Decision Insight Messaging System 20211220 Save PDF Selected topic Selected topic and subtopics All content Install a node on Linux Hardware prerequisites Make sure you've checked the Hardware prerequisites before starting configuring your server System prerequisites Decision Insight Messaging System currently supports the following software prerequisites: A 64-bits Linux Operating System : Red Hat Enterprise Linux: 5.x, 6.x, 7.x, 8.x Ubuntu: 14 LTS, 16 LTS SUSE: 11, 12 Oracle Linux: 6.x, 7.x CentOS Linux: 6.x, 7.x Amazon Linux distribution An OpenJDK 11 64-bits JVM or later An OpenJDK 13 JVM is provided by the node itself but this can be changed Configuration prerequisites Please check the following configurations have been properly applied to your environment: Accounts Account Required abilities <Decision Insight Messaging System administration account> Permissions Directory Permissions <install directory> read, write, execute <working directory> read, write, execute <Decision Insight Messaging System execution account> Permissions Directory Permissions <install directory> read, execute <working directory> read, write, execute <System administration account> Register a service Update system configuration files such as /etc/security/limits.conf <install directory> is the directory where the product will be installed <working directory> is the directory where the product will write its data (by default, <working directory> is <install directory>/var) NTP Server clock must be synchronized with a NTP server. When running in a virtual environment, is it recommended to configure NTP at the hypervisor level and to install "tools" in the virtual machine in order for it to have a "stable" clock. Installation prerequisites A valid installer (DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh) with execute permission granted (chmod +x DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh) Installers can be downloaded from Axway Sphere or from Decision Insight Messaging System downloads and release notes. When installing a messaging server, a set of truststore and keystore as defined in Security prerequisites. Install a node Using the graphical mode Launch the installer Using <Decision Insight Messaging System administration account>, launch the installer in graphical mode. For that you can either: Double-click on the installer. Launch the installer from command line: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh Follow the installation steps Step 1 : Overall information Once you have successfully launched the installer on your machine, you will access the installer welcome page. Click next. Step 2 : License agreement Accept the software license agreement and click next. Step 3 : Destination directory Select an installation path that fullfils the prerequisites: <Decision Insight Messaging System administration account> must have full access <Decision Insight Messaging System execution account> must have read & execute permissions Step 4 : Orchestrator configuration From this screen, you can choose to install an orchestrator or not. If you skip it, you'll need to provide a valid link to an existing orchestrator when installing a messaging server. Orchestrator port Port used by various services to connect to the orchestrator. Orchestrator cluster connection Configure the connection to a cluster. You need to provide: a unique id for your orchestratorthis id will be used to identify your orchestrator in the cluster a connection stringcomma separated list of servers that are part of the cluster, format is : {id1}={host1}:{port1},{id2}={host2}:{port2},... Then click next. Step 5 : Install a messaging server From this screen, you can choose to install the messaging server or not. Messaging server port Port used by various services to connect to the messaging server. Connection string If you didn't install the orchestrator from the previous screen, you need to provide a connection string to connect to one. Replication factor / Minimal Synchronized Messaging Servers / Partition Number These values must be the same on all members of the cluster. For guidance on how to choose these values, refers to Sizing prerequisites. Then click next. Step 6: Security configuration If you chose to install a new messaging server in the previous step, in this screen you will need to provide the means to secure its communication using TLS mutual authentication. Secure communications is mandatory for your production deployment. If you don't need it, just uncheck "Secure communications?" Key Store Configuration Configure the JKS keystore to be used to secure communication. You will need to provide: a path to the keystore the keystore password the key password for the key in the keystore Trust Store Configuration Configure the JKS truststore to be used to secure communication. You will need to provide: a path to the truststore the truststore password See more about the information required in this screen in Security prerequisites. Then click next. Step 7 : Installation The installation process is shown as a progress bar and can take several minutes.When the installation has finished (overall installation progress is over), you can click next to see a summary of the process. Step 8 : Installation finished Software is installed and ready to use. You can check create a response file, if you want to relaunch the same installation later without having to go through all the installer screens. The response file will be generated in the installation directory. (see Using the automated mode for more information) Then, click done to close the window. Using the console mode Using <Decision Insight Messaging System administration account>, launch the installer from command line: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -c Steps are the same as those in the graphical mode. Using the automated mode You can also install a node in an unattended mode from a configuration file. You should have a previously generated response file that should look like: response.varfile # Destination directory sys.installationDir=/opt/DecisionInsightMessagingSystem # Orchestrator configuration isNewOrchestrator$Boolean=true orchestratorClusterConnectionString=2\=myserver-2.network.int\:2181,3\=myserver-3.network.int\:2183 orchestratorId$Long=1 orchestratorPort$Long=2181 # Messaging server configuration isNewServer$Boolean=true isSecured$Boolean=true serverPort$Long=9092 defaultReplicationFactor$Long=3 minInsyncMessagingServers$Long=2 numberOfPartitions$Long=3 #Security