{"type":"doc","content":[{"type":"heading","attrs":{"level":2},"content":[{"text":"SELINUX","type":"text"}]},{"type":"paragraph","content":[{"text":"If the database is on another server, the remote connection must be enabled in SELINUX","type":"text"}]},{"type":"codeBlock","content":[{"text":"setsebool -P httpd_can_network_connect_db 1","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Percona (MySQL)","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Disable the MySQL Module","type":"text"}]},{"type":"codeBlock","content":[{"text":"# Rhel 8+\nyum -y module disable mysql","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install the Percona repo","type":"text"}]},{"type":"codeBlock","content":[{"text":"yum -y install https://repo.percona.com/yum/percona-release-latest.noarch.rpm\nyum -y update percona-release","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install Percona","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n# remove any lingering mysql data or configs\nyum -y remove mysql*\nrm -rf /var/lib/mysql/*\nrm -rf /var/log/mysql*\nrm -rf /etc/my.cnf*\n\n# Install the Percona Server\nyum -y install percona-server-server\n\n# Install the Percona Client\nyum -y install percona-server-client\n","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Enable and Start the Percona service","type":"text"}]},{"type":"codeBlock","content":[{"text":"systemctl enable mysql\nsystemctl start mysql","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Secure the installation","type":"text"}]},{"type":"codeBlock","content":[{"text":"#############\n### RHEL < 9\n#############\n\n# copy and paste lines into the terminal\n\nTEMP_DB_PW=$(grep -o \"temporary password is generated for root@localhost.*\" /var/log/mysql/mysqld.log | cut -f2- -d: | tail -1 | sed -e 's/^[[:space:]]*//')\necho -e \"Temporary root password: ${TEMP_DB_PW}\"\n\n\n# run the secure installation to setup the root password\nmysql_secure_installation -p${TEMP_DB_PW} << EOF\nN\nY\nY\nY\nY\nEOF \n\n#############\n### RHEL 9 +\n############# \n\n# run the mysql_secure_installation command\n\n> mysql_secure_installation\n\nSecuring the MySQL server deployment.\n\nConnecting to MySQL using a blank password.\n\nVALIDATE PASSWORD COMPONENT can be used to test passwords\nand improve security. It checks the strength of password\nand allows the users to set only those passwords which are\nsecure enough. Would you like to setup VALIDATE PASSWORD component?\n\nPress y|Y for Yes, any other key for No: y\n\nThere are three levels of password validation policy:\n\nLOW Length >= 8\nMEDIUM Length >= 8, numeric, mixed case, and special characters\nSTRONG Length >= 8, numeric, mixed case, special characters and dictionary file\n\nPlease enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: 2\nPlease set the password for root here.\n\nNew password:\n\nRe-enter new password:\n\nEstimated strength of the password: 100\nDo you wish to continue with the password provided?(Press y|Y for Yes, any other key for No) : y\nBy default, a MySQL installation has an anonymous user,\nallowing anyone to log into MySQL without having to have\na user account created for them. This is intended only for\ntesting, and to make the installation go a bit smoother.\nYou should remove them before moving into a production\nenvironment.\n\nRemove anonymous users? (Press y|Y for Yes, any other key for No) : Y\nSuccess.\n\n\nNormally, root should only be allowed to connect from\n'localhost'. This ensures that someone cannot guess at\nthe root password from the network.\n\nDisallow root login remotely? (Press y|Y for Yes, any other key for No) : Y\nSuccess.\n\nBy default, MySQL comes with a database named 'test' that\nanyone can access. This is also intended only for testing,\nand should be removed before moving into a production\nenvironment.\n\n\nRemove test database and access to it? (Press y|Y for Yes, any other key for No) : Y\n - Dropping test database...\nSuccess.\n\n - Removing privileges on test database...\nSuccess.\n\nReloading the privilege tables will ensure that all changes\nmade so far will take effect immediately.\n\nReload privilege tables now? (Press y|Y for Yes, any other key for No) : Y\nSuccess.\n\nAll done!\n\n","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Update the database config","type":"text"}]},{"type":"codeBlock","content":[{"text":"cat > /etc/my.cnf << SQL\n#\n# The Percona Server configuration file.\n#\n[mysqld]\n#\n# Recommended Settings\n#\ninnodb_buffer_pool_size = 5600M # set value to max out at 70% of the total ram\ninnodb_log_file_size = 256M # set a hard limit on the log file size\ninnodb_log_buffer_size = 1M\ninnodb_flush_log_at_trx_commit = 1 # this is actually the default, but I put it in here to make it easier to adjust, if needed\ninnodb_flush_method = O_DIRECT # avoid double buffering\nsymbolic-links=0 # Disabling symbolic-links is recommended to prevent assorted security risks\n#\n# Make MySQL more strict (for future-proofing MySQL version upgrades)\n#\nsql_mode='ONLY_FULL_GROUP_BY,STRICT_TRANS_TABLES,ALLOW_INVALID_DATES,ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION'\n#\n# Optional, but often useful, tweaks\n#\njoin_buffer_size = 16M\nkey_buffer_size = 4M\nlog_queries_not_using_indexes = 0\nlong_query_time = 7\nmax_allowed_packet = 32M\nmax_connections = 30\nquery_cache_limit = 2M\nquery_cache_min_res_unit = 2048\nquery_cache_size = 256M\nquery_cache_size = 67108864\nslow_query_log = 1\nslow_query_log_file=/var/log/mysqld-slow.log\ntable_definition_cache = 800\ntable_open_cache = 810\nthread_cache_size = 8\nSQL\n\n# restart MySQL\nsystemctl restart mysql","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create the Databases and Users. ","type":"text"},{"type":"hardBreak"},{"text":"NOTE: This is just an example of how to create the SQL.","type":"text","marks":[{"type":"strong"}]},{"text":" Previous installations used a pcr360_usr to access both databases. For all new installations, we want to have separate users for the prod and test databases. The placeholder information needs to filled in and the query it needs to run for the Test and Production Database, i.e ","type":"text"},{"text":"pcr360_prod","type":"text","marks":[{"type":"em"}]},{"text":" & ","type":"text"},{"text":"pcr360_test. ","type":"text","marks":[{"type":"em"}]},{"type":"hardBreak"},{"type":"hardBreak"},{"text":"For MySQL the database ","type":"text"},{"text":"must be configured with the UTF8 character set","type":"text","marks":[{"type":"strong"}]},{"text":". For MySQL 8 ","type":"text"},{"text":"utf8mb4","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"utf8mb4_unicode_ci","type":"text","marks":[{"type":"code"}]},{"text":" are supported as well. Currently, other character sets and collations are not supported.","type":"text"}]},{"type":"codeBlock","content":[{"text":"# create temp file\ncat >mysql_setup.sql <';\n\nCREATE DATABASE pcr360_prod CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\nGRANT ALL PRIVILEGES ON pcr360_prod.* TO 'pcr360_prod'@'%' IDENTIFIED BY '';\nGRANT ALL PRIVILEGES ON pcr360_prod.* TO 'pcr360_prod'@'localhost' IDENTIFIED BY '';\n\nCREATE DATABASE pcr360_prod_archive CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\nGRANT ALL PRIVILEGES ON pcr360_prod_archive.* TO 'pcr360_prod'@'%' IDENTIFIED BY '';\nGRANT ALL PRIVILEGES ON pcr360_prod_archive.* TO 'pcr360_prod'@'localhost' IDENTIFIED BY '';\n\nCREATE DATABASE pcr360_prod_metadata CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\nGRANT ALL PRIVILEGES ON pcr360_prod_metadata.* TO 'pcr360_prod'@'%' IDENTIFIED BY '';\nGRANT ALL PRIVILEGES ON pcr360_prod_metadata.* TO 'pcr360_prod'@'localhost' IDENTIFIED BY '';\n\nGRANT USAGE ON *.* TO 'pcr360_prod'@'%';\nGRANT USAGE ON *.* TO 'pcr360_prod'@'localhost';\n\nCREATE USER 'dmpusr'@'localhost' IDENTIFIED BY '';\nGRANT USAGE ON *.* TO 'dmpusr'@'localhost';\nGRANT SELECT, SHOW VIEW, LOCK TABLES ON pcr360_prod.* TO 'dmpusr'@'localhost' IDENTIFIED BY '';\nGRANT SELECT, SHOW VIEW, LOCK TABLES ON pcr360_prod_archive.* TO 'dmpusr'@'localhost' IDENTIFIED BY '';\nSQL\n\n# create the database\nmysql -h localhost -uroot -p -f < mysql_setup.sql\n# remove the temp create file\nrm -f mysql_setup.sql","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Oracle","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install the Oracle Instant Client","type":"text"},{"type":"hardBreak"}]},{"type":"paragraph","content":[{"text":"We highly recommend installing Oracle on a dedicated database server. To communicate with Oracle on that server completing this installation will require the username, password, hostname, port (e.g. 1521) and SID.","type":"text"}]},{"type":"paragraph","content":[{"text":"Download and install the ","type":"text"},{"text":"Oracle Instant Client","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.oracle.com/technetwork/database/features/instant-client/index.html"}}]},{"text":" on the PCR-360 application server. This is required before installing the PHP oracle driver (oci8).","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Required to compile OCI8 PHP module:","type":"text"}]},{"type":"paragraph","content":[{"type":"inlineExtension","attrs":{"extensionType":"com.atlassian.confluence.migration","extensionKey":"__confluenceADFMigrationUnsupportedContentInternalExtension__","text":"","parameters":{"cxhtml":"

