$cat /proc/mdstat
Personalities : [raid1] [raid0] [raid6] [raid5] [raid4] [raid10] 
md127 : active (auto-read-only) raid1 sdb1[1] sdc1[0]
      1953382464 blocks super 1.2 [2/2] [UU]
      bitmap: 0/15 pages [0KB], 65536KB chunk

unused devices: <none>

$sudo mdadm --detail /dev/md127
/dev/md127:
           Version : 1.2
     Creation Time : Sun Dec 25 16:25:43 2016
        Raid Level : raid1
        Array Size : 1953382464 (1862.89 GiB 2000.26 GB)
     Used Dev Size : 1953382464 (1862.89 GiB 2000.26 GB)
      Raid Devices : 2
     Total Devices : 2
       Persistence : Superblock is persistent

     Intent Bitmap : Internal

       Update Time : Sun Jul 21 20:53:47 2024
             State : clean 
    Active Devices : 2
   Working Devices : 2
    Failed Devices : 0
     Spare Devices : 0

Consistency Policy : bitmap

              Name : ubuntu:raid  (local to host ubuntu)
              UUID : ffffffff:ffffffff:ffffffff:ffffffff
            Events : 93607

    Number   Major   Minor   RaidDevice State
       0       8       33        0      active sync   /dev/sdc1
       1       8       17        1      active sync   /dev/sdb1

$sudo lvdisplay -C
  LV                VG               Attr       LSize   Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert
  lv_foo            vg_foo           -wi-a----- 500.00g                                                    
  lv_bar            vg_bar           -wi-a----- 500.00g                                                    
    :
    :

$lsblk
NAME                                        MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
loop0                                         7:0    0   1.6G  1 loop  /rofs
loop1                                         7:1    0 457.5M  1 loop  
loop2                                         7:2    0 868.1M  1 loop  
loop3                                         7:3    0     4K  1 loop  /snap/bare/5
loop4                                         7:4    0  74.2M  1 loop  /snap/core22/1380
loop5                                         7:5    0 269.6M  1 loop  /snap/firefox/4173
loop6                                         7:6    0  10.7M  1 loop  /snap/firmware-updater/127
loop7                                         7:7    0 505.1M  1 loop  /snap/gnome-42-2204/176
loop8                                         7:8    0  10.3M  1 loop  /snap/snap-store/1124
loop9                                         7:9    0  91.7M  1 loop  /snap/gtk-common-themes/1535
loop10                                        7:10   0  38.7M  1 loop  /snap/snapd/21465
loop11                                        7:11   0 137.3M  1 loop  /snap/thunderbird/470
loop12                                        7:12   0 116.7M  1 loop  /snap/ubuntu-desktop-bootstrap/171
loop13                                        7:13   0   476K  1 loop  /snap/snapd-desktop-integration/157
loop14                                        7:14   0 116.8M  1 loop  /snap/ubuntu-desktop-bootstrap/231
sda                                           8:0    0 931.5G  0 disk  
├─sda1                                        8:1    0  18.6G  0 part  [SWAP]
├─....
 :
sdd                                           8:48   0 238.5G  0 disk  
├─sdd1                                        8:49   0   5.7G  0 part  /cdrom
├─sdd2                                        8:50   0     5M  0 part  
├─sdd3                                        8:51   0   300K  0 part  
└─sdd4                                        8:52   0 232.8G  0 part  /var/crash
                                                                       /var/log
sde                                           8:64   1   3.8G  0 disk  
└─sde1                                        8:65   1   3.8G  0 part  /media/ubuntu/DCD3-BBD7

$echo 'network: {config: disabled}' | sudo tee /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg

$sudo mv /etc/netplan/50-cloud-init.yaml /etc/netplan/50-cloud-init.yaml.disabled

$sudo nmcli networking off

$nmcli general
STATE   CONNECTIVITY  WIFI-HW  WIFI  WWAN-HW  WWAN 
休止中  なし          missing  有効  missing  有効 

$sudo systemctl enable systemd-networkd
Created symlink /etc/systemd/system/dbus-org.freedesktop.network1.service → /lib/systemd/system/systemd-networkd.service.
Created symlink /etc/systemd/system/multi-user.target.wants/systemd-networkd.service → /lib/systemd/system/systemd-networkd.service.
Created symlink /etc/systemd/system/sockets.target.wants/systemd-networkd.socket → /lib/systemd/system/systemd-networkd.socket.
Created symlink /etc/systemd/system/sysinit.target.wants/systemd-network-generator.service → /lib/systemd/system/systemd-network-generator.service.
Created symlink /etc/systemd/system/network-online.target.wants/systemd-networkd-wait-online.service → /lib/systemd/system/systemd-networkd-wait-online.service.

