三分鐘學會安裝 LibreNMS SNMP Tools CentOS 7 (Apache)

安裝前準備
CentOS 7 mini install 最小安裝就可以了
之後始用 Telnet 從 SSH 連入 CentOS

這邊的文件照做
要記得更改 Password
其他都複製貼上就可以了

LibreNMS 安裝文件說明
https://docs.librenms.org/Installation/Installation-CentOS-7-Apache/

簡單說明如下

CentOS 7 (Apache)

使用 root 如果不是 root 就要用 sudo

版本最低需求 PHP version is 7.1.3
安裝需要的套件
這些命令就點 Copy to clipboard
再貼到 Telnet console 的畫面執行就可以了
如圖

yum install epel-release

rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm

yum install composer cronie fping git httpd ImageMagick jwhois mariadb mariadb-server mtr MySQL-python net-snmp net-snmp-utils nmap php72w php72w-cli php72w-common php72w-curl php72w-gd php72w-mbstring php72w-mysqlnd php72w-process php72w-snmp php72w-xml php72w-zip python-memcached rrdtool

新增 librenms 使用者

useradd librenms -d /opt/librenms -M -r
usermod -a -G librenms apache

下載 LibreNMS

cd /opt
git clone https://github.com/librenms/librenms.git

設定存取權限 Set permissions

chown -R librenms:librenms /opt/librenms
chmod 770 /opt/librenms
setfacl -d -m g::rwx /opt/librenms/rrd /opt/librenms/logs /opt/librenms/bootstrap/cache/ /opt/librenms/storage/
setfacl -R -m g::rwx /opt/librenms/rrd /opt/librenms/logs /opt/librenms/bootstrap/cache/ /opt/librenms/storage/

安裝 PHP 相關套件 Install PHP dependencies

su - librenms
./scripts/composer_wrapper.php install --no-dev
exit

資料庫 DB Server
設定資料庫 Configure MySQL

systemctl start mariadb
mysql -u root

備註 NOTE: Please change the 'password' below to something secure.
這邊的 password 可以更改成你要的密碼，當然你也可以直接用他當 password
在 WebUI install setup 步ˋ驟中如果有問到 DB 密碼
那麼就是使用你設定的這組密碼

CREATE DATABASE librenms CHARACTER SET utf8 COLLATE utf8_unicode_ci;
CREATE USER 'librenms'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON librenms.* TO 'librenms'@'localhost';
FLUSH PRIVILEGES;
exit

vi /etc/my.cnf

當還在mysql步驟時新增 Within the [mysqld] section please add:

innodb_file_per_table=1
lower_case_table_names=0

systemctl enable mariadb
systemctl restart mariadb

網頁伺服器 Web Server
設定 PHP Configure PHP

Ensure date.timezone is set in php.ini to your preferred time zone. See http://php.net/manual/en/timezones.php for a list of supported timezones. Valid examples are: "America/New_York", "Australia/Brisbane", "Etc/UTC".
php.ini 要設定時區

vi /etc/php.ini

下命令 / 搜尋 timezone = "Asia/Taipei" 我是設定台灣

設定 Apache Configure Apache

使用 vi 產生一個新的檔案 librenms.conf, Create the librenms.conf:

vi /etc/httpd/conf.d/librenms.conf

Add the following config, edit ServerName as required:
新增底下的內容
我還是最簡單的 copy paste
:wq 存檔離開

<VirtualHost *:80>
  DocumentRoot /opt/librenms/html/
  ServerName  librenms.example.com

  AllowEncodedSlashes NoDecode
  <Directory "/opt/librenms/html/">
    Require all granted
    AllowOverride All
    Options FollowSymLinks MultiViews
  </Directory>
</VirtualHost>

NOTE: If this is the only site you are hosting on this server (it should be :)) then you will need to disable the default site. rm -f /etc/httpd/conf.d/welcome.conf
提醒:如果你的Defualt 網頁有 welcome.conf 檔
你要下 rm -f /etc/httpd/conf.d/welcome.conf 刪除該檔

systemctl enable httpd
systemctl restart httpd

設定 SELinux

安裝管理 SELinux 工具 Install the policy tool for SELinux:

yum install policycoreutils-python

設定 LibreNMS 所需要的項目 Configure the contexts needed by LibreNMS:

semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/logs(/.)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/logs(/.)?'
restorecon -RFvv /opt/librenms/logs/
semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/rrd(/.)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/rrd(/.)?'
restorecon -RFvv /opt/librenms/rrd/
semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/storage(/.)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/storage(/.)?'
restorecon -RFvv /opt/librenms/storage/
semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/bootstrap/cache(/.)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/bootstrap/cache(/.)?'
restorecon -RFvv /opt/librenms/bootstrap/cache/
setsebool -P httpd_can_sendmail=1

