tcler's blog --- 其实我是一个程序员
Show me your flowcharts and conceal your tables, and I shall continue to be mystified. Show me your tables, and I won’t usually need your flowcharts; they’ll be obvious.

# 原先装的默认的 Ubuntu 不用了，先删除，Powershell 命令:
Remove-Item  -Path  $env:localappdata/lxss/  -Force


# 浏览器下载 Fedora Remix 最新的 appx 包
https://github.com/WhitewaterFoundry/Fedora-Remix-for-WSL/releases/download/1.0.28/DistroLauncher-Appx_1.0.28.0_x64.appx


# 安装 appx 包
# 双击安装，或 Powsershell 命令:
Add-AppPackage DistroLauncher-Appx_1.0.28.0_x64.appx
fedoraremix.exe  # 对就是执行这个命令，不是 bash


# 安装/配置 krb5-workstation
sudo yum install -y krb5-workstation vim
## 注意因为没有 Linux kernel(没有支持keyring机制)，配置 krb5.conf 的时候把 default_ccache_name = KEYRING:persistent:%{uid} 注释掉
: <<COMM
$ cat /etc/krb5.conf
includedir /etc/krb5.conf.d/

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
 default_realm = REDHAT.COM
# default_ccache_name = KEYRING:persistent:%{uid}

[realms]
  REDHAT.COM = {
   kdc = <kdc1>.:88
   kdc = <kdc2>.:88
   kdc = <kdc3>.:88
   admin_server = <admin>.:749
   default_domain = redhat.com
  }

[domain_realm]
 .redhat.com = REDHAT.COM
 redhat.com = REDHAT.COM
COMM

kinit <krb5 id>


# 安装/配置 beaker-client
sudo yum install -y bash-completion.noarch
sudo yum install -y wget
wget https://beaker-project.org/yum/beaker-client-Fedora.repo -O /etc/yum.repos.d/beaker-client-Fedora.repo
sudo yum install -y beaker-client

: <<COMM
$ cat ~/.beaker_client/config
HUB_URL = "https://beaker.engineering.redhat.com"
AUTH_METHOD = "krbv"
USERNAME = "<your krb5 id>"
KRB_REALM = "REDHAT.COM"
COMM

#curl https://<locate>.redhat.com/RH-IT-Root-CA.crt -o /etc/pki/ca-trust/source/anchors/RH-IT-Root-CA.crt
#curl https://<locate>.redhat.com/legacy.crt -o /etc/pki/ca-trust/source/anchors/legacy.crt
update-ca-trust

bkr whoami