Deploying GreenRadius on Amazon Linux 2023

Prerequisites

• A target machine (x86_64) running Amazon Linux 2023
• A GreenRADIUS update package (v6.1.16.16 or later)
• If you have installed firewall software, make sure that it is set up properly to allow incoming connections.
• SELinux set to "permissive" or "disabled" (this is the default on fresh installations)
• The docker-compose-override-tz.yml, docker-compose-override.yml, and timezone_handle_for_docker_on_Amazon-Linux-2.sh files from this deployment package

Deployment Instructions

1. Log in with a user that has sudo access.
2. Run sudo yum update
3. Run sudo yum install -y yum-utils device-mapper-persistent-data lvm2
4. Run sudo yum -y install wget unzip awscli aws-cfn-bootstrap nfs-utils chrony conntrack jq ec2-instance-connect socat
5. Run sudo yum install curl
6. Run sudo yum install libxcrypt-compat
7. Run if sudo yum list installed | grep ec2-net-utils; then sudo yum remove ec2-net-utils -y -q; fi
8. Run sudo yum -y install docker
9. Run sudo systemctl enable docker
10. Run `sudo curl -L "https://github.com/docker/compose/releases/download/v5.3.1/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
11. Run sudo chmod +x /usr/local/bin/docker-compose
12. Create a symlink to this path with sudo ln -s/usr/local/bin/docker-compose/usr/bin/docker-compose
13. Run sudo yum install unzip
14. Run sudo yum install net-tools
15. Run sudo useradd -d /home/gradmin -m -G wheel -s /bin/bash gradmin
16. Run sudo passwd gradmin
17. Run chmod -R 750 /home/gradmin
18. Run chown -R gradmin:gradmin /home/gradmin
19. Run sudo su gradmin to assume the permissions of the gradmin user
20. Run mkdir /home/gradmin/temp/
21. Run cd /home/gradmin/temp/
22. Copy the latest GreenRADIUS update package to the /home/gradmin/temp/ directory.
23. Copy the provided docker-compose.override-tz.yml file to the /home/gradmin/temp/ directory.
24. Copy the provided docker-compose.override.yml file to the /home/gradmin/temp/ directory.
25. Copy the provided timezone_handle_for_docker_on_Amazon-Linux-2.sh script to /home/gradmin directory.
26. Run sudo chmod 750 /home/gradmin/timezone_handle_for_docker_on_Amazon-Linux-2.sh script to /home/gradmin directory.
27. Run sudo chown gradmin:gradmin /home/gradmin/timezone_handle_for_docker_on_Amazon-Linux-2.sh
28. Run sudo service docker start
29. Run sudo unzip GreenRADIUS_xxxx_Update.zip. (In this instruction and those following, replace xxxx with the version number for the upgrade package.)
30. Run sudo tar -xvzf GreenRADIUS_xxxx_Update/images.tgz -C .
31. Run sudo tar -xvzf GreenRADIUS_xxxx_Update/others.tgz -C .
32. Run sudo docker load -i images/greenradius_xxxx_init_image
33. Run sudo docker load -i images/greenradius_xxxx_main_image
34. Run sudo docker load -i images/greenradius_xxxx_openldap_image
35. Run sudo docker load -i images/greenradius_xxxx_postgres_image
36. Run sudo docker load -i images/greenradius_xxxx_rsyslog_image
37. Run sudo docker load -i images/greenradius_xxxx_freeradius_image
38. Run sudo docker load -i images/greenradius_xxxx_grs_auth_app_image
39. Run sudo mkdir -p /home/gradmin/grs-docker-compose
40. Run sudo mkdir -p /home/gradmin/grs-docker-compose
41. Run sudo cp others/docker-compose.yml /home/gradmin/grs-docker-compose/
42. Run sudo chmod 750 /home/gradmin/grs-docker-compose/docker-compose.yml
43. Run sudo chown gradmin:gradmin /home/gradmin/grs-docker-compose/docker- compose.yml
44. Run sudo cp docker-compose.override-tz.yml /home/gradmin/grs-docker-compose/
45. Run sudo chmod 750 /home/gradmin/grs-docker-compose/docker-compose.override-tz.yml
46. Run sudo chown gradmin:gradmin /home/gradmin/grs-docker-compose/docker-compose.override-tz.yml
47. Run sudo cp docker-compose.override.yml /home/gradmin/grs-docker-compose/
48. Run sudo chmod 750 /home/gradmin/grs-docker-compose/docker-compose.override.yml
49. Run sudo chown gradmin:gradmin /home/gradmin/grs-docker-compose/docker-compose.override.yml
50. Set the proper timezone using the command sudo timedatectl set-timezone <time zone>. You can view a list of valid timezones with sudo timedatectl list-timezones | less.
51. Run file /etc/timezone
52. If and only if /etc/timezone exists and is a directory, run sudo rm -rf /etc/timezone
53. Run sudo touch /etc/timezone
54. Edit /etc/timezone and enter the value set in step 50.
55. Run sudo sh /home/gradmin/timezone_handle_for_docker_on_Amazon-Linux-2.sh
56. Run sudo su -
57. Run cd /home/gradmin/grs-docker-compose
58. Run docker-compose -f docker-compose.yml -f docker-compose.override.yml -f docker- compose.override-tz.yml up -d
59. Run sudo touch /etc/systemd/system/grs-docker-compose-app.service
60. Edit /etc/systemd/system/grs-docker-compose-app.service and enter the following:

