Установка nextcloud 10 в centos 7.

• Введение.
  • Цель: установить nextcloud 10 в centos 7. Будет использоваться nginx и postgresql.
  • Ссылки.
    • https://www.howtoforge.com/centos-owncloud-nginx - Install ownCloud with SSL and Nginx in CentOS 6.5.
    • https://www.rosehosting.com/blog/install-nextcloud-on-ubuntu-16-04/ - Install Nextcloud on Ubuntu 16.04.
    • https://docs.nextcloud.com/server/10/admin_manual/installation/nginx_examples.html - Nginx Example Configurations.
    • https://help.nextcloud.com/t/access-denied-on-nginx/2956 - Access denied on nginx.

  • Имеется виртуальный сервер, с установленным centos 7. Hostname = nextcloud-srv1. Локальный пользователь = user1 , может sudo.

• Пошаговая процедура.

  • Подключаемся через ssh к nextcloud-srv1 .

  • Смотрим версию центоса.

    user1@nextcloud-srv1 ~$ cat /etc/os-release ... PRETTY_NAME="CentOS Linux 7 (Core)" ...

  • Устанавливаем EPEL и Remi репозитории. Эти репозитории нужны для установки php 5.6 и выше. Ссылка.

    user1@nextcloud-srv1 ~$ yum repolist

    user1@nextcloud-srv1 ~$ wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm

    user1@nextcloud-srv1 ~$ wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

    user1@nextcloud-srv1 ~$ sudo rpm -Uvh epel-release-latest-7*.rpm

    user1@nextcloud-srv1 ~$ sudo rpm -Uvh remi-release-7.rpm

    user1@nextcloud-srv1 ~$ yum update

    user1@nextcloud-srv1 ~$ yum repolist Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.nsu.ru * epel: ftp.lysator.liu.se * extras: mirror.nsu.ru * remi-safe: mirror.h1host.ru * updates: mirror.nsu.ru repo id repo name status base/7/x86_64 CentOS-7 - Base 9,007 *epel/x86_64 Extra Packages for Enterprise Linux 7 - x86_64 10,641 extras/7/x86_64 CentOS-7 - Extras 391 remi-safe Safe Remi's RPM repository for Enterprise Linux 7 - x86_64 1,143 updates/7/x86_64 CentOS-7 - Updates 2,507 repolist: 23,689

  • Устанавливаем postgresql.

    user1@nextcloud-srv1 ~$ yum list | grep postgresq

    user1@nextcloud-srv1 ~$ yum install postgresql postgresql-libs postgresql-server

    user1@nextcloud-srv1 ~$ systemctl is-enabled postgresql.service

    user1@nextcloud-srv1 ~$ systemctl enable postgresql.service

    user1@nextcloud-srv1 ~$ service postgresql status

    user1@nextcloud-srv1 ~$ sudo postgresql-setup initdb

    user1@nextcloud-srv1 ~$ sudo service postgresql start

    user1@nextcloud-srv1 ~$ sudo service postgresql status

    user1@nextcloud-srv1 ~$ sudo ps -aux | grep portg

    user1@nextcloud-srv1 ~$ netstat -tan | grep 54

  • Установка PHP (php-fpm).

    user1@nextcloud-srv1 ~$ sudo yum install php-fpm php-pdo php56-php-fpm php56-php-gd php56-php-pgsql php-xml php56-php-xml php56-php-xmlrpc php-xmlrpc php-gd php56-php-gd php-pgsql php56-php-pgsql php-mbstring php56-php-mbstring

    user1@nextcloud-srv1 ~$ yum list installed | grep fpm php-fpm.x86_64 5.4.16-36.3.el7_2 @updates php56-php-fpm.x86_64 5.6.26-1.el7.remi @remi-safe

  • Установка nginx.

    user1@nextcloud-srv1 ~$ yum list | grep ngin

    user1@nextcloud-srv1 ~$ sudo yum install nginx

    user1@nextcloud-srv1 ~$ systemctl is-enabled nginx.service

    user1@nextcloud-srv1 ~$ sudo systemctl enable nginx.service

    user1@nextcloud-srv1 ~$ cat /etc/nginx/nginx.conf | grep user user nginx; ...

    user1@nextcloud-srv1 ~$ service nginx status

    user1@nextcloud-srv1 ~$ sudo service nginx start

    user1@nextcloud-srv1 ~$ service nginx status

    user1@nextcloud-srv1 ~$ sudo netstat -tanp | grep 80

  • Настройка postgresql.

    user1@nextcloud-srv1 ~$ sudo su [sudo] password for user1: [root@nextcloud-srv1 ~]# su - -c "psql" postgres psql (9.2.15) Type "help" for help. postgres=# CREATE USER nextcloudusr WITH PASSWORD 'long-passw0rd'; CREATE ROLE postgres=# CREATE DATABASE nextclouddb OWNER nextcloudusr ENCODING 'UTF8'; CREATE DATABASE postgres=# GRANT ALL PRIVILEGES ON DATABASE nextclouddb TO nextcloudusr ; GRANT postgres=# \q

    user1@nextcloud-srv1 ~$ sudo cat /var/lib/pgsql/data/pg_hba.conf ... # TYPE DATABASE USER ADDRESS METHOD # "local" is for Unix domain socket connections only local all all peer # IPv4 local connections: #host all all 127.0.0.1/32 ident host all all 127.0.0.1/32 password # IPv6 local connections: host all all ::1/128 ident ...

