Install TeamForge, SCM and Git integration, and EventQ on separate servers

Three-server distributed setup with TeamForge (including Database and Datamart), SCM (Subversion and CVS) and Git, and EventQ services installed on RHEL/CentOS 7.2 servers.

Before you begin:

The following table shows the distribution of services on different servers.

App Server: server-01	SCM and Git Integration Server: server-03
TeamForge Application Server	SCM Integration Server (Subversion and CVS)
Database Server (Operational DB and Reports DB)	Git Integration Server
ETL Server
Search Server (Indexer)

EventQ Server: server-02
TeamForge EventQ Server (App, MongoDB and RabbitMQ)

Attention: As Black Duck Code Sight 2.1.3 has no support for RHEL/CentOS 7.2, CollabNet recommends you install Black Duck Code Sight on a separate RHEL/CentOS 6.8 server.

Note: For the ETL service to run as expected in a distributed TeamForge installation, all servers must have the same time zone.

Attention: Installing or upgrading TeamForge needs root privileges. You must log on as root or use a root shell to install or upgrade TeamForge.

Do this on the TeamForge Application Server (server-01)

Install Red Hat Enterprise Linux/CentOS 7.2 and log in as root.
- Don't customize your installation. Select only the default packages list.
- Red Hat Enterprise Linux/CentOS 6.8 is also supported. See TeamForge installation requirements.
- The host must be registered with the Red Hat Network if you are using Red Hat Enterprise Linux.
- See the Red Hat installation guide for help.
Check your basic networking setup. See Set up networking for your TeamForge server for details.
If the TeamForge server has SELinux enabled, run it in 'Permissive' mode temporarily while installing or upgrading TeamForge.
Important: If you have SELinux in "enforcing" mode, you must either disable SELinux or switch to "Permissive" mode (recommended) before running the /opt/collabnet/teamforge/bin/teamforge provision command. TeamForge create runtime fails otherwise.
1. Verify if SELinux is running in enforcing mode.
  - getenforce
2. If the output of the getenforce command is "Permissive", continue with the next step. If not, run the following command to bring it to 'Permissive' mode.
  - setenforce 0
See Set up SELinux to have TeamForge run in SELinux enforcing mode after completing the installation or upgrade.
Configure your TeamForge installation repository.
2. Install the repository package.
  - yum install -y /tmp/collabnet-teamforge-repo-16.10-1.noarch.rpm
3. Refresh your repository cache.
  - yum clean all
1. Contact the CollabNet Support to get the auxiliary installer package for TeamForge 16.10 disconnected installation and save it in /tmp.
  - Red Hat Enterprise Linux/CentOS 7.2 64 bit RPM package:
    Note: In addition to the above CentOS 7.2 64 bit RPM package, you must get the following CentOS 7.2 compatibility RPM, which is required for TeamForge 16.10 disconnected media installation on CentOS 7.2 profile: .
2. Unpack the disconnected installation package.
  - rpm -ivh <package-name>
3. Unpack the package if you are installing TeamForge 16.10 on CentOS 7.2.
  - rpm -ivh compat-ctf-dc-media-1.0-1.el7.centos.noarch.rpm
4. Note: If the Red Hat Enterprise Linux/CentOS installation DVD is mounted already, skip the following instructions. If not, mount the DVD.
  Mount the Red Hat Enterprise Linux/CentOS installation DVD. The DVD contains the necessary software and utilities required for installing TeamForge without internet access.
  In the following commands, replace "cdrom" with the identifier for your server's CD/DVD drive, if necessary.
