Base de Conhecimento

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Instalação distribuída ======
===== Cenário =====
<file bash>
+-------------+       +-------------+       +-------------+       +-------------+       +-------------+
|    zbDB     |       |  zbServer   |       |   zbFront   |       |   zbProxy   |       |  Grafana    |
|10.0.140.100 |       |10.0.140.110 |       |10.0.140.120 |       |10.0.140.130 |       |10.0.140.140 |
+-------------+       +-------------+       +-------------+       +-------------+       +-------------+
     ↑  ↑                 |  ↑  ↑                |  |  ↑                 |                     |
     |  |                 |  |  |                |  |  |                 |                     |
     |  +-----------------+  |  +----------------+  |  |                 |                     |
     +-----------------------+----------------------+  +-----------------+---------------------+                     
                             +-------------------------------------------+
</file>

===== Criação das VMs no Vagrant =====

<file ruby Vagrantfile>
# cat Vagrantfile
# -*- mode: ruby -*-
# vi: set ft=ruby :

ENV['VAGRANT_DEFAULT_PROVIDER'] = 'libvirt'

Vagrant.configure("2") do |config|

  config.vm.define :zbDB do |zbDB|
    zbDB.vm.network :private_network, :ip => "10.0.240.100"
    zbDB.vm.box = "generic/oracle8"
    zbDB.vm.hostname = "zbDB"

    zbDB.vm.provider :libvirt do |lv|
      lv.memory = 4096
      lv.cpus = 2
      lv.storage :file, :size => '64G', :type => 'qcow2'
    end
  end

  config.vm.define :zbServer do |zbServer|
    zbServer.vm.network :private_network, :ip => "10.0.240.110"
    zbServer.vm.box = "generic/oracle8"
    zbServer.vm.hostname = "zbServer"

    zbServer.vm.provider :libvirt do |lv|
      lv.memory = 4096
      lv.cpus = 2
    end
  end

  config.vm.define :zbFront do |zbFront|
    zbFront.vm.network :private_network, :ip => "10.0.240.120"
    zbFront.vm.network :forwarded_port, host: 8080, guest: 80
    zbFront.vm.box = "generic/oracle8"
    zbFront.vm.hostname = "zbFront"

    zbFront.vm.provider :libvirt do |lv|
      lv.memory = 2048
      lv.cpus = 2
    end
  end

  config.vm.define :zbProxy do |zbProxy|
    zbProxy.vm.network :private_network, :ip => "10.0.240.130"
    zbProxy.vm.box = "generic/oracle8"
    zbProxy.vm.hostname = "zbProxy"

    zbProxy.vm.provider :libvirt do |lv|
      lv.memory = 2048
      lv.cpus = 2
    end
  end

  config.vm.define :grafana do |grafana|
    grafana.vm.network :private_network, :ip => "10.0.240.140"
    grafana.vm.box = "generic/oracle8"
    grafana.vm.hostname = "grafana"

    grafana.vm.provider :libvirt do |lv|
      lv.memory = 2048
      lv.cpus = 2
    end
  end

end
</file>

===== PGSQL =====
==== Instalação do PostgreSQL ====
<file bash>
$ sudo dnf install https://download.postgresql.org/pub/repos/yum/reporpms/EL-$(rpm -E %{rhel})-x86_64/pgdg-redhat-repo-latest.noarch.rpm
</file>

<file bash>
$ sudo dnf repolist
Failed to set locale, defaulting to C.UTF-8
repo id                                                                     repo name
ol8_UEKR6                                                                   Latest Unbreakable Enterprise Kernel Release 6 for Oracle Linux 8 (x86_64)
ol8_appstream                                                               Oracle Linux 8 Application Stream (x86_64)
ol8_baseos_latest                                                           Oracle Linux 8 BaseOS Latest (x86_64)
pgdg-common                                                                 PostgreSQL common RPMs for RHEL / Rocky 8 - x86_64
pgdg10                                                                      PostgreSQL 10 for RHEL / Rocky 8 - x86_64
pgdg11                                                                      PostgreSQL 11 for RHEL / Rocky 8 - x86_64
pgdg12                                                                      PostgreSQL 12 for RHEL / Rocky 8 - x86_64
pgdg13                                                                      PostgreSQL 13 for RHEL / Rocky 8 - x86_64
pgdg14                                                                      PostgreSQL 14 for RHEL / Rocky 8 - x86_64
</file>

