Install icinga2 (4) - AKAI TSUKI
check on Server
[root@cent7no06 ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.16.10.25 cent7no06 172.16.10.26 cent7no07 [root@cent7no06 ~]#
firewall setting on Server
[root@cent7no06 ~]# firewall-cmd --permanent --add-port=5665/tcp success [root@cent7no06 ~]# firewall-cmd --permanent --add-port=5665/udp success [root@cent7no06 ~]# firewall-cmd --reload success [root@cent7no06 ~]#
icinga2 node wizard on Server
[root@cent7no06 ~]# icinga2 node wizard Welcome to the Icinga 2 Setup Wizard! We'll guide you through all required configuration details. Please specify if this is a satellite setup ('n' installs a master setup) [Y/n]: n Starting the Master setup routine... Please specify the common name (CN) [cent7no06]: Checking for existing certificates for common name 'cent7no06'... Certificate '/etc/icinga2/pki/cent7no06.crt' for CN 'cent7no06' already existing. Skipping certificate generation. Generating master configuration for Icinga 2. information/cli: API user config file '/etc/icinga2/conf.d/api-users.conf' already exists, not creating config file. 'api' feature already enabled. information/cli: Dumping config items to file '/etc/icinga2/zones.conf'. information/cli: Created backup file '/etc/icinga2/zones.conf.orig'. Please specify the API bind host/port (optional): Bind Host []: Bind Port []: information/cli: Created backup file '/etc/icinga2/features-available/api.conf.orig'. information/cli: Updating constants.conf. information/cli: Created backup file '/etc/icinga2/constants.conf.orig'. information/cli: Updating constants file '/etc/icinga2/constants.conf'. information/cli: Updating constants file '/etc/icinga2/constants.conf'. information/cli: Updating constants file '/etc/icinga2/constants.conf'. Done. Now restart your Icinga 2 daemon to finish the installation! [root@cent7no06 ~]# [root@cent7no06 ~]# systemctl restart icinga2 [root@cent7no06 ~]#
get ticket for client connection
[root@cent7no06 ~]# icinga2 pki ticket --cn 'cent7no07'
check on Client
[root@cent7no07 ~]# cat /etc/redhat-release CentOS Linux release 7.3.1611 (Core) [root@cent7no07 ~]# [root@cent7no07 ~]# getenforce Disabled [root@cent7no07 ~]# cat /etc/sysconfig/selinux | grep -v "^#" | grep -v "^$" SELINUX=disabled SELINUXTYPE=targeted [root@cent7no07 ~]#
[root@cent7no07 ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 172.16.10.25 cent7no06 172.16.10.26 cent7no07 [root@cent7no07 ~]#
firewall setting on Client
[root@cent7no07 ~]# firewall-cmd --permanent --add-port=5665/tcp success [root@cent7no07 ~]# firewall-cmd --permanent --add-port=5665/udp success [root@cent7no07 ~]# firewall-cmd --reload success [root@cent7no07 ~]#
install icinga2 and plugins on Client
[root@cent7no07 ~]# yum install -y https://packages.icinga.com/epel/icinga-rpm-release-7-latest.noarch.rpm ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: icinga-rpm-release noarch 7-2.el7.centos /icinga-rpm-release-7-latest.noarch 2.1 k Transaction Summary ==================================================================================================== Install 1 Package
[root@cent7no07 ~]# yum install -y epel-release ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: epel-release noarch 7-9 extras 14 k Transaction Summary ==================================================================================================== Install 1 Package
[root@cent7no07 ~]# yum install -y icinga2 ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: icinga2 x86_64 2.7.0-1.el7.icinga icinga-stable-release 9.2 k Installing for dependencies: boost-program-options x86_64 1.53.0-27.el7 base 156 k boost-regex x86_64 1.53.0-27.el7 base 300 k boost-system x86_64 1.53.0-27.el7 base 40 k boost-thread x86_64 1.53.0-27.el7 base 57 k icinga2-bin x86_64 2.7.0-1.el7.icinga icinga-stable-release 149 k icinga2-common x86_64 2.7.0-1.el7.icinga icinga-stable-release 126 k icinga2-libs x86_64 2.7.0-1.el7.icinga icinga-stable-release 2.7 M libicu x86_64 50.1.2-15.el7 base 6.9 M Transaction Summary ==================================================================================================== Install 1 Package (+8 Dependent packages)
[root@cent7no07 ~]# yum install -y nagios-plugins-all ==================================================================================================== Package Arch Version Repository Size ==================================================================================================== Installing: nagios-plugins-all x86_64 2.2.1-4git.el7 epel 17 k Installing for dependencies: autogen-libopts x86_64 5.18-5.el7 base 66 k avahi-libs x86_64 0.6.31-17.el7 base 61 k bind-libs x86_64 32:9.9.4-51.el7 updates 1.0 M bind-utils x86_64 32:9.9.4-51.el7 updates 203 k cups-libs x86_64 1:1.6.3-29.el7 base 356 k fping x86_64 3.10-4.el7 epel 46 k libarchive x86_64 3.1.2-10.el7_2 base 318 k libldb x86_64 1.1.29-1.el7 base 128 k libsmbclient x86_64 4.6.2-10.el7_4 updates 129 k libtalloc x86_64 2.1.9-1.el7 base 33 k libtdb x86_64 1.3.12-2.el7 base 47 k libtevent x86_64 0.9.31-1.el7 base 36 k libtirpc x86_64 0.2.4-0.10.el7 base 88 k libwbclient x86_64 4.6.2-10.el7_4 updates 104 k lm_sensors x86_64 3.4.0-4.20160601gitf9185e5.el7 base 140 k lm_sensors-libs x86_64 3.4.0-4.20160601gitf9185e5.el7 base 41 k nagios-common x86_64 4.3.2-8.el7 epel 23 k nagios-plugins x86_64 2.2.1-4git.el7 epel 251 k nagios-plugins-breeze x86_64 2.2.1-4git.el7 epel 18 k nagios-plugins-by_ssh x86_64 2.2.1-4git.el7 epel 44 k nagios-plugins-cluster x86_64 2.2.1-4git.el7 epel 37 k nagios-plugins-dhcp x86_64 2.2.1-4git.el7 epel 44 k nagios-plugins-dig x86_64 2.2.1-4git.el7 epel 44 k nagios-plugins-disk x86_64 2.2.1-4git.el7 epel 45 k nagios-plugins-disk_smb x86_64 2.2.1-4git.el7 epel 21 k nagios-plugins-dns x86_64 2.2.1-4git.el7 epel 45 k nagios-plugins-dummy x86_64 2.2.1-4git.el7 epel 33 k nagios-plugins-file_age x86_64 2.2.1-4git.el7 epel 19 k nagios-plugins-flexlm x86_64 2.2.1-4git.el7 epel 20 k nagios-plugins-fping x86_64 2.2.1-4git.el7 epel 43 k nagios-plugins-game x86_64 2.2.1-4git.el7 epel 39 k nagios-plugins-hpjd x86_64 2.2.1-4git.el7 epel 42 k nagios-plugins-http x86_64 2.2.1-4git.el7 epel 60 k nagios-plugins-icmp x86_64 2.2.1-4git.el7 epel 46 k nagios-plugins-ide_smart x86_64 2.2.1-4git.el7 epel 38 k nagios-plugins-ircd x86_64 2.2.1-4git.el7 epel 20 k nagios-plugins-ldap x86_64 2.2.1-4git.el7 epel 42 k nagios-plugins-load x86_64 2.2.1-4git.el7 