Install NextCloud on Ubuntu Server 16.04: Difference between revisions

From ICO wiki
Jump to navigationJump to search
No edit summary
Line 8: Line 8:


==Preliminary notes==
==Preliminary notes==
This tutorial shows how to install NextCloud on Ubuntu 16.04 LTS Server, using MariaDB (as for database) and Apache 2 (as for webserver).
This tutorial shows how to install NextCloud on Ubuntu 16.04 LTS Server, using MariaDB (as for database) and Apache 2 (as for web server).


This tutorial does NOT show:
This tutorial does NOT show:
* how to install/configure databases other than MariaDB (although MySQL can be considered the sane)
* how to install/configure databases other than MariaDB (although MySQL can be considered the sane)
* how to install/configure webservers other than Apache2 (for example Nginx)
* how to install/configure web servers other than Apache2 (for example Nginx)
* how to use NextCloud
* how to use NextCloud


Line 136: Line 136:
</pre>
</pre>


- We install all the other tools we need (Apache2 web server, PHP 7 and its modules):
 
 
==Install Apache and PHP==
Install the other tools Nextcloud will need (Apache2 web server, PHP 7 and its modules):
<pre>
$ apt-get install apache2 libapache2-mod-php7.0 php7.0-gd php7.0-json php7.0-mysql php7.0-curl php7.0-mbstring php7.0-intl php7.0-mcrypt php-imagick php7.0-xml php7.0-zip
</pre>
 
 
Make sure the following Apache modules are enabled:
<pre>
$ a2enmod rewrite
$ a2enmod headers
$ a2enmod env
$ a2enmod dir
$ a2enmod mime
</pre>
 
 
Already enable the SSL module and its default site configuration:
<pre>
<pre>
apt-get install apache2 libapache2-mod-php7.0 php7.0-gd php7.0-json php7.0-mysql php7.0-curl php7.0-mbstring php7.0-intl php7.0-mcrypt php-imagick php7.0-xml php7.0-zip
$ a2enmod ssl
$ a2ensite default-ssl
</pre>
</pre>


- To download the archive use wget: <code>wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-</nowiki>''version''.''file-extension''</code>
Check from [https://nextcloud.com/install/#instructions-server] the exact link's target to use.
Example <code>wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-11.0.1.zip</nowiki></code>


- To download the checksum file the same way: <code>wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-</nowiki>''version''.''file-extension''.sha256</code>
==Nextcloud==
 
===Donwload Nextcloud===
Download Nextcloud's archive use wget:
 
<code>$ wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-</nowiki>''version''.''file-extension''</code>
 
Check from [https://nextcloud.com/install/#instructions-server Nextcloud's installation page] the exact link's target to use.
 
Example:
 
<code>wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-11.0.1.zip</nowiki></code>
 
===Check Nextcloud's archive integrity===
Check that the archive's integrity by comparing its checksum.
 
Download the checksum file:
 
<code>$ wget <nowiki>https://download.nextcloud.com/server/releases/nextcloud-</nowiki>''version''.''file-extension''.sha256</code>


- Check that the archive match the checksum file. <code>sha256sum -c nextcloud-''version''.''file-extension''.sha256 < nextcloud-''version''.''file-extension''</code>
If it matches, the terminal will display "OK".


- Extract the archive depending on its extension: <code>tar -xjf nextcloud-x.y.z.tar.bz2</code> or
Check that the downloaded archive matches the checksum file:
<code>unzip nextcloud-x.y.z.zip</code>
 
<code>$ sha256sum -c nextcloud-''version''.''file-extension''.sha256 < nextcloud-''version''.''file-extension''</code>
 
If it matches, the terminal will display <code>OK</code>.
 
===Install Nextcloud===
Extract the archive depending on its extension:  
 
<code>$ tar -xjf nextcloud-x.y.z.tar.bz2</code>
 
or
 
<code>$ unzip nextcloud-x.y.z.zip</code>
 
This will extract one single directory called "nextcloud".
This will extract one single directory called "nextcloud".


- This extracted directory will be used by the webserver. As for Apache, we can copy it to ''/var/www'' (document root of Apache).
<code>cp -r nextcloud /var/www</code>


- We create the file ''/etc/apache2/sites-available/nextcloud.conf'' with the following content:
This extracted directory will be used by the web server.
 
