Bitnami Cassandra for Huawei Enterprise Cloud

Transcription

1 Bitnami Cassandra for Huawei Enterprise Cloud Description Apache Cassandra is an open source distributed database management system designed to handle large amounts of data across many commodity servers, providing high availability with no single point of failure. How to start or stop the services? Each Bitnami stack includes a control script that lets you easily stop, start and restart services. The script is located at /opt/bitnami/ctlscript.sh. Call it without any service name arguments to start all services: sudo /opt/bitnami/ctlscript.sh start Or use it to restart a single service, such as Apache only, by passing the service name as argument: sudo /opt/bitnami/ctlscript.sh restart apache Use this script to stop all services: sudo /opt/bitnami/ctlscript.sh stop Restart the services by running the script without any arguments: sudo /opt/bitnami/ctlscript.sh restart Obtain a list of available services and operations by running the script without any arguments: sudo /opt/bitnami/ctlscript.sh How to upload files to the server with SFTP? NOTE: Bitnami applications can be found in /opt/bitnami/apps 华为保密信息, 未经授权禁止扩散第 1 页, 共 21 页

2 When uploading files via SFTP, you must have the server's IP address, username and password or, if you chose to deploy the server with an SSH key instead of a password, you must have the server username and corresponding SSH private key in.ppk format (for Windows) or in.pem format (for Linux and Mac OS X). To obtain the IP address for your server, follow these steps: Log in to the Huawei Cloud Server Console. Navigate to the "Computing -> Elastic Cloud Server" section. Note the public IP address for the server you wish to connect to. Once you have confirmed that you have the IP address and correct SSH credentials for your server, follow the instructions below depending on the platform you wish to use. Although you can use any SFTP/SCP client to transfer files to your server, this guide documents FileZilla (Windows, Linux and Mac OS X), WinSCP (Windows) and Cyberduck (Mac OS X). Using an SSH Key Once you have your server's SSH key, choose your preferred application and follow the steps below to connect to the server using SFTP. FileZilla IMPORTANT: To use FileZilla, your server private key should be in PPK format. Follow these steps: Download and install FileZilla 华为保密信息, 未经授权禁止扩散第 2 页, 共 21 页

3 Launch FileZilla and use the "Edit -> Settings" command to bring up FileZilla's configuration settings. Within the "Connection -> SFTP" section, use the "Add keyfile" command to select the private key file for the server. FileZilla will use this private key to log in to the server. Use the "File -> Site Manager -> New Site" command to bring up the FileZilla Site Manager, where you can set up a connection to your server. Enter your server host name and specify bitnami as the user name 华为保密信息, 未经授权禁止扩散第 3 页, 共 21 页

4 Select "SFTP" as the protocol and "Ask for password" as the logon type. Use the "Connect" button to connect to the server and begin an SFTP session. You might need to accept the server key, by clicking "Yes" or "OK" to proceed. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. If you have problems accessing your server, get extra information by use the "Edit -> Settings -> Debug" menu to activate FileZilla's debug log 华为保密信息, 未经授权禁止扩散第 4 页, 共 21 页

5 WinSCP IMPORTANT: To use WinSCP, your server private key should be in PPK format. Follow these steps: Download and install WinSCP. Launch WinSCP and in the "Session" panel, select "SFTP" as the file protocol 华为保密信息, 未经授权禁止扩散第 5 页, 共 21 页

6 Enter your server host name and specify bitnami as the user name. Click the "Advanced " button and within the "SSH -> Authentication -> Authentication parameters" section, select the private key file for the server. WinSCP will use this private key to log in to the server 华为保密信息, 未经授权禁止扩散第 6 页, 共 21 页

7 From the "Session" panel, use the "Login" button to connect to the server and begin an SCP session. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. If you need to upload files to a location where the bitnami user doesn't have write permissions, you have two options: Once you have configured WinSCP as described above, click the "Advanced " button and within the "Environment -> Shell" panel, select sudo su - as your shell. This will allow you to upload files using the administrator account. Upload the files to the /home/bitnami directory as usual. Then, connect via SSH and move the files to the desired location with the sudo command, as shown below: sudo mv /home/bitnami/uploaded-file /path/to/desired/location/ Cyberduck 华为保密信息, 未经授权禁止扩散第 7 页, 共 21 页

8 IMPORTANT: To use Cyberduck, your server private key should be in PEM format. Follow these steps: Select the "Open Connection" command and specify "SFTP" as the connection protocol. In the connection details panel, under the "More Options" section, enable the "Use Public Key Authentication" option and specify the path to the private key file for the server 华为保密信息, 未经授权禁止扩散第 8 页, 共 21 页

