Versions Compared
Key
- This line was added.
- This line was removed.
- Formatting was changed.
Install Prerequisites
Install Docker and Docker Compose
Vera is designed to run inside Docker containers. Use the following instructions to install Docker Engine on the installation machine.
Note: This section can be skipped if Docker is already installed on the machine.
The Docker website provides instructions for installing Docker:
Docker CE (recommended for Linux installations): https://docs.docker.com/install/
If the docker compose --version
command is recognized, then Docker is correctly installed.
Install Vera
Pre-configure Storage Locations
Vera uses folder mapping (volume mounting) to create persistent storage outside of the Docker containers. The first step of installation is to create a folder location for each storage item listed below. Tricentis default recommendations are provided, but any storage location (drive and/or folder) may be selected.
Create Storage Locations: Use the following table as guidance to select storage locations for the Vera items listed. You can choose any location you like, or you can follow Tricentis default recommendation. NOTE: For Linux, paths are case sensitive.
Storage Item | Recommended Location | Description |
---|---|---|
MongoDB Data Storage | /var/lib/vera/data/db | This location will become the internal storage drive for the MongoDB database. |
Vera Server Install Directory | /var/lib/vera | The folder containing all inputs and outputs for the Vera Server. |
Vera Web Portal Install Directory | /var/lib/vera | The folder containing all inputs and outputs for the Vera Web Portal. Usually this is the same as the Vera Server Data Directory. |
Create Folders: Create the following folders within the Vera Data Directory selected above.
Required Folder Name | Description |
---|---|
Certificates | A folder for placing SSL certificates used to enable HTTPS on the Vera Server, Vera Web Portal and SSO communication. |
Configs | The folder containing the Vera Web Portal configuration file. |
Logs | The output directory for log files generated by Vera applications. |
UserImports | A folder for placing CSV files containing user profiles to import. The Vera Server will monitor this folder for new CSV files that are dropped in. Also, the repository for previous imported CSV files and their import logs. |
Mongo-Setup | A temporary folder for placing setup scripts for the MongoDB database. |
Create folders (
View file | ||
---|---|---|
|
Code Block | ||
---|---|---|
| ||
sudo mkdir -p /var/lib/vera/data/db sudo mkdir /var/lib/vera/Logs sudo mkdir /var/lib/vera/UserImports sudo mkdir /var/lib/vera/Certificates sudo mkdir /var/lib/vera/Mongo-Setup sudo mkdir /var/lib/vera/Configs |
Stage Vera Web Portal Configurations: Copy
to the Configs directory created in Step 2.View file name config.yaml Stage MongoDB Setup Script: Copy
to the Mongo-Setup directory created in Step 2.View file name mongo-users-setup.js Note You may want to change the default passwords in the script file. If you do, be sure to use the correct passwords in the docker-compose file below.
Stage User Import File: If desired, copy a CSV file containing initial user definitions into the UserImports directory created in Step 2. See Import Vera users.
Sample User import CSV file(
)View file name userimport.csv Code Block language text User Name,Full Name,Email,System Roles,IdP,IdP User Name vera_admin,Default Vera Administrator,vera_admin@tricentis.com,System Administrator,Vera,vera_admin:ChangeThis1Pwd
Open TCP/IP Ports
Both the Vera Web Portal and the Vera Server (API) require the ability to receive inbound HTTP traffic. Each component can accept traffic via HTTP, HTTPS, or both.
Select Ports: Select an HTTP and/or HTTPS port for the Vera Web Portal and the Vera Server (API). Default recommendations are provided, but any ports may be selected.
Container | Port Recommendation (http / https) |
---|---|
Vera Web Portal | 80 / 443 |
Vera Server | 8080 / 8443 |
Vera API qTest Route Action | 5100 / 6100 |
Vera API Jira Route Action | 5101 / 6101 |
RabbitMQ | 5672 / 15672 |
Configure the installation machine's firewall to open each selected port for incoming traffic.
Create a JWT Certificate
Vera uses JSON Web Tokens (JWT) to securely transmit information between clients and the Vera Server API. These JWTs are digitally "signed" during creation so that their integrity can be verified on subsequent calls without requiring the user to provide login information. A certificate is required to "sign" the JWT. The certificate must be in the PKCS#12 format and can be from a trusted source or a self-signed certificate. The instructions below will create a self-signed certificate in the proper format and upload it to the appropriate location.
Create a Private Key for use in the certificate.
Code Block language bash openssl genrsa -aes256 -out private.pass.pem 2048 openssl rsa -in private.pass.pem -out key.pem
Create the Self-Signing Request. Enter the information requested during the certificate creation.
Code Block language bash openssl req -new -key key.pem -out server.csr
Generate the Self-Sign Certificate.
Code Block language bash openssl x509 -req -sha256 -days 3650 -in server.csr -signkey key.pem -out jwt.crt
Note |
---|
The |
Generate a PFX file from the certificate and private key. Provide a password for the PFX file, and make note of the password for a later use in the installation.