  - cd /media/
  - mkdir cdrom
  - mount /dev/cdrom ./cdrom/
  If there are any spaces in the automount, unmount it first and mount it as a filepath, with no spaces.
5. Create a yum configuration file that points to the Red Hat Enterprise Linux/CentOS installation DVD.
  - vi /etc/yum.repos.d/cdrom.repo
  Here's a sample yum configuration file.
```
[RHEL-CDROM] 
name=RHEL CDRom 			
baseurl=file:///media/cdrom/Server/
gpgfile=file:///media/cdrom/RPM-GPG-KEY-redhat-release 
enabled=1
gpgcheck=0
```
6. Verify your yum configuration files.
  - yum list httpd
  - yum list apr
Install the following application packages.
1. TeamForge: To install the TeamForge application packages run the following command:
  - yum install teamforge
Set up your site's master configuration file.
- vi /opt/collabnet/teamforge/etc/site-options.conf
1. Identify the servers and services running on them.
```
HOST_localhost=app database datamart etl indexer
```
```
DOMAIN_localhost=my.app.domain.com
```
```
HOST_my.scmandgit.domain.com=subversion cvs gerrit
```
2. Add 'binary' to the HOST_localhost token if you are installing Nexus.
```
HOST_localhost=app database datamart etl indexer binary
```
3. Add 'reviewboard' to the HOST_localhost token if you are installing Review Board.
```
HOST_localhost=app database datamart etl indexer binary reviewboard
```
4. Configure the following token if you are installing Black Duck Code Sight.
```
HOST_my.codesight.domain.com=codesearch
```
5. Configure the database and datamart settings.
  Note: For more information about configuring variables, see site-options.conf
```
DATABASE_TYPE=postgresql
```
```
DATABASE_USERNAME=ctfuser
```
```
DATABASE_NAME=ctfdb
```
```
DATABASE_READ_ONLY_USER=ctfrouser
```
```
REPORTS_DATABASE_USERNAME=ctfrptuser
```
```
REPORTS_DATABASE_NAME=ctfrptdb
```
```
REPORTS_DATABASE_READ_ONLY_USER=ctfrptrouser
```
```
REPORTS_DATABASE_MAX_POOL_SIZE=40
```
  Note: The database name and username values are arbitrary alphanumeric strings.
7. Password obfuscation: The password obfuscation is enabled by default. As a result, all password-related tokens are encrypted in all the TeamForge configuration files.
  Restriction: The password-related tokens cannot contain the following characters in the site-options.conf file: $<>/\'"`
  - To disable password obfuscation, set OBFUSCATION_ENABLED=false.
  - To configure the obfuscation key, set OBFUSCATION_KEY=<Any AlphaNumeric value with length >= 8 bytes>. The default value of OBFUSCATION_KEY token is XSJt43wN.
8. Turn on the SSL for your site by editing the relevant variables in the site-options.conf file. To generate the SSL certificates, see Generate SSL certificates.
```
SSL=on
```
```
SSL_CERT_FILE
```
```
SSL_KEY_FILE
```
```
SSL_CHAIN_FILE
```
  Note: The SSL_CERT_FILE and SSL_KEY_FILE tokens need an absolute path. The SSL_CHAIN_FILE token is optional.
9. CAUTION:
  The Password Control Kit (PCK) disables, deletes or expires user accounts that don't meet the password security requirements starting from the date set for the PASSWORD_CONTROL_EFFECTIVE_DATE token. If a date is not set, the PCK disables, deletes or expires user accounts immediately. See for more information.
10. ADMIN_EMAIL=root@{__APPLICATION_HOST__}
17. Save the site-options.conf file.
Deploy services.
- /opt/collabnet/teamforge/bin/teamforge provision
The "provision" command prompts for response before it bootstraps or migrates data during TeamForge installation and upgrade respectively. Enter "Yes" or "No" to proceed. For more information, see The teamforge script.

Do this on the SCM and Git Integration Server (server-03)

