一、環(huán)境信息
CentOS release 6.7 (Final)
mongo version: 3.2.6
192.168.1.173 primary
192.168.1.174 secondary
192.168.1.172 secondary or arbiter
二、安裝mongo
1、yum源配置（使用哪個(gè)版本enable=1）
# cat /etc/yum.repos.d/mongodb-org-3.2.repo
[mongodb-org-3.2]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/3.2/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-3.2.asc
[mongodb-org-2.6]
name=MongoDB 2.6 Repository
baseurl=http://downloads-distro.mongodb.org/repo/redhat/os/x86_64/
gpgcheck=0
enabled=0
2、yum install -y mongodb-org
三、replicat set 配置
1、修改配置文件(三臺(tái)服務(wù)器除了ip不一樣)：
cat /etc/mongod.conf
# mongod.conf
# for documentation of all options, see:
# http://docs.mongodb.org/manual/reference/configuration-options/
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /var/log/mongodb/mongod.log
# Where and how to store data.
storage:
dbPath: /data/mongo
# dbPath: /var/lib/mongo
journal:
enabled: true
# engine:
# mmapv1:
# wiredTiger:
# how the process runs
processManagement:
fork: true # fork and run in background
pidFilePath: /var/run/mongodb/mongod.pid # location of pidfile
# network interfaces
net:
port: 27017
bindIp: 192.168.1.173 # Listen to local interface only, comment to listen on all interfaces.
#security:
security: #副本集配置成功之后才能打開(kāi)安全認(rèn)證
authorization: enabled #開(kāi)啟認(rèn)證
keyFile: /data/mongo/mongodb-keyfile #副本集使用keyFile進(jìn)行相互認(rèn)證
#operationProfiling:
#replication:
replication:
oplogSizeMB: 2000 #oplog的大小M
replSetName: rongyi #副本集的名稱(chēng)
#sharding:
## Enterprise-Only Options
#auditLog:
#snmp:
2、配置replicat set 過(guò)程
#啟動(dòng)mongod服務(wù)
#/usr/bin/mongod -f /etc/mongod.conf
啟動(dòng)成功之后因?yàn)檫€未開(kāi)啟auth認(rèn)證，可以直接命令行登錄
#mongo 192.168.1.173
use admin
admin> config = { _id:"rongyi",members:[
... {_id:172,host:"192.168.1.172:27017",arbiterOnly:true},
... {_id:173,host:"192.168.1.173:27017"},
... {_id:174,host:"192.168.1.174:27017"}]
... }
{
"_id" : "rongyi",
"members" : [
{
"_id" : 172,
"host" : "192.168.1.172:27017",
"arbiterOnly" : true
},
{
"_id" : 173,
"host" : "192.168.1.173:27017"
},
{
"_id" : 174,
"host" : "192.168.1.174:27017"
}
]
}
admin> rs.initiate(config)
{ "ok" : 1 }
或者使用
config = { _id:"rongyi",members:[{_id:172,host:"192.168.1.172:27017"},{_id:173,host:"192.168.1.173:27017"},{_id:174,host:"192.168.1.174:27017"}]}
注：前者是一個(gè)備份節(jié)點(diǎn)，后者是兩個(gè)備份節(jié)點(diǎn)，mongo選舉的過(guò)程必須符合大多數(shù)，如果是偶數(shù)的節(jié)點(diǎn)，可以使用arbiter（仲裁節(jié)點(diǎn)），此節(jié)點(diǎn)只是為了參與選舉
使用rs.status()查看replicat set的狀態(tài)
3、創(chuàng)建管理員賬戶(這個(gè)賬戶要使用root role 否則會(huì)報(bào)錯(cuò))：
admin> db.createUser({user:"admin",pwd:"********",roles:[{ role:"root", db:"admin" }]})
Successfully added user: {
"user" : "admin",
"roles" : [
{
"role" : "root",
"db" : "admin"
}
]
}
4、配置keyfile認(rèn)證
在192.168.1.173上執(zhí)行
openssl rand -base64 741 > /data/mongo/mongodb-keyfile
chmod 600 /data/mongo/mongodb-keyfile
scp mongodb-keyfile 192.168.1.174:/data/mongo/
scp mongodb-keyfile 192.168.1.172:/data/mongo/
在配置文件中開(kāi)啟認(rèn)證：
security:
authorization: enabled
keyFile: /data/mongo/mongodb-keyfile
5、重啟mongod服務(wù)
/etc/init.d/mongod stop && /usr/bin/mongod -f /etc/mongod.conf
四、登錄驗(yàn)證
mongo 192.168.1.173:27017/admin -uadmin -p*******
admin> rs.status()
{
"set" : "rongyi",
"date" : ISODate("2016-06-24T08:31:28.549Z"),
"myState" : 1,
"term" : NumberLong(7),
"heartbeatIntervalMillis" : NumberLong(2000),
"members" : [
{
"_id" : 172,
"name" : "192.168.1.172:27017",
"health" : 1,
"state" : 7,
"stateStr" : "ARBITER", #使用了仲裁
"uptime" : 19572,
"lastHeartbeat" : ISODate("2016-06-24T08:31:26.604Z"),
"lastHeartbeatRecv" : ISODate("2016-06-24T08:31:24.145Z"),
"pingMs" : NumberLong(0),
"configVersion" : 3
},
{
"_id" : 173,
"name" : "192.168.1.173:27017",
"health" : 1,
"state" : 1,
"stateStr" : "PRIMARY",
"uptime" : 19573,
"optime" : {
"ts" : Timestamp(1466740497, 1),
"t" : NumberLong(7)
},
"optimeDate" : ISODate("2016-06-24T03:54:57Z"),
"electionTime" : Timestamp(1466737527, 1),
"electionDate" : ISODate("2016-06-24T03:05:27Z"),
"configVersion" : 3,
"self" : true
},
{
"_id" : 174,
"name" : "192.168.1.174:27017",
"health" : 1,
"state" : 2,
"stateStr" : "SECONDARY",
"uptime" : 19567,
"optime" : {
"ts" : Timestamp(1466740497, 1),
"t" : NumberLong(7)
},
"optimeDate" : ISODate("2016-06-24T03:54:57Z"),
"lastHeartbeat" : ISODate("2016-06-24T08:31:26.604Z"),
"lastHeartbeatRecv" : ISODate("2016-06-24T08:31:26.604Z"),
"pingMs" : NumberLong(0),
"syncingTo" : "192.168.1.173:27017",
"configVersion" : 3
}
],
"ok" : 1
}
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)cdcxhl.cn，海內(nèi)外云服務(wù)器15元起步，三天無(wú)理由+7*72小時(shí)售后在線，公司持有idc許可證，提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì)，專(zhuān)為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。
重慶分公司
重慶分公司
