海运的博客

Nagios配合pnp4nagios可实现类似Cacti的图表显示，便于管理和分析服务器运行状况。
Nagios安装请参考：https://www.haiyun.me/archives/centos-install-nagios.html
安装rrdtool，需安装epel源：

#https://www.haiyun.me
yum install rrdtools perl-rrdtool perl-Time-HiRes

安装php4nagios：

wget http://nchc.dl.sourceforge.net/project/pnp4nagios/PNP-0.6/pnp4nagios-0.6.17.tar.gz
tar zxvf pnp4nagios-0.6.17.tar.gz 
cd pnp4nagios-0.6.17
./configure --with-nagios-user=nagios --with-nagios-group=nagios
make all
make install
make install-webconf
make install-config
make install-init
#make fullinstall #相当于上面3个指令

配置php4nagios：

#https://www.haiyun.me
cd /usr/local/pnp4nagios/etc/
mv misccommands.cfg-sample misccommands.cfg
mv rra.cfg-sample rra.cfg
mv nagios.cfg-sample nagios.cfg
cd pages/
mv web_traffic.cfg-sample web_traffic.cfg
cd ../check_commands/
mv check_all_local_disks.cfg-sample check_all_local_disks.cfg
mv check_nrpe.cfg-sample check_nrpe.cfg
mv check_nwstat.cfg-sample check_nwstat.cfg
/etc/init.d/npcd start
chkconfig npcd on

配置Nagios数据输出接口：

vim /usr/local/nagios/etc/nagios.cfg 
process_performance_data=1 #默认为0，修改为1
host_perfdata_command=process-host-perfdata #注释开头#号
service_perfdata_command=process-service-perfdata #注释开头#号

替换commands.cfg命令process-service-perfdata为以下内容：

vim /usr/local/nagios/etc/objects/commands.cfg 
# 'process-host-perfdata' command definition
define command{
        command_name    process-host-perfdata
        command_line    /usr/local/pnp4nagios/libexec/process_perfdata.pl -d HOSTPERFDATA 
        }
# 'process-service-perfdata' command definition
define command{
        command_name    process-service-perfdata
        command_line    /usr/local/pnp4nagios/libexec/process_perfdata.pl
        }                              

在模板配置文件中添加图表图标模板：

#https://www.haiyun.me
 vim /usr/local/nagios/etc/objects/templates.cfg 
define host {
name          host-pnp
action_url    /pnp4nagios/index.php/graph?host=$HOSTNAME$&srv=_HOST_' class='tips' rel='/pnp4nagios/index.php/popup?host=$HOSTNAME$&srv=_HOST_
register   0
}
define service {
name         service-pnp
action_url   /pnp4nagios/index.php/graph?host=$HOSTNAME$&srv=$SERVICEDESC$' class='tips' rel='/pnp4nagios/index.php/popup?host=$HOSTNAME$&srv=$SERVICEDESC$
register   0
}

复制鼠标悬停图标显示文件：

cp /usr/local/pnp4nagios/contrib/ssi/* /usr/local/nagios/share/ssi/ 

在监控主机或服务中调用图表模板：

define host{
        use                     linux-server,host-pnp                             
        host_name               localhost
        alias                   localhost
        address                 127.0.0.1
        }
define service{
        use                             local-service,service-pnp
        host_name                       localhost
        service_description             PING
    check_command            check_ping!100.0,20%!500.0,60%
        }
define service{
        use                             local-service,service-pnp
        host_name                       localhost
        service_description             Root Partition
    check_command            check_local_disk!20%!10%!/
        }

重启nagios，访问nagios界面即可看到图表小图标：

点击图标会显示pnp4nagios测试页面：

全是绿色代表配置正常，然后移除或修改install.php文件：

rm -rf /usr/local/pnp4nagios/share/install.php

再次点击图标就会显示当前监控服务由pnp4nagios生成的图表了：

CentOS安装LAMP及编译环境：

yum -y install httpd httpd-devel mysql mysql-server mysql-devel php php-devel php-common php-gd \
php-mysql php-mbstring php-mcrypt php-xml php-snmp gcc make automake autoconf
/etc/init.d/httpd start
/etc/init.d/mysqld start
/usr/bin/mysqladmin -u root password "password"
chkconfig httpd on
chkconfig mysqld on

安装Nagios：

#https://www.haiyun.me
useradd nagios
groupadd nagcmd
usermod -G nagcmd nagios
usermod -G nagcmd apache
cd /usr/local/src/
#安装主程序
wget http://prdownloads.sourceforge.net/sourceforge/nagios/nagios-3.4.1.tar.gz
tar zxvf nagios-3.4.1.tar.gz 
cd nagios
./configure --with-command-group=nagcmd --prefix=/usr/local/nagios --with-nagios-user=nagios --with-nagios-group=nagios 
make all
make install
#安装主程序
make install-init
#安装init管理脚本
make install-config
#安装示例配置文件
make install-commandmode
#配置目录权限
make install-webconf
#安装Apache配置文件
#make install-exfoliation
#安装简洁白色主题，此为默认
make install-classicui
安装经典黑色主题
cd ../
#安装插件
wget http://prdownloads.sourceforge.net/sourceforge/nagiosplug/nagios-plugins-1.4.15.tar.gz
tar zxvf nagios-plugins-1.4.15.tar.gz
cd nagios-plugins
./configure --with-nagios-user=nagios --with-nagios-group=nagios --prefix=/usr/local/nagios
make
make install
htpasswd -c /usr/local/nagios/etc/htpasswd.users nagiosadmin
#生成nagiosadmin验证密码，用于web界面验证。
/etc/init.d/httpd restart
/etc/init.d/nagios start
chkconfig nagios on
setsebool -P httpd_disable_trans 1
#关闭selinux对httpd的防护，不然会出现权限问题

安装完成，访问www.haiyun.me/nagios即可。

查看SELinux状态：

getenforce 

临时关闭SELinux：

setenforce 0

CentOS下永久关闭SELinux：

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

或在引导时关闭SELinux，编辑grub配置添加：

selinux=0

Nginx默认虚拟主机在用户通过IP访问，或者通过未设置的域名访问（比如有人把他自己的域名指向了你的ip）的时候生效，默认为第一个Server段的虚拟主机，可通过设置指定默认虚拟主机：

server {
listen     80 default; #default表示默认虚拟主机，未知域名或通过IP访问 
rewrite ^(.*) https://www.haiyun.me permanent; #301重定向到自己的网站
#return 404; #返回相应的状态码
#return 403;
#return 500;
}

Nginx配置判断来路referer如果为*.www.haiyun.me返回403：

if ($http_referer ~* .*\.www.haiyun.me){
return 403;
}

判断用户user_agent如果为NSPlayer返回403：

if ($http_user_agent ~* NSPlayer.*){
return 403;
}

根据访客IP做限制：

if ($remote_addr != "192.168.1.5"){
    return 403;
}