Icinga: Iran T’okan T’ii Orisun Olupin Server Server Linux fun RHEL/CentOS 7.0

Icinga jẹ irinṣẹ ibojuwo orisun ṣiṣii ti ode oni ti o bẹrẹ lati orita kan Nagios , ati ni bayi o ni awọn ẹka ti o jọra meji, Icinga 1 ati Icinga 2 . Ohun ti ọpa yii ṣe ni, kii ṣe yatọ si Nagios nitori otitọ pe o tun nlo awọn afikun Nagios ati awọn ifikun-ọrọ ati paapaa awọn faili iṣeto lati ṣayẹwo ati ṣetọju awọn iṣẹ nẹtiwọọki ati awọn ọmọ-ogun, ṣugbọn diẹ ninu awọn iyatọ ni a le rii lori awọn atọkun wẹẹbu, paapaa lori wiwo wẹẹbu tuntun, agbara iroyin ati idagbasoke awọn afikun.

Koko yii yoo ni idojukọ lori fifi sori ipilẹ ti Icinga 1 Irinṣẹ Abojuto lati awọn alakomeji lori CentOS tabi RHEL 7 , ni lilo RepoForge (ti a mọ tẹlẹ bi RPMforge) awọn ibi ipamọ fun CentOS 6, pẹlu wiwo wẹẹbu kilasika ti o waye nipasẹ Apache Webserver ati lilo awọn afikun ohun elo Nagios ti yoo fi sori ẹrọ lori ẹrọ rẹ.

Ka Tun : Ṣafikun Irinṣẹ Abojuto Abojuto ni RHEL/CentOS

Ipilẹ LAMP fifi sori ẹrọ lori RHEL/CentOS 7.0 laisi MySQL ati PhpMyAdmin, ṣugbọn pẹlu awọn modulu PHP wọnyi: php-cli
php-pear php-xmlrpc php-xsl php-pdo php-soap php-gd .

  1. Fifi atupa Ipilẹ ni RHEL/CentOS 7.0

Igbesẹ 1: Fifi Ọpa Abojuto Icinga

1. Ṣaaju ki o to tẹsiwaju pẹlu fifi sori ẹrọ Icinga lati awọn alakomeji ṣafikun awọn ibi ipamọ RepoForge lori ẹrọ rẹ nipasẹ ipinfunni aṣẹ atẹle, da lori ẹrọ rẹ.

# rpm -Uvh http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm
# rpm -Uvh http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.i686.rpm

2. Lẹhin ti a ti fi awọn ibi ipamọ RepoForge sori ẹrọ rẹ, bẹrẹ pẹlu fifi sori ipilẹ Icinga laisi wiwo wẹẹbu sibẹsibẹ, nipa ṣiṣe pipaṣẹ atẹle.

# yum install icinga icinga-doc

3. Igbese ti n tẹle ni lati gbiyanju lati fi sori ẹrọ ni wiwo ayelujara Icinga ti a pese nipasẹ icinga-gui package. O dabi pe fun akoko yii package yii ni diẹ ninu awọn ariyanjiyan ti a ko yanju pẹlu CentOS/RHEL 7, ati pe yoo ṣe agbekalẹ awọn aṣiṣe iṣayẹwo idunadura kan, ṣugbọn o le ni ominira lati gbiyanju lati fi sori ẹrọ package naa, boya lakoko yii a ti yanju iṣoro naa.

Ṣi, ti o ba ni awọn aṣiṣe kanna lori ẹrọ rẹ bi awọn aworan ti o wa ni isalẹ fihan ọ, lo ọna atẹle bi a ti ṣapejuwe siwaju, lati ni anfani lati fi sori ẹrọ oju opo wẹẹbu Icinga.

# yum install icinga-gui

4. Ilana lati fi sori ẹrọ package icinga-gui eyiti o pese wiwo wẹẹbu ni atẹle. Akọkọ gba oju opo wẹẹbu package package alakomeji RepoForge nipa lilo pipaṣẹ wget .