    # /etc/systemd/system/grs-docker-compose-app.service
    
    [Unit]
    Description=Docker Compose Application Service
    Requires=docker.service
    After=docker.service
    
    [Service]
    Type=oneshot
    RemainAfterExit=yes
    WorkingDirectory=/home/gradmin/grs-docker-compose
    ExecStart=/usr/local/bin/docker-compose -f docker-compose.yml -f docker-compose.override.yml -f docker-compose.override-tz.yml up -d
    ExecStop=/usr/local/bin/docker-compose down
    TimeoutStartSec=0
    
    [Install]
    WantedBy=multi-user.target
    

61. Save the file.
62. Run sudo systemctl enable grs-docker-compose-app
63. Run sudo systemctl start grs-docker-compose-app.service
64. Run sudo bash -c 'rm -rf /home/gradmin/temp/*

To apply subsequent updates

1. Copy the update package to the /home/gradmin/temp/ directory.
2. Log in as gradmin.
3. Run sudo yum update
4. Run sudo unzip /home/gradmin/temp/GreenRADIUS_xxxx_Update.zip -d /home/gradmin/temp/. (Note that in this command and below, xxxx should be replaced with the current version number.)
5. Run cd /home/gradmin/temp
6. Run sudo tar -xvzf GreenRADIUS_xxxx_Update/images.tgz -C .
7. Run sudo tar -xvzf GreenRADIUS_xxxx_Update/others.tgz -C .
8. Run sudo docker load -i images/greenradius_xxxx_init_image
9. Run sudo docker load -i images/greenradius_xxxx_main_image
10. Run sudo docker load -i images/greenradius_xxxx_openldap_image
11. Run sudo docker load -i images/greenradius_xxxx_postgres_image
12. Run sudo docker load -i images/greenradius_xxxx_rsyslog_image
13. Run sudo docker load -i images/greenradius_xxxx_freeradius_image
14. Run sudo docker load -i images/greenradius_xxxx_grs_auth_app_image
15. Run sudo docker load -i images/greenradius_xxxx_grs_queue_image
16. Run cd /home/gradmin/grs-docker-compose
17. Run sudo docker-compose down
18. Run sudo cp /home/gradmin/temp/others/docker-compose.yml /home/gradmin/grs-docker-compose/
19. Run cd /home/gradmin/grs-docker-compose
20. Run sudo docker-compose -f docker-compose.yml -f docker-compose.override.yml -f docker-compose.override-tz.yml up -d
21. Run sudo rm -rf /home/gradmin/temp/*

To manually start/stop containers

First, change the directory with cd /home/gradmin/grs-docker-compose/.

To start the container, run sudo docker-compose -f docker-compose.yml -f docker-compose.override.yml -f docker-compose.override-tz.yml up -d.

To stop the container, run sudo docker-compose down.