1、创建目录

sudo mkdir -p /MinIO/Bin /MinIO/Data /MinIO/Conf

 

2、创建专用运行账号

sudo useradd -r -s /sbin/nologin minio-user

 

3、下载二进制并安装到 /MinIO/Bin

cd /tmp
wget https://dl.min.io/server/minio/release/linux-amd64/minio
wget https://dl.min.io/client/mc/release/linux-amd64/mc
sudo mv minio mc /MinIO/Bin/
sudo chmod +x /MinIO/Bin/minio /MinIO/Bin/mc

# 验证
/MinIO/Bin/minio --version
/MinIO/Bin/mc --version

 

4、设置目录权限

sudo chown -R minio-user:minio-user /MinIO/Data /MinIO/Conf
sudo chmod 750 /MinIO/Data
sudo chmod 750 /MinIO/Conf

 

5、写配置文件 /MinIO/Conf/minio.env

sudo tee /MinIO/Conf/minio.env <<'EOF'
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=adminTimeless
MINIO_VOLUMES="/MinIO/Data"
MINIO_OPTS="--address :9000 --console-address :9001"
EOF

sudo chown minio-user:minio-user /MinIO/Conf/minio.env

sudo chmod 600 /MinIO/Conf/minio.env

 

6、创建 systemd 服务

sudo tee /etc/systemd/system/minio.service <<'EOF'
[Unit]
Description=MinIO Object Storage
After=network.target

[Service]
User=minio-user
Group=minio-user
EnvironmentFile=/MinIO/Conf/minio.env
ExecStart=/MinIO/Bin/minio server $MINIO_VOLUMES $MINIO_OPTS
Restart=always
RestartSec=5
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target
EOF

 

7、启动并设置开机自启

sudo systemctl daemon-reload
sudo systemctl enable --now minio
systemctl status minio --no-pager

看到 active (running) 即成功。若失败，查看日志：

sudo journalctl -u minio -n 50 --no-pager

 

8、开放防火墙（如启用 UFW）

# 云服务器还需在安全组放行这两个端口，建议限制来源 IP。
sudo ufw allow 9000/tcp   # S3 API
sudo ufw allow 9001/tcp   # Web 控制台

 

9、访问验证

- API：`http://服务器IP:9000`
- Web 控制台：`http://服务器IP:9001`（用 minio.env 里的账号密码登录）

 

10、Docker 安装

services:
  minio:
    image: minio/minio:latest
    container_name: minio
    restart: unless-stopped
    ports:
      - "9000:9000"   # S3 API
      - "9001:9001"   # Web 控制台
    environment:
      MINIO_ROOT_USER: admin
      MINIO_ROOT_PASSWORD: ChangeMe_StrongPwd123   # 至少 8 位，务必修改
    volumes:
      - /MinIO/Data:/data
      - /MinIO/Conf/certs:/root/.minio/certs      # 可选：HTTPS 证书目录，不用可删
    command: server /data --console-address ":9001"
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    logging:
      driver: json-file
      options:
        max-size: "50m"
        max-file: "3"
    networks:
      - timeless

networks:
  timeless:
    name: timeless
    driver: bridge