Install Mideye on RHEL, Rocky Linux & AlmaLinux 8/9/10 (RPM)

This guide covers installing Mideye Server on RHEL-based Linux with MariaDB, MySQL or Microsoft SQL Server.

Supported versions: RHEL, Rocky Linux and AlmaLinux 8, 9 and 10

Before you begin

Pre-installation ChecklistHardware, network, and firewall requirements

DownloadsGet the RPM package from the Downloads page

What you’ll need:

• Root or sudo access to the server
• A supported database (MariaDB, MySQL, or SQL Server)
• Network access to the Downloads page
• Firewall port assigned by Mideye Support

---

Quick overview

1. Install the Mideye Server package
2. Install MariaDB or MySQL
3. Create the database and user
4. Connect Mideye Server to the database
5. Start the service
6. Complete the Configuration Wizard

Time required: 15–30 minutes

---

Step 1: Install Mideye Server

1. Update the system packages:

   sudo dnf update -y

2. Download the package from Mideye Server Downloads

3. Copy it to your server:

   scp ~/Downloads/MideyeServer6-x.x.x.el.rpm username@your-server:/tmp/

4. Install the package:

   sudo dnf install /tmp/MideyeServer6-x.x.x.el.rpm

Tip

The package installs to /opt/mideyeserver6/ and creates a systemd service named mideyeserver6.

Note

Mideye Server works with SELinux in enforcing mode. No extra SELinux steps are needed.

---

Step 2: Install the database

Install the database from your operating system’s own packages. It gets security updates together with the rest of the system.

OS	MariaDB	MySQL
RHEL, Rocky Linux, AlmaLinux 8	10.11	8.4 from Oracle’s repository
RHEL, Rocky Linux, AlmaLinux 9	10.11	8.4
RHEL, Rocky Linux, AlmaLinux 10	11.8	8.4

MariaDB

1. Install MariaDB.

   Version 10:

   sudo dnf install mariadb11.8-server

   Version 8 and 9 (the default MariaDB in these versions is too old; select 10.11 first):

   sudo dnf module enable mariadb:10.11
   sudo dnf install mariadb-server

2. Start MariaDB and verify that it’s running:

   sudo systemctl enable --now mariadb
   sudo systemctl status mariadb

MySQL

1. Install MySQL.

   Version 10:

   sudo dnf install mysql8.4-server

   Version 9 (the default MySQL in version 9 is 8.0, which has reached end of life; select 8.4 first):

   sudo dnf module enable mysql:8.4
   sudo dnf install mysql-server

   Version 8: the operating system only has MySQL 8.0, which has reached end of life. Install MySQL 8.4 from Oracle’s repository instead, see MySQL 8.4 on version 8.

2. Start MySQL and verify that it’s running:

   sudo systemctl enable --now mysqld
   sudo systemctl status mysqld

3. Set a password for MySQL’s root user. MySQL from the operating system starts with an empty root password, so every user on the server can log in to MySQL as root until you set one:

   sudo mysql_secure_installation

   The first question is about the VALIDATE PASSWORD component. If you turn it on, every MySQL password must meet its rules, including the one for Mideye Server in Step 3. Then set a root password and answer Yes to the remaining questions.

SQL Server

For Microsoft SQL Server, see the Windows installation guide or connect to an existing SQL Server instance.

Configure the connection in application-prod.yml:

spring:
  datasource:
    url: jdbc:sqlserver://sql-server-host:1433;database=mideyeserver;encrypt=true;trustServerCertificate=true
    username: mideye
    password: your_secure_password

Then continue with Step 5.

Accept connections from the server only

MariaDB and MySQL on RHEL accept connections on all network interfaces. Mideye Server connects through localhost, so the database only needs to accept connections from the server itself.

This step is optional but recommended. With firewalld running (the default on RHEL), other machines can’t reach the database ports unless you open them. Limiting the database to the server itself also protects it if the firewall is turned off or changed later. Skip this step if other servers need to connect to the database, for example several Mideye Servers sharing one database.

MariaDB

sudo tee /etc/my.cnf.d/zz-bind-localhost.cnf > /dev/null <<'EOF'
[mysqld]
# Mideye Server: accept database connections from this server only
bind-address = 127.0.0.1
EOF
sudo systemctl restart mariadb

MySQL

Version 9 and 10:

sudo tee /etc/my.cnf.d/zz-bind-localhost.cnf > /dev/null <<'EOF'
[mysqld]
# Mideye Server: accept database connections from this server only
bind-address = 127.0.0.1
mysqlx-bind-address = 127.0.0.1
EOF
sudo systemctl restart mysqld

Version 8 (MySQL from Oracle’s repository): Oracle’s /etc/my.cnf doesn’t read the files in /etc/my.cnf.d/, so add the settings to /etc/my.cnf itself:

sudo tee -a /etc/my.cnf > /dev/null <<'EOF'

[mysqld]
# Mideye Server: accept database connections from this server only
bind-address = 127.0.0.1
mysqlx-bind-address = 127.0.0.1
EOF
sudo systemctl restart mysqld

Check that port 3306 now only shows 127.0.0.1:

sudo ss -tlnp | grep -E ':3306|:33060'

Shared database clusters

If multiple Mideye Servers share the same database, configure one server as Cluster Leader to avoid cleanup job conflicts. See Shared Database Clusters.

