Scenario: Single Node Cloud Installation¤
This page describes a docker-compose based orchestration running on a server instance accessible publicly via browser (SSL enabled via letsencrypt).
- ssh access to a server instance (Debian 11) with a public IP address
- A resolvable domain name to this server
- Terminal with ssh client installed locally
- An eccenca partner account for the docker registry as well as the release artifact area
In this step, you install necessary software on the server and execute the following commands as root:
$ apt-get update # install ntp and set timezone $ apt-get install -y ntp $ timedatectl set-timezone Europe/Berlin # install needed packages $ apt-get install -y apt-transport-https ca-certificates curl gnupg2 software-properties-common gnupg lsb-release gettext zip unzip git make vim # install docker $ curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg $ echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null $ apt-get update $ apt-get install docker-ce docker-ce-cli containerd.io # (optional) add a user to docker group # usermod -a -G docker admin # install docker-compose $ curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose $ chmod +x /usr/local/bin/docker-compose
For username and password in curl command use the credentials to access eccenca Artifactory and docker registry.
Connect to the server and navigate to the directory with the Corporate Memory docker orchestration:
# login to the eccenca docker registry $ docker login docker-registry.eccenca.com # download the Corporate Memory orchestration distribution $ cd /opt $ curl -u username https://releases.eccenca.com/docker-orchestration/latest.zip > cmem-orchestration.zip # unzip the orchestration and move the unzipped directory to /opt/cmem-orchestration $ unzip cmem-orchestration.zip $ rm cmem-orchestration.zip $ mv cmem-orchestration-v* /opt/cmem-orchestration # configure git in order to commit changes to the orchestration $ cd /opt/cmem-orchestration $ git config --global user.email "firstname.lastname@example.org" && git init && git add . && git commit -m "stub"
The Corporate Memory docker orchestration is configured with environment files.
You will need to create an environment file at
For now, you can use the provided file
config.ssl-letsencrypt.env as a template.
You need to change the lines with DEPLOYHOST and LETSENCRYPT_MAIL to you actual values.
In addition that, you need to remove the default config and link it to your prod.env
To see all available configuration options refer to Docker Orchestration configuration page.
Next, request SSL certificates from letsencrypt service:
CMEM_BASE_URI according to your
Finally deploy the Corporate Memory instance:
Optional: you can install cmem as a systemd service for this use these commands as root oder sudo:
Validation and Finalisation¤
Open your browser and navigate to the host you have created in DNS server, e.g.
Click CONTINUE WITH LOGIN and use one of these default accounts:
||Is member of the global admin group (can see and do anything)|
||Is member of the local user group (can not change access conditions or see internal graphs)|
After successful login, you will see Corporate Memory interface. You can now proceed to the Getting Started section.
Do not forget to change the passwords of your deployment, especially if it is available from the public internet. For this, take a look at Change Passwords and Keys.