webrtc>> docker-icinga2>> 返回
项目作者： aditosoftware

项目描述 ：
Icinga2+Graphite+Icinga2Web+Icinga2WebGraphiteMod
高级语言： Shell
项目地址: git://github.com/aditosoftware/docker-icinga2.git
创建时间： 2015-10-02T09:53:46Z
项目社区：https://github.com/aditosoftware/docker-icinga2
开源协议：MIT License
下载


Description

This is a Docker container with Icinga2 (Icingaweb2 and Icinag2-Classicui).

Update

  1. Update to icinga2 2.11.2-1 and icingaweb2 2.7.3
  2. Now with Ubutu 18.04
  3. Add supervisor service
  4. Removed graphite from container, you need now a separated container with graphite

Ports

Icinga2 running on port 80 (redirect to host/icingaweb2)
Icinga2 API on port 5665 (don’t forgot to set user and password)
Icinga2 NSCA on port 5667 (for receive passive checks)

Variables

Enable Active Directory Auth. You need the folder “/icingaweb2” in container.

  1. ENABLE_AD_AUTH=1 (optional)

Active Directory name or name of a domain controller

  1. AD_NAME=example.com (optional)

AD OU for Icingaweb2 Auth Users:

  1. AD_ROOT_DN=OU=accounts,OU=intern,DC=example,DC=com (optional)

Path for User (only to list ad users)

  1. AD_BIND_DN=CN=aduser,OU=management,OU=accounts,OU=intern,DC=excample,DC=com (optional)

Password for user

  1. AD_BIND_PW=PASSWORDHERE (optional)

Enable Graphite

  1. ENABLEGRAPHITE=true/TRUE/0

Graphite transport port

  1. GRAPHITE_TRANS=http or https

Graphite host

  1. GRAPHITE_WEBHOST=192.168.100.203

Graphite port for website

  1. GRAPHITE_WEBSITE_PORT =

Graphite user

  1. GRAPHITE_USER=

Graphite pass

  1. GRAPHITE_PASS=

Graphite security, this option will be need for icinga2 to send the data, it’s meen ssl or not

  1. GRAPHITE_SECUR = 0/1

Graphite port for file /etc/icinga2/feature-available/graphite.conf

  1. GRAPHITE_HOST

Graphite host (default 2003), but you need to define this

  1. GRAPHITE_PORT = 2003

Notification Periode (0 for disable, default 30Min)(optional). If set to 0, Icinga will send notificaton only if status of service is changed.

  1. NOTIFICATION_INTERVAL=0

Icinga2 password for “icingaadmin”

  1. ICINGA_PASS=icinga

Mailserver for Email notifications. I use the tool “mailx” (heirloom-mailx) and my exchange server (email redirect from monitoring server ip is allow). 

  1. MAILSERVER=mail.example.com (optional)

Email address for icingaadmin user

  1. EMAILADDR=user@example.com (optional)

NSCA (passive checks) is enabled. Password here

  1. NSCAPASS=pass (optional)

NSCA Port

  1. NSCAPORT=5667 (optional)

Enable API, if var APIUSER defined. Access: https://monitoring.server.com:5665

  1. APIUSER=apiuser (optional)

Password for api user. If not defined set default to “icingaapi2012m”

  1. APIPASS=apipass

Remove monitoring service “swap” of the monitoring server self, for example if this container running in k8s (the swap is not enabled in kubernetes cluster)

  1. SWAPSERVICEOFF=true

Remove monitoring service “disk” of the monitoring server self

  1. DISCSERVICEOFF=true

Remove default services (serices.conf)

  1. REMOVEDEFAULTSVC = true/TRUE/1

!Define host name

  1. docker run -h "hostname"

For time sync

  1. -v /etc/localtime:/etc/localtime:ro

Folder

  1. - /icingaweb2
  2. - /icinga2conf
  3. - /mysql
  4. - /var/lib/graphite/whisper

Example

  1. sudo docker run -d -p 80:80 -p 5667:5667 -p 5665:5665 -p 8080:8080 -h monitoring.example.com \
  2. -v /storage/icingaweb2:/icingaweb2 -v /storage/icinga2:/icinga2conf -v /storage/mysql:/mysql \
  3. -e ENABLE_AD_AUTH="1" -e AD_NAME="example.com" -e AD_ROOT_DN="OU=accounts,OU=intern,DC=example,DC=com" \
  4. -e AD_BIND_DN="CN=Icinga2 Auth,OU=accounts,OU=intern,DC=example,DC=com" -e AD_BIND_PW="PASSWORDHERE" \
  5. -e NOTIFICATION_INTERVAL=0 ENABLEGRAPHITE=true -e GRAPHITE_TRANS=http -e GRAPHITE_HOST=192.168.42.59 -e GRAPHITE_WEBSITE_PORT=8081 -e GRAPHITE_USER=guest -e GRAPHITE_PASS=guest -e GRAPHITE_SECUR=0 -e GRAPHITE_PORT=2003 -e ICINGA_PASS="icinga" -e MAILSERVER="mail.example.com" \
  6. -e EMAILADDR="user@example.com" -e NSCAPASS="pass" -e NSCAPORT="5667" -e APIUSER=root -e APIPASS=pass \
  7. --name icinga2 -t adito/icinga2

Example 2 (without AD)

  1. sudo docker run -i -p 80:80 -p 5667:5667 -p 5665:5665 -p 8080:8080 -h monitoring.example.com \
  2. -v /storage/icingaweb2:/icingaweb2 -v /storage/icinga2:/icinga2conf -v /storage/mysql:/mysql \
  3. -v /storage/graphite:/var/lib/graphite/whisper \
  4. -e NOTIFICATION_INTERVAL=0 -e ENABLEGRAPHITE=true -e GRAPHITE_TRANS=http -e GRAPHITE_HOST=192.168.42.59 -e GRAPHITE_WEBSITE_PORT=8081 -e GRAPHITE_USER=guest -e GRAPHITE_PASS=guest -e GRAPHITE_SECUR=0 -e GRAPHITE_PORT=2003 \
  5. -e APIUSER=root -e APIPASS=PASS -e ICINGA_PASS="icinga" \
  6. -e MAILSERVER="mail.example.com" -e EMAILADDR="user@example.com" -e NSCAPASS="pass" -e NSCAPORT="5667" \
  7. --name icinga2 -t adito/icinga2

Example 3 (without AD and running in k8s cluster (disable swap and disk service))

  1. sudo docker run -i -p 80:80 -p 5667:5667 -p 5665:5665 -p 8080:8080 -h monitoring.example.com \
  2. -v /storage/icingaweb2:/icingaweb2 -v /storage/icinga2:/icinga2conf -v /storage/mysql:/mysql \
  3. -v /storage/graphite:/var/lib/graphite/whisper \
  4. -e NOTIFICATION_INTERVAL=0 ENABLEGRAPHITE=true \
  5. -e GRAPHITE_TRANS=http -e GRAPHITE_HOST=192.168.42.59 \
  6. -e GRAPHITE_WEBSITE_PORT=8081 -e GRAPHITE_USER=guest \
  7. -e GRAPHITE_PASS=guest -e GRAPHITE_SECUR=0 -e GRAPHITE_PORT=2003 \
  8. -e APIUSER=root -e APIPASS=PASS -e ICINGA_PASS="icinga" \
  9. -e SWAPSERVICEOFF=true -e DISCSERVICEOFF=true \
  10. -e MAILSERVER="mail.example.com" -e EMAILADDR="user@example.com" -e NSCAPASS="pass" -e NSCAPORT="5667" \
  11. --name icinga2 -t adito/icinga2