<file bash>
$ sudo dnf module disable postgresql
</file>

<file bash>
$ sudo dnf install postgresql13-server postgresql13-contrib
</file>

<file bash>
$ sudo postgresql-13-setup initdb
</file>

<file bash>
$ sudo systemctl enable --now postgresql-13
</file>

==== Instalação da extensão TimescaleDB ====

<file bash>
$ sudo tee /etc/yum.repos.d/timescale_timescaledb.repo <<EOL
[timescale_timescaledb]
name=timescale_timescaledb
baseurl=https://packagecloud.io/timescale/timescaledb/el/$(rpm -E %{rhel})/\$basearch
repo_gpgcheck=1
gpgcheck=0
enabled=1
gpgkey=https://packagecloud.io/timescale/timescaledb/gpgkey
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
metadata_expire=300
EOL
</file>

<file bash>
$ sudo dnf install timescaledb-2-postgresql-13
</file>

<file bash>
$ sudo timescaledb-tune --pg-config=/usr/pgsql-13/bin/pg_config
Using postgresql.conf at this path:
/var/lib/pgsql/13/data/postgresql.conf

Is this correct? [(y)es/(n)o]: y
Writing backup to:
/tmp/timescaledb_tune.backup202207082016

shared_preload_libraries needs to be updated
Current:
#shared_preload_libraries = ''
Recommended:
shared_preload_libraries = 'timescaledb'
Is this okay? [(y)es/(n)o]: y
success: shared_preload_libraries will be updated

Tune memory/parallelism/WAL and other settings? [(y)es/(n)o]: y
Recommendations based on 3.56 GB of available memory and 2 CPUs for PostgreSQL 13

Memory settings recommendations
Current:
shared_buffers = 128MB
#effective_cache_size = 4GB
#maintenance_work_mem = 64MB
#work_mem = 4MB
Recommended:
shared_buffers = 932011kB
effective_cache_size = 2730MB
maintenance_work_mem = 466005kB
work_mem = 9320kB
Is this okay? [(y)es/(s)kip/(q)uit]: y
success: memory settings will be updated

Parallelism settings recommendations
Current:
missing: timescaledb.max_background_workers
#max_worker_processes = 8
#max_parallel_workers_per_gather = 2
#max_parallel_workers = 8
Recommended:
timescaledb.max_background_workers = 8
max_worker_processes = 13
max_parallel_workers_per_gather = 1
max_parallel_workers = 2
Is this okay? [(y)es/(s)kip/(q)uit]: y
success: parallelism settings will be updated

WAL settings recommendations
Current:
#wal_buffers = -1
min_wal_size = 80MB
Recommended:
wal_buffers = 16MB
min_wal_size = 512MB
Is this okay? [(y)es/(s)kip/(q)uit]: y
success: WAL settings will be updated

Miscellaneous settings recommendations
Current:
#default_statistics_target = 100
#random_page_cost = 4.0
#checkpoint_completion_target = 0.5
max_connections = 100
#max_locks_per_transaction = 64
#autovacuum_max_workers = 3
#autovacuum_naptime = 1min
#effective_io_concurrency = 1
Recommended:
default_statistics_target = 500
random_page_cost = 1.1
checkpoint_completion_target = 0.9
max_connections = 50
max_locks_per_transaction = 64
autovacuum_max_workers = 10
autovacuum_naptime = 10
effective_io_concurrency = 256
Is this okay? [(y)es/(s)kip/(q)uit]: y
success: miscellaneous settings will be updated
Saving changes to: /var/lib/pgsql/13/data/postgresql.conf
</file>

<file bash>
$ sudo systemctl restart postgresql-13
</file>

<file bash>
$ sudo systemctl status postgresql-13
● postgresql-13.service - PostgreSQL 13 database server
   Loaded: loaded (/usr/lib/systemd/system/postgresql-13.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2022-07-08 20:17:19 UTC; 8s ago
     Docs: https://www.postgresql.org/docs/13/static/
  Process: 6080 ExecStartPre=/usr/pgsql-13/bin/postgresql-13-check-db-dir ${PGDATA} (code=exited, status=0/SUCCESS)
 Main PID: 6086 (postmaster)
    Tasks: 9 (limit: 23062)
   Memory: 46.2M
   CGroup: /system.slice/postgresql-13.service
           ├─6086 /usr/pgsql-13/bin/postmaster -D /var/lib/pgsql/13/data/
           ├─6087 postgres: logger
           ├─6089 postgres: checkpointer
           ├─6090 postgres: background writer
           ├─6091 postgres: walwriter
           ├─6092 postgres: autovacuum launcher
           ├─6093 postgres: stats collector
           ├─6094 postgres: TimescaleDB Background Worker Launcher
           └─6095 postgres: logical replication launcher

