Install Icinga2 on CentOS/Almlalinux/RockyOS 8

December 18, 2022

Page content

In this tutorial I will show you how to install Icinga2 and Icingaweb2 webinterface.

Icinga 2 is an open source, scalable and extensible monitoring tool which checks the availability of your network resources, notifies users of outages, and generates performance data for reporting.

Configure syslinux and Firewall for the install

setsebool -P httpd_can_network_connect_db 1
setsebool -P httpd_can_network_connect 1

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --permanent --add-service=postgresql
firewall-cmd --permanent --add-port=5665/tcp
firewall-cmd --reload

Install postgresql

yum install epel-release
yum update --nogpgcheck

yum install postgresql-server postgresql nano
postgresql-setup initdb

Icinga config mast be in the beginning of the file.

nano /var/lib/pgsql/data/pg_hba.conf
# TYPE  DATABASE        USER            ADDRESS                 METHOD
# icinga
local   icinga      icinga                            md5
host    icinga      icinga      127.0.0.1/32          md5
host    icinga      icinga      ::1/128               md5
local   icinga_web  icinga_web                        md5
host    icinga_web  icinga_web  127.0.0.1/32          md5
host    icinga_web  icinga_web  ::1/128               md5

# "local" is for Unix domain socket connections only
local   all         all                               ident
# IPv4 local connections:
host    all         all         127.0.0.1/32          ident
# IPv6 local connections:
host    all         all         ::1/128               ident

systemctl enable  --now postgresql

Install Icinga2

# Main Centos 8 repo (Not up to date)
yum install https://packages.icinga.com/epel/icinga-rpm-release-8-latest.noarch.rpm

# Community Centos 8 repo
rpm --import https://packages.freedom-for-icinga.com/free-icinga.key

curl https://packages.freedom-for-icinga.com/epel/FREE-ICINGA-release.repo \
-o /etc/yum.repos.d/FREE-ICINGA-release.repo

# Suse RockyLinux 8 repo
curl https://download.opensuse.org/repositories/home:/wurzelbro:/icinga/RockyLinux_8/home:wurzelbro:icinga.repo \
-o /etc/yum.repos.d/suse_wurzelbro_icinga.repo

dnf --enablerepo=powertools install nagios-plugins-all

yum install icinga2 icinga2-selinux nano-icinga2 icinga2-ido-pgsql

echo 'include "/usr/share/nano/icinga2.nanorc"' >> /etc/nanorc
cp /etc/nanorc ~/.nanorc

sudo -u postgres psql -c "CREATE ROLE icinga WITH LOGIN PASSWORD 'icinga'"
sudo -u postgres createdb -O icinga -E UTF8 icinga

export PGPASSWORD=icinga
psql -U icinga -d icinga < /usr/share/icinga2-ido-pgsql/schema/pgsql.sql

cat << EOF | sudo tee /etc/icinga2/features-enabled/ido-pgsql.conf
/**
 * The db_ido_pgsql library implements IDO functionality
 * for PostgreSQL.
 */

library "db_ido_pgsql"

object IdoPgsqlConnection "ido-pgsql" {
  user = "icinga",
  password = "icinga",
  host = "localhost",
  database = "icinga"
}
EOF

icinga2 feature enable ido-pgsql
icinga2 feature enable command
icinga2 api setup


echo '
object ApiUser "icingaweb2" {
  password = "Wijsn8Z9eRs5E25d"
  permissions = [ "status/query", "actions/*", "objects/modify/*", "objects/query/*" ]
}' >> /etc/icinga2/conf.d/api-users.conf

icinga2 node wizard
Welcome to the Icinga 2 Setup Wizard!

We will guide you through all required configuration details.

Please specify if this is an agent/satellite setup ('n' installs a master setup) [Y/n]: n

Starting the Master setup routine...

Please specify the common name (CN) [alma8.mydomain.intra]: icinga.mydomain.intra
Reconfiguring Icinga...
Checking for existing certificates for common name 'icinga.mydomain.intra'...
Certificates not yet generated. Running 'api setup' now.
Generating master configuration for Icinga 2.
'api' feature already enabled.

Master zone name [master]:

Default global zones: global-templates director-global
Do you want to specify additional global zones? [y/N]:
Please specify the API bind host/port (optional):
Bind Host []:
Bind Port []:

Do you want to disable the inclusion of the conf.d directory [Y/n]: n

Done.

Now restart your Icinga 2 daemon to finish the installation!

systemctl restart icinga2

Install IcingaWeb2

yum install nginx icingaweb2 icingacli icingaweb2-selinux

systemctl enable php-fpm.service --now

## config
icingacli setup config webserver --fpm-uri=unix:/var/run/php-fpm/www.sock nginx > /etc/nginx/default.d/icinga.conf
systemctl enable --now nginx

sudo -u postgres psql -c "CREATE ROLE icinga_web WITH LOGIN PASSWORD 'icinga_web'"
sudo -u postgres createdb -O icinga_web -E UTF8 icinga_web

icingacli setup token create

# go to
https://icinga.devopstales.intra/icingaweb2/