---

Step 3: Create the database and user

Open the database prompt as root:

MariaDB

sudo mariadb

MySQL

mysql -u root -p

Enter the root password from Step 2.

Create the database and a user for Mideye Server. You can change the database name, the username and the password in the example; use the same values in Step 4 (database names are case-sensitive on Linux).

Caution

Use a strong password in production. The example below is just a placeholder.

MariaDB

CREATE DATABASE MideyeServer
  CHARACTER SET utf8mb4
  COLLATE utf8mb4_unicode_ci;
CREATE USER 'mideye'@'localhost' IDENTIFIED BY 'your-secure-password';
GRANT ALL PRIVILEGES ON MideyeServer.* TO 'mideye'@'localhost';
FLUSH PRIVILEGES;
EXIT

MySQL

CREATE DATABASE MideyeServer
  CHARACTER SET utf8mb4
  COLLATE utf8mb4_0900_ai_ci;
CREATE USER 'mideye'@'localhost' IDENTIFIED BY 'your-secure-password';
GRANT ALL PRIVILEGES ON MideyeServer.* TO 'mideye'@'localhost';
FLUSH PRIVILEGES;
EXIT

---

Step 4: Connect Mideye Server to the database

Tip

YAML is whitespace-sensitive. Use spaces (not tabs) and keep the existing indentation.

Edit the configuration file:

sudo nano /opt/mideyeserver6/config/application-prod.yml

The file already has a datasource block. Set the database name in url, username and password to the values from Step 3:

MariaDB

  datasource:
    url: jdbc:mariadb://localhost:3306/MideyeServer
    username: mideye
    password: 'your-secure-password'

MySQL

  datasource:
    url: jdbc:mariadb://localhost:3306/MideyeServer?sslMode=TRUST
    username: mideye
    password: 'your-secure-password'

Use jdbc:mariadb:// for MySQL as well. Mideye Server includes the MariaDB driver, which works with both databases; jdbc:mysql:// doesn’t work.

TLS to the database

• MySQL has TLS turned on. Keep ?sslMode=TRUST: without TLS, MySQL’s default login method fails and Mideye Server doesn’t start.
• MariaDB 11.8 (version 10) has TLS turned on. You can add ?sslMode=TRUST to the URL.
• MariaDB 10.11 (version 8 and 9) has TLS turned off. With ?sslMode=TRUST, Mideye Server doesn’t start (Trying to connect with ssl, but ssl not enabled in the server). To use TLS, first turn it on in MariaDB as described in Enabling TLS for MariaDB Server, then add ?sslMode=TRUST.

---

Step 5: Start Mideye Server

sudo systemctl enable mideyeserver6
sudo systemctl start mideyeserver6

Verify it’s running:

sudo systemctl status mideyeserver6

---

Step 6: Open firewall ports

Mideye Server needs two ports:

Port	Protocol	Purpose
8443	TCP	Web interface
1812	UDP	RADIUS authentication

sudo firewall-cmd --permanent --add-port=8443/tcp
sudo firewall-cmd --permanent --add-port=1812/udp
sudo firewall-cmd --reload

---

Step 7: Complete setup

1. Get the setup challenge code from the logs:

   sudo grep CHALLENGE /opt/mideyeserver6/log/mideyeserver.log

   Mideye Server creates a new setup challenge every time it starts, until the configuration is complete. If the command shows more than one, use the one with the latest timestamp.

2. Open the web interface in your browser:

   https://<server-ip>:8443

3. Complete the Configuration Wizard using the setup challenge code.

Note

The setup wizard requires a firewall port opening from Mideye Support. Contact support@mideye.com if you haven’t received your port assignment.