Jul 08 20:17:19 pgsql systemd[1]: Starting PostgreSQL 13 database server...
Jul 08 20:17:19 pgsql postmaster[6086]: 2022-07-08 20:17:19.683 UTC [6086] LOG:  redirecting log output to logging collector process
Jul 08 20:17:19 pgsql postmaster[6086]: 2022-07-08 20:17:19.683 UTC [6086] HINT:  Future log output will appear in directory "log".
Jul 08 20:17:19 pgsql systemd[1]: Started PostgreSQL 13 database server.
</file>

==== Preparando o volume para o banco zabbix ====
<file bash>
$ sudo fdisk -l /dev/vdb
Disk /dev/vdb: 64 GiB, 68719476736 bytes, 134217728 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
</file>

<file bash>
$ sudo pvcreate /dev/vdb
$ sudo vgcreate vgPGSQL /dev/vdb
$ sudo lvcreate -L 32G -n lvZABBIX vgPGSQL
</file>

<file bash>
$ sudo mkfs.xfs /dev/vgPGSQL/lvZABBIX
$ sudo mkdir -p /pgsql/zabbix
$ sudo mount /dev/vgPGSQL/lvZABBIX /pgsql/zabbix
</file>

<file bash>
$ sudo blkid | egrep vg
/dev/mapper/vgPGSQL-lvZABBIX: UUID="0565add4-01b6-42ab-a65f-321071c124a9" BLOCK_SIZE="512" TYPE="xfs"
</file>

<file bash>
$ echo -e "UUID=0565add4-01b6-42ab-a65f-321071c124a9\t/pgsql/zabbix\txfs\tdefaults\t0 0" | sudo tee -a /etc/fstab
</file>

<file bash>
$ sudo mount -a
</file>

<file bash>
$ mount | grep pgsql
/dev/mapper/vgPGSQL-lvZABBIX on /pgsql/zabbix type xfs (rw,relatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,noquota)
</file>

<file bash>
$ df -h | grep pgsql
/dev/mapper/vgPGSQL-lvZABBIX   32G  261M   32G   1% /pgsql/zabbix
</file>

==== Criando o banco e o acesso do zabbix ====

<file bash>
$ sudo dnf install policycoreutils-python-utils
</file>

<file bash>
$ sudo chown postgres:postgres /pgsql/zabbix/ -R
$ sudo semanage fcontext -a -t postgresql_db_t "/pgsql/zabbix(/.*)?"
$ sudo restorecon -R -v /pgsql/zabbix/
</file>

<file bash>
$ sudo su - postgres
$ psql
# create tablespace tbZabbix location '/pgsql/zabbix';
# create role zabbix login;
# \password zabbix
# create database zabbix owner zabbix tablespace tbZabbix;
# \db+
 pg_default | postgres |               |                   |         | 23 MB   |
 pg_global  | postgres |               |                   |         | 559 kB  |
 tbzabbix   | postgres | /pgsql/zabbix |                   |         | 7909 kB |
# \q
$ exit
</file>

<file bash>
$ sudo vim /var/lib/pgsql/13/data/pg_hba.conf
[...]
# Acesso Zabbix
host    zabbix          zabbix          127.0.0.1/32            scram-sha-256
host    zabbix          zabbix          10.0.240.0/24           scram-sha-256
</file>

<file bash>
$ sudo vim /var/lib/pgsql/13/data/postgresql.conf
[...]
listen_addresses = 'localhost,10.0.240.100'
[...]
</file>

<file bash>
$ sudo systemctl restart postgresql-13
</file>

<file bash>
$ psql -h 127.0.0.1 -U zabbix zabbix
</file>

<file bash>
zabbix=> create extension if not exists timescaledb cascade;
WARNING:
WELCOME TO
 _____ _                               _     ____________
|_   _(_)                             | |    |  _  \ ___ \
  | |  _ _ __ ___   ___  ___  ___ __ _| | ___| | | | |_/ /
  | | | |  _ ` _ \ / _ \/ __|/ __/ _` | |/ _ \ | | | ___ \
  | | | | | | | | |  __/\__ \ (_| (_| | |  __/ |/ /| |_/ /
  |_| |_|_| |_| |_|\___||___/\___\__,_|_|\___|___/ \____/
               Running version 2.7.1
For more information on TimescaleDB, please visit the following links:

 1. Getting started: https://docs.timescale.com/timescaledb/latest/getting-started
 2. API reference documentation: https://docs.timescale.com/api/latest
 3. How TimescaleDB is designed: https://docs.timescale.com/timescaledb/latest/overview/core-concepts

Note: TimescaleDB collects anonymous reports to better understand and assist our users.
For more information and how to disable, please see our docs https://docs.timescale.com/timescaledb/latest/how-to-guides/configuration/telemetry.

