AlmaLinux 8

Section 1

System Prep

Before installing any service, update and install the tools mo-installer and moctl depend on. AlmaLinux 8 is binary-compatible with RHEL 8.

1.1 Update the system

sudo dnf update -y
sudo reboot

1.2 Enable EPEL and PowerTools

sudo dnf install -y epel-release
sudo dnf config-manager --set-enabled powertools
sudo dnf update -y

1.3 Install required utilities

sudo dnf install -y unzip wget curl jq net-tools vim bash-completion tar lsof telnet firewalld

1.4 Configure the firewall

sudo systemctl enable --now firewalld
sudo firewall-cmd --permanent --add-port={8080,8070,8071,8072,6379,5672,15672}/tcp
sudo firewall-cmd --reload

1.5 Set SELinux to permissive

sudo setenforce 0
sudo sed -i 's/^SELINUX=enforcing/SELINUX=permissive/' /etc/selinux/config

Section 2

Database

PostgreSQL 16 on RHEL 8. The installer ships the PostgreSQL JDBC driver, so no manual driver placement is needed.

2.1 Add the PGDG repository

sudo dnf install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-8-x86_64/pgdg-redhat-repo-latest.noarch.rpm

2.2 Disable the built-in PostgreSQL module

sudo dnf -qy module disable postgresql

2.3 Install PostgreSQL 16

sudo dnf install -y postgresql16-server postgresql16 postgresql16-contrib

2.4 Initialise and start

sudo /usr/pgsql-16/bin/postgresql-16-setup initdb
sudo systemctl enable --now postgresql-16

2.5 Create the miniOrange database and user

sudo -u postgres psql <<'SQL'
CREATE USER moadmin WITH PASSWORD 'Password123';
CREATE DATABASE miniorangedb OWNER moadmin;
ALTER USER moadmin WITH SUPERUSER;
SQL

2.6 Switch authentication to md5

sudo sed -i \
  -E 's/^(host\s+all\s+all\s+(127\.0\.0\.1\/32|::1\/128)\s+)ident/\1md5/' \
  /var/lib/pgsql/16/data/pg_hba.conf
sudo systemctl restart postgresql-16

2.7 Open the PostgreSQL port (only if remote access is needed)

sudo firewall-cmd --permanent --add-port=5432/tcp
sudo firewall-cmd --reload

2.8 Verify

PGPASSWORD=Password123 psql -h 127.0.0.1 -U moadmin -d miniorangedb -c '\l'

Values for the `/initialize` wizard

Field	Value
Database Type	PostgreSQL
Host	`127.0.0.1`
Port	`5432`
Database name	`miniorangedb`
Username	`moadmin`
Password	`Password123`

⚠ Derived, needs review. These steps are derived from the MySQL vendor's official install docs combined with the miniOrange PostgreSQL and Oracle source flow. They should work, but each command should be sanity-checked on this exact OS before production use.

MySQL 8.4 LTS on Oracle Linux 8. These steps are derived from the MySQL community repo flow plus the JDBC driver convention from the source Oracle 19c documentation; review before production.

2.1 Disable the built-in MySQL module

sudo dnf -qy module disable mysql

2.2 Add the MySQL community repository

sudo dnf install -y https://dev.mysql.com/get/mysql84-community-release-el8-1.noarch.rpm
sudo dnf clean all && sudo dnf makecache

2.3 Install MySQL 8.4

sudo dnf install -y mysql-community-server mysql-community-client
sudo systemctl enable --now mysqld

2.4 Retrieve the temporary root password

sudo grep 'temporary password' /var/log/mysqld.log

2.5 Secure the installation

sudo mysql_secure_installation

2.6 Create the miniOrange database and user

mysql -u root -p <<'SQL'
CREATE DATABASE miniorangedb CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'moadmin'@'localhost' IDENTIFIED BY 'Password123';
CREATE USER 'moadmin'@'%'         IDENTIFIED BY 'Password123';
GRANT ALL PRIVILEGES ON miniorangedb.* TO 'moadmin'@'localhost';
GRANT ALL PRIVILEGES ON miniorangedb.* TO 'moadmin'@'%';
FLUSH PRIVILEGES;
SQL