設定 Allow fping

Create the file http_fping.tt with the following contents. You can create this file anywhere, as it is a throw-away file. The last step in this install procedure will install the module in the proper location.
新增 http_fping.tt 一個檔案
方法和 新增 librenms.conf 一樣
底下內容 copy paste 到 該檔內

module http_fping 1.0;

require {
type httpd_t;
class capability net_raw;
class rawip_socket { getopt create setopt write read };
}

#============= httpd_t ==============
allow httpd_t self:capability net_raw;
allow httpd_t self:rawip_socket { getopt create setopt write read };

檔案產生後執行底下命令 Then run these commands

checkmodule -M -m -o http_fping.mod http_fping.tt
semodule_package -o http_fping.pp -m http_fping.mod
semodule -i http_fping.pp

設定這些可以通過防火牆 Allow access through firewall

firewall-cmd --zone public --add-service http
firewall-cmd --permanent --zone public --add-service http
firewall-cmd --zone public --add-service https
firewall-cmd --permanent --zone public --add-service https

設定snmpd,Configure snmpd

拷貝範本過去 Copy the example snmpd.conf from the LibreNMS install.

cp /opt/librenms/snmpd.conf.example /etc/snmp/snmpd.conf

vi /etc/snmp/snmpd.conf

Edit the text which says RANDOMSTRINGGOESHERE and set your own community string.
設定 community string

curl -o /usr/bin/distro https://raw.githubusercontent.com/librenms/librenms-agent/master/snmp/distro
chmod +x /usr/bin/distro
systemctl enable snmpd
systemctl restart snmpd

克隆(拷貝，覆製)工作 Cron job

cp /opt/librenms/librenms.nonroot.cron /etc/cron.d/librenms

NOTE: Keep in mind that cron, by default, only uses a very limited set of environment variables. You may need to configure proxy variables for the cron invocation. Alternatively adding the proxy settings in config.php is possible too. The config.php file will be created in the upcoming steps. Review the following URL after you finished librenms install steps: https://docs.librenms.org/Support/Configuration/#proxy-support

Copy logrotate config

LibreNMS keeps logs in /opt/librenms/logs. Over time these can become large and be rotated out. To rotate out the old logs you can use the provided logrotate config file:

cp /opt/librenms/misc/librenms.logrotate /etc/logrotate.d/librenms

進入到網頁安裝 Web installer
記得你的主機 IP 吧
不記得就在 telnet console 輸入 ip a 查看自己的 CentOS IP

Now head to the web installer and follow the on-screen instructions.

http://librenms.example.com/install.php
這邊不是傻傻的 Copy 到你的瀏覽器
是 http://你的CentoS IP/
正常會自動跳到 install.php 那一頁
開始六個步驟填入相關設定
會要求你輸入剛剛的那個 db password
還有新增 WebUI 的管理帳號和密碼
Mail也要填
到第五步驟會跳出要求你產生一個 config.php 的檔

The web installer might prompt you to create a config.php file in your librenms install location manually, copying the content displayed on-screen to the file. If you have to do this, please remember to set the permissions on config.php after you copied the on-screen contents to the file. Run:

和新增前兩個檔的方式一樣
vi config.php
將 WebUI 上面的內容
覆製貼到該檔

chown librenms:librenms /opt/librenms/config.php

更改檔案權限

Final steps
好了，完成安裝了
已經可以開始新增 Device 了
如果測試有其他的 Error
就找相關的 Troubleshooting 處理即可

That's it! You now should be able to log in to http://librenms.example.com/. Please note that we have not covered HTTPS setup in this example, so your LibreNMS install is not secure by default. Please do not expose it to the public Internet unless you have configured HTTPS and taken appropriate web server hardening steps.
Add the first device

We now suggest that you add localhost as your first device from within the WebUI.
Troubleshooting

If you ever have issues with your install, run validate.php as root in the librenms directory:

在 Telnet console 下面執行

cd /opt/librenms
./validate.php

這邊的錯誤說明提示相當的清楚
照做就可以解決
常見的兩個問題
http://ns2.ublink.org/viewtopic.php?f=10&t=6369
http://ns2.ublink.org/viewtopic.php?f=10&t=6368

以上就是最簡單的 LibreNMS 安裝設定說明

LibreNMS 其他說明和簡報
可以參考 LibreNMS 繁體中文化 台灣作者 節省哥的工具箱 Jason Tools
http://blog.jason.tools/

常用 Command
cd /opt/librenms/
下面執行
./daily.sh
更新
./validate.php
檢查