mongo 3.2 replica set 配置

一、環(huán)境信息

CentOS release 6.7 (Final)

mongo version: 3.2.6

192.168.1.173    primary

192.168.1.174    secondary

192.168.1.172    secondary or arbiter

二、安裝mongo

1、yum源配置（使用哪個(gè)版本enable=1）

# cat /etc/yum.repos.d/mongodb-org-3.2.repo

[mongodb-org-3.2]

name=MongoDB Repository

baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/3.2/x86_64/

gpgcheck=1

enabled=1

gpgkey=https://www.mongodb.org/static/pgp/server-3.2.asc

[mongodb-org-2.6]

name=MongoDB 2.6 Repository

baseurl=http://downloads-distro.mongodb.org/repo/redhat/os/x86_64/

gpgcheck=0

enabled=0

2、yum install -y mongodb-org

三、replicat set 配置

1、修改配置文件(三臺(tái)服務(wù)器除了ip不一樣)：

cat /etc/mongod.conf 

# mongod.conf

# for documentation of all options, see:

#   http://docs.mongodb.org/manual/reference/configuration-options/

# where to write logging data.

systemLog:

  destination: file

  logAppend: true

  path: /var/log/mongodb/mongod.log

# Where and how to store data.

storage:

  dbPath: /data/mongo

 # dbPath: /var/lib/mongo

  journal:

    enabled: true

#  engine:

#  mmapv1:

#  wiredTiger:

# how the process runs

processManagement:

  fork: true  # fork and run in background

  pidFilePath: /var/run/mongodb/mongod.pid  # location of pidfile

# network interfaces

net:

  port: 27017

  bindIp: 192.168.1.173  # Listen to local interface only, comment to listen on all interfaces.

#security:

security:    #副本集配置成功之后才能打開(kāi)安全認(rèn)證

  authorization: enabled                #開(kāi)啟認(rèn)證

  keyFile: /data/mongo/mongodb-keyfile       #副本集使用keyFile進(jìn)行相互認(rèn)證

#operationProfiling:

#replication:

replication:

  oplogSizeMB: 2000          #oplog的大小M

  replSetName: rongyi         #副本集的名稱(chēng)

#sharding:

## Enterprise-Only Options

#auditLog:

#snmp:

2、配置replicat set 過(guò)程

#啟動(dòng)mongod服務(wù)

#/usr/bin/mongod -f /etc/mongod.conf

啟動(dòng)成功之后因?yàn)檫€未開(kāi)啟auth認(rèn)證，可以直接命令行登錄

#mongo 192.168.1.173

use admin

admin> config = { _id:"rongyi",members:[

... {_id:172,host:"192.168.1.172:27017",arbiterOnly:true},

... {_id:173,host:"192.168.1.173:27017"},

... {_id:174,host:"192.168.1.174:27017"}]

... }

{

    "_id" : "rongyi",

    "members" : [

        {

            "_id" : 172,

            "host" : "192.168.1.172:27017",

            "arbiterOnly" : true

        },

        {

            "_id" : 173,

            "host" : "192.168.1.173:27017"

        },

        {

            "_id" : 174,

            "host" : "192.168.1.174:27017"

        }

    ]

}

admin> rs.initiate(config)

{ "ok" : 1 }

或者使用

config = { _id:"rongyi",members:[{_id:172,host:"192.168.1.172:27017"},{_id:173,host:"192.168.1.173:27017"},{_id:174,host:"192.168.1.174:27017"}]}

注：前者是一個(gè)備份節(jié)點(diǎn)，后者是兩個(gè)備份節(jié)點(diǎn)，mongo選舉的過(guò)程必須符合大多數(shù)，如果是偶數(shù)的節(jié)點(diǎn)，可以使用arbiter（仲裁節(jié)點(diǎn)），此節(jié)點(diǎn)只是為了參與選舉

使用rs.status()查看replicat set的狀態(tài)

3、創(chuàng)建管理員賬戶(hù)(這個(gè)賬戶(hù)要使用root role 否則會(huì)報(bào)錯(cuò))：

admin> db.createUser({user:"admin",pwd:"********",roles:[{ role:"root", db:"admin" }]})

Successfully added user: {

    "user" : "admin",

    "roles" : [

        {

            "role" : "root",

            "db" : "admin"

        }

    ]

}

4、配置keyfile認(rèn)證

在192.168.1.173上執(zhí)行

    openssl rand -base64 741 > /data/mongo/mongodb-keyfile

    chmod 600 /data/mongo/mongodb-keyfile

    scp mongodb-keyfile 192.168.1.174:/data/mongo/

    scp mongodb-keyfile 192.168.1.172:/data/mongo/

在配置文件中開(kāi)啟認(rèn)證：

security:

  authorization: enabled

  keyFile: /data/mongo/mongodb-keyfile

5、重啟mongod服務(wù)

/etc/init.d/mongod stop && /usr/bin/mongod -f /etc/mongod.conf

四、登錄驗(yàn)證

mongo 192.168.1.173:27017/admin -uadmin -p*******

admin> rs.status()

{

"set" : "rongyi",

"date" : ISODate("2016-06-24T08:31:28.549Z"),

"myState" : 1,

"term" : NumberLong(7),

"heartbeatIntervalMillis" : NumberLong(2000),

"members" : [

{

"_id" : 172,

"name" : "192.168.1.172:27017",

"health" : 1,

"state" : 7,

"stateStr" : "ARBITER",    #使用了仲裁

"uptime" : 19572,

"lastHeartbeat" : ISODate("2016-06-24T08:31:26.604Z"),

"lastHeartbeatRecv" : ISODate("2016-06-24T08:31:24.145Z"),

"pingMs" : NumberLong(0),

"configVersion" : 3

},

{

"_id" : 173,

"name" : "192.168.1.173:27017",

"health" : 1,

"state" : 1,

"stateStr" : "PRIMARY",

"uptime" : 19573,

"optime" : {

"ts" : Timestamp(1466740497, 1),

"t" : NumberLong(7)

},

"optimeDate" : ISODate("2016-06-24T03:54:57Z"),

"electionTime" : Timestamp(1466737527, 1),

"electionDate" : ISODate("2016-06-24T03:05:27Z"),

"configVersion" : 3,

"self" : true

},

{

"_id" : 174,

"name" : "192.168.1.174:27017",

"health" : 1,

"state" : 2,

"stateStr" : "SECONDARY",

"uptime" : 19567,

"optime" : {

"ts" : Timestamp(1466740497, 1),

"t" : NumberLong(7)

},

"optimeDate" : ISODate("2016-06-24T03:54:57Z"),

"lastHeartbeat" : ISODate("2016-06-24T08:31:26.604Z"),

"lastHeartbeatRecv" : ISODate("2016-06-24T08:31:26.604Z"),

"pingMs" : NumberLong(0),

"syncingTo" : "192.168.1.173:27017",

"configVersion" : 3

}

],

"ok" : 1

}