CentOSへの移行(その5) 移行作業における追加分

March 24, 2019 – 4:19 pm


Mail Server(postfix) については、Letsencryptを用いて、STARTTLSによる接続保護手続きを導入した。導入手続きについても記述。

  1. FFMPEGのインストール
    1. yum repository nux-desktop インストール
      [root@server02 ~]# rpm -v --import http://li.nux.ro/download/nux/RPM-GPG-KEY-nux.ro
      [root@server02 ~]# rpm -Uvh http://li.nux.ro/download/nux/dextop/el7/x86_64/nux-dextop-release-0-5.el7.nux.noarch.rpm
    2.  ffmpeg インストール
      [root@server02 ~]# yum --enablerepo=epel install ffmpeg ffmpeg-devel

      Packages installed for ffmpeg:

       Package                          Arch                  Version                                               Repository                 Size
       ffmpeg                           x86_64                2.8.15-1.el7.nux                                      nux-dextop                1.3 M
       ffmpeg-devel                     x86_64                2.8.15-1.el7.nux                                      nux-dextop                678 k
      Installing for dependencies:
       SDL                              x86_64                1.2.15-14.el7                                         base                      204 k
       ffmpeg-libs                      x86_64                2.8.15-1.el7.nux                                      nux-dextop                5.5 M
       flac-libs                        x86_64                1.3.0-5.el7_1                                         base                      169 k
       fribidi                          x86_64                1.0.2-1.el7                                           base                       79 k
       gnutls                           x86_64                3.3.29-8.el7                                          base                      680 k
       graphite2                        x86_64                1.3.10-1.el7_3                                        base                      115 k
       gsm                              x86_64                1.0.13-11.el7                                         base                       30 k
       harfbuzz                         x86_64                1.7.5-2.el7                                           base                      267 k
       lame-libs                        x86_64                3.100-1.el7                                           epel                      354 k
       libICE                           x86_64                1.0.9-9.el7                                           base                       66 k
       libSM                            x86_64                1.2.2-2.el7                                           base                       39 k
       libXdamage                       x86_64                1.1.4-4.1.el7                                         base                       20 k
       libXext                          x86_64                1.3.3-3.el7                                           base                       39 k
       libXfixes                        x86_64                5.0.3-1.el7                                           base                       18 k
       libXi                            x86_64                1.7.9-1.el7                                           base                       40 k
       libXtst                          x86_64                1.2.3-1.el7                                           base                       20 k
       libXv                            x86_64                1.0.11-1.el7                                          base                       18 k
       libXxf86vm                       x86_64                1.1.4-1.el7                                           base                       18 k
       libass                           x86_64                0.13.4-6.el7                                          epel                       99 k
       libasyncns                       x86_64                0.8-7.el7                                             base                       26 k
       libavdevice                      x86_64                2.8.15-1.el7.nux                                      nux-dextop                 73 k
       libcdio                          x86_64                0.92-3.el7                                            base                      236 k
       libcdio-paranoia                 x86_64                10.2+0.90-11.el7                                      base                       70 k
       libdc1394                        x86_64                2.2.2-3.el7                                           epel                      121 k
       libglvnd                         x86_64                1:1.0.1-0.8.git5baa1e5.el7                            base                       89 k
       libglvnd-egl                     x86_64                1:1.0.1-0.8.git5baa1e5.el7                            base                       44 k
       libglvnd-glx                     x86_64                1:1.0.1-0.8.git5baa1e5.el7                            base                      125 k
       libogg                           x86_64                2:1.3.0-7.el7                                         base                       24 k
       libraw1394                       x86_64                2.1.0-2.el7                                           base                       63 k
       libsndfile                       x86_64                1.0.25-10.el7                                         base                      149 k
       libtheora                        x86_64                1:1.1.1-8.el7                                         base                      136 k
       libusbx                          x86_64                1.0.21-1.el7                                          base                       61 k
       libv4l                           x86_64                0.9.5-4.el7                                           base                      194 k
       libva                            x86_64                1.8.3-1.el7                                           base                       80 k
       libvdpau                         x86_64                1.1.1-3.el7                                           base                       34 k
       libvorbis                        x86_64                1:1.3.3-8.el7.1                                       base                      204 k
       libwayland-client                x86_64                1.15.0-1.el7                                          base                       33 k
       libwayland-server                x86_64                1.15.0-1.el7                                          base                       39 k
       libxshmfence                     x86_64                1.2-1.el7                                             base                      7.2 k
       mesa-libEGL                      x86_64                18.0.5-4.el7_6                                        updates                   102 k
       mesa-libGL                       x86_64                18.0.5-4.el7_6                                        updates                   162 k
       mesa-libgbm                      x86_64                18.0.5-4.el7_6                                        updates                    38 k
       mesa-libglapi                    x86_64                18.0.5-4.el7_6                                        updates                    44 k
       nettle                           x86_64                2.7.1-8.el7                                           base                      327 k
       openal-soft                      x86_64                1.16.0-3.el7                                          epel                      282 k
       opencore-amr                     x86_64                0.1.3-3.el7.nux                                       nux-dextop                172 k
       openjpeg-libs                    x86_64                1.5.1-18.el7                                          base                       86 k
       opus                             x86_64                1.0.2-6.el7                                           base                      630 k
       orc                              x86_64                0.4.26-1.el7                                          base                      166 k
       pulseaudio-libs                  x86_64                10.0-5.el7                                            base                      651 k
       schroedinger                     x86_64                1.0.11-4.el7                                          epel                      291 k
       soxr                             x86_64                0.1.2-1.el7                                           epel                       77 k
       speex                            x86_64                1.2-0.19.rc1.el7                                      base                       98 k
       trousers                         x86_64                0.3.14-2.el7                                          base                      289 k
       vo-amrwbenc                      x86_64                0.1.2-1.el7.nux                                       nux-dextop                 70 k
       x264-libs                        x86_64                0.142-11.20141221git6a301b6.el7.nux                   nux-dextop                570 k
       x265-libs                        x86_64                1.9-1.el7.nux                                         nux-dextop                1.5 M
       xvidcore                         x86_64                1.3.2-5.el7.nux                                       nux-dextop                258 k
      Transaction Summary
      Install  2 Packages (+58 Dependent packages)