$networkctl list
IDX LINK            TYPE     OPERATIONAL SETUP     
  1 lo              loopback carrier     unmanaged
  2 enp1s0          ether    enslaved    configured
 13 wlx00005e0053ff wlan     routable    configured

3 links listed.

$networkctl status enp1s0 --no-pager
● 2: enp1s0                                                                              
                     Link File: /run/systemd/network/10-netplan-enp1s0.link
                  Network File: /run/systemd/network/10-netplan-enp1s0.network
                          Type: ether
                         State: enslaved (configured)
                  Online state: online                                                   
                          Path: XXXXXXXXXXXX
                        Driver: XXXXXXXXXXXX
                        Vendor: XXXXXXXXXXXXXXXXXXXX
                         Model: XXXXXXXXXXXXXXXXXXXX
                    HW Address: xx:xx:xx:xx:xx:xx (XXXXXXXXXXXXXXXXXXXX)
                           MTU: 1500 (min: XXXX, max: XXXX)
                         QDisc: fq_codel
  IPv6 Address Generation Mode: none
          Queue Length (Tx/Rx): 1/1
              Auto negotiation: yes
                         Speed: 1Gbps
                        Duplex: full
                          Port: tp
             Activation Policy: up
           Required For Online: yes

$sudo apt purge network-manager

$sudo apt install bridge-utils

network:
  ethernets:
    enp1s0:
      dhcp4: false
      dhcp6: false
      optional: false

network:
  bridges:
    br0:
      interfaces: [enp1s0]
      addresses:
        - 192.168.0.10/24
        - fe80::a/64
      routes:
        - to: default
          via: 192.168.0.1
      nameservers:
        addresses:
          - 192.168.0.1
          - 1.1.1.1
          - 2606:4700:4700::1111
          - 8.8.8.8
          - 2001:4860:4860::8888
      dhcp4: false
      dhcp6: false
      parameters:
        stp: false
        forward-delay: 0

$sudo netplan --debug generate
DEBUG:command generate: running ['/lib/netplan/generate']
** (generate:12145): DEBUG: 00:17:59.399: starting new processing pass
** (generate:12145): DEBUG: 00:17:59.399: br0: adding new route
** (generate:12145): DEBUG: 00:17:59.399: We have some netdefs, pass them through a final round of validation
** (generate:12145): DEBUG: 00:17:59.399: br0: setting default backend to 1
** (generate:12145): DEBUG: 00:17:59.399: Configuration is valid
** (generate:12145): DEBUG: 00:17:59.399: enp1s0: setting default backend to 1
** (generate:12145): DEBUG: 00:17:59.399: Configuration is valid
** (generate:12145): DEBUG: 00:17:59.400: Generating output files..
** (generate:12145): DEBUG: 00:17:59.400: openvswitch: definition enp1s0 is not for us (backend 1)
** (generate:12145): DEBUG: 00:17:59.400: NetworkManager: definition enp1s0 is not for us (backend 1)
** (generate:12145): DEBUG: 00:17:59.400: openvswitch: definition br0 is not for us (backend 1)
** (generate:12145): DEBUG: 00:17:59.400: NetworkManager: definition br0 is not for us (backend 1)

