Otu esi etinye Zabbix na Rocky Linux na AlmaLinux


Nleba anya nke ọma bụ ihe dị mkpa maka njikwa dị mma nke akụrụngwa IT gị n'ozuzu ya. Ngwọta nleba anya ozugbo na-enye ọhụụ zuru oke nke netwọkụ gị yana arụmọrụ ngwa.

Ọ na-enyere aka ịchọpụta ezigbo oge mgbe njehie na ihe omume mere na zipu ọkwa. Site n'ime nke a, ndị otu na-arụ ọrụ nwere ike ịme usoro ntinye aka n'oge ma hụ na ọ ga-aga n'ihu azụmahịa n'oge kacha nta enwere ike.

Nke a na-enyere gị aka iji akụrụngwa IT gị kachasị mma yana, n'aka nke ya, bulie ego ị ga-enweta. Dị ka ndị dị otú a, mmadụ enweghị ike imebi mkpa ọ dị itinye ego na ngwá ọrụ nlekota nke ọma na nke a pụrụ ịdabere na ya.

Zabbix bụ ngwa nleba anya ọkwa ụlọ ọrụ mepere emepe nke ejiri maka nyochaa akụrụngwa IT gị niile. Ọ nwere ike nyochaa ihe ọ bụla gụnyere ngwaọrụ netwọkụ, ihe nkesa (igwe ojii na n'ime ụlọ) ngwa, ọdụ data, na ọbụna arịa docker. Ọ na-achọpụtakwa mmejọ ma na-eziga ọkwa iji mee ka ndị otu IT rụọ ọrụ ngwa ngwa iji dozie nsogbu ahụ.

N'ime ntuziaka a, anyị ga-elekwasị anya na ntinye nke ngwaọrụ nlekota Zabbix na Rocky Linux/AlmaLinux. N'oge edere ntuziaka a, ụdị Zabbix kachasị ọhụrụ bụ Zabbix 6.0 tupu ewepụtara ya.

Maka ntuziaka a, nke a bụ ihe ị ga-achọ:

  • Ihe atụ nke Rocky Linux nwere ohere SSH.
  • Ihe atụ nke Alma Linux nwere ohere SSH.
  • A haziri onye ọrụ sudo maka ịrụ ọrụ dị mkpa.

Kwụpụ 1: Wụnye LAMP na Rocky/Alma Linux

Zabbix bụ ngwa nlekota nke PHP na-ebugharị na frontend na Java & C na azụ azụ. Ọ na-achọkwa nchekwa data mmekọrịta iji nakọta ma chekwaa data ya. Dị ka nke a, anyị kwesịrị ịwụnye nchịkọta nchịkọta nke anyị ga-etinye Zabbix.

LAMP, mkpụmkpụ maka Linux, Apache, MariaDB/MySQL, na PHP bụ nnukwu aha ezinụlọ na okirikiri ndị nrụpụta. Ọ mejupụtara Apache webụsaịtị, MariaDB ma ọ bụ MySQL (ọdụ data mmekọrịta), yana PHP nke bụ injin scripting n'akụkụ nkesa.

Anyị ga-amalite site na ịwụnye sava weebụ Apache. Iji mee nke a, mebie iwu:

$ sudo dnf install @httpd

Ozugbo arụnyere, malite Apache ma mee ka ọ rụọ ọrụ na mmalite usoro.

$ sudo systemctl start httpd
$ sudo systemctl enable httpd

Iji nyochaa na Apache na-agba ọsọ, mebie iwu:

$ sudo systemctl status httpd

Mmepụta ahụ gosipụtara na arụnyere Apache ma na-arụ ọrụ dịka a tụrụ anya ya.

Dịka e kwuru na mbụ, Zabbix chọrọ nchekwa data mmekọrịta iji chekwaa data ya niile. Anyị ahọrọla ịwụnye MariaDB nyere ntụkwasị obi ya yana ọtụtụ nchekwa na nkwalite arụmọrụ ọ na-enye.

Ụdị Zabbix kachasị ọhụrụ chọrọ ụdị MariaDB 10.5 ka ọ rụọ ọrụ dịka a tụrụ anya ya. Iji malite, ị ga-eme ka ebe nchekwa MariaDB YUM nwee ike.

Yabụ, mepụta faịlụ nchekwa:

$ sudo vim  /etc/yum.repos.d/mariadb.repo

Tapawa ahịrị ndị a.

[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.5/rhel8-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
module_hotfixes=1

Chekwaa mgbanwe wee pụọ na faịlụ nhazi.

Ọzọ, bubata igodo mbinye aka MariaDB GPG:

$ sudo --import https://yum.mariadb.org/RPM-GPG-KEY-MariaDB

N'ikpeazụ, iji wụnye ihe nkesa MariaDB na onye ahịa, mee iwu:

$ sudo dnf install MariaDB-server MariaDB-client

Mgbe echichi zuru ezu, malite MariaDB nkesa ma mee ka ọ malite na-akpaghị aka na buut.

