MySQL Database Service Webinar: Installing Drupal in oci with mds

Frédéric Descamps
Community Manager
MySQL
October 2020
MySQL Webinar Series
Installing Drupal on OCI with MySQL Database Service
1

Safe Harbor Statement
The following is intended to outline our general product direction. It is intended for
information purpose only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied up in
making purchasing decisions. The development, release, timing and pricing of any features
or functionality described for Oracle´s product may change and remains at the sole
discretion of Oracle Corporation.
Copyright @ 2020 Oracle and/or its affiliates.
3

Who am I ?
about.me/lefred
4

Frédéric Descamps
@lefred
MySQL Evangelist
Managing MySQL since 3.20
devops believer
living in Belgium
h ps://lefred.be
5

What do we need ?
Using OCI & MySQL Database Service
6

Requirements
an Internet Connection
7

Requirements
an OCI account
7

Requirements
an OCI account
you can get a free trial on h ps://www.oracle.com/mysql/
7

Requirements
an OCI account
you can get a free trial on h ps://www.oracle.com/mysql/
Nothing else !
7

OCI Dashboard
8

If you are a Sysadmin
9

Deploying Drupal on OCI using MDS
The architecture:
VCN
10.0.0.0/16
MySQL Database Service Instance
Drupal
Private Subnet
10.0.1.0/24
Public Subnet
10.0.0.0/24
10

What do sysadmins need to deploy ?
11

What do sysadmins need to deploy ? a VCN
a private subnet
a public subnet
some security lists
an Internet gateway
a MDS instance
a schema
a user with credentials
a compute instance (with the ssh keys)
manage SELinux and rewall
install required packages
11

If you are a Developer
12

What do developers need to deploy ?
13

What do developers need to deploy ?
a stack
13

OCI Resource Manager - stack
14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

Back to if you are a Sysadmin
35

Details
Let's see in details what is needed and how to create those resources manually.
36

VCN Creation
37

VCN
38

VCN (2)
39

VCN (3)
40

VCN (4)
Now we have:
41

MDS Instance Creation
42

MDS Instance Creation
43

MDS Instance Creation (2)
44

And we need to ll the next 3 screens from
the MySQL Instance creation wizard.
44

45

46

47

MDS Instance Details
48

Drupal Compute Instance Creation
49

Drupal Instance Creation
Our Drupal server will be installed on a Compute Instance in the public subnet:
50

Drupal Instance Creation (2)
51

52

don't forget to add
your ssh key !
ssh
53

54

Drupal Instance: SSH Connection
We can now connect to our compute instance:
55

Intsalling Drupal
56

Installing Drupal: PHP 7.4
We start with the installation of PHP 7.4 from Remi's repo. PHP 7.4 fully supports all
authentication plugins of MySQL 8.0:
sudo yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install https://rpms.remirepo.net/enterprise/remi-release-7.rpm
sudo yum-con g-manager --enable remi-php74
sudo yum install php php-cli php-mysqlnd php-zip php-gd
php-mcrypt php-mbstring php-xml php-json php-opcache
57

Installing Drupal: PHP 7.4
We start with the installation of PHP 7.4 from Remi's repo. PHP 7.4 fully supports all
authentication plugins of MySQL 8.0:
sudo yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
sudo yum -y install https://rpms.remirepo.net/enterprise/remi-release-7.rpm
sudo yum-con g-manager --enable remi-php74
sudo yum install php php-cli php-mysqlnd php-zip php-gd
php-mcrypt php-mbstring php-xml php-json php-opcache
Let's verify if auth_plugin_caching_sha2_password is supported:
57

Installing Drupal: download & install
Now we will download Drupal and install it on the webroot:
[opc@drupal ~]$ cd /var/www/
[opc@drupal www]$ sudo wget https://wordpress.org/latest.tar.gz
58

Unpack, rename the directory and change ownership:
[opc@drupal www]$ sudo wget https://www.drupal.org/download-latest/tar.gz
[opc@drupal www]$ sudo tar zxvf tar.gz
[opc@drupal www]$ sudo rm -rf html tar.gz
[opc@drupal www]$ sudo mv drupal-9.0.5 html
[opc@drupal www]$ sudo chown apache. -R html
58

