Install on two machines Rocky Linux#

Deprecated: Use installation playbooks instead

Instructions to manually install and upgrade EclecticIQ Intelligence Center, and using rundoc to install or upgrade EclecticIQ Intelligence Center, are deprecated.

Use EclecticIQ Intelligence Center installation playbooks instead.

Tip

Make sure you’ve set up the repositories before attempting these instructions.

This guide walks you through installing the Intelligence Center on two hosts:

Host 1: database, services
Host 2: Intelligence Center

You must finish installing databases and services on Host 1 before installing the Intelligence Center on Host 2.

On Host 1#

This procedure consists of the following steps:

Install Java.
Install Postfix.
Set a basic configuration by defining the variables to use during the database installation.
Install and configure the databases.
Enable and start the database services.

Install Java#

Install Java 11 (OpenJDK).

yum -y install java-11-openjdk-headless tzdata-java
update-alternatives --set java $(readlink -f /usr/lib/jvm/jre-11/bin/java)

Install Postfix#

Some functionality of Intelligence Center relies on sending emails. For that an MTA has to be installed.

yum -y install postfix

Set service locations in environment variables#

Set the syslog_server environment variable to the location of the Logstash service on the network.

syslog_server=

Env. variable	Description
`syslog_server`	Network address of Logstash service.

Set credentials in environment variables#

Set as environment variables the credentials needed to connect to services:

db_user=
db_name=
db_pass=
redis_pass=

Env. variable	Description
`db_user`	PostgreSQL user name.
`db_pass`	PostgreSQL user password.
`db_name`	Name of PostgreSQL database used by the IC.
`redis_pass`	Password for `redis` user.

Alternatively, set these in the /etc/default/eclecticiq-platform file:

cat << EOF >> /etc/default/eclecticiq-platform
db_user=${db_user}
db_name=${db_name}
db_pass=${db_pass}
redis_pass=${redis_pass}
syslog_server=${syslog_server}
EOF

Install the databases package#

Install the databases package:

# Install the databases
yum -y install eclecticiq-platform-databases

Configure the services#

⚠️ Permissive defaults

Instructions here set permissive default network bindings.

You should change these to a more restrictive configuration.

Modify configuration files for each service to allow them to listen for connections from Host 2. The following commands show how to set each service to listen on 0.0.0.0:

# Redis bind address
echo "bind 0.0.0.0" >> /etc/eclecticiq-redis/local.conf

# Elasticsearch bind address
echo -e "[Service]\nEnvironment=BINDING_ADDRESS=0.0.0.0" > /etc/systemd/system/elasticsearch.service.d/20-eclecticiq_binding_address.conf

Start and enable third-party services#

Start and enable the services:

# start/enable 3rd party services
for x in \
    elasticsearch \
    kibana \
    nginx \
    postfix \
    postgresql-11 \
    redis \
    statsite \
    logstash \
    ; do
        systemctl start $x
        systemctl enable $x
done

On Host 2#

Start installing the platform on its dedicated server only after completing installing the databases on their dedicated server.

This procedure consists of the following steps:

Set a basic configuration by defining the hostnames and the credentials to use during the platform installation.
Install the platform backend and frontend.
Enable and start the platform services on the local host.

Set service locations in environment variables#

Set the following environment variables to each services’ location on the network:

db_host=
redis_host=
es_host=
syslog_server=

Env. variable	Description
`db_host`	Network address of PostgreSQL service.
`redis_host`	Network address of Redis service.
`es_host`	Network address of Elasticsearch service.
`syslog_server`	Network address of Logstash service.

Set credentials in environment variables#

Set as environment variables the credentials needed to connect to services:

db_user=
db_name=
db_pass=
redis_pass=

Env. variable	Description
`db_user`	PostgreSQL user name.
`db_pass`	PostgreSQL user password.
`db_name`	Name of PostgreSQL database used by the IC.
`redis_pass`	Password for `redis` user.

Alternatively, set these in the /etc/default/eclecticiq-platform file:

cat << EOF >> /etc/default/eclecticiq-platform
db_user=${db_user}
db_name=${db_name}
db_pass=${db_pass}
redis_pass=${redis_pass}
syslog_server=${syslog_server}
EOF

Install the Intelligence Center#

Set a secret key in /etc/default/eclecticiq-platform:

EIQ_SECRET_KEY=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
echo "EIQ_SECRET_KEY=$EIQ_SECRET_KEY" >> /etc/default/eclecticiq-platform

Then, install the IC packages in the order shown:

# Install the backend
yum -y install eclecticiq-platform-backend-all

# Install the frontend and documentation pacakges
yum -y install eclecticiq-platform-frontend eclecticiq-platform-docs

Finally, restrict access to IC configuration files:

chown root:eclecticiq /etc/default/eclecticiq-platform*
chmod 640 /etc/default/eclecticiq-platform*

Install the extensions#

Install all extensions:

📔 You must set up the /opt/eclecticiq-platform-backend/pip.conf and ~/.netrc files in “Set up the repositories” for this command to work.

# Uninstall old extensions from venv
/opt/eclecticiq-platform-backend/bin/pip freeze | grep '^eclecticiq-extension-' | grep -v '^eclecticiq-extension-api=' | cut -d= -f1 | xargs -r /opt/eclecticiq-platform-backend/bin/pip uninstall -y

# Install specified extensions in venv
/opt/eclecticiq-platform-backend/bin/pip install $extensions_packages

Start and enable third-party services#

Start and enable the services:

# start/enable 3rd party services
systemctl restart nginx
systemctl enable nginx
systemctl start kibana
systemctl enable kibana
systemctl start statsite
systemctl enable statsite
systemctl restart rsyslog
systemctl enable rsyslog
systemctl restart postfix
systemctl enable postfix

Database migrations#

Once done with the instructions here, you must perform database migrations to finish installing the IC.

Important

To complete the installation procedure, make sure you run the database migrations before continuing with the other configuration steps.