$sudo netplan apply

$networkctl status enp1s0 br0 --no-pager
● 2: enp1s0                     
                   Link File: /usr/lib/systemd/network/99-default.link
                Network File: /run/systemd/network/10-netplan-enp1s0.network
                       State: enslaved (configured)
                Online state: online                                                   
                        Type: ether
                        Path: XXXXXXXXXXXX
                      Driver: XXXXXXXXXXXX
                      Vendor: XXXXXXXXXXXXXXXXXXXX
                       Model: XXXXXXXXXXXXXXXXXXXX
                  HW Address: xx:xx:xx:xx:xx:xx (XXXXXXXXXXXXXXXXXXXX)
                         MTU: 1500 (min: XXXX, max: XXXX)
                       QDisc: pfifo_fast
                      Master: br0
IPv6 Address Generation Mode: none
    Number of Queues (Tx/Rx): 1/1
            Auto negotiation: yes
                       Speed: 1Gbps
                      Duplex: full
                        Port: tp
           Activation Policy: up
         Required For Online: yes

● 3: br0                        
                   Link File: /usr/lib/systemd/network/99-default.link
                Network File: /run/systemd/network/10-netplan-br0.network
                       State: routable (configured)
                Online state: online                                         
                        Type: bridge
                        Kind: bridge
                      Driver: bridge
                  HW Address: xx:xx:xx:xx:xx:xx
                         MTU: 1500 (min: XXXX, max: XXXX)
                       QDisc: noqueue
IPv6 Address Generation Mode: eui64
               Forward Delay: 0
                  Hello Time: 2s
                     Max Age: 20s
                 Ageing Time: 5min
                    Priority: 32768
                         STP: no
      Multicast IGMP Version: 2
                        Cost: 2000
                  Port State: disabled
    Number of Queues (Tx/Rx): 1/1
            Auto negotiation: no
                       Speed: 1Gbps
                     Address: 192.168.0.10
                     Gateway: 192.168.0.1
                         DNS: 192.168.0.1
                              8.8.8.8
           Activation Policy: up
         Required For Online: yes

$ip address show dev enp1s0
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master br0 state UP group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff

$ip address show dev br0 
3: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.10/24 brd 192.168.0.255 scope global br0
       valid_lft forever preferred_lft forever
    inet6 fe80::a/64 scope link 
       valid_lft forever preferred_lft forever

$networkctl list
IDX LINK            TYPE     OPERATIONAL SETUP     
  1 lo              loopback carrier     unmanaged
  2 enp1s0          ether    enslaved    configured
 14 wlx00005e0053ff wlan     routable    configured

3 links listed.

network:
  wifis:
    wlx00005e0053ff:
      # デバイスをオプションとして扱う
      # 必須ではないデバイスとすることにより、起動時にデバイスの設定完了までの待機を行わないようになる
      # WiFiドングルなど起動時に使用できない可能性のあるデバイスや、起動に必須ではないデバイスの場合などには、オプションとする
      optional: true
      access-points:
        "SSID":
          # passwordに設定するパスフレーズは、wpa_passphraseコマンドを使って生成することができる
          password: "XXXXXXXXXXXXXXXXXXXXXX"
      link-local: [ipv4, ipv6]
      dhcp4: true
      dhcp6: false
      routes:
       - to: 192.168.10.0/24
         via: 192.168.10.1

$sudo netplan --debug generate
** (generate:2754562): DEBUG: 21:19:14.230: wlx00005e0053ff: adding wifi AP 'SSID'
** (generate:2754562): DEBUG: 21:19:14.230: wlx00005e0053ff: adding new route
** (generate:2754562): DEBUG: 21:19:14.230: wlx00005e0053ff: setting default backend to 1
** (generate:2754562): DEBUG: 21:19:14.231: Configuration is valid
** (generate:2754562): DEBUG: 21:19:14.231: Generating output files..
** (generate:2754562): DEBUG: 21:19:14.231: Creating wpa_supplicant config
** (generate:2754562): DEBUG: 21:19:14.231: wlx00005e0053ff: Creating wpa_supplicant configuration file run/netplan/wpa-wlx00005e0053ff.conf
** (generate:2754562): DEBUG: 21:19:14.231: Creating wpa_supplicant unit /run/systemd/system/netplan-wpa-wlx00005e0053ff.service
** (generate:2754562): DEBUG: 21:19:14.235: Creating wpa_supplicant service enablement link /run/systemd/system/systemd-networkd.service.wants/netplan-wpa-wlx00005e0053ff.service
** (generate:2754562): DEBUG: 21:19:14.235: Open vSwitch: definition wlx00005e0053ff is not for us (backend 1)
** (generate:2754562): DEBUG: 21:19:14.235: NetworkManager: definition wlx00005e0053ff is not for us (backend 1)