CREATE EXTENSION
</file>

<file bash>
zabbix=> \dx
                                      List of installed extensions
    Name     | Version |   Schema   |                            Description
-------------+---------+------------+-------------------------------------------------------------------
 plpgsql     | 1.0     | pg_catalog | PL/pgSQL procedural language
 timescaledb | 2.7.1   | public     | Enables scalable inserts and complex queries for time-series data
(2 rows)
</file>

<file bash>
$ sudo firewall-cmd --permanent --add-rich-rule 'rule family="ipv4" source address="10.0.240.0/24" destination address=10.0.240.100/32 service name="postgresql" accept'
$ sudo firewall-cmd --reload
</file>

===== Zabbix Server =====
<file bash>
$ sudo rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/8/x86_64/zabbix-release-6.0-2.el8.noarch.rpm
</file>

<file bash>
$ sudo dnf install zabbix-server-pgsql zabbix-agent2 zabbix-selinux-policy zabbix-sql-scripts postgresql
$ sudo dnf install net-snmp-utils net-snmp nmap tcpdump bind-utils traceroute
</file>

<file bash>
$ rpm -qil zabbix-sql-scripts-6.0.6-1.el8.noarch
Name        : zabbix-sql-scripts
Version     : 6.0.6
Release     : 1.el8
Architecture: noarch
Install Date: Fri Jul  8 20:37:37 2022
Group       : Applications/Internet
Size        : 8827042
License     : GPLv2+
Signature   : RSA/SHA512, Mon Jun 27 12:29:08 2022, Key ID 082ab56ba14fe591
Source RPM  : zabbix-6.0.6-1.el8.src.rpm
Build Date  : Mon Jun 27 11:26:55 2022
Build Host  : d701cf2a492e
Relocations : (not relocatable)
URL         : http://www.zabbix.com/
Summary     : Zabbix database sql scripts
Description :
SQL files needed to setup Zabbix server or proxy databases
/usr/share/doc/zabbix-sql-scripts
/usr/share/doc/zabbix-sql-scripts/AUTHORS
/usr/share/doc/zabbix-sql-scripts/COPYING
/usr/share/doc/zabbix-sql-scripts/ChangeLog
/usr/share/doc/zabbix-sql-scripts/NEWS
/usr/share/doc/zabbix-sql-scripts/README
/usr/share/doc/zabbix-sql-scripts/mysql/double.sql
/usr/share/doc/zabbix-sql-scripts/mysql/history_pk_prepare.sql
/usr/share/doc/zabbix-sql-scripts/mysql/proxy.sql
/usr/share/doc/zabbix-sql-scripts/mysql/server.sql.gz
/usr/share/doc/zabbix-sql-scripts/postgresql/double.sql
/usr/share/doc/zabbix-sql-scripts/postgresql/history_pk_prepare.sql
/usr/share/doc/zabbix-sql-scripts/postgresql/proxy.sql
/usr/share/doc/zabbix-sql-scripts/postgresql/server.sql.gz
/usr/share/doc/zabbix-sql-scripts/postgresql/timescaledb.sql
/usr/share/doc/zabbix-sql-scripts/sqlite3/proxy.sql
</file>

<file bash>
$ zcat /usr/share/doc/zabbix-sql-scripts/postgresql/server.sql.gz | psql -h 10.0.240.100 -U zabbix zabbix
$ psql -h 10.0.240.100 -U zabbix zabbix < /usr/share/doc/zabbix-sql-scripts/postgresql/timescaledb.sql
</file>

<file bash>
]$ sudo cat /etc/zabbix/zabbix_server.conf | egrep -v "^#|^$"
LogFile=/var/log/zabbix/zabbix_server.log
LogFileSize=0
PidFile=/run/zabbix/zabbix_server.pid
SocketDir=/run/zabbix
DBHost=10.0.240.100
DBName=zabbix
DBUser=zabbix
DBPassword=zabbix
DBPort=5432
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
Timeout=4
LogSlowQueries=3000
StatsAllowedIP=127.0.0.1
</file>

<file bash>
$ sudo systemctl enable --now zabbix-server
$ sudo systemctl enable --now zabbix-agent2
</file>

<file bash>
$ sudo firewall-cmd --permanent --add-rich-rule 'rule family="ipv4" source address="10.0.240.120/32" destination address=10.0.240.110/32 service name="zabbix-server" accept'
$ sudo firewall-cmd --permanent --add-rich-rule 'rule family="ipv4" source address="10.0.240.130/32" destination address=10.0.240.110/32 service name="zabbix-server" accept'
$ sudo firewall-cmd --reload
</file>

