360 likes | 372 Views
Creating ODP regional node from scratch. Alexander Kolesnikov RIHMI-WDC , Russia. Pre-installation process. Unpack the VM images on your computer Make a connection to the ESXi host using Vsphere client Transfer VM-images to the server storage Add virtual machine to ESXi inventory.
E N D
Creating ODP regional node from scratch Alexander Kolesnikov RIHMI-WDC, Russia
Pre-installation process • Unpack the VM images on your computer • Make a connection to the ESXi host using Vsphere client • Transfer VM-images to the server storage • Add virtual machine to ESXi inventory
Pre-installation process Open the tabConfiguration -> Storage,then open your datastorage
Pre-installation process • Click the icon for downloading files to the storage and select ‘Upload Folder’ • Next, select the folder which contains VM image and press OK • Wait until the folder will be loaded into the storage
Pre-installation process • After that open the folder and upload the VM into the ESXi host inventory
Specification of ODP node virtual machines (for 16GB RAM server)
Basic requirements to installCentOS • System localization - UTF-8.en_EN • Time zone - GMT+0 • All connected hard disk must be in LVM • Set of basic software installation– minimal. IMPORTANT: • The password must contain Latin characters from az in upper and lower case • Specialcharacters!»№~%?*()@#$%^&; • The password must be minimum of 8 characters
Basic installation and configuration Action Command For all components ----- Login via root Install CMD manager configure firewall ‘yum install system-config-firewall-tui’ Install MidNightComander ‘yum install mc’
Basic installation and configuration Action Command For all components Disable Selinux: Open SElinux config Change “SELINUX=enforcing” to “SELINUX=disabled” ‘vi /etc/selinux/config’ Press “i”to enable write mode, edit “SELINUX” option and save file - press “Esc”, then “:wq” and press “Enter” Disable system Firewall system-config-firewall-tui
Basic installation and configuration Action Command For all components ‘yum install openssh-clients-5.3p1-94.el6.x86_64 mlocate’ Install OpenSSH client and mlocate Update you system and further reboot your system ‘yum update && shutdown –r now’
Java installation and configuration Action Command For all components Create a directory for the component (named with component ID) ‘mkdir /opt/<component_ID>’ Installing Java ‘mkdir /opt/<component_ID>/java’ Create Java directory
Java installation and configuration Action Command For components id Portal, DP, IS Download java installer and extract archive ‘tar –xfv jdk-7u51-linux-x64.tar.gz’ For component id SOI Download java installer and extract archive ‘tar –xfv jdk-6u45-linux-x64.tar.gz’ 15
Java installation and configuration Command Action For components id Portal, DP, IS Create alternatives: • /usr/bin/java • /usr/bin/javac • /usr/bin/jar ‘alternatives --install /usr/bin/java java/opt/portal/java/jdk1.7.0_51/bin/java 100 && alternatives --install /usr/bin/javac javac /opt/portal/java/jdk1.7.0_51/bin/javac 100 && alternatives --install /usr/bin/jar jar /opt/portal/java/jdk1.7.0_51/bin/jar 100’ For component id SOI ‘alternatives --install /usr/bin/java java/opt/portal/java/jdk1.6.0_45/bin/java 100 && alternatives --install /usr/bin/javac javac /opt/portal/java/jdk1.6.0_45/bin/javac 100 && alternatives --install /usr/bin/jar jar /opt/portal/java/jdk1.6.0_45/bin/jar 100’ Create alternatives: • /usr/bin/java • /usr/bin/javac • /usr/bin/jar
Java installation and configuration Action Command For components id Portal, DP, IS Add link to JAVA_HOME in ‘/etc/profile’ • run: ‘vi /etc/profile’ • add following line: ‘export JAVA_HOME="/opt/portal/java/jdk1.7.0_51"’ • save file ‘echo $JAVA_HOME&& cd$JAVA_HOME’&& $JAVA_HOME/bin/java -- version’ Test JAVA_HOME
Java installation and configuration Action Command For component id SOI Add link to JAVA_HOME in ‘/etc/profile’ • run: ‘vi /etc/profile’ • add following line: ‘export JAVA_HOME="/opt/portal/java/jdk1.6.0_45“’ • save file ‘echo $JAVA_HOME&& cd$JAVA_HOME’&& $JAVA_HOME/bin/java -- version’ Test JAVA_HOME 18
