Rocky Libux 8.0 ArcGIS Enterprise 11.4 #224

Open
opened 11 months ago by rbsetiawan · 0 comments
Owner

Firewall

Tomcat

  • Require
    • Version 9.0.105
      image
    • Java Version
      image
  • Command
    • Extrac

    • Install

      • install java
      - java -version
      
      • install java 11
      • add user and group tomcat
      sudo groupadd tomcat
      
      sudo useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat
      
      • download tomcat9
      wget -O tomcat.tar.gz https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.100/bin/apache-tomcat-9.0.100.tar.gz
      
      • creat dir tomcat
      sudo mkdir /opt/tomcat
      
      sudo tar -xvzf tomcat.tar.gz -C /opt/tomcat --strip-components=1
      
      sudo chown -R tomcat:tomcat /opt/tomcat
      
      sudo chmod -R g+r /opt/tomcat/conf
      
      sudo chmod g+x /opt/tomcat/conf
      
    • Config

      • set user
      sudo nano /opt/tomcat/conf/tomcat-users.xml
      
      <role rolename="admin-gui"/>
      <role rolename="manager-gui"/>
      <user username="tomcat" password="pass" roles="admin-gui,manager-gui"/>
      
      • allow access from all ip

        • webapps/manager
        sudo nano /opt/tomcat/webapps/manager/META-INF/context.xml
        

        disable value on context.xml

        <!--  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
                 allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> -->
        
        • webapps/host-manager
        sudo nano /opt/tomcat/webapps/host-manager/META-INF/context.xml
        

        disable value on context.xml

        <!--  <Valve className="org.apache.catalina.valves.RemoteAddrValve"
                 allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />  -->
        
      • Set Up Apache Tomcat as a System Service

      java -version
      
      sudo update-java-alternatives -l
      
        `java-1.11.0-openjdk-amd64      1111       /usr/lib/jvm/java-1.11.0-openjdk-amd64`
      
      • Create a new tomcat.service system service file.
      sudo nano /etc/systemd/system/tomcat.service
      
      [Unit]
      Description=Tomcat
      After=network.target
      
      [Service]
      Type=forking
      
      User=tomcat
      Group=tomcat
      
      Environment="JAVA_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64"
      Environment="JAVA_OPTS=-Djava.security.egd=file:///dev/urandom"
      Environment="CATALINA_BASE=/opt/tomcat"
      Environment="CATALINA_HOME=/opt/tomcat"
      Environment="CATALINA_PID=/opt/tomcat/temp/tomcat.pid"
      Environment="CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC"
      
      ExecStart=/opt/tomcat/bin/startup.sh
      ExecStop=/opt/tomcat/bin/shutdown.sh
      
      RestartSec=10
      Restart=always
      
      [Install]
      WantedBy=multi-user.target
      
      sudo systemctl daemon-reload
      sudo systemctl enable tomcat
      sudo systemctl start tomcat
      sudo systemctl status tomcat
      
      • Add SSL https 443
          <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
                     maxThreads="150" SSLEnabled="true"
                     maxParameterCount="1000"
                     >
              <SSLHostConfig>
                  <Certificate certificateKeystoreFile="conf/localhost-rsa.jks"
                               certificateKeystorePassword="changeit" type="RSA" />
              </SSLHostConfig>
          </Connector>
      
      

Nginx

ArcGIS Enterprise

  • Require

    • Temp space requirements
    df -h /tmp
    

    image

    • ulimit
      image
    • File handle limits
    sudo nano /etc/security/limits.conf
    
    <Portal for ArcGIS installation user> soft nofile <file handle limit>
    <Portal for ArcGIS installation user> hard nofile <file handle limit>
    
    
    DefaultLimitNOFILE 65536
    DefaultLimitNPROC 25059
    
  • Global Command

    Option Description
    -m; --mode MODE " Optional. Defaults to GUI.

    MODE is one of the following: silent, console, or gui."
    -l; --license-agreement CHOICE Required for silent mode. CHOICE can be Yes or No.

    Yes indicates that you have read and agreed to the Esri Master Agreement (E204, E300). Visit http://www.esri.com/legal/licensing-translations to read the agreement.
    -d; --directory DIRECTORY Optional. By default, Portal for ArcGIS is installed in the user's $HOME directory. DIRECTORY specifies a different installation directory.
    The /arcgis/portal path is appended to the installation directory.

    If you're pointing the setup to a previous installation directory, the content in that directory is automatically used in the new installation. Content from installations prior to version 10.2 is not supported.
    -v; --verbose "
    Installer runs in verbose mode."
    -h; --help Displays command line help and exits.
    -e; --examples Displays usage examples of these options and exits.

Portal for ArcGIS

  • Require
  • Command
    • Extrac
    • Install
    • Activation
    • Config
      • set start with the operating system
        Copy the <ArcGIS Installation>/framework/etc/arcgisportal.service unit file to /etc/systemd/system
      • add command ExecStart and ExecStop
      /bin/bash 
      
      image

ArcGIS Server

  • Require
  • Command
    • Extrac

    • Install

    • Activation

      none Description
      -s Software Authorization Wizard GUI will run.
      -f FULL_PATH_TO_ECP_AUTHORIZATION_FILE Displays authorization status.
      -f FULL_PATH_TO_PROVISIONING_FILE -e EMAIL_ADDRESS Authorizing with an .ecp authorization file.