# wget http://pkgs.repoforge.org/icinga/icinga-gui-1.8.4-4.el6.rf.x86_64.rpm
# wget http://pkgs.repoforge.org/icinga/icinga-gui-1.8.4-4.el6.rf.i686.rpm

5. Lẹhin ti wget pari gbigba gbigba package naa, ṣẹda itọsọna kan ti a npè ni icinga-gui (o le yan orukọ miiran ti o ba fẹ), gbe icinga-gui alakomeji RPM si folda yẹn , tẹ folda naa ki o jade awọn akoonu package RPM nipasẹ ipinfunni atẹle awọn ofin.

# mkdir icinga-gui
# mv icinga-gui-* icinga-gui
# cd icinga-gui
# rpm2cpio icinga-gui-* | cpio -idmv

6. Bayi pe o ti mu package icinga-gui jade, lo pipaṣẹ ls lati wo oju-iwe akoonu folda - o yẹ ki o mu awọn ilana titun mẹta jade - ati bẹbẹ lọ , usr ati var . Bẹrẹ nipa ṣiṣe didaakọ atunkọ ti gbogbo awọn ilana abajade mẹtta lori ipilẹ eto faili faili rẹ.

# cp -r etc/* /etc/
# cp -r usr/* /usr/
# cp -r var/* /var/

Igbesẹ 2: Ṣatunṣe Faili Iṣeto Apache Icinga ati Awọn igbanilaaye Eto

7. Gẹgẹbi a ti gbekalẹ lori iṣafihan nkan yii, eto rẹ nilo lati ni olupin HTTP Afun ati PHP ti fi sii lati le ni anfani lati ṣiṣe Ifilelẹ Wẹẹbu Icinga.

Lẹhin ti o pari awọn igbesẹ ti o wa loke, faili iṣeto tuntun kan yẹ ki o wa ni bayi lori ọna Apache conf.d ti a npè ni icinga.conf . Lati le ni anfani lati wọle si Icinga lati ipo jijin lati ẹrọ aṣawakiri, ṣii faili iṣeto yii ki o rọpo gbogbo akoonu rẹ pẹlu awọn atunto atẹle.

# nano /etc/httpd/conf.d/icinga.conf

Rii daju pe o rọpo gbogbo akoonu faili pẹlu atẹle.

ScriptAlias /icinga/cgi-bin "/usr/lib64/icinga/cgi"

<Directory "/usr/lib64/icinga/cgi">
#  SSLRequireSSL
   Options ExecCGI
   AllowOverride None
   AuthName "Icinga Access"
   AuthType Basic
   AuthUserFile /etc/icinga/passwd

   <IfModule mod_authz_core.c>
      # Apache 2.4
      <RequireAll>
         Require all granted
         # Require local
         Require valid-user
      </RequireAll>
   </IfModule>

   <IfModule !mod_authz_core.c>
      # Apache 2.2
      Order allow,deny
      Allow from all
      #  Order deny,allow
      #  Deny from all
      #  Allow from 127.0.0.1
      Require valid-user
    </IfModule>
 </Directory>

Alias /icinga "/usr/share/icinga/"

<Directory "/usr/share/icinga/">

#  SSLRequireSSL
   Options None
   AllowOverride All
   AuthName "Icinga Access"
   AuthType Basic
   AuthUserFile /etc/icinga/passwd

   <IfModule mod_authz_core.c>
      # Apache 2.4
      <RequireAll>
         Require all granted
         # Require local
         Require valid-user
      </RequireAll>
   </IfModule>

   <IfModule !mod_authz_core.c>
      # Apache 2.2
      Order allow,deny
      Allow from all
      #  Order deny,allow
      #  Deny from all
      #  Allow from 127.0.0.1
      Require valid-user
   </IfModule>
</Directory>

8. Lẹhin ti o ti ṣatunkọ faili iṣeto Icinga httpd, ṣafikun olumulo eto Afun si ẹgbẹ eto Icinga ati lo awọn igbanilaaye eto atẹle lori awọn ọna eto atẹle.