As for Apache, we can move it to ''/var/www'' (document root of Apache).
<code>$ mv nextcloud /var/www</code>
 
Create the file ''/etc/apache2/sites-available/nextcloud.conf'' with the following content:
 
<pre>
<pre>
Alias /nextcloud "/var/www/nextcloud/"
Alias /nextcloud "/var/www/nextcloud/"
Line 174: Line 224:
</pre>
</pre>


This configuration makes the Nextcloud web application available at the address http://''yourdomain''/nextcloud
This configuration makes the Nextcloud web application available at the address <nowiki>http://''yourdomain''/nextcloud</nowiki>


Then enable this configuration file: <code>a2ensite nextcloud</code>


- Make sure the following Apache modules are enabled:
Then enable this configuration file:  
<pre>
 
a2enmod rewrite
<code>$ a2ensite nextcloud</code>
a2enmod headers
 
a2enmod env
a2enmod dir
a2enmod mime
</pre>


- We can also already enable the SSL module and its default site configuration:
As screenshot below shows, Nextcloud is visible in a browser, but Apache needs to access its directory.
<pre>
Make Apache the owner of Nextcloud's directory:
a2enmod ssl
a2ensite default-ssl
</pre>


- As you can see on the screenshot below, Nextcloud is visible in a browser but Apache needs to access its directory.
<code>chown -R www-data:www-data /var/www/nextcloud/</code>
<code>chown -R www-data:www-data /var/www/nextcloud/</code>
IMAGE
IMAGE


Line 213: Line 255:


You must uncomment and change the line BINLOG_FORMAT = ROW in the database config file (/etc/mysql/my.cnf) and set its value to BINLOG_FORMAT = MIXED.
You must uncomment and change the line BINLOG_FORMAT = ROW in the database config file (/etc/mysql/my.cnf) and set its value to BINLOG_FORMAT = MIXED.
Then restart the MariaDB: <code>systemctl restart mariadb</code>
Then restart the MariaDB: <code>$ systemctl restart mariadb</code>


- Finally, to make the application more secure, Nextcloud provides a script which sets strict directory permissions.
- Finally, to make the application more secure, Nextcloud provides a script which sets strict directory permissions.
'''This step must be done once Nextcloud has been installed otherwise some permissions will not be as recommended (https://docs.nextcloud.com/server/11/admin_manual/installation/installation_wizard.html#strong-perms-label).'''
'''This step must be done once Nextcloud has been installed otherwise some permissions will not be as recommended (https://docs.nextcloud.com/server/11/admin_manual/installation/installation_wizard.html#strong-perms-label).'''


Create a file <code>nano /tmp/nextcloud.sh</code>
Create a file <code>$ nano /tmp/nextcloud.sh</code>


Copy and paste the following code into the file.
Copy and paste the following code into the file.
Line 262: Line 304:
</pre>
</pre>


Then run it: <code>bash /tmp/nextcloud.sh</code>
Then run it: <code>$ bash /tmp/nextcloud.sh</code>


You should see the following output
You should see the following output

Revision as of 02:28, 26 March 2017

Author: Etienne Barrier

Last modified: 07.02.2017

Install guestadditions for ubuntu server: http://askubuntu.com/questions/22743/how-do-i-install-guest-additions-in-a-virtualbox-vm?noredirect=1&lq=1 Purge MariaDB: http://askubuntu.com/questions/703123/mariadb-10-1-server-wont-start-after-update


Preliminary notes

This tutorial shows how to install NextCloud on Ubuntu 16.04 LTS Server, using MariaDB (as for database) and Apache 2 (as for web server).

This tutorial does NOT show:

  • how to install/configure databases other than MariaDB (although MySQL can be considered the sane)
  • how to install/configure web servers other than Apache2 (for example Nginx)
  • how to use NextCloud


It is assumed that you are already familiar with the basics of Linux command line terminal commands. But this tutorial is made so that you can copy paste the commands to your terminal.

Commands that must be entered in terminal with Bash shell start with a dollar sign "$". Terminal's outputs do not start with dollar sign.

Example:

$ echo I Love You
I Love You

All commands in this tutorial are made as root. You must be root or be able to use "sudo" command to install and configure Nextcloud.

Commands that must be entered for MariaDB start with greater-than sign ">".

