ããã«ã¡ã¯ïŒãµã€ãªã¹ãã¯ãããžãŒã®è²éã§ãã ä»åã¯ãã·ã³ã°ã«ãµã€ã³ãªã³ãªã©ã®ã¢ã¯ã»ã¹ç®¡çãã§ãããœãããŠã§ã¢ keycloak ãã€ã³ã¹ããŒã«ããã«ãããã詊è¡é¯èª€ãããšããããããŸããã®ã§ãã®å
容ãå
±æããããšæããŸãã ç°å¢æ§æ ä»åã¯ãäžèšã®æ§æã§ keycloak ã®æ§ç¯ãè¡ããŸããã OSïŒRHEL9 (AWS äž) keycloak ã®ããŒãžã§ã³ïŒ2.6.32 Java ã®ããŒãžã§ã³ïŒOpenJDK21 ãŸã㯠keycloak ãããŠã³ããŒã keycloak ã®ããã¥ã¡ã³ã ãåèã«ãã€ã³ã¹ããŒã«ãé²ããŠãããŸãã keycloak ã®åäœã«ã¯ Java ãå¿
èŠãšãªããããäºåã« Java é¢é£ããã±ãŒãž (openjdk ããã³ openjdk-devel) ãã€ã³ã¹ããŒã«ããŠãããŸãã https://www.keycloak.org/downloads ãã keycloak-26.3.2.tar.gz ãããŠã³ããŒãããŸãã ããŠã³ããŒãããããã±ãŒãžããä»»æã®ãã£ã¬ã¯ããªé
äžã«å±éããŸãã # tar -xvf keycloak-26.3.2.tar.gz -C ãã®ãŸãŸèµ·åãããšâŠ ããŠã³ããŒããçµãã£ãã®ã§ãã²ãšãŸã keycloak ãèµ·åããŠã¿ãŸãã ããã¥ã¡ã³ã ã®æé ã«æ²¿ã£ãŠã次㯠bin/kc.sh start-dev ãå®è¡ããŸãã èµ·åã«æåãããšãã³ã³ãœãŒã«ã« Keycloak 26.3.2 on JVM (powered by Quarkus 3.20.2) started in … (以äžçç¥) ãšè¡šç€ºãããŸãã(åºåå
容ã®äžéšãåç
§) Updating the configuration and installing your custom providers, if any. Please wait. 2025-07-31 04:49:28,487 INFO [io.quarkus.deployment.QuarkusAugmentor] (main) Quarkus augmentation completed in 17015ms Running the server in development mode. DO NOT use this configuration in production. 2025-07-31 04:49:40,369 INFO [org.keycloak.quarkus.runtime.storage.database.liquibase.QuarkusJpaUpdaterProvider] (main) Initializing database schema. Using changelog META-INF/jpa-changelog-master.xml 2025-07-31 04:49:48,517 INFO [org.keycloak.spi.infinispan.impl.embedded.JGroupsConfigurator] (main) JGroups JDBC_PING discovery enabled. 2025-07-31 04:49:48,939 INFO [org.infinispan.CONTAINER] (main) ISPN000556: Starting user marshaller 'org.infinispan.commons.marshall.ImmutableProtoStreamMarshaller' 2025-07-31 04:49:49,557 INFO [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: node_221352, Site name: null 2025-07-31 04:49:50,035 INFO [org.keycloak.services] (main) KC-SERVICES0050: Initializing master realm 2025-07-31 04:49:54,460 INFO [io.quarkus] (main) Keycloak 26.3.2 on JVM (powered by Quarkus 3.20.2) started in 25.736s. Listening on: http://0.0.0.0:8080 2025-07-31 04:49:54,461 INFO [io.quarkus] (main) Profile dev activated. 2025-07-31 04:49:54,461 INFO [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-h2, keycloak, narayana-jta, opentelemetry, reactive-routes, rest, rest-jackson, smallrye-context-propagation, vertx] ããã¥ã¡ã³ãã®æé ã§ã¯ãhttp://localhost:8080/ ã«ã¢ã¯ã»ã¹ããŠç®¡çè