    user1@nextcloud-srv1 ~$ sudo service postgresql restart

  • Настройка php 5.6 (php56-fpm).

    user1@nextcloud-srv1 ~$ service php-fpm status

    user1@nextcloud-srv1 ~$ service php-fpm stop

    user1@nextcloud-srv1 ~$ service php-fpm status

    user1@nextcloud-srv1 ~$ yum list installed | grep fpm php-fpm.x86_64 5.4.16-36.3.el7_2 @updates php56-php-fpm.x86_64 5.6.26-1.el7.remi @remi-safe

    user1@nextcloud-srv1 ~$ ls /usr/lib/systemd/system/php* -l -rw-r--r--. 1 root root 564 Sep 15 18:16 /usr/lib/systemd/system/php56-php-fpm.service -rw-r--r--. 1 root root 314 Aug 12 04:27 /usr/lib/systemd/system/php-fpm.service

    user1@nextcloud-srv1 ~$ service php56-php-fpm status

    user1@nextcloud-srv1 ~$ sudo systemctl enable php56-php-fpm.service

    user1@nextcloud-srv1 ~$ service php56-php-fpm status | grep conf Redirecting to /bin/systemctl status php56-php-fpm.service ├─17146 php-fpm: master process (/opt/remi/php56/root/etc/php-fpm.conf

    user1@nextcloud-srv1 ~$ sudo service php56-php-fpm start

    user1@nextcloud-srv1 ~$ sudo systemctl disable php-fpm.service

    user1@nextcloud-srv1 ~$ sudo mv /opt/remi/php56/root/etc/www.conf /opt/remi/php56/root/etc/www.c-o-n-f

    user1@nextcloud-srv1 ~$ cat /opt/remi/php56/root/etc/php-fpm.d/nextcloud.conf [nextcloud] listen = 127.0.0.1:9000 listen.allowed_clients = 127.0.0.1 user = nginx group = nginx pm = dynamic pm.max_children = 50 pm.start_servers = 5 pm.min_spare_servers = 5 pm.max_spare_servers = 35 slowlog = /var/log/php56-fpm/nextcloud-slow.log php_admin_value[error_log] = /var/log/php56-fpm/nextcloud-error.log php_admin_flag[log_errors] = on php_value[session.save_handler] = files php_value[session.save_path] = /var/lib/php/session

    user1@nextcloud-srv1 ~$ sudo service php56-php-fpm restart

    user1@nextcloud-srv1 ~$ sudo netstat -tanp | grep 90

    user1@nextcloud-srv1 ~$ sudo ps -aux | grep fpm

  • Настройка nginx.

    user1@nextcloud-srv1 ~$ sudo mkdir /var/www

    user1@nextcloud-srv1 ~$ sudo mkdir /var/www/nextcloud

    user1@nextcloud-srv1 ~$ sudo openssl req $@ -new -x509 -days 365 -nodes -out /etc/nginx/cert/nextcloud-srv1.localnet.crt.pem -keyout /etc/nginx/cert/nextcloud-srv1.localnet.key.pem

    user1@nextcloud-srv1 ~$ cat /etc/nginx/conf.d/nextcloud.conf upstream php-handler { server 127.0.0.1:9000; } server { listen 443 ssl; server_name nextcloud-srv1.localnet ; # replace with your domain name or internal server ip # Path to the root of your installation root /var/www/nextcloud/ ; ssl on; # ssl_certificate /etc/nginx/cert/nextcloud-srv1.localnet.crt.pem ; ssl_certificate_key /etc/nginx/cert/nextcloud-srv1.localnet.key.pem ; ssl_session_timeout 5m; ssl_ciphers 'AES128+EECDH:AES128+EDH:!aNULL'; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;"; add_header X-Content-Type-Options nosniff; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag none; add_header X-Download-Options noopen; add_header X-Permitted-Cross-Domain-Policies none; access_log /var/log/nginx/nextcloud.access.log; error_log /var/log/nginx/nextcloud.error.log; location = /robots.txt { allow all; log_not_found off; access_log off; } client_max_body_size 10G; # set max upload size fastcgi_buffers 64 4K; rewrite ^/caldav(.*)$ /remote.php/caldav$1 redirect; rewrite ^/carddav(.*)$ /remote.php/carddav$1 redirect; rewrite ^/webdav(.*)$ /remote.php/webdav$1 redirect; index index.php; error_page 403 /core/templates/403.php; error_page 404 /core/templates/404.php; location ~ ^/(data|config|\.ht|db_structure\.xml|README) { deny all; } location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ { deny all; } location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) { deny all; } location / { # The following 2 rules are only needed with webfinger rewrite ^/.well-known/host-meta /public.php?service=host-meta last; rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json last; rewrite ^/.well-known/carddav /remote.php/carddav/ redirect; rewrite ^/.well-known/caldav /remote.php/caldav/ redirect; rewrite ^(/core/doc/[^\/]+/)$ $1/index.html; try_files $uri $uri/ =404; allow all; } location ~ \.php(?:$|/) { fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param HTTPS on; fastcgi_pass php-handler; fastcgi_intercept_errors on; } location ~* ^.+\.(jpg|jpeg|gif|bmp|ico|png|css|js|swf)$ { expires 30d; # Optional: Don't log access to assets access_log off; } location ~* \.(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$ { try_files $uri /index.php$uri$is_args$args; access_log off; } location ~ /\.ht { deny all; } location ~* \.(?:css|js)$ { try_files $uri /index.php$uri$is_args$args; add_header Cache-Control "public, max-age=7200"; add_header X-Content-Type-Options nosniff; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block"; add_header X-Robots-Tag none; add_header X-Download-Options noopen; add_header X-Permitted-Cross-Domain-Policies none; # Optional: Don't log access to assets #access_log off; } }

