Gå till innehållet

World — Installation

Ensure all prerequisites are completed before proceeding.

1. Extract the package

sudo mkdir -p /opt/synkzone
unzip -d /opt/synkzone world-3.11.zip
sudo chown -R synkzone: /opt/synkzone
su - synkzone && cd /opt/synkzone/world

Info

The installation package is provided by Synkzone. Contact your Synkzone sales representative to obtain access.

2. Copy configuration templates

cp --update=none world/config_templates/* world/config/

3. Configure

  1. Generate a UUID:

    uuidgen >> world/config/instance.properties

  2. Set the World FQDN — the FQDN you want on the certificates, not the machine's hostname.
    If the server's hostname is se-sto-002 but you want it known as world.example.com, set World=world.example.com — see server.config.

    ApplicationInstance=ex4mpl30-5c2e-4b8a-9f1d-3a7e6b4c2d8f

    World=world.example.com

  3. Enable optional plugins — enabling Email is recommended.

4. Copy compose file

cp compose-3.11.yaml compose.yaml

5. Validate configuration

bash scripts/validate-configuration.sh

6. Start services

docker compose pull
docker compose up -d

7. Certificates

Synkzone needs to sign the initially created certificate requests, as well as the requests produced when the certificate should be extended. See World Certificate Bootstrap for the corresponding diagram.

  1. Start the World Server at least once to let it generate certificates and corresponding signing requests.
  2. Go to the <appdata>/certificates folder on the World Server and make copies of the world.csr, world_CA.csr, and world.ksr signing request files. It is IMPORTANT that these files are copied and not removed from the server.
  3. Create a folder (named after the current date) in the zone in extern.synkzone.com.
  4. Add the signing request files to the folder.
  5. Request that Synkzone signs the certificates.
  6. When world.pem, world_CA.pem, and world.kec have been added to the zone, copy those files to the World Server <appdata>/certificates folder where the corresponding signing requests are still stored.
  7. Start the World Server. This will cause the server to import the signed certificates, and then shut down again.
  8. Restart the World Server. After this restart the imported certificates will be ready for use.

8. Verify installation

bash scripts/verify-installation.sh