Project

General

Profile

Install Icinga2 and Icingaweb2 » History » Version 13

Jon Goldberg, 09/18/2017 04:08 PM

1 1 Jon Goldberg
{{last_updated_at}} by {{last_updated_by}}
2
# Install Icinga2 and Icingaweb2
3
4
{{>toc}}
5
6
### Installation (Master Node)
7
8 4 Jon Goldberg
Steps are adapted from [this guide](http://linoxide.com/ubuntu-how-to/install-icinga2-ubuntu-16-04/).
9 1 Jon Goldberg
10 4 Jon Goldberg
#### Install Icinga2
11 11 Jon Goldberg
```bash
12 5 Jon Goldberg
# Install MySQL if you haven't yet
13
14 4 Jon Goldberg
# These lines for Ubuntu 16.04 only:
15
apt install software-properties-common
16
add-apt-repository -y ppa:formorer/icinga
17
apt update
18
apt-get install icinga2
19 5 Jon Goldberg
apt-get install icinga2-ido-mysql
20 4 Jon Goldberg
21
# These 3 lines for Debian 8 only:
22
echo 'deb http://ftp.debian.org/debian jessie-backports main' > /etc/apt/sources.list.d/jessie-backports.list
23
apt-get update
24 1 Jon Goldberg
apt-get -t jessie-backports install icinga2
25 5 Jon Goldberg
apt-get -t jessie-backports install icinga2-ido-mysql
26 4 Jon Goldberg
27
systemctl enable icinga2.service
28 1 Jon Goldberg
systemctl start icinga2.service
29 5 Jon Goldberg
apt install nagios-plugins
30
# nagios-plugins has Samba as a dependency, but you should remove it.
31
apt remove samba-common samba-libs
32
icinga2 feature enable ido-mysql
33
systemctl restart icinga2.service
34
35 4 Jon Goldberg
```
36 1 Jon Goldberg
37
#### Install Icingaweb2
38 11 Jon Goldberg
```bash
39 5 Jon Goldberg
40
# If Ubuntu 16.04, you need to work around this bug: https://bugs.launchpad.net/ubuntu/+source/icingaweb2/+bug/1574250
41 1 Jon Goldberg
# FIRST, uncomment the second line in /etc/php/7.0/mods-available/zend-framework.ini
42
phpenmod zend-framework
43
systemctl restart apache2.service
44 5 Jon Goldberg
# END Ubuntu 16.04 workaround
45
46
apt install icingaweb2
47 4 Jon Goldberg
```
48 6 Jon Goldberg
* Go to http://<your IP>/icingaweb2/setup.
49
* Finish from here: https://linoxide.com/ubuntu-how-to/install-icinga2-ubuntu-16-04, starting with "Configuring Icinga Web2 plugin"
50 1 Jon Goldberg
51
### Configuration
52
53
-   Run `icinga2 node wizard. `Select "N" to create a master node.
54 8 Jon Goldberg
-   Enable the api and command module to allow issuing commands from Icingaweb2 and to allow API:
55
    `icinga2 feature enable api command; service icinga2 restart`
56 1 Jon Goldberg
-   Add an API user for remote checks.  For instance, a user that can
57 9 Jon Goldberg
    receive backupninja checks.  Add this to `/etc/icinga2/conf.d/api-users.conf`:
58 1 Jon Goldberg
59 11 Jon Goldberg
    ```
60 1 Jon Goldberg
    object ApiUser "backupninja" {
61
      password = "<redacted>"
62
      permissions = [
63
        {
64
          permission = "actions/process-check-result"
65
          filter = {{ match("backupninja", service.display_name) }}
66
        }
67
      ]
68
    }
69
    ```
70
71 12 Jon Goldberg
### Open the firewall
72
Open port 5665 on the master node's firewall.  Edit the files in `/etc/iptables` and restart `netfilter-persistent`.
73
74 1 Jon Goldberg
### Install additional checks
75
76
#### Install Plugins
77
78
Place the following two scripts in your plugins directory
79
(`/usr/lib/nagios/plugins`) and ensure they're executable:
80
81 11 Jon Goldberg
-   **check_drupal** - installs with the Drupal "nagios" plugin, also
82 1 Jon Goldberg
    available
83 2 Jon Goldberg
    [here](http://cgit.drupalcode.org/nagios/plain/nagios-plugin/check_drupal?id=7da732e2d4943ec5368243f4cd2e33eb02769f23).
84 11 Jon Goldberg
-   **check_civicrm** - There are two scripts - one for Civi 4.6 and
85 1 Jon Goldberg
    below, another for 4.7 and up.  4.7 version is available
86 10 Jon Goldberg
    [here](https://raw.githubusercontent.com/PalanteJon/check_civicrm/master/check_civicrm.php),
87
    4.6 version is [here](https://raw.githubusercontent.com/aghstrategies/com.aghstrategies.civimonitor/master/check_civicrm.php).
88 11 Jon Goldberg
-   **check_domain** - This does a WHOIS lookup to ensure domain names aren't about to expire.  Install from
89 10 Jon Goldberg
    [here](https://raw.githubusercontent.com/glensc/monitoring-plugin-check_domain/master/check_domain.sh).
90 11 Jon Goldberg
-   **check_rbl** - Check spam blacklists.  File is [here](https://raw.githubusercontent.com/matteocorti/check_rbl/master/check_rbl), also install dependencies:
91 2 Jon Goldberg
    `apt install libreadonly-xs-perl libnagios-plugin-perl libdata-validate-ip-perl libdata-validate-domain-perl libnet-dns-perl`
92 1 Jon Goldberg
93 2 Jon Goldberg
#### Define CheckCommand and Service objects for the new plugins
94 1 Jon Goldberg
95 2 Jon Goldberg
Copy the CheckCommand and Service files from
96 1 Jon Goldberg
`icinga.jmaconsulting.biz:/etc/icinga2/zones.d/global-templates/CheckCommands`
97 2 Jon Goldberg
and `icinga.jmaconsulting.biz:/etc/icinga2/conf.d/services`. See [[Add New Checks to Icinga2]] for details.
98 1 Jon Goldberg
99 13 Jon Goldberg
### Harden the TLS connection
100
Add this line to the bottom of the "api" object in `/etc/icinga2/features-available/api.conf`:
101
```
102
tls_protocolmin = "TLSv1.2"
103
```
104 1 Jon Goldberg
105 2 Jon Goldberg
### Set up vim syntax highlighting on the Icinga2 server
106 11 Jon Goldberg
```bash
107 2 Jon Goldberg
mkdir -p ~/.vim/{syntax,ftdetect}
108
cd ~/.vim/syntax
109
wget https://raw.githubusercontent.com/Icinga/icinga2/master/tools/syntax/vim/syntax/icinga2.vim
110
cd ~/.vim/ftdetect
111
wget https://raw.githubusercontent.com/Icinga/icinga2/master/tools/syntax/vim/ftdetect/icinga2.vim
112
```