Zabbix3.4监控平台部署

时间：2022-09-23 16:00:43

环境依赖

  • CentOS 7.3 + PHP5.4 + MariaDB + Nginx
  • Zabbix Server 3.4.1

环境要求

  • 12 CPU ，最少8 CPU
  • 32G 内存，最少16G
  • 1T 硬盘，最少500G，最好用RAID，如果监控的服务器数量较多，建议采用RAID10

安装过程

  • 安装CentOS7.5，分区如下
/boot   500M

swap    16G

/       50G

/var    剩下所有空间，如果做了RAID，建议将RAID划分给 /var
  • 关闭Firewalld和SElinux
# systemctl disable firewalld.service && systemctl stop firewalld.service

# sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config

# setenforce 0
  • 安装zabbix server YUM源
# yum -y install vim wget lsof net-tools -y

# wget http://repo.zabbix.com/zabbix/3.4/rhel/7/x86_64/zabbix-release-3.4-2.el7.noarch.rpm

# rpm -ivh zabbix-release-3.4-2.el7.noarch.rpm

# yum install zabbix-server-mysql zabbix-web-mysql -y
  • 安装Nginx+PHP+MariaDB
# rpm -Uvh http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm

# yum install php php-fpm mariadb mariadb-server nginx -y
  • 复制www目录
# mkdir -p /data/html/zabbix

# cd /usr/share/zabbix/ && cp -r * /data/html/zabbix/

# chown -Rf apache:apache /data/html/zabbix/* && chmod -Rf 755 /data/html/zabbix/*
  • 配置Nginx+HTTPS
生成自签名证书，先创建一个存放证书的目录

# mkdir -p /etc/nginx/cert && cd /etc/nginx/cert

创建服务器私钥，会提示输入一个口令

# openssl genrsa -des3 -out nginx.key 2048

创建签名请求的证书(CSR)

# openssl req -new -key nginx.key -out nginx.csr

加载SSL支持的Nginx并使用上述私钥时除去必须的口令

# cp nginx.key nginx.key.org

# openssl rsa -in nginx.key.org -out nginx.key

标记证书使用上述私钥和CSR

# openssl x509 -req -days 365 -in nginx.csr -signkey nginx.key -out nginx.crt

# openssl dhparam -out dhparams.pem 2048

备份默认配置文件

# cd /etc/nginx/conf.d/ && mv default.conf default.conf.back

编辑新的zabbix.conf

# vim /etc/nginx/conf.d/zabbix.conf

写入以下内容

···

#http

server {

        listen       80;

        server_name  localhost;

        return 301 https://$host$request_uri;

}

#https

server {

         listen 443;

         server_name localhost;

         ssl on;

         ssl_certificate       /etc/nginx/cert/nginx.crt;

         ssl_certificate_key   /etc/nginx/cert/nginx.key;

         ssl_dhparam           /etc/nginx/cert/dhparams.pem;

         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

         ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';

         ssl_prefer_server_ciphers on;

         ssl_session_cache shared:SSL:20m;

         ssl_session_timeout 180m;

         location / {

            root /data/html/zabbix/;

            index index.html index.htm index.php;

        }

         error_page 404 /404.html;

         error_page 500 502 503 504 /50x.html;

         location = /50x.html {

             root /data/html;

        }

          location ~ \.php$ {

            root /data/html/zabbix/;

            fastcgi_pass 127.0.0.1:9000;

            fastcgi_index index.php;

            fastcgi_param SCRIPT_FILENAME /data/html/zabbix/$fastcgi_script_name;

            include fastcgi_params;

       }

}

  • 配置数据库

  • 编辑my.cnf文件，增加以下内容:

