Monit - Kayan aiki don Gudanarwa da Kula da Tsarin Linux


Monit shine tushen buɗewa kyauta kuma kayan aiki mai amfani sosai wanda ke saka idanu ta atomatik da sarrafa matakai, fayiloli, kundayen adireshi, checksums, izini, tsarin fayil, da ayyuka kamar Apache, Nginx, MySQL, FTP, SSH, SMTP, da sauransu a cikin UNIX/Linux tushen tsarin kuma yana ba da kyakkyawan aiki mai kulawa da taimako ga masu gudanar da tsarin.

Monit yana da haɗin yanar gizo na abokantaka mai amfani inda zaku iya duba matsayin tsarin kai tsaye da saita matakai ta amfani da sabar gidan yanar gizo ta HTTP(S) ta asali ko ta hanyar mu'amalar layin umarni. Wannan yana nufin dole ne a shigar da sabar gidan yanar gizo kamar Apache ko Nginx akan tsarin ku don samun dama da duba mu'amalar yanar gizo ta monit.

Hakanan kuna iya son: Kayan Aikin Layi na Umurni na 20 don Kula da Ayyukan Linux.

Monit yana da ikon fara tsari idan ba ya gudana, sake farawa tsari idan ba amsawa ba, da dakatar da tsari idan yana amfani da manyan albarkatu. Bugu da ƙari, kuna iya amfani da Monit don saka idanu fayiloli, kundin adireshi, da tsarin fayil don canje-canje, canje-canjen checksum, canjin girman fayil, ko canje-canjen tambarin lokaci.

Tare da Monit, zaku iya saka idanu kan tashar TCP/IP na runduna mai nisa, ka'idojin uwar garken, da ping. Monit yana adana fayil ɗin log ɗinsa da faɗakarwa game da kowane mummunan yanayi na kuskure da matsayin farfadowa.

An rubuta wannan labarin don bayyana jagora mai sauƙi akan shigarwa da daidaitawa na Monit akan rarraba Linux na tushen Debian.

Mataki 1: Sanya Monit a cikin Linux

Ta hanyar tsoho, ba a samun shirin sa ido na Monit daga tsoffin ma'ajin tushen tsarin, kuna buƙatar ƙarawa da ba da damar ma'ajiyar epel na ɓangare na uku don shigar da fakitin monit a ƙarƙashin rarrabawar tushen RHEL kamar CentOS, Rocky Linux, da AlmaLinux.

--------- On RHEL 9 based Systems --------- 
# dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm 

--------- On RHEL 8 based Systems --------- 
# dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

--------- On RHEL 7 based Systems ---------
# yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

Da zarar kun ƙara ma'ajiyar epel, shigar da kunshin Monit ta hanyar aiwatar da yum umarni mai zuwa.

# yum install monit
OR
# dnf install monit  [On Fedora Linux]

Don Ubuntu/Debian/Linux Mint mai amfani zai iya shigarwa cikin sauƙi ta amfani da umarnin da ya dace kamar yadda aka nuna.

$ sudo apt install monit

Mataki 2: Saita Monit a cikin Linux

Monit yana da sauƙin daidaitawa, a zahiri, an ƙirƙiri fayilolin daidaitawa don sauƙin karantawa da sauƙaƙe su don masu amfani su fahimta. An ƙera shi don saka idanu akan ayyukan da ke gudana kowane minti 2 kuma yana adana rajistan ayyukan a cikin /var/log/monit.

Monit yana da haɗin yanar gizo wanda ke gudana akan tashar jiragen ruwa 2812 ta amfani da sabar gidan yanar gizo. Don kunna haɗin yanar gizo kuna buƙatar yin canje-canje a cikin fayil ɗin daidaitawa.

Babban fayil ɗin daidaitawa na monit wanda yake a /etc/monit.conf ƙarƙashin (RedHat/CentOS/Fedora) da /etc/monit/monitrc don (Ubuntu/Debian/Linux Mint).

Bude wannan fayil ta amfani da zaɓin editan ku.