$sudo netplan apply

$networkctl status wlx00005e0053ff --no-pager
● 14: wlx04ab18fd89f2                                                                  
                     Link File: /usr/lib/systemd/network/73-usb-net-by-mac.link
                  Network File: /run/systemd/network/10-netplan-wlx00005e0053ff.network
                          Type: wlan
                         State: routable (configured)
                  Online state: unknown
                          Path: XXXXXXXXXXXX
                        Driver: XXXXXXXXXXXX
                        Vendor: XXXXXXXXXXXXXXXXXXXX
                         Model: XXXXXXXXXXXXXXXXXXXX
                    HW Address: 00:00:5e:00:53:ff
                           MTU: 1500 (min: XXXX, max: XXXX)
                         QDisc: noqueue
  IPv6 Address Generation Mode: eui64
             WiFi access point: SSID (00:00:5e:00:53:01)
          Queue Length (Tx/Rx): 1/1
                       Address: 192.168.10.12 (DHCP4 via 192.168.10.1)
                                fe80::xxxx:xxxx:xxxx:xxxx
                       Gateway: 192.168.10.1
                           DNS: XXX.XXX.XXX.XXX
                                XXX.XXX.XXX.XXX
                           NTP: XXX.XXX.XXX.XXX
             Activation Policy: up
           Required For Online: no
               DHCP4 Client ID: IAID:0xXXXX/DUID
             DHCP6 Client DUID: DUID-EN/Vendor:XXXXXXXXXXXXXXXXXXXXXXXXXXXX

$ip address show dev enp1s0
14: wlx00005e0053ff: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:00:5e:00:53:ff brd ff:ff:ff:ff:ff:ff
    inet 192.168.10.12/22 metric 600 brd 192.168.10.255 scope global dynamic wlx00005e0053ff
       valid_lft 5550sec preferred_lft 5550sec
    inet6 fe80::xxxx:xxxx:xxxx:xxxx/64 scope link 
       valid_lft forever preferred_lft forever

GRUB_DEFAULT=0
GRUB_TIMEOUT_STYLE=menu
GRUB_TIMEOUT=3
GRUB_RECORDFAIL_TIMEOUT=$GRUB_TIMEOUT
GRUB_DISTRIBUTOR=`lsb_release -i -s 2> /dev/null || echo Debian`
GRUB_CMDLINE_LINUX_DEFAULT="noquiet nosplash intel_iommu=on"
GRUB_CMDLINE_LINUX=""

$sudo update-grub2 
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-6.8.0-38-generic
Found initrd image: /boot/initrd.img-6.8.0-38-generic
Found memtest86+x64 image: /memtest86+x64.bin
Warning: os-prober will be executed to detect other bootable partitions.
Its output will be used to detect bootable binaries on them and create new boot entries.
Adding boot menu entry for UEFI Firmware Settings ...
done

vm.swappiness = 10

$cat /proc/sys/vm/swappiness 
60

$sudo sysctl -p
vm.swappiness = 10

$cat /proc/sys/vm/swappiness 
10

$systemctl status systemd-timesyncd
● systemd-timesyncd.service - Network Time Synchronization
     Loaded: loaded (/usr/lib/systemd/system/systemd-timesyncd.service; enabled; preset: enabled)
     Active: active (running) since Mon 2024-07-29 06:39:07 JST; 49min ago
       Docs: man:systemd-timesyncd.service(8)
   Main PID: 1598 (systemd-timesyn)
     Status: "Contacted time server [2620:2d:4000:1::40]:123 (ntp.ubuntu.com)."
      Tasks: 2 (limit: 38066)
     Memory: 1.8M (peak: 2.3M)
        CPU: 80ms
     CGroup: /system.slice/systemd-timesyncd.service
             └─1598 /usr/lib/systemd/systemd-timesyncd