      ffmpeg version 確認:

      [root@server02 ~]# ffmpeg -version
      ffmpeg version 2.8.15 Copyright (c) 2000-2018 the FFmpeg developers
      built with gcc 4.8.5 (GCC) 20150623 (Red Hat 4.8.5-28)
      configuration: --prefix=/usr --bindir=/usr/bin --datadir=/usr/share/ffmpeg --incdir=/usr/include/ffmpeg --libdir=/usr/lib64 --mandir=/usr/share/man --arch=x86_64 --optflags='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic' --extra-ldflags='-Wl,-z,relro ' --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libvo-amrwbenc --enable-version3 --enable-bzlib --disable-crystalhd --enable-gnutls --enable-ladspa --enable-libass --enable-libcdio --enable-libdc1394 --disable-indev=jack --enable-libfreetype --enable-libgsm --enable-libmp3lame --enable-openal --enable-libopenjpeg --enable-libopus --enable-libpulse --enable-libschroedinger --enable-libsoxr --enable-libspeex --enable-libtheora --enable-libvorbis --enable-libv4l2 --enable-libx264 --enable-libx265 --enable-libxvid --enable-x11grab --enable-avfilter --enable-avresample --enable-postproc --enable-pthreads --disable-static --enable-shared --enable-gpl --disable-debug --disable-stripping --shlibdir=/usr/lib64 --enable-runtime-cpudetect
      libavutil      54. 31.100 / 54. 31.100
      libavcodec     56. 60.100 / 56. 60.100
      libavformat    56. 40.101 / 56. 40.101
      libavdevice    56.  4.100 / 56.  4.100
      libavfilter     5. 40.101 /  5. 40.101
      libavresample   2.  1.  0 /  2.  1.  0
      libswscale      3.  1.101 /  3.  1.101
      libswresample   1.  2.101 /  1.  2.101
      libpostproc    53.  3.100 / 53.  3.100


  2. Letsencrypt 関連作業
    Letsencrypt 証明書等のServer間移行
    /etc/letsencrypt 配下を一括copy 移行
    certbot インストール
    letsencrypt 証明書の新規設定並びに証明書期限の延長に必要

    [root@server02 ~]# yum install --enablerepo=epel certbot

    Packages installed:

     Package                                              Arch                    Version                          Repository                Size
     certbot                                              noarch                  0.31.0-2.el7                     epel                      37 k
    Installing for dependencies:
     audit-libs-python                                    x86_64                  2.8.4-4.el7                      base                      76 k
     checkpolicy                                          x86_64                  2.5-8.el7                        base                     295 k
     libcgroup                                            x86_64                  0.41-20.el7                      base                      66 k
     libsemanage-python                                   x86_64                  2.5-14.el7                       base                     113 k
     policycoreutils-python                               x86_64                  2.5-29.el7_6.1                   updates                  456 k
     pyOpenSSL                                            x86_64                  0.13.1-4.el7                     base                     135 k
     python-IPy                                           noarch                  0.75-6.el7                       base                      32 k
     python-backports                                     x86_64                  1.0-8.el7                        base                     5.8 k
     python-backports-ssl_match_hostname                  noarch                            base                      13 k
     python-cffi                                          x86_64                  1.6.0-5.el7                      base                     218 k
     python-chardet                                       noarch                  2.2.1-1.el7_1                    base                     227 k
     python-enum34                                        noarch                  1.0.4-1.el7                      base                      52 k
     python-idna                                          noarch                  2.4-1.el7                        base                      94 k
     python-ipaddress                                     noarch                  1.0.16-2.el7                     base                      34 k
     python-ndg_httpsclient                               noarch                  0.3.2-1.el7                      epel                      43 k
     python-ply                                           noarch                  3.4-11.el7                       base                     123 k
     python-pycparser                                     noarch                  2.14-1.el7                       base                     104 k
     python-requests                                      noarch                  2.6.0-1.el7_1                    base                      94 k
     python-requests-toolbelt                             noarch                  0.8.0-1.el7                      epel                      77 k
     python-setuptools                                    noarch                  0.9.8-7.el7                      base                     397 k
     python-six                                           noarch                  1.9.0-2.el7                      base                      29 k
     python-urllib3                                       noarch                  1.10.2-5.el7                     base                     102 k
     python-zope-component                                noarch                  1:4.1.0-3.el7                    epel                     227 k
     python-zope-event                                    noarch                  4.0.3-2.el7                      epel                      79 k
     python-zope-interface                                x86_64                  4.0.5-4.el7                      base                     138 k
     python2-acme                                         noarch                  0.31.0-1.el7                     epel                     148 k
     python2-certbot                                      noarch                  0.31.0-2.el7                     epel                     547 k
     python2-configargparse                               noarch                  0.11.0-1.el7                     epel                      30 k
     python2-cryptography                                 x86_64                  1.7.2-2.el7                      base                     502 k
     python2-future                                       noarch                  0.16.0-6.el7                     epel                     799 k
     python2-josepy                                       noarch                  1.1.0-1.el7                      epel                      87 k
     python2-mock                                         noarch                  1.0.1-10.el7                     epel                      92 k
     python2-parsedatetime                                noarch                  2.4-5.el7                        epel                      78 k
     python2-pyasn1                                       noarch                  0.1.9-7.el7                      base                     100 k
     python2-pyrfc3339                                    noarch                  1.0-2.el7                        epel                      13 k
     python2-requests                                     noarch                  2.6.0-0.el7                      epel                     2.9 k
     python2-six                                          noarch                  1.9.0-0.el7                      epel                     2.9 k
     pytz                                                 noarch                  2016.10-2.el7                    base                      46 k
     setools-libs                                         x86_64                  3.3.8-4.el7                      base                     620 k
    Updating for dependencies:
     policycoreutils                                      x86_64                  2.5-29.el7_6.1                   updates                  916 k
    Transaction Summary
    Install  1 Package  (+39 Dependent packages)
    Upgrade             (  1 Dependent package)


  3. Mail Server(postfix) のLetsencryptを活用したSSL化
    参考サイト: ServerWorld
    mail server (mail.yamasnet.com)用証明書の作成:

    [root@server02 ~]# certbot certonly --webroot -w /var/www/html -d mail.yamasnet.com
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Plugins selected: Authenticator webroot, Installer None
    Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
    Obtaining a new certificate
    Performing the following challenges:
    http-01 challenge for mail.yamasnet.com
    Using the webroot path /var/www/html for all unmatched domains.
    Waiting for verification...
    Cleaning up challenges
    Resetting dropped connection: acme-v02.api.letsencrypt.org
     - Congratulations! Your certificate and chain have been saved at:
       Your key file has been saved at:
       Your cert will expire on 2019-06-22. To obtain a new or tweaked
       version of this certificate in the future, simply run certbot
       again. To non-interactively renew *all* of your certificates, run
       "certbot renew"
     - If you like Certbot, please consider supporting our work by:
       Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
       Donating to EFF:                    https://eff.org/donate-le

