I would like to get in to a more SysAdmin role, so I’ve been using a home lab to try to learn new tech. So I spent a few days putting together a step-by-step run through for installing Icinga. This did two things: 1) I had to learned Icinga enough to use it 2) I had to understand installation enough to explain in.
I haven’t been much of a fan of MySQL, particularly since Oracle, so I wanted a PostgreSQL database, which took a bit of research to get it to not bug out. I refined the process down to a few steps.
This is only for Icinga w/ Postrgres on Enterprise Linux derived systems.
Below is the notes I worked from while making the videos. Note that I used Scientific Linux Minimal Installs to start, so I had to install everything I needed as I needed it.
#Server Install Steps
yum -y install httpd gcc glibc glibc-common gd gd-devel make
yum -y install libjpeg libjpeg-devel libpng libpng-devel
yum -y install postgresql postgresql-server libdbi libdbi-devel libdbi-drivers libdbi-dbd-pgsql
yum -y install lynx wget
yum -y install man ntpd
#Add icinga user
useradd -m icinga
passwd icinga
#Configure user for web interface
groupadd icinga-cmd
usermod -a -G icinga-cmd icinga
usermod -a -G icinga-cmd apache
cd /usr/src
#Download Icinga
lynx icinga.org
#Download Plugins
lynx nagiosplugins.org
#Install icinga
tar xzf icinga-1.5.1.tar.gz
cd icinga-1.5.1
./configure --with-command-group=icinga-cmd --enable-idoutils
make all
make fullinstall
make install-config
#Use the sample configs
cd /usr/local/icinga/etc/
cp ido2db.cfg-sample ido2db.cfg
cp idomod.cfg-sample idomod.cfg
#Enable idomod event broker module
vi /usr/local/icinga/etc/icinga.cfg
#Uncomment the example
#Setup the database
service postgresql initdb
service postgresql start
chkconfig postgresql on
su - postgres
> psql
>> CREATE USER icinga;
>> ALTER USER icinga WITH PASSWORD 'icinga';
>> CREATE DATABASE icinga;
> createlang plpgsql icinga;
#Trust
vi /var/lib/pgsql/data/pg_hba.conf
#icinga
local icinga icinga trust
#Reload config
service postgresql reload
#Build the schema
cd /usr/src/icinga-1.5.1/module/idoutils/db/pgsql
psql -U icinga -d icinga < pgsql.sql
#Edit the config to use Postgres
vi /usr/local/icinga/etc/ido2db.cfg
#Install the Classic Web Interface
cd /usr/src/icinga-1.5.1
make cgis
make install-cgis
make install-html
make install-webconf
#Create an htuser
htpasswd -c /usr/local/icinga/etc/htpasswd.users icingaadmin
#Restart Apache
service httpd restart
#Install nagios plugins
cd /usr/src/
tar nagios-plugins-1.4.15.tar.gz
cd nagios-plugins-1.4.15
./configure --prefix=/usr/local/icinga --with-cgiurl=/icinga/cgi-bin --with-htmurl=/icinga --with-nagios-user=icinga --with-nagios-group=icinga
make
make install
#Configure SELinux
#getenforce
#setenforce 0 #go to permissive
chcon -R -t httpd_sys_script_exec_t /usr/local/icinga/sbin/
chcon -R -t httpd_sys_content_t /usr/local/icinga/share/
chcon -t httpd_sys_script_rw_t /usr/local/icinga/var/rw/icinga.cmd
#Startup icinga
service ido2db start
/usr/local/icinga/bin/icinga -v /usr/local/icinga/etc/icinga.cfg
service icinga start
chkconfig --add icinga
chkconfig icinga on
#Open firewall
vim /etc/sysconfig/selinux
iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j ACCEPT
service iptables save
#Install NRPE
cd /usr/src/
wget "https://git.icinga.org/?p=icinga-nrpe.git;a=snapshot;h=HEAD;sf=tgz" -O nrpe.tgz
tar xzf nrpe.tgz
cd icinga-nrpe
yum -y install openssl openssl-devel
./configure --enable-ssl
make all
make install-plugin
cd /usr/local/icinga/etc/objects/
#Add NRPE to the commands
vi commands.cfg
define command {
command_name check_nrpe_command
command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$
}
define command {
command_name check_nrpe_command_args
command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$ -a $ARG2$
}
#add host to objects
#reference object in icinga.cfg
##########
yum -y install php php-cli php-pear php-xmlrpc php-xsl php-pdo php-gd php-ldap php-pgsql
yum -y install epel-release && \
yum -y install php-pear-phing && \
yum -y install php-pear-PHP-CodeSniffer
lynx http://sourceforge.net/projects/icinga/files/icinga-web/
#wget http://sourceforge.net/projects/icinga/files/icinga-web/1.5.2/icinga-web-1.5.2.tar.gz/download
#wget "https://git.icinga.org/?p=icinga-web.git;a=snapshot;h=HEAD;sf=tgz" -O icinga-web.tgz
tar xzvf icinga-web-1.5.2.tar.gz
./configure \
--prefix=/usr/local/icinga-web \
--with-web-user=apache \
--with-web-group=apache \
--with-web-path=/icinga-web \
--with-web-apache-path=/etc/httpd/conf.d \
--with-db-type=pgsql \
--with-db-host=localhost \
--with-db-port=5432 \
--with-db-name=icinga_web \
--with-db-user=icinga_web \
--with-db-pass=icinga_web \
--with-api-subtype=pgsql \
--with-api-port=5432 \
--with-api-db-pass=icinga_web \
--with-conf-folder=etc/conf.d \
--with-log-folder=log \
--with-db-socket=/usr/local/icinga/var/ido.sock \
--with-api-cmd-file=/var/icinga/rw/icinga.cmd
make install
vi /etc/php.ini
#date.timezone = America/New_York
su - postgres
> psql
>> CREATE USER icinga_web;
>> ALTER USER icinga_web WITH PASSWORD 'icinga_web';
>> CREATE DATABASE icinga_web;
#> createlang plpgsql icinga;
vi /var/lib/pgsql/data/pg_hba.conf
#icinga_web
host icinga icinga ::1/128 trust
host icinga_web icinga_web ::1/128 trust
service postgresql reload
make db-initialize
make install-apache-config
make install-done
#disable SELinux for the moment while I figure out the permissions
setenforce 0
#Disable the welcome.conf config
#comment out all the lines in
/etc/httpd/conf.d/welcome.conf
#Load the site
http://host/icinga-web
