Project

General

Profile

F29Installation » History » Revision 36

Revision 35 (Gerd Pokorra, 2019-01-04 04:06) → Revision 36/41 (Gerd Pokorra, 2019-01-04 04:11)

h1. HowTo Install Redmine 4.0.0 on Fedora 29 

 {{toc}} 

 The chapter for Apache is missing and the text of that chapter will be added in the next two weeks. 

 h2.    System Requirements 

 It is assumed that the Server Edition is installed on the system in this guide. 

 h3. Updating the System 
  
 It is recommended to install Redmine on an update system. To ensure that all installed packages are up-to-date issue the following command: 

 <pre>> dnf update 
 </pre> 

 h3. Installing Dependencies 

 A number of dependencies need to be installed: 

 <pre>> dnf install rubygem-bundler 
 > dnf install rubygem-rails 

 > dnf install ruby-devel rubygem-rmagick 
 > dnf install gcc redhat-rpm-config 

 > dnf groupinstall "C Development Tools and Libraries" 
 > dnf groupinstall "Development Tools" 
 </pre> 

 Database adapter for PostgreSQL: 
  
 <pre>> dnf install rubygem-pg 
 </pre> 

 Database adapter for MySQL: 
 <pre>> dnf install rubygem-mysql2 
 </pre> 

 Database adapter for MS SQL: 

 The Fedora distribution has no ruby software package for @tiny_tds@. The following dependency is needed for the build: 

 <pre>> dnf install freetds-devel 
 > # Now the build should work 
 > bundle install --without development test 
 </pre> 



 The list of dependencies may not complete. Problems of the installation or build of a compoment can be solved by installing the necessary dependency. 

 h2. Step 1 - Obtaining Redmine 

 Get the Redmine source code by downloading the packaged release. 

 <pre>> dnf install wget 

 > mkdir /var/www 
 > cd /var/www 

 > wget http://www.redmine.org/releases/redmine-4.0.0.tar.gz 
 > tar xf redmine-4.0.0.tar.gz 
 </pre> 

 At this guide is accepted that the location of the Redmine source code is: 

 <pre>/var/www/redmine-4.0.0 
 </pre> 

 For example the nginx configuration refer to the path @/var/www/redmine-4.0.0@. 

 h2. Setp 2 - Setup a local database 

 This section discribes the setup of a database server that will be configured to allow access from the localhost. 

 h3. PostgreSQL 

 The followings commands are for installing the packages, initializing the database, enable and start the postgresql server, switch the user to interact with @postgres@, create an empty database and accompanying user. 

 <pre>> dnf install postgresql-server postgresql-contrib 
 > postgresql-setup --initdb --unit postgresql 
  * Initializing database in '/var/lib/pgsql/data' 
  * Initialized, logs are in /var/lib/pgsql/initdb_postgresql.log 
 > 
 > systemctl enable postgresql 
 > systemctl start postgresql 
 > su - postgres 
 > psql 
 psql (10.6) 
 Type "help" for help. 

 postgres=# CREATE ROLE redmine LOGIN ENCRYPTED PASSWORD 'my_secret' NOINHERIT VALID UNTIL 'infinity'; 
 CREATE ROLE 
 postgres=# CREATE DATABASE redmine WITH ENCODING='UTF8' OWNER=redmine; 
 CREATE DATABASE 
 postgres=# \q 
 > exit 
 </pre> 

 Edit the file @/var/lib/pgsql/data/pg_hba.conf@ to specify that the client has to supply password processed with MD5 algorithm: 

 <pre>#host      all               all               127.0.0.1/32              ident 
 host      all               all               127.0.0.1/32              md5 
 # IPv6 local connections: 
 #host      all               all               ::1/128                   ident 
 host      all               all               ::1/128                   md5 
 </pre> 

 You can check the access with the following command: 

 <pre>> su - postgres 
 > psql -h localhost -U redmine redmine 
 </pre> 

 The appropriate Redmine database configuration file for local access is: 

 <pre>> cat /var/www/redmine-4.0.0/config/database.yml 
 # PostgreSQL configuration 
 production: 
   adapter: postgresql 
   database: redmine 
   host: localhost 
   username: redmine 
   password: "my_secret" 
   encoding: utf8 
   schema_search_path: public 
 </pre> 

 If you want to use IPv4 you have to specify @localhost4@ as hostname. 

 h3. MySQL 

 Install the MySQL repositry 

 <pre>> dnf -y install https://dev.mysql.com/get/mysql80-community-release-fc29-1.noarch.rpm 
 </pre> 

 If you prefer to stick to MySQL 5.7 

 <pre>> dnf config-manager --set-enabled mysql57-community 
 > dnf config-manager --set-disabled mysql80-community 
 </pre> 

 Install the MySQL server package, start the MySQL server and autostart the daemon on boot 

 <pre>> dnf -y install mysql-community-server 
 > systemctl start mysqld.service 
 > systemctl enable mysqld.service 
 </pre> 

 Get your generated random root password you will need it at the next step. 

