差分

このページの2つのバージョン間の差分を表示します。

--- ja:documentation:07_technical_annexes:30_pfms_install_latest_ubuntu_server [2023/12/27 08:24] – [PhantomJS] junichi
+++ ja:documentation:07_technical_annexes:30_pfms_install_latest_ubuntu_server [2026/09/06 19:55] (現在) – 削除 - 外部編集 (不明な日付) 127.0.0.1
@@ 行 1: / 行 1: @@
-====== Ubuntu サーバへの Pandora FMS インストールガイド ======
-{{indexmenu_n>30}}
-[[:ja:documentation:start|Pandora FMS ドキュメント一覧に戻る]]
-<WRAP center round todo 60%>
-We are working on the translation of the Pandora FMS documentation. Sorry for any inconvenience.
-</WRAP>
-===== 前提条件 =====
-   * Ubuntu server 22.04 with **root.** user rights
-   * Internet connection.
-   * Ubuntu server 22.04 および **root** 権限
-   * インターネット接続
-===== 基本ツール =====
-In a terminal window with user **root**:
-ターミナル画面で **root** ユーザで実行します。
-<code>
-apt install -y gawk sed grep
-</code>
-----
-<code>
-rm -rf /opt/pandora/deploy
-mkdir -p /opt/pandora/deploy
-cd /opt/pandora/deploy
-</code>
-----
-<code>
-apt update
-apt install -y net-tools vim curl wget \
-  software-properties-common apt-transport-https\
-  ca-certificates gnupg lsb-release
-</code>
-==== Apache2 および PHP 8 ====
-<code>
-add-apt-repository ppa:ondrej/php
-apt update
-apt upgrade
-apt install -y php8.0-fpm php8.0-common libapache2-mod-fcgid php8.0-cli apache2
-a2enmod proxy_fcgi setenvif
-systemctl reload apache2
-a2enconf php8.0-fpm
-systemctl restart php8.0-fpm
-</code>
-===== Pandora FMS Web コンソール依存ファイル =====
-<code>
-apt install -y \
-  ldap-utils postfix \
-  wget graphviz \
-  xfonts-75dpi xfonts-100dpi \
-  xfonts-ayu xfonts-intl-arabic \
-  xfonts-intl-asian xfonts-intl-phonetic \
-  xfonts-intl-japanese-big xfonts-intl-european \
-  xfonts-intl-chinese xfonts-intl-japanese \
-  xfonts-intl-chinese-big libzstd1 \
-  gir1.2-atk-1.0 libavahi-common-data\
-  cairo-perf-utils libfribidi-bin \
-  php8.0-mcrypt php8.0-gd \
-  php8.0-curl php8.0-mysql \
-  php8.0-ldap php8.0-fileinfo \
-  php8.0-gettext php8.0-snmp\
-  php8.0-mbstring php8.0-zip \
-  php8.0-xml rpc php8.0-xml \
-  php8.0-yaml libnet-telnet-perl\
-  whois cron
-</code>
-===== Pandora FMS サーバ依存ファイル =====
-<code>
-apt install -y \
-  perl nmap\
-  fping sudo \
-  net-tools nfdump \
-  expect openssh-client \
-  postfix unzip \
-  xprobe coreutils \
-  libmoosex-role-timer-perl libmoosex-perl \
-  libdbd-mysql-perl libcrypt-mysql-perl \
-  libhttp-request-ascgi-perl liblwp-useragent-chicaching-perl \
-  liblwp-protocol-https-perl snmp\
-  libnetaddr-ip-perl libio-socket-ssl-perl\
-  libio-socket-socks-perl libio-socket-ip-perl \
-  libio-socket-inet6-perl libnet-telnet-perl \
-  libjson-perl libencode-perl \
-  cron libgeo-ip-perl\
-  arping snmp-mibs-downloader \
-  openjdk-8-jdk
-</code>
-----
-<code>
-mkdir -m 0755 -p /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \
-  sudo gpg --yes --dearmor -o /etc/apt/keyrings/docker.gpg
-threw out \
-  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | \
-  sudo tee /etc/apt/sources.list.d/docker.list
-apt update -y
-apt-get install -y \
-  docker-ce docker-ce-cli containerd.io\
-  docker-buildx-plugin docker-compose-plugin
-systemctl disable docker --now
-systemctl disable docker.socket --now
-</code>
-===== WMI 監視を行うための依存ファイル =====
-<code>
-curl -O https://firefly.pandorafms.com/pandorafms/utils/bin/wmic
-curl -O https://firefly.pandorafms.com/pandorafms/utils/bin/pandorawmic
-chmod +x pandorawmic wmic
-cp -a wmic /usr/bin/
-cp -a pandorawmic /usr/bin/
-</code>
-==== Fping ====
-<code>
-rm -f /usr/sbin/fping
-ln -s /usr/bin/fping /usr/sbin/fping
-</code>
-===== Google Chrome Tool =====
-<code>
-wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
-dpkg -i google-chrome-stable_current_amd64.deb
-ln -s /usr/bin/google-chrome /usr/bin/chromium-browser
-</code>
-===== VMware Tool =====
-<code>
-apt install -y \
-  lib32z1 lib32z1 \
-  build-essential uuid uuid-dev \
-  libssl-dev perl-doc\
-  libxml-libxml-perl libcrypt-ssleay-perl \
-  libsoap-lite-perl libmodule-build-perl
-wget https://firefly.pandorafms.com/pandorafms/utils/VMware-vSphere-Perl-SDK-7.0.0-16453907.x86_64.tar.gz
-tar -xzvf VMware-vSphere-Perl-SDK-7.0.0-16453907.x86_64.tar.gz
-cd vmware-vsphere-cli-distrib/
-sed --follow-symlinks -i -e "s/[^#].*show_EULA().*/ #show_EULA();/g" vmware-install.pl
-./vmware-install.pl -default
-cd ..
