安装minio集群

创建用户并授权

useradd minio
echo 123456 | passwd --stdin minio
echo "minio    ALL=(ALL)       NOPASSWD: ALL" | sudo tee /etc/sudoers.d/minio
sudo chmod 0440 /etc/sudoers.d/minio

下载二进制文件

su - minio
wget https://dl.min.io/server/minio/release/linux-amd64/minio
wget https://dl.min.io/client/mc/release/linux-amd64/mc
sudo mv minio mc /usr/local/bin
sudo chmod +x /usr/local/bin/{minio,mc}

非tls模式

创建所需目录

sudo mkdir -p /data/minio/{data{01..02},config}
sudo chown -R minio.minio /data/minio

注意：数据目录不能是在根分区下的目录

minio配置参数

4台机器8块盘

cat <<EOF | tee /data/minio/config/minio.cnf
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=ak+JLouROYaP
MINIO_OPTS="--console-address :9999"
MINIO_VOLUMES="http://192.168.31.58:9000/data/minio/data01 http://192.168.31.58:9000/data/minio/data02 \
http://192.168.31.40:9000/data/minio/data01 http://192.168.31.40:9000/data/minio/data02\
http://192.168.31.219:9000/data/minio/data01 http://192.168.31.219:9000/data/minio/data02\
http://192.168.31.246:9000/data/minio/data01 http://192.168.31.246:9000/data/minio/data02"
EOF

minio的systemd配置

cat <<EOF | sudo tee /usr/lib/systemd/system/minio.service
[Unit]
Description=MinIO
Documentation=https://docs.min.io
Wants=network-online.target
After=network-online.target
AssertFileIsExecutable=/usr/local/bin/minio

[Service]
WorkingDirectory=/data/minio

User=ops
Group=ops
ProtectProc=invisible

EnvironmentFile=-/data/minio/config/minio.cnf
ExecStartPre=/bin/bash -c "if [ -z \"\${MINIO_VOLUMES}\" ]; then echo \"Variable MINIO_VOLUMES not set in /data/minio/config/minio.cnf\"; exit 1; fi"
ExecStart=/usr/local/bin/minio server \$MINIO_OPTS \$MINIO_VOLUMES

# Let systemd restart this service always
Restart=always

# Specifies the maximum file descriptor number that can be opened by this process
LimitNOFILE=1048576

# Specifies the maximum number of threads this process can create
TasksMax=infinity

[Install]
WantedBy=multi-user.target
EOF

启动minio

sudo systemctl daemon-reload
sudo systemctl start minio
sudo systemctl enable minio

问题一：

jouxeu -xeu minio.serivce 可能会出现 systemd[1]: [/usr/lib/systemd/system/minio.service:13] Unknown lvalue 'ProtectProc' in section 'Service' 报错信息

解决办法：

sudo yum install systemd-*

tls模式

与非tls模式基本一致，请先操作非tls模式。但是不要启动非tls。如果启动过的话，请将数据目录删除重新创建。

生成证书

mkdir -p ~/.minio/certs/
cd ~/.minio/certs/
openssl genrsa -out private.key 2048
cat > openssl.conf <<-EOF
[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no

[req_distinguished_name]
C = CN
ST = GuangDong
L = GuangZhou
O = Personal
OU = Personal

[v3_req]
subjectAltName = @alt_names

[alt_names]
IP.1 = 192.168.31.58
IP.2 = 192.168.31.40
IP.3 = 192.168.31.219
IP.4 = 192.168.31.246
EOF
openssl req -new -x509 -nodes -days 730 -keyout private.key -out public.crt -config openssl.conf

注意：需要修改 IP.x 的IP地址

修改minio的配置文件

将 /data/minio/config/minio.cnf 文件中的 HOST_OPTS 全部主机的 http 协议改成 https 即可。

启动minio

sudo systemctl daemon-reload
sudo systemctl start minio
sudo systemctl enable minio

mc客户端

wget https://dl.min.io/client/mc/release/linux-amd64/mc
sudo mv mc /usr/local/bin/
sudo chmod +x /usr/local/bin/mc