Installation¶

LIKPI license¶

The LIKPI Community Edition embed already a license ready to be used with a limitation of 5T on log data collection.

In case you have suscribed to the Enterpriose version, we will request you the mac address of your Central Server.

For further information please visit our site Likpi

Downloading the installation files¶

You can download the installation files from Download Likpi

Pre-installation tasks on Debian operating system for example¶

Log on the server on which you want to install the Central Server.

Warning

If you are reinstalling the Central Server due to a failure, you must delete all the existing installation directories and files except $LIKPI_PATH/security and NATs binary folder.

Installation tasks with system administrator¶

Check FQDN on /etc/host¶

When applicable, please edit /etc/host with your system administrator and check if the FQDN and hostname are configured.

127.0.1.1 <hostname.domain> <hostname>

Note

It will help the installation script to get the FQDN.

Create user likpiadm for LIKPI application¶

create user without sudo:

$ sudo mkdir /home/likpiadm
$ sudo useradd -d /home/likpiadm likpiadm
$ sudo chown likpiadm:likpiadm /home/likpiadm
$ sudo passwd likpiadm (your_password)

Set user shell:

$ sudo vi /etc/passwd
likpiadm:x:1001:1001::/home/likpiadm:             // (Before)
likpiadm:x:1001:1001::/home/likpiadm:/bin/bash    // (After)

Create likpi group¶

$ sudo groupadd likpi

To add a likpiadm user to likpi group:

$ sudo usermod -g likpi likpiadm

Check likpiadm:

$ id likpiadm

Repository for Likpi application¶

$ sudo mkdir /opt/likpi
$ sudo chown likpiadm:likpi /opt/likpi

Installing OpenJDK¶

$ sudo apt update
$ sudo apt install default-jre
$ java -version

Installing PostgreSQL database¶

$ sudo apt update
$ sudo apt full-upgrade
$ sudo apt install postgresql postgresql-client
$ sudo systemctl status postgresql
$ sudo systemctl enable --now postgresql // (if service not started)

Configuring the PostgreSQL Server:

$ sudo su - postgres (as Linux admin)
$ psql

The corresponding SQL statement is:

CREATE DATABASE likpidb WITH ENCODING 'UTF-8';
CREATE USER likpidba WITH PASSWORD 'your_password';
GRANT ALL PRIVILEGES ON DATABASE "likpidb" to likpidba;
\c likpidb
\q

Enabling Remote Access if needed:

Edit the file postgresql.conf, and remove the comment marker on the line for the listen_addresses setting, so that it reads.

$ vi /etc/postgresql/11/main/postgresql.conf
#listen_addresses = 'localhost'
listen_addresses = '*'

Open the file pg_hba.conf:

$ vi /etc/postgresql/11/main/pg_hba.conf

To allow users to connect from remote systems on your network with any role, add this line:

host    all             all             127.0.0.1/32         md5 // (Before)
host    all             all             0.0.0.0/0            md5 // (After)

To make your changes take effect, restart the server:

$ exit
$ sudo /etc/init.d/postgresql restart

NGINX Installation (with user sudo)¶

$ sudo apt install nginx
$ systemctl status nginx

Likpi Application installer (with user likpiadm)¶

$ sudo mv likpi-0.1.0-SNAPSHOT-20230928-1711_installer.jar /home/likpiadm/
$ sudo chown likpiadm:likpi /home/likpiadm/likpi-0.1.0-SNAPSHOT-20230928-1711_installer.jar

Installation tasks with likpiadm user¶

Installing nats-server¶

Please refer to this page for installing a NATS server: https://docs.nats.io (Section Installing a NATS Server/Downloading a Release Build)

$ su - likpiadm
$ curl -L https://github.com/nats-io/nats-server/releases/download/v2.9.21/nats-server-v2.9.21-linux-amd64.zip -o nats-server.zip
$ unzip nats-server.zip
$ mv nats-server-v2.9.21-linux-amd64 /opt/likpi

Start nats-server (with user likpiadm)¶

$ nohup /opt/likpi/nats-server-v2.9.21-linux-amd64/nats-server -p 4222 -m 8222 &
# The -m option is needed for nats-top monitoring tool

Create /opt/likpi/security folder and set likpiadm as owner¶

$ mkdir /opt/likpi/security
$ chown likpiadm:likpi /opt/likpi/security

Generate 2048 bit RSA keys (with user likpiadm)¶

$ openssl genrsa -out rsa_2048_priv.pem 2048 // Private key
$ openssl rsa -pubout -in rsa_2048_priv.pem -out rsa_2048_pub.pem // Public key

Move your private & public key on /opt/likpi/security

$ mv rsa_2048_pub.pem /opt/likpi/security
$ mv rsa_2048_priv.pem /opt/likpi/security

For secure connection get your certificates from your Certificate Authority¶

Move your TLS CRT & TLS KEY files on /opt/likpi/security folder.

License file¶

Your license file is deployed during the installation in /opt/likpi/security folder.

Note

You are now ready to launch the Likpi installer.