ã¢ã«ãŠã³ãã®ãŠãŒã¶åãšãã¹ã¯ãŒããäœæãããã©ãŒã ã«ç§»åããããã§ãããç§ã®ç°å¢ã§ã¯ GUI ç°å¢ããªããããã¯ã©ã€ã¢ã³ã端æ«ãã http://AWS ã€ã³ã¹ã¿ã³ã¹ã®ãã©ã€ããŒã IP:8080/ ã§ã¢ã¯ã»ã¹ãããšãããäžèšã®ç»é¢ã衚瀺ãããŸããã “Local access required” ãšããããšãªã®ã§ãããŒã«ã«ç°å¢ã§ã®ã¢ã¯ã»ã¹ãå¿
èŠãšããããšã§ãã GUI ç°å¢ããªããããç»é¢ã®å
容ã«èšèŒã® use a bootstrap-admin command ãå®è¡ããŠã¿ãããšã«ããŸãã bootstrap-admin ã³ãã³ãã§ç®¡çè
ã¢ã«ãŠã³ããäœæ äžèšã®ããã¥ã¡ã³ãã«ãbootstrap-admin ã³ãã³ãã§ç®¡çè
ã¢ã«ãŠã³ããäœæããæé ããã£ãã®ã§ããã¡ããåèã«ç®¡çè
ã¢ã«ãŠã³ããäœæããŠã¿ãŸãã https://www.keycloak.org/server/bootstrap-admin-recovery äžæçãªç®¡çè
ã¢ã«ãŠã³ãã®äœææ¹æ³ãå«ããããã€ãã®å®è¡äŸãèšèŒãããŠããŸãããããã³ããã«ãŠãŠãŒã¶ã»ãã¹ã¯ãŒããå
¥åãã bin/kc.sh bootstrap-admin user ã³ãã³ããå®è¡ããŸãã äžèšã®ããã³ããã«ããããå
¥åããŸãã Enter usernameïŒç®¡çè
ã®ãŠãŒã¶å Enter passwordïŒç®¡çè
ã®ãã¹ã¯ãŒã Enter password againïŒç®¡çè
ã®ãã¹ã¯ãŒã (åå
¥å) # bin/kc.sh bootstrap-admin user Changes detected in configuration. Updating the server image. Updating the configuration and installing your custom providers, if any. Please wait. 2025-07-31 19:39:29,011 INFO [io.quarkus.deployment.QuarkusAugmentor] (main) Quarkus augmentation completed in 17397ms Server configuration updated and persisted. Run the following command to review the configuration: kc.sh show-config Next time you run the server, just run: kc.sh bootstrap-admin user --optimized Enter username [temp-admin]:admin Enter password: Enter password again: 2025-07-31 04:51:27,697 INFO [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) Starting Infinispan embedded cache manager 2025-07-31 04:51:27,707 INFO [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) JGroups JDBC_PING discovery enabled. 2025-07-31 04:51:28,701 INFO [org.keycloak.quarkus.runtime.storage.infinispan.CacheManagerFactory] (main) JGroups Encryption enabled (mTLS). 2025-07-31 04:51:28,938 INFO [org.infinispan.CONTAINER] (main) Virtual threads support enabled 2025-07-31 04:51:29,244 INFO [org.keycloak.infinispan.module.certificates.CertificateReloadManager] (main) Starting JGroups certificate reload manager 2025-07-31 04:51:29,416 INFO [org.infinispan.CONTAINER] (main) ISPN000556: Starting user marshaller 'org.infinispan.commons.marshall.ImmutableProtoStreamMarshaller' 2025-07-31 04:51:29,784 INFO [org.infinispan.CLUSTER] (main) ISPN000078: Starting JGroups channel `ISPN` with stack `jdbc-ping` 2025-07-31 04:51:29,787 INFO [org.jgroups.JChannel] (main) local_addr: 