configuration keyPassword.encoded=jJCS=/gtvmq+/jIyIkI2b keyStorePassword.encoded=ct56ubSmq+/jgiyufb keyStoreResource=/opt/security/server.keystore.jks trustStorePassword.encoded=juy7=/uyver4GIH7f trustStoreResource=/opt/security/server.truststore.jks # Installer settings shouldCreateResponseFile$Boolean=true sys.adminRights$Boolean=true sys.languageId=en Launch the installer from the terminal using the following command: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -q -varfile response.varfile Configure TLS on the installation You are advised to configure TLS on the messaging system to secure your deployment and use it in Decision Insight, see TLS Configuration Change the working directory (optional) To specify the directory where the node can perform read/write operations and where your data will be stored, you can change the <working directory>. To specify the <working directory> , perform the following steps : Copy the content of <install directory>/var to <working directory> Edit the following files: <install directory>/conf/messaging-server/path.conf WORKING_DIR=<working directory> <install directory>/conf/orchestrator/path.conf WORKING_DIR=<working directory> Install as a service (optional) Multi platform configuration If you want more than one instance of Decision Insight Messaging Service installed as services on the same environment, you should edit the property com.axway.platform.name= in <install directory>/conf/(orchestrator|messaging-server)/platform.properties. This value will be used as the service name. (Default names are DecisionInsightMessagingSystemOrchestrator and DecisionInsightMessagingSystemServer) Execute the provided install script located in <install directory>/bin/(orchestrator|messaging-server)-service-register.sh under the user <System administration account> > ./orchestrator-service-register.sh OS distribution is ubuntu setting service auto run levels using update-rc.d > ./messaging-server-service-register.sh OS distribution is ubuntu setting service auto run levels using update-rc.d This will install the service script in /etc/init.d/<node name> and set its run levels to allow auto-start. This command checks that no other service is already registered under the same name before proceeding. By default, a DIMS node runs with root privileges. On SUSE 12, you might need to enable the service before the first start. Enable Decision Insight Messaging Service service > systemctl enable DecisionInsightMessagingSystemOrchestrator.service > systemctl enable DecisionInsightMessagingSystemServer.service Change service user account If you want to change the user who manages the node, modify the startup script /etc/init.d/<node name> and replace the line: USER=root with: USER=<Decision Insight execution account> Secure your installation (optional) In order to restrict what files the node can access or modify, you can apply the following rights: Directory <Decision Insight Messaging System administration account> rights <Decision Insight Messaging System execution account> rights <install directory>/bin/ read / write / execute read / execute <install directory>/conf/ read / write / execute read / execute <install directory>/product/ read / write / execute read / execute <working directory> read / write / execute read / write / execute Related Links
Install a node on Linux Hardware prerequisites Make sure you've checked the Hardware prerequisites before starting configuring your server System prerequisites Decision Insight Messaging System currently supports the following software prerequisites: A 64-bits Linux Operating System : Red Hat Enterprise Linux: 5.x, 6.x, 7.x, 8.x Ubuntu: 14 LTS, 16 LTS SUSE: 11, 12 Oracle Linux: 6.x, 7.x CentOS Linux: 6.x, 7.x Amazon Linux distribution An OpenJDK 11 64-bits JVM or later An OpenJDK 13 JVM is provided by the node itself but this can be changed Configuration prerequisites Please check the following configurations have been properly applied to your environment: Accounts Account Required abilities <Decision Insight Messaging System administration account> Permissions Directory Permissions <install directory> read, write, execute <working directory> read, write, execute <Decision Insight Messaging System execution account> Permissions Directory Permissions <install directory> read, execute <working directory> read, write, execute <System administration account> Register a service Update system configuration files such as /etc/security/limits.conf <install directory> is the directory where the product will be installed <working directory> is the directory where the product will write its data (by default, <working directory> is <install directory>/var) NTP Server clock must be synchronized with a NTP server. When running in a virtual environment, is it recommended to configure NTP at the hypervisor level and to install "tools" in the virtual machine in order for it to have a "stable" clock. Installation prerequisites A valid installer (DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh) with execute permission granted (chmod +x DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh) Installers can be downloaded from Axway Sphere or from Decision Insight Messaging System downloads and release notes. When installing a messaging server, a set of truststore and keystore as defined in Security prerequisites. Install a node Using the graphical mode Launch the installer Using <Decision Insight Messaging System administration account>, launch the installer in graphical mode. For that you can either: Double-click on the installer. Launch the installer from command line: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh Follow the installation steps Step 1 : Overall information Once you have successfully launched the installer on your machine, you will access the installer welcome page. Click next. Step 2 : License agreement Accept the software license agreement and click next. Step 3 : Destination directory Select an installation path that fullfils the prerequisites: <Decision Insight Messaging System administration account> must have full access <Decision Insight Messaging System execution account> must have read & execute permissions Step 4 : Orchestrator configuration From this screen, you can choose to install an orchestrator or not. If you skip it, you'll need to provide a valid link to an existing orchestrator when installing a messaging server. Orchestrator port Port used by various services to connect to the orchestrator. Orchestrator cluster connection