===== Zabbix Web =====
<file bash>
$ sudo dnf install oraclelinux-developer-release-el8 oracle-instantclient-release-el8
</file>

<file bash>
$ sudo dnf module enable php:7.4 php-oci8
</file>

<file bash>
$ sudo rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/8/x86_64/zabbix-release-6.0-2.el8.noarch.rpm
</file>

<file bash>
$ sudo dnf install zabbix-web-pgsql zabbix-apache-conf zabbix-agent2 zabbix-selinux-policy
</file>

<file bash>
$ sudo systemctl enable --now httpd
</file>

<file bash>
$ sudo firewall-cmd --permanent --add-service=http
$ sudo firewall-cmd --reload
</file>

{{:zb-tela-01.png|}}

{{:zb-tela-02.png|}}

{{:zb-tela-03.png|}}

<file bash>
$ sudo vim /etc/zabbix/web/zabbix.conf.php
[...]
// Uncomment and set to desired values to override Zabbix hostname/IP and port.
$ZBX_SERVER                     = '10.0.240.110';
$ZBX_SERVER_PORT                = '10051';
[...]
</file>

<file bash>
$ sudo systemctl restart httpd
</file>

===== Zabbix Proxy =====
<file bash>
$ sudo rpm -Uvh https://repo.zabbix.com/zabbix/6.2/rhel/8/x86_64/zabbix-release-6.2-1.el8.noarch.rpm
Retrieving https://repo.zabbix.com/zabbix/6.2/rhel/8/x86_64/zabbix-release-6.2-1.el8.noarch.rpm
warning: /var/tmp/rpm-tmp.yJGTHQ: Header V4 RSA/SHA512 Signature, key ID a14fe591: NOKEY
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]
Updating / installing...
   1:zabbix-release-6.2-1.el8         ################################# [100%]
</file>

<file bash>
$ sudo dnf install zabbix-proxy-sqlite3 zabbix-agent2 zabbix-get zabbix-selinux-policy
</file>

<file bash>
$ sudo dnf install net-snmp-utils net-snmp nmap tcpdump bind-utils traceroute
</file>

<file bash>
$ sudo cat /etc/zabbix/zabbix_proxy.conf | egrep -v "^#|^$"
Server=10.0.240.110
Hostname=zbProxy
LogFile=/var/log/zabbix/zabbix_proxy.log
LogFileSize=0
PidFile=/run/zabbix/zabbix_proxy.pid
SocketDir=/run/zabbix
DBName=/var/lib/sqlite/zabbix.db
DBUser=zabbix
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
Timeout=4
LogSlowQueries=3000
StatsAllowedIP=127.0.0.1
</file>

<file bash>
$ sudo sed s/SELINUX=enforcing/SELINUX=permissive/g -i /etc/selinux/config
$ sudo setenforce 0
</file>

<file bash>
$ sudo mkdir /var/lib/sqlite
$ sudo chown zabbix:zabbix /var/lib/sqlite/ -R
</file>

<file bash>
$ sudo systemctl enable --now zabbix-porxy
$ sudo systemctl enable --now zabbix-agent2
</file>
===== Grafana =====
<code bash>
$ cat <<EOF | sudo tee /etc/yum.repos.d/grafana.repo
[grafana]
name=grafana
baseurl=https://packages.grafana.com/oss/rpm
repo_gpgcheck=1
enabled=1
gpgcheck=1
gpgkey=https://packages.grafana.com/gpg.key
sslverify=1
sslcacert=/etc/pki/tls/certs/ca-bundle.crt
EOF
</code>

<code bash>
$ sudo dnf update
$ sudo dnf search grafana
$ sudo dnf -y install grafana
$ sudo systemctl enable --now grafana-server.service
</code>

<code bash>
$ sudo firewall-cmd --permanent --add-rich-rule='rule family=ipv4 forward-port to-port=3000 protocol=tcp port=80'
$ sudo firewall-cmd --reload
$ sudo firewall-cmd --list-all
</code>
===== Referências =====
  - [[https://blogs.oracle.com/opal/post/installing-php-74-on-oracle-linux-8|Installing PHP 7.4 on Oracle Linux 8]]
  - [[https://www.vagrantup.com/docs/networking/forwarded_ports|Forwarded Ports]]
  - [[https://programming.vip/docs/k8s-deployment-zabbix-monitoring-system.html|k8s deployment zabbix monitoring system]]