      FULL_PATH_TO_ECP_AUTHORIZATION_FILE is the full, absolute path to the authorization file (.ecp) provided by Esri.

      -f FULL_PATH_TO_PROVISIONING_FILE -e EMAIL_ADDRESS -o AUTHORIZATION_FILE_OUTPUT Generates an authorization file to be uploaded to the Esri website or email. Once completed, run this tool again using the received .ecp authorization file to complete the authorization process for this product.



      FULL_PATH_TO_PROVISIONING_FILE is the full, absolute path to the provisioning file (.prvc) provided by Esri.



      EMAIL_ADDRESS is required to authorize using a provisioning file.



      AUTHORIZATION_FILE_OUTPUT is the output file generated that must be sent to the Esri self service site or an email to authorize@esri.com.



      For more information, see Authorizing in a disconnected network environment and with no display set (headless).

      -h; Displays command line help and exits.
      • Silently authorize ArcGIS Server
      <ArcGIS Server installation directory>/tools/authorizeSoftware -f <full path to the .prvc file>  -e <email address> -o <full path to the .txt authorization file output>
      
      <ArcGIS Server installation directory>/tools/authorizeSoftware -f <full path to the .ecp file>
      
    • Config

      • set start with the operating system
        Copy the <ArcGIS Installation>/framework/etc/arcgisserver.service unit file to /etc/systemd/system
      • add command ExecStart and ExecStop
      /bin/bash 
      

      image

      • enable .service
      systemctl enable arcgisserver.service
      
      systemctl stop arcgisserver.service
      systemctl start arcgisserver.service
      systemctl status arcgisserver.service
      

ArcGIS Web Adaptor

  • Require
  • Command
    • Extrac
    • Install
    • Activation
    • Config

ArcGIS Web Adaptor (Portal for ArcGIS)

ArcGIS Web Adaptor (ArcGIS Server)

ArcGIS Data Store

  • Require
  • Command
    • Extrac
    • Install
    • Activation
    • Config
      • set start with the operating system
        Copy the <ArcGIS Installation>/framework/etc/arcgisdatastore.service unit file to /etc/systemd/system
      • add command ExecStart and ExecStop
      /bin/bash 
      

