蓝鲸社区单机版安装


 

 

 

 

 

官方网址:http://bk.tencent.com/

目前社区单机版最低配置:4核心 12G 内存 50G 硬盘

[root@bogon ~]# df -h
Filesystem               Size  Used Avail Use% Mounted on
/dev/mapper/centos-root   88G  5.2G   83G   6% /
devtmpfs                 5.9G     0  5.9G   0% /dev
tmpfs                    5.9G     0  5.9G   0% /dev/shm
tmpfs                    5.9G   13M  5.9G   1% /run
tmpfs                    5.9G     0  5.9G   0% /sys/fs/cgroup
/dev/sda1                473M  150M  323M  32% /boot
tmpfs                    1.2G  4.0K  1.2G   1% /run/user/42
tmpfs                    1.2G   60K  1.2G   1% /run/user/0
/dev/sr0                 4.2G  4.2G     0 100% /run/media/root/CentOS 7 x86_64
[root@bogon ~]# free -m
              total        used        free      shared  buff/cache   available
Mem:          11998         941       10164          15         892       10719
Swap:         12287           0       12287
[root@bogon ~]# cat /proc/cpuinfo| grep "processor"| wc -l
4

我这是个人笔记本安装

但是I7-6700HQ这款CPU其实是单核4核心外加4线程

所以wmware里最大只能选择如下

 

Centos7 安装就不啰嗦了,sercuriy policy 可以不用设置 kdump也可以关了

Centos7关闭防火墙、开机禁用防火墙

[root@bogon ~]# systemctl stop firewalld.service
[root@bogon ~]# systemctl disable firewalld.service
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

Centos7关闭NetworkManager服务,并设置开机禁用

[root@bogon ~]# service NetworkManager stop
Redirecting to /bin/systemctl stop NetworkManager.service
[root@bogon ~]# systemctl disable NetworkManager.service
Removed symlink /etc/systemd/system/multi-user.target.wants/NetworkManager.service.
Removed symlink /etc/systemd/system/dbus-org.freedesktop.NetworkManager.service.
Removed symlink /etc/systemd/system/dbus-org.freedesktop.nm-dispatcher.service.

关闭SELinux   修改配置文件(需要重启)

vi /etc/selinux/config 

SELINUX=enforcing 改为SELINUX=disabled

[root@bogon ~]# getenforce
Enforcing

修改系统ulimit值

修改之前需要重启下ssd服务

[root@bogon etc]# systemctl restart sshd.service
[root@bogon ~]# ulimit -n
1024
[root@bogon ~]# echo ulimit -n 204800 >> /etc/profile
[root@bogon etc]# source /etc/profile
[root@bogon etc]# ulimit -n
204800

为其他用户修改当前交互终端的limit值

[root@bogon etc]# vi /etc/security/limits.conf 

# End of file

soft nofile 204800
hard nofile 204800
hive - nofile 1024000
hive - nproc 1024000

经过以上修改,在有些系统中,用一般用户再登陆,仍然没有修改过来,那么需要检查是否有如下文件,如果没有,则要添加如下内容:

  [root@bogon etc]# vi /etc/pam.d/sshd

session required /lib/security/pam_limits.so

[root@bogon etc]# systemctl restart sshd.service

仍然不行,那么需要修改如下文件:

 

vim /etc/ssh/sshd_config UsePrivilegeSeparation no

 

检查系统的umask值

[root@bogon etc]# umask
0022

root用户 0022
一般用户 0002

umask修改只是临时,可以通过修改/etc/profile 或者 /etc/bashrc 添加 umask xxx 来修改

两个文件不同之处在于/etc/profile只对新创建的用户生效,而/etc/bashrc对所有用户都生效

安装并检查rsync

 

对于负荷较重的 rsync 服务器应该使用独立运行方式

[root@bogon ~]# yum install rsync xinetd
[root@bogon ~]# /usr/bin/rsync --daemon

对于负荷较轻的rsync服务器可以使用xinetd运行方式

[root@bogon xinetd.d]# yum install rsync xinetd
[root@bogon xinetd.d]#/etc/init.d/xinetd start
[root@bogon xinetd.d]#netstat -ntpl | grep 873 --查看服务是否启动

客户端(部署单机版不需要客户端)

[root@bogon xinetd.d]#yum -y install rsync

配置DNS用于解析公网YUM源

[root@bogon xinetd.d]# vi /etc/resolv.conf
# Generated by NetworkManager
nameserver 202.102.224.68
nameserver 202.102.227.68
nameserver 8.8.8.8/114.114.114.114

配置公网yum源头

[root@bogon xinetd.d]# wget /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
wget /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
[root@bogon xinetd.d]# yum clean all
[root@bogon xinetd.d]# yum repolist
[root@bogon xinetd.d]# yum makecache

腾讯云EPEL

EPEL (Extra Packages for Enterprise Linux) 是由 Fedora Special Interest Group 为企业 Linux 创建、维护和管理的一个高质量附加包集合适用于
但不仅限于 Red Hat Enterprise Linux (RHEL), CentOS, Scientific Linux (SL), Oracle Linux (OL)

