Deploy a mongodb single node server locally, enable auth authentication and enable oplog

Purpose

Deploy one locally MongoDB Single node server , And enable the auth verification 、 Turn on oplog, For daily testing .

edition ：4.0.9

Native system ：MacOs

install

1、 Use curl Command to install .

#  Get into  /usr/local
cd /usr/local
 
#  download 
sudo curl -O https://fastdl.mongodb.org/osx/mongodb-osx-ssl-x86_64-4.0.9.tgz
 
#  decompression 
sudo tar -zxvf mongodb-osx-ssl-x86_64-4.0.9.tgz
 
#  Rename it to  mongodb  Catalog 
 
sudo mv mongodb-osx-x86_64-4.0.9/ mongodb

2、 hold MongoDB Directory of binary command files （ The installation directory /bin） Add to PATH In the path ：

export PATH=/usr/local/mongodb/bin:$PATH

3、 Create log and data storage directory ：

Data storage path ：

sudo mkdir -p /usr/local/var/mongodb

Log file path ：

sudo mkdir -p /usr/local/var/log/mongodb

Grant the current user read and write permissions to these two directories ：

sudo chown username /usr/local/var/mongodb
sudo chown username /usr/local/var/log/mongodb

4、 Background start mongodb：

mongod --dbpath /usr/local/var/mongodb --logpath /usr/local/var/log/mongodb/mongo.log --fork

5、 see mongod Whether the service starts ：

ps aux | grep -v grep | grep mongod

6、 After startup, we can use mongo Command to open a terminal ：

$ cd /usr/local/mongodb/bin 
$ ./mongo              
MongoDB shell version v4.0.9

connecting to: mongodb://127.0.0.1:27017/?gssapiServiceName=mongodb

Enable auth, Log in with password

start-up mongod After service , Use the client to log in , The first login does not require a password .

./mongo

1. Next, create a super user root, The password is root：

db.createUser({user:"root",pwd:"root",roles:[{"role":"userAdmin","db":"admin"},{"role":"root","db":"admin"},{"role":"userAdminAnyDatabase","db":"admin"}]})

MongoDB in built-in The roles are as follows ： among built-role There are the following ：

• Read： Allows the user to read the specified database
• readWrite： Allows users to read and write to a specified database
• dbAdmin： Allows the user to execute administrative functions in the specified database , Like index creation 、 Delete , View statistics or access system.profile
• userAdmin： Allow the user to system.users A collection of written , You can find the specified database to create 、 Delete and manage users
• clusterAdmin： Only in admin Available in the database , Gives the user administrative rights to all sharding and copy-set related functions .
• readAnyDatabase： Only in admin Available in the database , Give the user read rights to all databases
• readWriteAnyDatabase： Only in admin Available in the database , Gives the user read and write access to all databases
• userAdminAnyDatabase： Only in admin Available in the database , That gives the user all the databases userAdmin jurisdiction
• dbAdminAnyDatabase： Only in admin Available in the database , That gives the user all the databases dbAdmin jurisdiction .
• root： Only in admin Available in the database . Super account , Super authority ( The super account created this time )

1. add --auth Parameters , restart mongo.--auth Parameters are used to control user access to database resources and operations . After enabling authorization ,MongoDB Require all clients to authenticate first , To determine the access rights of the client .

mongod --dbpath /usr/local/var/mongodb --logpath /usr/local/var/log/mongodb/mongo.log --fork --auth

3. Log in with your account and password .

mongo -u root -p root localhost:27017/admin
 perhaps 
mongo "mongodb://root:[email protected]:27019/admin"

Single node start Oplog

MongoDB There is a data structure in the replica set schema of oplog, It stores all the change operations of the node . But a single instance does not have this structure , So single MongoDB How to start an instance oplog？

Method ：

You need to start the instance in replica set mode , And in local A database or admin The database executes the script that initializes the replica set ,rs.initiate().

1. Start the instance as a replica set ：

Start command , increase replSet='replset_name' Example ：

./mongod --dbpath /usr/local/var/mongodb --logpath /usr/local/var/log/mongodb/mongo.log --fork --auth --bind_ip 0.0.0.0 --replSet='test'

1. stay local A database or admin The database executes the script that initializes the replica set .

grammar ：
rs.initiate({ _id: "replset_name", members: [{_id:0,host:"ServerIP:MongoDBPort"}]})

Example ：

 rs.initiate({ _id: "test", members: [{_id:0,host:"localhost:27017"}]})

notes ： After initialization , The only node in the replica set , It may be displayed as... For a short time SECONDARY or OTHER. generally speaking , Wait a minute , Will naturally return to primary, No manual intervention required .

summary

We can use curl install MongoDB Single node server , Turn on password verification , Need to open --auth Parameters . If you want to turn on oplog, You need to start the instance in replica set mode , And in local A database or admin The database executes the script that initializes the replica set ,rs.initiate().

Order one “ Fabulous or  Looking at ” You'd better see ！

like , Just pay attention ！

Thank you, bosses ！！！