单节点

服务器IP	主机角色
192.168.10.4	MongoDB Rtandalone

开始部署

1. 下载 mongodb 安装包并解压到安装目录

   RedHat / CentOS 7.0 x64

   wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel70-4.4.30.tgz
   tar -zxvf mongodb-linux-x86_64-rhel70-4.4.30.tgz
   mv mongodb-linux-x86_64-rhel70-4.4.30 /usr/local/mongodb

   RedHat / CentOS 8.0 x64

   wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-rhel80-4.4.30.tgz
   tar -zxvf mongodb-linux-x86_64-rhel80-4.4.30.tgz
   mv mongodb-linux-x86_64-rhel80-4.4.30 /usr/local/mongodb

   Debian 10.0+ x64

   1. 如果操作系统高于 Debian 10，则先安装 libssl1.1 依赖

   wget https://pdpublic.mingdao.com/private-deployment/offline/common/libssl1.1_1.1.1w-0+deb11u1_amd64.deb
   dpkg -i libssl1.1_1.1.1w-0+deb11u1_amd64.deb

   2. 下载 mongodb 安装包并解压到安装目录

   wget https://fastdl.mongodb.org/linux/mongodb-linux-x86_64-debian10-4.4.30.tgz
   tar -zxvf mongodb-linux-x86_64-debian10-4.4.30.tgz
   mv mongodb-linux-x86_64-debian10-4.4.30 /usr/local/mongodb

   其他

   • 官方下载：如需获取其他操作系统的安装包，请访问 MongoDB 社区版官方下载中心

   • 国产系统兼容性：针对 EulerOS（欧拉）、麒麟、UOS 等国产操作系统，通常可以兼容对应版本的 CentOS 7/8 安装包。

   • 示例（麒麟 V10）：若使用麒麟 V10 ARM 版本，可下载使用 CentOS 8 ARM 64 架构的安装包：

     • https://fastdl.mongodb.org/linux/mongodb-linux-aarch64-rhel82-4.4.30.tgz

2. 创建 mongodb 用户

   useradd -M -s /sbin/nologin mongodb

3. 创建数据、日志目录并授予权限

   mkdir -p /data/mongodb/ /data/logs/mongodb
   chown -R mongodb:mongodb /usr/local/mongodb/ /data/mongodb/ /data/logs/mongodb

4. 配置 systemd 管理文件

   cat > /etc/systemd/system/mongodb.service <<'EOF'
   [Unit]
   Description=MongoDB
   [Service]
   User=mongodb
   Group=mongodb
   LimitNOFILE=1000000
   LimitNPROC=1000000
   ExecStart=/usr/local/mongodb/bin/mongod --logpath /data/logs/mongodb/mongodb.log --dbpath /data/mongodb --auth --port 27017 --bind_ip 0.0.0.0
   ExecStop=/usr/bin/kill $MAINPID
   Restart=on-failure
   [Install]
   WantedBy=multi-user.target
   EOF

5. 加入开机自启动

   # 安装后还没创建用户，所以先不用 systemctl start mongodb 启动服务
   systemctl daemon-reload
   systemctl enable mongodb

创建数据库用户

1. 临时启动一个未开启连接认证的 mongodb 服务

   su -c '/usr/local/mongodb/bin/mongod --fork --logpath /data/logs/mongodb/mongodb.log --dbpath /data/mongodb --noauth  --port 27017' -s /bin/bash mongodb

2. 创建用户

   /usr/local/mongodb/bin/mongo <<<'use admin
   db.createUser({user:"root",pwd:"12345678",roles:[{role:"root",db:"admin"}]})
   use MDLicense
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDLicense"}]})
   use ClientLicense
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"ClientLicense"}]})
   use commonbase
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"commonbase"}]})
   use MDAlert
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDAlert"}]})
   use mdapproles
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdapproles"}]})
   use mdapprove
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdapprove"}]})
   use mdapps
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdapps"}]})
   use mdattachment
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdattachment"}]})
   use mdcalendar
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdcalendar"}]})
   use mdcategory
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdcategory"}]})
   use MDChatTop
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDChatTop"}]})
   use mdcheck
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdcheck"}]})
   use mddossier
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mddossier"}]})
   use mdemail
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdemail"}]})
   use mdform
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdform"}]})
   use MDGroup
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDGroup"}]})
   use mdgroups
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdgroups"}]})
   use MDHistory
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDHistory"}]})
   use mdIdentification
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdIdentification"}]})
   use mdinbox
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdinbox"}]})
   use mdkc
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdkc"}]})
   use mdmap
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdmap"}]})
   use mdmobileaddress
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdmobileaddress"}]})
   use MDNotification
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDNotification"}]})
   use mdpost
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdpost"}]})
   use mdreportdata
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdreportdata"}]})
   use mdroles
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdroles"}]})
   use mdsearch
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdsearch"}]})
   use mdservicedata
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdservicedata"}]})
   use mdsms
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdsms"}]})
   use MDSso
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDSso"}]})
   use mdtag
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdtag"}]})
   use mdtransfer
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdtransfer"}]})
   use MDUser
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"MDUser"}]})
   use mdworkflow
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdworkflow"}]})
   use mdworksheet
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdworksheet"}]})
   use mdworkweixin
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdworkweixin"}]})
   use mdwsrows
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdwsrows"}]})
   use pushlog
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"pushlog"}]})
   use taskcenter
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"taskcenter"}]})
   use mdintegration
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdintegration"}]})
   use mdactionlog
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdactionlog"}]})
   use mdworksheetlog
   db.createUser({user:"hap",pwd:"123456",roles:[{role:"readWrite",db:"mdworksheetlog"}]})
   use mdworksheetsearch
   db.createUser({user: "hap",pwd: "123456",roles: [{role: "readWrite",db: "mdworksheetsearch"}]})
   use mddatapipeline
   db.createUser({user: "hap",pwd: "123456",roles: [{role: "readWrite",db: "mddatapipeline"}]})
   use mdwfplugin
   db.createUser({user: "hap",pwd: "123456",roles: [{role: "readWrite",db: "mdwfplugin"}]})
   use mdpayment
   db.createUser({user: "hap",pwd: "123456",roles: [{role: "readWrite",db: "mdpayment"}]})
   use mdwfai
   db.createUser({user: "hap",pwd: "123456",roles: [{role: "readWrite",db: "mdwfai"}]})'

   • 命令中指定的 mongodb admin 库权限 root 用户密码为 12345678 ，实际部署必须修改为强口令
   • 命令中指定的 mongodb 业务库权限 hap 用户密码为 123456 ，实际部署必须修改为强口令
   • 若密码中包含特殊字符，仅允许 - 或 _，禁止使用 @ ! # & 等字符，以避免兼容性问题

3. 关闭临时启动的 MongoDB

   kill $(pgrep -f 'mongod')

启动 MongoDB

systemctl start mongodb

验证服务状态

1. 检查 MongoDB 状态

   systemctl status mongodb

2. 测试管理员连接

   使用以下命令测试管理员账户连接

   /usr/local/mongodb/bin/mongo -u root -p 12345678 --authenticationDatabase admin

3. 测试业务库连接

   使用以下命令测试单个业务库用户连接

   /usr/local/mongodb/bin/mongo -u hap -p 123456 --authenticationDatabase mdwsrows