9 Use the "Connect" button to connect to the server and begin an SFTP session. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. Using a Password Once you have your server's SSH credentials, choose your preferred application and follow the steps below to connect to the server using SFTP. FileZilla Follow these steps: Download and install FileZilla. Launch FileZilla and use the "File -> Site Manager -> New Site" command to bring up the FileZilla Site Manager, where you can set up a connection to your server. Enter your server host name. Select "SFTP" as the protocol and "Ask for password" as the logon type. Use bitnami as the server username and the password generated during 华为保密信息, 未经授权禁止扩散第 9 页, 共 21 页

10 the server deployment process. Use the "Connect" button to connect to the server and begin an SFTP session. You might need to accept the server key, by clicking "Yes" or "OK" to proceed. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. If you have problems accessing your server, get extra information by use the "Edit -> Settings -> Debug" menu to activate FileZilla's debug log 华为保密信息, 未经授权禁止扩散第 10 页, 共 21 页

11 WinSCP Follow these steps: Download and install WinSCP. Launch WinSCP and in the "Session" panel, select "SFTP" as the file protocol 华为保密信息, 未经授权禁止扩散第 11 页, 共 21 页

12 Enter your server host name and set bitnami as the server username. From the "Session" panel, use the "Login" button to connect to the server and begin an SCP session. Enter the password when prompted. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. Cyberduck Follow these steps: 华为保密信息, 未经授权禁止扩散第 12 页, 共 21 页

13 Select the "Open Connection" command and specify "SFTP" as the connection protocol 华为保密信息, 未经授权禁止扩散第 13 页, 共 21 页

14 In the connection details panel, enter the server IP address, bitnami as the username, and the password generated during the deployment process. Use the "Connect" button to connect to the server and begin an SFTP session. You should now be logged into the /home/bitnami directory on the server. You can now transfer files by dragging and dropping them from the local server window to the remote server window. What is the default configuration? The Cassandra admin user for all databases is automatically generated. The administrator user name is cassandra and you can get the password from the server dashboard for your server. You can connect to the Cassandra server locally or remotely using the cqlsh command line tool: cqlsh -u cassandra 华为保密信息, 未经授权禁止扩散第 14 页, 共 21 页

15 Password: Connected to Test Cluster at :9042. [cqlsh Cassandra CQL spec Native protocol v3] Use HELP for help. The Cassandra server is configured to accept incoming connections on the default Cassandra client port This could be a security issue so it is strongly advisable to close this port or open it only for a specific IP address. Other ports for configuring nodes are closed by default in the firewall. Cassandra configuration file The Cassandra configuration file is located at /opt/bitnami/cassandra/conf/cassandra.yaml. Cassandra ports Cassandra client: 9042 Cassandra client thrift port: 9160 Cassandra transport port: 7000 Cassandra transport secure port: 7001 Cassandra jmx port: 7199 Cassandra log file The Cassandra log file is created at /opt/bitnami/cassandra/log/system.log. How to connect to the Cassandra server? You can connect to Cassandra from the same server. Obtain the password from the dashboard for your server. cqlsh -u cassandra 华为保密信息, 未经授权禁止扩散第 15 页, 共 21 页

16 This will connect you to the Cassandra console and display a prompt. Once connected, you can run cqlsh commands to create and populate data. For example, the command below lists available keyspaces: cassandra@cqlsh> describe keyspaces system_traces system_auth system You can learn more about Cassandra in the Cassandra Getting Started guide. How to check the Cassandra server version? Use the commands below: cqlsh -u cassandra Password: Connected to Test Cluster at :9042. [cqlsh Cassandra CQL spec Native protocol v3] Use HELP for help. cassandra@cqlsh> show version [cqlsh Cassandra CQL spec Native protocol v3] How to connect to the Cassandra server from a different machine? To connect to Cassandra from a different machine, you must open ports 9042, 9160, 7000, 7001 and 7199 for remote access. Refer to the FAQ for more information on this. You can then access Cassandra using a command like the one below: cqlsh -u cassandra SERVER-IP 华为保密信息, 未经授权禁止扩散第 16 页, 共 21 页

17 How to change the Cassandra administrator password? You can modify the Cassandra password using the following command at the shell prompt: cqlsh -u cassandra -p PASSWORD Connected to Test Cluster at :9042. [cqlsh Cassandra 3.9 CQL spec Native protocol v4] Use HELP for help. cqlsh> ALTER USER cassandra with PASSWORD 'NEWPASSWORD'; cqlsh> exit How to reset the Cassandra administrator password? You can reset the administrator password by following the steps below: Edit the /opt/bitnami/cassandra/conf/cassandra.yaml file and replace the following lines: authenticator: PasswordAuthenticator authorizer: CassandraAuthorizer with: authenticator: AllowAllAuthenticator authorizer: AllowAllAuthorizer Restart your database: sudo /opt/bitnami/ctlscript.sh restart cassandra Execute the following commands: 华为保密信息, 未经授权禁止扩散第 17 页, 共 21 页

