|
version 1.1, 2014/06/30 15:49:54
|
version 1.5, 2021/03/13 20:58:10
|
|
Line 55 DHCP is <em>not</em> supported.
|
Line 55 DHCP is <em>not</em> supported.
|
| <li>domain name server(s) </li> |
<li>domain name server(s) </li> |
| </ul> |
</ul> |
| |
|
| <h2>3. <a name="lin">Minimal Red Hat Enterprise Linux 7c Install</a></h2> |
<h2>3. <a name="lin">Minimal Red Hat Enterprise Linux 7 Install</a></h2> |
| <p> |
<p> |
| Installing Red Hat Enterprise Linux is straightforward. |
Installing Red Hat Enterprise Linux is straightforward. |
| Documentation is available from |
Documentation is available from |
| <a href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/" |
<a href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/"> |
| https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/</a> |
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/</a> |
| Most of the installation screens are self explanatory. |
Most of the installation screens are self explanatory. |
| There are a few steps that require comment and are dealt with below. |
There are a few steps that require comment and are dealt with below. |
|
Line 89 Finish installing your server, reboot it
|
Line 89 Finish installing your server, reboot it
|
| </p> |
</p> |
| <h3>Firewall Configuration</h3> |
<h3>Firewall Configuration</h3> |
| <p> |
<p> |
| LON-CAPA uses the tradition iptables package instead of the recent Firewalld, included for the |
Starting with LON-CAPA 2.11.3 you have the option of using either firewalld or iptables to |
| first time with RHEL7. Accordingly, you should install iptables-services, disable firewalld, |
manage the Firewall on your RHEL7 server/VM, as both are compatible with LON-CAPA's |
| and enable iptables. |
port management.</p> |
| |
<p>Enable access to standard web server ports (i.e., http and https) as follows if using |
| |
firewalld:</p> |
| |
<pre> |
| |
systemctl enable firewalld |
| |
systemctl start firewalld |
| |
firewall-cmd --zone=public --permanent --add-service=http |
| |
firewall-cmd --zone=public --permanent --add-service=https |
| |
firewall-cmd --reload |
| |
</pre> |
| |
<p>If you prefer to use the traditional iptables package instead of the default firewalld, |
| |
you will need to install iptables-services, disable firewalld, enable iptables, and then |
| |
use the system-config-firewall-tui tool to configure the Firewall. |
| |
</p> |
| <pre> |
<pre> |
| yum install iptables-services |
yum install iptables-services |
| systemctl mask firewalld |
systemctl mask firewalld |
| systemctl enable iptables |
systemctl enable iptables |
| systemctl enable ip6tables |
systemctl enable ip6tables |
| |
systemctl stop firewalld |
| |
systemctl start iptables |
| |
systemctl start ip6tables |
| |
</pre> |
| |
<p> |
| |
If you have a subscription to Red Hat you can use subscription-manager to enable the |
| |
rhel-7-server-optional-rpms, and then install system-config-firewall-tui. |
| |
</p> |
| |
<pre> |
| |
subscription-manager repos --enable rhel-7-server-optional-rpms |
| |
yum install system-config-firewall-tui |
| |
</pre> |
| |
<p>If your server/VM does not currently have a Red Hat subscription you can install wget, |
| |
then download system-config-firewall-tui from the LON-CAPA installation site and install it. |
| |
</p> |
| |
<pre> |
| yum install wget |
yum install wget |
| rpm --import http://install.loncapa.org/versions/redhat/RPM-GPG-KEY-loncapa |
rpm --import http://install.loncapa.org/versions/redhat/RPM-GPG-KEY-loncapa |
| wget http://install.loncapa.org/versions/redhat/7Server/system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
wget http://install.loncapa.org/versions/redhat/7Server/system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
| yum localinstall system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
yum localinstall system-config-firewall-tui-1.2.29-10.el7.noarch.rpm |
| system-config-firewall-tui |
|
| </pre> |
</pre> |
| |
<p> |
| The system-config-firewall-tui tool should be used to configure the Firewall. |
If using iptables, use the system-config-firewall-tui tool to configure the Firewall. |
| </p> |
</p> |
| |
<pre> |
| |
system-config-firewall-tui |
| |
</pre> |
| <ol> |
<ol> |
| <li>Select Security Level: Enabled, and Customize, to allow |
<li>Select Security Level: Enabled, and Customize, to allow |
| incoming: SSH (remote login), WWW (HTTP) and secure WWW |
incoming: SSH (remote login), WWW (HTTP) and secure WWW |
|
Line 116 The system-config-firewall-tui tool shou
|
Line 147 The system-config-firewall-tui tool shou
|
| |
|
| <h2>4. <a name="upd">Update your system</a></h2> |
<h2>4. <a name="upd">Update your system</a></h2> |
| <p> |
<p> |
| |
Enable access to the EPEL repository |
| |
</p> |
| |
<pre> |
| |
yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm |
| |
</pre> |
| |
<p> |
| Update your system to the latest versions of the system software using yum. |
Update your system to the latest versions of the system software using yum. |
| </p> |
</p> |
| <pre> |
<pre> |
|
Line 128 Reboot your system before continuing wit
|
Line 165 Reboot your system before continuing wit
|
| Retrieve the rhel7_loncapa_yum file from the LON-CAPA install site: |
Retrieve the rhel7_loncapa_yum file from the LON-CAPA install site: |
| </p> |
</p> |
| <pre> |
<pre> |
| |
yum install wget |
| wget http://install.loncapa.org/versions/redhat/7Server/rhel7_loncapa_yum.conf |
wget http://install.loncapa.org/versions/redhat/7Server/rhel7_loncapa_yum.conf |
| </pre> |
</pre> |
| <p> |
<p> |
|
Line 138 mv /etc/yum.conf /etc/yum.conf.backup
|
Line 176 mv /etc/yum.conf /etc/yum.conf.backup
|
| cp rhel7_loncapa_yum.conf /etc/yum.conf |
cp rhel7_loncapa_yum.conf /etc/yum.conf |
| yum update |
yum update |
| </pre> |
</pre> |
| |
<p> |
| |
Verify the required repositories are enabled: |
| |
</p> |
| |
<pre> |
| |
yum repolist enabled |
| |
</pre> |
| |
<p> |
| |
The list of enabled repos should be as follows: |
| |
</p> |
| |
<table style="border: 0px; border-collapse: collapse;"> |
| |
<tr><th>repo id</th><th>repo name</th></tr> |
| |
<tr><td>epel</td><td>Extra Packages for Enterprise Linux 7 - x86_64</td></tr> |
| |
<tr><td>loncapa-updates-basearch</td><td>RHEL 7Server LON-CAPA x86_64 Updates</td></tr> |
| |
<tr><td>loncapa-updates-noarch</td><td>RHEL 7Server LON-CAPA noarch Updates</td></tr> |
| |
<tr><td>rhel-x86_64-server-7 </td><td>Red Hat Enterprise Linux Server (v. 7 for x86_64)<td></tr> |
| |
<tr><td>rhel-x86_64-server-optional-7</td><td>RHEL Server Optional (v. 7 x86_64)</td></tr> |
| |
</table> |
| |
|
| <h3>Configure SELinux</h3> |
<h3>Configure SELinux</h3> |
| <p> |
<p> |
![[BACK]](/icons/back.gif){kind=icon}
Return to RHEL7_install.frag CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [LON-CAPA] / doc / build