Toolpack prerequisite CentOS7 A

From TBwiki
(Difference between revisions)
Jump to: navigation, search
(New adaption for Centos7)
(Added MariaDB instructions based on AlexT's worksheet)
Line 102: Line 102:
 
  FileUsage      = 1
 
  FileUsage      = 1
  
−
=== Configure MySQL ===
+
=== Configure MariaDB ===
  
 
  vim /etc/my.cnf
 
  vim /etc/my.cnf
Line 137: Line 137:
 
  expire_logs_days=60
 
  expire_logs_days=60
  
−
<!--
+
<br> Enable and start MariaDB
−
+
−
# Default to using old password format for compatibility with mysql 3.x
+
−
# clients (those using the mysqlclient10 compatibility package).
+
−
old_passwords=1
+
−
+
−
# Disabling symbolic-links is recommended to prevent assorted security risks
+
−
symbolic-links=0
+
−
+
−
# Added so that problems with DNS servers don't cause problems with the mysql DB
+
−
# Note:&nbsp;This is applicable only if you are using a TMG
+
−
skip-name-resolve
+
−
+
−
[mysqldump]
+
−
max_allowed_packet = 200MB
+
  
−
=== Start MySQL ===
+
  systemctl enable mariadb
 +
systemctl start mariadb
  
−
  service mysqld start
+
<br> Use the MariaDB wizard to secure your server installation.  
 +
mysql_secure_installation
  
−
=== Configure MySQL Users  ===
+
You should:
−
 
+
* Set new root password
−
*Set password for the root user to 'tbdbpw' (TelcoBridges recommends that you set your own password for root)
+
* Remove anonymous users
−
*Enable root connection from localhost only
+
* Disallow root login remotely
−
*Create a tbdb user (required by Toolpack)
+
* Remove test database and accesses
−
*Remove anonymous connection
+
* Reload privilege tables
  
 
Example:  
 
Example:  
  
−
  /usr/bin/mysqladmin -u root password tbdbpw
+
  mysql_secure_installation
 +
 +
Set root password? [Y/n] Y
 +
New password: AVeryStrongPassword
 +
Re-enter new password: AVeryStrongPassword
 +
Password updated successfully!
 +
Reloading privilege tables..
 +
  ... Success!
 +
Remove anonymous users? [Y/n] Y
 +
  ... Success!
 +
Disallow root login remotely? [Y/n] Y
 +
  ... Success!
 +
Remove test database and access to it? [Y/n] Y
 +
  - Dropping test database...
 +
  ... Success!
 +
  - Removing privileges on test database...
 +
  ... Success!
 +
Reload privilege tables now? [Y/n] Y
 +
  ... Success!
 +
Cleaning up...
 +
Thanks for using MariaDB!
  
−
  mysql -uroot -ptbdbpw
+
=== Restart the MariaDB service ===
−
  DELETE FROM mysql.user WHERE&nbsp;!(Host = 'localhost' AND User = 'root');
+
  systemctl restart mariadb
−
  FLUSH PRIVILEGES;
+
 
 +
=== Configure MariaDB user ===
 +
 
 +
* Create a tbdb user (required by Toolpack)  
 +
 
 +
Example:
 +
 
 +
  mysql -uroot -pAVeryStrongPassword
 +
 +
USE mysql;
 
  CREATE USER 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
 
  CREATE USER 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
 
  GRANT ALL PRIVILEGES ON *.* TO 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
 
  GRANT ALL PRIVILEGES ON *.* TO 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
 
  FLUSH PRIVILEGES;
 
  FLUSH PRIVILEGES;
 
  exit
 
  exit
 +
 +
 +
<!--
 +
  
 
== Toolpack Development Prerequisite (Optional)  ==
 
== Toolpack Development Prerequisite (Optional)  ==

Revision as of 15:52, 5 September 2014

This page shows the Toolpack 2-8 prerequisites for CentOS 7.

WARNING: The host MUST have CentOS 7 installed.

WARNING: This procedure requires internet access and a DNS configured on your unit.

