Setup With OpenStack Swift

Note: Since Seafile Server 5.0.0, all config files are moved to the central conf folder. Read More.

Seafile supports OpenStack Swift as storage backend since 5.1.0. This backend uses the native Swift API. Previously users can only use the S3-compatibility layer of Swift. That way is obsolete now. The old documentation is still available here.

Prepare

To setup Seafile Professional Server with Swift:

  • Setup the basic Seafile Professional Server following the guide on Download and setup Seafile Professional Server
  • Install and configure memcached. For best performance, Seafile requires install memcached and enable memcache for objects. We recommend to allocate 128MB memory for memcached. Edit /etc/memcached.conf
  1. # Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
  2. # Note that the daemon will grow to this size, but does not start out holding this much
  3. # memory
  4. # -m 64
  5. -m 128

Modify Seafile.conf

Edit seafile.conf, add the following lines:

  1. [block_backend]
  2. name = swift
  3. tenant = yourTenant
  4. user_name = user
  5. password = secret
  6. container = seafile-blocks
  7. auth_host = 192.168.56.31:5000
  8. auth_ver = v2.0
  9. region = yourRegion
  10. memcached_options = --SERVER=192.168.1.134:11211 --POOL-MIN=10 --POOL-MAX=100
  12. [commit_object_backend]
  13. name = swift
  14. tenant = yourTenant
  15. user_name = user
  16. password = secret
  17. container = seafile-commits
  18. auth_host = 192.168.56.31:5000
  19. auth_ver = v2.0
  20. region = yourRegion
  21. memcached_options = --SERVER=192.168.1.134:11211 --POOL-MIN=10 --POOL-MAX=100
  23. [fs_object_backend]
  24. name = swift
  25. tenant = yourTenant
  26. user_name = user
  27. password = secret
  28. container = seafile-fs
  29. auth_host = 192.168.56.31:5000
  30. auth_ver = v2.0
  31. region = yourRegion
  32. memcached_options = --SERVER=192.168.1.134:11211 --POOL-MIN=10 --POOL-MAX=100

The above config is just an example. You should replace the options according to your own environment.

Seafile supports Swift with Keystone as authentication mechanism. The auth_host option is the address and port of Keystone service.The region option is used to select publicURL,if you don’t configure it, use the first publicURL in returning authenticated information.

Seafile also supports Tempauth and Swauth since professional edition 6.2.1. The auth_ver option should be set to v1.0, tenant and region are no longer needed.

It’s recommended to create separate containers for commit, fs, and block objects.

Using memcached cluster

In a cluster environment, you may want to use a memcached cluster. In the above configuration, you have to specify all the memcached server node addresses in seafile.conf

  1. memcached_options = --SERVER=192.168.1.134 --SERVER=192.168.1.135 --SERVER=192.168.1.136 --POOL-MIN=10 --POOL-MAX=100 --RETRY-TIMEOUT=3600

Notice that there is a --RETRY-TIMEOUT=3600 option in the above config. This option is important for dealing with memcached server failures. After a memcached server in the cluster fails, Seafile server will stop trying to use it for “RETRY-TIMEOUT” (in seconds). You should set this timeout to relatively long time, to prevent Seafile from retrying the failed server frequently, which may lead to frequent request errors for the clients.

Use HTTPS connections to Swift

Since Pro 5.0.4, you can use HTTPS connections to Swift. Add the following options to seafile.conf:

  1. [commit_object_backend]
  2. name = swift
  3. ......
  4. use_https = true
  6. [fs_object_backend]
  7. name = swift
  8. ......
  9. use_https = true
  11. [block_backend]
  12. name = swift
  13. ......
  14. use_https = true

Because the server package is built on CentOS 6, if you’re using Debian/Ubuntu, you have to copy the system CA bundle to CentOS’s CA bundle path. Otherwise Seafile can’t find the CA bundle so that the SSL connection will fail.

  1. sudo mkdir -p /etc/pki/tls/certs
  2. sudo cp /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt
  3. sudo ln -s /etc/pki/tls/certs/ca-bundle.crt /etc/pki/tls/cert.pem

Run and Test

Now you can start Seafile by ./seafile.sh start and ./seahub.sh start and visit the website.