更新: 2026年1月29日
Oracle REST Data Services 25.4を使ってCustomer Managed ORDSを構成します。
以下が前提条件になります。
- Autonomous Databaseが作成済み。
- コンピュート・インスタンスが作成済み。
- インスタンス・ウォレットをコンピュート・インスタンスにアップロード済み（/tmp/Wallet_APEX.zipにアップロード済みとします）。
- 仮想クラウド・ネットワークが構成済み。
- コンピュート・インスタンスがパブリック・ネットワークに配置され、パブリックIPアドレスが割り当てられている。
- パブリック・ネットワークのイングレス・ルールとしてポート80と443の通信が許可されている。
Deploy Oracle REST Data Services with high availability on Oracle Cloud Infrastructure
firewalldの構成
[opc@cmords-arm ~]$ sudo -s
[root@cmords-arm opc]#
firewall-cmd --add-forward-port=port=443:proto=tcp:toport=8443
firewall-cmd --runtime-to-permanent
firewall-cmd --reload
firewall-cmd --list-all
[root@cmords-arm opc]# firewall-cmd --add-service=https
success
[root@cmords-arm opc]# firewall-cmd --add-forward-port=port=443:proto=tcp:toport=8443
success
[root@cmords-arm opc]# firewall-cmd --runtime-to-permanent
success
[root@cmords-arm opc]# firewall-cmd --reload
success
[root@cmords-arm opc]# firewall-cmd --list-all
public (default, active)
target: default
ingress-priority: 0
egress-priority: 0
icmp-block-inversion: no
interfaces: enp0s6
sources:
services: dhcpv6-client https ssh
ports:
protocols:
forward: yes
masquerade: no
forward-ports:
port=443:proto=tcp:toport=8443:toaddr=
source-ports:
icmp-blocks:
rich rules:
[root@cmords-arm opc]#
Java Development Kitのインストール
JDK 21をインストールします。Oracle Cloudのコンピュート・インスタンスにはあらかじめJDK-21を含むリポジトリが登録済み（Intel、ARMともに）です。以下のコマンドを実行すると、JDK-21のインストールは完了します。
dnf -y install jdk-21-headless[root@cmords-arm opc]# dnf -y install jdk-21-headless
Last metadata expiration check: 0:01:50 ago on Thu 29 Jan 2026 06:27:23 AM GMT.
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
jdk-21-headless aarch64 2000:21.0.10-8.el10 ol10_oci_included 63 M
Installing dependencies:
alsa-lib aarch64 1.2.14-1.el10 ol10_appstream 592 k
Transaction Summary
================================================================================
Install 2 Packages
Total size: 64 M
Installed size: 195 M
Downloading Packages:
[SKIPPED] jdk-21-headless-21.0.10-8.el10.aarch64.rpm: Already downloaded
[SKIPPED] alsa-lib-1.2.14-1.el10.aarch64.rpm: Already downloaded
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : alsa-lib-1.2.14-1.el10.aarch64 1/2
Installing : jdk-21-headless-2000:21.0.10-8.el10.aarch64 2/2
Running scriptlet: jdk-21-headless-2000:21.0.10-8.el10.aarch64 2/2
Installed:
alsa-lib-1.2.14-1.el10.aarch64 jdk-21-headless-2000:21.0.10-8.el10.aarch64
Complete!
[root@cmords-arm opc]# インストールされたJavaのバージョンを確認します。
java -version
[root@cmords-arm opc]# java -version
java version "21.0.10" 2026-01-20 LTS
Java(TM) SE Runtime Environment (build 21.0.10+8-LTS-217)
Java HotSpot(TM) 64-Bit Server VM (build 21.0.10+8-LTS-217, mixed mode, sharing)
[root@cmords-arm opc]#
バージョンが21であればJDKのインストールは完了です。
Oracle REST Data ServicesとSQLclのインストール
Oracle Cloudのコンピュート・インスタンスでは、ORDSおよびSQLclを含んだYumリポジトリがデフォルトで構成されています。Oracle Linux 10では、ol10_oci_includedです。Oracle Linux 8、Oracle Linux 9でも同様に、Yumリポジトリが構成されています。
ORDSとSQLclをインストールします。
dnf -y install ords sqlcl[root@cmords-arm opc]# dnf -y install ords sqlcl
Last metadata expiration check: 0:05:01 ago on Thu 29 Jan 2026 06:27:23 AM GMT.