[Time]
NTP=ntp.nict.jp

$sudo systemctl restart systemd-timesyncd.service

$systemctl status systemd-timesyncd
● systemd-timesyncd.service - Network Time Synchronization
     Loaded: loaded (/usr/lib/systemd/system/systemd-timesyncd.service; enabled; preset: enabled)
     Active: active (running) since Mon 2024-07-29 07:31:37 JST; 4s ago
       Docs: man:systemd-timesyncd.service(8)
   Main PID: 25590 (systemd-timesyn)
     Status: "Contacted time server [2001:df0:232:eea0::fff4]:123 (ntp.nict.jp)."
      Tasks: 2 (limit: 38066)
     Memory: 1.4M (peak: 2.1M)
        CPU: 74ms
     CGroup: /system.slice/systemd-timesyncd.service
             └─25590 /usr/lib/systemd/systemd-timesyncd

一般ユーザーのグループ・ユーザーの作成
$sudo groupadd -g 1001 user2
$sudo adduser --ingroup user2 --uid 1001 user2

管理者ユーザーにする場合(sudoグループ・admグループに追加)
$sudo gpasswd -a user2 sudo
$sudo gpasswd -a user2 adm

ホームディレクトリ・ログインシェルを持たないユーザーを作成する場合
$sudo groupadd -g 5000 user3
$sudo adduser --ingroup user3 --uid 5000 --disabled-login --disabled-password --no-create-home --shell /usr/sbin/nologin --gecos "" user3

現在の所属グループを表示する場合
$groups <user>

sudo apt purge \
  aisleriot \
  aspell aspell-en \
  bluez bluez-cups bluez-obexd \
  brltty \
  cups cups-browsed cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-filters* cups-ipp-utils cups-pk-helper cups-server-common foomatic-db-compressed-ppds ipp-usb \
  enchant-2 \
  '^espeak(-.*)?' \
  ftp tnftp \
  gamemode gamemode-daemon \
  gnome-accessibility-themes \
  gnome-calendar gnome-mahjongg gnome-mines gnome-sudoku \
  gnome-online-accounts \
  hplip hplip-data '^printer-driver-.*' \
  modemmanager \
  mythes-en-au mythes-en-us \
  ntfs-3g '^libntfs-.*' \
  nano \
  network-manager \
  openprinting-ppds \
  ppp pptp-linux \
  rygel \
  sane-utils sane-airscan libsane-hpaio \
  simple-scan \
  shotwell '^shotwell-.*' \
  speech-dispatcher speech-dispatcher-audio-plugins \
  system-config-printer-common system-config-printer-udev \
  totem totem-common totem-plugins \
  wamerican wbritish

sudo apt install \
  alsa-utils \
  apt-transport-https \
  build-essential pkgconf libboost-dev \
  brasero \
  bridge-utils \
  clang \
  cmake \
  chromium-browser \
  curl \
  dotnet8 \
  '^fonts-ipafont.*' '^fonts-ipaexfont.*' fonts-monapo fonts-mikachan fonts-wine \
  gedit-plugins \
  gimp \
  git \
  gnome-shell-extension-manager \
  gnome-tweaks \
  gparted \
  gsmartcontrol \
  icedax \
  inkscape \
  liblua5.3-dev liblua5.4-dev \
  libreoffice-calc \
  logwatch \
  lm-sensors \
  mdadm \
  mozc-utils-gui \
  munin-node munin-plugins-core munin-plugins-extra \
  nethogs \
  nginx-extras \
  nkf \
  nodejs \
  partitionmanager \
  php-fpm php-mbstring fcgiwrap \
  postfix \
  samba \
  smartmontools \
  software-properties-common \
  swig \
  synaptic \
  tree \
  ufw \
  virt-manager \
  vlc \
  wine-stable \
  xclip

$curl -sSL -O https://packages.microsoft.com/config/ubuntu/24.04/packages-microsoft-prod.deb
$sudo dpkg -i packages-microsoft-prod.deb
以前に未選択のパッケージ packages-microsoft-prod を選択しています。
(データベースを読み込んでいます ... 現在 122498 個のファイルとディレクトリがインストールされています。)
packages-microsoft-prod.deb を展開する準備をしています ...
packages-microsoft-prod (1.1-ubuntu24.04) を展開しています...
packages-microsoft-prod (1.1-ubuntu24.04) を設定しています ...