$ sudo systemctl start mariadb
$ sudo systemctl enable mariadb

Kwenye na sava nchekwa data na-agba:

$ sudo systemctl status mariadb

Iji kwado ụdị nke MariaDB arụnyere, mee iwu:

$ mysql -V

N'aka nke ọzọ, ịnwere ike ịbanye na sava nchekwa data dị ka ndị a.

$ sudo mysql -u root -p

A ga-ebipụta ụdị nke MariaDB na ozi nnabata.

Dịka, ahazighị ntọala MariaDB ka ọ bụrụ ndụmọdụ nchekwa achọrọ. Obi dị m ụtọ na MariaDB na-enye edemede mysql_secure_installation maka ịkwalite nchekwa nke sava nchekwa data.

Yabụ, mebie script dị ka egosiri.

$ sudo mysql_secure_installation

A ga-achọrọ gị ịrụ ndepụta ọrụ. Nke mbụ, gbanwee gaa na ngwa mgbakwunye nyocha oghere UNIX.

Maka mkpagharị ndị fọdụrụ, pịnye Y wee kụọ ENTER. Nke a na-enye gị ohere iwepu ndị ọrụ na-amaghị aha, kwe ka ndị ọrụ dịpụrụ adịpụ banye dị ka mgbọrọgwụ wee wepụ nchekwa data ule nke ndị na-agba ọsọ nwere ike irigbu. N'ikpeazụ, bugharịa tebụl ihe ùgwù iji chekwaa mgbanwe.

Ngwa mgbakwunye UNIX_socket na-enye onye ọrụ mgbọrọgwụ ohere ịbanye na sava nchekwa data na-enweghị paswọọdụ. Iji mee ka nyocha paswọọdụ MariaDB, banye na MariaDB:

$ sudo mysql -u root -p

Mgbe ahụ, tọọ mgbọrọgwụ paswọọdụ dị ka ndị a.

set password = password("yourpassword");

Ka ịgbanwee site na nyocha oghere UNIX gaa na nyocha mysql_native_password, mee iwu ahụ.

ALTER USER [email  IDENTIFIED VIA mysql_native_password USING PASSWORD("yourpassword");

Ugbu a, oge ọ bụla ịbanye na ya, a ga-achọrọ ka ịnye paswọọdụ.

Akụkụ ikpeazụ nke ngwugwu LAMP iji wụnye bụ PHP. Enyere nke a na ebe nchekwa AppStream ndabara. Ị nwere ike nyochaa nke a dị ka ndị a:

$ sudo dnf module list PHP

Site na ndabara, PHP 7.2 na-enyere ya aka na ndabara. Anyị kwesịrị ịgbanwe nke a ka ọ bụrụ PHP 7.4.

$ sudo dnf module reset php
$ sudo dnf module install php:7.4

Na-esote, wụnye modul PHP achọrọ maka nrụnye Zabbix.

$ sudo dnf install php php-curl php-fpm php-mysqlnd

Ka ịlele ụdị nke PHP, gbaa ọsọ.

$ php -v

Anyị etinyela ọrụ PHP-FPM (FastCGI Process Manager) bụ mmemme ọzọ ama ama nke PHP FastCGI.

Malite ma mee ya n'oge buut.

$ sudo systemctl start php-fpm
$ sudo systemctl enable php-fpm

Wee chọpụta ọkwa ya.

$ sudo systemctl status php-fpm

N'ebe a, anyị etinyela ngwugwu LAMP nke ọma. Na usoro ndị ọzọ, ga-abanye n'ime ntinye nke Zabbix.

Kwụpụ 2: Wụnye Zabbix na Rocky/Alma Linux

Site na ngwugwu LAMP, Ka anyị tinye Zabbix ugbu a site na ịwụnye ebe nchekwa Zabbix.

$ sudo rpm -Uvh https://repo.zabbix.com/zabbix/5.5/rhel/8/x86_64/zabbix-release-5.5-1.el8.noarch.rpm

Ozugbo etinyere ebe nchekwa ahụ, wụnye sava Zabbix, onye nnọchi anya Zabbix, yana ngwugwu Zabbix metụtara dị ka ndị a.

$ sudo dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-sql-scripts zabbix-selinux-policy zabbix-agent

Mgbe echichi zuru ezu, ịkwesịrị ịmepụta nchekwa data Zabbix na onye ọrụ nchekwa data nke Zabbix ga-eji nweta nchekwa data.

$ sudo mysql -u root -p
CREATE USER [email  IDENTIFIED BY '[email ';

Mgbe ahụ nye onye ọrụ nchekwa data ikike ka ọ rụọ ọrụ niile dị na nchekwa data.

GRANT ALL PRIVILEGES ON zabbix_db.* TO [email ;

Mgbe ahụ megharịa mgbanwe ndị ahụ wee pụọ na ihe nkesa nchekwa data

FLUSH PRIVILEGES;
EXIT;

Ọzọ, bubata schema nchekwa data:

$ sudo zcat /usr/share/doc/zabbix-sql-scripts/mysql/create.sql.gz | mysql -u zabbix_user -p zabbix_db

Mgbe kpaliri maka paswọọdụ, nye paswọọdụ onye ọrụ Zabbix ọ bụghị paswọọdụ akaụntụ mgbọrọgwụ.