oracle-instantclientxx.x-basic-xx.x.x.x.x-x.x86_64.rpm

oracle-instantclientxx.x-sqlplus-xx.x.x.x.x-x.x86_64.rpm

yum -y install oracle-instantclient19.5-basic-19.5.0.0.0-1.x86_64.rpm
yum -y install oracle-instantclient19.5-sqlplus-19.5.0.0.0-1.x86_64.rpm
yum -y install libnsl

","block-inline":true,"nestedContent":{"type":"doc","content":[{"type":"table","content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"yum -y install oracle-instantclient19.5-basic-19.5.0.0.0-1.x86_64.rpm","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"yum -y install oracle-instantclient19.5-sqlplus-19.5.0.0.0-1.x86_64.rpm","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"yum -y ","type":"text","marks":[{"type":"code"}]},{"text":"install","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text"},{"text":"libnsl","type":"text","marks":[{"type":"code"}]}]}]}]}]}],"version":1},"reason":"A table in list item can't be created or edited in the new editor."}}}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set the library location","type":"text"}]},{"type":"codeBlock","content":[{"text":"sh -c \"echo /usr/lib/oracle/19.5/client64/lib > /etc/ld.so.conf.d/oracle-instantclient.conf\";\nldconfig","type":"text"}]},{"type":"paragraph","content":[{"type":"hardBreak"}]}]}]}],"version":1}

Browser not supported