Install a node on Linux


Hardware prerequisites

Make sure you've checked the Hardware prerequisites before starting configuring your server

System prerequisites

Decision Insight Messaging System currently supports the following software prerequisites:

  • 64-bits Linux Operating System :
    • Red Hat Enterprise Linux: 5.x6.x, 7.x, 8.x

    • Ubuntu: 14 LTS, 16 LTS

    • SUSE: 11, 12
    • Oracle Linux: 6.x, 7.x
    • CentOS Linux: 6.x, 7.x
    • Amazon Linux distribution
  • An OpenJDK 11 64-bits JVM or later
    • An OpenJDK 13 JVM is provided by the node itself but this can be changed

Configuration prerequisites

Please check the following configurations have been properly applied to your environment:

Accounts

Account Required abilities
<Decision Insight Messaging System administration account>
  • Permissions

    Directory Permissions
    <install directory> read, write, execute

    <working directory>

    read, write, execute
<Decision Insight Messaging System execution account>
  • Permissions

    Directory Permissions
    <install directory> read, execute
    <working directory> read, write, execute
<System administration account>
  • Register a service
  • Update system configuration files such as /etc/security/limits.conf

<install directory> is the directory where the product will be installed

<working directory> is the directory where the product will write its data (by default, <working directory> is <install directory>/var)

NTP

Server clock must be synchronized with a NTP server.

When running in a virtual environment, is it recommended to configure NTP at the hypervisor level and to install "tools" in the virtual machine in order for it to have a "stable" clock.

Installation prerequisites

Install a node

Using the graphical mode

Launch  the installer

Using <Decision Insight Messaging System administration account>, launch the installer in graphical mode. For that you can either:

  • Double-click on the installer.

  • Launch the installer from command line:

    ./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh

Follow the installation steps

Step 1 : Overall information

Once you have successfully launched the installer on your machine, you will access the installer welcome page. Click next.

Step 2 : License agreement

Accept the software license agreement and click next.

Step 3 : Destination directory

Select an installation path that fullfils the prerequisites:

  • <Decision Insight Messaging System administration account> must have full access
  • <Decision Insight Messaging System execution account> must have read & execute permissions
Step 4 : Orchestrator configuration

From this screen, you can choose to install an orchestrator or not.

If you skip it, you'll need to provide a valid link to an existing orchestrator when installing a messaging server.

Orchestrator port

Port used by various services to connect to the orchestrator.

Orchestrator cluster connection

Configure the connection to a cluster.

You need to provide:

  • a unique id for your orchestrator
    this id will be used to identify your orchestrator in the cluster
  • a connection string
    comma separated list of servers that are part of the cluster, format is : {id1}={host1}:{port1},{id2}={host2}:{port2},...

Then click next.

Step 5 : Install a messaging server

From this screen, you can choose to install the messaging server or not.

Messaging server port

Port used by various services to connect to the messaging server.

Connection string

If you didn't install the orchestrator from the previous screen, you need to provide a connection string to connect to one.

Replication factor / Minimal Synchronized Messaging Servers / Partition Number

These values must be the same on all members of the cluster.

For guidance on how to choose these values, refers to Sizing prerequisites.

Then click next.

Step 6: Security configuration

If you chose to install a new messaging server in the previous step, in this screen you will need to provide the means to secure its communication using TLS mutual authentication. Secure communications is mandatory for your production deployment. If you don't need it, just uncheck "Secure communications?"

Key Store Configuration

Configure the JKS keystore to be used to secure communication. You will need to provide:

  • a path to the keystore
  • the keystore password
  • the key password for the key in the keystore

Trust Store Configuration

Configure the JKS truststore to be used to secure communication. You will need to provide:

  • a path to the truststore
  • the truststore password

See more about the information required in this screen in Security prerequisites.

Then click next.

Step 7 : Installation

The installation process is shown as a progress bar and can take several minutes.
When the installation has finished (overall installation progress is over), you can click next to see a summary of the process.

Step 8 : Installation finished

Software is installed and ready to use.

