在知识库中专注阅读，并随时返回相关工具与课程
原文地址：https://oracle-base.com/articles/21c/dbmscloud-installationhttps://oracle-base.com/articles/21c/dbmscloud-installation 原文作者：Tim Hall 本文介绍如何在本地 19c 和 21c 数据库中安装 DBMSCLOUD 包。 该软件包已安装在 Oracle 云上的数据库
原文地址：https://oracle-base.com/articles/21c/dbms_cloud-installation 原文作者：Tim Hall
本文介绍如何在本地 19c 和 21c 数据库中安装 DBMS_CLOUD 包。 该软件包已安装在 Oracle 云上的数据库中。
@toc
相关文章：
本章目标：掌握本章核心知识点 前置要求：完成前序章节学习 预计时长：60 分钟
本文是此 MOS 文档中的安装完整介绍：
建议始终参考 MOS 安装文档，因为安装过程可能会随着时间的推移而改变。
创建存放安装文件和 SSL 钱包的目录：
1mkdir -p /home/oracle/dbc/commonstore/wallets/ssl创建 /home/oracle/dbc/dbms_cloud_install.sql 文件，内容如下：
1@$ORACLE_HOME/rdbms/admin/sqlsessstart.sql23set verify off4-- you must not change the owner of the functionality to avoid future issues5define username='C##CLOUD$SERVICE'67create user &username no authentication account lock;89REM Grant Common User Privileges10grant INHERIT PRIVILEGES on user &username to sys;11grant INHERIT PRIVILEGES on user sys to &username;12grant RESOURCE, UNLIMITED TABLESPACE, SELECT_CATALOG_ROLE to &username;13grant CREATE ANY TABLE, DROP ANY TABLE, INSERT ANY TABLE, SELECT ANY TABLE,14CREATE ANY CREDENTIAL, CREATE PUBLIC SYNONYM, CREATE PROCEDURE, ALTER SESSION, CREATE JOB to &username;15grant CREATE SESSION, SET CONTAINER to &username;16grant SELECT on SYS.V_$MYSTAT to &username;17grant SELECT on SYS.SERVICE$ to &username;18grant SELECT on SYS.V_$ENCRYPTION_WALLET to &username;19grant read, write on directory DATA_PUMP_DIR to &username;20grant EXECUTE on SYS.DBMS_PRIV_CAPTURE to &username;21grant EXECUTE on SYS.DBMS_PDB_LIB to &username;22grant EXECUTE on SYS.DBMS_CRYPTO to &username;23grant EXECUTE on SYS.DBMS_SYS_ERROR to &username;24grant EXECUTE ON SYS.DBMS_ISCHED to &username;25grant EXECUTE ON SYS.DBMS_PDB_LIB to &username;26grant EXECUTE on SYS.DBMS_PDB to &username;27grant EXECUTE on SYS.DBMS_SERVICE to &username;28grant EXECUTE on SYS.DBMS_PDB to &username;29grant EXECUTE on SYS.CONFIGURE_DV to &username;30grant EXECUTE on SYS.DBMS_SYS_ERROR to &username;31grant EXECUTE on SYS.DBMS_CREDENTIAL to &username;32grant EXECUTE on SYS.DBMS_RANDOM to &username;33grant EXECUTE on SYS.DBMS_SYS_SQL to &username;34grant EXECUTE on SYS.DBMS_LOCK to &username;35grant EXECUTE on SYS.DBMS_AQADM to &username;36grant EXECUTE on SYS.DBMS_AQ to &username;37grant EXECUTE on SYS.DBMS_SYSTEM to &username;38grant EXECUTE on SYS.SCHED$_LOG_ON_ERRORS_CLASS to &username;39grant SELECT on SYS.DBA_DATA_FILES to &username;40grant SELECT on SYS.DBA_EXTENTS to &username;41grant SELECT on SYS.DBA_CREDENTIALS to &username;42grant SELECT on SYS.AUDIT_UNIFIED_ENABLED_POLICIES to &username;43grant SELECT on SYS.DBA_ROLES to &username;44grant SELECT on SYS.V_$ENCRYPTION_KEYS to &username;45grant SELECT on SYS.DBA_DIRECTORIES to &username;46grant SELECT on SYS.DBA_USERS to &username;47grant SELECT on SYS.DBA_OBJECTS to &username;48grant SELECT on SYS.V_$PDBS to &username;49grant SELECT on SYS.V_$SESSION to &username;50grant SELECT on SYS.GV_$SESSION to &username;51grant SELECT on SYS.DBA_REGISTRY to &username;52grant SELECT on SYS.DBA_DV_STATUS to &username;5354alter session set current_schema=&username;55REM Create the Catalog objects56@$ORACLE_HOME/rdbms/admin/dbms_cloud_task_catalog.sql57@$ORACLE_HOME/rdbms/admin/dbms_cloud_task_views.sql58@$ORACLE_HOME/rdbms/admin/dbms_cloud_catalog.sql59@$ORACLE_HOME/rdbms/admin/dbms_cloud_types.sql6061REM Create the Package Spec62@$ORACLE_HOME/rdbms/admin/prvt_cloud_core.plb63@$ORACLE_HOME/rdbms/admin/prvt_cloud_task.plb64@$ORACLE_HOME/rdbms/admin/dbms_cloud_capability.sql65@$ORACLE_HOME/rdbms/admin/prvt_cloud_request.plb66@$ORACLE_HOME/rdbms/admin/prvt_cloud_internal.plb67@$ORACLE_HOME/rdbms/admin/dbms_cloud.sql68@$ORACLE_HOME/rdbms/admin/prvt_cloud_admin_int.plb6970REM Create the Package Body71@$ORACLE_HOME/rdbms/admin/prvt_cloud_core_body.plb72@$ORACLE_HOME/rdbms/admin/prvt_cloud_task_body.plb73@$ORACLE_HOME/rdbms/admin/prvt_cloud_capability_body.plb74@$ORACLE_HOME/rdbms/admin/prvt_cloud_request_body.plb75@$ORACLE_HOME/rdbms/admin/prvt_cloud_internal_body.plb76@$ORACLE_HOME/rdbms/admin/prvt_cloud_body.plb77@$ORACLE_HOME/rdbms/admin/prvt_cloud_admin_int_body.plb7879-- Create the metadata80@$ORACLE_HOME/rdbms/admin/dbms_cloud_metadata.sql8182alter session set current_schema=sys;8384@$ORACLE_HOME/rdbms/admin/sqlsessend.sql📢 注意： 在所有的容器运行脚本，包括种子。这样新创建的容器将会包含 DBMS_CLOUD 包，无需再次安装！
1$ORACLE_HOME/perl/bin/perl $ORACLE_HOME/rdbms/admin/catcon.pl \2 -u sys/SysPassword1 \3 --force_pdb_mode 'READ WRITE' \4 -b dbms_cloud_install \5 -d /home/oracle/dbc \6 -l /home/oracle/dbc \7 dbms_cloud_install.sql命令完成后检查日志文件，以确保它已在所有容器中运行。
创建一个钱包以允许 HTTPS 访问云 URI！
从 MOS 说明中提供的链接下载 dbc_certs.tar 文件，并将其上传至 /tmp，解压到 /home/oracle/dbc/commonstore/wallets/ssl 目录下。
1mkdir -p /home/oracle/dbc/commonstore/wallets/ssl2cd /home/oracle/dbc/commonstore/wallets/ssl3tar -xvf /tmp/dbc_certs.tar创建钱包并加载证书，我们正在使用钱包密码 MyPassword1，建议设置一个更加安全的密码。
1orapki wallet create -wallet . -pwd MyPassword1 -auto_login2orapki wallet add -wallet . -trusted_cert -cert ./VeriSign.cer -pwd MyPassword13orapki wallet add -wallet . -trusted_cert -cert ./BaltimoreCyberTrust.cer -pwd MyPassword14orapki wallet add -wallet . -trusted_cert -cert ./DigiCert.cer -pwd MyPassword1编辑 sqlnet.ora 文件，添加以下内容来识别钱包。
