성되야 나머지 resource 들도 생성되므로 지금은 resource가 아무것도 없다.

조치 :

vi
$GRID_HOME/bin/vipca
$GRID_HOME/bin/srvctl

LD_ASSUME_KERNEL 찾아서 해당 부분에

unset LD_ASSUME_KERNEL 를 넣고 반영한다.

다시 root 유저에서 vipca 실행

======================================

후속 패치작업 10.2.0.5

Specify Home Details에 HOME,PATH 넣는 부분은 아래와 같이 수정

Oracrs10g_home
/oracle/crs/ORCL

진행하고 마무리는 각 노드에서

[root@rac1 ~]# /oracle/crs/ORCL/install/root102.sh
Creating pre-patch directory for saving pre-patch clusterware files
Completed patching clusterware files to /oracle/crs/ORCL
Relinking some shared libraries.
Relinking of patched files is complete.
WARNING: directory '/oracle/crs' is not owned by root
WARNING: directory '/oracle' is not owned by root
Preparing to recopy patched init and RC scripts.
Recopying init and RC scripts.
Startup will be queued to init within 30 seconds.
Starting up the crs daemons.
Waiting for the patched crs daemons to start.
  This may take a while on some systems.
.
10205 patch successfully applied.
clscfg: EXISTING configuration version 3 detected.
clscfg: version 3 is 10G Release 2.
Successfully deleted 1 values from OCR.
Successfully deleted 1 keys from OCR.
Successfully accumulated necessary OCR keys.
Using ports: CSS=49895 crs=49896 EVMC=49898 and EVMR=49897.
node <nodenumber>: <nodename> <private interconnect name> <hostname>
node 1: rac1 rac1-priv rac1
Creating OCR keys for user 'root', privgrp 'root'..
Operation successful.
clscfg -upgrade completed successfully
Creating '/oracle/crs/ORCL/install/paramfile.crs' with data used for crs configuration
Setting crs configuration values in /oracle/crs/ORCL/install/paramfile.crs
[root@rac1 ~]#

clsfmt.bin

0.66MB

libXp-1.0.0-8.i386.rpm

0.02MB

p4679769_10201_Linux-x86-64.zip

0.25MB

그리스인 조르바

pat98 — Sat, 1 Aug 2026 13:27:01 +0900

10년 만에 완독한 그리스인 조르바

조르바 = 자유의지, 초인 (hyperanthropos)

AI 투자손실' 헤지펀드 시추에이셔널, 시타델에 자산 매각

pat98 — Sat, 1 Aug 2026 13:20:30 +0900

'AI 투자손실' 헤지펀드 시추에이셔널, 시타델에 자산 매각

SK하이닉스 등 보유…WSJ "AI 업종 조정에 마진콜 직면"

이지헌

입력 : 2026.07.31 06:17:32

프린트 이메일 카카오톡 페이스북 트위터

시추에이셔널 어웨어니스 창립자 애션브레너
[애션브레너 웹블로그 캡쳐.재판매 및 DB 금지]

(뉴욕=연합뉴스) 이지헌 특파원 = 인공지능(AI) 분야 테마 투자로 유명한 헤지펀드 시추에이셔널 어웨어니스(이하 시추에이셔널)가 큰 손실을 본 끝에 보유 주식 포트폴리오 대부분을 헤지펀드 시타델에 매각했다고 미 월스트리트저널(WSJ)이 30일(현지시간) 사안에 정통한 소식통을 인용해 보도했다.

오픈AI 연구원 출신인 리오폴드 애션브레너가 설립한 시추에이셔널은 앤트로픽을 포함한 AI 관련 기업에 대한 선구적 투자로 개인투자자들 사이에서 큰 관심을 받아온 곳이다.

반도체와 인프라, 전력 업체 등 AI 기술 발달로 수혜를 볼 글로벌 주식과 AI 스타트업에 일찌감치 투자해 높은 수익률을 거두면서 명성을 얻었다.

AI 관련주 랠리에 힘입어 시추에이셔널은 설립한 지 불과 2년여 만에 운용자산이 200억 달러를 넘어서기도 했다.

이 펀드는 이달 초 SK하이닉스의 미국주식예탁증서(ADR) 나스닥 상장을 앞두고 대규모 투자자로 참여하기도 했다.

앞서 영국 일간 파이낸셜타임스는 시추에이셔널이 베일리 기포드, 코튜 매니지먼트 등 다른 헤지펀드와 함께 SK하이닉스 ADR 기업공개(IPO)에 최대 70억 달러 규모의 투자 의사를 밝혔다고 보도한 바 있다.

그러나 최근 AI 관련주의 급격한 조정 속에 마진콜(추가 증거금 요구)에 직면했다고 WSJ은 전했다.

WSJ은 시추에이셔널이 투자한 상장주식 중에 SK하이닉스와 샌디스크, 블룸 에너지, 네비우스 등이 포함돼 있다고 소개했다.

소식통들은 시타델이 시추에이셔널의 상장주식 포트폴리오 중 차입금으로 조달된 자산만 인수했고, 투자자 자본으로 조달된 자산은 시추에이셔널이 그대로 보유한다고 전했다.

독일 태생의 애션브레너는 지난 2024년 인공지능의 장래성과 위험에 관한 에세이를 발표한 뒤 AI 분야 인플루언서로 급부상했다.

그는 이 지명도를 이용해 같은 해 샌프란시스코에서 헤지펀드 시추에이셔널을 설립한 바 있다.

어느 개잡주의 17% 상승

pat98 — Fri, 31 Jul 2026 23:46:34 +0900

2026.7.31 (금)

이것은 어느 개잡주의 무빙이 아니라 무려 코스피 지수의 상승률이다.

그만해 이러다 다 죽어!!!!!!!!!!