如何部署Icinga客户端

Icinga客户端的部署相对于服务器端来说,简单很多。对于服务器端来说,如果要通过以下这种方式来监控服务器,必须包含三个组件,Icinga内核,Icinga插件,NRPE(Nagios Remote Plugin Executor)。对于Icinga客户端来说,只需要部署Icinga插件和NRPE。

如何部署Icinga客户端

icinga 中文化项目的下载地址为:

其中,Icinga插件,NRPE均在icinga plugins目录中。

在这里,我下载了nagios-cn-plugins-2.0.3.tar.xz和icinga-nrpe-2.14.tar.gz。

新建icinga用户

# useradd icinga -s /sbin/nologin

安装nagios-cn-plugins

# cd /usr/src/

# tar xvf /root/nagios-cn-plugins-2.0.3.tar.xz 

# cd nagios-cn-plugins-2.0.3/

# ./configure --prefix=/usr/local/icinga

最后输出如下:

config.status: creating po/Makefile --with-apt-get-command: --with-ping6-command: /usr/sbin/ping6 -n -U -w %d -c %d %s --with-ping-command: /usr/bin/ping -n -U -w %d -c %d %s --with-package-name: nagios-plugins --with-nagios-user: --with-nagios-group: --with-ipv6: yes --with-mysql: no --with-openssl: yes --with-gnutls: no --enable-extra-opts: yes --with-perl: /usr/bin/perl --enable-perl-modules: no --with-cgiurl: /nagios/cgi-bin --with-trusted-path: /bin:/sbin:/usr/bin:/usr/sbin --enable-libtap: no

# make

# make install

设置权限

# chown -R icinga.icinga /usr/local/icinga/

安装NRPE

# cd /usr/src/

# tar xvf /root/icinga-nrpe-2.14.tar.gz 

# cd icinga-nrpe-2.14/

# ./configure 

最后输出如下:

*** Configuration summary for nrpe 2.14 12-21-2012 ***: General Options: ------------------------- NRPE port: 5666 NRPE user: icinga NRPE group: icinga Icinga user: icinga Icinga group: icinga Review the options above for accuracy. If they look okay, type 'make all' to compile the NRPE daemon and client.

按照提示,

# make all

输出结果如下:

*** Compile finished *** make install - This installs files in /usr/local/icinga make install-plugin - This installs init-script files in /usr/local/icinga/libexec make install-init - This installs init-script files in /etc/init.d make install-xinetd - This installs sample-config/nrpe.xinetd in /etc/xinit.d make install-init-freebsd - This installs init-script.freebsd files in /etc/init.d make install-init-debian - This installs init-script.debian files in /etc/init.d make install-init-SUSE - This installs init-script.suse files in /etc/init.d make install-daemon-config - This installs the Nrpe config file in /usr/local/icinga/etc If the NRPE daemon and client compiled without any errors, you can continue with the installation or upgrade process. Read the PDF documentation (NRPE.pdf) for information on the next steps you should take to complete the installation or upgrade.

对于Linux系统,可运行make install, make install-plugin,make install-init,make install-xinetd, make install-daemon-config。各项的具体作用可参考上述的说明。

修改NRPE的配置文件

# vim /usr/local/icinga/etc/nrpe.cfg 

在allowed_hosts后面添加Icinga服务端的地址

allowed_hosts=127.0.0.1,192.168.244.145

启动NRPE服务

# /etc/init.d/icinga-nrpe start

Starting icinga-nrpe (via systemctl): Warning: Unit file of icinga-nrpe.service changed on disk, 'systemctl daemon-reload' recommended. [ OK ]

# systemctl daemon-reload

# /etc/init.d/icinga-nrpe start

查看5666端口是否开启监听

# netstat -ntlup | grep 5666

tcp 0 0 0.0.0.0:5666 0.0.0.0:* LISTEN 26517/nrpe

在服务端上进行验证

# /usr/local/icinga/libexec/check_nrpe -H 192.168.244.146

其中192.168.244.146是客户端的地址

如果输出的是NRPE的版本号:

NRPE v2.14

则代表服务端和客户端已建立通信。

总结:

1. 如果在服务端上进行验证时,报以下错误:

CHECK_NRPE: Error - Could not complete SSL handshake.

一般是NRPE的配置文件没有修改,或防火墙规则阻止了Icinga服务端和NRPE进程之间的连接。

2. 系统账号的shell使用 /sbin/nologin ,此时无法登陆系统,即使给了密码也不行。

内容版权声明:除非注明,否则皆为本站原创文章。

转载注明出处:https://www.heiqu.com/17b6bdb359d6d8831374bb38b5112af3.html