Depending on the versions you use, the commands and/or the path shown in this tutorial might be different.


Tools' versions used in this tutorial:

  • Nextcloud (version: 11.0.1)
  • Ubuntu 16.04.1 LTS (Xenial)
  • MariaDB (version: 10.1.21)
  • Apache 2 (version: 2.4.xxxx)
  • Php (version 7.0)

The version of Nextcloud used (version 11) is referred as “Nextcloud” across the tutorial.


This tutorial is based on the following tutorials:


For any comments, please write to ebarrier {at] itcollege [dot) ee.


What is the final state this tutorial reaches?

This tutorial's objective is to have Nextcloud installed on a Ubuntu server using the aforementioned tools.

The installation of tools will be done from the command line.

The installation of Nextcloud will be done from command line and web interface.

Nextcloud will be accessible from the main page of the webserver and https protocol will be enabled and forced.


MariaDB database

MariaDB is a database server that was forked from MySQL. It is free and open source.

Install MariaDB

We install MariaDB directly from its package repository.

Note: Nextcloud's official documentation installs MariaDB with the command apt install mariadb-server. Experience showed that this package does not work properly and leads to troubles later. Therefore the present instructions for installing MariaDB differ from Nextcloud's.


Import the key to the package repository and add it to the package source list (added in /etc/apt/source.list).

$ sudo apt-get install software-properties-common
$ sudo apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8
$ sudo add-apt-repository 'deb [arch=amd64] http://ftp.eenet.ee/pub/mariadb/repo/10.1/ubuntu xenial main'


Then update the packages list and install mariadb.

$ sudo apt update
$ sudo apt install mariadb-server

When the wizard asks whether to set up a root password, it is important to set it and to remember it!


Once installation finishes, check that MariaDB is running:

$ systemctl status mariadb

IMAGE

MariaDB secure installation

MariaDB secure installation is a script that enhances the security of MariaDB. It is highly recommended to run it.

$ mysql_secure_installation

The first question of the wizard is to enter the root password that was chosen in the previous step. Enter it.

The second question asks whether we want to change the root password or not.

For all next questions, press Enter ("Yes" by default).

Create user and database for Nextcloud

Create a dedicated user and database that will be used by Nextcloud during its installation.

Note: Nextcloud's official documentation uses MariaDB's root password during its installation to set up the database (see below). In the present tutorial, a Nextcloud's dedicated user is created to avoid to enter the root password later (for security reasons).

First enter MariaDB as root:

$ mysql -u root -p

When prompted, enter the root password (we told you to remember it!).


Note: database statements (commands) do not need to be capitalize. But the semi-colon in the end is important, they are part of the statement.

Create the database (define your own database name; "nextcloud" in our example):

> CREATE DATABASE nextcloud;


Then create a user with its password (define both your own; "arold" and "salakala" in our example respectively) and grant all rights to it to the newly created database ("nextcloud" in our example).

> GRANT ALL ON nextcloud.* to 'arold'@'localhost' IDENTIFIED BY 'salakala';


Save the changes and exit.

> FLUSH PRIVILEGES;
> exit


Install Apache and PHP

Install the other tools Nextcloud will need (Apache2 web server, PHP 7 and its modules):

$ apt-get install apache2 libapache2-mod-php7.0 php7.0-gd php7.0-json php7.0-mysql php7.0-curl php7.0-mbstring php7.0-intl php7.0-mcrypt php-imagick php7.0-xml php7.0-zip


Make sure the following Apache modules are enabled:

$ a2enmod rewrite
$ a2enmod headers
$ a2enmod env
$ a2enmod dir
$ a2enmod mime


Already enable the SSL module and its default site configuration:

$ a2enmod ssl
$ a2ensite default-ssl


Nextcloud

Donwload Nextcloud

Download Nextcloud's archive use wget:

$ wget https://download.nextcloud.com/server/releases/nextcloud-version.file-extension

Check from Nextcloud's installation page the exact link's target to use.

Example:

wget https://download.nextcloud.com/server/releases/nextcloud-11.0.1.zip

Check Nextcloud's archive integrity

Check that the archive's integrity by comparing its checksum.

