Deploying on premise: Installing
Security considerations
To work properly, Linkurious Enterprise only need permissions (including write access) on the whole application directory, no administrative rights are needed.
The only exception may be related to Operating Systems' security policies preventing any standard user to bind applications on the first 1024 port numbers, see web server configuration to learn more on the issue and how prevent to grant administrative rights.
As best practice, it is advised to create a dedicated service account (e.g. linkurious
)
with the minimum level of permissions.
Linux systems
- Unzip Linkurious Enterprise archive:
> unzip linkurious-linux-v4.1.9.zip
- Adjust securities to ensure access to the user executing the process
- Enter the Linkurious Enterprise folder:
> cd linkurious-linux
- Check the configuration file at
linkurious-linux/data/config/production.json
(see how to configure a data-source)
See how to start Linkurious Enterprise on Linux.
Windows systems
- Remove eventual Windows security lock on the downloaded file (right-click on the file, then "Property" / "Unblock" / "OK")
- Unzip Linkurious Enterprise archive (right-click on the file, then "Extract all")
- Adjust securities to ensure access to the user executing the process
- Enter the
linkurious-windows
folder - Check the configuration file at
linkurious-windows/data/config/production.json
(see how to configure a data-source)
See how to start Linkurious Enterprise on Windows.
Mac OS systems
- Unzip Linkurious Enterprise archive:
> unzip linkurious-osx-v4.1.9.zip
- Adjust securities to ensure access to the user executing the process
- Enter the Linkurious Enterprise folder:
> cd linkurious-osx
- Check the configuration file at
linkurious-osx/data/config/production.json
(see how to configure a data-source)
See how to start Linkurious Enterprise on Mac OS.
Docker Linux
- Load the docker image
> docker load -i linkurious-docker-v4.1.9.tar.gz
- Port configuration
The Linkurious Enterprise docker image exposes the ports 3000
and 3443
for http and https connections respectively.
These ports should be mapped on the host machine to allow user connections.
Please visit the docker documentation to learn how publish the ports of a container.
- Volume configuration
Even if not strictly necessary, the best practice is to define external named volumes to store application data outside the container.
The Linkurious Enterprise docker image doesn't declare any volume, however below folders should be maintained when upgrading Linkurious Enterprise and therefore should be mapped to external volumes:
- The first folder located at
/data
stores Linkurious Enterprise configuration, logs and application data. - The second folder located at
/elasticsearch
stores the Embedded Elasticsearch data.
Please visit the docker documentation to learn how the configure volumes.
Here is an example to create named volumes (an arbitrary name can be chosen):
docker volume create lke-data
docker volume create lke-elasticsearch
- Now you need to install your Linkurious Enterprise license, following the steps to manage your license.
See how to start Linkurious Enterprise with docker.
Install via private Docker registry
If you wish to download Linkurious Enterprise directly using the docker
command line, use:
docker login -u 'YOUR_EMAIL' -p 'YOUR_DOWNLOAD_KEY' LINKURIOUS_PRIVATE_REGISTRY
docker pull LINKURIOUS_PRIVATE_REGISTRY/linkurious/linkurious-enterprise:4.1.9
You will find the value for YOUR_DOWNLOAD_KEY
in the Linkurious Customer Center, using the Copy Download Key
button.
You will find the value for LINKURIOUS_PRIVATE_REGISTRY
in the Linkurious Customer Center, under the Download
menu.
Please refrain from using Linkurious's private Docker registry directly in your deployment scripts, because its high-availability is not guaranteed. Instead, please download the image once and load it into your organization's private Docker registry.
Example command line to upload Linkurious Enterprise to your organization's private Docker registry:
docker login MY_PRIVATE_REGISTRY
docker tag LINKURIOUS_PRIVATE_REGISTRY/linkurious/linkurious-enterprise:4.1.9 MY_PRIVATE_REGISTRY/linkurious-enterprise
docker push MY_PRIVATE_REGISTRY/linkurious-enterprise:4.1.9
Install as a service
In order to run Linkurious Enterprise automatically when the operating system starts, it is possible to install it as a system service on Linux, Mac OS and Windows.
Open the administration menu by running menu.sh
, menu.bat
or menu.sh.command
in the Linkurious Enterprise folder.
Click on Install Linkurious as a system service
(administrative rights may be needed to successfully complete the task).
Linkurious Enterprise automatically detects the owner of the folder and will use that user as the
Process owner
.It is possible to use a different user by running the
menu
script with the option--user=USER
(whereUSER
is the desiredProcess owner
with adequate permissions).
Uninstall from services
When Linkurious Enterprise is installed as a service, the administration menu (by running menu.sh
,
menu.bat
or menu.sh.command
in the Linkurious Enterprise folder) will show the current status
of the service as well as a new entry to Uninstall Linkurious from system services
.