On one server create a key file. Copy this key file to all other servers that will participate in the replica set<\/p>\n
mkdir -p \/opt\/mongodb\/keys\/\r\nopenssl rand -base64 756 > \/opt\/mongodb\/keys\/$(date '+%Y-%m-%d').key\r\nchmod 400 \/opt\/mongodb\/keys\/$(date '+%Y-%m-%d').key\r\nchown -R mongodb:mongodb \/opt\/mongodb\/keys\/$(date '+%Y-%m-%d').key\r\n<\/pre>\nOn each server, edit \/etc\/mongo.conf and add the keyfile to the security section and<\/em> define a replica set<\/p>\n
security:\r\n authorization: enabled\r\n keyFile: \/etc\/mongodb\/keys\/mongo-key\r\n#replication:\r\nreplication:\r\n replSetName: \"myReplicaSet\"<\/pre>\nRestart MongoDB on each node.<\/p>\n
On one server, use mongosh to enter the MongDB shell.<\/p>\n
rs.initiate(\r\n{\r\n_id: \"myReplicaSet\",\r\nmembers: [\r\n{ _id: 0, host: \"mongohost1.example.net\" },\r\n{ _id: 1, host: \"mongohost2.example.net\" },\r\n{ _id: 2, host: \"mongohost3.example.net\" }\r\n]\r\n})<\/pre>\nUse rs.status()<\/tt> to view the status of the replica set. If it is stuck in STARTING … check connectivity. If the port is open, I ran into a snag with some replacement servers. They’ve got temporary hostnames. But you cannot add a host on itself — it ignores that you typed mongohost1.example.net … and it takes it’s<\/em>
hostname<\/code> value. And then sends that value to the other servers in the replica set. If you cannot change the hostname to match what you want, there is a process to change the hostname in a replicaset<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"On one server create a key file. Copy this key file to all other servers that will participate in the replica set mkdir -p \/opt\/mongodb\/keys\/ openssl rand -base64 756 > \/opt\/mongodb\/keys\/$(date ‘+%Y-%m-%d’).key chmod 400 \/opt\/mongodb\/keys\/$(date ‘+%Y-%m-%d’).key chown -R mongodb:mongodb \/opt\/mongodb\/keys\/$(date ‘+%Y-%m-%d’).key On each server, edit \/etc\/mongo.conf and add the keyfile to the security section and …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1907],"tags":[429],"class_list":["post-10334","post","type-post","status-publish","format-standard","hentry","category-mongodb","tag-mongodb"],"_links":{"self":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10334","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10334"}],"version-history":[{"count":1,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10334\/revisions"}],"predecessor-version":[{"id":10335,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=\/wp\/v2\/posts\/10334\/revisions\/10335"}],"wp:attachment":[{"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10334"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10334"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rushworth.us\/lisa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10334"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}