diff --git a/install.sh b/install.sh index 599583db5cfa8394001069a944902ebea2fe63a7..4a890cf8e7899d168c43b50f89662f48ae81c933 100644 --- a/install.sh +++ b/install.sh @@ -11,32 +11,33 @@ # One user added: gliders, pw: gliders9876 # As root: -yum check-update -yum install epel-release # enables 'enterprise' software repo -yum update +yum check-update -y +yum install -y epel-release # enables 'enterprise' software repo +yum update -y # Install needed tools -yum install git rsync wget vim ansible tmux htop iotop dstat lsof telnet +yum install -y git rsync wget vim ansible tmux htop iotop dstat lsof telnet # And inotify tools -yum install inotify-tools incron +yum install -y inotify-tools incron # And development tools (needed to compile python libs from pip) -yum groupinstall "Development Tools" +yum groupinstall -y "Development Tools" # Install python libraries -yum install python-inotify numpy python-matplotlib python-virtualenv python-pip python-pandas libffi-devel +yum install -y python-inotify numpy python-matplotlib python-virtualenv python-pip python-pandas libffi-devel pip install css-html-js-minify pip install bcrypt # Install (& configure) sendmail # This isn't needed yet! But eventually we'd like to have theystem # email people alerts for things (e.go velogs an alarm) -yum install sendmail sendmail-cf m4 +yum install -y sendmail sendmail-cf m4 systemctl enable sendmail # Install & config MariaDB (MySQL) -yum install mariadb mariadb-server mariadb-devel +yum install -y mariadb mariadb-server mariadb-devel +systemctl start mariadb.service mysql_secure_installation # ^ mariadb root pw was set to gliders9876, anon users + test db removed, # remote root login disabled @@ -44,18 +45,18 @@ systemctl enable mariadb # Install ElasticSearch # (Used for full-text searching of glider log files) -yum install java-1.8.0-openjdk +yum install -y java-1.8.0-openjdk rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch cp elasticsearch.repo /etc/yum/repos.d/ -yum check-update -yum install elasticsearch +yum check-update -y +yum install -y elasticsearch systemctl enable elasticsearch # Install SQLAlchemy -yum install MySQL-python python-sqlalchemy +yum install -y MySQL-python python-sqlalchemy # Install PHP -yum install php php-fpm php-apc php-pdo php-mcrypt php-mbstring php-pecl-runkit +yum install -y php php-fpm php-apc php-pdo php-mcrypt php-mbstring php-pecl-runkit cp php.ini /etc/php.ini cp php-d-fpm.ini /etc/php.d/fpm.ini cp php-fpm-www.conf /etc/php-fpm.d/www.conf @@ -63,7 +64,7 @@ systemctl enable php-fpm # Install NodeJS, NPM, Bower and some tools for shrinking down # javascript and CSS -yum install nodejs npm +yum install -y nodejs npm npm install -g bower npm install -g uglifyjs npm install -g uglifycss @@ -76,8 +77,8 @@ npm install -g uglifycss # FOR NGINX # Based on https://www.digitalocean.com/community/tutorials/how-to-install-nginx-on-centos-7 -yum check-update -yum install nginx +yum check-update -y +yum install -y nginx useradd -m gliders gpasswd -a nginx gliders gpasswd -a apache gliders @@ -93,7 +94,7 @@ systemctl enable nginx # Install fail2ban: This is some intrusion detection software # that can help to block people trying to do brute-force # logins etc. -yum install fail2ban +yum install -y fail2ban systemctl enable fail2ban # Allow web through the firewall @@ -116,5 +117,5 @@ timedatectl set-ntp true # has a tendency to do this, which causes the occasional # gateway timeout when registering / changing user passwords # on the website. -yum install haveged +yum install -y haveged systemctl enable haveged