1WALLET_LOCATION=2 (SOURCE=(METHOD=FILE)(METHOD_DATA=3 (DIRECTORY=/home/oracle/dbc/commonstore/wallets/ssl)))对于只读 Oracle 主目录，sqlnet 文件存放在/u01/app/oracle/homes/OraDB21Home1/network/admin 目录下， 对于常规的 Oracle 主目录，存放在 $ORACLE_HOME/network/admin/ 目录下。
我们需要创建一个访问控制条目 (ACE)，以便 C##CLOUD$SERVICE 用户可以访问云服务。
创建一个 /home/oracle/dbc/dbc_aces.sql 文件，内容如下，如果需要修改位置，请编辑 sslwalletdir 设置。
1@$ORACLE_HOME/rdbms/admin/sqlsessstart.sql23-- you must not change the owner of the functionality to avoid future issues4define clouduser=C##CLOUD$SERVICE56-- CUSTOMER SPECIFIC SETUP, NEEDS TO BE PROVIDED BY THE CUSTOMER7-- - SSL Wallet directory8define sslwalletdir=/home/oracle/dbc/commonstore/wallets/ssl910--11-- UNCOMMENT AND SET THE PROXY SETTINGS VARIABLES IF YOUR ENVIRONMENT NEEDS PROXYS12--13-- define proxy_uri=<your proxy URI address>14-- define proxy_host=<your proxy DNS name>15-- define proxy_low_port=<your_proxy_low_port>16-- define proxy_high_port=<your_proxy_high_port>1718-- Create New ACL / ACE s19begin20-- Allow all hosts for HTTP/HTTP_PROXY21dbms_network_acl_admin.append_host_ace(22host =>'*',23lower_port => 443,24upper_port => 443,25ace => xs$ace_type(26privilege_list => xs$name_list('http', 'http_proxy'),27principal_name => upper('&clouduser'),28principal_type => xs_acl.ptype_db));29--30-- UNCOMMENT THE PROXY SETTINGS SECTION IF YOUR ENVIRONMENT NEEDS PROXYS31--32-- Allow Proxy for HTTP/HTTP_PROXY33-- dbms_network_acl_admin.append_host_ace(34-- host =>'&proxy_host',35-- lower_port => &proxy_low_port,36-- upper_port => &proxy_high_port,37-- ace => xs$ace_type(38-- privilege_list => xs$name_list('http', 'http_proxy'),39-- principal_name => upper('&clouduser'),40-- principal_type => xs_acl.ptype_db));41--42-- END PROXY SECTION43--4445-- Allow wallet access46dbms_network_acl_admin.append_wallet_ace(47wallet_path => 'file:&sslwalletdir',48ace => xs$ace_type(privilege_list =>49xs$name_list('use_client_certificates', 'use_passwords'),50principal_name => upper('&clouduser'),51principal_type => xs_acl.ptype_db));52end;53/5455-- Setting SSL_WALLET database property56begin57-- comment out the IF block when installed in non-CDB environments58if sys_context('userenv', 'con_name') = 'CDB$ROOT' then59execute immediate 'alter database property set ssl_wallet=''&sslwalletdir''';60--61-- UNCOMMENT THE FOLLOWING COMMAND IF YOU ARE USING A PROXY62--63-- execute immediate 'alter database property set http_proxy=''&proxy_uri''';64end if;65end;66/6768@$ORACLE_HOME/rdbms/admin/sqlsessend.sql在根容器中运行脚本：
1conn / as sysdba2@@/home/oracle/dbc/dbc_aces.sql创建文件 /home/oracle/dbc/verify.sql，内容如下，根据需要编辑钱包路径和密码。
