Icinga: Kayan Aikin Kulawa na Linux Server Buɗewa na Gaba don RHEL/CentOS 7.0


Icinga kayan aikin buɗaɗɗen tushe ne na zamani wanda ya samo asali daga cokali mai yatsa na Nagios, kuma yanzu yana da rassa guda biyu masu kama da juna, Icinga 1 da Icinga 2. Abin da wannan kayan aiki ke yi shi ne, ba bambanta da Nagios ba saboda gaskiyar cewa har yanzu yana amfani da plugins na Nagios da add-ons har ma da fayilolin sanyi don dubawa da saka idanu ayyukan cibiyar sadarwa da runduna, amma ana iya ganin wasu bambance-bambance a kan musaya na yanar gizo, musamman akan. sabuwar hanyar sadarwa ta yanar gizo, iya ba da rahoto da ci gaban ƙara-kan sauƙi.

Wannan batu zai mayar da hankali kan ainihin shigarwa na Icinga 1 Kayan aikin Kulawa daga binaries akan CentOS ko RHEL 7, ta amfani da RepoForge > (wanda aka fi sani da RPMforge) ma'ajin ajiya na CentOS 6, tare da keɓancewar gidan yanar gizo na gargajiya ta Apache Webserver da kuma amfani da Nagios Plugins waɗanda za a shigar akan tsarin ku.

Karanta Hakanan: Sanya Nagios Monitoring Tool a cikin RHEL/CentOS

Ƙirƙirar LAMP akan RHEL/CentOS 7.0 ba tare da MySQL da PhpMyAdmin ba, amma tare da waɗannan nau'ikan PHP: php-cli
php-pear php-xmlrpc php-xsl php-pdo php-sabulun php-gd.

  1. Shigar da Basic LAMP a cikin RHEL/CentOS 7.0

Mataki 1: Sanya Kayan Aikin Kulawa na Icinga

1. Kafin a ci gaba da shigarwar Icinga daga binaries ƙara RepoForge ma'ajiyar ku akan tsarin ku ta hanyar ba da umarni mai zuwa, dangane da injin ku.

# rpm -Uvh http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
# rpm -Uvh http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.i686.rpm

2. Bayan RepoForge repositories da aka kara a kan tsarin, fara da Icinga asali shigarwa ba tare da yanar gizo dubawa tukuna, ta hanyar gudanar da wadannan umarni.

# yum install icinga icinga-doc

3. Mataki na gaba shine gwada shigar da Icinga web interface wanda aka samar ta hanyar icinga-gui kunshin. Da alama a halin yanzu wannan kunshin yana da wasu batutuwan da ba a warware su ba tare da CentOS/RHEL 7, kuma zai haifar da wasu kurakuran rajistan ma'amala, amma kuna iya jin daɗin ƙoƙarin shigar da kunshin, wataƙila a halin yanzu an warware matsalar.

Har yanzu, idan kun sami kurakurai iri ɗaya akan injin ku kamar yadda hotunan da ke ƙasa ke nuna muku, yi amfani da hanya mai zuwa kamar yadda aka ƙara bayyana, don samun damar shigar da mu'amalar gidan yanar gizon Icinga.

# yum install icinga-gui

4. Hanyar shigar icinga-gui kunshin wanda ke samar da hanyar sadarwa ta yanar gizo shine kamar haka. Da farko zazzage fom ɗin fakitin binary gidan yanar gizon RepoForge ta amfani da umarnin wget.

# wget http://pkgs.repoforge.org/icinga/icinga-gui-1.8.4-4.el6.rf.x86_64.rpm
# wget http://pkgs.repoforge.org/icinga/icinga-gui-1.8.4-4.el6.rf.i686.rpm

5. Bayan wget ya gama zazzage kunshin, ƙirƙirar directory mai suna icinga-gui (zaka iya zaɓar wani suna idan kana so), matsar da icinga-gui RPM binary zuwa wancan babban fayil ɗin. , shigar da babban fayil kuma cire abubuwan da ke cikin kunshin RPM ta hanyar ba da jerin umarni na gaba.

# mkdir icinga-gui
# mv icinga-gui-* icinga-gui
# cd icinga-gui
# rpm2cpio icinga-gui-* | cpio -idmv

6. Yanzu da kuna da fakitin icinga-gui, yi amfani da umarnin ls don ganin abubuwan da ke cikin babban fayil - ya kamata ya haifar da sabbin kundayen adireshi guda uku - da sauransu , usr da var. Fara da aiwatar da kwafin duk kundayen adireshi uku da aka samu akan shimfidar tsarin fayil ɗin tushen tsarin ku.

# cp -r etc/* /etc/
# cp -r usr/* /usr/
# cp -r var/* /var/

Mataki 2: Gyara fayil ɗin Kanfigareshan Icinga Apache da Izinin Tsarin

7. Kamar yadda aka gabatar akan wannan gabatarwar labarin, tsarin ku yana buƙatar shigar da uwar garken HTTP Apache da PHP don samun damar sarrafa Intanet ɗin Icinga.

