007.基于CentOS7.8安装Ambari2.7+HDP3.1大数据平台

[admin@hdp01 ~]$ sudo vim /etc/sudoers
## Allow root to run any commands anywhere 
root    ALL=(ALL)       ALL
# 添加这一行配置
admin   ALL=(ALL)       NOPASSWD:ALL

# admin用户使用sudo命令可以无密码切换到root用户
[admin@hdp01 ~]$ sudo su - 
Last login: Thu Oct 22 21:12:24 CST 2020 on pts/0
[root@hdp01 ~]#

# 文件：/etc/hosts
# 注意，前两行配置不要删除
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.0.0.105      hdp01
10.0.0.106      hdp02
10.0.0.107      hdp03
10.0.0.108      hdp04

# 关闭防火墙
sudo systemctl stop firewalld
# 禁止防火墙开机启动
sudo systemctl disable firewalld
# 查看防火墙状态
sudo systemctl status firewalld

# 确认4个节点的防火墙都是 inactive 和 disabled 状态
[root@hdp01 ~]# sudo systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:firewalld(1)

# 首先临时关闭SELINUX
sudo setenforce 0

# 然后修改配置文件，永久关闭SELINUX
# 文件：/etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
# 确保 SELINUX=disabled
SELINUX=disabled
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected. 
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

# 文件：/etc/profile
# 在最后一行添加如下内容
umask 0022

# 修改完之后使用source命令使其生效
source /etc/profile

# 在4个节点确保配置生效，0022是应该出现的结果
[root@hdp01 ~]# umask
0022

# 文件：/etc/security/limits.conf
# 在文件末尾追加如下内容
*       soft    nofile  131072
*       hard    nofile  131072

# 文件：/etc/ssh/sshd_config
# 此配置默认为yes，改为no
GSSAPIAuthentication no
# 此配置默认是注释掉的，放开即可
UseDNS no

# 保存退出之后重启ssh服务
sudo systemctl restart sshd

[admin@hdp01 ~]$ ssh-keygen
Generating public/private rsa key pair.
# 直接Enter
Enter file in which to save the key (/home/admin/.ssh/id_rsa):
# 直接Enter
Enter passphrase (empty for no passphrase): 
# 直接Enter
Enter same passphrase again: 
Your identification has been saved in /home/admin/.ssh/id_rsa.
Your public key has been saved in /home/admin/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:tAH9HF2xMFTCpmxDN7vjXat1NI/oPJX1avACPTi0UMU admin@hdp01
The key's randomart image is:
+---[RSA 2048]----+
|      ..   **o+. |
|       .. + E+ . |
|        o* = o.  |
|       ..oO .   .|
|        S+ = . +o|
|          = *.oo=|
|           +.B.++|
|           o+ *..|
|            o=.  |
+----[SHA256]-----+

[admin@hdp01 ~]$ ssh-copy-id -i ~/.ssh/id_rsa.pub admin@hdp01
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/home/admin/.ssh/id_rsa.pub"
The authenticity of host 'hdp01 (10.0.0.105)' can't be established.
ECDSA key fingerprint is SHA256:/eVZsOkuW8gHUcJxKNvtRh9yJ3UYDz4p9hA4W4CpeEg.
ECDSA key fingerprint is MD5:8c:e1:a8:0c:c9:80:e5:28:7a:25:96:32:c7:5f:25:47.
# 输入yes
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
# 输入dmin@hdp01的密码
admin@hdp01's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'admin@hdp01'"
and check to make sure that only the key(s) you wanted were added.