2.7 Place the MySQL JDBC driver (derived assumption)

sudo mkdir -p /opt/miniorange/drivers
cd /tmp
sudo wget https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-j-8.4.0-1.el8.noarch.rpm
sudo dnf install -y ./mysql-connector-j-8.4.0-1.el8.noarch.rpm
sudo cp /usr/share/java/mysql-connector-j-8.4.0.jar /opt/miniorange/drivers/
sudo chmod 644 /opt/miniorange/drivers/mysql-connector-j-8.4.0.jar

2.8 Open the MySQL port (only if remote access is needed)

sudo firewall-cmd --permanent --add-port=3306/tcp
sudo firewall-cmd --reload

2.9 Verify

mysql -u moadmin -pPassword123 -h 127.0.0.1 -e 'SHOW DATABASES;'

Values for the `/initialize` wizard

Field	Value
Database Type	MySQL
Host	`127.0.0.1`
Port	`3306`
Database name	`miniorangedb`
Username	`moadmin`
Password	`Password123`

◐ Partial support. Use RHEL 8 repo; not officially listed by Microsoft

Microsoft SQL Server 2022 on RHEL 8. Microsoft does not officially list Rocky Linux 8 in its supported matrix, but AlmaLinux is binary-compatible with RHEL 8 and the RHEL 8 packages install and run cleanly in practice. Treat this combination as partial support. The IDP wiring (JDBC driver placement) is derived from the Oracle source flow.

2.1 Verify system requirements

MSSQL on Linux requires at least 2 GB of RAM.

free -h

2.2 Add the Microsoft repository

sudo curl -o /etc/yum.repos.d/mssql-server.repo \
  https://packages.microsoft.com/config/rhel/8/mssql-server-2022.repo
sudo curl -o /etc/yum.repos.d/msprod.repo \
  https://packages.microsoft.com/config/rhel/8/prod.repo

2.3 Install MSSQL 2022 and tools

sudo dnf install -y mssql-server
sudo ACCEPT_EULA=Y dnf install -y mssql-tools18 unixODBC-devel

2.4 Run the initial setup

sudo /opt/mssql/bin/mssql-conf setup
sudo systemctl enable --now mssql-server

2.5 Add tools to PATH

echo 'export PATH="$PATH:/opt/mssql-tools18/bin"' | sudo tee /etc/profile.d/mssql.sh
source /etc/profile.d/mssql.sh

sqlcmd -S localhost -U SA -P '<SA_PASSWORD>' -C -Q "
CREATE DATABASE miniorangedb;
GO
CREATE LOGIN moadmin WITH PASSWORD = 'Password123!';
GO
USE miniorangedb;
CREATE USER moadmin FOR LOGIN moadmin;
ALTER ROLE db_owner ADD MEMBER moadmin;
GO
"

2.7 Place the MSSQL JDBC driver (derived assumption)

sudo mkdir -p /opt/miniorange/drivers
cd /tmp
sudo curl -L -o mssql-jdbc.tar.gz \
  https://download.microsoft.com/download/8/c/d/8cdfd87a-1684-4731-91a9-2ba182c8b0ad/sqljdbc_12.6.4.0_enu.tar.gz
sudo tar -xzf mssql-jdbc.tar.gz
sudo cp sqljdbc_12.6/enu/jars/mssql-jdbc-12.6.4.jre11.jar /opt/miniorange/drivers/
sudo chmod 644 /opt/miniorange/drivers/mssql-jdbc-12.6.4.jre11.jar

2.8 Open the MSSQL port

sudo firewall-cmd --permanent --add-port=1433/tcp
sudo firewall-cmd --reload

Values for the `/initialize` wizard

Field	Value
Database Type	MSSQL
Host	`127.0.0.1`
Port	`1433`
Database name	`miniorangedb`
Username	`moadmin`
Password	`Password123!`

Oracle Database 19c on RHEL 8. Oracle officially supports 19c on RHEL 8 with the same preinstall RPM used on Oracle Linux 8.

