mongdo5副本集部署(1主2从)

环境:
OS:CentOS 7
DB:5.0.19

机器角色:
192.168.1.105:29001 主
192.168.1.106:29001 从1
192.168.1.107:29001 从2

1.下载相应的版本
https://www.mongodb.com/download-center/community
我这里下载的是 mongodb-linux-x86_64-rhel70-5.0.19.tgz

2.创建安装目录
每个节点都创建如下目录
[root@test services]# mkdir -p /usr/local/services
[root@test services]# mkdir -p /home/middle/mongodb/data
[root@test services]# mkdir -p /home/middle/mongodb/log
[root@test services]# mkdir -p /home/middle/mongodb/key
[root@test services]# mkdir -p /home/middle/mongodb/conf
[root@test services]# mkdir -p /home/middle/mongodb/run

3.安装数据库
每台机器都做同样的操作
[root@test soft]# tar -xvf mongodb-linux-x86_64-rhel70-5.0.19.tgz
[root@test soft]# mv mongodb-linux-x86_64-rhel70-5.0.19 /usr/local/services/mongodb

4.产生秘钥验证
在其中一个机器上创建秘钥文件,我这里是在192.168.1.105上操作
[root@test key]# cd /home/middle/mongodb/key
[root@test key]# openssl rand -base64 741 >>keyfile
[root@test key]# chmod 700 keyfile

加个keyfile拷贝到另外的两个节点相应的目录
scp keyfile root@192.168.1.106:/home/middle/mongodb/key/
scp keyfile root@192.168.1.107:/home/middle/mongodb/key/

5.生成日志文件(配置文件中指定了,提前创建)
每台机器上都执行
[root@test key]#echo>/home/middle/mongodb/log/mongodb.log

6.创建配置文件 mongo.cnf
vi /home/middle/mongodb/conf/mongo.cnf

port=29001
fork=true
dbpath=/home/middle/mongodb/data
logpath=/home/middle/mongodb/log/mongodb.log
pidfilepath=/home/middle/mongodb/run/29001.pid
logappend=true
shardsvr=true
replSet=myrepl
bind_ip=192.168.1.105,127.0.0.1
oplogSize=16384 ##默认单位是MB,这里给16GB
logRotate=reopen
##keyFile=/home/middle/mongodb/key/keyfile
##auth=true

每个节点都创建配置参数,修改相应的ip项即可
这里keyFile和auth先注释,因为等部署完初始化完集群后再启用

yaml格式的配置文件mongo.cnf

net:
  bindIp: 192.168.56.101,127.0.0.1
  port: 29001

storage:
  journal:
    enabled: true
  dbPath: "/home/middle/mongodb/data"
  engine: wiredTiger
  wiredTiger:
    engineConfig:
      cacheSizeGB: 2

systemLog:
  destination: file
  path: "/home/middle/mongodb/log/mongodb.log"
  logAppend: true
  logRotate: reopen

processManagement:
  fork: true
  pidFilePath: "/home/middle/mongodb/run/29001.pid"

replication:
  oplogSizeMB: 16384 ##默认单位是MB,这里给16GB
  replSetName: myrepl

sharding:
  clusterRole: shardsvr

##security:
##  keyFile: "/home/middle/mongodb/key/keyfile"
##  authorization: "enabled"

7.启动
每个节点都执行
[root@test key]# /usr/local/services/mongodb/bin/mongod -f /home/middle/mongodb/conf/mongo.cnf

8.初始化副本集
[root@localhost bin]# /usr/local/services/mongodb/bin/mongo 192.168.1.105:29001
use admin
config={_id:'myrepl',members:[{_id:0,host:'192.168.1.105:29001'},{_id:1,host:'192.168.1.106:29001'},{_id:2,host:'192.168.1.107:29001'}]}
rs.initiate(config)

到这里就完成了不需要带认证的副本集部署,下面的部署我们继续配置带认证的.

9.创建用户
在主节点上(我这里是节点1)上创建管理员账号test
[root@localhost bin]# /usr/local/services/mongodb/bin/mongo 192.168.1.105:29001
use admin
db.createUser({user:"test",pwd:"test123",roles:["root"]}); --创建用户
db.auth("test","test123"); --设置用户登陆权限，密码一定要和创建用户时输入的密码相同
show users; --查看创建的用户

10.重启动服务
每个节点都执行
关闭顺序:从节点-->主节点
/usr/local/services/mongodb/bin/mongo localhost:29001
use admin
db.shutdownServer()

##将之前注释掉的认证去掉注释后重启动服务
keyFile=/home/middle/mongodb/key/keyfile
auth=true

启动
启动顺序:主节点-->从节点
/usr/local/services/mongodb/bin/mongod -f /home/middle/mongodb/conf/mongo.cnf

11.这个时候就需要密码登录了
[root@localhost bin]# /usr/local/services/mongodb/bin/mongo 192.168.1.105:29001
myrepl:PRIMARY> use admin
switched to db admin
myrepl:PRIMARY> db.auth("test","test123");
1

12.创建普通账号
[root@localhost conf]# /usr/local/services/mongodb/bin/mongo 192.168.1.105:29001
myrepl:PRIMARY> use admin
switched to db admin
myrepl:PRIMARY> db.auth("test","test123");
myrepl:PRIMARY>use db_pushmsg
myrepl:PRIMARY>db.createUser({user:'hxl',pwd:'hxl123',roles:[{role:'dbOwner',db:'db_pushmsg'}]})

开发人员就可以使用账号hxl操作数据库db_pushmsg了.

普通账户也可以在admin库下直接创建的

[root@localhost conf]# /usr/local/services/mongodb/bin/mongo 192.168.56.101:29001
myrepl:PRIMARY> use admin
switched to db admin
myrepl:PRIMARY> db.auth("test","test123");
myrepl:PRIMARY>db.createUser({user:'hxl',pwd:'hxl123',roles:[{role:'dbOwner',db:'db_pushmsg'}]})

这种方式需要在admin库下进行验证，然后再切换到具体的库

/usr/local/services/mongodb/bin/mongo 192.168.56.101:29001
myrepl:PRIMARY>use admin; ##认证库
myrepl:PRIMARY>db.auth("hxl","hxl123");
myrepl:PRIMARY> use db_pushmsg ##进入到自己的库
myrepl:PRIMARY>db.tb_test.insert({x:1})