epel 39 k nagios-plugins-log x86_64 2.2.1-4git.el7 epel 19 k nagios-plugins-mailq x86_64 2.2.1-4git.el7 epel 22 k nagios-plugins-mrtg x86_64 2.2.1-4git.el7 epel 39 k nagios-plugins-mrtgtraf x86_64 2.2.1-4git.el7 epel 38 k nagios-plugins-mysql x86_64 2.2.1-4git.el7 epel 50 k nagios-plugins-nagios x86_64 2.2.1-4git.el7 epel 39 k nagios-plugins-nt x86_64 2.2.1-4git.el7 epel 45 k nagios-plugins-ntp x86_64 2.2.1-4git.el7 epel 63 k nagios-plugins-ntp-perl x86_64 2.2.1-4git.el7 epel 22 k nagios-plugins-nwstat x86_64 2.2.1-4git.el7 epel 46 k nagios-plugins-oracle x86_64 2.2.1-4git.el7 epel 20 k nagios-plugins-overcr x86_64 2.2.1-4git.el7 epel 41 k nagios-plugins-perl x86_64 2.2.1-4git.el7 epel 18 k nagios-plugins-pgsql x86_64 2.2.1-4git.el7 epel 43 k nagios-plugins-ping x86_64 2.2.1-4git.el7 epel 45 k nagios-plugins-procs x86_64 2.2.1-4git.el7 epel 44 k nagios-plugins-real x86_64 2.2.1-4git.el7 epel 40 k nagios-plugins-rpc x86_64 2.2.1-4git.el7 epel 20 k nagios-plugins-sensors x86_64 2.2.1-4git.el7 epel 18 k nagios-plugins-smtp x86_64 2.2.1-4git.el7 epel 47 k nagios-plugins-snmp x86_64 2.2.1-4git.el7 epel 49 k nagios-plugins-ssh x86_64 2.2.1-4git.el7 epel 40 k nagios-plugins-swap x86_64 2.2.1-4git.el7 epel 38 k nagios-plugins-tcp x86_64 2.2.1-4git.el7 epel 47 k nagios-plugins-time x86_64 2.2.1-4git.el7 epel 40 k nagios-plugins-ups x86_64 2.2.1-4git.el7 epel 42 k nagios-plugins-users x86_64 2.2.1-4git.el7 epel 36 k nagios-plugins-wave x86_64 2.2.1-4git.el7 epel 18 k net-snmp-libs x86_64 1:5.7.2-28.el7 base 748 k net-snmp-utils x86_64 1:5.7.2-28.el7 base 197 k ntp x86_64 4.2.6p5-25.el7.centos.2 base 547 k ntpdate x86_64 4.2.6p5-25.el7.centos.2 base 86 k perl x86_64 4:5.16.3-292.el7 base 8.0 M perl-Carp noarch 1.26-244.el7 base 19 k perl-Encode x86_64 2.51-7.el7 base 1.5 M perl-Exporter noarch 5.68-3.el7 base 28 k perl-File-Path noarch 2.09-2.el7 base 26 k perl-File-Temp noarch 0.23.01-3.el7 base 56 k perl-Filter x86_64 1.49-3.el7 base 76 k perl-Getopt-Long noarch 2.40-2.el7 base 56 k perl-HTTP-Tiny noarch 0.033-3.el7 base 38 k perl-PathTools x86_64 3.40-5.el7 base 82 k perl-Pod-Escapes noarch 1:1.04-292.el7 base 51 k perl-Pod-Perldoc noarch 3.20-4.el7 base 87 k perl-Pod-Simple noarch 1:3.28-4.el7 base 216 k perl-Pod-Usage noarch 1.63-3.el7 base 27 k perl-Scalar-List-Utils x86_64 1.27-248.el7 base 36 k perl-Socket x86_64 2.010-4.el7 base 49 k perl-Storable x86_64 2.45-3.el7 base 77 k perl-Text-ParseWords noarch 3.29-4.el7 base 14 k perl-Time-HiRes x86_64 4:1.9725-3.el7 base 45 k perl-Time-Local noarch 1.2300-2.el7 base 24 k perl-constant noarch 1.27-2.el7 base 19 k perl-libs x86_64 4:5.16.3-292.el7 base 688 k perl-macros x86_64 4:5.16.3-292.el7 base 43 k perl-parent noarch 1:0.225-244.el7 base 12 k perl-podlators noarch 2.5.1-3.el7 base 112 k perl-threads x86_64 1.87-4.el7 base 49 k perl-threads-shared x86_64 1.43-6.el7 base 39 k postgresql-libs x86_64 9.2.23-1.el7_4 updates 233 k qstat x86_64 2.11-13.20080912svn311.el7 epel 167 k rpcbind x86_64 0.2.0-42.el7 base 59 k samba-client x86_64 4.6.2-10.el7_4 updates 598 k samba-client-libs x86_64 4.6.2-10.el7_4 updates 4.7 M samba-common noarch 4.6.2-10.el7_4 updates 197 k samba-common-libs x86_64 4.6.2-10.el7_4 updates 164 k Updating for dependencies: bind-libs-lite x86_64 32:9.9.4-51.el7 updates 732 k bind-license noarch 32:9.9.4-51.el7 updates 84 k krb5-libs x86_64 1.15.1-8.el7 base 747 k Transaction Summary ==================================================================================================== Install 1 Package (+104 Dependent packages) Upgrade ( 3 Dependent packages)
