#!/bin/bash # # *Note:* these installation instructions are also available in executable # form for use with vagrant under `vagrant/Install-on-Centos-8.sh`. # # Installing the Required Software # ================================ # # These instructions expect that you have a freshly installed CentOS version 8. # Make sure all packages are up-to-date by running: # sudo dnf update -y # The standard CentOS repositories don't contain all the required packages, # you need to enable the EPEL repository as well. For example for SELinux # related redhat-hardened-cc1 package. To enable it on CentOS run: sudo dnf install -y epel-release redhat-rpm-config # EPEL contains Postgres 9.6 and 10, but not PostGIS. Postgres 9.4+/10/11/12 # and PostGIS 2.4/2.5/3.0 are availble from postgresql.org sudo dnf -qy module disable postgresql sudo dnf install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-8-x86_64/pgdg-redhat-repo-latest.noarch.rpm # Now you can install all packages needed for Nominatim: #DOCS: :::sh sudo dnf --enablerepo=PowerTools install -y postgresql10-server \ postgresql10-contrib postgresql10-devel postgis25_10 \ wget git cmake make gcc gcc-c++ libtool policycoreutils-python-utils \ llvm-toolset ccache clang-tools-extra \ php-pgsql php php-intl php-json libpq-devel \ proj52-epsg bzip2-devel proj-devel boost-devel \ expat-devel zlib-devel # make sure pg_config gets found echo 'PATH=/usr/pgsql-10/bin:$PATH' >> ~/.bash_profile source ~/.bash_profile # If you want to run the test suite, you need to install the following # additional packages: #DOCS: :::sh sudo dnf install -y python36 python3-pip python3-setuptools python36-devel \ php-dom php-mbstring pip3 install --user behave nose pytidylib psycopg2 composer global require "squizlabs/php_codesniffer=*" sudo ln -s ~/.config/composer/vendor/bin/phpcs /usr/bin/ composer global require "phpunit/phpunit=^7" sudo ln -s ~/.config/composer/vendor/bin/phpunit /usr/bin/ # # System Configuration # ==================== # # The following steps are meant to configure a fresh CentOS installation # for use with Nominatim. You may skip some of the steps if you have your # OS already configured. # # Creating Dedicated User Accounts # -------------------------------- # # Nominatim will run as a global service on your machine. It is therefore # best to install it under its own separate user account. In the following # we assume this user is called nominatim and the installation will be in # /srv/nominatim. To create the user and directory run: # sudo mkdir -p /srv/nominatim #DOCS: sudo useradd -d /srv/nominatim -s /bin/bash -m nominatim sudo chown vagrant /srv/nominatim #DOCS: # # You may find a more suitable location if you wish. # # To be able to copy and paste instructions from this manual, export # user name and home directory now like this: # export USERNAME=vagrant #DOCS: export USERNAME=nominatim export USERHOME=/srv/nominatim # # **Never, ever run the installation as a root user.** You have been warned. # # Make sure that system servers can read from the home directory: chmod a+x $USERHOME # Setting up PostgreSQL # --------------------- # # CentOS does not automatically create a database cluster. Therefore, start # with initializing the database, then enable the server to start at boot: sudo /usr/pgsql-10/bin/postgresql-10-setup initdb sudo systemctl enable postgresql-10 # # Next tune the postgresql configuration, which is located in # `/var/lib/pgsql/data/postgresql.conf`. See section *Postgres Tuning* in # [the installation page](../admin/Installation.md#postgresql-tuning) # for the parameters to change. # # Now start the postgresql service after updating this config file. sudo systemctl restart postgresql-10 # # Finally, we need to add two postgres users: one for the user that does # the import and another for the webserver which should access the database # only for reading: # sudo -u postgres createuser -s $USERNAME sudo -u postgres createuser apache # # Setting up the Apache Webserver # ------------------------------- # # You need to create an alias to the website directory in your apache # configuration. Add a separate nominatim configuration to your webserver: #DOCS:```sh sudo tee /etc/httpd/conf.d/nominatim.conf << EOFAPACHECONF Options FollowSymLinks MultiViews AddType text/html .php DirectoryIndex search.php Require all granted Alias /nominatim $USERHOME/build/website EOFAPACHECONF #DOCS:``` sudo sed -i 's:#.*::' /etc/httpd/conf.d/nominatim.conf #DOCS: # # Then reload apache # sudo systemctl enable httpd sudo systemctl restart httpd # # Installing Nominatim # ==================== # # Building and Configuration # -------------------------- # # Get the source code from Github and change into the source directory # if [ "x$1" == "xyes" ]; then #DOCS: :::sh cd $USERHOME git clone --recursive git://github.com/openstreetmap/Nominatim.git cd Nominatim else #DOCS: cd $USERHOME/Nominatim #DOCS: fi #DOCS: # When installing the latest source from github, you also need to # download the country grid: if [ ! -f data/country_osm_grid.sql.gz ]; then #DOCS: :::sh wget --no-verbose -O data/country_osm_grid.sql.gz https://www.nominatim.org/data/country_grid.sql.gz fi #DOCS: # The code must be built in a separate directory. Create this directory, # then configure and build Nominatim in there: #DOCS: :::sh cd $USERHOME mkdir build cd build cmake $USERHOME/Nominatim make # # Adding SELinux Security Settings # -------------------------------- # # It is a good idea to leave SELinux enabled and enforcing, particularly # with a web server accessible from the Internet. At a minimum the # following SELinux labeling should be done for Nominatim: sudo semanage fcontext -a -t httpd_sys_content_t "$USERHOME/Nominatim/(website|lib|settings)(/.*)?" sudo semanage fcontext -a -t httpd_sys_content_t "$USERHOME/build/(website|lib|settings)(/.*)?" sudo semanage fcontext -a -t lib_t "$USERHOME/build/module/nominatim.so" sudo restorecon -R -v $USERHOME/Nominatim sudo restorecon -R -v $USERHOME/build # You need to create a minimal configuration file that tells nominatim # the name of your webserver user and the URL of the website: #DOCS:```sh tee settings/local.php << EOF