Command and code examples

Some examples require you to run terminal commands as root.

Placeholder variables

Example commands may describe placeholder variables using bash parameter substitution like this:

In this case, the example usually asks you to set the value of placeholder_variable_name beforehand. You can also substitute it in the command yourself:

Software downloaders and package managers

When the documentation includes code snippets to provide examples of how to retrieve a product to install, most code examples use wget or curl.

If these products are not installed on your system, download and install them.

Otherwise, feel free to use any other viable alternative that enables retrieving assets and resources from the Internet.

yum and rpm are standard package managers for both CentOS and RHEL.

Your system should also be able to pin/lock specific versions of Intelligence Center dependencies after installing them.

To do this, you can use yum-versionlock:

Hardware requirements

Hardware requirements for EclecticIQ Intelligence Center can vary, depending on the target system and the environment you plan to install the Intelligence Center to. The requirements outlined in this section are general guidelines that work in most cases, but they are not tailored to any specific situation or use case.

Software requirements

Databases and network binding

On a single machine installation, network interface bindings for services are set to 127.0.0.1 by default, except for PostgreSQL which has a different configuration.

Instructions may have asked you to change this to a more permissive binding in multi-machine installations, or you may be using an older installation where defaults were set to 0.0.0.0.

The table below shows a list of configuration files where network interface bindings are set for each service.

You may want to change these bindings to suit your environment.

Web browsers

The Intelligence Center web interface supports the following browsers.

Fully supported (latest versions of):

• Google Chrome

Functionally supported (latest versions of):

• Microsoft Edge

• Mozilla Firefox

• Microsoft Internet Explorer 11

• Opera

• Apple Safari

Updating products at OS level

We recommend that you review all operating system (OS) package updates when updating the Intelligence Center host.

To retrieve a list of libraries and the packages that make them available, start a terminal session, and then run the following command:

Example response output:

Third-party products

Third-party software includes required dependencies for EclecticIQ Platform to operate correctly.

Make sure that the following software products are already installed on the target system before installing the platform.

During installation, the platform checks for the dependencies.

If they are missing, the installation procedure aborts.

Bundled third-party software

EclecticIQ Platform is bundled with the following third-party software. Each product on the list abides by its own terms and conditions and its own license.

Check SELinux status

If SELinux is installed, check if it is enabled or disabled by running the following command:

If SELinux is disabled, the response includes the following line:

Check SELinux mode

You can check which SELinux mode is currently active by running the following command:

The allowed modes are:

• enforcing

• permissive

• disabled

The active mode may not be the same as the SELINUX value defined in the SELinux global configuration file:

This can occur after changing and saving SELinux global configuration file, and before executing a system reboot for the changes to become effective.

Set SELinux to permissive mode

The recommended SELinux mode to offload complexity during installation and configuration is permissive.

To set SELinux to work permissively run the following command:

Post-installation check

• If SELinux is installed and it is enabled, run the following command:

  # Enforce SELinux to the platform backend files

  semanage fcontext -a -t etc_t "/opt/eclecticiq-platform-backend(/.*)?"

  # Enforce SELinux to Nginx web server files

  semanage fcontext -a -t httpd_config_t "/opt/eclecticiq-platform-backend/etc/nginx(/.*)?"

  semanage fcontext -a -t httpd_config_t "/opt/eclecticiq-platform-backend/etc/eclecticiq-nginx(/.*)?"

  # Enforce SELinux to Redis files

  # Replace '${path_to_redis_data_dir}' with the actual path to the the Redis data dir

  semanage fcontext -a -t redis_var_lib_t "${path_to_redis_data_dir}/redis(/.*)?"

  # By default, newly created files and directories inherit the SELinux type

  # of the corresponding parents, so that log files have the correct type.

  # However, we do not want to relabel existing logs.

  semanage fcontext -a -t var_log_t -f d "/var/log"

• If SELinux policy-related errors occur, the command returns a response that can be similar to this example:

  SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.31, searching for an older version.

  SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.31: No such file or directory

  /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2.

  The response provides more context about the affected files and the reasons why it was not possible to set the security labels.

SELinux is not installed

If SELinux is not installed on the target system, do the following:

• After completing the platform installation, install and enable SELinux.

• To set the correct security contexts, execute the following script:

  BASE_PATH="/opt/eclecticiq-platform-backend"

  if [ -x "$(command -v semanage)" ]; then SELINUX_MODE=$(getenforce)

  if ! [ $SELINUX_MODE == "Disabled" ]; then semanage fcontext -a -t etc_t "$BASE_PATH(/.*)?"

  # Enforce SELinux to the platform backend files

  semanage fcontext -a -t etc_t "$BASE_PATH(/.*)?"

  # Enforce SELinux to Nginx web server files

  semanage fcontext -a -t httpd_config_t "$BASE_PATH/etc/nginx(/.*)?"

  semanage fcontext -a -t httpd_config_t "$BASE_PATH/etc/eclecticiq-nginx(/.*)?"

  # Enforce SELinux to Redis files

  # Replace '${path_to_redis_data_dir}' with the actual path to the the Redis data dir

  semanage fcontext -a -t redis_var_lib_t "${path_to_redis_data_dir}/redis(/.*)?"

  # By default, newly created files and directories inherit the SELinux type

  # of the corresponding parents, so that log files have the correct type.

  # However, we do not want to relabel existing logs.

  semanage fcontext -a -t var_log_t -f d "/var/log"

  restorecon -RF $BASE_PATH

  echo "SELinux security labels configured."

  else echo "SELinux is not enabled. Security labels won't be configured."

  fi else echo "SELinux is not installed. Security labels won't be configured."

  fi

  You may need to reboot the system for the changes to become effective.