Prerequisites for CentOS7 or RHEL7

Operating System Install Type

Unified Assurance requires various components that are installed as part of the base operating system, and a "minimal" installation has been shown to be missing one or more important applications. Oracle Communications recommends using either a Base or Cloud installation type, depending on the operating system.

The following command can be used to update to a Base installation, as well as verify that all needed base packages have been installed:

yum groupinstall "Base"

SELinux

The Unified Assurance installer uses the useradd tool to create the user assure1. By default, SELinux does not allow this user to have a home directory outside of /home. The following steps show you how to configure SELinux to allow /opt to be treated as a valid parent directory for home directories.

  1. Install RPM containing the semanage tool:

    yum install policycoreutils-python

  2. Edit the semanage.conf file:

    nano /etc/selinux/semanage.conf

    Change the usepasswd setting from false to true:

    usepasswd=true

    Save the file.

  3. Set /opt label to be the same as /home:

    semanage fcontext -a -e /home /opt

  4. Update the labels for /opt:

    restorecon -R /opt

  5. OPTIONAL: the following are needed on servers that will be running Docker:

    yum install container-selinux selinux-policy-targeted

DNS Entries

Before installing Unified Assurance, all servers must be able to communicate with one another using the Host FQDN entries and Web FQDN entry (or entries) from each server to each server.

This can be tested by doing the following:

Ports

Unified Assurance uses several network ports for inter-component communications. These need to be opened bi-bidirectionally via the local operating system firewall and/or network ACLs or firewalls.

Several ports must be opened in any firewalls to allow HTTP communication and cross server communication with the presentation servers:

Additional ports to allow communication with the databases:

Additional ports may need to be opened for data collection purposes:

Additional ports are required for database redundancy and file synchronization:

Additional ports are required for docker and microservices:

The following is an example of creating an Unified Assurance firewalld service:

  1. Create the firewalld service file:

    cat <<'EOM' >/etc/firewalld/services/assure1v5.xml
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>Assure1</short>
  <description>Ports needed for Assure1 v5</description>
  <port protocol="tcp" port="80"/>
  <port protocol="udp" port="161"/>
  <port protocol="udp" port="162"/>
  <port protocol="tcp" port="179"/>
  <port protocol="tcp" port="443"/>
  <port protocol="udp" port="514"/>
  <port protocol="tcp" port="2379"/>
  <port protocol="tcp" port="2380"/>
  <port protocol="tcp" port="2424"/>
  <port protocol="tcp" port="2425"/>
  <port protocol="tcp" port="2426"/>
  <port protocol="tcp" port="2427"/>
  <port protocol="tcp" port="2428"/>
  <port protocol="tcp" port="2429"/>
  <port protocol="tcp" port="2430"/>
  <port protocol="tcp" port="2434"/>
  <port protocol="tcp" port="2486"/>
  <port protocol="tcp" port="2487"/>
  <port protocol="tcp" port="2488"/>
  <port protocol="tcp" port="2489"/>
  <port protocol="tcp" port="2490"/>
  <port protocol="tcp" port="3306"/>
  <port protocol="tcp" port="4369"/>
  <port protocol="tcp" port="5601"/>
  <port protocol="tcp" port="5671"/>
  <port protocol="tcp" port="6443"/>
  <port protocol="tcp" port="7473"/>
  <port protocol="tcp" port="7687"/>
  <port protocol="tcp" port="8055"/>
  <port protocol="tcp" port="8056"/>
  <port protocol="tcp" port="8086"/>
  <port protocol="tcp" port="8873"/>
  <port protocol="tcp" port="9093"/>
  <port protocol="tcp" port="9200"/>
  <port protocol="tcp" port="10250"/>
  <port protocol="tcp" port="25671"/>
</service>
EOM

  2. Enable the assure1v5 firewalld service:

    firewall-cmd --zone=public --permanent --add-service=assure1v5

  3. Reload firewalld:

    firewall-cmd --reload

Proxy

Set the following environment variables:

https_proxy=PROXYSTRING
no_proxy=NOPROXYSTRING

These can be set in any of the following ways: