AKAI TSUKI

System development or Technical something

install Docker version 17.09.0-ce

# yum install -y yum-utils \
>   device-mapper-persistent-data \
>   lvm2
*snip*
Installed:
  yum-utils.noarch 0:1.1.31-42.el7

Dependency Installed:
  libxml2-python.x86_64 0:2.9.1-6.el7_2.3           python-chardet.noarch 0:2.2.1-1.el7_1
  python-kitchen.noarch 0:1.1.1-5.el7

Complete!
#
# yum-config-manager \
>     --add-repo \
>     https://download.docker.com/linux/centos/docker-ce.repo
Loaded plugins: fastestmirror
adding repo from: https://download.docker.com/linux/centos/docker-ce.repo
grabbing file https://download.docker.com/linux/centos/docker-ce.repo to /etc/yum.repos.d/docker-ce.repo
repo saved to /etc/yum.repos.d/docker-ce.repo
#
# yum install docker-ce
*snip*
Installed:
  docker-ce.x86_64 0:17.09.0.ce-1.el7.centos

Dependency Installed:
  audit-libs-python.x86_64 0:2.7.6-3.el7             checkpolicy.x86_64 0:2.5-4.el7
  container-selinux.noarch 2:2.21-2.gitba103ac.el7   libcgroup.x86_64 0:0.41-13.el7
  libseccomp.x86_64 0:2.3.1-3.el7                    libsemanage-python.x86_64 0:2.5-8.el7
  libtool-ltdl.x86_64 0:2.4.2-22.el7_3               policycoreutils-python.x86_64 0:2.5-17.1.el7
  python-IPy.noarch 0:0.75-6.el7                     setools-libs.x86_64 0:3.3.8-1.1.el7

Complete!
#
# yum list docker-ce --showduplicates | sort -r
 * updates: ftp.riken.jp
Loading mirror speeds from cached hostfile
Loaded plugins: fastestmirror
Installed Packages
 * extras: ftp.riken.jp
docker-ce.x86_64            17.09.0.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.09.0.ce-1.el7.centos            @docker-ce-stable
docker-ce.x86_64            17.06.2.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.06.1.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.06.0.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.03.2.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.03.1.ce-1.el7.centos            docker-ce-stable
docker-ce.x86_64            17.03.0.ce-1.el7.centos            docker-ce-stable
 * base: ftp.riken.jp
Available Packages
#
# systemctl start docker
#
# docker run hello-world
Unable to find image 'hello-world:latest' locally
latest: Pulling from library/hello-world
5b0f327be733: Pull complete
Digest: sha256:07d5f7800dfe37b8c2196c7b1c524c33808ce2e0f74e7aa00e603295ca9a0972
Status: Downloaded newer image for hello-world:latest

Hello from Docker!
This message shows that your installation appears to be working correctly.

To generate this message, Docker took the following steps:
 1. The Docker client contacted the Docker daemon.
 2. The Docker daemon pulled the "hello-world" image from the Docker Hub.
 3. The Docker daemon created a new container from that image which runs the
    executable that produces the output you are currently reading.
 4. The Docker daemon streamed that output to the Docker client, which sent it
    to your terminal.

To try something more ambitious, you can run an Ubuntu container with:
 $ docker run -it ubuntu bash

Share images, automate workflows, and more with a free Docker ID:
 https://cloud.docker.com/

For more examples and ideas, visit:
 https://docs.docker.com/engine/userguide/

#
# docker --version
Docker version 17.09.0-ce, build afdb6d4
#

start gitlab-ce by docker

ref

docs.gitlab.com

Command

docker run --detach \
 --hostname gitlab.example.com \
 --publish 443:443 --publish 80:80 --publish 1022:22 \
 --name gitlab \
 --restart always \
 --volume /srv/gitlab/config:/etc/gitlab \
 --volume /srv/gitlab/logs:/var/log/gitlab \
 --volume /srv/gitlab/data:/var/opt/gitlab \
 gitlab/gitlab-ce:latest

pull image of gitlab-ce

# docker pull gitlab/gitlab-ce
Using default tag: latest
latest: Pulling from gitlab/gitlab-ce
*snip*
Status: Downloaded newer image for gitlab/gitlab-ce:latest
#
# docker image ls
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
gitlab/gitlab-ce    latest              453d64ae84c7        11 days ago         1.28GB
hello-world         latest              05a3bd381fc2        4 weeks ago         1.84kB
#

start gitlab

# docker run --detach \
>  --hostname gitlab.example.com \
>  --publish 443:443 --publish 80:80 --publish 1022:22 \
>  --name gitlab \
>  --restart always \
>  --volume /srv/gitlab/config:/etc/gitlab \
>  --volume /srv/gitlab/logs:/var/log/gitlab \
>  --volume /srv/gitlab/data:/var/opt/gitlab \
>  gitlab/gitlab-ce:latest
49834fc47143bd4bb50a8a203d00f4d8171c45d3097c9acd65cb6350ab34a955
#

use NFS on CentOS 7

environment

hostname ip node
cent7no12 172.16.10.212 nfs client
cent7no41 172.16.10.241 nfs server

setting for nfs-server

on cent7no41

# yum -y install nfs-utils

# vi /etc/idmapd.conf

Domain = cent7no41

# mkdir -p /home/nfs
# chmod a+w /home/nfs
# ls -ld /home/nfs
drwxrwxrwx 4 root root 123 May 10 01:12 /home/nfs
#
# vi /etc/exports
# cat /etc/exports
/home/nfs 172.16.10.0/24(rw)
#

start nfs-server

on cent7no41

# systemctl start rpcbind nfs-server 
# systemctl enable rpcbind nfs-server 

setting for nfs-client and mount

on cent7no12

# yum -y install nfs-utils
# mkdir -p /mnt/nfs
# mount -t nfs 172.16.10.241:/home/nfs /mnt/nfs
# nfsstat -m
/mnt/nfs from 172.16.10.241:/home/nfs
 Flags: rw,relatime,vers=4.1,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=sys,clientaddr=172.16.10.212,local_lock=none,addr=172.16.10.241

# df -hT
Filesystem              Type      Size  Used Avail Use% Mounted on
/dev/mapper/cl-root     xfs        35G  1.6G   34G   5% /
devtmpfs                devtmpfs  1.9G     0  1.9G   0% /dev
tmpfs                   tmpfs     1.9G     0  1.9G   0% /dev/shm
tmpfs                   tmpfs     1.9G   17M  1.9G   1% /run
tmpfs                   tmpfs     1.9G     0  1.9G   0% /sys/fs/cgroup
/dev/sda1               xfs      1014M  182M  833M  18% /boot
tmpfs                   tmpfs     380M     0  380M   0% /run/user/0
172.16.10.241:/home/nfs nfs4       35G  3.3G   32G  10% /mnt/nfs
#

Install icinga2 (5)

Install icinga2 (4) - AKAI TSUKI

check on Server

[root@cent7no06 ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
172.16.10.25 cent7no06
172.16.10.26 cent7no07
[root@cent7no06 ~]#

firewall setting on Server

[root@cent7no06 ~]# firewall-cmd --permanent --add-port=5665/tcp
success
[root@cent7no06 ~]# firewall-cmd --permanent --add-port=5665/udp
success
[root@cent7no06 ~]# firewall-cmd --reload
success
[root@cent7no06 ~]#

icinga2 node wizard on Server

[root@cent7no06 ~]# icinga2 node wizard
Welcome to the Icinga 2 Setup Wizard!

We'll guide you through all required configuration details.



Please specify if this is a satellite setup ('n' installs a master setup) [Y/n]: n
Starting the Master setup routine...
Please specify the common name (CN) [cent7no06]:
Checking for existing certificates for common name 'cent7no06'...
Certificate '/etc/icinga2/pki/cent7no06.crt' for CN 'cent7no06' already existing. Skipping certificate generation.
Generating master configuration for Icinga 2.
information/cli: API user config file '/etc/icinga2/conf.d/api-users.conf' already exists, not creating config file.
'api' feature already enabled.
information/cli: Dumping config items to file '/etc/icinga2/zones.conf'.
information/cli: Created backup file '/etc/icinga2/zones.conf.orig'.
Please specify the API bind host/port (optional):
Bind Host []:
Bind Port []:
information/cli: Created backup file '/etc/icinga2/features-available/api.conf.orig'.
information/cli: Updating constants.conf.
information/cli: Created backup file '/etc/icinga2/constants.conf.orig'.
information/cli: Updating constants file '/etc/icinga2/constants.conf'.
information/cli: Updating constants file '/etc/icinga2/constants.conf'.
information/cli: Updating constants file '/etc/icinga2/constants.conf'.
Done.

Now restart your Icinga 2 daemon to finish the installation!

[root@cent7no06 ~]#

[root@cent7no06 ~]# systemctl restart icinga2
[root@cent7no06 ~]#

get ticket for client connection

[root@cent7no06 ~]# icinga2 pki ticket --cn 'cent7no07'

check on Client

[root@cent7no07 ~]# cat /etc/redhat-release
CentOS Linux release 7.3.1611 (Core)
[root@cent7no07 ~]#

[root@cent7no07 ~]# getenforce
Disabled
[root@cent7no07 ~]# cat /etc/sysconfig/selinux | grep -v "^#" | grep -v "^$"
SELINUX=disabled
SELINUXTYPE=targeted
[root@cent7no07 ~]#
[root@cent7no07 ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
172.16.10.25 cent7no06
172.16.10.26 cent7no07
[root@cent7no07 ~]#

firewall setting on Client

[root@cent7no07 ~]# firewall-cmd --permanent --add-port=5665/tcp
success
[root@cent7no07 ~]# firewall-cmd --permanent --add-port=5665/udp
success
[root@cent7no07 ~]# firewall-cmd --reload
success
[root@cent7no07 ~]#

install icinga2 and plugins on Client

[root@cent7no07 ~]# yum install -y https://packages.icinga.com/epel/icinga-rpm-release-7-latest.noarch.rpm

====================================================================================================
 Package                Arch       Version            Repository                               Size
====================================================================================================
Installing:
 icinga-rpm-release     noarch     7-2.el7.centos     /icinga-rpm-release-7-latest.noarch     2.1 k

Transaction Summary
====================================================================================================
Install  1 Package
[root@cent7no07 ~]# yum install -y epel-release

====================================================================================================
 Package                     Arch                  Version              Repository             Size
====================================================================================================
Installing:
 epel-release                noarch                7-9                  extras                 14 k

Transaction Summary
====================================================================================================
Install  1 Package
[root@cent7no07 ~]# yum install -y icinga2

====================================================================================================
 Package                    Arch        Version                    Repository                  Size
====================================================================================================
Installing:
 icinga2                    x86_64      2.7.0-1.el7.icinga         icinga-stable-release      9.2 k
Installing for dependencies:
 boost-program-options      x86_64      1.53.0-27.el7              base                       156 k
 boost-regex                x86_64      1.53.0-27.el7              base                       300 k
 boost-system               x86_64      1.53.0-27.el7              base                        40 k
 boost-thread               x86_64      1.53.0-27.el7              base                        57 k
 icinga2-bin                x86_64      2.7.0-1.el7.icinga         icinga-stable-release      149 k
 icinga2-common             x86_64      2.7.0-1.el7.icinga         icinga-stable-release      126 k
 icinga2-libs               x86_64      2.7.0-1.el7.icinga         icinga-stable-release      2.7 M
 libicu                     x86_64      50.1.2-15.el7              base                       6.9 M

Transaction Summary
====================================================================================================
Install  1 Package (+8 Dependent packages)
[root@cent7no07 ~]# yum install -y nagios-plugins-all

====================================================================================================
 Package                       Arch        Version                               Repository    Size
====================================================================================================
Installing:
 nagios-plugins-all            x86_64      2.2.1-4git.el7                        epel          17 k
Installing for dependencies:
 autogen-libopts               x86_64      5.18-5.el7                            base          66 k
 avahi-libs                    x86_64      0.6.31-17.el7                         base          61 k
 bind-libs                     x86_64      32:9.9.4-51.el7                       updates      1.0 M
 bind-utils                    x86_64      32:9.9.4-51.el7                       updates      203 k
 cups-libs                     x86_64      1:1.6.3-29.el7                        base         356 k
 fping                         x86_64      3.10-4.el7                            epel          46 k
 libarchive                    x86_64      3.1.2-10.el7_2                        base         318 k
 libldb                        x86_64      1.1.29-1.el7                          base         128 k
 libsmbclient                  x86_64      4.6.2-10.el7_4                        updates      129 k
 libtalloc                     x86_64      2.1.9-1.el7                           base          33 k
 libtdb                        x86_64      1.3.12-2.el7                          base          47 k
 libtevent                     x86_64      0.9.31-1.el7                          base          36 k
 libtirpc                      x86_64      0.2.4-0.10.el7                        base          88 k
 libwbclient                   x86_64      4.6.2-10.el7_4                        updates      104 k
 lm_sensors                    x86_64      3.4.0-4.20160601gitf9185e5.el7        base         140 k
 lm_sensors-libs               x86_64      3.4.0-4.20160601gitf9185e5.el7        base          41 k
 nagios-common                 x86_64      4.3.2-8.el7                           epel          23 k
 nagios-plugins                x86_64      2.2.1-4git.el7                        epel         251 k
 nagios-plugins-breeze         x86_64      2.2.1-4git.el7                        epel          18 k
 nagios-plugins-by_ssh         x86_64      2.2.1-4git.el7                        epel          44 k
 nagios-plugins-cluster        x86_64      2.2.1-4git.el7                        epel          37 k
 nagios-plugins-dhcp           x86_64      2.2.1-4git.el7                        epel          44 k
 nagios-plugins-dig            x86_64      2.2.1-4git.el7                        epel          44 k
 nagios-plugins-disk           x86_64      2.2.1-4git.el7                        epel          45 k
 nagios-plugins-disk_smb       x86_64      2.2.1-4git.el7                        epel          21 k
 nagios-plugins-dns            x86_64      2.2.1-4git.el7                        epel          45 k
 nagios-plugins-dummy          x86_64      2.2.1-4git.el7                        epel          33 k
 nagios-plugins-file_age       x86_64      2.2.1-4git.el7                        epel          19 k
 nagios-plugins-flexlm         x86_64      2.2.1-4git.el7                        epel          20 k
 nagios-plugins-fping          x86_64      2.2.1-4git.el7                        epel          43 k
 nagios-plugins-game           x86_64      2.2.1-4git.el7                        epel          39 k
 nagios-plugins-hpjd           x86_64      2.2.1-4git.el7                        epel          42 k
 nagios-plugins-http           x86_64      2.2.1-4git.el7                        epel          60 k
 nagios-plugins-icmp           x86_64      2.2.1-4git.el7                        epel          46 k
 nagios-plugins-ide_smart      x86_64      2.2.1-4git.el7                        epel          38 k
 nagios-plugins-ircd           x86_64      2.2.1-4git.el7                        epel          20 k
 nagios-plugins-ldap           x86_64      2.2.1-4git.el7                        epel          42 k
 nagios-plugins-load           x86_64      2.2.1-4git.el7                        epel          39 k
 nagios-plugins-log            x86_64      2.2.1-4git.el7                        epel          19 k
 nagios-plugins-mailq          x86_64      2.2.1-4git.el7                        epel          22 k
 nagios-plugins-mrtg           x86_64      2.2.1-4git.el7                        epel          39 k
 nagios-plugins-mrtgtraf       x86_64      2.2.1-4git.el7                        epel          38 k
 nagios-plugins-mysql          x86_64      2.2.1-4git.el7                        epel          50 k
 nagios-plugins-nagios         x86_64      2.2.1-4git.el7                        epel          39 k
 nagios-plugins-nt             x86_64      2.2.1-4git.el7                        epel          45 k
 nagios-plugins-ntp            x86_64      2.2.1-4git.el7                        epel          63 k
 nagios-plugins-ntp-perl       x86_64      2.2.1-4git.el7                        epel          22 k
 nagios-plugins-nwstat         x86_64      2.2.1-4git.el7                        epel          46 k
 nagios-plugins-oracle         x86_64      2.2.1-4git.el7                        epel          20 k
 nagios-plugins-overcr         x86_64      2.2.1-4git.el7                        epel          41 k
 nagios-plugins-perl           x86_64      2.2.1-4git.el7                        epel          18 k
 nagios-plugins-pgsql          x86_64      2.2.1-4git.el7                        epel          43 k
 nagios-plugins-ping           x86_64      2.2.1-4git.el7                        epel          45 k
 nagios-plugins-procs          x86_64      2.2.1-4git.el7                        epel          44 k
 nagios-plugins-real           x86_64      2.2.1-4git.el7                        epel          40 k
 nagios-plugins-rpc            x86_64      2.2.1-4git.el7                        epel          20 k
 nagios-plugins-sensors        x86_64      2.2.1-4git.el7                        epel          18 k
 nagios-plugins-smtp           x86_64      2.2.1-4git.el7                        epel          47 k
 nagios-plugins-snmp           x86_64      2.2.1-4git.el7                        epel          49 k
 nagios-plugins-ssh            x86_64      2.2.1-4git.el7                        epel          40 k
 nagios-plugins-swap           x86_64      2.2.1-4git.el7                        epel          38 k
 nagios-plugins-tcp            x86_64      2.2.1-4git.el7                        epel          47 k
 nagios-plugins-time           x86_64      2.2.1-4git.el7                        epel          40 k
 nagios-plugins-ups            x86_64      2.2.1-4git.el7                        epel          42 k
 nagios-plugins-users          x86_64      2.2.1-4git.el7                        epel          36 k
 nagios-plugins-wave           x86_64      2.2.1-4git.el7                        epel          18 k
 net-snmp-libs                 x86_64      1:5.7.2-28.el7                        base         748 k
 net-snmp-utils                x86_64      1:5.7.2-28.el7                        base         197 k
 ntp                           x86_64      4.2.6p5-25.el7.centos.2               base         547 k
 ntpdate                       x86_64      4.2.6p5-25.el7.centos.2               base          86 k
 perl                          x86_64      4:5.16.3-292.el7                      base         8.0 M
 perl-Carp                     noarch      1.26-244.el7                          base          19 k
 perl-Encode                   x86_64      2.51-7.el7                            base         1.5 M
 perl-Exporter                 noarch      5.68-3.el7                            base          28 k
 perl-File-Path                noarch      2.09-2.el7                            base          26 k
 perl-File-Temp                noarch      0.23.01-3.el7                         base          56 k
 perl-Filter                   x86_64      1.49-3.el7                            base          76 k
 perl-Getopt-Long              noarch      2.40-2.el7                            base          56 k
 perl-HTTP-Tiny                noarch      0.033-3.el7                           base          38 k
 perl-PathTools                x86_64      3.40-5.el7                            base          82 k
 perl-Pod-Escapes              noarch      1:1.04-292.el7                        base          51 k
 perl-Pod-Perldoc              noarch      3.20-4.el7                            base          87 k
 perl-Pod-Simple               noarch      1:3.28-4.el7                          base         216 k
 perl-Pod-Usage                noarch      1.63-3.el7                            base          27 k
 perl-Scalar-List-Utils        x86_64      1.27-248.el7                          base          36 k
 perl-Socket                   x86_64      2.010-4.el7                           base          49 k
 perl-Storable                 x86_64      2.45-3.el7                            base          77 k
 perl-Text-ParseWords          noarch      3.29-4.el7                            base          14 k
 perl-Time-HiRes               x86_64      4:1.9725-3.el7                        base          45 k
 perl-Time-Local               noarch      1.2300-2.el7                          base          24 k
 perl-constant                 noarch      1.27-2.el7                            base          19 k
 perl-libs                     x86_64      4:5.16.3-292.el7                      base         688 k
 perl-macros                   x86_64      4:5.16.3-292.el7                      base          43 k
 perl-parent                   noarch      1:0.225-244.el7                       base          12 k
 perl-podlators                noarch      2.5.1-3.el7                           base         112 k
 perl-threads                  x86_64      1.87-4.el7                            base          49 k
 perl-threads-shared           x86_64      1.43-6.el7                            base          39 k
 postgresql-libs               x86_64      9.2.23-1.el7_4                        updates      233 k
 qstat                         x86_64      2.11-13.20080912svn311.el7            epel         167 k
 rpcbind                       x86_64      0.2.0-42.el7                          base          59 k
 samba-client                  x86_64      4.6.2-10.el7_4                        updates      598 k
 samba-client-libs             x86_64      4.6.2-10.el7_4                        updates      4.7 M
 samba-common                  noarch      4.6.2-10.el7_4                        updates      197 k
 samba-common-libs             x86_64      4.6.2-10.el7_4                        updates      164 k
Updating for dependencies:
 bind-libs-lite                x86_64      32:9.9.4-51.el7                       updates      732 k
 bind-license                  noarch      32:9.9.4-51.el7                       updates       84 k
 krb5-libs                     x86_64      1.15.1-8.el7                          base         747 k

