Eric Guo's blog.cloud-mes.com

Hoping writing JS, Ruby & Rails and Go article, but fallback to DevOps note

Install Open Project V16 in a Rocky Linux 9

• Permalink

I already install an open project instance one and half year ago, but it’s retired to sync with the production server OS version, which is Rocky Linux 8.10. After Ruby 3.4 released, I found the nokogiri v1.18 version and grpc v1.71 version both need a new GLIBC_2.29 version which is unavailable in Rocky Linux 8 series.

So I decide install a new Open Project instance server for the new production.

Disable SELinux

vi /etc/selinux/config

grubby --update-kernel ALL --args selinux=0

Install htop and atop

sudo dnf update

sudo dnf install epel-release

sudo dnf install htop

sudo dnf install atop

Install nginx

sudo dnf install nginx

Install node.js v22

Using nodesource distribution

curl -fsSL https://rpm.nodesource.com/setup_22.x -o nodesource_setup.sh

sudo bash nodesource_setup.sh

sudo yum install -y nodejs

yum groupinstall 'Development Tools'

Install yarn

curl -sL https://dl.yarnpkg.com/rpm/yarn.repo | sudo tee /etc/yum.repos.d/yarn.repo

sudo yum install yarn

Install postgresql 16 client

Following DO manual

dnf module list postgresql

sudo dnf module enable postgresql:16

sudo dnf install postgresql-devel glibc-all-langpacks

sudo dnf install postgresql-contrib # pg_trgm btree_gist require by open project

sudo dnf install mysql-devel # if need to link to mysql server

Setup open_project user account

adduser open_project

cd /etc/sudoers.d/

echo "open_project ALL=(ALL) NOPASSWD:ALL" > 30-open_project-user

sudo su - open_project

mkdir .ssh

chmod 700 .ssh

vi .ssh/authorized_keys # and paste your public key

chmod 600 .ssh/authorized_keys

Install rbenv and ruby-build

whoami # should run as a open_project

git clone https://git.thape.com.cn/rails/rbenv.git .rbenv

echo 'export PATH="$HOME/.rbenv/bin:$PATH"' >> ~/.bash_profile

~/.rbenv/bin/rbenv init # also edit ~/.bash_profile

# As an rbenv plugin

mkdir -p "$(rbenv root)"/plugins

git clone https://git.thape.com.cn/rails/ruby-build.git "$(rbenv root)"/plugins/ruby-build

git clone https://git.thape.com.cn/rails/rbenv-china-mirror.git "$(rbenv root)"/plugins/rbenv-china-mirror

Install Ruby 3.3.8

Ruby 3.3.8 need Rust to build JIT.

dnf config-manager --enable crb

dnf install libyaml-devel

yum install -y rust # version 1.79.0

rbenv install -l

rbenv install 3.3.8

rbenv global 3.3.8

rbenv shell 3.3.8

echo "gem: --no-document" > ~/.gemrc

gem update --system

Prepare the capistrano deploy folder

whoami # should run as a open_project

cd /var/www

sudo mkdir open_project

sudo chown open_project:open_project open_project/

Using mirror when deploy

Run in the release rails root folder

bundle config mirror.https://rubygems.org https://gems.ruby-china.com

Setting the open project settings

/etc/environment
OPENPROJECT_EDITION=bim

OPENPROJECT_APP__TITLE=天华项目全生命周期管理

OPENPROJECT_APP__SHORT__TITLE=PLM

OPENPROJECT_HOST__NAME=plm-staging.thape.com.cn

OPENPROJECT_EMAIL__DELIVERY__METHOD="smtp"

OPENPROJECT_SMTP__ADDRESS="smtp.thape.com.cn"

OPENPROJECT_SMTP__PORT="25"

OPENPROJECT_SMTP__DOMAIN="thape.com.cn"

OPENPROJECT_SMTP__AUTHENTICATION="login"

OPENPROJECT_SMTP__USER__NAME="plm"

OPENPROJECT_SMTP__PASSWORD=""

OPENPROJECT_SMTP__ENABLE__STARTTLS__AUTO="true"

OPENPROJECT_SMTP__OPENSSL__VERIFY__MODE="none"

OPENPROJECT_ENTERPRISE__TRIAL__CREATION__HOST="https://www.google-analytics.com"

GRUF_OP_SERVER="172.17.1.1:10009"

WX_TEMPLATE_ID=""

WX_WORK_PACKAGE_DETAIL="https://plm.thape.com.cn/work_packages/:id"

MP_QRCODE_ABS_PATH="/var/www/open_project/shared/public/static/mp_qrcode.jpg"

LOGO_ABS_PATH="/var/www/open_project/shared/public/static/logo_plm.png"

CSP_FRAME_SRC="https://ith-workspace.thape.com.cn"

CSP_CONNECT_SRC="https://analytics.thape.com.cn"

WECHAT_AUTH_JWT_SECERT=""

WECHAT_AUTH_ITH_URL="/ith/wechat/ppm/login"
/etc/systemd/system/puma_plm.service
[Unit]

Description=Puma HTTP Server for open_project (staging)

 
After=syslog.target network.target

 
[Service]

Type=simple

WatchdogSec=10

User=open_project

EnvironmentFile=/etc/environment

WorkingDirectory=/var/www/open_project/current

ExecStart=/home/open_project/.rbenv/bin/rbenv exec bundle exec puma -e production

ExecReload=/bin/kill -SIGUSR1 $MAINPID

 
# if we crash, restart

RestartSec=10

Restart=on-failure

 
StandardOutput=append:/var/www/open_project/shared/log/puma.log

StandardError=append:/var/www/open_project/shared/log/puma.log

 
SyslogIdentifier=puma_plm

[Install]

WantedBy=multi-user.target

sudo systemctl daemon-reload

bundle exec rake openproject:plugins:register_frontend

bundle exec rake i18n:js:export

bundle exec rake db:seed

sudo journalctl -u puma_plm # check system log and fix errors

sudo systemctl start puma_plm

Upload custom fonts

/var/www/open_project/shared/public

gzip -9r op_public_files.zip fonts/ static/ WW_verify_*.txt

Change IP

Rocky 8 network change:

vi /etc/sysconfig/network-scripts/ifcfg-ens192

Rocky 9 network change:

vi /etc/NetworkManager/system-connections/ens192.nmconnection

nmcli connection reload /etc/NetworkManager/system-connections/ens192.nmconnection

nmcli connection up /etc/NetworkManager/system-connections/ens192.nmconnection

Install the dependency

sudo yum install ImageMagick

Open the firewall

sudo firewall-cmd --add-service=http --permanent

sudo firewall-cmd --add-service=https --permanent

sudo firewall-cmd --reload

Comments