配置Ubuntu10.10下的完整J2EE软件开发项目环境：过程、质量及项目管理
近日有朋友需要J2EE相关开发项目的工具环境的配置，遂翻出以前折腾的时候整理的一篇文档发给了他。同时发现网上还有不少朋友在找这方面的资料，现将这份简单的文档贴在这里，希望对各位需要的朋友有个参考。欢迎转载，转载请注明出处。内容可能有点多，请CTRL+F查找。
————————————
Ubuntu10.10下配置Apache+SVN+Maven+Nexus+Sonar+Hudson+Redmine+Tomcat+Ant本文所涉及的工具如下：
JDK java-6-sun-jdk http://www.oracle.com/technetwork/java/index.html
Mysql http://dev.mysql.com/
Apache2 http://httpd.apache.org/
Subversion http://subversion.tigris.org/
Maven apache-maven3 http://maven.apache.org/
Nexus sonatype-nexus-oss http://nexus.sonatype.org/
Sonar http://www.sonarsource.org/
Hudson http://hudson-ci.org/
Redmine http://www.redmine.org/
Tomcat apache-tomcat-7 http://tomcat.apache.org/
Ant apache-ant-1.8 http://ant.apache.org/
#Cargo http://cargo.codehaus.org/
OpenSSL
OpenSSH
预配置
1）如果安装的是ubuntu server版，在系统安装时选择LMAP即可
2）建议将IP地址设为固定IP
3）建议预先下载需要手动安装的包和插件1、JDK
$ sudo apt-get install java-6-sun-jdk确认jdk：
$ java -version2、Mysql
$ sudo apt-get install mysql-server1）设置mysql管理员密码
$ mysql –u root
mysql> SET PASSWORD FOR root@localhost=PASSWORD(‘secret’); $ sudo vi /etc/mysql/my.cnf
[mysqld]
#Set the default character set.
default-character-set =UTF8
[client]
#Set the default character set.
default-character-set =UTF8
mysql> show variables like "%colla%";
mysql> show variables like "%char%"; $ sudo vi /etc/mysql/my.cnf
[mysqld]
#bind-address = 127.0.0.1
mysql> GRANT ALL PRIVILEGES ON *.* TO newuser@192.168.1.111 IDENTIFIED BY 'secret'; //IP地址换成'%'表示任意地址
mysql> flush privileges;$ sudo vi /etc/mysql/my.cnf
[mysqld]
lower_case_table_names =13、Apache2 （后续详解与其它工具的整合）
$ sudo apt-get install apache2默认的服务启动文件 /etc/init.d/apache2
安装Google Pagespeed mod
4、Subversion
1）直接从源里安装
$ sudo apt-get install subversion$ sudo mkdir /var/svn && cd /var/svn
$ sudo svnadmin create repos && cd repos/conf配置svnserve.conf，注意每行开头不能留空格
[general]
anon-access = read
auth-access = write
password-db = passwd
authz-db = authz
realm = IALS SVN Repository[users]
redmine = redmine[groups]
dev = redmine
[repos:/]
@dev = rw$ sudo svnserve -d -r /var/svn$ cd /etc/rc2.d && sudo vi S88svnserve#! /bin/sh
svnserve -d -r /var/svn
$ sudo chmod +x S88svnserve$ sudo mkdir -p /tmp/ials/trunk tags branches
$ sudo svn import --username USERNAME -m "initial import" /tmp/ials/ svn://localhost/repos/ials attempt to write a readonly database$ sudo chown www-data:www-data /var/svn/repos/db/rep-cache.db5、Maven
选择Maven3
1）从http://maven.apache.org/下载apache-maven-3.0-bin.tar.gz
2）解压，将目录移动到/opt/，并建立符号链接
$ sudo tar zxf apache-maven-3.0-bin.tar.gz .
$ sudo mv apache-maven-3.0 /opt/.
