9.4

Edit

Preparation steps

Prerequisites

  • The steps are valid only for Linux Servers: DB, APP, APM, OCR (Linux), AutoML (Cluster).
  • Linux servers are up and running and all system requirements are met as described in System requirements.
  • SSH access is allowed to the servers with root privileges.
  • If created manually, a non-privileged user must have the same name, UID, and GID.
  • DNS names for all servers (Linux and Windows) are configured according to DNS names configuration.
  • Application ports are open between servers.
  • Installation packages are uploaded to servers/opt/workfusion, the default WorkFusion installation directory. Change it to your own if necessary. /opt/workfusion/wf_installer is the directory where the installation package is extracted.

Package extraction

Perform the steps below on all Linux servers:

  1. Log in to the target server, for example, using Linux Terminal or Windows PuTTY:

Example: Linux Terminal

ssh -i /path/to/private-key.pem user@hostname.example.com
sudo su - root
  1. Create a directory for the WorkFusion installation package/installer on the filesystem. Grant read access for this directory to all users:
mkdir -p /opt/workfusion/wf_installer
chmod 0755 /opt/workfusion/wf_installer
  1. Extract the installation package:
tar -xzvf /opt/workfusion/workfusion-full-package-<version>.tar.gz --strip 1 -C /opt/workfusion/wf_installer

Initial configuration

  1. Perform the steps below on DB server.

  2. Log in to DB Server via SSH.

  3. Edit the configuration files (config.yml and secrets.yml) using a text editor (vi is used in the example below):

cd /opt/workfusion/wf_installer
vi config.yml
vi secrets.yml

You can refer to the Installation package and config files section for more details on each configuration option.

Prepare TLS certificates.

OPTION 1. Trusted certificates.

  1. Put the following certificates into the <PACKAGE_DIR>/certificates directory (use filenames provided in secrets.yml):
  • Root CA certificate which signed your Trusted Server Certificates
  • Trusted Server Certificates and their corresponding key files (certificate files should contain full bundled chain: End Certificate, Intermediate cert(s) if exist, and Root CA cert
  1. Generate Vault certificates (for internal application needs):
cd /opt/workfusion/wf_installer
./generate-certificates.sh cert-vault

OPTION 2. Self-Signed certificates.

If you don't have Trusted certificates, you may generate Self-Signed certificates. This will populate the <PACKAGE_DIR>/certificates directory with all certificates required for installation:

cd /opt/workfusion/wf_installer
./generate-certificates.sh cert-all

To distribute the <PACKAGE_DIR>/certificates folder, config.yml, and secrets.yml across all other Linux servers.

  • Create the wf_configs.tar.gz archive of these files:

    tar czvf wf_configs.tar.gz certificates config.yml secrets.yml

  • Copy wf_configs.tar.gz to all other servers. A python SimpleHTTPServer can be useful. Start the HTTP server on any port, which is accessible on DB server for other servers:

    Example: SimpleHTTPServer is on port 9999

    python -m SimpleHTTPServer 9999

    This command makes the directory content where the command was executed downloadable via HTTP.

Run the next steps on all other Linux servers.

  1. Log in into target server as root and download wf_configs.tar.gz from DB server:
cd /opt/workfusion/wf_installer

# install wget if not installed
yum -y install wget
wget http://db_hostname:9999/wf_configs.tar.gz -O wf_configs.tar.gz
  1. Unpack configuration files and certificates:
tar xzvf wf_configs.tar.gz -C /opt/workfusion/wf_installer/

Install WorkFusion license

Perform the step below on APP server. Copy the license.properties file (obtained from WorkFusion) to /opt/workfusion/wf_installer:

Example: full path of the license file

/opt/workfusion/wf_installer/license.properties

Selinux settings

By default, 9.2.0 SPA installer will set SELinux to permissive mode during the product deployment. Starting from SPA 9.2.1, the Selinux mode is not modified by the SPA installer. So, skip this section if you are installing 9.2.1+.

Perform the following steps on ALL servers if you don't want the SPA installer to modify current SELinux configuration on the server.

  1. Before installation, go to directory where the WorkFusion installer is extracted and modify the roles/init-common/tasks/flat-preinstall.yml file:
cd /opt/workfusion/wf_installer
vi roles/init-common/tasks/flat-preinstall.yml
  1. Remove the following lines (2-5):
  - name: Ensure SELinux is set to permissive
    selinux:
      state: permissive
      policy: targeted
  1. Save and exit the file.
← PreviousNext →