9.0

Edit

Run preinstall manually

If the policy in your company does not allow to run anything from root automatically, you will have to do the preinstall steps manually. Before you proceed to the steps described below, make sure, you've prepared the servers according to the preinstall steps and executed precheck.

Common steps

The common steps should be performed for each server before installation of server specific components.

  1. Create the wfuser group:

    Run as root

    groupadd wfuser

  2. Create the runtime user and add to the group:

    Run as root

    useradd -m -g wfuser wfuser

  3. Create the installation directory:

    Run as root

    mkdir /opt/workfusion
chmod 0750 /opt/workfusion
chown wfuser:wfuser /opt/workfusion

  4. Install the common required packages:

    Run as root

    yum -y install curl \
               unzip \
               openssl \
               libselinux-python \
               wget \
               rsync \
               python-setuptools \
               coreutils \
               sysstat

    Ensure that curl and openssl packages have versions at least not older than described in Required Packages. You can check it as follows:

    Run as root

    rpm -q curl
rpm -q openssl

  5. Set SELinux to permissive mode:

    Run as root

    cat << EOF > /etc/selinux/config

  # This file controls the state of SELinux on the system.
  # SELINUX= can take one of these three values:
  #     enforcing - SELinux security policy is enforced.
  #     permissive - SELinux prints warnings instead of enforcing.
  #     disabled - No SELinux policy is loaded.
SELINUX=permissive
  # SELINUXTYPE= can take one of three two values:
  #     targeted - Targeted processes are protected,
  #     minimum - Modification of targeted policy. Only selected processes are protected.
  #     mls - Multi Level Security protection.
SELINUXTYPE=targeted
EOF

  6. Configure limits for the maximum number of open files and the number of processing units available:

    Run as root

    cat << EOF >> /etc/security/limits.conf
*       -       nofile  200000
*       -       nproc   10240
EOF

  7. Create systemd service for supervisord:

    Run as root

    cat << EOF > /etc/systemd/system/supervisord.service
[Unit]
Description=supervisord
Requires=local-fs.target
After=local-fs.target

[Service]
Type=simple
User=wfuser
Group=wfuser
LimitNOFILE=200000
LimitNPROC=10240
ExecStartPre=/bin/bash -c 'while [ ! -f /opt/workfusion/python-site/bin/supervisord ]; do sleep 1; done; exit 0'
ExecStart=/bin/bash -c 'source /opt/workfusion/environment.sh && /opt/workfusion/python-site/bin/supervisord -c /opt/workfusion/supervisord/conf/supervisord.conf'
TimeoutSec=300

[Install]
WantedBy=multi-user.target
EOF

  8. Enable autostart for supervisord service:

    Run as root

    systemctl daemon-reload
systemctl enable supervisord

  9. Unpack nginx binary and set capability to bind it on port less than 1025.

    • The step is needed only if you are going to bind nginx on port below 1025.

    • This means that you should run this step if your config.yml file contains values for nginx_<server_role>_port settings below 1025, and automate_preinstall_step is set to false, for example:

    automate_preinstall_steps: false
nginx_<server_role>_port: '80'
nginx_<server_role>_port_ssl: '443'

    • This step should be run only on the <server_role> server for which the Nginx port is set below 1025 in config.yml.

    • The step should not be executed on a separate VDS Slave server in case of VDS Cluster type of installation as there should be no nginx on VDS Slave by design.

    Run as root

    mkdir -p /opt/workfusion/nginx/bin
cd <package_dir>
tar -xvf sources/nginx-rhel7-1.12.2.tar.gz --strip=1 -C /opt/workfusion/nginx/bin/
chown -R wfuser:wfuser /opt/workfusion
/usr/sbin/setcap CAP_NET_BIND_SERVICE=+eip /opt/workfusion/nginx/bin/nginx

DB Server

  1. Create systemd service for disabling thp on server boot (required for mongodb):

    Run as root

    cat << EOF > /etc/systemd/system/disable-thp.service

[Unit]
Description=Disable Transparent Huge Pages (THP)

[Service]
Type=simple
ExecStart=/bin/sh -c "echo 'never' > /sys/kernel/mm/transparent_hugepage/enabled && echo 'never' > /sys/kernel/mm/transparent_hugepage/defrag"
TimeoutSec=300

[Install]
WantedBy=multi-user.target
EOF

  2. Enable disable-thp.service:

    Run as root

    systemctl daemon-reload
systemctl enable disable-thp

  3. Install required packages for DB Server from RHEL repo:

    Run as root

    yum -y install libaio \
               MySQL-python \
               python-psycopg2

APP Server

  1. Install required packages for APP Server from RHEL repo:

    Run as root

    yum -y install libtiff \
               libpng \
               bzip2 \
               libjpeg-turbo \
               zlib \
               xz \
               ghostscript \
               pango \
               fftw-libs-double \
               libXft \
               libtool-ltdl \
               libwmf-lite \
               mariadb \
               MySQL-python \
               postgresql \
               python-psycopg2