-</code>
-===== Oracle client tool =====
-<code>
-mkdir -p /opt/oracle
-wget https://download.oracle.com/otn_software/linux/instantclient/19800/instantclient-basic-linux.x64-19.8.0.0.0dbru.zip
-wget https://download.oracle.com/otn_software/linux/instantclient/19800/instantclient-sqlplus-linux.x64-19.8.0.0.0dbru.zip
-rm -fr /opt/oracle/*
-unzip instantclient-basic-linux.x64-19.8.0.0.0dbru.zip -d /opt/oracle/
-unzip instantclient-sqlplus-linux.x64-19.8.0.0.0dbru.zip -d /opt/oracle/
-</code>
-----
-<code>
-cat>> /root/.profile <<'EOF_ENV'
-#!/bin/bash
-VERSION=19.8
-export PATH=$PATH:/opt/oracle/instantclient_19_8
-export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/oracle/instantclient_19_8
-export ORACLE_HOME=/opt/oracle/instantclient_19_8
-EOF_ENV
-</code>
-<code>
-source '/root/.profile'
-</code>
-===== IPAM 依存ファイル =====
-<code>
-apt install -y \
-  xprobe libnetaddr-ip-perl \
-  coreutils libdbd-mysql-perl \
-  libxml-simple-perl libgeo-ip-perl \
-  libio-socket-inet6-perl libxml-twig-perl \
-  libnetaddr-ip-perl
-</code>
-===== MS SQL のための ODBC 依存ファイル =====
-<code>
-curl -sSL https://packages.microsoft.com/keys/microsoft.asc | \
-  tee /etc/apt/trusted.gpg.d/microsoft.asc
-curl -sSL https://packages.microsoft.com/config/ubuntu/20.04/prod.list | \
-  tee /etc/apt/sources.list.d/microsoft-prod.list
-apt update
-env ACCEPT_EULA=Y apt install -y msodbcsql17
-</code>
-===== AppArmor および UFW 設定 =====
-<code>
-systemctl stop ufw.service
-systemctl disable ufw
-systemctl stop apparmor
-systemctl disable apparmor
-</code>
-===== MySQL インストール =====
-<code>
-curl -O https://repo.percona.com/apt/percona-release_latest.generic_all.deb
-apt install -y gnupg2 lsb-release ./percona-release_latest.generic_all.deb
-percona-release setup ps80
-apt install -y percona-server-server percona-xtrabackup-80
-</code>
-----
-<code>
-systemctl start mysql
-mysql -uroot -p
-ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'pandora';
-create database pandora;
-CREATE USER pandora IDENTIFIED BY 'pandora';
-ALTER USER 'pandora' IDENTIFIED WITH mysql_native_password BY 'pandora';
-GRANT ALL PRIVILEGES ON pandora.* TO 'pandora';
-exit;
-</code>
-----
-<code>
-cat > /etc/mysql/my.cnf << EOF_DB
-[mysqld]
-datadir=/var/lib/mysql
-user=mysql
-character-set-server=utf8mb4
-skip-character-set-client-handshake
-# Disabling symbolic-links is recommended to prevent assorted security risks
-symbolic-links=0
-# Mysql optimizations for Pandora FMS
-# Please check the documentation in http://pandorafms.com for better results
-max_allowed_packet = 64M
-innodb_buffer_pool_size = grep -i total /proc/meminfo | head-1 | awk '{printf "%.2f \n", $(NF-1)*0.4/1024}' | sed "s/..*$/M/g"
-innodb_lock_wait_timeout = 90
-innodb_file_per_table
-innodb_flush_log_at_trx_commit = 0
-innodb_flush_method = O_DIRECT
-innodb_log_file_size = 64M
-innodb_log_buffer_size = 16M
-innodb_io_capacity = 300
-thread_cache_size = 8
-thread_stack = 256K
-max_connections = 100
-key_buffer_size=4M
