Proxmox
■アクセス権
インストール時は、ルート権限を多用する。
切り替え時のパスワード入力が面倒なのでパス。
$ sudo visudo
%wheel ALL=(ALL) ALL
%wheel ALL=(ALL) NOPASSWD: ALL$ sudo usermod -aG wheel <ユーザー名>
■ツール インストール
$ sudo dnf groupinstall 'Development Tools'
$ sudo dnf install nano wget rsync unzip tar
$ sudo dnf update
■SELinux
ポリシーは強制されないが、違反があればログに記録する
# nano /etc/selinux/config
SELINUX=permissive# reboot
■公開鍵・秘密鍵
鍵はED25519。
クライアント側
ED25519の公開鍵・秘密鍵ペアを作成する。
サーバーにユーザーアカウントでログイン。
公開鍵をドラッグアンドドロップでコピー。
Image
$ mkdir ~/.ssh
$ chmod 700 ~/.ssh
$ cd ~/.ssh
$ mv ../id_ed25519.pub ./authorized_keys# nano /etc/ssh/sshd_config
PermitRootLogin no
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no# reboot
■スワップ
# dd if=/dev/zero of=/swapfile bs=1M count=4096
# chmod 600 /swapfile
# mkswap /swapfile# swapon /swapfile
# free# cp -p /etc/fstab /etc/fstab.org
# echo "/swapfile none swap sw 0 0" | sudo tee -a /etc/fstab# tail -1 /etc/fstab
/swapfile none swap sw 0 0# reboot
■ファイアウォールのポートを開ける
# systemctl enable firewalld
# systemctl start firewalld# firewall-cmd --add-service={http,https,mysql} --permanent
# firewall-cmd --reload
■Install Nginx Web Server
# dnf install dnf-utils# nano /etc/yum.repos.d/nginx.repo
[nginx-stable]
name=nginx stable repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=1
enabled=1
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true
[nginx-mainline]
name=nginx mainline repo
baseurl=http://nginx.org/packages/mainline/centos/$releasever/$basearch/
gpgcheck=1
enabled=0
gpgkey=https://nginx.org/keys/nginx_signing.key
module_hotfixes=true# dnf install nginx
# systemctl enable nginx
# systemctl start nginx
Image
■Install PHP 8.5
# dnf install -y https://rpms.remirepo.net/enterprise/remi-release-10.rpm
# dnf module reset php -y
# dnf module enable php:remi-8.5 -y# dnf module list php
Remi's Modular repository for Enterprise Linux 10 - x86_64
Name Stream Profiles Summary
php remi-7.4 common [d], devel, minimal PHP scripting language
php remi-8.0 common [d], devel, minimal PHP scripting language
php remi-8.1 common [d], devel, minimal PHP scripting language
php remi-8.2 common [d], devel, minimal PHP scripting language
php remi-8.3 common [d], devel, minimal PHP scripting language
php remi-8.4 common [d], devel, minimal PHP scripting language
php remi-8.5 [e] common [d], devel, minimal PHP scripting language
php remi-8.6 common [d], devel, minimal [e]付きが有効。
■Install Required PHP Extensions
# # dnf install -y php php-fpm php-cli php-common \
php-mysqlnd php-pgsql php-curl php-gd php-mbstring \
php-xml php-zip php-intl php-redis php-opcache \
php-bcmath php-soap php-ldap php-imagick \
php-gd php-pdo# php --version
PHP 8.5.11 (cli) (built: Sep 22 2026 13:32:06) (NTS gcc x86_64)
Copyright (c) The PHP Group
Built by Remi's RPM repository <https://rpms.remirepo.net/> #StandWithUkraine #NoAI
Zend Engine v4.5.11, Copyright (c) Zend Technologies
with Zend OPcache v8.5.11, Copyright (c), by Zend Technologies# systemctl restart nginx
■PHP 設定
memory_limit = 512M
max_execution_time = 300
post_max_size = 64M
upload_max_filesize = 64M# nano /etc/php.d/10-opcache.ini
opcache.memory_consumption = 512# nano /etc/php-fpm.d/www.conf
user = nginx
group = nginx
listen = /run/php-fpm/www.sock
listen.owner = nginx
listen.group = nginx
listen.mode = 0660# systemctl restart php-fpm
# systemctl restart nginx
■PHP 設定確認
# nano /usr/share/nginx/html/info.php
<?php
phpinfo();
?># nano /etc/nginx/conf.d/default.conf
server {
listen 80;
server_name localhost;
#access_log /var/log/nginx/host.access.log main;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
root /usr/share/nginx/html;
fastcgi_pass unix:/run/php-fpm/www.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}# systemctl restart nginx
■Composer
$ php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
$ php composer-setup.php
$ php -r "unlink('composer-setup.php');"
$ sudo mv composer.phar /usr/local/bin/composer
$ composer -v
/ ____/___ ____ ___ ____ ____ ________ _____
/ / / __ \/ __ `__ \/ __ \/ __ \/ ___/ _ \/ ___/
/ /___/ /_/ / / / / / / /_/ / /_/ (__ ) __/ /
\____/\____/_/ /_/ /_/ .___/\____/____/\___/_/
/_/
Composer version 2.10.3 2026-08-27 13:34:23
■Install MariaDB Server
# dnf install mariadb-server mariadb# systemctl enable mariadb
# systemctl start mariadb# systemctl status mariadb
● mariadb.service - MariaDB 10.11 database server
Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled; preset: d
Active: active (running) since Thu 2025-11-06 11:27:54 JST; 18s agomariadb.service: Referenced but unset environment variable evaluates to an empty string: MYSQLD_OPTS, _WSREP_NEW_CLUSTER →気にしない
# mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.
Enter current password for root (enter for none):
OK, successfully used password, moving on...
Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.
You already have your root account protected, so you can safely answer 'n'.
Switch to unix_socket authentication [Y/n] n
Set root password? [Y/n] y
New password:
Re-enter new password:
Password updated successfully!
後の設定はデフォルト
Reloading privilege tables..
... Success!
■Login to MariaDB
# mysql -u root -p
> CREATE DATABASE drupal;
> GRANT ALL PRIVILEGES ON drupal.* TO 'drupal'@'localhost' IDENTIFIED BY '<StrongPassword>';
> GRANT ALL PRIVILEGES ON drupal.* TO 'kanji'@'192.168.1.%' IDENTIFIED BY '<StrongPassword>';
> FLUSH PRIVILEGES;
> EXIT;
StrongPassword: パスワード生成ソフトを使って、ランダムな文字列にする。
■Download and Configure Drupal
# mkdir /usr/share/nginx/html/drupal
# cd /usr/share/nginx/html/drupal# composer create-project drupal/cms
■Set Correct File Permissions
# chown -R nginx:nginx /usr/share/nginx
# chmod -R 755 /usr/share/nginx
■Configure Nginx for Drupal
# nano /etc/nginx/conf.d/drupal.local.conf
server {
root /usr/share/nginx/html/drupal/cms/web;
client_max_body_size 256M;
listen 80;
server_name drupal.local;
location / {
try_files $uri /index.php?$query_string;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html/drupal/cms/web;
}
location ~ \.php$ {
fastcgi_pass unix:/run/php-fpm/www.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}# nginx -t
# systemctl restart nginx
■Access Drupal
# cd /usr/share/nginx/html/drupal/cms/web
# mkdir sites/default/files
# chmod a+w sites/default/files
# chmod a+w sites/default# cp sites/default/default.settings.php sites/default/settings.php
# chmod a+w sites/default/settings.php# setenforce 0# nano /usr/share/nginx/html/drupal/cms/web/sites/default/settings.php
$settings['trusted_host_patterns'] = ['^drupal\.local$',];
最終行に追加 (Esc /)
#
# testing_package_manager
#
$settings['testing_package_manager'] = 'TRUE';
■Chrome 設定 閲覧履歴データを削除
Image
Image
Image
■Composer アップデート
# cd /usr/share/nginx/html/drupal/cms
# composer update
# composer install
■Drupal CMS 起動
忘れずに🔗「日本語」を設定する。
参照しているメディアのソースが見つかりませんので、再埋め込みする必要があります。
Image
□テータベースの構成
データベースのタイプ：MariaDB
データベース名：drupal
データベースのユーザー名：drupal
データベースのパスワード：**********************
■書き込み許可権限をはずす
# chmod go-w sites/default/settings.php
# chmod go-w sites/default■Cockpit
# dnf install cockpit
# systemctl enable --now cockpit.socketポート番号:9090
■Drush
# cd /usr/share/nginx/html/drupal/cms
# composer require --dev drush/drush$ echo 'export PATH="$PATH:/usr/share/nginx/html/drupal/cms/vendor/bin"' >> ~/.bashrc
$ source ~/.bashrc$ drush --version
Drush Commandline Tool 13.8.0.0
■Configure SELinux
# dnf install -y policycoreutils-python-utils# semanage fcontext -a -t httpd_sys_rw_content_t "/usr/share/nginx/html/drupal/cms/web(/.*)?"
# semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/drupal/cms/web/sites/default/settings.php'
# semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/drupal/cms/web/sites/default/files'# restorecon -Rv /usr/share/nginx/html/drupal/cms/web
■SELinux有効
モジュールインストール、アップデート時には
必ず、”見て見ぬふり(permissive)”を設定すること。
# nano /etc/selinux/config
#SELINUX=enforcing
SELINUX=permissive# reboot
■監査検索
# ausearch -m AVC,USER_AVC,SELINUX_ERR,USER_SELINUX_ERR
■モジュール
# cd /usr/share/nginx/html/drupal/cms
# composer require 'drupal/backup_migrate:^5.1'