Mongodb - Beginner

Some Hands’on with MongoDB

• https://www.mongodb.com/docs/v4.4/introduction/

Run via Docker

docker run -d mongo

Install macOS

brew install mongodb-community

To start mongodb/brew/mongodb-community now and restart at login:

brew services start mongodb/brew/mongodb-community

Or, if you don’t want/need a background service you can just run:

mongod --config /usr/local/etc/mongod.conf

Install OpenBSD

pkg_add mongodb--%44 mongo-tools--

Tune OpenFiles

cat <<'EOF'>> /etc/login.conf

mongod:\
	:openfiles-cur=1024:\
	:openfiles-max=2048:\
	:tc=daemon:
EOF
cap_mkdb /etc/login.conf

-> needs reboot …

Start DB

rcctl enable mongod
rcctl start mongod

connect

mongo
show dbs

> show dbs
admin   0.000GB
config  0.000GB
local   0.000GB

config File

cat /etc/mongodb.conf

# Sample configuration. See
#   https://docs.mongodb.org/manual/administration/configuration/
# for details.

processManagement:
  fork: true
net:
  bindIp: 127.0.0.1
  port: 27017
storage:
  dbPath: /var/mongodb/data
  journal:
    enabled: true
systemLog:
  destination: file
  path: /var/log/mongodb/mongodb.log
  logAppend: true

So far, so good … but we dont not have and security restrictions except binding the mongod to localhost. Let’s change that add enable user based credentials

Create Admin User

Login and create an Admin User:

• dbadmin / dbpass

mongo
use admin
db.createUser(
  {
    user: "dbadmin",
    pwd: "dbpass",
    roles: [ { role: "userAdminAnyDatabase", db: "admin" }, "readWriteAnyDatabase" ]
  }
)

Successfully added user: {
	"user" : "dbadmin",
	"roles" : [
		{
			"role" : "userAdminAnyDatabase",
			"db" : "admin"
		},
		"readWriteAnyDatabase"
	]
}
> 

Update Config File

enable Security in the mongodb config file

cat << EOF >> /etc/mongodb.conf
security:
  # added: $(date)
  authorization: enabled
EOF

restart DB

rcctl restart mongod

Login without Credentials

mongo
MongoDB shell version v4.4.16
connecting to: mongodb://127.0.0.1:27017/?compressors=disabled&gssapiServiceName=mongodb
Implicit session: session { "id" : UUID("c5b12250-f0fc-4767-936e-4d6ebebafa8d") }
MongoDB server version: 4.4.16

show dbs

>

-> no more db’s ..

Login with Credentials

mongo --port 27017  --authenticationDatabase "admin" -u "dbadmin" -p "dbpass"

show dbs

admin   0.000GB
config  0.000GB
local   0.000GB

Login with Credentials, ask for Password

-> ask for password

mongo --authenticationDatabase "admin" -u "dbadmin" -p

Test DB

Let’s Create a Test DB, RW and RO User and some Sample Data

Create RO/RW User

use test
db.createUser(
  {
    user: "rouser",
    pwd:  "dbpass",
    roles: [ { role: "read", db: "test" },
             { role: "read", db: "reporting" } ]
  }
)
db.createUser(
  {
    user: "rwuser",
    pwd:  "dbpass",
    roles: [ { role: "readWrite", db: "test" },
             { role: "readWrite", db: "reporting" } ]
  }
)
exit

Login with RW User

mongo -u "rwuser" --authenticationDatabase "test" -p "dbpass"

and insert some data

db.foo.insert( { x: 1, y: 1 } )

and find them again

db.foo.find()

{ "_id" : ObjectId("63adadafca872bf706191fa6"), "x" : 1, "y" : 1 }

Login with RO User

mongo -u "rouser" --authenticationDatabase "test" -p "dbpass"

and insert some data

db.foo.insert( { a: 1, rb 1 } )

WriteCommandError({
	"ok" : 0,
	"errmsg" : "not authorized on test to execute command { insert: \"foo\", ordered: true, lsid: { id: UUID(\"2a9776e4-1f16-46c9-bbc5-bc4bf39ce9b0\") }, $db: \"test\" }",
	"code" : 13,
	"codeName" : "Unauthorized"
})

that’s fine, but Read should be possibe …

db.foo.find()

{ "_id" : ObjectId("63adadafca872bf706191fa6"), "x" : 1, "y" : 1 }

Show Users and Permissions

db.getUsers()

[
	{
		"_id" : "test.rouser",
		"userId" : UUID("d7a6a703-81bf-4c4f-861d-3933eec5eb9d"),
		"user" : "rouser",
		"db" : "test",
		"roles" : [
			{
				"role" : "read",
				"db" : "test"
			},
			{
				"role" : "read",
				"db" : "reporting"
			}
		],
		"mechanisms" : [
			"SCRAM-SHA-1",
			"SCRAM-SHA-256"
		]
	},
	{
		"_id" : "test.rwuser",
		"userId" : UUID("e63b739d-b4b4-4000-bfff-e7e81fcc20e3"),
		"user" : "rwuser",
		"db" : "test",
		"roles" : [
			{
				"role" : "readWrite",
				"db" : "test"
			},
			{
				"role" : "readWrite",
				"db" : "reporting"
			}
		],
		"mechanisms" : [
			"SCRAM-SHA-1",
			"SCRAM-SHA-256"
		]
	}
]

DropDB

you wann kill DB: test ?

mongo
show dbs
use test
db.dropDatabase()
exit

Backup Script

How to Backup/Export all Mongo DB’s ?

cat << 'EOF' > mongodb_backup_all.sh
#!/usr/bin/env bash

# Backup all Mongo DB's to a Folder and Compress the Files.
# @stoege, 30.12.2022

# Set Output Directory
FOLDER="mongo_backup"
test -d $FOLDER && rm -rf $FOLDER
mkdir -p $FOLDER
cd $FOLDER

# Set the hostname of the MongoDB server
HOST=localhost

# Get a list of all the databases on the server
DBS=$(mongo --quiet --host $HOST --eval "db.getMongo().getDBNames()" |tr -d '[' |tr -d ']' |tr -d ',' |tr -d '"')

# Loop through the list of databases and create a backup for each one
for DB in $DBS
do

  # Create the backup directory for the current database
  mkdir -p $DB

  # Use mongodump to create a binary export of the database
  mongodump --host $HOST --db $DB --out $DB

  # Compress the backup directory
  tar -zcf $DB.tar.gz $DB

  # Remove the uncompressed backup directory
  rm -r $DB

done

exit 0
EOF

Set Permission and Run

chmod u+x mongodb_backup_all.sh
./mongodb_backup_all.sh

Happy MongoDB !

sha256: ee6225d7326bb52da288285294e54f2d6dae14eaa09cf69d2743391a02f138d3