$rm packages-microsoft-prod.deb

必要ならパッケージリストを更新する
$sudo apt update

$ls -l /usr/share/keyrings/microsoft-prod.gpg
-rw-r--r-- 1 root root 641  3月 12 07:07 /usr/share/keyrings/microsoft-prod.gpg

Visual Studio Code
$sudo sh -c 'echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/microsoft-prod.gpg] https://packages.microsoft.com/repos/vscode stable main" > /etc/apt/sources.list.d/vscode.list'

Microsoft Edge
$sudo sh -c 'echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/microsoft-prod.gpg] https://packages.microsoft.com/repos/edge stable main" > /etc/apt/sources.list.d/microsoft-edge.list'

PowerShell等を含む、その他のパッケージ
$sudo sh -c 'echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/microsoft-prod.gpg] https://packages.microsoft.com/ubuntu/24.04/prod noble main" > /etc/apt/sources.list.d/microsoft-prod.list'

パッケージリストを更新する
$sudo apt update

Visual Studio Codeのパッケージ情報を表示する
$apt show code

Microsoft Edge (stable)のパッケージ情報を表示する
$apt show microsoft-edge-stable

PowerShellのパッケージ情報を表示する
$apt show powershell

sudo apt install \
  code \
  microsoft-edge-stable \
  powershell

$sudo snap remove hunspell-dictionaries-1-7-2004

$sudo snap install thunderbird

$firefox -p

[Desktop Entry]
Version=1.0
Name=Firefox (user2)
Exec=firefox -P "user2" %u
Type=Application
Terminal=false
Icon=/snap/firefox/current/default256.png

# 「新しいウィンドウを開く」などのアクションを定義する場合は、Actionsキーにアクション名を記述して、
# 対応する名前のセクションにて動作を定義する
# アクションを複数定義する場合は、";"で区切ってアクション名を記述する
Actions=new-window;

[Desktop Action new-window]
Name=新しいウィンドウを開く
Exec=firefox -P "user2" --new-window

$gsettings set org.gnome.nautilus.preferences always-use-location-entry true

postmaster:    root
root: root@mail.example.com
user: user@mail.example.com

$sudo newaliases

$virsh dumpxml guest > guest.xml

$virsh define guest.xml
$virsh list --all

# 以下の行を有効にする
# shutdownではなくsuspendにすると、ゲストをサスペンドさせる動作になる
ON_SHUTDOWN=shutdown

# ゲストのシャットダウンが並行する場合の、最大数を調整する
PARALLEL_SHUTDOWN=10

# ゲストのシャットダウンの最大待機時間を調整する
SHUTDOWN_TIMEOUT=60

$sudo apt install acpid
$sudo systemctl start acpid
$sudo systemctl enable acpid

$sudo dmesg | grep IOMMU
[    0.000000] DMAR: IOMMU enabled

$sudo dmesg | grep libvirt

[  585.002227] audit: type=1400 audit(1486069534.271:84): apparmor="DENIED" operation="open" profile="libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" name="/run/udev/data/c189:1" pid=5275 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=121 ouid=0
[  585.002277] audit: type=1400 audit(1486069534.271:85): apparmor="DENIED" operation="open" profile="libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" name="/run/udev/data/c189:2" pid=5275 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=121 ouid=0
[  585.002322] audit: type=1400 audit(1486069534.271:86): apparmor="DENIED" operation="open" profile="libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" name="/run/udev/data/c189:3" pid=5275 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=121 ouid=0
  :
  :

  # for usb access
  /dev/bus/usb/ rw,
  /etc/udev/udev.conf r,
  /sys/bus/ r,
  /sys/class/ r,

profile libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx {
  #include <abstractions/libvirt-qemu>
  #include <libvirt/libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.files>

  /dev/bus/usb/*/[0-9]* rw,
  /run/udev/** rw,
}

$sudo apparmor_parser -r /etc/apparmor.d/libvirt/libvirt-xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

$sudo apt install php-mbstring

-;extension=mbstring
+extension=mbstring

server {
    :
    :
  location /index.php {
    # デフォルトの設定をincludeする
    include snippets/fastcgi-php.conf;

    # PHP FPMのunix socketのパスを指定する
    fastcgi_pass unix:/var/run/php/php-fpm.sock;
      :
      :
  }
}