# 继续给其他机器添加hdp01节点的公钥，过程略...
ssh-copy-id -i ~/.ssh/id_rsa.pub admin@hdp02
ssh-copy-id -i ~/.ssh/id_rsa.pub admin@hdp03
ssh-copy-id -i ~/.ssh/id_rsa.pub admin@hdp04

# 以上操作执行完成之后，修改.ssh目录和authorized_keys文件的权限，4个节点都要执行
chmod 700 ~/.ssh
chmod 600 ~/.ssh/authorized_keys

# 测试，每次ssh到其他机器都不需要输入密码
[admin@hdp01 ~]$ ssh hdp01
Last login: Thu Oct 22 21:11:53 2020 from 10.0.0.1
[admin@hdp01 ~]$ exit
logout
Connection to hdp01 closed.
[admin@hdp01 ~]$ ssh hdp02
Last login: Thu Oct 22 21:11:53 2020 from 10.0.0.1
[admin@hdp02 ~]$ exit
logout
Connection to hdp02 closed.
[admin@hdp01 ~]$ ssh hdp03
Last login: Thu Oct 22 21:11:53 2020 from 10.0.0.1
[admin@hdp03 ~]$ exit
logout
Connection to hdp03 closed.
[admin@hdp01 ~]$ ssh hdp04
Last login: Thu Oct 22 21:11:53 2020 from 10.0.0.1
[admin@hdp04 ~]$ exit
logout
Connection to hdp04 closed.
[admin@hdp01 ~]$

[admin@hdp01 ~]$ echo $JAVA_HOME
/usr/java/jdk

[admin@hdp01 ~]$ java -version
java version "1.8.0_251"
Java(TM) SE Runtime Environment (build 1.8.0_251-b08)
Java HotSpot(TM) 64-Bit Server VM (build 25.251-b08, mixed mode)

[admin@hdp01 ~]$ tail -4 /etc/profile
export JAVA_HOME=/usr/java/jdk
export JRE_HOME=$JAVA_HOME/jre
export CLASSPATH=.:$JAVA_HOME/lib:$JRE_HOME/lib
export PATH=$JAVA_HOME/bin:$PATH

# HDP3.1要求MySQL的版本大于5.5，这里选择5.7
# 安装MySQL的Yum仓库
sudo yum -y localinstall https://dev.mysql.com/get/mysql57-community-release-el7-8.noarch.rpm
# 安装MySQL
sudo yum -y install mysql-community-server
# 创建数据目录
sudo mkdir -p /data/mysql
sudo chown -R mysql:mysql /data/mysql

# 文件：/etc/my.cnf，内容：
[client]
default-character-set=utf8mb4

[mysql]
socket=/var/lib/mysql/mysql.sock
default-character-set=utf8mb4

[mysqld]
socket=/var/lib/mysql/mysql.sock
symbolic-links=0
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
# 注意将数据目录修改为/data目录，/data目录的磁盘是独立挂载的大容量磁盘
datadir=/data/mysql
character_set_server=utf8mb4
character-set-client-handshake=FALSE
collation-server=utf8mb4_unicode_ci
max_connections=800
max_connect_errors=1000

# 设置开机自启动
sudo systemctl enable mysqld
# 启动MySQL
sudo systemctl start mysqld
# 查看运行状态
sudo systemctl status mysqld

# 获取临时密码，注意每个人的临时密码是不同的，我这里是"Vnyib*Yja9v/"
[root@hdp01 ~]# sudo grep 'temporary password' /var/log/mysqld.log
2020-10-26T13:51:29.134320Z 1 [Note] A temporary password is generated for root@localhost: Vnyib*Yja9v/

# 进入MySQL操作
[root@hdp01 ~]# mysql -uroot -p"Vnyib*Yja9v/"
mysql: [Warning] Using a password on the command line interface can be insecure.
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3
Server version: 5.7.32

Copyright (c) 2000, 2020, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> set global validate_password_policy=0;
Query OK, 0 rows affected (0.00 sec)

mysql> set global validate_password_mixed_case_count=0;
Query OK, 0 rows affected (0.00 sec)

mysql> set global validate_password_number_count=3;
Query OK, 0 rows affected (0.00 sec)

mysql> set global validate_password_special_char_count=0;
Query OK, 0 rows affected (0.00 sec)

mysql> set global validate_password_length=3;
Query OK, 0 rows affected (0.00 sec)