2.1 Install the Oracle preinstall package

sudo dnf install -y \
  https://yum.oracle.com/repo/OracleLinux/OL8/appstream/x86_64/getPackage/oracle-database-preinstall-19c-1.0-1.el8.x86_64.rpm \
  --nogpgcheck

2.2 Install Oracle 19c

Download oracle-database-ee-19c-*.rpm from Oracle’s site (login required) to /opt/.

cd /opt
sudo dnf localinstall -y oracle-database-ee-19c-*.rpm

2.3 Create the database

sudo /etc/init.d/oracledb_ORCLCDB-19c configure

Item	Value
CDB	ORCLCDB
PDB	ORCLPDB1
Listener	1521

2.4 Configure environment variables

sudo -i -u oracle bash <<'BASH'
cat >> ~/.bash_profile <<'PROFILE'
export ORACLE_BASE=/u01/app/oracle
export ORACLE_HOME=/u01/app/oracle/product/19.0.0/dbhome_1
export ORACLE_SID=ORCLCDB
export PATH=$ORACLE_HOME/bin:$PATH
PROFILE
source ~/.bash_profile
BASH

2.5 Open the PDB and save state

sudo -i -u oracle bash -c "sqlplus -S / as sysdba" <<'SQL'
STARTUP;
ALTER PLUGGABLE DATABASE ALL OPEN;
ALTER PLUGGABLE DATABASE ALL SAVE STATE;
SHOW PDBS;
SQL

2.6 Start the listener

sudo -i -u oracle bash -c "lsnrctl start || lsnrctl status"

2.7 Create the miniOrange Oracle user

sudo -i -u oracle bash -c "sqlplus -S / as sysdba" <<'SQL'
ALTER SESSION SET CONTAINER=ORCLPDB1;
CREATE USER moadmin IDENTIFIED BY Password123;
GRANT CONNECT, RESOURCE TO moadmin;
GRANT DBA TO moadmin;
SQL

2.8 Place the Oracle JDBC driver

Required step. Oracle’s JDBC driver is not bundled in mo-installer because of Oracle’s licensing.

sudo mkdir -p /opt/miniorange/drivers
sudo cp /u01/app/oracle/product/19.0.0/dbhome_1/jdbc/lib/ojdbc8.jar \
        /opt/miniorange/drivers/
sudo chmod 644 /opt/miniorange/drivers/ojdbc8.jar

2.9 Open the Oracle port

sudo firewall-cmd --permanent --add-port=1521/tcp
sudo firewall-cmd --reload

Values for the `/initialize` wizard

Use Service Name, not SID. The IDP schema lives in ORCLPDB1.

Field	Value
Database Type	Oracle
Host	`127.0.0.1`
Port	`1521`
SID / Service	Service
Service Name	`ORCLPDB1`
Username	`moadmin`
Password	`Password123`

Section 3

Erlang + RabbitMQ

RabbitMQ is used by the IDP for internal messaging between microservices. It requires Erlang. Both are installed from the official RabbitMQ RPM releases on GitHub.

Note. RabbitMQ is not bundled with mo-installer and must be installed before running the installer.