Download the checksum file:

$ wget https://download.nextcloud.com/server/releases/nextcloud-version.file-extension.sha256


Check that the downloaded archive matches the checksum file:

$ sha256sum -c nextcloud-version.file-extension.sha256 < nextcloud-version.file-extension

If it matches, the terminal will display OK.

Install Nextcloud

Extract the archive depending on its extension:

$ tar -xjf nextcloud-x.y.z.tar.bz2

or

$ unzip nextcloud-x.y.z.zip

This will extract one single directory called "nextcloud".


This extracted directory will be used by the web server.

As for Apache, we can move it to /var/www (document root of Apache). $ mv nextcloud /var/www

Create the file /etc/apache2/sites-available/nextcloud.conf with the following content:

Alias /nextcloud "/var/www/nextcloud/"

<Directory /var/www/nextcloud/>
  Options +FollowSymlinks
  AllowOverride All

  <IfModule mod_dav.c>
    Dav off
  </IfModule>

  SetEnv HOME /var/www/nextcloud
  SetEnv HTTP_HOME /var/www/nextcloud
</Directory>

This configuration makes the Nextcloud web application available at the address http://''yourdomain''/nextcloud


Then enable this configuration file:

$ a2ensite nextcloud


As screenshot below shows, Nextcloud is visible in a browser, but Apache needs to access its directory. Make Apache the owner of Nextcloud's directory:

chown -R www-data:www-data /var/www/nextcloud/

IMAGE

- Finally restart the Apache server to apply all these changes: service apache2 restart

- At the address http://yourdomainorip/nextcloud you should see the screen below. For "Create an admin account

- If you get a message similar to :

An unhandled exception has been thrown: exception ‘PDOException’ with message
'SQLSTATE[HY000]: General error: 1665 Cannot execute statement: impossible to
write to binary log since BINLOG_FORMAT = STATEMENT and at least one table
uses a storage engine limited to row-based logging. InnoDB is limited to
row-logging when transaction isolation level is READ COMMITTED or READ
UNCOMMITTED.'

You must uncomment and change the line BINLOG_FORMAT = ROW in the database config file (/etc/mysql/my.cnf) and set its value to BINLOG_FORMAT = MIXED. Then restart the MariaDB: $ systemctl restart mariadb

- Finally, to make the application more secure, Nextcloud provides a script which sets strict directory permissions. This step must be done once Nextcloud has been installed otherwise some permissions will not be as recommended (https://docs.nextcloud.com/server/11/admin_manual/installation/installation_wizard.html#strong-perms-label).

Create a file $ nano /tmp/nextcloud.sh

Copy and paste the following code into the file.

#!/bin/bash
ocpath='/var/www/nextcloud'
htuser='www-data'
htgroup='www-data'
rootuser='root'

printf "Creating possible missing Directories\n"
mkdir -p $ocpath/data
mkdir -p $ocpath/assets
mkdir -p $ocpath/updater

printf "chmod Files and Directories\n"
find ${ocpath}/ -type f -print0 | xargs -0 chmod 0640
find ${ocpath}/ -type d -print0 | xargs -0 chmod 0750
chmod 755 ${ocpath}

printf "chown Directories\n"
chown -R ${rootuser}:${htgroup} ${ocpath}/
chown -R ${htuser}:${htgroup} ${ocpath}/apps/
chown -R ${htuser}:${htgroup} ${ocpath}/assets/
chown -R ${htuser}:${htgroup} ${ocpath}/config/
chown -R ${htuser}:${htgroup} ${ocpath}/data/
chown -R ${htuser}:${htgroup} ${ocpath}/themes/
chown -R ${htuser}:${htgroup} ${ocpath}/updater/

chmod +x ${ocpath}/occ

printf "chmod/chown .htaccess\n"
if [ -f ${ocpath}/.htaccess ]
 then
  chmod 0644 ${ocpath}/.htaccess
  chown ${rootuser}:${htgroup} ${ocpath}/.htaccess
fi
if [ -f ${ocpath}/data/.htaccess ]
 then
  chmod 0644 ${ocpath}/data/.htaccess
  chown ${rootuser}:${htgroup} ${ocpath}/data/.htaccess
fi

Then run it: $ bash /tmp/nextcloud.sh

You should see the following output

Creating possible missing Directories
chmod Files and Directories
chown Directories
chmod/chown .htaccess

Stop at "Additional Apache Configurations" (a2enmod mime).