# vi /etc/monitrc
Or
$ sudo nano /etc/monit/monitrc

Bayan haka, ba da amsa ga sashe na gaba kuma ƙara adireshin IP ko sunan yanki na uwar garken ku, ba da damar kowa ya haɗa kuma ya canza mai amfani da kalmar wucewa ko kuna iya amfani da waɗanda aka saba.

set httpd port 2812 and
     use address 0.0.0.0  # only accept connections from localhost
     allow 0.0.0.0/0        # allow localhost to connect to the server and
     allow admin:monit      # require user 'admin' with password 'monit'
     allow @monit           # allow users of group 'monit' to connect (rw)
     allow @users readonly  # allow users of group 'users' to connect readonly

Da zarar kun saita shi, kuna buƙatar farawa, kunnawa da kuma tabbatar da sabis ɗin don sake loda sabon saitunan saitin.

# systemctl start monit
# systemctl enable monit
# systemctl status monit

Yanzu, za ku iya samun dama ga mahaɗin yanar gizon monit ta hanyar kewaya zuwa URL masu zuwa.

http://localhost:2812
OR
http://ip-address:2812
Or
http://example.com:2812

Sannan shigar da sunan mai amfani a matsayin admin da kalmar sirri a matsayin monit. Ya kamata ku sami allo mai kama da wanda ke ƙasa.

Mataki 3: Ƙara Sabis na Linux zuwa Kulawa da Kulawa

Da zarar an saita mu'amalar yanar gizon monit daidai, fara ƙara shirye-shiryen da kuke son saka idanu a cikin/sauransu/monitrc ƙarƙashin (RedHat/CentOS/Fedora) da /etc/monit/monitrc don (Ubuntu/Debian/Linux Mint) a kasa.

Masu biyowa akwai wasu misalan daidaitawa masu amfani don monit, waɗanda zasu iya taimakawa sosai don ganin yadda sabis ke gudana, inda yake adana bayanan martaba, yadda ake farawa da dakatar da sabis, da sauransu.

check process httpd with pidfile /var/run/httpd.pid
group apache
start program = "/usr/bin/systemctl httpd start"
stop program = "/usr/bin/systemctl httpd stop"
if failed host 127.0.0.1 port 80
protocol http then restart
if 5 restarts within 5 cycles then timeout
check process apache with pidfile /run/apache2.pid
start program = "/usr/bin/systemctl apache2 start" with timeout 60 seconds
stop program  = "/usr/bin/systemctl apache2 stop"
check process nginx with pidfile /var/run/nginx.pid
start program = "/usr/bin/systemctl nginx start"
stop program = "/usr/bin/systemctl nginx stop"
check process mysqld with pidfile /var/run/mysqld/mysqld.pid
group mysql
start program = "/usr/bin/systemctl mysqld start"
stop program = "/usr/bin/systemctl mysqld stop"
if failed host 127.0.0.1 port 3306 then restart
if 5 restarts within 5 cycles then timeout
check process sshd with pidfile /var/run/sshd.pid
start program "/usr/bin/systemctl sshd start"
stop program "/usr/bin/systemctl sshd stop"
if failed host 127.0.0.1 port 22 protocol ssh then restart
if 5 restarts within 5 cycles then timeout

Da zarar kun tsara duk shirye-shiryen don saka idanu, duba ma'anar daidaitawa don kurakurai. Idan an sami wasu kurakurai gyara su, ba shi da wahala sosai don gano abin da ba daidai ba. Lokacin da ka sami saƙo kamar Control file syntax OK, ko kuma idan ba ka ga kurakurai ba, za ka iya ci gaba gaba.

# monit -t
Or
$ sudo monit -t

Bayan gyara duk kurakurai masu yuwuwa, zaku iya buga umarni mai zuwa don fara sabis ɗin ci gaba.

# systemctl monit restart
OR
$ sudo systemctl monit restart

Wannan shine yadda ake kallo bayan ƙara duk ayyukan Linux don saka idanu.