Federeted ArcGIS Server to Portal fo ArcGIS

# Firewall # Tomcat - Require - Version 9.0.105 ![image](/attachments/145755da-90e5-4e86-beb4-401557b6a74c) - Java Version ![image](/attachments/86f89d1b-aa03-41f5-9293-6270a20e18ec) - Command - Extrac - Install - install java ``` - java -version ``` - install java 11 ``` ``` - add user and group tomcat ``` sudo groupadd tomcat ``` ``` sudo useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat ``` - download tomcat9 ``` wget -O tomcat.tar.gz https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.100/bin/apache-tomcat-9.0.100.tar.gz ``` - creat dir tomcat ``` sudo mkdir /opt/tomcat ``` ``` sudo tar -xvzf tomcat.tar.gz -C /opt/tomcat --strip-components=1 ``` ``` sudo chown -R tomcat:tomcat /opt/tomcat ``` ``` sudo chmod -R g+r /opt/tomcat/conf ``` ``` sudo chmod g+x /opt/tomcat/conf ``` - Config - set user ``` sudo nano /opt/tomcat/conf/tomcat-users.xml ``` ``` <role rolename="admin-gui"/> <role rolename="manager-gui"/> <user username="tomcat" password="pass" roles="admin-gui,manager-gui"/> ``` - allow access from all ip - webapps/manager ``` sudo nano /opt/tomcat/webapps/manager/META-INF/context.xml ``` disable value on `context.xml` ``` <!-- <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> --> ``` - webapps/host-manager ``` sudo nano /opt/tomcat/webapps/host-manager/META-INF/context.xml ``` disable value on `context.xml` ``` <!-- <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" /> --> ``` - Set Up Apache Tomcat as a System Service ``` java -version ``` ``` sudo update-java-alternatives -l ``` `java-1.11.0-openjdk-amd64 1111 /usr/lib/jvm/java-1.11.0-openjdk-amd64` - Create a new `tomcat.service` system service file. ``` sudo nano /etc/systemd/system/tomcat.service ``` ``` [Unit] Description=Tomcat After=network.target [Service] Type=forking User=tomcat Group=tomcat Environment="JAVA_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64" Environment="JAVA_OPTS=-Djava.security.egd=file:///dev/urandom" Environment="CATALINA_BASE=/opt/tomcat" Environment="CATALINA_HOME=/opt/tomcat" Environment="CATALINA_PID=/opt/tomcat/temp/tomcat.pid" Environment="CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC" ExecStart=/opt/tomcat/bin/startup.sh ExecStop=/opt/tomcat/bin/shutdown.sh RestartSec=10 Restart=always [Install] WantedBy=multi-user.target ``` ``` sudo systemctl daemon-reload sudo systemctl enable tomcat sudo systemctl start tomcat sudo systemctl status tomcat ``` - Add SSL https 443 ``` <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" maxParameterCount="1000" > <SSLHostConfig> <Certificate certificateKeystoreFile="conf/localhost-rsa.jks" certificateKeystorePassword="changeit" type="RSA" /> </SSLHostConfig> </Connector> ``` # Nginx # ArcGIS Enterprise - Require - Temp space requirements ``` df -h /tmp ``` ![image](/attachments/4f8a5f38-a31b-47fb-b365-61ebcae3aab5) - ulimit ![image](/attachments/453b7626-377b-49f1-b926-d00493b690ee) - File handle limits ``` sudo nano /etc/security/limits.conf ``` ``` <Portal for ArcGIS installation user> soft nofile <file handle limit> <Portal for ArcGIS installation user> hard nofile <file handle limit> DefaultLimitNOFILE 65536 DefaultLimitNPROC 25059 ``` - Global Command | Option | Description | | --- | --- | | -m; --mode MODE "| Optional. Defaults to GUI.<br><br>MODE is one of the following: silent, console, or gui." | | -l; --license-agreement CHOICE | Required for silent mode. CHOICE can be Yes or No.<br><br>Yes indicates that you have read and agreed to the Esri Master Agreement (E204, E300). Visit http://www.esri.com/legal/licensing-translations to read the agreement. | | -d; --directory DIRECTORY | Optional. By default, Portal for ArcGIS is installed in the user's $HOME directory. DIRECTORY specifies a different installation directory.<br>The /arcgis/portal path is appended to the installation directory.<br><br>If you're pointing the setup to a previous installation directory, the content in that directory is automatically used in the new installation. Content from installations prior to version 10.2 is not supported. | | -v; --verbose "| Installer runs in verbose mode." | | -h; --help | Displays command line help and exits. | | -e; --examples | Displays usage examples of these options and exits. | | | | ## Portal for ArcGIS - Require - Command - Extrac - Install - Activation - Config - set start with the operating system Copy the `<ArcGIS Installation>`/framework/etc/arcgisportal.service unit file to /etc/systemd/system - add command ExecStart and ExecStop ``` /bin/bash ``` ![image](/attachments/3060afdf-b0a5-4e28-a765-94fe774528b0) ## ArcGIS Server - Require - Command - Extrac - Install - Activation | none | Description | | --- | --- | | -s | Software Authorization Wizard GUI will run. | | -f FULL_PATH_TO_ECP_AUTHORIZATION_FILE | Displays authorization status. | | -f FULL_PATH_TO_PROVISIONING_FILE -e EMAIL_ADDRESS | Authorizing with an .ecp authorization file.<br><br><br><br>FULL_PATH_TO_ECP_AUTHORIZATION_FILE is the full, absolute path to the authorization file (.ecp) provided by Esri.<br><br> | | -f FULL_PATH_TO_PROVISIONING_FILE -e EMAIL_ADDRESS -o AUTHORIZATION_FILE_OUTPUT | Generates an authorization file to be uploaded to the Esri website or email. Once completed, run this tool again using the received .ecp authorization file to complete the authorization process for this product.<br><br><br><br>FULL_PATH_TO_PROVISIONING_FILE is the full, absolute path to the provisioning file (.prvc) provided by Esri.<br><br><br><br>EMAIL_ADDRESS is required to authorize using a provisioning file.<br><br><br><br>AUTHORIZATION_FILE_OUTPUT is the output file generated that must be sent to the Esri self service site or an email to authorize@esri.com.<br><br><br><br>For more information, see Authorizing in a disconnected network environment and with no display set (headless).<br><br> | | -h; | Displays command line help and exits. | | | | - Silently authorize ArcGIS Server ``` <ArcGIS Server installation directory>/tools/authorizeSoftware -f <full path to the .prvc file> -e <email address> -o <full path to the .txt authorization file output> ``` ``` <ArcGIS Server installation directory>/tools/authorizeSoftware -f <full path to the .ecp file> ``` - Config - set start with the operating system Copy the `<ArcGIS Installation>`/framework/etc/arcgisserver.service unit file to /etc/systemd/system - add command ExecStart and ExecStop ``` /bin/bash ``` ![image](/attachments/3060afdf-b0a5-4e28-a765-94fe774528b0) - enable .service ``` systemctl enable arcgisserver.service ``` ``` systemctl stop arcgisserver.service systemctl start arcgisserver.service systemctl status arcgisserver.service ``` ## ArcGIS Web Adaptor - Require - Command - Extrac - Install - Activation - Config ### ArcGIS Web Adaptor (Portal for ArcGIS) ### ArcGIS Web Adaptor (ArcGIS Server) ## ArcGIS Data Store - Require - Command - Extrac - Install - Activation - Config - set start with the operating system Copy the `<ArcGIS Installation>`/framework/etc/arcgisdatastore.service unit file to /etc/systemd/system - add command ExecStart and ExecStop ``` /bin/bash ``` ## Federeted ArcGIS Server to Portal fo ArcGIS
Sign in to join this conversation.
Loading…
There is no content yet.