# epel(RHEL5系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-5.repo
# epel(RHEL6系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-6.repo
# epel(RHEL7系列) wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-7.repo

 上传蓝鲸包并解压

[root@bogon data]# ls -l
total 1397608
-rw-r--r--.  1 root root 599243450 Dec 12 18:39 bkce_common-1.0.0.tgz
-rw-r--r--.  1 root root 811181199 Dec 12 18:38 bkce_product-4.1.16.tgz
drwxr-xr-x. 13 root root      4096 Oct 12 16:50 install
-rw-r--r--.  1 root root  20714827 Dec 12 18:40 install_ce-master-1.4.13.tgz
drwxr-xr-x. 14 root root       242 Oct 15 19:10 src

获取本机mac地址

获取机器的MAC地址后,下载证书文件: http://bk.tencent.com/download/#ssl, 解压到 src/cert 目录下

[root@bogon data]# tar xf ssl_certificates.tar.gz -C /data/src/cert

修改管理员密码

[root@bogon data]# vim /data/install/globals.env
export PAAS_ADMIN_PASS='password'

启动安装脚本前的检查

[root@localhost install]# ./precheck.sh 
<<check_ssh_nopass>> has been checked successfully... SKIP
<<check_password>> has been checked successfully... SKIP
<<check_cert_mac>> has been checked successfully... SKIP
<<check_selinux>> has been checked successfully... SKIP
<<check_umask>> has been checked successfully... SKIP
<<check_get_lan_ip>> has been checked successfully... SKIP
<<check_rabbitmq_version>> has been checked successfully... SKIP
<<check_http_proxy>> has been checked successfully... SKIP
start <<check_open_files_limit>> ... [OK]
start <<check_domain>> ... [OK]
start <<check_rsync>> ... [OK]
start <<check_networkmanager>> ... [OK]
start <<check_firewalld>> ... [OK]

安装开始

root@localhost install]# ./install_minibk 
[192.168.30.109]20181217-140612 37   install.config exists. backup it to install.config.20181217_140612
‘install.config’ -> ‘install.config.20181217_140612<<check_ssh_nopass>> has been checked successfully... SKIP
<<check_password>> has been checked successfully... SKIP
<<check_cert_mac>> has been checked successfully... SKIP
<<check_selinux>> has been checked successfully... SKIP
<<check_umask>> has been checked successfully... SKIP
<<check_get_lan_ip>> has been checked successfully... SKIP
<<check_rabbitmq_version>> has been checked successfully... SKIP
<<check_http_proxy>> has been checked successfully... SKIP
<<check_open_files_limit>> has been checked successfully... SKIP
<<check_domain>> has been checked successfully... SKIP
<<check_rsync>> has been checked successfully... SKIP
<<check_networkmanager>> has been checked successfully... SKIP
<<check_firewalld>> has been checked successfully... SKIP
where do you want to install blueking products.
enter a absolute path [/data/bkce]: 
[192.168.30.109]20181217-140616 212   >> rsync -a /data/src/service/py27 /opt/
Loaded plugins: fastestmirror, langpacks
Repository os is listed more than once in the configuration
Repository updates is listed more than once in the configuration
Repository centosplus is listed more than once in the configuration
Repository cloud is listed more than once in the configuration
Repository cr is listed more than once in the configuration
Repository extras is listed more than once in the configuration
Repository fasttrack is listed more than once in the configuration
Repository cr is listed more than once in the configuration
Repository fasttrack is listed more than once in the configuration
Loading mirror speeds from cached hostfile
Package autoconf-2.69-11.el7.noarch already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package gcc.x86_64 0:4.8.5-28.el7 will be updated
--> Processing Dependency: gcc = 4.8.5-28.el7 for package: libitm-devel-4.8.5-28.el7.x86_64
---> Package gcc.x86_64 0:4.8.5-36.el7 will be an update
--> Processing Dependency: libgomp = 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64
--> Processing Dependency: cpp = 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64
--> Processing Dependency: libgcc >= 4.8.5-36.el7 for package: gcc-4.8.5-36.el7.x86_64
--> Running transaction check
。。。
。。。
。。。

提示

------------------------- agreements ---------------------------------
    Dear users, welcome to use the Tencent BlueKing Software. Please
access http://bk.tencent.com/info/#laws to read the Tencent BlueKing
Software License and Service Agreement carefully. You have no right to
install or use the Software and related services unless you have read
and accepted all the terms of this Agreement. By downloading, install-
ing, using or logging in the Software, you shall be deemed to have
read and agreed to be bound by the Agreement above. If you have under-
stood the above content, please enter "yes" to continue installation,
otherwise, please enter "no" to abort. Thank you for your understan-
ding and support of the Tencent BlueKing Software. 
----------------------------------------------------------------------
yes/no ? yes

。。。

。。。

。。。

。。。

。。。

。。。

 


免责声明!

本站转载的文章为个人学习借鉴使用,本站对版权不负任何法律责任。如果侵犯了您的隐私权益,请联系本站邮箱yoyou2525@163.com删除。



 
粤ICP备18138465号  © 2018-2025 CODEPRJ.COM