2012年2月22日 星期三

RHEL initial Environment Setup SOP

I. Delete default firewall

VNC connection will not establish success if the default RHEL firewall exists.
1. list existed rule.

# iptables --list
output:
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255
3    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0
5    ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp dpt:5353
6    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:631
7    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:631
8    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
9    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
10   REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited
2. Temporarily delete all the firewall rules

# iptables --flush
2a. (Option) Permanently remove all the default firewall rules
The permanent routting rule  stores in /etc/sysconfig/iptables file
# service iptables save

II. Setup DNS
Edit /etc/resolve.conf




III. Edit etc/hosts
Add a new mapping rule:    .

Reason: 
1. Due to jmx bundle will use getHost() to get ip address. 
2. Tibco message will not broadcast success without this setting.



IV. Add a sudo user and add the new user to /etc/sudoers
funkie ALL=(ALL)              ALL  //Syntax: user MACHINE=COMMANDS 

IV. Setup VNC
1. Uncomment the two line in  ~/.vnc/xtartup

unset SESSION_MANAGER 
exec /etc/X11/xinit/xinitrc

2. start vncservice with the new user that created in part V.

# vncserver :9527 -geometry 1440x880

VI. Create new yum repository

 1. copy the content that listed as below into /etc/yum.repo.d/centos.repo

[c5base] name=CentOS-$releasever - Base mirrorlist=http://mirrorlist.centos.org/?release=5&arch=$basearch&repo=os gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
#released updates [c5updates] name=CentOS-$releasever - Updates mirrorlist=http://mirrorlist.centos.org/?release=5&arch=$basearch&repo=updates gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
#packages used/produced in the build but not released [c5addons] name=CentOS-$releasever - Addons mirrorlist=http://mirrorlist.centos.org/?release=5&arch=$basearch&repo=addons gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
#additional packages that may be useful [c5extras] name=CentOS-$releasever - Extras mirrorlist=http://mirrorlist.centos.org/?release=5&arch=$basearch&repo=extras gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
#additional packages that extend functionality of existing packages [c5plus] name=CentOS-$releasever - Plus mirrorlist=http://mirrorlist.centos.org/?release=5&arch=$basearch&repo=centosplus gpgcheck=1 enabled=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-5
2. Clean yum cache

# yum clean all

VI. Check code from svn repository


svn command is already exists.




VII. Install JDK


To download rpm from official site and install it.
We can use the command as below to check the each file installation location.

# rpm -ql <rpm-package-name>



VIII. Install Tibco

1. The installation path should be(i.e., this just private convention).
2.a. setup LD_LIBRARY_PATH in /virgo/bin/startup.sh
2.b. setup LD_LIBRARY_PATH in ~/bin/springsource.sh
3. "chown" after installation
4. put the license file in one of $PATH

IX. Install MySQL


1. install though yum
# yum install mysql-server<mysql-server>
2. Auto activate mysqld when booting.

# vim /etc/rc.local
3. Grant remote connection

mysql > GRANT ALL PRIVILEGES ON *.* TO <username>@'%' IDENTIFIED BY '' WITH    GRANT OPTION;

4. Create fixhub db manually and quickfix db through quickfix sql tool


X. Checkout virgo from SVN

沒有留言:

張貼留言