Minio Install & Configuration

1. Environment

2. Install

  • 将安装包通过SFTP上传至Centos7 服务器中指定目录,这里放在/opt目录下

    cd /opt
    ls -l
    
  • 创建安装目录

    mkdir -p /usr/local/minio/conf
    mkdir -p /usr/local/minio/data
    mkdir -p /usr/local/minio/cert
    cd /usr/local/minio/
    
  • 创建minio配置文件

    vim /usr/local/minio/conf/minio.conf
    
  • 配置如下内容

    MINIO_VOLUMES="/usr/local/minio/data"
    MINIO_OPTS="-C /usr/local/minio/conf --address XX IP XX:9000"
    
  • 配置自动启动

    vi /etc/systemd/system/minio.service  
    
  • 写入一下配置文件

    [Unit]
    Description=MinIO
    Documentation=https://docs.min.io
    Wants=network-online.target
    After=network-online.target
    AssertFileIsExecutable=/usr/local/minio/minio
    [Service]
    # User and group
    User=minio
    Group=minio
    EnvironmentFile=/usr/local/minio/conf/minio.conf
    ExecStart=/usr/local/minio/minio server $MINIO_OPTS $MINIO_VOLUMES
    # Let systemd restart this service always
    Restart=always
    # Specifies the maximum file descriptor number that can be opened by this process
    LimitNOFILE=65536
    # Disable timeout logic and wait until process is stopped
    TimeoutStopSec=infinity
    SendSIGKILL=no
    [Install]
    WantedBy=multi-user.target
    
  • 更改文件、目录属主属组

    chown -R minio:minio /usr/local/minio
    
  • 启动服务并配置自启动

    systemctl daemon-reload
    systemctl enable minio.service
    systemctl start  minio.service
    systemctl status minio.service
    
  • 配置SSL/TLS

  • 生成证书和私钥key,并存放在 /usr/local/minio/etc/cert 下,并执行如下命令

    find /usr/local/minio/etc/cert -type d -exec chmod 700 {} \
    find /usr/local/minio/etc/cert -type f -exec chmod 400 {} \
    chown -R minio:minio /usr/local/minio
    
    systemctl restart minio.service
    

3. Configuration 防火墙

  • 查看minio使用端口 9000

    netstat -lnpt
    
  • 开放端口,这里使用 9000 端口

    firewall-cmd --permanent --zone=public --add-port=9000/tcp
    
  • 重启防火墙

    firewall-cmd --reload
    
  • 查看防火墙,已开放端口列表

    firewall-cmd --list-ports