Bayan kun gama matakan da ke sama, sabon fayil ɗin daidaitawa yakamata ya kasance yanzu akan hanyar Apache conf.d mai suna icinga.conf. Domin samun damar shiga Icinga daga wuri mai nisa daga mai bincike, buɗe wannan fayil ɗin sanyi kuma maye gurbin duk abubuwan da ke ciki tare da saitunan masu zuwa.

# nano /etc/httpd/conf.d/icinga.conf

Tabbatar cewa kun maye gurbin duk abun cikin fayil tare da masu biyowa.

ScriptAlias /icinga/cgi-bin "/usr/lib64/icinga/cgi"

<Directory "/usr/lib64/icinga/cgi">
#  SSLRequireSSL
   Options ExecCGI
   AllowOverride None
   AuthName "Icinga Access"
   AuthType Basic
   AuthUserFile /etc/icinga/passwd

   <IfModule mod_authz_core.c>
      # Apache 2.4
      <RequireAll>
         Require all granted
         # Require local
         Require valid-user
      </RequireAll>
   </IfModule>

   <IfModule !mod_authz_core.c>
      # Apache 2.2
      Order allow,deny
      Allow from all
      #  Order deny,allow
      #  Deny from all
      #  Allow from 127.0.0.1
      Require valid-user
    </IfModule>
 </Directory>

Alias /icinga "/usr/share/icinga/"

<Directory "/usr/share/icinga/">

#  SSLRequireSSL
   Options None
   AllowOverride All
   AuthName "Icinga Access"
   AuthType Basic
   AuthUserFile /etc/icinga/passwd

   <IfModule mod_authz_core.c>
      # Apache 2.4
      <RequireAll>
         Require all granted
         # Require local
         Require valid-user
      </RequireAll>
   </IfModule>

   <IfModule !mod_authz_core.c>
      # Apache 2.2
      Order allow,deny
      Allow from all
      #  Order deny,allow
      #  Deny from all
      #  Allow from 127.0.0.1
      Require valid-user
   </IfModule>
</Directory>

8. Bayan kun gyara fayil ɗin sanyi na Icinga httpd, ƙara mai amfani da tsarin Apache zuwa rukunin tsarin Icinga kuma yi amfani da izini na tsarin akan hanyoyin tsarin gaba.

# usermod -aG icinga apache
# chown -R icinga:icinga /var/spool/icinga/*
# chgrp -R icinga /etc/icinga/*
# chgrp -R icinga /usr/lib64/icinga/*
# chgrp -R icinga /usr/share/icinga/*

9. Kafin fara aiwatar da tsarin Icinga da uwar garken Apache, tabbatar cewa kun kashe hanyar tsaro ta SELinux ta hanyar gudanar da setenforce 0 umarni kuma sanya canje-canjen dindindin ta hanyar gyara / sauransu. /selinux/configfayil, yana canza yanayin SELINUX daga aikawa zuwa an kashe.

# nano /etc/selinux/config

Gyara umarnin SELINUX don yin kama da wannan.

SELINUX=disabled

Hakanan zaka iya amfani da umarnin getenforce don duba halin SELinux.

10. A matsayin mataki na ƙarshe kafin fara aiwatar da Icinga da haɗin yanar gizo, a matsayin ma'aunin tsaro yanzu zaku iya canza kalmar sirri ta Icinga Admin ta hanyar bin umarnin da ke gaba, sannan fara ayyukan biyu.

# htpasswd -cm /etc/icinga/passwd icingaadmin
# systemctl start icinga
# systemctl start httpd

Mataki 3: Shigar Nagios Plugins da Samun damar Intanet na Yanar Gizo na Icinga

11. Domin fara sa ido kan ayyukan waje na jama'a akan ma'aikata tare da Icinga, irin su HTTP, IMAP, POP3, SSH, DNS, ICMP ping da sauran ayyuka da yawa da ake samu daga intanet ko LAN kuna buƙatar shigar da Nagios Plugins Kunshin da EPEL ya samar.

# rpm -Uvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-6.noarch.rpm
# yum install yum install nagios-plugins nagios-plugins-all

12. Don shiga Intanet ɗin Yanar Gizo na Icinga, buɗe mashigar bincike kuma a nuna shi zuwa URL http://system_IP/icinga/. Yi amfani da icingaadmin azaman sunan mai amfani da kalmar sirri da kuka canza a baya kuma zaku iya ganin yanayin tsarin gidan ku.

Shi ke nan! Yanzu kuna da asali na Icinga tare da ƙirar gidan yanar gizo na gargajiya - nagios kamar - shigar da gudana akan tsarin ku. Amfani da Nagios Plugins yanzu zaku iya fara ƙara sabbin runduna da sabis na waje don dubawa da saka idanu ta hanyar gyara fayilolin sanyi na Icinga dake kan hanyar /etc/icinga/. Idan kuna buƙatar saka idanu kan ayyukan cikin gida akan runduna masu nisa to dole ne ku shigar da wakili akan runduna masu nisa kamar NRPE, NSClient ++, SNMP don tattara bayanai kuma aika zuwa babban tsari na Icinga.

Karanta kuma

  1. Shigar da NRPE Plugin kuma Kula da Ma'aikatan Linux Na Nisa
  2. Shigar da Wakilin NSClient++ da Kula da Ma'aikatan Windows na Nisa