centos7搭建zabbix4.4

centos7搭建zabbix4.4

环境准备：

1、centos7服务器一台（版本CentOS-7-x86_64-Minimal-1908）
2、已分配主机IP地址172.18.100.113

搭建步骤：

1、更改主机名、修改hosts文件

HOSTNAME=zabbix 
hostnamectl set-hostname "$HOSTNAME" 
echo "$HOSTNAME">/etc/hostname 
echo "$(grep -E '127|::1' /etc/hosts)">/etc/hosts 
echo "$(ip a|grep "inet "|grep -v 127|awk -F'[ /]' '{print $6}') $HOSTNAME">>/etc/hosts

2、关闭firewalld、selinux，开启iptables并配置规则参数

sed -i '/^SELINUX/s/enforcing/disabled/' /etc/selinux/config 
setenforce 0
systemctl stop firewalld && systemctl disable firewalld

3、配置yum源，安装zabbix。

curl -o /etc/yum.repos.d/aliyun-base7.repo http://mirrors.aliyun.com/repo/Centos-7.repo 
curl -o /etc/yum.repos.d/aliyun-epel7.repo http://mirrors.aliyun.com/repo/epel-7.repo
cat>/etc/yum.repos.d/zabbix.repo<<EOF 
[zabbix] 
name=zabbix 
baseurl=http://repo.zabbix.com/zabbix/4.4/rhel/7/x86_64/ 
gpgcheck=0 
enabled=1 
EOF
yum clean all 
yum makecache
yum provides '*/applydeltarpm'  
yum -y  install deltarpm  epel-release zabbix-server-mysql zabbix-web-mysql zabbix-agent
rpm -qa|grep zabbix-* 

4、安装数据库并修改密码

yum -y install mariadb mariadb-server php php-mysql httpd net-tools
systemctl enable mariadb
systemctl start mariadb
mysql -uroot -p
mysql> create database zabbix character set utf8 collate utf8_bin;
mysql> grant all privileges on zabbix.* to zabbix@localhost identified by 'zabbix';
mysql>set password for root@localhost = password('ecpss@123');                       #root密码设置
mysql> quit;
#导入数据文件，输入zabbix密码zabbix。 
#zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p zabbix

5、修改对应zabbix_agent参数

egrep -Ev '^#|^$' /etc/zabbix/zabbix_agentd.conf  
PidFile=/var/run/zabbix/zabbix_agentd.pid 
LogFile=/var/log/zabbix/zabbix_agentd.log 
LogFileSize=0 
EnableRemoteCommands=1 
Server=172.18.100.113 
Hostname=172.18.100.113 
Include=/etc/zabbix/zabbix_agentd.d/

6、配置zabbix.conf.php

#追加的内容里面有$符号，shell执行时发现有$符号，就会按照变量执行。所以如果追加的内容里面有$符号，应该添加转义字符（\）转义
cat>/etc/zabbix/web/zabbix.conf.php<<EOF 
<?php 
// Zabbix GUI configuration file. 
global \$DB; 
 
\$DB['TYPE']     = 'MYSQL'; 
\$DB['SERVER']   = 'localhost';         #和创建数据库时候的主机一致 
\$DB['PORT']     = '3306'; 
\$DB['DATABASE'] = 'zabbix'; 
\$DB['USER']     = 'zabbix'; 
\$DB['PASSWORD'] = 'zabbix'; 
 
// Schema name. Used for IBM DB2 and PostgreSQL. 
\$DB['SCHEMA'] = ''; 
 
\$ZBX_SERVER      = '172.18.100.113';  # server_ip 
\$ZBX_SERVER_PORT = '10051'; 
\$ZBX_SERVER_NAME = 'zabbix'; # server_name 
 
\$IMAGE_FORMAT_DEFAULT = IMAGE_FORMAT_PNG; 
EOF
#配置PHP参数文件
cp -av /etc/php.ini{,.bak}
sed -i 's/^(max_execution_time)./\1 = 300/g' /etc/php.ini
sed -i 's/^(max_input_time)./\1 = 300/g' /etc/php.ini
sed -i 's/^(post_max_size).*/\1 = 16M/g' /etc/php.ini
sed -i 's|[Date]|&\ndate.timezone = Asia/Shanghai|g' /etc/php.ini
sed -i 's|[mbstring]|&\nmbstring.func_overload = 1|g' /etc/php.ini

7、整合zabbix和httpd，启动服务

cp -av /etc/httpd/conf.d/zabbix.conf{,.bak}
sed -i 's|# php_value date.timezone Europe/Riga|php_value date.timezone Asia/Shanghai|g' /etc/httpd/conf.d/zabbix.conf
systemctl restart httpd
systemctl enable zabbix-server
systemctl restart zabbix-server
systemctl enable zabbix-agent
systemctl restart zabbix-agent
systemctl start httpd
chkconfig zabbix-server on
chkconfig httpd on
chkconfig zabbix-agent on

8、配置http页面，进入主页，账号默认Admin、密码zabbix

sed -i 's/#ServerName www.example.com:80/&\nServerName 127.0.0.1:80/g' /etc/httpd/conf/httpd.conf

#访问控制规则配置脚本
cat > /etc/iptables.sh <<EOF  
#!/bin/sh 
#####################  IPTABLES  ####################### 
IPTABLES=/sbin/iptables 
 
\$IPTABLES -F -t filter 
\$IPTABLES -F -t nat 
\$IPTABLES -F -t mangle 
 
\$IPTABLES -X -t filter 
\$IPTABLES -X -t nat 
\$IPTABLES -X -t mangle 
 
\$IPTABLES -Z -t filter 
\$IPTABLES -Z -t nat 
\$IPTABLES -Z -t mangle 
 
\$IPTABLES -t filter -P INPUT DROP 
\$IPTABLES -t filter -P OUTPUT  ACCEPT 
\$IPTABLES -t filter -P FORWARD ACCEPT 
 
\$IPTABLES -t nat -P PREROUTING ACCEPT 
\$IPTABLES -t nat -P POSTROUTING ACCEPT 
\$IPTABLES -t nat -P OUTPUT  ACCEPT 
 
\$IPTABLES -t mangle -P INPUT ACCEPT 
\$IPTABLES -t mangle -P OUTPUT ACCEPT 
\$IPTABLES -t mangle -P FORWARD ACCEPT 

\$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 
\$IPTABLES -A INPUT -i lo -j ACCEPT 
\$IPTABLES -A INPUT -p icmp --icmp-type echo-request -j ACCEPT 

\$IPTABLES -A INPUT -s 172.19.64.73 -p tcp -m tcp --dport 22 -j ACCEPT 
\$IPTABLES -A INPUT -s 172.18.0.113 -p udp -m udp --dport 161 -j ACCEPT 
EOF
chmod +x /etc/iptables.sh 
bash /etc/iptables.sh 
echo '/etc/iptables.sh' >> /etc/rc.local         
chmod +x /etc/rc.d/rc.local

#其他：zabbix批量添加主机信息脚本
#!/bin/bash
for i in $(cat all_hostname_ip.txt);do
  T_HOSTNAME=$(echo $i|awk -F':' '{print $1}')
  T_IP=$(echo $i|awk -F':' '{print $2}')
  #修改用户名
  sed -i "s/<host>.$/<host>$T_HOSTNAME<\/host>/g" test.txt
  #修改地址
  sed -i "s/<ip>.$/<host>=$T_IP<\/ip>/g" test.txt
  cat test.txt>>./all.txt
done