JBoss AS installation Action Command For components id PORTAL, IS,SOI, DP Create user ‘jboss’ and set password in your system ‘useradd jboss && passwd jboss’ For component id PORTAL Download tar archive your component in folder ‘/opt/portal’, extract it and set the destination folder owner to user ‘jboss’ ‘tar –xfv jboss-portal-2.7.2.tar.gz && chown –R jboss. /opt/portal/jboss-portal-2.7.2’
JBoss AS installation Action Command For component id IS Download tar archive your component in folder ‘/opt/is’, extract it and set the destination folder owner to user ‘jboss’ ‘tar –xfv jboss-4.2.3.GA.tar.gz && chown –R jboss. /opt/is/jboss-4.2.3.GA’ For component id DP Download tar archive your component in folder ‘/opt/dp’, extract it and set the destination folder owner to user ‘jboss’ ‘tar –xfv jboss-4.2.3.GA.tar.gz && chown –R jboss. /opt/dp/jboss-4.2.3.GA’ 20
JBoss AS installation Action Command For component id SOI ‘tar –xfv jboss-5.2.0.GA.tar.gz && chown –R jboss. /opt/soi/jboss-4.2.3.GA’ Download tar archive your component in folder ‘/opt/soi’, extract it and set the destination folder owner to user ‘jboss’ 21
JBoss AS installation Action Command For components id PORTAL, IS,SOI, DP Copy JBoss application server run script in ‘/etc/init.d’ ‘cp $JBOSS_HOME/bin/jboss_init_redhat.sh /etc/init.d’ ‘chkconfig --add jboss_init_redhat.sh && chkconfig --levels 2345 jboss_init_redhat.sh on’ Add JBoss AS run script in autorun on the 2345 run levels
Monitoring client installation Action Command For all components Create user ‘zabbix’ and set password in your system ‘useradd zabbix && passwd zabbix’ Download tar archive of zabbix client to ‘/opt/<component_ID>’,extract it and set the destination folder owner to user ‘zabbix’ ‘tar –xfv zabbix.tar.gz chown –R zabbix. /opt/<component_ID>/zabbix’
Monitoring client installation Action Command For all components ‘cp /opt/<componeni_id> /zabbix/zabbixd /etc/init.d’ Copy zabbix run script in ‘/etc/init.d’, change $ZABBIX_HOME in script Add zabbix run script in autorun on the 2345 run levels ‘chkconfig --add zabbixd && chkconfig --levels 2345 zabbixd on’
Monitoring client configuration Action Command ‘vi$ZABBIX_HOME/conf/zabbix_agentd.conf’ Configure zabbix_agentd.conf For example: PidFile=$ZABBIX_HOME/log/zabbix_agentd.pid LogFile= $ZABBIX_HOME/log/zabbix_agentd.log DebugLevel=3 Server=XXX.XXX.XXX.XXX ListenPort=10050 StartAgents=3 Hostname=portal-odp Timeout=3 LogFileSize=2 EnableRemoteCommands=1 Set IP address for Zabbix server Set host name for Zabbix server
Tomcat installation Action Command Only for component ID PORTAL ‘tar –xfv apache-tomcat-6.0.29.tar.gz chown –R jboss. /opt/portal/apache-tomcat-6.0.29’ Download tar archive sso application server in ‘/opt/portal’ Extract and set the destination folder owner to user ‘jboss’ ‘cp /opt/”componetn” /apache-tomcat-6.0.29/bin/tomcat.sh /etc/init.d’ Copy run script in ‘/etc/init.d’ ‘chkconfig --add tomcat.sh chkconfig --levels 2345 tomcat.sh on’ Add the script to auto run mode on the 2345run levels
PostgreSQL installation Action Command Only for component ID DB ‘chmod +x postgresql-8.4.19-1-linux-x64.run’ Download and install postgresql-8.4.19-1-linux-x64.run to the folder ‘/opt/db’ ‘./postgresql-8.4.19-1-linux-x64.run’ Set db directory /opt/db/PostgreSQL and password for super user db Install DBMS postgresql-8.4.19
PostgreSQL installation Action Command Only for component ID DB Edit $PGDATA/pg_hba.conf file ‘vi /opt/db/PostgreSQL/8.4/data/pg_hba.conf’ Add lines how may connected to data base server For example: host all all IP/prefix md5 Set owner postgres to $POSTGERS_HOME ‘chown –R postgres. /opt/db/PostgreSQL’ ‘service postgres-8.4 restart’ Restart DBMS
Increase securityCentOS Action Command For all components Add mount option's in ‘/etc/fstab’ to directories ‘/tmp’, ‘/var/tmp’ and ‘/dev/shm’ ‘vi /etc/fstab’ add option’s nodev,nosuid,noexec for /tmp, /vat/tmp and /dev/shmand save file Locked to launch shell programs: ‘/usr/bin/curl’, ‘/usr/bin/perl*’, ‘/bin/chmod’, ‘/usr/bin/*ftp*’, ‘/bin/umount’ ‘chmod 754 /usr/bin/curl && chmod 744 /usr/bin/perl* && chmod 754 /bin/chmod && chmod 754 /usr/bin/*ftp* && chmod 754 /bin/umount &&’
Networking NAT routing Redirecting requests for public port connections handled by the iptables, by creating rules in the table NAT chain PREROUTING and OUTPU
Networking Interaction ODP Regionalnode to a ODP Global node
Networking Interaction ODP Global node to a ODP Regionalnode