Install Red Hat Enterprise Linux/CentOS 7.2 and log in as root.
- Don't customize your installation. Select only the default packages list.
- Red Hat Enterprise Linux/CentOS 6.8 is also supported. See TeamForge installation requirements.
- The host must be registered with the Red Hat Network if you are using Red Hat Enterprise Linux.
- See the Red Hat installation guide for help.
Check your basic networking setup. See Set up networking for your TeamForge server for details.
If the TeamForge server has SELinux enabled, disable it temporarily while installing or upgrading TeamForge. TeamForge create runtime fails otherwise.
1. Verify if SELinux is running in enforcing mode.
  - getenforce
2. If the output of the getenforce command is either "Disabled" or "Permissive", SELinux is already disabled.
3. If not disabled, run the following command to disable SELinux.
  - setenforce 0
Configure your TeamForge installation repository.
2. Install the repository package.
  - yum install -y /tmp/collabnet-teamforge-repo-16.10-1.noarch.rpm
3. Refresh your repository cache.
  - yum clean all
1. Contact the CollabNet Support to get the auxiliary installer package for TeamForge 16.10 disconnected installation and save it in /tmp.
  - Red Hat Enterprise Linux/CentOS 7.2 64 bit RPM package:
    Note: In addition to the above CentOS 7.2 64 bit RPM package, you must get the following CentOS 7.2 compatibility RPM, which is required for TeamForge 16.10 disconnected media installation on CentOS 7.2 profile: .
2. Unpack the disconnected installation package.
  - rpm -ivh <package-name>
3. Unpack the package if you are installing TeamForge 16.10 on CentOS 7.2.
  - rpm -ivh compat-ctf-dc-media-1.0-1.el7.centos.noarch.rpm
4. Note: If the Red Hat Enterprise Linux/CentOS installation DVD is mounted already, skip the following instructions. If not, mount the DVD.
  Mount the Red Hat Enterprise Linux/CentOS installation DVD. The DVD contains the necessary software and utilities required for installing TeamForge without internet access.
  In the following commands, replace "cdrom" with the identifier for your server's CD/DVD drive, if necessary.
  - cd /media/
  - mkdir cdrom
  - mount /dev/cdrom ./cdrom/
  If there are any spaces in the automount, unmount it first and mount it as a filepath, with no spaces.
5. Create a yum configuration file that points to the Red Hat Enterprise Linux/CentOS installation DVD.
  - vi /etc/yum.repos.d/cdrom.repo
  Here's a sample yum configuration file.
```
[RHEL-CDROM] 
name=RHEL CDRom 			
baseurl=file:///media/cdrom/Server/
gpgfile=file:///media/cdrom/RPM-GPG-KEY-redhat-release 
enabled=1
gpgcheck=0
```
6. Verify your yum configuration files.
  - yum list httpd
  - yum list apr
Install the TeamForge SCM and Git packages.
- yum install teamforge-scm teamforge-git
Copy the site-options.conf file from the TeamForge Application Server to the SCM and Git Integration Server's /opt/collabnet/teamforge/etc/ directory.

Modify the host token settings on the site-options.conf file.

HOST_server-03=subversion cvs gerrit

DOMAIN_server-03=my.scmandgit.domain.com

HOST_my.app.domain.com=app database datamart etl indexer

Deploy services.
- /opt/collabnet/teamforge/bin/teamforge provision
The "provision" command prompts for response before it bootstraps or migrates data during TeamForge installation and upgrade respectively. Enter "Yes" or "No" to proceed. For more information, see The teamforge script.

Do this on the TeamForge Application Server (server-01)

Important: If the token REQUIRE_USER_PASSWORD_CHANGE is set to true, login to TeamForge user interface, change the admin password and then run the post-install.py script.
Run the TeamForge post installation script. For more information, see post-install.py.
- /opt/collabnet/teamforge/runtime/scripts/post-install.py
Note: In case you face any GIT-related issues while running the post-install.py script, see Post install fails for Git. What should I do?.

Do this on the SCM and Git Integration Server (server-03)

Run the TeamForge post installation script. For more information, see post-install.py.
- /opt/collabnet/teamforge/runtime/scripts/post-install.py

Do this on the TeamForge Application Server (server-01)

Restart TeamForge.
- /opt/collabnet/teamforge/bin/teamforge restart

Do this on the EventQ server (server-02)

Install EventQ. See EventQ installation walk-through

Do this on the Application Server (server-01)

Apply some finishing touches and make sure everything is running smoothly.
1. Reboot the server and make sure all services come up automatically at startup.
2. Log on to the TeamForge web application using the default Admin credentials.
  - Username: "admin"
  - Password: "admin"
3. Create a sample project. See Create a TeamForge project.
4. Write a welcome message to your site's users. See Create a site-wide broadcast.

Review Board: Install Review Board, see: Set up Review Board.
SELinux: Run TeamForge in SELinux enabled mode, see Set up SELinux.
Caching with Memcached: Install Memcached