[root@wallet01 ~]# vim /etc/yum.repos.d/mongodb-org-4.0.repo
[mongodb-org-4.0]
name=MongoDB Repository
baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/4.0/x86_64/
gpgcheck=1
enabled=1
gpgkey=https://www.mongodb.org/static/pgp/server-4.0.asc
[root@wallet01 ~]# yum install -y mongodb-org
[root@wallet01 ~]# rpm -qa | grep mongodb-org
mongodb-org-mongos-4.0.21-1.el7.x86_64
mongodb-org-shell-4.0.21-1.el7.x86_64
mongodb-org-tools-4.0.21-1.el7.x86_64
mongodb-org-server-4.0.21-1.el7.x86_64
mongodb-org-4.0.21-1.el7.x86_64
[root@wallet01 ~]# vim /etc/mongod.conf
# where to write logging data.
systemLog:
destination: file
logAppend: true
path: /var/log/mongodb/mongod.log
# Where and how to store data.
storage:
dbPath: /var/lib/mongo
journal:
enabled: true
# engine:
# mmapv1:
# wiredTiger:
# how the process runs
processManagement:
fork: true # fork and run in background
pidFilePath: /var/run/mongodb/mongod.pid # location of pidfile
timeZoneInfo: /usr/share/zoneinfo
# network interfaces
net:
port: 27017
bindIp: 0.0.0.0 # Enter 0.0.0.0,:: to bind to all IPv4 and IPv6 addresses or, alternatively, use the net.bindIpAll setting.
[root@king01 ~]# cat >> /etc/security/limits.conf < db.disableFreeMonitoring()
> exit
bye
关闭THP
[root@wallet01 ~]# cat /sys/kernel/mm/transparent_hugepage/enabled
[always] madvise never
[root@wallet01 ~]# cat /sys/kernel/mm/transparent_hugepage/defrag
[always] madvise never
[root@wallet01 ~]# vim /etc/systemd/system/disable-thp.service
[Unit]
Description=Disable Transparent Huge Pages (THP)
[Service]
Type=simple
ExecStart=/bin/sh -c "echo 'never' > /sys/kernel/mm/transparent_hugepage/enabled && echo 'never' > /sys/kernel/mm/transparent_hugepage/defrag"
[Install]
WantedBy=multi-user.target
[root@wallet01 ~]# systemctl daemon-reload
[root@wallet01 ~]# systemctl start disable-thp
[root@wallet01 ~]# systemctl enable disable-thp
[root@wallet01 ~]# cat /sys/kernel/mm/transparent_hugepage/enabled
always madvise [never]
[root@wallet01 ~]# cat /sys/kernel/mm/transparent_hugepage/defrag
always madvise [never]
[root@wallet01 ~]# systemctl restart mongod
创建超级用户
[root@wallet ~]# mongo
MongoDB shell version v4.0.21
connecting to: mongodb://127.0.0.1:27017/?gssapiServiceName=mongodb
Implicit session: session { "id" : UUID("6ba59cf2-09ac-4719-9efd-e203f10bb448") }
MongoDB server version: 4.0.21
Server has startup warnings:
2020-12-14T13:50:12.445+0800 I CONTROL [initandlisten]
2020-12-14T13:50:12.446+0800 I CONTROL [initandlisten] ** WARNING: Access control is not enabled for the database.
2020-12-14T13:50:12.446+0800 I CONTROL [initandlisten] ** Read and write access to data and configuration is unrestricted.
2020-12-14T13:50:12.446+0800 I CONTROL [initandlisten]
> use admin
switched to db admin
> db.createUser ({ user: "root", pwd: "abcd@1234",roles: ["root"] })
Successfully added user: { "user" : "root", "roles" : [ "root" ] }
> exit
bye
启用身份验证
[root@wallet01 ~]# vim /etc/mongod.conf
security:
authorization: enabled
[root@wallet01 ~]# systemctl restart mongod
[root@wallet01 ~]# mongo -u "root" -p "abcd@1234" --authenticationDatabase "admin"
MongoDB shell version v4.0.21
connecting to: mongodb://127.0.0.1:27017/?authSource=admin&gssapiServiceName=mongodb
Implicit session: session { "id" : UUID("fe1b32c4-1d8d-42dc-b486-a2bcbc48c5c6") }
MongoDB server version: 4.0.21
>