Installing ownCloud 9 on CentOS 7

Alex Sage

Couple of things:

Your missing:
```
mkdir /data
```
I hate disabling SELinux - Let's fix it not turn it off
You should have database setup instructions

Alex Sage

You forget to turn on the database

systemctl start mariadb
systemctl enable mariadb

JaredBusch

@aaronstuder said:

You forget to turn on the database
systemctl start mariadb
systemctl enable mariadb

No, he did not. he is not using MariaDB in this example.

JaredBusch

@aaronstuder said:

Couple of things:
Your missing:
mkdir /data
I hate disabling SELinux - Let's fix it not turn it off

You should have database setup instructions

You are assuming things here that are not true.

scottalanmiller

@aaronstuder said:

I hate disabling SELinux - Let's fix it not turn it off

It's just turned off for the install, it's not off in general.

Alex Sage

@JaredBusch said:

No, he did not. he is not using MariaDB in this example.

Then why install it?

scottalanmiller

@aaronstuder said:

You forget to turn on the database
systemctl start mariadb
systemctl enable mariadb

You'd need to do that for the database creation steps that I mentinoed in the description

scottalanmiller

@aaronstuder said:

@JaredBusch said:

No, he did not. he is not using MariaDB in this example.

Then why install it?

Just to have it at the ready.

Alex Sage

@scottalanmiller OK

scottalanmiller

We run with an external MariaDB system. So the third option

Alex Sage

What if I want my data encrypted? Is there a option for this?

scottalanmiller

@aaronstuder said:

What if I want my data encrypted? Is there a option for this?

Not without ownCloud itself, that would not be the right place as they only handle the application layer. Encryption would be handled by the storage layer which is LVM and XFS here, in Linux. So a good example and, I think, the most likely candidate for this would be using LUKS to encrypt the storage layer. LUKS is very enterprise and included in Linux, so nothing third party. If you use the separate /data block device like I would recommend for production, you can encrypt that without encrypting the / filesystem making things vastly easier.

Alex Sage

@scottalanmiller Great!

So I did create /data now how do I encrypt it?

scottalanmiller

@aaronstuder said:

@scottalanmiller Great!

So I did create /data now how do I encrypt it?

I'm going to need to write a whole article on this. It's been a while since I did this. But I did build the encryption infrastructure for a major financial firm, so I'm used to working with it.

dafyre

@scottalanmiller said:

@aaronstuder said:

@scottalanmiller Great!

So I did create /data now how do I encrypt it?

I'm going to need to write a whole article on this. It's been a while since I did this. But I did build the encryption infrastructure for a major financial firm, so I'm used to working with it.

What about using a library or something like encfs (https://github.com/vgough/encfs) ?

I am using it on my Plex server that is connected to my Amazon Cloud Drive. It works well.

scottalanmiller

@dafyre said:

@scottalanmiller said:

@aaronstuder said:

@scottalanmiller Great!

So I did create /data now how do I encrypt it?

I'm going to need to write a whole article on this. It's been a while since I did this. But I did build the encryption infrastructure for a major financial firm, so I'm used to working with it.

What about using a library or something like encfs (https://github.com/vgough/encfs) ?

I am using it on my Plex server that is connected to my Amazon Cloud Drive. It works well.

You don't want FUSE if you can avoid it. Why not use the built in system?

dafyre

@scottalanmiller said:

@dafyre said:

@scottalanmiller said:

@aaronstuder said:

@scottalanmiller Great!

So I did create /data now how do I encrypt it?

I'm going to need to write a whole article on this. It's been a while since I did this. But I did build the encryption infrastructure for a major financial firm, so I'm used to working with it.

What about using a library or something like encfs (https://github.com/vgough/encfs) ?

I am using it on my Plex server that is connected to my Amazon Cloud Drive. It works well.

You don't want FUSE if you can avoid it. Why not use the built in system?

I was testing out a guide using EncFS to encrypt data stored on Amazon Cloud. It works, so I haven't bothered with changing it, lol.

What are the built-in options? I'm not aware of disk / partition encryption options on Linux these days.

scottalanmiller

dm-crypt is the system in the kernel. Been there since 2.6.

scottalanmiller

Just did a new internal install with this as well. Using CentOS 7, adding the REMI Repos and moved to PHP7 and added the memory cache. Also using an external MariaDB database, also on CentOS 7.

JaredBusch

@scottalanmiller said:

Just did a new internal install with this as well. Using CentOS 7, adding the REMI Repos and moved to PHP7 and added the memory cache. Also using an external MariaDB database, also on CentOS 7.

PHP 7? that is not in the normal Remi repos. That was still beta in the repo i thought.