3.1 Install Erlang 26

sudo dnf install -y \
  https://github.com/rabbitmq/erlang-rpm/releases/download/v26.2.5.2/erlang-26.2.5.2-1.el8.x86_64.rpm \
  --nogpgcheck

3.2 Install RabbitMQ 3.13.7

sudo dnf install -y \
  https://github.com/rabbitmq/rabbitmq-server/releases/download/v3.13.7/rabbitmq-server-3.13.7-1.el8.noarch.rpm \
  --nogpgcheck

3.3 Enable and start the service

sudo systemctl enable --now rabbitmq-server
sudo systemctl status rabbitmq-server

3.4 Enable the management plugin

sudo rabbitmq-plugins enable rabbitmq_management
sudo systemctl restart rabbitmq-server

3.5 Verify

sudo rabbitmqctl status
sudo ss -tulnp | grep 5672

Expected:

LISTEN 0  128  *:5672

Values for the `/initialize` wizard

Field	Value
RabbitMQ Host	`127.0.0.1`
AMQP Port	`5672`
Mgmt UI Port	`15672`
Default Login	`guest` / `guest`

Section 4

mo-installer

The installer bundles Java 17 and Redis. You don’t install either manually. The installer auto-detects the OS and deploys the IDP services into /opt/tomcat/.

4.1 Download the installer

cd /opt
sudo wget https://miniorange.s3.us-east-1.amazonaws.com/public/installers/mo-installer-5.0.0.zip
sudo unzip mo-installer-5.0.0.zip -d mo-installer-5.0.0
cd /opt/mo-installer-5.0.0
ls -la

You should see:

.env.sh          Environment configuration (review before sourcing)
mo-installer.sh  Main installer script
moctl/           moctl CLI and bash completion

4.2 Source the environment file

less .env.sh
source .env.sh

Note. In v5.0.0, .env.sh does not contain database connection details. The DB connection is configured later through the browser UI at /initialize.

4.3 Set execute permissions

sudo chmod +x mo-installer.sh moctl/*.sh

4.4 Run the installer

sudo bash mo-installer.sh

The installer covers:

Java 17 — installed automatically
Redis — installed and configured automatically
moctl — installed to /usr/bin/moctl with tab completion
IDP services — deployed to /opt/tomcat/

At the end of the run:

Next step: moctl service start

4.5 Start the four core services

moctl service start

Service	Port	Purpose
configserver	8071	Configuration
eurekaserver	8070	Service registry
gatekeeper	8072	API gateway
miniorange	8080	Main IDP service

4.6 Check service status

moctl service status

Symbol	Meaning
`● running`	Active and registered in Eureka
`△ registering`	Active but not yet registered; wait and recheck
`△ stopped`	Inactive
`✗ failed`	Check `moctl log <service>`

4.7 Open `/initialize` in a browser

https://<SERVER_IP>/initialize

You will see a self-signed certificate warning. Proceed past it.

Enter the values from the Database section above, plus Redis (127.0.0.1:6379, no password by default) and RabbitMQ (Section 3 values).

After the wizard completes, the dashboard loads. Navigate to Settings → Base URL and set it to your final domain:

https://<your-domain>

4.8 Restart all services

moctl service restart

This step is required to start the secondary services that depend on the completed schema. Wait 1–2 minutes for everything to register.

Section 5

Verify & Service Enablement

5.1 Full service status

moctl service status

Every service should show ● running or ● reachable. If a service shows △ registering, wait 30 seconds and re-run.

5.2 Full diagnostics

moctl diagnose

Expected output includes:

Oracle connectivity reachable    (or Database connectivity reachable for non-Oracle)
Redis reachable
RabbitMQ reachable

5.3 Individual service status

systemctl status mo-idp-miniorange.service
systemctl status redis
systemctl status rabbitmq-server

5.4 Check all bound ports

sudo ss -tulnp | egrep '8080|8070|8071|8072|6379|5672'

For your DB:

DB	Port
PostgreSQL	5432
MySQL	3306
MSSQL	1433
Oracle	1521

5.5 Preflight

moctl pre

Validation checklist

Run through this list to confirm a healthy deployment:

Validation	OK
DB port active and listening	☐
Redis reachable	☐
RabbitMQ reachable on port 5672	☐
miniOrange UI accessible via browser	☐
(Oracle) ORCLPDB1 in READ WRITE state	☐
`moctl diagnose` — all services green	☐
Services configured for auto-start	☐

Common issues

Issue: ORA-01034: ORACLE not available (Oracle only)

The DB isn’t started.

sudo -i -u oracle bash -c "sqlplus -S / as sysdba <<< 'STARTUP;'"

Issue: Listener supports no services (Oracle only)

The DB started after the listener, or the PDB isn’t open.

sudo -i -u oracle bash -c "sqlplus -S / as sysdba" <<'SQL'
ALTER PLUGGABLE DATABASE ALL OPEN;
SQL
sudo -i -u oracle bash -c "lsnrctl status"

Issue: Cannot connect to ORCLPDB1 (Oracle only)

You used SID mode instead of Service Name mode in the UI. In the wizard, set SID/Service = Service and Service Name = ORCLPDB1.

Issue: RabbitMQ reachable: false

sudo systemctl restart rabbitmq-server
sudo ss -tulnp | grep 5672
sudo rabbitmqctl status

Issue: miniOrange version shows 1.0.0

The schema migration didn’t complete. Connect to the DB and check tables exist; if not, restart all services and retry the initialize step.

Issue: Tomcat stale PID after a crash

sudo rm -f /opt/tomcat/latest/temp/*.pid
moctl service restart miniorange

System Prep

1.1 Update the system

1.2 Enable EPEL and PowerTools

1.3 Install required utilities

1.4 Configure the firewall

1.5 Set SELinux to permissive

Database

2.1 Add the PGDG repository

2.2 Disable the built-in PostgreSQL module

2.3 Install PostgreSQL 16

2.4 Initialise and start

2.5 Create the miniOrange database and user

2.6 Switch authentication to md5

2.7 Open the PostgreSQL port (only if remote access is needed)

2.8 Verify

Values for the /initialize wizard

2.1 Disable the built-in MySQL module

2.2 Add the MySQL community repository

2.3 Install MySQL 8.4

2.4 Retrieve the temporary root password

2.5 Secure the installation

2.6 Create the miniOrange database and user

2.7 Place the MySQL JDBC driver (derived assumption)

2.8 Open the MySQL port (only if remote access is needed)

2.9 Verify

Values for the /initialize wizard

2.1 Verify system requirements

2.2 Add the Microsoft repository

2.3 Install MSSQL 2022 and tools

2.4 Run the initial setup

2.5 Add tools to PATH

2.6 Create the miniOrange database and login

2.7 Place the MSSQL JDBC driver (derived assumption)

2.8 Open the MSSQL port

Values for the /initialize wizard

2.1 Install the Oracle preinstall package

2.2 Install Oracle 19c

2.3 Create the database

2.4 Configure environment variables

2.5 Open the PDB and save state

2.6 Start the listener

2.7 Create the miniOrange Oracle user

2.8 Place the Oracle JDBC driver

2.9 Open the Oracle port

Values for the /initialize wizard

Erlang + RabbitMQ

3.1 Install Erlang 26

3.2 Install RabbitMQ 3.13.7

3.3 Enable and start the service

3.4 Enable the management plugin

3.5 Verify

Values for the /initialize wizard

mo-installer

4.1 Download the installer

4.2 Source the environment file

4.3 Set execute permissions

4.4 Run the installer

4.5 Start the four core services

4.6 Check service status

4.7 Open /initialize in a browser

4.8 Restart all services

Verify & Service Enablement

5.1 Full service status

5.2 Full diagnostics

5.3 Individual service status

5.4 Check all bound ports

5.5 Preflight

Validation checklist

Common issues

Values for the `/initialize` wizard

Values for the `/initialize` wizard

Values for the `/initialize` wizard

Values for the `/initialize` wizard

Values for the `/initialize` wizard

4.7 Open `/initialize` in a browser