6c4c0bdf-a3da-4e8e-9d54-38fb7c243e37, name: ip-172-10-10-10-28803 2025-07-31 04:51:29,805 INFO [org.jgroups.protocols.FD_SOCK2] (main) server listening on *:57800 2025-07-31 04:51:29,819 INFO [org.jgroups.protocols.pbcast.GMS] (main) ip-172-10-10-10-28803: no members discovered after 7 ms: creating cluster as coordinator 2025-07-31 04:51:29,865 INFO [org.infinispan.CLUSTER] (main) ISPN000094: Received new cluster view for channel ISPN: [ip-172-10-10-10-28803|0] (1) [ip-172-10-10-10-28803] 2025-07-31 04:51:29,869 INFO [org.keycloak.infinispan.module.certificates.CertificateReloadManager] (main) Reloading JGroups Certificate 2025-07-31 04:51:29,985 INFO [org.infinispan.CLUSTER] (main) ISPN000079: Channel `ISPN` local address is `ip-172-10-10-10-28803`, physical addresses are `[172.10.10.10:7800]` 2025-07-31 04:51:30,719 INFO [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: ip-172-10-10-10-28803, Site name: null 2025-07-31 04:51:32,655 INFO [org.keycloak.services] (main) KC-SERVICES0077: Created temporary admin user with username admin 2025-07-31 04:51:32,674 INFO [io.quarkus] (main) Keycloak 26.3.2 on JVM (powered by Quarkus 3.20.1) started in 63.431s. Listening on: 2025-07-31 04:51:32,674 INFO [io.quarkus] (main) Profile nonserver activated. 2025-07-31 04:51:32,675 INFO [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-h2, keycloak, narayana-jta, opentelemetry, reactive-routes, rest, rest-jackson, smallrye-context-propagation, vertx] 2025-07-31 04:51:32,713 INFO [org.infinispan.CLUSTER] (main) ISPN000080: Disconnecting JGroups channel `ISPN` 2025-07-31 04:51:32,725 INFO [org.keycloak.infinispan.module.certificates.CertificateReloadManager] (main) Stopping JGroups certificate reload manager 2025-07-31 04:51:32,729 INFO [com.arjuna.ats.jbossatx] (main) ARJUNA032014: Stopping transaction recovery manager 2025-07-31 04:51:32,779 INFO [io.quarkus] (main) Keycloak stopped in 0.097s # ããã§ã管çè
ã®ãŠãŒã¶ã»ãã¹ã¯ãŒããèšå®ãããŸããã å床 bin/kc.sh start-dev ãå®è¡ããŠã¿ããšãä»åºŠã¯ãã°ã€ã³ç»é¢ã衚瀺ãããŸããã å
ã»ã©èšå®ãããŠãŒã¶åã»ãã¹ã¯ãŒããå
¥åãããšãç¡äºã«ãã°ã€ã³ããããšãã§ããŸããã ä»åã¯ãkeycloak ãå°å
¥ããã«ããããã€ãŸã¥ãããã€ã³ããã玹ä»ããŸããã ä»åŸãåæ©èœã®èª¬æãäœ¿ãæ¹ãªã©ãã玹ä»ã§ããã°ãšæããŸãã®ã§ãåŒãç¶ããããããé¡ãããŸãïŒ ã芧ããã ãããããšãããããŸãïŒ ãã®æçš¿ã¯ã圹ã«ç«ã¡ãŸãããïŒ åœ¹ã«ç«ã£ã 圹ã«ç«ããªãã£ã 0人ããã®æçš¿ã¯åœ¹ã«ç«ã£ããšèšã£ãŠããŸãã The post keycloak ã€ã³ã¹ããŒã«æã«ã€ãŸããã話 first appeared on SIOS Tech. Lab .