PM Server

  1. Create systemd service for disabling thp on server boot (required for mongodb):

    Run as root

    cat << EOF > /etc/systemd/system/disable-thp.service

[Unit]
Description=Disable Transparent Huge Pages (THP)

[Service]
Type=simple
ExecStart=/bin/sh -c "echo 'never' > /sys/kernel/mm/transparent_hugepage/enabled && echo 'never' > /sys/kernel/mm/transparent_hugepage/defrag"
TimeoutSec=300

[Install]
WantedBy=multi-user.target

  2. Enable disable-thp.service:

    Run as root

    systemctl daemon-reload
systemctl enable disable-thp

  3. Install repo packages required for wfagent on APM Server:

    Run as root

    yum -y install pcsc-lite-libs \
               alsa-lib \
               libXrandr \
               libao \
               libsamplerate \
               libdrm \
               libfontenc \
               libpciaccess \
               libXdamage \
               libXdmcp \
               libXfont \
               libXmu \
               libxshmfence \
               libXt \
               libXxf86vm \
               mesa-libGL \
               mesa-libglapi \
               pixman \
               xkeyboard-config \
               xorg-x11-server-common \
               xorg-x11-xauth \
               xorg-x11-xkb-utils \
               freerdp

VDS Master

  1. Configure sysctl parameters for VDS master .

    1. Create a new file with required sysctl parameters /etc/sysctl.d/workfusion.conf.
    caution

    Do not edit the standard one as it will be overwritten by the system.

    Run as root

    cat << EOF > /etc/sysctl.d/workfusion.conf
net.ipv4.tcp_keepalive_time = 120
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.core.somaxconn = 65535
net.ipv4.ip_local_port_range = 9000 61000
fs.file-max = 2097152
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 16384 16777216
net.core.netdev_max_backlog = 16384
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_syncookies = 1
EOF
    1. Apply configuration:

    Run as root

    sysctl -p /etc/sysctl.d/workfusion.conf

  2. Install required packaged dependencies for VDS:

    Run as root

    yum -y install libevent \
               nfs-utils \
               boost \            
               redhat-lsb-core

  3. Set up nfs-server.

    If VDS server uses a separate NFS server, skip this step!

    For using a separate NFS server the following variables should be set in config.yml :

    • vds_nfs_hostname: NFS server hostname.
    • vds_nfs_share: a share on the NFS server.

    If the variables above are not set (left blank), then NFS file-share should be configured on VDS Master server.

    1. Enable and start rpcbind.

    Run as root

    systemctl enable rpcbind
systemctl daemon-reload
systemctl start rpcbind
    1. Create directories that we are going to export:

    Run as root

    mkdir /opt/workfusion/vds-data
chmod 0750 /opt/workfusion/vds-data
chown wfuser:wfuser /opt/workfusion/vds-data
    1. Modify exports file /etc/exports, add the next line:

    Run as root

    cat << EOF >> /etc/exports
/opt/workfusion/vds-data *(fsid=0,rw,async,no_root_squash,no_subtree_check,insecure)
EOF
    1. Start nfs-server.
    systemctl start nfs-server

VDS Slave

Before you proceed to the steps described below, make sure, you've performed the common steps as described in the preinstall steps section.

  1. Configure sysctl parameters for VDS slave.

    1. Create a new file with required sysctl parameters /etc/sysctl.d/workfusion.conf.
    caution

    Do not edit the standard one as it will be overwritten by the system.

    Run as root

    cat << EOF > /etc/sysctl.d/workfusion.conf
net.ipv4.tcp_keepalive_time = 120
net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_tw_recycle = 1
net.ipv4.tcp_tw_reuse = 1
net.core.somaxconn = 65535
net.ipv4.ip_local_port_range = 9000 61000
fs.file-max = 2097152
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 87380 16777216
net.ipv4.tcp_wmem = 4096 16384 16777216
net.core.netdev_max_backlog = 16384
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_syncookies = 1
EOF
    1. Apply configuration:

    Run as root

    sysctl -p /etc/sysctl.d/workfusion.conf

  2. Install required packaged dependencies for VDS.

    Run as root

    yum -y install libevent \
               nfs-utils \
               boost \
               redhat-lsb-core

  3. Create directory for NFS share:

    Run as root

    mkdir /opt/workfusion/vds-data
chmod 0750 /opt/workfusion/vds-data
chown wfuser:wfuser /opt/workfusion/vds-data

  4. Add the next line to /etc/fstab:

    Run as root

    cat << EOF >> /etc/fstab
<vds_master_hostname>:/opt/workfusion/vds-data /opt/workfusion/vds-data nfs rw,rsize=8192,wsize=8192,timeo=14,intr 0 0
EOF

  5. Mount NFS share:

    Run as root

    mount /opt/workfusion/vds-data
← PreviousNext →