Unpack, rename the directory and change ownership:
[opc@drupal www]$ sudo wget https://www.drupal.org/download-latest/tar.gz
[opc@drupal www]$ sudo tar zxvf tar.gz
[opc@drupal www]$ sudo rm -rf html tar.gz
[opc@drupal www]$ sudo mv drupal-9.0.5 html
[opc@drupal www]$ sudo chown apache. -R html
And start Apache:
[opc@drupal www]$ sudo systemctl start httpd
[opc@drupal www]$ sudo systemctl enable httpd
58

Security: Firewalls & SELinux
59

Security
Security is a major concern for Oracle, therefore in OCI you need to deal a bit more with
security components than in other cloud providers.
In the Drupal compute instance we will need to:
allow connections to port 80 (and 443 if you use h ps)
60

Security
allow Apache to connect to a remote database (SELinux)
60

Security
allow Apache to write in Drupal folder.
60

Security
And in OCI's dashboard we will need to:
allow connections from Internet to Public Subnet for h p (and h ps)
60

Security
And in OCI's dashboard we will need to:
allow connections from Internet to Public Subnet for h p (and h ps)
allow connections from Public Subnet to Private Subnet for MySQL
60

[opc@drupal ~]$ sudo rewall-cmd --zone=public --permanent
--add-port=80/tcp
success
[opc@drupal ~]$ sudo rewall-cmd --reload
success
Security: Compute Instance
Firewall
61

[opc@drupal ~]$ sudo rewall-cmd --zone=public --permanent
--add-port=80/tcp
success
[opc@drupal ~]$ sudo rewall-cmd --reload
success
[opc@drupal ~]$ sudo chcon
--type httpd_sys_rw_content_t /var/www/html/sites/*
[opc@drupal ~]$ sudo setsebool -P httpd_can_network_connect_db 1
Security: Compute Instance
Firewall

SELinux
61

Security: OCI
62

Security: OCI (2)
63

Security: OCI (3) - adding rules
64

Security: OCI (4) - h p(s) access
65

Security: OCI (5) - MySQL classic and X protocol
66

Security: OCI (6) - adding security list to MDS
67

Security: OCI (7) - adding security list to MDS
68

Drupal database & user in MySQL
69

Installing MySQL Shell
To create a database and a dedicated user for Drupal, we need to install a MySQL client on
the compute instance. We will use MySQL Shell:
[opc@drupal ~]$ sudo rpm -ivh
https://dev.mysql.com/get/Downloads/MySQL-Shell/mysql-shell-8.0.21-1.el7.x86_64.rpm
70

[opc@drupal ~]$ mysqlsh --sql admin@10.0.1.3:3306
Database & user creation
71

[opc@drupal ~]$ mysqlsh --sql admin@10.0.1.3:3306
Database & user creation
mysql-js> CREATE DATABASE drupal;
mysql-js> CREATE USER drupal_user IDENTIFIED BY 'MyComplic4tedPwd!';
mysql-js> GRANT ALL PRIVILEGES ON drupal.* TO drupal_user;
71

Apache's clean URLs
Drupal uses mod_rewrite for clean URLs and sets it up using a .htaccess le.
We need to modify Apache's con guration to allow the use of it.
In /etc/httpd/conf/httpd.conf, in section <Directory "/var/www/html"> please change:
AllowOverride None
by
AllowOverride All
And restart Apache:
[opc@drupal www]$ sudo systemctl restart httpd
72

Completing the installation
73

Finishing Drupal Installation
74

Finishing Drupal Installation (2)
75

76

77

78

79

80

81

Drupal Using MySQL Database Service
82

Drupal is now installed, as DBA, you can relax and rely on
MySQL Database Service!
Time to Relax
83

MySQL Database Service Webinar: Installing Drupal in oci with mds

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to MySQL Database Service Webinar: Installing Drupal in oci with mds

Similar to MySQL Database Service Webinar: Installing Drupal in oci with mds (20)

More from Frederic Descamps

More from Frederic Descamps (8)

Recently uploaded

Recently uploaded (20)

MySQL Database Service Webinar: Installing Drupal in oci with mds