Code Block language bash openssl pkcs12 -export -out jwt.pfx -inkey key.pem -in jwt.crt
Note |
---|
You should provide a password when creating the PFX file. |
Copy the PFX file to the Certificates directory for Vera Server.
Create or Provide a Service Provider Certificate and Private Key
Vera acts as a SAML Service Provider for Single Sign-On. This requires Vera to have a certificate available for signing SAML Requests that are sent to the SAML Identity Provider. The certificates are required for the Web Portal to start up, even if you are not using the SSO feature. The certificate and key must be in the PEM format. The simplest way to provide these is to use the certificate and key files created above when creating the JWT certificate. If needed, you can follow the instructions below to create a new certificate and key file for the Service Provider.
Create a Private Key for use in the certificate.
Code Block language bash openssl genrsa -aes256 -out sp-private.pass.pem 2048 openssl rsa -in sp-private.pass.pem -out sp-privatekey.pem
Create the Self-Signing Request. Enter the information requested during the certificate creation.
Code Block language bash openssl req -new -key sp-privatekey.pem -out sp-server.csr
Generate the Self-Sign Certificate.
Code Block language bash openssl x509 -req -sha256 -in sp-server.csr -signkey sp-privatekey.pem -out sp-publiccert.crt
Copy the certificate and private key files to the Certificates directory for Vera Server.
Ensure that the config.yaml file is updated with the correct filenames for the following parameters:
Config.yaml Variable | Example Value |
---|---|
samlPrivateKeyFile | sp-privatekey.pem |
samlPublicCertFile | sp-publiccert.crt |
Configure Docker Orchestration (Docker Compose)
Download the Vera Docker Compose file for:
View file name docker-compose.yml Place the file in the Vera Server Install Directory selected previously.
Download the Vera Environment file:
View file name .env For a filled in example, see below.
Place the file in the Vera Server Install Directory selected previously.
Update the .env file with the configurations below. Do not update the docker-compose.yml file directly unless you know what you are doing.
NOTE: You should not need to update the docker-compose.yml file directly. That file will load the variables from the .env file when it is started by Docker. For custom configurations, see below for examples or contact your account representative.
Create a file named vera_internal_secret.txt The contents of the file must be provided by the Vera team.
Place the file in the Vera Server Install Directory selected previously.
If upgrading from a version prior to 2024.1, the Docker Compose file in the Vera Server Install Directory must be updated to be compatible with Docker Secrets. These updates can be found in the docker-compose.yml file in step 1 under the vera.web.portal container and the secrets property.
Configure Vera Installation Properties -- Set the following variables in the .env file:
Variable Name | Description | Suggested Value |
---|---|---|
| This is the release tag for the version you want to install. | 2024.1.0 |
| The path to the Vera Server Installation files and folders created above. | /var/lib/vera |
| The path to the Vera Web Portal Installation files and folders created above. | /var/lib/vera |
Configure Vera Server Encryption Key: Vera Server encrypts stored user passwords. You must supply the encryption key for Vera to use to encrypt and decrypt user passwords. The encryption key is stored in the following environment variable of the docker compose file:
Variable Name | Description | Suggested Value |
---|---|---|
| A string used to encrypt stored passwords. | <Enter an encryption key> |
Configure Vera Server JWT Certificate and Password: Vera Server uses JWTs to authenticate users. A certificate must be present on the server in order to validate incoming JWTs. The certificate is stored in the Certificates directory and must be in the PFX format. A password-protected PFX certificate file should have been created during an earlier step of these instructions. Provide the filename and password of the generated PFX file in the following environment variables of the docker compose file:
Variable Name | Description | Suggested Value |
---|---|---|
| The JWT PFX file created above. | jwt.pfx |
| The password for the JWT PFX file created above. | <JWT Certificate Password> |
Warning |
---|
If you use a $ character in your password, you will need to escape the character with another $. E.g. $ would be $$ in the docker-compose file. Quotes may also be needed if using other special characters. |
Configure Ports: Update the following ports based on the setup above:
Variable Name | Description | Suggested Value |
---|---|---|
| HTTP Port for the Vera Server API. | 8080 |
| HTTPS Port for the Vera Server API. | 8443 |
| HTTP Port for the qTest Route Actions Service. | 5100 |
| HTTPS Port for the qTest Route Actions Service. | 6100 |
| HTTP Port for the Jira Route Actions Service. | 5101 |
| HTTPS Port for the Jira Route Actions Service. | 6101 |
| HTTP Port for the Web Portal. | 80 |
| HTTPS Port for the Web Portal. | 443 |
Note |
---|
If you are not using HTTPS, you can leave the HTTPS related variables blank in the .env file. |
Configure Web Portal URL:
Variable Name | Description | Suggested Value |
---|---|---|
| The URL for the Web Portal. | https://<server> |
Enable/Disable HTTPS for the Vera Server (API)
Choose whether to enable or disable support for HTTPS in the Vera Server (API).