icinga2 node wizard on Client
[root@cent7no07 ~]# icinga2 node wizard Welcome to the Icinga 2 Setup Wizard! We'll guide you through all required configuration details. Please specify if this is a satellite setup ('n' installs a master setup) [Y/n]: Y Starting the Node setup routine... Please specify the common name (CN) [cent7no07]: Please specify the master endpoint(s) this node should connect to: Master Common Name (CN from your master setup): cent7no06 Do you want to establish a connection to the master from this node? [Y/n]: Y Please fill out the master connection information: Master endpoint host (Your master's IP address or FQDN): cent7no06 Master endpoint port [5665]: Add more master endpoints? [y/N]: N Please specify the master connection for CSR auto-signing (defaults to master endpoint host): Host [cent7no06]: Port [5665]: information/base: Writing private key to '/etc/icinga2/pki/cent7no07.key'. information/base: Writing X509 certificate to '/etc/icinga2/pki/cent7no07.crt'. information/cli: Fetching public certificate from master (cent7no06, 5665): Certificate information: *snip* Is this information correct? [y/N]: y information/cli: Received trusted master certificate. Please specify the request ticket generated on your Icinga 2 master. (Hint: # icinga2 pki ticket --cn 'cent7no07'): (ticket generated from master) information/cli: Requesting certificate with ticket '(ticket generated from master)'. information/cli: Created backup file '/etc/icinga2/pki/cent7no07.crt.orig'. information/cli: Writing signed certificate to file '/etc/icinga2/pki/cent7no07.crt'. information/cli: Writing CA certificate to file '/etc/icinga2/pki/ca.crt'. Please specify the API bind host/port (optional): Bind Host []: Bind Port []: Accept config from master? [y/N]: y Accept commands from master? [y/N]: y information/cli: Disabling the Notification feature. Disabling feature notification. Make sure to restart Icinga 2 for these changes to take effect. information/cli: Enabling the Apilistener feature. Enabling feature api. Make sure to restart Icinga 2 for these changes to take effect. information/cli: Created backup file '/etc/icinga2/features-available/api.conf.orig'. information/cli: Generating local zones.conf. information/cli: Dumping config items to file '/etc/icinga2/zones.conf'. information/cli: Created backup file '/etc/icinga2/zones.conf.orig'. information/cli: Updating constants.conf. information/cli: Created backup file '/etc/icinga2/constants.conf.orig'. information/cli: Updating constants file '/etc/icinga2/constants.conf'. information/cli: Updating constants file '/etc/icinga2/constants.conf'. Done. Now restart your Icinga 2 daemon to finish the installation! [root@cent7no07 ~]#
[root@cent7no07 ~]# systemctl restart icinga2 [root@cent7no07 ~]# systemctl status icinga2