Configure the connection to a cluster. You need to provide: a unique id for your orchestratorthis id will be used to identify your orchestrator in the cluster a connection stringcomma separated list of servers that are part of the cluster, format is : {id1}={host1}:{port1},{id2}={host2}:{port2},... Then click next. Step 5 : Install a messaging server From this screen, you can choose to install the messaging server or not. Messaging server port Port used by various services to connect to the messaging server. Connection string If you didn't install the orchestrator from the previous screen, you need to provide a connection string to connect to one. Replication factor / Minimal Synchronized Messaging Servers / Partition Number These values must be the same on all members of the cluster. For guidance on how to choose these values, refers to Sizing prerequisites. Then click next. Step 6: Security configuration If you chose to install a new messaging server in the previous step, in this screen you will need to provide the means to secure its communication using TLS mutual authentication. Secure communications is mandatory for your production deployment. If you don't need it, just uncheck "Secure communications?" Key Store Configuration Configure the JKS keystore to be used to secure communication. You will need to provide: a path to the keystore the keystore password the key password for the key in the keystore Trust Store Configuration Configure the JKS truststore to be used to secure communication. You will need to provide: a path to the truststore the truststore password See more about the information required in this screen in Security prerequisites. Then click next. Step 7 : Installation The installation process is shown as a progress bar and can take several minutes.When the installation has finished (overall installation progress is over), you can click next to see a summary of the process. Step 8 : Installation finished Software is installed and ready to use. You can check create a response file, if you want to relaunch the same installation later without having to go through all the installer screens. The response file will be generated in the installation directory. (see Using the automated mode for more information) Then, click done to close the window. Using the console mode Using <Decision Insight Messaging System administration account>, launch the installer from command line: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -c Steps are the same as those in the graphical mode. Using the automated mode You can also install a node in an unattended mode from a configuration file. You should have a previously generated response file that should look like: response.varfile # Destination directory sys.installationDir=/opt/DecisionInsightMessagingSystem # Orchestrator configuration isNewOrchestrator$Boolean=true orchestratorClusterConnectionString=2\=myserver-2.network.int\:2181,3\=myserver-3.network.int\:2183 orchestratorId$Long=1 orchestratorPort$Long=2181 # Messaging server configuration isNewServer$Boolean=true isSecured$Boolean=true serverPort$Long=9092 defaultReplicationFactor$Long=3 minInsyncMessagingServers$Long=2 numberOfPartitions$Long=3 #Security configuration keyPassword.encoded=jJCS=/gtvmq+/jIyIkI2b keyStorePassword.encoded=ct56ubSmq+/jgiyufb keyStoreResource=/opt/security/server.keystore.jks trustStorePassword.encoded=juy7=/uyver4GIH7f trustStoreResource=/opt/security/server.truststore.jks # Installer settings shouldCreateResponseFile$Boolean=true sys.adminRights$Boolean=true sys.languageId=en Launch the installer from the terminal using the following command: ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -q -varfile response.varfile Configure TLS on the installation You are advised to configure TLS on the messaging system to secure your deployment and use it in Decision Insight, see TLS Configuration Change the working directory (optional) To specify the directory where the node can perform read/write operations and where your data will be stored, you can change the <working directory>. To specify the <working directory> , perform the following steps : Copy the content of <install directory>/var to <working directory> Edit the following files: <install directory>/conf/messaging-server/path.conf WORKING_DIR=<working directory> <install directory>/conf/orchestrator/path.conf WORKING_DIR=<working directory> Install as a service (optional) Multi platform configuration If you want more than one instance of Decision Insight Messaging Service installed as services on the same environment, you should edit the property com.axway.platform.name= in <install directory>/conf/(orchestrator|messaging-server)/platform.properties. This value will be used as the service name. (Default names are DecisionInsightMessagingSystemOrchestrator and DecisionInsightMessagingSystemServer) Execute the provided install script located in <install directory>/bin/(orchestrator|messaging-server)-service-register.sh under the user <System administration account> > ./orchestrator-service-register.sh OS distribution is ubuntu setting service auto run levels using update-rc.d > ./messaging-server-service-register.sh OS distribution is ubuntu setting service auto run levels using update-rc.d This will install the service script in /etc/init.d/<node name> and set its run levels to allow auto-start. This command checks that no other service is already registered under the same name before proceeding. By default, a DIMS node runs with root privileges. On SUSE 12, you might need to enable the service before the first start. Enable Decision Insight Messaging Service service > systemctl enable DecisionInsightMessagingSystemOrchestrator.service > systemctl enable DecisionInsightMessagingSystemServer.service Change service user account If you want to change the user who manages the node, modify the startup script /etc/init.d/<node name> and replace the line: USER=root with: USER=<Decision Insight execution account> Secure your installation (optional) In order to restrict what files the node can access or modify, you can apply the following rights: Directory <Decision Insight Messaging System administration account> rights <Decision Insight Messaging System execution account> rights <install directory>/bin/ read / write / execute read / execute <install directory>/conf/ read / write / execute read / execute <install directory>/product/ read / write / execute read / execute <working directory> read / write / execute read / write / execute