$ sudo ln -s /opt/apache-maven-3.0 /opt/maven3$ sudo vi /etc/profileexport JAVA_HOME=/usr/lib/jvm/java-6-sun
export JRE_HOME=/usr/lib/jvm/java-6-sun/jre
export MAVEN_HOME=/opt/maven3
export MAVEN_OPTS="-Xmx512m -XX:MaxPermSize=256m"
export ANT_HOME=/opt/ant
export CLASSPATH=$JAVA_HOME/lib:$JAVA_HOME/jre/lib
export PATH=$PATH:$JAVA_HOME/bin:$JAVA_HOME/jre/bin:$MAVEN_HOME/bin:$ANT_HOME/bin$ mvn -v$ mvn install:install-file -Dfile=yourJar -DgroupId=yourGourp -DartifactId=yourArtifact -Dversion=1.0 \
> -Dpackaging=jar -DgeneratePom=true6、Nexus OSS
1）从官方网站http://nexus.sonatype.org/下载standalone版本，本文所用版本nexus-oss-webapp-1.8.0.1-bundle.tar.gz
2）解压，将目录移到/opt/，并建立符号链接
$ sudo tar zxf nexus-oss-webapp-1.8.0.1-bundle.tar.gz .
$ sudo mv nexus-oss-webapp-1.8.0.1 /opt/.
$ sudo ln -s /opt/nexus-oss-webapp-1.8.0.1 /opt/nexus复制/opt/nexus/bin/jsw/linux-x86-32/nexus到/etc/init.d/
$ sudo cp /opt/nexus/bin/jsw/linux-x86-32/nexus /etc/init.d/.
$ sudo vi /etc/init.d/nexus# Application
APP_NAME="nexus"
APP_LONG_NAME="Sonatype Nexus"
NEXUS_HOME=/opt/nexus
PLATFORM=linux-x86-32
# Wrapper
WRAPPER_CMD="${NEXUS_HOME}/bin/jsw/${PLATFORM}/wrapper"
WRAPPER_CONF="${NEXUS_HOME}/bin/jsw/conf/wrapper.conf"
# Location of the pid file.
PIDDIR="/var/run"$ sudo chmod 755 /etc/init.d/nexus
$ cd /etc/init.d
$ sudo update-rc.d nexus defaults$ sudo vi /opt/nexus/conf/plexus.propertiesbasedir=/opt/nexus也可在application-port修改默认启动端口
5）启动和停止服务
$ sudo service nexus start/stop6）安装后配置
更改管理员密码和Email地址
配置SMTP设置
开启远程索引下载：三个重要的代理仓库，中央Maven仓库，Apache快照仓库，
Codehaus快照仓库
7）配置Maven使用Nexus存储库
修改/创建~/.m2/settings.xml
<settings>
<mirrors>
<mirror>
<!--This sends everything else to /public -->
<id>nexus</id>
<mirrorOf>*</mirrorOf>
<url>http://localhost:8081/nexus/content/groups/public</url>
</mirror>
</mirrors>
<profiles>
<profile>
<id>nexus</id>
<!--Enable snapshots for the built in central repo to direct -->
<!--all requests to nexus via the mirror -->
<repositories>
<repository>
<id>central</id>
<url>http://central</url>
<releases><enabled>true</enabled></releases>
<snapshots><enabled>true</enabled></snapshots>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>central</id>
<url>http://central</url>
<releases><enabled>true</enabled></releases>
<snapshots><enabled>true</enabled></snapshots>
</pluginRepository>
</pluginRepositories>
</profile>
</profiles>
<activeProfiles>
<!--make the profile active all the time -->
<activeProfile>nexus</activeProfile>
</activeProfiles>
</settings>在项目中使用时，可在pom.xml中设置
<repositories>
<repository>
<id>nexus</id>
<name>local nexus</name>
<url>http://localhost:8081/nexus/content/groups/public</url>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>nexus</id>
<name>local nexus</name>
<url>http://localhost:8081/nexus/content/groups/public</url>
</pluginRepository>
</pluginRepositories><repositories>
<repository>
<id>nexus</id>
<name>local nexus</name>
<url>http://[nexus host]:[nexus port]/nexus/content/groups/public</url>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>nexus</id>
<name>local nexus</name>
<url>http://[nexus host]:[nexus port]/nexus/content/groups/public</url>
</pluginRepository>
</pluginRepositories>$ mvn deploy:deploy-file -DgroupId=com.oracle -DartifactId=ojdbc14 \
> -Dversion=10.2.0.3.0 -Dpackaging=jar -Dfile=ojdbc.jar \
> -Durl=http://localhost:8081/nexus/content/repositories/thirdparty \
> -DrepositoryId=thirdparty7、Sonar
1）建立mysql数据库
$ sudo mysql
mysql> create database sonar character set utf8;
mysql> create user 'sonar'@'localhost' identified by 'sonar';
mysql> grant all privileges on sonar.* to 'sonar'@'localhost';
mysql> flush privileges;3）解压，将目录移到/opt/.，并建立符号链接
$ sudo unzip -p sonar-2.4.1.zip
$ sudo mv sonar-2.4.1 /opt/.