Transaction Summary
====================================================================================================
Install  1 Package  (+104 Dependent packages)
Upgrade             (   3 Dependent packages)

icinga2 node wizard on Client

[root@cent7no07 ~]# icinga2 node wizard
Welcome to the Icinga 2 Setup Wizard!

We'll guide you through all required configuration details.



Please specify if this is a satellite setup ('n' installs a master setup) [Y/n]: Y
Starting the Node setup routine...
Please specify the common name (CN) [cent7no07]:
Please specify the master endpoint(s) this node should connect to:
Master Common Name (CN from your master setup): cent7no06
Do you want to establish a connection to the master from this node? [Y/n]: Y
Please fill out the master connection information:
Master endpoint host (Your master's IP address or FQDN): cent7no06
Master endpoint port [5665]:
Add more master endpoints? [y/N]: N
Please specify the master connection for CSR auto-signing (defaults to master endpoint host):
Host [cent7no06]:
Port [5665]:
information/base: Writing private key to '/etc/icinga2/pki/cent7no07.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/cent7no07.crt'.
information/cli: Fetching public certificate from master (cent7no06, 5665):

Certificate information:

 *snip*

Is this information correct? [y/N]: y
information/cli: Received trusted master certificate.

Please specify the request ticket generated on your Icinga 2 master.
 (Hint: # icinga2 pki ticket --cn 'cent7no07'): (ticket generated from master)
information/cli: Requesting certificate with ticket '(ticket generated from master)'.

information/cli: Created backup file '/etc/icinga2/pki/cent7no07.crt.orig'.
information/cli: Writing signed certificate to file '/etc/icinga2/pki/cent7no07.crt'.
information/cli: Writing CA certificate to file '/etc/icinga2/pki/ca.crt'.
Please specify the API bind host/port (optional):
Bind Host []:
Bind Port []:
Accept config from master? [y/N]: y
Accept commands from master? [y/N]: y
information/cli: Disabling the Notification feature.
Disabling feature notification. Make sure to restart Icinga 2 for these changes to take effect.
information/cli: Enabling the Apilistener feature.
Enabling feature api. Make sure to restart Icinga 2 for these changes to take effect.
information/cli: Created backup file '/etc/icinga2/features-available/api.conf.orig'.
information/cli: Generating local zones.conf.
information/cli: Dumping config items to file '/etc/icinga2/zones.conf'.
information/cli: Created backup file '/etc/icinga2/zones.conf.orig'.
information/cli: Updating constants.conf.
information/cli: Created backup file '/etc/icinga2/constants.conf.orig'.
information/cli: Updating constants file '/etc/icinga2/constants.conf'.
information/cli: Updating constants file '/etc/icinga2/constants.conf'.
Done.

Now restart your Icinga 2 daemon to finish the installation!

[root@cent7no07 ~]# 
[root@cent7no07 ~]# systemctl restart icinga2
[root@cent7no07 ~]# systemctl status icinga2