Na mgbakwunye, dezie faịlụ nhazi Zabbix

$ sudo vim /etc/zabbix/zabbix_server.conf

Gbaa mbọ hụ na ụkpụrụ mkpụrụ okwu DBNname, DBUser, DBP gosipụtara ụkpụrụ ị nyere maka nchekwa data gị.

DBHost=localhost
DBName=zabbix_db
DBUser=zabbix_user
[email 

Chekwaa mgbanwe wee pụọ na faịlụ nhazi.

Kwụpụ 3: Hazie PHP-FPM na Rocky/Alma Linux

Na-esote, achọrọ ụfọdụ nhazi ọzọ maka ọrụ PHP-FPM. Dezie www.conf faịlụ nhazi.

$ sudo vim /etc/php-fpm.d/www.conf 

Gbaa mbọ hụ na ahịrị ndị a pụtara ka ha dị.

listen = /run/php-fpm/www.sock
 
user = apache
group = apache

listen.allowed_clients = 0.0.0.0
listen.owner = apache
listen.group = apache
listen.mode = 0660
pm = dynamic

Chekwaa mgbanwe ndị ahụ wee pụọ na faịlụ ahụ.

Na mgbakwunye, ezipụta ntọala mpaghara oge na faịlụ nhazi Zabbix.conf.

$ sudo vim /etc/php-fpm.d/zabbix.conf

Tinye ahịrị egosiri.

php_value[date.timezone] = Africa/Nairobi

Chekwa ma pụọ.

Ka itinye mgbanwe niile emere, malitegharịa ọrụ niile dịka egosiri

$ sudo systemctl restart zabbix-server zabbix-agent httpd php-fpm

Ọzọkwa, tụlee ime ka ha nwee ike ịmalite.

$ sudo systemctl enable zabbix-server zabbix-agent httpd php-fpm

Kwụpụ 4: Hazie SELinux & Firewall na Rocky/Alma Linux

Ịkwesịrị ịtọ SELinux ka ọ bụrụ ikike iji nweta ihu ihu site na ihe nchọgharị. Iji mee nke ahụ, mee iwu a:

$ sudo sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config

Na-esote, gaba na firewall ma kwe ka ọrụ HTTP tinyere ọdụ ụgbọ mmiri 10050 na 10051 nke sava Zabbix na onye nnọchi anya na-ege ntị.

$ sudo firewall-cmd --add-port=80/tcp --permanent
$ sudo firewall-cmd --add-port={10050,10051}/tcp --permanent
$ sudo firewall-cmd --reload

Kwụpụ 5: Nwụnye Zabbix zuru ezu na Rocky/Alma Linux

N'ikpeazụ, malite ihe nchọgharị gị, wee gaa na URL egosiri

http://server-ip/zabbix

Ibe mbụ nke na-ekele gị bụ ibe nnabata Zabbix nke na-egosipụta ụdị nke ị na-etinye n'atụghị egwu. Họrọ asụsụ nwụnye wee pịa bọtịnụ 'Ọzọ nzọụkwụ'.

N'ime ndepụta nke ihe achọrọ, pịgharịa gaa na ala wee hụ na ihe niile achọrọ ga-enweta akara 'OK' na kọlụm ikpeazụ. Ọ bụ iwu na ihe niile achọrọ. Mgbe ahụ pịa bọtịnụ 'Next Step'.

Na ibe 'Hazie Njikọ DB'. Dejupụta nkọwa nchekwa data gị. Maka ọdụ ụgbọ mmiri data, hapụ ya na 0. Pịa 'Nzọụkwụ ọzọ'.

Wee tinye aha nkesa gị, kwado mpaghara oge gị wee nweere onwe gị ịhọrọ isiokwu masịrị gị. Mgbe ahụ pịa 'Nzọụkwụ ọzọ'.

Kwado ntọala niile ma ọ bụrụ na ihe niile dị mma, pịa 'Nzọụkwụ ọzọ' iji mechaa nrụnye.

Ọ bụrụ na ntọala niile ị nyere ziri ezi, ị ga-enweta ozi ekele na-agwa gị maka ntọlite ihu Zabbix na-aga nke ọma. Pịa bọtịnụ 'N'ikpeazụ'.

Nke a na-eduga gị na ibe nbanye Zabbix. Jiri nzere ndị a banye:

Admin:	Admin
Password:   zabbix

Wee pịa 'Banye' iji nweta dashboard Zabbix. Ị nwere ike ịgbanwe paswọọdụ ma emechaa maka nchekwa agbakwunyere, yabụ echegbula maka nke ahụ.

N'ikpeazụ, ị ga-enweta dashboard nke Zabbix.

Ma ebe ahụ ị nwere ya. Anyị etinyela ngwa nyocha Zabbix nke ọma na Rocky Linux/AlmaLinux.