$ sudo ln -s /opt/sonar-2.4.1 /opt/sonar$ sudo vi /opt/sonar/conf/sonar.properties#sonar.jdbc.url: jdbc:derby://localhost:1527/sonar;create=true
#sonar.jdbc.driverClassName: org.apache.derby.jdbc.ClientDriver
#sonar.jdbc.validationQuery: values(1)
#sonar.derby.drda.portNumber: 1527
#sonar.derby.drda.host: 0.0.0.0
sonar.jdbc.url: jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8
sonar.jdbc.driverClassName: com.mysql.jdbc.Driver
sonar.jdbc.validationQuery: select 1$ cd /opt/sonar
$ sudo ./bin/linux-x86-32/sonar.sh start6）配置Maven
修改~/.m2/settings.xml，在profiles中增加
<profile>
<id>sonar</id>
<properties>
<sonar.jdbc.url>
jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8
</sonar.jdbc.url>
<sonar.jdbc.driver>com.mysql.jdbc.Driver</sonar.jdbc.driver>
<sonar.jdbc.username>sonar</sonar.jdbc.username>
<sonar.jdbc.password>sonar</sonar.jdbc.password>
</properties>
</profile> <activeProfiles>
<!--make the profiles active all the time -->
<activeProfile>nexus</activeProfile>
<activeProfile>sonar</activeProfile>
</activeProfiles>7）安装为ubuntu服务
建立/etc/init.d/sonar
#! /bin/sh
/usr/bin/sonar $*$ sudo ln -s /opt/sonar/bin/linux-x86-32/sonar.sh /usr/bin/sonar
$ sudo chmod 755 /etc/init.d/sonar
$ sudo update-rc.d sonar defaults$ sudo service sonar start可从官方网站下载plugin到/opt/sonar/extensions/plugins/目录，或者登录管理员web界面安装
8、hudson （现为Jekins项目）
1）从官方网站http://hudson-ci.org/下载最新版hudson.deb
2）进行安装
$ sudo dpkg -i hudson.deb$ sudo apt-get -f install$ sudo vi /etc/init.d/hudsonHUDSON_ARGS="-Xms256m -Xmx512m -XX:MaxPermSize=96m --httpPort=9090 --ajp13Port=9009"4）hudson配置
5）安装插件 sonar、deploy等
6）集成maven、sonar、svn等
9、Redmine
1）配置mysql数据库
create database redmine character set utf8;
create user 'redmine'@'localhost' identified by 'my_password';
grant all privileges on redmine.* to 'redmine'@'localhost';$ sudo apt-get install redmine3）配置
$ cd /usr/local/redmine
$ sudo cp config/database.yml.example config/database.yml
$ sudo vi config/database.ymlproduction:
adapter: mysql
database: redmine
host: localhost
username: redmine
password: redmine
encoding: utf8$ sudo gem install rails -v=2.3.5
$ sudo gem install rack -v=1.0.1
$ sudo rake generate_session_store
$ sudo RAILS_ENV=production rake db:migrate
$ sudo RAILS_ENV=production rake redmine:load_default_data$ sudo useradd redmine -p redmine -D
$ sudo mkdir files tmp public/plugin_assets
$ sudo chown -R redmine:redmine files log tem public/plugin_assets
$ sudo chmod -R 755 files log tmp public/plugin_assets
$ sudo touch log/production.log$ sudo ruby script/server webrick -e production5）其它配置
logger配置
$ sudo cp config/additional_environment.rb.example config/additional_environment.rb
$ sudo vi config/additional_environment.rb#Logger.new(PATH,NUM_FILES_TO_ROTATE,FILE_SIZE)
config.logger = Logger.new(config.log_path, 2, 1000000)
config.logger.level = Logger::INFO$ sudo cp config/email.yml.example config/email.yml
$ sudo vi config/email.ymlproduction:
delivery_method: :smtp
smtp_settings:
address: smtp.example.net
port: 25
domain: example.net
authentication: :login
user_name: redmine@example.net
password: redmine
development:
delivery_method: :smtp
smtp_settings:
address: 127.0.0.1
port: 25
domain: example.net
authentication: :login
user_name: redmine@example.net
password: redmineproduction:
delivery_method: :smtp
smtp_settings:
tls: true
enable_starttls_auto: true
address: "smtp.gmail.com"
port: '587'
domain: "smtp.gmail.com"
authentication: :plain
user_name: "your_email@gmail.com"
password: "your_password" production:
delivery_method: :smtp
smtp_settings:
address: smtp.knology.net
port: 25
domain: cybersprocket.com
authentication: :none# Database
/usr/bin/mysqldump -u <username> -p<password> <redmine_database> | gzip > /path/to/backup/db/redmine_`date +%y_%m_%d`.gz
# Attachments
rsync -a /path/to/redmine/files /path/to/backup/files$ sudo apt-get install git$ sudo rake db:migrate_plugins RAILS_ENV=production10、Apache2 HTTP配置
$ sudo a2enmod headers通过WebDAV协议访问svn
$ sudo apt-get install libapache2-svn db4.8-util viewvc-query python2.6-dev
$ sudo htpasswd -c /var/svn/repos/conf/passwd arbor
$ sudo htpasswd /var/svn/repos/conf/passwd redmine<Location /svn>
DAV svn
SVNPath /var/svn/repos
#SVNParentPath /var/svn
AuthType Basic
AuthName "IALS Subversion Repository"
AuthUserFile /var/svn/repos/conf/passwd
#<LimitExcept GET PROPFIND OPTIONS REPORT>
Require valid-user
#</LimitExcept>
</Location>$ sudo service apache2 restart$ sudo vi /etc/viewvc/viewvc.conf svn_roots = svn: /var/svn/repos
#root_parents = /var/svn : svn
default_root = svn
enable_syntax_coloration = 1否则将/usr/lib/viewvc/cgi-bin/viewvc.cgi(query.cgi)链接到/usr/lib/cgi-bin/
并修改default site，在其中加入：
ScriptAlias /viewvc /usr/lib/viewvc/cgi-bin/viewvc.cgi
ScriptAlias /query /usr/lib/viewvc/cgi-bin/query.cgi
<Directory "/usr/lib/viewvc/cgi-bin">
AllowOverride None
Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
Order allow,deny
Allow from all
</Directory> 2）redmine
$ sudo gem install passenger
$ sudo passenger-install-apache2-module
$ sudo vi /etc/apache2/mods-available/passenger.loadLoadModule passenger_module /var/lib/gems/1.8/gems/passenger-3.0.0/ext/apache2/mod_passenger.so$ sudo vi /etc/apache2/mods-available/passenger.confPassengerRoot /var/lib/gems/1.8/gems/passenger-3.0.0
PassengerRuby /usr/bin/ruby1.8$ sudo a2enmod passenger
$ sudo ln -s /usr/local/redmine/public /var/www/redmine
$ sudo chown -R www-data:www-data /var/www
$ sudo vi /etc/apache2/sites-available/redmineRailsEnv production
RailsBaseURI /redmine$ sudo a2ensite redmine
$ sudo service apache2 restart以下配置暂时不可用（单一服务可用）
ProxyRequests Off
ProxyPass /nexus http://127.0.0.1:8081/nexus
ProxyPassReverse /nexus http://127.0.0.1:8081/nexus
<proxy http://127.0.0.1:8081/nexus>
AllowOverride None
Order Deny,Allow
Allow from 192.168 127
</proxy>$ sudo a2enmod proxy_ajp
$ sudo vi /opt/sonar/conf/sonar.properties # Apache mod_jk connector. Supported only in standalone mode.