---

Verify the installation

After completing the setup wizard, verify that Mideye Server is fully operational:

# Check service status
sudo systemctl status mideyeserver6

# Verify web interface is listening
sudo ss -tlnp | grep 8443

# Verify RADIUS is listening (after wizard completion)
sudo ss -ulnp | grep 1812

# Check logs for errors
sudo tail -50 /opt/mideyeserver6/log/mideyeserver.log

---

MySQL 8.4 on version 8

RHEL, Rocky Linux and AlmaLinux 8 only include MySQL 8.0, which has reached end of life. Install MySQL 8.4 from Oracle’s repository: follow A Quick Guide to Using the MySQL Yum Repository and select the MySQL 8.4 LTS series. Then:

• Turn off the operating system’s MySQL module, so that dnf uses Oracle’s packages:

  sudo dnf module disable mysql
  sudo dnf install mysql-community-server
  sudo systemctl enable --now mysqld

• Oracle’s MySQL creates a temporary root password. Find it, and use it when mysql_secure_installation asks for the current password:

  sudo grep 'temporary password' /var/log/mysqld.log
  sudo mysql_secure_installation

• Oracle’s MySQL turns on the VALIDATE PASSWORD component by default, so the password for Mideye Server in Step 3 must have upper and lower case letters, a digit and a special character, and at least 8 characters.

Then continue with Accept connections from the server only.

---

Install without internet access

The Mideye Server package installs without internet access. The database needs its packages and their dependencies. Download them on a connected machine with the same OS release and architecture that doesn’t have the database installed. On version 8 and 9, first select the version with dnf module enable as in Step 2.

sudo dnf install --downloadonly --downloaddir=db-pkgs mariadb11.8-server   # or the package name from Step 2

Copy the db-pkgs folder and the Mideye Server package to the server, then install them from the local files only:

sudo dnf install --disablerepo='*' ./db-pkgs/*.rpm
sudo dnf install --disablerepo='*' ./MideyeServer6-x.x.x.el.rpm

--disablerepo='*' makes dnf ignore its online repositories for this command. Without it, dnf may try to reach them and wait until it times out.

Continue with Step 2 from systemctl enable --now.

---

Upgrade

See Upgrades. After an upgrade you may find application-prod.yml.rpmnew next to application-prod.yml. That’s the new package’s default file; your own configuration is kept and still used. You can compare the two or delete the .rpmnew file.

---

Uninstall

To remove Mideye Server:

sudo dnf remove mideyeserver6

Note

Uninstalling preserves the database, configuration files, and logs. Remove /opt/mideyeserver6/ manually if you want a complete cleanup.

---

File locations

File	Path
Installation directory	/opt/mideyeserver6/
Configuration	/opt/mideyeserver6/config/application-prod.yml
Certificates/Keystore	/opt/mideyeserver6/config/keystore.p12
Logs	/opt/mideyeserver6/log/mideyeserver.log
Systemd service	/usr/lib/systemd/system/mideyeserver6.service

---

Troubleshooting

Service won’t start

Check the logs first:

sudo journalctl -u mideyeserver6 -n 50
sudo tail -100 /opt/mideyeserver6/log/mideyeserver.error

Common issues:

Error	Cause	Solution
Login failed for user	Invalid database credentials	Verify username/password in application-prod.yml
Access denied for user 'mideye'@'localhost'	Invalid database credentials	Verify that the database name, username and password in application-prod.yml match Step 3
Trying to connect with ssl, but ssl not enabled in the server	?sslMode=TRUST with MariaDB 10.11	Remove ?sslMode=TRUST, see TLS to the database
RSA public key is not available client side	MySQL without ?sslMode=TRUST	Add ?sslMode=TRUST to the URL
Failed to load driver class com.mysql.cj.jdbc.Driver	URL starts with jdbc:mysql://	Use jdbc:mariadb://
BadPaddingException	Wrong keystore password	Check certificate passphrase in configuration
Address already in use	Port 8443 is occupied	Stop conflicting service or change port

Database accepts connections from other machines

If sudo ss -tlnp | grep -E ':3306|:33060' shows 0.0.0.0, * or [::] after Accept connections from the server only, open the database prompt as in Step 3 and check which address the database uses, whichever file the setting is in:

SHOW VARIABLES LIKE '%bind_address';

On version 8 with MySQL from Oracle’s repository, the settings must be in /etc/my.cnf, not in /etc/my.cnf.d/.

No SETUP CHALLENGE in logs

The server may not have started correctly. Check for errors:

sudo cat /opt/mideyeserver6/log/mideyeserver.error

RADIUS not responding

RADIUS only starts after completing the setup wizard. Verify with:

sudo ss -ulnp | grep 1812

If the port isn’t listening, check that the wizard was completed successfully.

Can’t access web interface

1. Verify the service is running: sudo systemctl status mideyeserver6
2. Check firewall: sudo firewall-cmd --list-all
3. Test local access: curl -k https://localhost:8443

---

Next steps

Initial ConfigurationComplete the setup wizard and configure authentication

IntegrationsConnect VPNs, firewalls, and applications

Backup & RecoveryProtect your configuration and data

TroubleshootingCommon issues and solutions