ranger部署

1. 准备

wget https://mirrors.bfsu.edu.cn/apache/ranger/2.0.0/apache-ranger-2.0.0.tar.gz

tar zxvf apache-ranger-2.0.0.tar.gz 
mv apache-ranger-2.0.0 ranger200
cd ranger200
sudo yum -y install npm
sudo yum -y install nodejs

2.编译

proxychains4 mvn -DskipTests=true clean compile package install assembly:assembly

cd target

3.ranger-admin

3.1 创建数据库

create database ranger;
alter database ranger character set latin1; 
create user 'rangeradmin'@'%' identified by 'sony318!';
GRANT ALL PRIVILEGES ON ranger.* TO 'rangeradmin'@'%';
flush privileges;

3.2 配置

a. tar zxvf ranger-2.0.0-admin.tar.gz
b. cd ranger-2.0.0-admin
c. vim install.properties

 setup_mode=SeparateDBA
#配置数据库
db_root_user=root
db_root_password=admin
db_host=10.88.0.54
db_name=ranger
db_user=rangeradmin
db_password=sany318!
#配置密码
rangerAdmin_password=sany318!（登录UI，admin/sany318!）
rangerTagsync_password=sany318!
rangerUsersync_password=sany318! (设置usersync)
keyadmin_password=sany318! (登录kms,keyadmin/sany318!)
#注释掉audit
#audit_store=solr
#admin UI
policymgr_external_url=http://10.88.1.87:6080
policymgr_http_enabled=true
policymgr_https_keystore_file=
policymgr_https_keystore_keyalias=rangeradmin
policymgr_https_keystore_password=
#系统用户
unix_user=ranger
unix_user_pwd=ranger
unix_group=ranger

d. sudo vi setup.sh

check_java_version() {
        #Check for JAVA_HOME
        export JAVA_HOME=/usr/java/default

3.3 启动服务

sudo ./setup.sh

sudo ranger-admin start

3.4 检查服务

jps -m

4. ranger-usersync

4.1 部署

a. tar -zxvf ranger-2.0.0-usersync.tar.gz 
b. cd ranger-2.0.0-usersync
c. sudo vim install.properties 

POLICY_MGR_URL = http://10.88.1.87:6080
SYNC_SOURCE=unix
SYNC_INTERVAL=1

d. sudo ./setup.sh

JAVA_HOME=/usr/java/default

4.2  启动服务

chmod 755 setup.sh 
sudo ./setup.sh
sudo ./ranger-usersync-services.sh start

4.3 检查

a. jps -m

b. UI之setting，查看user

5. ranger-kms

5.1 创建数据库

create database rangerkms;
alter database rangerkms character set latin1; 
create user 'rangerkms'@'%' identified by 'sany318!';
GRANT ALL PRIVILEGES ON rangerkms.* TO 'rangerkms'@'%';
flush privileges;

5.2 创建目录

mkdir -p output/ranger/kms/logs
mkdir -p var/ranger/kms/run

5.3 部署

a. tar zxvf ranger-2.0.0-kms.tar.gz 
b. cd ranger-2.0.0-kms
c. sudo vim install.properties 
setup_mode=SeparateDBA
#配置数据库
db_root_user=root
db_root_password=admin
db_host=10.88.0.54
db_name=ranger
db_user=rangeradmin
db_password=sany318!
#配置URL
POLICY_MGR_URL=http://10.88.1.87:6080
#配置日志目录
# Custom log directory path
RANGER_KMS_LOG_DIR=/home/user/output/ranger/kms/logs
#PID file path
RANGER_KMS_PID_DIR_PATH=/home/user/var/ranger/kms/run
#KMS配置
REPOSITORY_NAME=kmsdev
d. sudo chmod 755 setup.sh 
sudo vim setup.sh

增加JAVA_HOME

5.4 启动服务

sudo ./setup.sh 
sudo chmod 755 enable-kms-plugin.sh 
sudo vi enable-kms-plugin.sh 
sudo ./enable-kms-plugin.sh
sudo ./ranger-kms start

5.5 UI配置

a.登录 keyadmin/sany318!

b.URl : kms://http@10.88.1.87:9292/kms