# Uncomment to activate AJP13 connector.
sonar.ajp13.port: 8009$ sudo vi /etc/apache2/mods-available/proxy.confProxyPass /sonar http://127.0.0.1:9000/sonar
ProxyPassReverse /sonar ajp://127.0.0.1:8009/sonar
<proxy http://127.0.0.1:9000/sonar>
AllowOverride None
Order Deny,Allow
Allow from 192.168 127
</proxy>$ sudo vi /etc/init.d/hudsonHUDSON_ARGS="-Xms256m -Xmx512m -XX:MaxPermSize=96m --httpPort=9090 --ajp13Port=9009 --prefix=/hudson"$ sudo vi /etc/apache2/mods-available/proxy.confProxyPass /hudson ajp://127.0.0.1:9009/hudson
ProxyPassReverse /hudson ajp://127.0.0.1:9009/hudson
<proxy ajp://127.0.0.1:9009>
AllowOverride None
Order Deny,Allow
Allow from 192.168 127
</proxy>11、openssl的配置
1)Creating the Certificate Authority
(1)create an initial certificate database
$ cd && mkdir -p myCA/signedcerts && mkdir myCA/private && cd myCA
$ echo '01' > serial && touch index.txt$ vi ~/myCA/caconfig.cnf# My sample caconfig.cnf file.
#
# Default configuration to use when one
# is not provided on the command line.
#
[ ca ]
default_ca = local_ca
#
#
# Default location of directories and
# files needed to generate certificates.
#
[ local_ca ]
dir = /home/<username>/myCA
certificate = $dir/cacert.pem
database = $dir/index.txt
new_certs_dir = $dir/signedcerts
private_key = $dir/private/cakey.pem
serial = $dir/serial
#
#
# Default expiration and encryption
# policies for certificates.
#
default_crl_days = 365
default_days = 1825
default_md = md5
#
policy = local_ca_policy
x509_extensions = local_ca_extensions
#
#
# Default policy to use when generating
# server certificates. The following
# fields must be defined in the server
# certificate.
#
[ local_ca_policy ]
commonName = supplied
stateOrProvinceName = supplied
countryName = supplied
emailAddress = supplied
organizationName = supplied
organizationalUnitName = supplied
#
#
# x509 extensions to use when generating
# server certificates.
#
[ local_ca_extensions ]
subjectAltName = DNS:alt.tradeshowhell.com
basicConstraints = CA:false
nsCertType = server
#
#
# The default root certificate
# generation policy.
#
[ req ]