# 在生产上建议把root密码设置的更加复杂，我这里设置的root用户只能本机连接
mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY '123456';
Query OK, 0 rows affected (0.00 sec)

mysql> exit
Bye

# 将mysql-connector-java-8.0.22.jar上传到/usr/share/java目录下
sudo mkdir -p /usr/share/java
sudo mv ~/mysql-connector-java-8.0.22.jar /usr/share/java/

#安装Apache
sudo yum -y install httpd
#讲Apache设置为开机启动
sudo systemctl enable httpd
#启动Apache
sudo systemctl start httpd

# 首先把下载好的ambari和HDP的3个安装包上传到home目录下

cd /var/www/html/
sudo mv ~/ambari-2.7.4.0-centos7.tar.gz /var/www/html/
sudo mv ~/HDP-3.1.4.0-centos7-rpm.tar.gz /var/www/html/
sudo mv ~/HDP-GPL-3.1.4.0-centos7-gpl.tar.gz /var/www/html/
sudo mv ~/HDP-UTILS-1.1.0.22-centos7.tar.gz /var/www/html/

#解压缩
sudo tar -zxvf ambari-2.7.4.0-centos7.tar.gz
sudo tar -zxvf HDP-3.1.4.0-centos7-rpm.tar.gz
sudo tar -zxvf HDP-GPL-3.1.4.0-centos7-gpl.tar.gz
sudo tar -zxvf HDP-UTILS-1.1.0.22-centos7.tar.gz

#安装包清理
sudo rm -r ambari-2.7.4.0-centos7.tar.gz
sudo rm -r HDP-3.1.4.0-centos7-rpm.tar.gz
sudo rm -r HDP-GPL-3.1.4.0-centos7-gpl.tar.gz
sudo rm -r HDP-UTILS-1.1.0.22-centos7.tar.gz

#更改目录权限
sudo chown -R admin:admin /var/www/html
sudo chmod -R ugo+rX /var/www/html/

# 文件：/etc/yum.repos.d/ambari.repo，内容如下：
[ambari-repo]
name=ambari
baseurl=http://hdp01/ambari/centos7/2.7.4.0-118/
gpgcheck=0
enabled=1

# 验证，应该看到ambari-repo那一行
[admin@hdp01 yum.repos.d]$ yum repolist
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
repo id               repo name                                          status
ambari-repo           ambari                                             13
base/7/x86_64         CentOS-7 - Base - mirrors.aliyun.com               10,070
epel/x86_64           Extra Packages for Enterprise Linux 7 - x86_64     13,453
extras/7/x86_64       CentOS-7 - Extras - mirrors.aliyun.com             413
updates/7/x86_64      CentOS-7 - Updates - mirrors.aliyun.com            1,134
repolist: 25,083

# 安装ambari-server
sudo yum -y install ambari-server
# 核心日志信息
Installed:
  ambari-server.x86_64 0:2.7.4.0-118

# 数据库操作
[admin@hdp01 ~]$ mysql -uroot -p123456
mysql> set global validate_password_policy=0;
mysql> set global validate_password_mixed_case_count=0;
mysql> set global validate_password_number_count=3;
mysql> set global validate_password_special_char_count=0;
mysql> set global validate_password_length=3;
mysql> create database ambari;
mysql> CREATE USER 'ambari'@'%' IDENTIFIED BY '123456';
mysql> GRANT ALL ON ambari.* TO 'ambari'@'%';
mysql> FLUSH PRIVILEGES;
mysql> use ambari;
mysql> source /var/lib/ambari-server/resources/Ambari-DDL-MySQL-CREATE.sql;
mysql> exit