 <pre>> grep 'A temporary password is generated for root@localhost' /var/log/mysqld.log |tail -1 
 </pre> 

 Start the secure installation assistant to 

 * change root password 
 * remove anonymous users 
 * disallow root login remotely 
 * remove test database and access to it 
 * reload privilege tables 

 <pre>> mysql_secure_installation 
 </pre> 

 Creation of user and database for Redmine 

 <pre>> mysql -h localhost -u root -p 
 Enter password: 
 ... 
 mysql> CREATE DATABASE redmine CHARACTER SET utf8mb4; 
 mysql> CREATE USER 'redmine'@'localhost' IDENTIFIED BY 'my_secret'; 
 mysql> GRANT ALL PRIVILEGES ON redmine.* TO 'redmine'@'localhost'; 
 mysql> \q 
 </pre> 

 The appropriate Redmine database configuration file for local accessing the MySQL database is: 

 <pre>> cat /var/www/redmine-4.0.0/config/database.yml 
 # MySQL configuration 
 production: 
   adapter: mysql2 
   database: redmine 
   host: localhost 
   username: redmine 
   password: "my_secret" 
 </pre> 

 h2. Step 3 to Step 9 

 For Step 3 to Step 9 follow the [[RedmineInstall#Step-3-Database-connection-configuration|generic installation instructions]]. Following is the overview of the commands: 

 <pre>> bundle install --without development test 
 > bundle exec rake generate_secret_token 
 > RAILS_ENV=production bundle exec rake db:migrate 
 > RAILS_ENV=production bundle exec rake redmine:load_default_data 

 > mkdir -p tmp tmp/pdf public/plugin_assets 
 > chown -R redmine:redmine files log tmp public/plugin_assets 
 > chmod -R 755 files log tmp public/plugin_assets 

 > find files log tmp public/plugin_assets -type f -exec chmod -x {} + 

 > bundle exec rails server webrick -e production 
 </pre> 

 h2. Firewall 

 Open the firewall for https: 

 <pre>> firewall-cmd --add-service=https 
 > firewall-cmd --permanent --add-service=https 
 </pre> 

 h2. Web Server 

 h3. Nginx/Passenger 

 The Fedora @nginx@ package do not include Passenger, so you have to build @nginx@ with the passenger module. The guide assume that the sources are extracted under the directory @/opt@ . The @nginx@ software will be installed at @/opt/ngnix@. At the time of writting that guide this was the current stable releases of @passenger@ and @nginx@: 

 * passenger-6.0.0 
 * nginx-1.14.2 

 h4. Downloading the sources: 

 <pre>Passenger 

 > cd /opt 
 > wget https://s3.amazonaws.com/phusion-passenger/releases/passenger-6.0.0.tar.gz 
 > tar xf passenger-6.0.0.tar.gz 

 Nginx 

 > wget http://nginx.org/download/nginx-1.14.2.tar.gz 
 > mkdir /opt/src 
 > cd /opt/src 
 > tar xf nginx-1.14.2.tar.gz 
 </pre> 

 h4. Installing additional packages 

 For the build of @passenger@ and @nginx@ the following additional packages are needed to be installed: 

 <pre>> dnf install install gcc-c++ libcurl-devel openssl-devel zlib-devel 
 </pre> 

 h4. Execute the ruby script for building and installing 

 The simplest way to build and install the @nginx@ web server with the @passenger@ module is to run the script @passenger-install-nginx-module@. 

 <pre>> /opt/passenger-6.0.0/bin 
 > ./passenger-install-nginx-module --prefix=/opt/nginx --nginx-source-dir=/opt/src/nginx-1.14.2 --languages ruby 
 </pre> 

 With the same @passenger@ locality the installer modify the @nginx@ configuration file @/opt/nginx/conf/nginx.conf@ and output the same text: 

 <pre>    http { 
       ... 
       passenger_root /opt/passenger-6.0.0; 
       passenger_ruby /usr/bin/ruby; 
       ... 
   } 
 </pre> 

 h4. Add a systemd service file 

 To start the @nginx@ process during the boot add the file @/usr/lib/systemd/system/nginx.service@ with the following content: 

 <pre>[Unit] 
 Description=The nginx HTTP and reverse proxy server 
 After=network.target remote-fs.target nss-lookup.target 

 [Service] 
 Type=forking 
 #PIDFile=/run/nginx.pid 
 PIDFile=/opt/nginx/logs/nginx.pid 
 # Nginx will fail to start if /run/nginx.pid already exists but has the wrong 
 # SELinux context. This might happen when running `nginx -t` from the cmdline. 
 # https://bugzilla.redhat.com/show_bug.cgi?id=1268621 
 ExecStartPre=/usr/bin/rm -f /opt/nginx/logs/nginx.pid 
 #ExecStartPre=/usr/sbin/nginx -t 
 #ExecStart=/usr/sbin/nginx 
 ExecStartPre=/opt/nginx/sbin/nginx -t 
 ExecStart=/opt/nginx/sbin/nginx -c /opt/nginx/conf/nginx.conf 
 ExecReload=/bin/kill -s HUP $MAINPID 
 KillSignal=SIGQUIT 
 TimeoutStopSec=5 
 KillMode=mixed 
 PrivateTmp=true 

 [Install] 
 WantedBy=multi-user.target 
 </pre> 

 The paths are modified to start the executable @/opt/nginx/sbin/nginx@. 

 <pre>> systemctl start nginx 
 > systemctl enable nginx 
 </pre> 

 h4. Nginx Configuration 

 For http add the two lines and comment out the four lines: 

 <pre>      server { 
         listen         80; 
 ... 
         root           /var/www/redmine-4.0.0/public; 
         passenger_enabled on; 
         #location / { 
         #      root     html; 
         #      index    index.html index.htm; 
         #} 
 ... 
        } 
 </pre> 

 For https add you can use lines like this: 

 <pre>      # HTTPS server 
     # 
     server { 
         listen         443 ssl; 
         server_name    my_web_serv.domain; 

         ssl_certificate        /etc/ssl/certs/my_web_serv.pem; 
         ssl_certificate_key    /etc/ssl/private/privkey.pem; 

         root           /var/www/redmine-4.0.0/public; 
         passenger_enabled on; 
     } 
 </pre> 

 h3. Apache