    user1@nextcloud-srv1 ~$ sudo service nginx restart

  • Проверки.

    user1@nextcloud-srv1 ~$ service postgresql status

    user1@nextcloud-srv1 ~$ sudo ps -aux | grep portg

    user1@nextcloud-srv1 ~$ sudo netstat -tanp | grep 54

    user1@nextcloud-srv1 ~$ service php-fpm status

    user1@nextcloud-srv1 ~$ sudo ps -aux | grep fpm

    user1@nextcloud-srv1 ~$ sudo netstat -tanp | grep 90

    user1@nextcloud-srv1 ~$ service nginx status

    user1@nextcloud-srv1 ~$ sudo ps -aux | grep ngin

    user1@nextcloud-srv1 ~$ sudo netstat -tanp | grep 443

  • Установка самого nextcloud.

    user1@nextcloud-srv1 ~$ wget https://download.nextcloud.com/server/releases/nextcloud-10.0.0.zip

    user1@nextcloud-srv1 ~$ sudo unzip nextcloud-10.0.0.zip -d /var/www/

    user1@nextcloud-srv1 ~$ sudo mkdir /var/nextcloud-data

    user1@nextcloud-srv1 ~$ cat /home/user1/set-nextcloud-permissions.sh #!/bin/bash ocpath='/var/www/nextcloud' ocdata='/var/nextcloud-data' htuser='nginx' htgroup='nginx' rootuser='root' printf "Creating possible missing Directories\n" mkdir -p $ocdata mkdir -p $ocpath/assets printf "chmod Files and Directories\n" find ${ocpath}/ -type f -print0 | xargs -0 chmod 0640 find ${ocpath}/ -type d -print0 | xargs -0 chmod 0750 find ${ocdata}/ -type f -print0 | xargs -0 chmod 0640 find ${ocdata}/ -type d -print0 | xargs -0 chmod 0750 printf "chown Directories\n" chown -R ${rootuser}:${htgroup} ${ocpath}/ chown -R ${htuser}:${htgroup} ${ocpath}/apps/ chown -R ${htuser}:${htgroup} ${ocpath}/config/ chown -R ${htuser}:${htgroup} ${ocdata}/ chown -R ${htuser}:${htgroup} ${ocpath}/themes/ chown -R ${htuser}:${htgroup} ${ocpath}/assets/ chmod +x ${ocpath}/occ printf "chmod/chown .htaccess\n" if [ -f ${ocpath}/.htaccess ] then chmod 0644 ${ocpath}/.htaccess chown ${rootuser}:${htgroup} ${ocpath}/.htaccess fi if [ -f ${ocdata}/.htaccess ] then chmod 0644 ${ocdata}/.htaccess chown ${rootuser}:${htgroup} ${ocdata}/.htaccess fi

    user1@nextcloud-srv1 ~$ sudo set-nextcloud-permissions.sh

  • На рабочей станции в браузеру открываем: https://nextcloud-srv1.localnet . Должен появиться диалог "Create an admin account" на синем фоне. На этом этапе нужно определить пароль админа и другие параметры:

    • Data folder = "/var/nextcloud-data".
    • Database user = nextcloudusr
    • Database password = long-passw0rd
    • Database name = nextclouddb

    Далее нажимаем "Finish setup".

  • Характерные ошибки и способы устранения.

    • Проблема: error 404 . Решение: отключить selinux.
    • Проблема: Сообщение "PHP module ... not installed". Решение: установить нужный модуль php.
    • Проблема: Возникают сообщения об ошибках подключения к БД. Решение: читать журналы - /var/lib/pgsql/data/pg_log . Править конфиг - /var/lib/pgsql/data/pg_hba.conf .
    • Проблема: После установки нельзя войти (залогиниться) . В журнале (/var/nextcloud-data/nextcloud.log) есть запись: "Failed to write session data (files). Please verify that the current setting of session.save_path is correct (\/var\/lib\/php\/session) ...". Решение: поменять права на /var/lib/php/session . Ссылка.

  • Все.