    Postfix 設定ファイルの修正

    # for tls letsencrypt
    smtpd_use_tls = yes
    smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
    smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
    smtpd_tls_cert_file = /etc/letsencrypt/live/mail.yamasnet.com/fullchain.pem
    smtpd_tls_key_file = /etc/letsencrypt/live/mail.yamasnet.com/privkey.pem
    smtpd_tls_session_cache_database = btree:/etc/postfix/smtpd_scache


       -o syslog_name=postfix/submission
     smtps     inet  n       -       n       -       -       smtpd
       -o syslog_name=postfix/smtps
       -o smtpd_tls_wrappermode=yes

    Dovecot 設定ファイルの修正

    #ssl = no
    ssl = yes
    #ssl_cert = 

    firewall-d によりサービスを許可

    [root@server02 ~]#  firewall-cmd --add-service={smtp-submission,smtps,imaps} --permanent
    [root@server02 ~]# firewall-cmd --reload

    postfix, dovecot サービスを restart

    [root@server02 ~]# systemctl restart postfix dovecot


  4. git-2.x インストール
    [root@server02 ~]# yum --enablerepo=ius install git2u

    Packages installed:

     Package                                Arch                         Version                                      Repository                  Size
     git2u                                  x86_64                       2.16.5-1.ius.centos7                         ius                        1.1 M
    Installing for dependencies:
     git2u-core                             x86_64                       2.16.5-1.ius.centos7                         ius                        5.5 M
     git2u-core-doc                         noarch                       2.16.5-1.ius.centos7                         ius                        2.4 M
     git2u-perl-Git                         noarch                       2.16.5-1.ius.centos7                         ius                         67 k
     libsecret                              x86_64                       0.18.6-1.el7                                 base                       153 k
     perl-TermReadKey                       x86_64                       2.30-20.el7                                  base                        31 k
    Transaction Summary
    Install  1 Package (+5 Dependent packages)

    git versionの確認:

    [root@server02 ~]# git --version
    git version 2.16.5


  5. node.js のインストール
    参考サイト: How to install Nod.js and npm on CentOS7

    yum repository nodesourceのインストール:

    [root@server02 ~]# curl -sL https://rpm.nodesource.com/setup_10.x | sudo bash -
    ## Installing the NodeSource Node.js 10.x repo...
    ## Inspecting system...
    + rpm -q --whatprovides redhat-release || rpm -q --whatprovides centos-release || rpm -q --whatprovides cloudlinux-release || rpm -q --whatprovides sl-release
    + uname -m
    ## Confirming "el7-x86_64" is supported...
    + curl -sLf -o /dev/null 'https://rpm.nodesource.com/pub_10.x/el/7/x86_64/nodesource-release-el7-1.noarch.rpm'
    ## Downloading release setup RPM...
    + mktemp
    + curl -sL -o '/tmp/tmp.JZR2gZDZaX' 'https://rpm.nodesource.com/pub_10.x/el/7/x86_64/nodesource-release-el7-1.noarch.rpm'
    ## Installing release setup RPM...
    + rpm -i --nosignature --force '/tmp/tmp.JZR2gZDZaX'
    ## Cleaning up...
    + rm -f '/tmp/tmp.JZR2gZDZaX'
    ## Checking for existing installations...
    + rpm -qa 'node|npm' | grep -v nodesource
    ## Run `sudo yum install -y nodejs` to install Node.js 10.x and npm.
    ## You may also need development tools to build native addons:
         sudo yum install gcc-c++ make
    ## To install the Yarn package manager, run:
         curl -sL https://dl.yarnpkg.com/rpm/yarn.repo | sudo tee /etc/yum.repos.d/yarn.repo
         sudo yum install yarn

    node.js インストール:

    [root@server02 ~]# yum install nodejs

    Package installed:

     Package                 Arch                    Version                                 Repository                   Size
     nodejs                  x86_64                  2:10.15.1-1nodesource                   nodesource                   18 M
    Transaction Summary
    Install  1 Package

    node/npm version 確認:

    [root@server02 ~]# node --version
    [root@server02 ~]# npm --version

Post a Comment