X-Git-Url: https://git.openstreetmap.org./nominatim.git/blobdiff_plain/d4110eef7e719f114a5ebc26ac0c657e0313725d..3db2b05069d68f8703a696273f4fdfc9fe6a445e:/vagrant/Install-on-Centos-7.sh diff --git a/vagrant/Install-on-Centos-7.sh b/vagrant/Install-on-Centos-7.sh index d95f8d53..e2592f65 100755 --- a/vagrant/Install-on-Centos-7.sh +++ b/vagrant/Install-on-Centos-7.sh @@ -17,24 +17,49 @@ sudo yum install -y epel-release +# More repositories for postgresql 11 (CentOS default 'postgresql' is 9.2), postgis +# and llvm-toolset (https://github.com/theory/pg-semver/issues/35) + + sudo yum install -y https://download.postgresql.org/pub/repos/yum/11/redhat/rhel-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm + sudo yum install -y centos-release-scl-rh + +# More repositories for PHP 7 (default is PHP 5.4) + + sudo yum install -y http://rpms.remirepo.net/enterprise/remi-release-7.rpm + sudo yum-config-manager --enable remi-php72 + sudo yum update -y + # Now you can install all packages needed for Nominatim: #DOCS: :::sh - sudo yum install -y postgresql-server postgresql-contrib postgresql-devel \ - postgis postgis-utils \ - git cmake make gcc gcc-c++ libtool policycoreutils-python \ - php-pgsql php php-pear php-pear-DB php-intl libpqxx-devel \ - proj-epsg bzip2-devel proj-devel libxml2-devel boost-devel \ + + sudo yum install -y postgresql11-server postgresql11-contrib postgresql11-devel \ + postgis25_11 postgis25_11-utils \ + wget git cmake make gcc gcc-c++ libtool policycoreutils-python \ + devtoolset-7 llvm-toolset-7 \ + php-pgsql php php-intl libpqxx-devel \ + proj-epsg bzip2-devel proj-devel boost-devel \ + python3-pip python3-setuptools python3-devel \ expat-devel zlib-devel + # make sure pg_config gets found + echo 'PATH=/usr/pgsql-11/bin/:$PATH' >> ~/.bash_profile + source ~/.bash_profile + + pip3 install --user psycopg2 pytidylib + # If you want to run the test suite, you need to install the following # additional packages: #DOCS: :::sh - sudo yum install -y python34-pip python34-setuptools python34-devel \ - php-phpunit-PHPUnit - pip3 install --user behave nose pytidylib psycopg2 - sudo pear install PHP_CodeSniffer + sudo yum install -y php-dom php-mbstring + pip3 install --user behave nose + + composer global require "squizlabs/php_codesniffer=*" + sudo ln -s ~/.config/composer/vendor/bin/phpcs /usr/bin/ + + composer global require "phpunit/phpunit=7.*" + sudo ln -s ~/.config/composer/vendor/bin/phpunit /usr/bin/ # # System Configuration @@ -52,7 +77,8 @@ # we assume this user is called nominatim and the installation will be in # /srv/nominatim. To create the user and directory run: # -# sudo useradd -d /srv/nominatim -s /bin/bash -m nominatim +sudo mkdir -p /srv/nominatim #DOCS: sudo useradd -d /srv/nominatim -s /bin/bash -m nominatim +sudo chown vagrant /srv/nominatim #DOCS: # # You may find a more suitable location if you wish. # @@ -60,7 +86,7 @@ # user name and home directory now like this: # export USERNAME=vagrant #DOCS: export USERNAME=nominatim - export USERHOME=/home/vagrant #DOCS: export USERHOME=/srv/nominatim + export USERHOME=/srv/nominatim # # **Never, ever run the installation as a root user.** You have been warned. # @@ -74,8 +100,8 @@ # CentOS does not automatically create a database cluster. Therefore, start # with initializing the database, then enable the server to start at boot: - sudo postgresql-setup initdb - sudo systemctl enable postgresql + sudo /usr/pgsql-11/bin/postgresql-11-setup initdb + sudo systemctl enable postgresql-11 # # Next tune the postgresql configuration, which is located in @@ -85,7 +111,7 @@ # # Now start the postgresql service after updating this config file. - sudo systemctl restart postgresql + sudo systemctl restart postgresql-11 # # Finally, we need to add two postgres users: one for the user that does @@ -105,14 +131,14 @@ #DOCS:```sh sudo tee /etc/httpd/conf.d/nominatim.conf << EOFAPACHECONF - #DOCS: + Options FollowSymLinks MultiViews AddType text/html .php DirectoryIndex search.php Require all granted -Alias /nominatim $USERHOME/build/website #DOCS:Alias /nominatim $USERHOME/Nominatim/build/website +Alias /nominatim $USERHOME/build/website EOFAPACHECONF #DOCS:``` @@ -122,19 +148,9 @@ sudo sed -i 's:#.*::' /etc/httpd/conf.d/nominatim.conf #DOCS: # Then reload apache # + sudo systemctl enable httpd sudo systemctl restart httpd -# -# Adding SELinux Security Settings -# -------------------------------- -# -# It is a good idea to leave SELinux enabled and enforcing, particularly -# with a web server accessible from the Internet. At a minimum the -# following SELinux labeling should be done for Nominatim: - - sudo semanage fcontext -a -t httpd_sys_content_t "$USERHOME/Nominatim/(website|lib|settings)(/.*)?" - sudo semanage fcontext -a -t lib_t "$USERHOME/Nominatim/module/nominatim.so" - sudo restorecon -R -v $USERHOME/Nominatim # # Installing Nominatim @@ -157,18 +173,34 @@ fi #DOCS: # download the country grid: if [ ! -f data/country_osm_grid.sql.gz ]; then #DOCS: :::sh - wget -O data/country_osm_grid.sql.gz https://www.nominatim.org/data/country_grid.sql.gz + wget --no-verbose -O data/country_osm_grid.sql.gz https://www.nominatim.org/data/country_grid.sql.gz fi #DOCS: # The code must be built in a separate directory. Create this directory, # then configure and build Nominatim in there: - cd $USERHOME #DOCS: :::sh +#DOCS: :::sh + cd $USERHOME mkdir build cd build cmake $USERHOME/Nominatim make +# +# Adding SELinux Security Settings +# -------------------------------- +# +# It is a good idea to leave SELinux enabled and enforcing, particularly +# with a web server accessible from the Internet. At a minimum the +# following SELinux labeling should be done for Nominatim: + + sudo semanage fcontext -a -t httpd_sys_content_t "$USERHOME/Nominatim/(website|lib|settings)(/.*)?" + sudo semanage fcontext -a -t httpd_sys_content_t "$USERHOME/build/(website|lib|settings)(/.*)?" + sudo semanage fcontext -a -t lib_t "$USERHOME/build/module/nominatim.so" + sudo restorecon -R -v $USERHOME/Nominatim + sudo restorecon -R -v $USERHOME/build + + # You need to create a minimal configuration file that tells nominatim # the name of your webserver user and the URL of the website: