Installing DCO on Red Hat Enterprise Linux 7

*Content of this page will be reviewed*

We usually don't offer support on RHEL installations as most of our customers that are using RHEL have they own ways of installing and configuring RHEL.

Prerequisite: Before starting the installation procedure, make sure that the general system requirements are fulfilled in addition to these:

• A server running RHEL 7.x with at least minimum install selected.

• Access to RHEL packages either by using an active RHEL subscription or inserting a Red Hat Enterprise Linux Server x86_64 DVD

• Disk space:
  • /data is used for indexes and ETL configuration. Minimum size 5 GB.
  • /data/backup is used for backups. Minimum size 50 GB. Backups should always be mounted on a remote network share.
  • /opt/jboss-as is used for the application server. Minimum size 10 GB.
  • /var/lib/pgsql is used for the postgres database. Minimum size 30 GB.
  • /var/log is used for log files. Minimum size 5 GB.
• Total amount of space recommended for an installation is at least 100 GB in addition to the operating system.
• Optional: Due to a bug in the Red Hat linux kernel, it is recommended to upgrade to 3.10.0-327.22.2.el7 or later. Some audit log messages may not be logged if you have a kernel version earlier than 3.10.0-327.22.2.el7.

## Allow root to run any commands anywhere
root    ALL=(ALL)     ALL
## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

Changes to the system

The following system changes are applied during installation of the Data Center Operation software.

• DCO will install the listed packages* if not already installed. 
  *You can get a list of dependent packages for Red Hat Enterprise Linux installation through your local Schneider Electric contact. 
• Firewalld rules are set to DCO default locked down settings.
• The SNMPd configuration is replaced with a DCO configuration to provide SNMP status for the DCO services.
• The NTP configuration is changed to use default RHEL NTP servers. This can be changed afterwards through the server management interface (Webmin).
• The PostgreSQL configuration is replaced and certificates for the database get generated during install.
• The Keepalived configuration is replaced.
• SELinux is enabled.
• CTRL+ALT+DELETE reboot is disabled.
• Root login and UseDNS in SSH is disabled.
• TCP Keepalive settings are modified.
• Kernel shared memory, huge pages and network memory settings are modified.
• The sudo configuration was changed, adding sudo permissions to Operationns-platform and DCOjboss user, removing requiretty parameter.
• logrotate has been configured to handle DCO and PostgreSQL logs.
• Loading kernel module ip_vs and ip_vs_rr.
  
• The Apache configuration is modified.
• The Webmin configuration is modified, disabling unused modules and changing security configuration.
• Enabling PostgreSQL start at boot.
• Maximum number of files has been increased to 100000 for JBoss (DCOjboss) and root users.
• Sudoers rules have been added for the DCOjboss user to allow creation of ETL databases.

Installing the Data Center Operation server on Red Hat Enterprise Linux

Non-mandatory creation of users and groups

Click here for details...

During the installation process the setup script will automatically create these user accounts: DCOjboss, DCOplat, postgres, and apache.

If required, these accounts may be manually added by executing these commands with root credentials prior to installation:

Add DCOjboss user and group

groupadd --system DCOjboss
useradd --system -g DCOjboss --shell /bin/nologin --home-dir /opt/jboss-as -c "Data Center Operation Application Server" --create-home DCOjboss

Add DCOplat user and group

groupadd --system DCOplat
useradd --system -g DCOplat --shell /bin/sh --home-dir /home/DCOplat -c "Data Center Operation Platform User" --create-home DCOplat

Add postgres user

groupadd -g 26 -o -r postgres
useradd -M -n -g postgres -o -r -d /var/lib/pgsql -s /bin/bash -c "PostgreSQL Server" -u 26 postgres 

The postgres package performs the above commands. Changing UID/GID is currently untested.

Add apache user

groupadd -g 48 -r apache
useradd -c "Apache" -u 48 -g 48 -s /sbin/nologin -r -d /usr/share/httpd apache

The httpd package performs the above commands. Changing UID/GID is currently untested.

Installing  Data Center Operation clients

Prerequisite: The server installation has been completed.

1. On the computer on which to install the Data Center Operation client, open a web browser and launch to the IP address or hostname of the DCO server <serverIPaddress> to log in to the web client and get access to the desktop client download.
   (The DCO web client is automatically available with the server installation.)
2. If you're not an English speaker, select your preferred language from the profile menu Language option (profile image in the upper right corner).
3. In Administration>Licenses add your license keys to enable download according to your purchased licenses.
4. In the profile menu select Download Desktop Clients.
5. On the download page click to download the Data Center Operation software according to your license and follow the instructions in the installation wizard.
6. Repeat the above steps on all client computers.