Contents

Stop toolpack system (if it is running) 

tbtoolpack stop

TelcoBridges repository

Add TelcoBridges repository file 

vim /etc/yum.repos.d/TB-Base.repo

Paste the following information in that file: 

# TelcoBridges-Base.repo
#
# This repository is using TelcoBridges frozen version of CentOS
# to help client installing the required version of the
# applications required to run Toolpack
#

[tb-base]
name=TelcoBridges-$releasever - Base
baseurl=http://repo.telcobridges.com/centos/7/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7

Get TelcoBridges repository key 

cd /etc/pki/rpm-gpg/
wget http://repo.telcobridges.com/centos/7/os/x86_64/RPM-GPG-KEY-TB7

CentOS update

Update your system to CentOS 7 

yum clean metadata
yum update

Reply to ARP only on local interfaces

Modify the file /etc/sysctl.conf to add the following lines: 

 net.ipv4.conf.default.arp_ignore=1
 net.ipv4.conf.all.arp_ignore=1

Then restart network interfaces using the following command: 

 service network restart

Disabling SELinux

Check SELinux status 

 sestatus

If SELinux is enable, see the Disabling SELinux article to disable it.

Install Toolpack Prerequisites

When asked to 'Importing GPG key', answer yes. 

yum groupinstall Toolpack-Prerequisites

Install Gem 

wget http://download.distribution.telcobridges.com/3rdparty/prerequisite/bin/linux/bundler-1.2.3.gem
gem install --local ./bundler-1.2.3.gem

wget http://download.distribution.telcobridges.com/3rdparty/prerequisite/bin/linux/json-1.7.7.gem
gem install --local ./json-1.7.7.gem

Apply kernel patches (if any) 

shutdown -r now

Once rebooted, be sure that Toolpack system is stopped before manipulating MySQL. 

tbtoolpack stop

Configure ODBC 

vim /etc/odbcinst.ini

Remove the '#' in front of each lines of the [MySQL] section Modify the 'Driver' line to set the correct driver


Example: 

[MySQL]
Description     = ODBC for MySQL
Driver          = /usr/lib/libmyodbc5.so
Setup           = /usr/lib/libodbcmyS.so
Driver64        = /usr/lib64/libmyodbc5.so
Setup64         = /usr/lib64/libodbcmyS.so
FileUsage       = 1

Configure MariaDB 

vim /etc/my.cnf

Add these variables in the file under the [mysqld] section:

  • log-bin
  • server-id=[UniqueId]

The server-id needs to be a non-zero unique value (do not use 0). If you use the host redundancy feature, the value needs to be different on each host .


Add max_allowed_packet to increase the maximum size of binary blobs in the database. Make sure it is in the [mysqld] section AND [mysqldump] section 

 max_allowed_packet = 200MB


Add below to remove database dependencies with DNS servers (**Applicable to TMG users only) 

 skip-name-resolve


Add this to make sure the mysql logs don't get too big 

 expire_logs_days=60

Example: 

[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
symbolic-links=0
log-bin
server-id=1123476
max_allowed_packet = 200MB
skip-name-resolve
expire_logs_days=60


Enable and start MariaDB 

systemctl enable mariadb
systemctl start mariadb


Use the MariaDB wizard to secure your server installation. 

mysql_secure_installation

You should:

  • Set new root password
  • Remove anonymous users
  • Disallow root login remotely
  • Remove test database and accesses
  • Reload privilege tables

Example: 

mysql_secure_installation

Set root password? [Y/n] Y
New password: AVeryStrongPassword
Re-enter new password: AVeryStrongPassword
Password updated successfully!
Reloading privilege tables..
 ... Success!
Remove anonymous users? [Y/n] Y
 ... Success!
Disallow root login remotely? [Y/n] Y
 ... Success!
Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!
Reload privilege tables now? [Y/n] Y
 ... Success!
Cleaning up...
Thanks for using MariaDB!

Restart the MariaDB service 

systemctl restart mariadb

Configure MariaDB user

  • Create a tbdb user (required by Toolpack)

Example: 

mysql -uroot -pAVeryStrongPassword

USE mysql;
CREATE USER 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
GRANT ALL PRIVILEGES ON *.* TO 'tbdb'@'%' IDENTIFIED BY 'tbdbpw';
FLUSH PRIVILEGES;
exit


Retrieved from "https://docs.telcobridges.com/mediawiki/index.php?title=Toolpack_prerequisite_CentOS7_A&oldid=16069"
Personal tools