--- doc/build/RHEL7_install.frag 2014/06/30 16:06:30 1.2 +++ doc/build/RHEL7_install.frag 2021/03/13 20:58:10 1.5 @@ -89,21 +89,50 @@ Finish installing your server, reboot it

Firewall Configuration

-LON-CAPA uses the traditional iptables package instead of the recent Firewalld, included for the -first time with RHEL7. Accordingly, you should install iptables-services, disable firewalld, -and enable iptables. +Starting with LON-CAPA 2.11.3 you have the option of using either firewalld or iptables to +manage the Firewall on your RHEL7 server/VM, as both are compatible with LON-CAPA's +port management.

+

Enable access to standard web server ports (i.e., http and https) as follows if using +firewalld:

+
+systemctl enable firewalld
+systemctl start firewalld
+firewall-cmd --zone=public --permanent --add-service=http
+firewall-cmd --zone=public --permanent --add-service=https
+firewall-cmd --reload
+
+

If you prefer to use the traditional iptables package instead of the default firewalld, +you will need to install iptables-services, disable firewalld, enable iptables, and then +use the system-config-firewall-tui tool to configure the Firewall. +

 yum install iptables-services
 systemctl mask firewalld
 systemctl enable iptables
 systemctl enable ip6tables
+systemctl stop firewalld
+systemctl start iptables
+systemctl start ip6tables
+
+

+If you have a subscription to Red Hat you can use subscription-manager to enable the +rhel-7-server-optional-rpms, and then install system-config-firewall-tui. +

+
+subscription-manager repos --enable rhel-7-server-optional-rpms
+yum install system-config-firewall-tui
+
+

If your server/VM does not currently have a Red Hat subscription you can install wget, +then download system-config-firewall-tui from the LON-CAPA installation site and install it. +

+
 
 yum install wget
 rpm --import http://install.loncapa.org/versions/redhat/RPM-GPG-KEY-loncapa
 wget http://install.loncapa.org/versions/redhat/7Server/system-config-firewall-tui-1.2.29-10.el7.noarch.rpm
 yum localinstall system-config-firewall-tui-1.2.29-10.el7.noarch.rpm
 

-The system-config-firewall-tui tool should be used to configure the Firewall. +If using iptables, use the system-config-firewall-tui tool to configure the Firewall.

 system-config-firewall-tui
@@ -118,6 +147,12 @@ system-config-firewall-tui
 
 

4. Update your system

+Enable access to the EPEL repository +

+
+yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
+
+

Update your system to the latest versions of the system software using yum.

@@ -130,6 +165,7 @@ Reboot your system before continuing wit
 Retrieve the rhel7_loncapa_yum file from the LON-CAPA install site:
 

+yum install wget
 wget http://install.loncapa.org/versions/redhat/7Server/rhel7_loncapa_yum.conf
 

@@ -140,6 +176,23 @@ mv /etc/yum.conf /etc/yum.conf.backup cp rhel7_loncapa_yum.conf /etc/yum.conf yum update

+

+Verify the required repositories are enabled: +

+
+yum repolist enabled
+
+

+The list of enabled repos should be as follows: +

+ + + + + + + +
repo idrepo name
epelExtra Packages for Enterprise Linux 7 - x86_64
loncapa-updates-basearchRHEL 7Server LON-CAPA x86_64 Updates
loncapa-updates-noarchRHEL 7Server LON-CAPA noarch Updates
rhel-x86_64-server-7 Red Hat Enterprise Linux Server (v. 7 for x86_64)
rhel-x86_64-server-optional-7RHEL Server Optional (v. 7 x86_64)

Configure SELinux