Installing and Running MinIO on Linux - Session 4: Lab - Configuring and Running MinIO with systemd

In this MinIO training session, you will see a demonstration lab of the steps to configure and run MinIO using systemd in Linux.
MinIO is an open-source object storage server released under the GNU AGPL v3 license. It's compatible with Amazon S3, making it a great choice for deploying your storage infrastructure on Kubernetes.
Connect with us:
Website: min.io/
LinkedIn: / minio-inc-
Twitter: / minio
Docs: min.io/docs/mi...
Slack: minio.slack.com/
#ObjectStorage #MultiCloud #CloudNative #Kubernetes #ObjectStore #systemd #linux #tutorial #s3 #developers

[@ksmith169]

Hello MinIO - Just to say these of videos are excellent. Clear, concise, content. Great work. Keep it up.

[@MINIO]

Thanks! We're enjoying producing them.

[@binaryfire]

Great videos, thanks. One question - shouldn't the config file be set to 0640 to prevent anyone other than the minio user and root from reading it? Since it contains the password...

[@MINIO]

Keeping passwords safe is always important, so, yeah, 0640 might be a safer bet.

[@GeraintJones]

Where do you get your certs from? You had some conveniently to hand, but where did they come from? Did you create them? How?

[@MINIO]

The certs we use in our demos are from LetsEncrypt.

[@mustafahatimalibiroty1221]

I tried setting up TLS and wanted to know how was the certificate generated and Server Url, is it a different server or same server dns name? if anyone can help with that. many thanks

[@canoncode]

How did you generate the certificate and what should the MINIO_SERVER_URL contain

[@mustafahatimalibiroty1221]

Use certbot utility to generate certificate

[@JamesDavis-ip9mm]

Do the TLS cert files have to be names "private.key" and "public.crt"? I followed the steps here and the I still cannot get the certificate to apply.

[@MINIO]

Yes, the names are pretty much set in stone. Make sure they're either under the home directory of the user that is running MinIO, or set a custom path with -S or --certs-dir with the server command.

[@JamesDavis-ip9mm]

does the env file need to specify the MINIO_CERT_PUBLIC_KEY and MINIO_CERT_PRIVATE_KEY?@@MINIO

[@JamesDavis-ip9mm]

Also, do I need to include a root cert and an intermediate cert? Then place all 4 in the /CAs directory?

[@MINIO]

If the certs didn't come from a known CA, then yes, put the CA certs (and intermediaries) under the /CAs directory. You don't need to specify the env vars, MinIO should just find the files if they're where expected.

[@jjeverson2269]

for a multi node multi drive setup where I reference each node, MINIO_VOLUMES drives are separated by spaces correct

[@MINIO]

It's best if you use sequential mounts and use expansion notation.

[@not4644]

Does there exsist a template for a Ansible-playbook for this configuration. That would really be helpful for automating the process.

[@MINIO]

Hello, thanks for the question. We have an un-official Ansible role that can be used to build your own automated deployment. Please note that this is not officially supported, but should work to get you started. github.com/minio/ansible-minio - MJ

[@not4644]

@@MINIO Nice thank you! Will it ever be supported?

[@abperiasamy]

@@not4644 Yes, all of the software we publish is supported commercially. The software is open source. Support is part of the commercial subscription.

[@qradartrain]

Hello MinIO - These videos are just awesome It would be a great help, if any one can let me know how to retrieve tls cert to put in minio-user certs. Also, how to put this scenario in HA mode, I have 3 servers how can I put other two in HA and in that case what would be the URL? I know these are kind a easy one, but its restrict me to make a lab, please help here.

[@MINIO]

I believe what you're looking for is to deploy a server pool. Here's docs on how you can establish a pool: min.io/docs/minio/linux/operations/concepts.html#how-does-minio-link-multiple-server-pools-into-a-single-minio-cluster Along those same lines, here's how to deploy the TLS cert: min.io/docs/minio/linux/operations/install-deploy-manage/deploy-minio-multi-node-multi-drive.html#add-tls-ssl-certificates Hope this helps!

[@qradartrain]

@@MINIO Team, first of all, thank alot for the reply! I got help from given links and I went ahead in my installation, Now the scenario is, I have 3 server with 4 drive each. I have installed all of them as per the document, but I am unable to run the service, not able to understand how can I run it in cluster.

[@MINIO]

Well, I've got another link for you: min.io/docs/minio/linux/operations/install-deploy-manage/deploy-minio-multi-node-multi-drive.html There's a number of steps in there, including getting MinIO registered with systemd, that are required before the cluster can be stood up.