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Installing:
ords noarch 25.4.0-7.el10 ol10_oci_included 179 M
sqlcl noarch 25.4.1-2.el10 ol10_oci_included 95 M
Installing dependencies:
lsof aarch64 4.98.0-7.el10 ol10_baseos_latest 238 k
Transaction Summary
================================================================================
Install 3 Packages
Total download size: 274 M
Installed size: 292 M
Downloading Packages:
(1/3): lsof-4.98.0-7.el10.aarch64.rpm 5.6 MB/s | 238 kB 00:00
(2/3): sqlcl-25.4.1-2.el10.noarch.rpm 40 MB/s | 95 MB 00:02
(3/3): ords-25.4.0-7.el10.noarch.rpm 32 MB/s | 179 MB 00:05
--------------------------------------------------------------------------------
Total 49 MB/s | 274 MB 00:05
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : lsof-4.98.0-7.el10.aarch64 1/3
Running scriptlet: ords-25.4.0-7.el10.noarch 2/3
Installing : ords-25.4.0-7.el10.noarch 2/3
Running scriptlet: ords-25.4.0-7.el10.noarch 2/3
WARN: ORDS requires Java 17.
You can install Oracle Java at https://www.oracle.com/java/technologies/downloads/#java17.
INFO: Before starting ORDS service, run the below command as user oracle:
ords --config /etc/ords/config install
INFO: To enable the ORDS service during startup, run the below command:
sudo systemctl enable ords
Running scriptlet: sqlcl-25.4.1-2.el10.noarch 3/3
Installing : sqlcl-25.4.1-2.el10.noarch 3/3
Running scriptlet: sqlcl-25.4.1-2.el10.noarch 3/3
Running scriptlet: ords-25.4.0-7.el10.noarch 3/3
Running scriptlet: sqlcl-25.4.1-2.el10.noarch 3/3
Installed:
lsof-4.98.0-7.el10.aarch64 ords-25.4.0-7.el10.noarch
sqlcl-25.4.1-2.el10.noarch
Complete!
[root@cmords-arm opc]#
ORDSとSQLclは、以下のYumリポジトリにも含まれます。カスタム・イメージやOracle Linux以外のRHEL互換ディストリビューションで利用できます。
https://yum.oracle.com/repo/OracleLinux/OL10/oracle/software/aarch64/
https://yum.oracle.com/repo/OracleLinux/OL10/oracle/software/x86_64/
https://yum.oracle.com/repo/OracleLinux/OL9/oracle/software/aarch64/
https://yum.oracle.com/repo/OracleLinux/OL9/oracle/software/x86_64/
https://yum.oracle.com/repo/OracleLinux/OL8/oracle/software/aarch64/
https://yum.oracle.com/repo/OracleLinux/OL8/oracle/software/x86_64/
ORDSをRPMからインストールすると、ユーザーoracleも同時に作成されます。
CDNの設定
su - oracle
[root@cmords-arm opc]# su - oracle
[oracle@cmords-arm ~]$
[oracle@cmords-arm ~]$ cp /tmp/Wallet_APEX.zip $HOME
[oracle@cmords-arm ~]$
[oracle@cmords-arm ~]$ sql -cloudconfig Wallet_APEX.zip admin@apex_low
SQLcl: Release 25.4 Production on Thu Jan 29 06:50:34 2026
Copyright (c) 1982, 2026, Oracle. All rights reserved.
Password? (**********?) **************
Last Successful login time: Thu Jan 29 2026 06:50:44 +00:00
Connected to:
Oracle AI Database 26ai Enterprise Edition Release 23.26.0.1.0 - for Oracle Cloud and Engineered Systems
Version 23.26.0.1.0
SQL>
SQL> set serveroutput on
SQL> exec dbms_output.put_line(apex_instance_admin.get_parameter('IMAGE_PREFIX'));
/i/24.2.11/
PL/SQL procedure successfully completed.