18 cqlsh Connected to Test Cluster at : ] [cqlsh Cassandra 3.9 CQL spec Native protocol v Use HELP for help. cqlsh> UPDATE system_auth.roles SET salted_hash = '$2a$10$1gMPBy9 zskdzkxdbu2v/goslcmrpdcxvqmwqybmi8mvgyvndrzw/.' WHERE role = 'cassan dra'; cqlsh> exit Undo the changes made in /opt/bitnami/cassandra/conf/cassandra.yaml and restart Cassandra again. Now you can access your database using the user name cassandra and password cassandra: cqlsh -u cassandra -p cassandra Connected to Test Cluster at :9042. v4] [cqlsh Cassandra 3.9 CQL spec Native protocol Use HELP for help. cqlsh> Once you have access, don't forget to change the cassandra user account password to something else as described in the previous section. This is the default password and it's unsecure. How to create a Cassandra cluster? Create a Cluster with a Single Seed Node Launch the Bitnami Cassandra Stack on each node. Log in to each node and stop the Cassandra service. sudo /opt/bitnami/ctlscript.sh stop cassandra 华为保密信息, 未经授权禁止扩散第 18 页, 共 21 页

19 Get the public and private IP address of each node in the cluster. Select one of the nodes as the seed node for the cluster. In this guide, assume that the seed node has public IP address and private IP address Open the Cassandra transport port (tcp:7000 by default) in your server firewall. Then, restart your Cassandra servers. On each node in the cluster, modify the /opt/bitnami/cassandra/conf/cassandra.yaml file and update the following directives: -seeds: Use the public IP address of the seed node. listen_address: Use the current node's private IP address. broadcast_address: Use the current node's public IP address. endpoint_snitch: Select the correct snitch for your environment based on the official documentation. For example, on the seed node, your configuration file might look like this: cluster_name: 'MyCassandraCluster' num_tokens: 256 seed_provider: r - class_name: org.apache.cassandra.locator.simpleseedprovide parameters: - seeds: " " broadcast_address: listen_address: endpoint_snitch: GossipingPropertyFileSnitch Repeat the above configuration for all the nodes in the cluster. Remember that you must modify the listen_address and broadcast_address on each node to reflect the node's IP addresses. For all nodes apart from the seed node, delete the default data. This is necessary to avoid collisions between the system tables on different nodes 华为保密信息, 未经授权禁止扩散第 19 页, 共 21 页

20 sudo rm -rf /opt/bitnami/cassandra/data/* Start Cassandra on the seed node, followed by the other nodes, to have the changes take effect: sudo /opt/bitnami/ctlscript.sh start cassandra Your cluster should now be operational with a single seed node. To verify, execute the command below on any node in the cluster: /opt/bitnami/cassandra/bin/nodetool status You can connect to any server of the cluster using the credentials for the first seed node. You can also watch the Cassandra log file at /opt/bitnami/cassandra/log/system.log to check that the cluster nodes recognize and can communicate with each other. Create a Cluster with Multiple Seed Nodes IMPORTANT: Before creating a cluster with multiple seed nodes, ensure that you have a working cluster with a single seed node as described in the previous section. Then, repeat the steps below for each new seed node that you wish to add to the cluster. Launch the Bitnami Cassandra Stack on a new node. This will be the new seed node for your cluster. Log in to each node and stop the Cassandra service. sudo /opt/bitnami/ctlscript.sh stop cassandra Get the public and private IP address of the new seed node. In this guide, assume that the new seed node has public IP address and private IP address On the new node, edit the configuration file /opt/bitnami/cassandra/conf/cassandra.yaml and specify it as a seed node by adding its public IP address to the seeds list. Also specify the other configuration parameters, such as the listen_address and the broadcast_address, as described in the previous section. Here is what the configuration file would look like: 华为保密信息, 未经授权禁止扩散第 20 页, 共 21 页

21 cluster_name: 'MyCassandraCluster' num_tokens: 256 seed_provider: - class_name: org.apache.cassandra.locator.simpleseedprovider parameters: - seeds: " , " broadcast_address: listen_address: endpoint_snitch: GossipingPropertyFileSnitch Delete the default data. This is necessary to avoid collisions between the system tables on different nodes. sudo rm -rf /opt/bitnami/cassandra/data/* On each of the other nodes in the cluster, update the /opt/bitnami/cassandra/conf/cassandra.yaml file and add the public IP address of the new seed node to the seeds list. Restart Cassandra on the seed nodes, followed by the non-seed nodes. sudo /opt/bitnami/ctlscript.sh start cassandra Your cluster should now be operational with the new seed node. To verify, execute the command below on any node in the cluster: /opt/bitnami/cassandra/bin/nodetool status You can connect to any server of the cluster using the credentials for the first seed node. You can also watch the Cassandra log file at /opt/bitnami/cassandra/log/system.log to check that the cluster nodes recognize and can communicate with each other 华为保密信息, 未经授权禁止扩散第 21 页, 共 21 页