# usermod -aG icinga apache
# chown -R icinga:icinga /var/spool/icinga/*
# chgrp -R icinga /etc/icinga/*
# chgrp -R icinga /usr/lib64/icinga/*
# chgrp -R icinga /usr/share/icinga/*

9. Ṣaaju ki o to bẹrẹ ilana eto Icinga ati olupin Apache, rii daju pe o tun mu SELinux ẹrọ aabo ṣiṣẹ nipa ṣiṣe pipaṣẹ setenforce 0 ki o jẹ ki awọn ayipada naa wa ni titọ nipasẹ ṣiṣatunkọ /etc/selinux/config faili, yiyi ọrọ SELINUX pada lati ifilọwọ si alaabo .

# nano /etc/selinux/config

Ṣe atunṣe itọsọna SELINUX lati dabi eleyi.

SELINUX=disabled

O tun le lo gba agbara pipaṣẹ lati wo ipo SELinux.

10. Bi igbesẹ ti o kẹhin ṣaaju ki o to bẹrẹ ilana Icinga ati wiwo wẹẹbu, bi odiwọn aabo o le ṣe atunṣe ọrọ igbaniwọle Icinga Admin bayi nipasẹ ṣiṣe pipaṣẹ atẹle, ati lẹhinna bẹrẹ awọn ilana mejeeji.

# htpasswd -cm /etc/icinga/passwd icingaadmin
# systemctl start icinga
# systemctl start httpd

Igbesẹ 3: Fi sori ẹrọ Awọn afikun Nagios ati Wiwọle Icinga Wẹẹbu Wiwọle

11. Ni ibere lati bẹrẹ mimojuto awọn iṣẹ ita gbangba lori awọn ọmọ-ogun pẹlu Icinga, gẹgẹbi HTTP, IMAP, POP3, SSH, DNS, pingi ICMP ati ọpọlọpọ awọn iṣẹ miiran ti o le wọle si intanẹẹti tabi LAN o nilo lati fi sori ẹrọ Nagios Awọn afikun package ti a pese nipasẹ EPEL Awọn ibi ipamọ.

# rpm -Uvh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-6.noarch.rpm
# yum install yum install nagios-plugins nagios-plugins-all

12. Lati buwolu wọle lori Ibanisọrọ Wẹẹbu Icinga, ṣii ẹrọ lilọ kiri ayelujara kan ki o tọka si URL naa http:// system_IP/icinga/. Lo icingaadmin bi orukọ olumulo ati ọrọ igbaniwọle ti o yipada ni iṣaaju ati pe o le rii ipo eto agbegbe rẹ bayi.

Gbogbo ẹ niyẹn! Bayi o ni ipilẹ Icinga pẹlu wiwo oju opo wẹẹbu kilasika - nagios bi - ti fi sii ati ṣiṣe lori eto rẹ. Lilo Awọn ifibọ Nagios o le bẹrẹ bayi ni fifi awọn ọmọ-ogun tuntun kun ati awọn iṣẹ ita lati ṣayẹwo ati atẹle nipa ṣiṣatunkọ awọn faili iṣeto Icinga ti o wa lori ọna /etc/icinga/. Ti o ba nilo lati ṣe atẹle awọn iṣẹ inu lori awọn ọmọ-ogun latọna jijin lẹhinna o gbọdọ fi oluranlowo sori awọn ogun jijin bi NRPE, NSClient ++, SNMP lati ṣajọ data ki o firanṣẹ si ilana akọkọ Icinga.

Ka Bakannaa

  1. Fi NRPE Ohun itanna sii ati Atẹle Awọn ogun Linux jijin
  2. Fi oluranlowo NSClient ++ ati Atẹle Awọn ogun Windows jijin