SQL>
SQL> exec apex_instance_admin.set_parameter('IMAGE_PREFIX','https://static.oracle.com/cdn/apex/24.2.11/');
PL/SQL procedure successfully completed.
SQL>
SQL> exec dbms_output.put_line(apex_instance_admin.get_parameter('IMAGE_PREFIX'));
https://static.oracle.com/cdn/apex/24.2.11/
PL/SQL procedure successfully completed.
SQL>
Oracle REST Data Servicesの構成
cd /etc/ords/config
[oracle@cmords-arm ~]$ cd /etc/ords/config
[oracle@cmords-arm config]$
ords --config /etc/ords/config install adb --interactive --prompt-password
[oracle@cmords-arm config]$ ords --config /etc/ords/config install adb --interactive --prompt-password
ORDS: Release 25.4 Production on Thu Jan 29 07:10:01 2026
Copyright (c) 2010, 2026, Oracle.
Configuration:
/etc/ords/config
The configuration folder /etc/ords/config does not contain any configuration files.
Oracle REST Data Services - Interactive Customer Managed ORDS for Autonomous Database
Enter the Autonomous Database Wallet path: /home/oracle/Wallet_APEX.zip
Enter a number to select the TNS Network alias to use
[1] APEX_LOW SERVICE_NAME=p36dah33ehxmnrf_apex_low.adb.oraclecloud.com
[2] APEX_MEDIUM SERVICE_NAME=p36dah33ehxmnrf_apex_medium.adb.oraclecloud.com
[3] APEX_HIGH SERVICE_NAME=p36dah33ehxmnrf_apex_high.adb.oraclecloud.com
[4] APEX_TP SERVICE_NAME=p36dah33ehxmnrf_apex_tp.adb.oraclecloud.com
[5] APEX_TPURGENT SERVICE_NAME=p36dah33ehxmnrf_apex_tpurgent.adb.oracleclou...
Choose [1]:
Provide database user name with administrator privileges.
Enter the administrator username [ADMIN]:
Enter the database password for ADMIN: ********
Connecting to Autonomous database user: ADMIN TNS Service: APEX_LOW
Enter the ORDS runtime database username [ORDS_PUBLIC_USER2]:
Enter the database password for ORDS_PUBLIC_USER2: ********
Confirm password: ********
Enter the PL/SQL Gateway database username: ORDS_PLSQL_GATEWAY2
Enter the database password for ORDS_PLSQL_GATEWAY2: ********
Confirm password: ********
Retrieving information
Enter a number to select additional feature(s) to enable:
[1] Database Actions (Enables all features)
[2] REST Enabled SQL and Database API
[3] REST Enabled SQL
[4] Database API
[5] None
Choose [1]: 3
Enter a number to configure and start ORDS in standalone mode
[1] Configure and start ORDS in standalone mode
[2] Skip
Choose [1]:
Enter a number to select the protocol
[1] HTTP
[2] HTTPS
Choose [1]: 2
Enter the HTTPS port [8443]:
Enter a number to select the certificate type
[1] Use self-signed certificate (generates automatically)
[2] Use my SSL certificate (requires SSL certificate and SSL certificate private key)
Choose [1]:
Enter the SSL hostname: apex.example.com
The setting named: db.wallet.zip.path was set to: /home/oracle/Wallet_APEX.zip in configuration: default
The setting named: db.wallet.zip.service was set to: APEX_LOW in configuration: default
The setting named: db.username was set to: ORDS_PUBLIC_USER2 in configuration: default
The setting named: db.password was set to: ****** in configuration: default
The setting named: plsql.gateway.mode was set to: proxied in configuration: default
The setting named: feature.sdw was set to: false in configuration: default
The setting named: restEnabledSql.active was set to: true in configuration: default
The setting named: security.requestValidationFunction was set to: ords_util.authorize_plsql_gateway in configuration: default
The global setting named: standalone.https.port was set to: 8443
The global setting named: standalone.https.host was set to: apex.example.com
The global setting named: standalone.context.path was set to: /ords
The global setting named: standalone.doc.root was set to: /etc/ords/config/global/doc_root
2026-01-29T07:14:45.538Z INFO Created folder /etc/ords/config/logs
2026-01-29T07:14:45.540Z INFO The log file is defaulted to the current working directory located at /etc/ords/config/logs
2026-01-29T07:14:45.878Z INFO Connecting to Autonomous database user: ADMIN TNS Service: APEX_LOW
2026-01-29T07:14:49.365Z INFO ... Verifying Autonomous Database runtime user
2026-01-29T07:14:51.201Z INFO ... Verifying Autonomous Database gateway user
2026-01-29T07:14:51.208Z INFO Completed configuring for Customer Managed Oracle REST Data Services version 25.4.0.r3641739. Elapsed time: 00:00:05.328
2026-01-29T07:14:51.210Z INFO Log file written to /etc/ords/config/logs/ords_adb_2026-01-29_071445_54160.log
2026-01-29T07:14:54.636Z INFO HTTP and HTTP/2 cleartext listening on host: 0.0.0.0 port: 8080
2026-01-29T07:14:54.637Z INFO HTTPS listening on host: 0.0.0.0 port: 8443
2026-01-29T07:14:54.686Z INFO Disabling document root because the specified folder does not exist: /etc/ords/config/global/doc_root
2026-01-29T07:14:54.687Z INFO Default forwarding from / to contextRoot configured.