default_bits = 2048
default_keyfile = /home/<username>/myCA/private/cakey.pem
default_md = md5
#
prompt = no
distinguished_name = root_ca_distinguished_name
x509_extensions = root_ca_extensions
#
#
# Root Certificate Authority distinguished
# name. Change these fields to match
# your local environment!
#
[ root_ca_distinguished_name ]
commonName = MyOwn Root Certificate Authority
stateOrProvinceName = NC
countryName = US
emailAddress = root@tradeshowhell.com
organizationName = Trade Show Hell
#
[ root_ca_extensions ]
basicConstraints = CA:true$ export OPENSSL_CONF=~/myCA/caconfig.cnf
$ openssl req -x509 -newkey rsa:2048 -out cacert.pem -outform PEM -days 1825
2)Creating a Self-Signed Server Certificate
(1)Create the server configuration file
$ vi ~/myCA/exampleserver.cnf #
# exampleserver.cnf
#
[ req ]
prompt = no
distinguished_name = server_distinguished_name
[ server_distinguished_name ]
commonName = tradeshowhell.com
stateOrProvinceName = NC
countryName = US
emailAddress = root@tradeshowhell.com
organizationName = My Organization Name
organizationalUnitName = Subunit of My Large Organization$ export OPENSSL_CONF=~/myCA/exampleserver.cnf
$ openssl req -newkey rsa:1024 -keyout tempkey.pem -keyform PEM -out tempreq.pem -outform PEM$ openssl rsa < tempkey.pem > server_key.pem$ mv tempkey.pem server_key.pem$ export OPENSSL_CONF=~/myCA/caconfig.cnf
$ openssl ca -in tempreq.pem -out server_crt.pem$ rm -f tempkey.pem && rm -f tempreq.pem* server_key.pem : Server application key file
3)Converting X.509 Certificates to PKCS#12 for Client Applications
(1)Create a single file containing both the certificate, and key
$ openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout mycert.pem -out mycert.pem$ openssl pkcs12 -export -out mycert.pfx -in mycert.pem -name "Certificate for Whatever"
(1)Generate a Server Certificate
$ sudo apache2-ssl-certificate
$ sudo a2enmod ssl$ sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-available/ssl
$ sudo ln -s /etc/apache2/sites-available/ssl /etc/apache2/sites-enabled/ssl
$ sudo vi /etc/apache2/sites-enabled/ssl NameVirtualHost *:443
<VirtualHost *:443>
SSLEngine On
SSLCertificateFile /etc/apache2/ssl/apache.pem$ sudo vi /etc/apache2/sites-enabled/default NameVirtualHost *:80
<VirtualHost *:80>
DocumentRoot
Directory $ sudo vi /etc/apache2/ports.conf Listen 80
Listen 443$ sudo /etc/init.d/apache2 force-reload$ sudo a2enmod rewrite
$ /etc/apache2/sites-enabled/default RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}$ sudo /etc/init.d/apache2 force-reload12、OpenSSH的配置
$ sudo apt-get install openssh-server
$ sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original
$ sudo chmod a-w /etc/ssh/sshd_config.original
$ sudo vi /etc/ssh/sshd_config #LogLevel INFO
LogLevel VERBOSE
#LoginGraceTime 120
LoginGraceTime 20
#X11Forwarding yes
X11Forwarding no
#Banner /etc/issue.net
Banner /etc/issue.net$ sudo vi /etc/issue.net***************************************************************************
NOTICE TO USERS
This computer system is the private property of its owner, whether
individual, corporate or government. It is for authorized use only.
Users (authorized or unauthorized) have no explicit or implicit
expectation of privacy.
Any or all uses of this system and all files on this system may be
intercepted, monitored, recorded, copied, audited, inspected, and
disclosed to your employer, to authorized site, government, and law
enforcement personnel, as well as authorized officials of government
agencies, both domestic and foreign.
By using this system, the user consents to such interception, monitoring,
recording, copying, auditing, inspection, and disclosure at the
discretion of such personnel or officials. Unauthorized or improper use
of this system may result in civil and criminal penalties and
administrative or disciplinary action, as appropriate. By continuing to
use this system you indicate your awareness of and consent to these terms
and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the
conditions stated in this warning.
**************************************************************************** #AllowUsers 'jhendrix svaughan'
#DenyUsers 'wgates sballmer'
AllowGroups sshlogin$ sudo addgroup sshlogin
$ sudo adduser xxx sshlogin
$ sudo service ssh restart Port 22
Port 2222
扫一扫
1129
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