[root@Node3 ~]# vim /etc/my.cnf    //编辑my.cnf文件

[mysqld]

datadir=/var/lib/mysql

socket=/var/lib/mysql/mysql.sock

innodb_file_per_table = on  //每个表使用一张单独的表

skip_name_resolve =  on　　//跳过名称反解

# Disabling symbolic-links is recommended to prevent assorted security risks

symbolic-links=0

# Settings user and group are ignored when systemd is used.

# If you need to run mysqld under a different user or group,

# customize your systemd unit file for mariadb according to the

# instructions in http://fedoraproject.org/wiki/Systemd

[mysqld_safe]

log-error=/var/log/mariadb/mariadb.log

pid-file=/var/run/mariadb/mariadb.pid

#

# include all files from the config directory

#

!includedir /etc/my.cnf.d
  • 启动数据库，并设置开机自启动
启动数据库

# systemctl start mariadb.service && systemctl enable mariadb.service

设置数据库root管理员的密码

# mysqladmin -u root password "Talent123"

登录数据库

# mysql -uroot -pTalent123

mysql> create database zabbix character set utf8;    //创建zabbix数据库

mysql> insert into mysql.user(Host,User,Password) values("localhost","zabbix",password("Talent123"));  //添加admin用户

mysql> flush privileges;     //刷新权限表

mysql> grant all privileges on zabbix.* to zabbix@localhost identified by 'Talent123';    //将zabbix授权给admin

mysql> flush privileges;    //刷新权限表

mysql> exit

# cd /usr/share/doc/zabbix-server-mysql-3.4.1

# gunzip create.sql.gz

# mysql -uzabbix -pTalent123 zabbix < create.sql

# systemctl restart mariadb.service

提示

上面导入初始数据库的方法可能存在问题，我是选取了最笨的办法，先下载了zabbix-3.4.1.tar.gz

# wget https://sourceforge.net/projects/zabbix/files/latest/zabbix-3.4.1.tar.gz

# tar -zxvf zabbix-3.4.1.tar.gz

# cd zabbix-3.4.1

导入数据

# mysql -uroot -p zabbix < database/mysql/schema.sql

# mysql -uroot -p zabbix < database/mysql/data.sql

# mysql -uroot -p zabbix < database/mysql/images.sql

# service mariadb restart
  • 配置PHP，修改php.ini
# vim /etc/php.ini

···

date.timezone = Asia/Shanghai

upload_max_filesize 2M

max_execution_time = 300

max_input_time = 300

post_max_size = 32M

memory_limit = 128M

···

启动php-fpm

# service php-fpm start && chkconfig php-fpm on

启动nginx

# systemctl enable nginx.service && systemctl start nginx.service
  • 配置zabbix_server
# vim /etc/zabbix/zabbix_server.conf

DBHost=localhost

DBName=zabbix

DBUser=zabbix

DBPassword=Talent123

启动zabbix server

# service zabbix-server start && chkconfig zabbix-server on
  • 安装zabbix-agent
RHEL6系列按照如下命令安装

# wget http://repo.zabbix.com/zabbix/3.4/rhel/6/x86_64/zabbix-agent-3.4.1-1.el6.x86_64.rpm

# yum install zabbix-agent-3.4.1-1.el6.x86_64.rpm -y

RHEL7系列按照如下命令安装

# wget http://repo.zabbix.com/zabbix/3.4/rhel/7/x86_64/zabbix-agent-3.4.1-1.el7.x86_64.rpm

# yum install zabbix-agent-3.4.1-1.el7.x86_64.rpm -y

修改agent客户端的配置文件

# vim /etc/zabbix/zabbix_agentd.conf

修改y以下地方内容

···

Server=192.168.1.1

ServerActive=192.168.1.1

#Hostname和自己的主机名不一致没关系，但是必须和在zabbix监控平台添加时的主机名一致，否则会产生错误日志

Hostname=ad1.cloud.top

···
  • 启动zabbix-agent客户端服务
# service zabbix-agent start && chkconfig zabbix-agent on

vim /etc/sudoers

Defaults:zabbix    !requiretty

zabbix  ALL=NOPASSWD:ALL

相关文章