2026-01-29T07:14:58.808Z INFO Configuration properties for: |default|lo|
db.username=ORDS_PUBLIC_USER2
db.wallet.zip.path=/home/oracle/Wallet_APEX.zip
db.wallet.zip.service=APEX_LOW
feature.sdw=false
plsql.gateway.mode=proxied
restEnabledSql.active=true
security.requestValidationFunction=ords_util.authorize_plsql_gateway
standalone.context.path=/ords
standalone.doc.root=/etc/ords/config/global/doc_root
standalone.https.host=apex.example.com
standalone.https.port=8443
config.required=true
db.password=******
conf.use.wallet=true
2026-01-29T07:14:58.873Z WARNING *** jdbc.MaxLimit in configuration |default|lo| is using a value of 10, this setting may not be sized adequately for a production environment ***
2026-01-29T07:14:59.714Z INFO Created Pool: |default|lo|-2026-01-29T07-14-58.427332062Z at: 2026-01-29T07:14:58.427332062Z
2026-01-29T07:14:59.936Z INFO
Mapped local pools from /etc/ords/config/databases:
/ords/ => default => VALID
2026-01-29T07:14:59.959Z INFO Oracle REST Data Services initialized
Oracle REST Data Services version : 25.4.0.r3641739
Oracle REST Data Services server info: jetty/12.0.25
Oracle REST Data Services java info: Java HotSpot(TM) 64-Bit Server VM (build 21.0.10+8-LTS-217 mixed mode, sharing)
ORDSの自動起動の設定
Mapped local pools from /etc/ords/config/databases:
/ords/ => default => VALID
2026-01-29T07:14:59.959Z INFO Oracle REST Data Services initialized
Oracle REST Data Services version : 25.4.0.r3641739
Oracle REST Data Services server info: jetty/12.0.25
Oracle REST Data Services java info: Java HotSpot(TM) 64-Bit Server VM (build 21.0.10+8-LTS-217 mixed mode, sharing)
^C[oracle@cmords-arm config]$
systemctl start ords
[oracle@cmords-arm config]$ exit
logout
[root@cmords-arm opc]# systemctl enable ords
Synchronizing state of ords.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable ords
Created symlink '/etc/systemd/system/multi-user.target.wants/ords.service' → '/etc/systemd/system/ords.service'.
Created symlink '/etc/systemd/system/graphical.target.wants/ords.service' → '/etc/systemd/system/ords.service'.
[root@cmords-arm opc]# systemctl start ords
[root@cmords-arm opc]#
[opc@cmords-arm ~]$ rm /tmp/Wallet_APEX.zip
[opc@cmords-arm ~]$
PL/SQL Gateway Userについて
connect ords_public_user2[ords_plsql_gateway2]/[ords_public_user2のパスワード]@apex_low
実際にAutonomous Databaseに標準で作成されているユーザーORDS_PLSQL_GATEWAYのAUTHENTICATION_TYPEはPASSWORDではなくNONEになっており、パスワードは設定されていません。
