🥇 Saita Minio ta yadda mai amfani zai iya aiki da guga nasa kawai

Minio mai sauƙi ne, mai sauri, kantin kayan AWS S3 mai jituwa. An tsara Minio don ɗaukar bayanan da ba a tsara su ba kamar hotuna, bidiyo, fayilolin log, madadin. minio kuma yana goyan bayan yanayin rarrabawa, wanda ke ba da damar haɗa faifai da yawa zuwa uwar garken ajiya abu ɗaya, gami da waɗanda ke kan injuna daban-daban.

Manufar wannan sakon shine saita minio ta yadda kowane mai amfani zai iya aiki da guga nasa kawai.

Gabaɗaya, Minio ya dace da lokuta masu zuwa:

ajiyar da ba a maimaitawa ba a saman tsarin fayil mai dogara tare da samun dama ta hanyar S3 (ƙananan da matsakaicin ajiya wanda aka shirya akan NAS da SAN);
ajiyar da ba a kwafi ba a saman tsarin fayil ɗin da ba a dogara ba tare da samun damar S3 (don haɓakawa da gwaji);
ajiya tare da kwafi akan ƙaramin rukunin sabobin a cikin tara guda tare da samun dama ta hanyar ka'idar S3 (ma'ajiyar gazawa tare da yankin gazawa daidai da rack).

A kan tsarin RedHat muna haɗa ma'ajiyar Minio mara hukuma.

yum -y install yum-plugin-copr
yum copr enable -y lkiesow/minio
yum install -y minio minio-mc

Ƙirƙira kuma ƙara zuwa MINIO_ACCESS_KEY da MINIO_SECRET_KEY a /etc/minio/minio.conf.

# Custom username or access key of minimum 3 characters in length.
MINIO_ACCESS_KEY=

# Custom password or secret key of minimum 8 characters in length.
MINIO_SECRET_KEY=

Idan ba za ku yi amfani da nginx kafin Minio ba, to kuna buƙatar canzawa.

--address 127.0.0.1:9000

a kan

--address 0.0.0.0:9000

Bari mu kaddamar da Minio.

systemctl start minio

Muna ƙirƙirar haɗin kai zuwa Minio mai suna myminio.

minio-mc config host add myminio http://localhost:9000 MINIO_ACCESS_KEY 
MINIO_SECRET_KEY

Ƙirƙiri mai amfani da guga1 guga.

minio-mc mb myminio/user1bucket

Ƙirƙiri mai amfani da guga2 guga.

minio-mc mb myminio/user2bucket

Ƙirƙiri fayil ɗin manufofin mai amfani1-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:PutBucketPolicy",
        "s3:GetBucketPolicy",
        "s3:DeleteBucketPolicy",
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user1bucket"
      ],
      "Sid": ""
    },
    {
      "Action": [
        "s3:AbortMultipartUpload",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:ListMultipartUploadParts",
        "s3:PutObject"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user1bucket/*"
      ],
      "Sid": ""
    }
  ]
}

Ƙirƙiri fayil ɗin manufofin mai amfani2-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:PutBucketPolicy",
        "s3:GetBucketPolicy",
        "s3:DeleteBucketPolicy",
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user2bucket"
      ],
      "Sid": ""
    },
    {
      "Action": [
        "s3:AbortMultipartUpload",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:ListMultipartUploadParts",
        "s3:PutObject"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user2bucket/*"
      ],
      "Sid": ""
    }
  ]
}

Ƙirƙiri mai amfani mai amfani1 tare da gwajin kalmar wucewa12345.

minio-mc admin user add myminio user1 test12345

Ƙirƙiri mai amfani mai amfani2 tare da gwajin kalmar wucewa54321.

minio-mc admin user add myminio user2 test54321

Mun ƙirƙiri wata manufa a cikin Minio da ake kira user1-policy daga fayil mai amfani1-policy.json.

minio-mc admin policy add myminio user1-policy user1-policy.json

Mun ƙirƙiri wata manufa a cikin Minio da ake kira user2-policy daga fayil mai amfani2-policy.json.

minio-mc admin policy add myminio user2-policy user2-policy.json

Aiwatar da manufar mai amfani1-manufa ga mai amfani1.

minio-mc admin policy set myminio user1-policy user=user1

Aiwatar da manufar mai amfani2-manufa ga mai amfani2.

minio-mc admin policy set myminio user2-policy user=user2

Duba haɗin manufofin zuwa masu amfani

minio-mc admin user list myminio

Duba haɗin manufofin zuwa masu amfani zai yi kama da wannan

enabled    user1                 user1-policy
enabled    user2                 user2-policy

Don bayyanawa, shiga cikin mai binciken zuwa adireshin http://ip-сервера-где-запущен-minio:9000/minio/

Mun ga cewa mun haɗa zuwa Minio a ƙarƙashin MINIO_ACCESS_KEY=mai amfani1. Guga mai amfani1 guga yana samuwa gare mu.

Ba zai yiwu a ƙirƙiri guga ba, tun da babu wani aikin da ya dace a cikin manufofin.

Bari mu ƙirƙiri fayil a cikin guga mai amfani1bucket.

Bari mu haɗa zuwa Minio ƙarƙashin MINIO_ACCESS_KEY=mai amfani2. Guga guga mai amfani2 yana samuwa gare mu.

Kuma ba mu ga ko dai mai amfani1 guga ko fayiloli daga mai amfani1bucket.

Ƙirƙiri hira ta Telegram ta amfani da Minio https://t.me/minio_s3_ru

source: www.habr.com