1-- you must not change the owner of the functionality to avoid future issues2define clouduser=C##CLOUD$SERVICE34-- CUSTOMER SPECIFIC SETUP, NEEDS TO BE PROVIDED BY THE CUSTOMER5-- - SSL Wallet directory and password6define sslwalletdir=/home/oracle/dbc/commonstore/wallets/ssl7define sslwalletpwd=MyPassword189-- create and run this procedure as owner of the ACLs, which is the future owner10-- of DBMS_CLOUD11CREATE OR REPLACE PROCEDURE &clouduser..GET_PAGE(url IN VARCHAR2) AS12request_context UTL_HTTP.REQUEST_CONTEXT_KEY;13req UTL_HTTP.REQ;14resp UTL_HTTP.RESP;15data VARCHAR2(32767) default null;16err_num NUMBER default 0;17err_msg VARCHAR2(4000) default null;1819BEGIN2021-- Create a request context with its wallet and cookie table22request_context := UTL_HTTP.CREATE_REQUEST_CONTEXT(23wallet_path => 'file:&sslwalletdir',24wallet_password => '&sslwalletpwd');2526-- Make a HTTP request using the private wallet and cookie27-- table in the request context28req := UTL_HTTP.BEGIN_REQUEST(29url => url,30request_context => request_context);3132resp := UTL_HTTP.GET_RESPONSE(req);3334DBMS_OUTPUT.PUT_LINE('valid response');3536EXCEPTION37WHEN OTHERS THEN38err_num := SQLCODE;39err_msg := SUBSTR(SQLERRM, 1, 3800);40DBMS_OUTPUT.PUT_LINE('possibly raised PLSQL/SQL error: ' ||err_num||' - '||err_msg);4142UTL_HTTP.END_RESPONSE(resp);43data := UTL_HTTP.GET_DETAILED_SQLERRM ;44IF data IS NOT NULL THEN45DBMS_OUTPUT.PUT_LINE('possibly raised HTML error: ' ||data);46END IF;47END;48/49set serveroutput on50BEGIN51&clouduser..GET_PAGE('https://objectstorage.eu-frankfurt-1.oraclecloud.com');52END;53/5455set serveroutput off56drop procedure &clouduser..GET_PAGE;运行该脚本后，应该生成提示 valid response。
1conn / as sysdba2@/home/oracle/dbc/verify.sql本文的这一部分假设您在 Oracle Cloud 上有一个对象存储 Bucket，并且您已经定义了一个 Auth Token 来访问它。 您可以在本文中阅读如何创建存储 Bucket 和身份验证令牌。
创建一个测试用户：
1conn sys/SysPassword1@//localhost:1521/pdb1 as sysdba23--drop user testuser1 cascade;4create user testuser1 identified by testuser1 quota unlimited on users;5grant connect, resource to testuser1;确保测试用户可以创建凭据并有权访问 DBMS_CLOUD 包：
1grant create credential to testuser1;2grant execute on dbms_cloud to testuser1;连接到测试用户并创建凭证：
1conn testuser1/testuser1@//localhost:1521/pdb123begin4 dbms_credential.drop_credential(5 credential_name => 'obj_store_cred');6end;7/89begin10 dbms_credential.create_credential(11 credential_name => 'obj_store_cred',12 username => 'me@example.com',13 password => 'my-auth-token');14end;15/我们现在可以使用 LIST_OBJECTS 表函数来获取存储桶中的对象列表：
1select object_name2from dbms_cloud.list_objects(3 'obj_store_cred',4 'https://objectstorage.uk-london-1.oraclecloud.com/n/{my-namespace}/b/ob-bucket/o/');5OBJECT_NAME6--------------------------------------------------------------------------------7Image 930.png89SQL>有关更多信息，请参考：