To Enable HTTPS for API
Export the server's certificate as a password-protected PFX file, and store the file in the Certificates directory configured previously.
Edit the .env file as follows:
Variable Name | Value |
---|---|
| <PFX file name> example: My-server.pfx |
| <PFX Password> Example: crypticpassword |
To Disable HTTPS for API
Edit the docker-compose.yml file by changing the following configurations:
Under the “ports” section of the following services: vera.server, vera.api.qtest.routeactions, vera.api.jira.routeactions, remove the HTTPS port entry.
Examples:
"${VERA_SERVER_HTTPS_PORT}:5001"
"${VERA_QTEST_HTTPS_PORT}:443"
"${VERA_JIRA_HTTPS_PORT}:443"
Delete the ASPNETCORE_Kestrel__Certificates__Default__Path environment variable configurations.
Delete the ASPNETCORE_Kestrel__Certificates__Default__Password environment variable configurations.
Edit the ASPNETCORE_URLS environment variable configurations for all services as follows:
Old Value: http://+:5000;https://+:5001
New Value: http://+:5000
Enable/Disable HTTPS for the Vera Web Portal
Choose whether to enable or disable support for HTTPS in the Vera Web Portal.
To Enable HTTPS for Web Portal
Obtain a valid SSL certificate registered for the installation machine's domain name.
Export the server's certificate as a password-protected PFX file, and store the file in the Certificates directory configured previously.
Edit the .env file as follows:
Variable Name | Value |
---|---|
| <PFX file name> Example: My-server.pfx |
| <PFX Password> Example: crypticpassword |
Warning |
---|
When creating the PFX file, ensure that you are using OpenSSL version 3.0 or later. The default encryption in previous versions of OpenSSL is no longer accepted by Node.js without providing additional startup parameters. OpenSSL version 3+ uses a newer encryption algorithm that Node.js accepts by default. |
To Disable HTTPS for Web Portal
Delete the web portal's SSL port mapping configuration from the docker-compose.yml file.
Under the “ports” section of the vera.web.portal service, remove the HTTPS port entry:
"${VERA_WEB_PORTAL_HTTPS_PORT}:443"
Delete the VERA_WEB_HTTPS_FILE environment variable configuration.
Delete the VERA_WEB_HTTPS_PASS environment variable configuration.
Configure a MongoDB Container
Edit the .env file as follows:
Variable Name | Description | Suggested Value |
---|---|---|
| The docker tag for the version of MongoDB you want to use. | 6.0.2 |
| The user name for the user that will access MongoDB on behalf of Vera Server. | vera_server_user |
| The password for the Vera Server MongoDB user. | <crypticpassword> |
| The user name for the user that will access MongoDB on behalf of the Web Portal. | vera_web_portal_user |
| The password for the Vera Web Portal MongoDB user. | <crypticpassword> |
Download the MongoDB Docker Compose Setup file:
View file name setup-mongo.yaml Place the file in the Vera Server Data Directory selected previously. (NOTE: It is important that the setup-mongo.yaml file be located in the same directory as the docker-compose.yml file.)
Navigate to the Vera Server Data Directory.
Execute the following command:
docker compose -f ./setup-mongo.yaml up
If you get the error: "Couldn't connect to Docker deamon - is it running?"
Log out of the server, log back in, and start Docker with sudo service docker start
Wait for MongoDB to download and extract, and for the script to complete. When completed, the user will see a message instructing them to press Ctrl+C to exit.
Use Ctrl + C to exit the script and to stop the MongoDB container.
Configure a RabbitMQ Container
Edit the .env file as follows:
Variable Name | Description | Suggested Value |
---|---|---|
| The docker tag for the version of RabbitMQ you want to use. | 3.12.7 |
| The user name for RabbitMQ. | rabbitmq_user |
| A password for the RabbitMQ user. | <crypticpassword> |
Download the RabbitMQ Docker Compose file:
View file name rabbitmq.yml Launch the RabbitMQ container.
Code Block language bash docker-compose -f .\rabbitmq.yml up -d
Info |
---|
RabbitMQ should be left running when restarting other Vera containers and must be running before starting other Vera containers. |
Download/Launch the Vera Containers
Navigate to the Vera Server Install Directory.
Execute the following commands:
Code Block language bash docker login veraserver20190209075900.azurecr.io -u fc12bdd5-6753-40b3-a4da-32bc5d451b39 -p bhfV1g0RhN1O~xS-R-Osv67~HO.zeKMbHp
Code Block language bash docker compose up -d
Wait for the services to start.
You can check container processes by executing
docker ps
– containers should running consistently and appear healthy.
Verify that you can access the Vera Web Portal at the expected port.
Table of Contents
Table of Contents | ||
---|---|---|
|