You can check create a response file, if you want to relaunch the same installation later without having to go through all the installer screens. The response file will be generated in the installation directory. (see Using the automated mode for more information)

Then, click done to close the window.

Using the console mode

Using <Decision Insight Messaging System administration account>, launch the installer from command line:

./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -c

Steps are the same as those in the graphical mode.

Using the automated mode

You can also install a node in an unattended mode from a configuration file.

You should have a previously generated response file that should look like:

response.varfile
# Destination directory
sys.installationDir=/opt/DecisionInsightMessagingSystem
 
# Orchestrator configuration
isNewOrchestrator$Boolean=true
orchestratorClusterConnectionString=2\=myserver-2.network.int\:2181,3\=myserver-3.network.int\:2183
orchestratorId$Long=1
orchestratorPort$Long=2181
 
# Messaging server configuration
isNewServer$Boolean=true
isSecured$Boolean=true
serverPort$Long=9092
defaultReplicationFactor$Long=3
minInsyncMessagingServers$Long=2
numberOfPartitions$Long=3

#Security configuration
keyPassword.encoded=jJCS=/gtvmq+/jIyIkI2b
keyStorePassword.encoded=ct56ubSmq+/jgiyufb
keyStoreResource=/opt/security/server.keystore.jks
trustStorePassword.encoded=juy7=/uyver4GIH7f
trustStoreResource=/opt/security/server.truststore.jks
 
# Installer settings
shouldCreateResponseFile$Boolean=true
sys.adminRights$Boolean=true
sys.languageId=en

Launch the installer from the terminal using the following command:

./DecisionInsightMessagingSystem_${release}_Install_linux-x86-64.sh -q -varfile response.varfile

Configure TLS on the installation

You are advised to configure TLS on the messaging system to secure your deployment and use it in Decision Insight, see TLS Configuration

Change the working directory (optional)

To specify the directory where the node can perform read/write operations and where your data will be stored, you can change the <working directory>.

To specify the <working directory> , perform the following steps :

  1. Copy the content of <install directory>/var to  <working directory>
  2. Edit the following files:
<install directory>/conf/messaging-server/path.conf
WORKING_DIR=<working directory>
<install directory>/conf/orchestrator/path.conf
WORKING_DIR=<working directory>

Install as a service (optional)

Multi platform configuration

If you want more than one instance of Decision Insight Messaging Service installed as services on the same environment, you should edit the property com.axway.platform.name= in <install directory>/conf/(orchestrator|messaging-server)/platform.properties.

This value will be used as the service name. (Default names are DecisionInsightMessagingSystemOrchestrator and DecisionInsightMessagingSystemServer)

Execute the provided install script located in <install directory>/bin/(orchestrator|messaging-server)-service-register.sh under the user <System administration account>

> ./orchestrator-service-register.sh
OS distribution is ubuntu
setting service auto run levels using update-rc.d
> ./messaging-server-service-register.sh
OS distribution is ubuntu
setting service auto run levels using update-rc.d

This will install the service script in /etc/init.d/<node name> and set its run levels to allow auto-start. This command checks that no other service is already registered under the same name before proceeding.

By default, a DIMS node runs with root privileges.

On SUSE 12, you might need to enable the service before the first start.

Enable Decision Insight Messaging Service service
> systemctl enable DecisionInsightMessagingSystemOrchestrator.service
> systemctl enable DecisionInsightMessagingSystemServer.service

Change service user account

If you want to change the user who manages the node, modify the startup script /etc/init.d/<node name> and replace the line:

USER=root

with:

USER=<Decision Insight execution account>

Secure your installation (optional)

In order to restrict what files the node can access or modify, you can apply the following rights:

Directory

<Decision Insight Messaging System administration account> rights

<Decision Insight Messaging System execution account> rights

<install directory>/bin/

read / write / execute

read / execute

<install directory>/conf/

read / write / execute

read / execute

<install directory>/product/

read / write / execute

read / execute

<working directory>

read / write / execute

read / write / execute

Related Links