# 配置AmbariServer
[admin@hdp01 ~]$ sudo ambari-server setup
Using python  /usr/bin/python
Setup ambari-server
Checking SELinux...
SELinux status is 'disabled'
# 是否自定义ambari-server的运行用户，我们保持默认root用户即可，所以输入n并回车
Customize user account for ambari-server daemon [y/n] (n)? n
Adjusting ambari-server permissions and ownership...
Checking firewall status...
Checking JDK...
[1] Oracle JDK 1.8 + Java Cryptography Extension (JCE) Policy Files 8
[2] Custom JDK
==============================================================================
# 选择2，代表自定义JDK，然后回车
Enter choice (1): 2
WARNING: JDK must be installed on all hosts and JAVA_HOME must be valid on all hosts.
WARNING: JCE Policy files are required for configuring Kerberos security. If you plan to use Kerberos,please make sure JCE Unlimited Strength Jurisdiction Policy Files are valid on all hosts.
# 指定自己安装的JDK的路径/usr/local/jdk，然后回车
Path to JAVA_HOME: /usr/java/jdk
Validating JDK on Ambari Server...done.
Check JDK version for Ambari Server...
JDK version found: 8
Minimum JDK version is 8 for Ambari. Skipping to setup different JDK for Ambari Server.
Checking GPL software agreement...
GPL License for LZO: https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html
# 提示是否下载并安装LZO的包，我们输入y并回车
Enable Ambari Server to download and install GPL Licensed LZO packages [y/n] (n)? y  
Completing setup...
Configuring database...
# 是否进入数据库高级设置，我们输入y然后回车
Enter advanced database configuration [y/n] (n)? y
Configuring database...
==============================================================================
Choose one of the following options:
[1] - PostgreSQL (Embedded)
[2] - Oracle
[3] - MySQL / MariaDB
[4] - PostgreSQL
[5] - Microsoft SQL Server (Tech Preview)
[6] - SQL Anywhere
[7] - BDB
==============================================================================
# 在选择数据库的环节，我们选择3也就是MySQL，然后回车
Enter choice (1): 3
# MySQL的相关配置我们均采用默认值，默认用户和db都是ambari，密码输入123456，然后回车
Hostname (localhost): 
Port (3306): 
Database name (ambari): 
Username (ambari): 
Enter Database Password (bigdata): 
Re-enter password: 
Configuring ambari database...
# 我们需要指定MySQL的驱动包所在的路径/usr/share/java/mysql-connector-java-8.0.22.jar，然后回车
Enter full path to custom jdbc driver: /usr/share/java/mysql-connector-java-8.0.22.jar
Configuring remote database connection properties...
WARNING: Before starting Ambari Server, you must run the following DDL directly from the database shell to create the schema: /var/lib/ambari-server/resources/Ambari-DDL-MySQL-CREATE.sql
# 选择可以远程连接该数据库(y)，然后回车就配置完毕了
Proceed with configuring remote database connection properties [y/n] (y)? y
Extracting system views...
ambari-admin-2.7.4.0.118.jar
....
Ambari repo file doesn't contain latest json url, skipping repoinfos modification
Adjusting ambari-server permissions and ownership...
Ambari Server 'setup' completed successfully.

# 启动Ambari-Server
sudo ambari-server start

# 如果出现错误，查看日志/var/log/ambari-server/ambari-server.log
# 出现如下信息就是启动成功了
Starting ambari-server
Ambari Server running with administrator privileges.
Organizing resource files at /var/lib/ambari-server/resources...
Ambari database consistency check started...
Server PID at: /var/run/ambari-server/ambari-server.pid
Server out at: /var/log/ambari-server/ambari-server.out
Server log at: /var/log/ambari-server/ambari-server.log
Waiting for server start.................................
Server started listening on 8080

DB configs consistency check: no errors and warnings were found.
Ambari Server 'start' completed successfully.

# MySQL操作
mysql> create database hive;
mysql> CREATE USER 'hive'@'%' IDENTIFIED BY '123456';
mysql> GRANT ALL ON hive.* TO 'hive'@'%';
mysql> FLUSH PRIVILEGES;
mysql> exit;

# 执行以下命令
sudo ambari-server setup --jdbc-db=mysql --jdbc-driver=/usr/share/java/mysql-connector-java-8.0.22.jar