-- https://github.com/oracle/adb-free/pkgs/container/adb-free

dd if=/dev/zero of=/vm/ssd0/ithor/app_02.img bs=1G count=8
dd if=/dev/zero of=/vm/ssd0/ithor/app_03.img bs=1G count=8
virsh domblklist ithor --details
virsh attach-disk ithor /vm/ssd0/ithor/app_03.img vde --driver qemu --subdriver raw --targetbus virtio --persistent
virsh attach-disk ithor /vm/ssd0/ithor/app_02.img vdf --driver qemu --subdriver raw --targetbus virtio --persistent

lsblk 
pvs
pvcreate /dev/vde1
pvcreate /dev/vdf1
vgs
vgextend vgapp /dev/vde1
vgextend vgapp /dev/vdf1
lvs
lvextend -l +100%FREE /dev/vgapp/app
xfs_growfs /app
df -hT

# disable selinux
/etc/selinux/config
SELINUX=disabled

# install podman
dnf install podman.x86_64

# change storage path for pods
/etc/containers/storage.conf

# create a volume to user later for DATAPUMP / persistent storage across containers
podman volume create adb_container_volume

# build pod
podman run -d \
-p 1521:1522 \
-p 1522:1522 \
-p 8443:8443 \
-p 27017:27017 \
-e DATABASE_NAME=ITHOR \
-e WORKLOAD_TYPE=ATP \
-e WALLET_PASSWORD=Remotecontrol1 \
-e ADMIN_PASSWORD=Remotecontrol1 \
--cap-add SYS_ADMIN \
--device /dev/fuse \
--name adb-free \
--volume adb_container_volume:/u01/data \
ghcr.io/oracle/adb-free:latest-23ai

# list pods and logs
podman ps -a
podman logs -f --names adb-free

# generate systemd unit to manage pod startup
podman generate systemd --restart-policy=always -t 1 adb-free > /etc/systemd/system/adb-free.service
systemctl list-unit-files | grep adb

systemctl enable adb-free.service
systemctl stop adb-free.service
systemctl start adb-free.service

# extract certificates from pod
mkdir /app/adb-free
podman cp adb-free:/u01/app/oracle/wallets/tls_wallet /app/adb-free/

# setup SQL*Plus connections from a linux machine
# client 23 required
# from umbara
scp -rp ithor:/app/adb-free/tls_wallet adb-free_tls_wallet
chown -R oracle:oinstall adb-free_tls_wallet

su - oracle
export TNS_ADMIN=/app/oracle/adb-free_tls_wallet
sed -i 's/localhost/ithor.swgalaxy/g' $TNS_ADMIN/tnsnames.ora

sqcl admin/Remotecontrol1@ithor_low_tls
sqcl admin/Remotecontrol1@ithor_low

# create another ADMIN user
-----------------------------------------------------------------
-- USER SQL
CREATE USER LIVESQL IDENTIFIED BY Remotecontrol1;

-- ADD ROLES
GRANT CONNECT TO LIVESQL;
GRANT CONSOLE_DEVELOPER TO LIVESQL;
GRANT GRAPH_DEVELOPER TO LIVESQL;
GRANT RESOURCE TO LIVESQL;
ALTER USER LIVESQL DEFAULT ROLE CONSOLE_DEVELOPER,GRAPH_DEVELOPER;

-- REST ENABLE
BEGIN
    ORDS_ADMIN.ENABLE_SCHEMA(
        p_enabled => TRUE,
        p_schema => 'LIVESQL',
        p_url_mapping_type => 'BASE_PATH',
        p_url_mapping_pattern => 'livesql',
        p_auto_rest_auth=> TRUE
    );
    -- ENABLE DATA SHARING
    C##ADP$SERVICE.DBMS_SHARE.ENABLE_SCHEMA(
            SCHEMA_NAME => 'LIVESQL',
            ENABLED => TRUE
    );
    commit;
END;
/

-- ENABLE GRAPH
ALTER USER LIVESQL GRANT CONNECT THROUGH GRAPH$PROXY_USER;

-- QUOTA
ALTER USER LIVESQL QUOTA UNLIMITED ON DATA;
-----------------------------------------------------------------
-- extra
GRANT PDB_DBA TO LIVESQL;