-read_buffer_size=128K
-read_rnd_buffer_size=128K
-sort_buffer_size=128K
-join_buffer_size=4M
-skip-log-bin
-sql_mode=""
-log-error=/var/log/mysql/error.log
-[mysqld_safe]
-log-error=/var/log/mysqld.log
-pid-file=/var/run/mysqld/mysqld.pid
-EOF_DB
-</code>
-----
-<code>
-  systemctl restart mysql
-</code>
-===== Pandora FMS のインストール =====
-<code>
-curl -LSs --output \
-  pandorafms_console-7.0NG.tar.gz\
-  "http://firefly.pandorafms.com/pandorafms/latest/Tarball/LTS/pandorafms_console-7.0NG.tar.gz"
-curl -LSs --output \
-  pandorafms_server-7.0NG.tar.gz\
-  "http://firefly.pandorafms.com/pandorafms/latest/Tarball/LTS/pandorafms_server-7.0NG.tar.gz"
-curl -LSs --output \
-  pandorafms_agent_linux-7.0NG.tar.gz\
-  "http://firefly.pandorafms.com/pandorafms/latest/Tarball/LTS/pandorafms_agent_linux-7.0NG.tar.gz"
-</code>
-==== Pandora FMS Web コンソールのインストール ====
-<code>
-tar xvzf pandorafms_console-7.0NG.tar.gz
-cp -Ra pandora_console /var/www/html/
-rm -f /var/www/html/pandora_console/*.spec
-</code>
-==== Pandora FMS サーバのインストール ====
-<code>
-useradd pandora
-mv pandorafms_server-7.0NG.tar.gz /opt/pandora/deploy/
-cd /opt/pandora/deploy
-tar xvfz pandorafms_server-7.0NG.tar.gz
-cd pandora_server
-./pandora_server_installer --install
-</code>
-==== Pandora FMS エージェントのインストール ====
-<code>
-apt install -y libyaml-tiny-perl perl coreutils wget curl unzip procps python3 python3-pip
-mv pandorafms_agent_linux-7.0NG.tar.gz /opt/pandora/deploy/
-cd /opt/pandora/deploy
-tar xvzf pandorafms_agent_linux-7.0NG.tar.gz
-unix cd
-./pandora_agent_installer --install
-cp -a tentacle_client /usr/local/bin/
-</code>
-==== GoTTY インストール ====
-<code>
-cd /opt/pandora/deploy
-wget https://firefly.pandorafms.com/pandorafms/utils/gotty_linux_amd64.tar.gz
-tar xvzf gotty_linux_amd64.tar.gz
-mv gotty /usr/bin/
-</code>
-==== SSL 設定 ====
-<code>
-cat > /etc/apache2/conf-available/ssl-params.conf << EOF_PARAM
-SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
-     SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
-     SSLHonorCipherOrder On
-     Header always set X-Frame-Options DENY
-     Header always set X-Content-Type-Options nosniff
-     # Requires Apache >= 2.4
-     SSLCompression off
-     SSLUseStapling on
-     SSLStaplingCache "shmcb:logs/stapling-cache(150000)"
-     # Requires Apache >= 2.4.11
-     SSLSessionTickets Off
-EOF_PARAM
-</code>
-----
-<code>
-a2enmod ssl
-a2enmod headers
-a2enconf ssl-params
-a2ensite default-ssl
-a2enconf ssl-params
-apache2ctl configtest
-systemctl restart apache2
-systemctl enable mysql --now
-systemctl enable apache2 --now
-systemctl enable php8.0-fpm --now
-</code>
-==== MySQL の構造とデータ ====
-<code>
-mysql -uroot -ppandora
-wear pandora;
-source /var/www/html/pandora_console/pandoradb.sql
-source /var/www/html/pandora_console/pandoradb_data.sql
-exit;
-</code>
-==== PHP および Apache2 の設定 ====
-<code>
-cat > /var/www/html/pandora_console/include/config.php << EO_CONFIG_F
-<?php
-\$config["dbtype"] = "mysql";
-\$config["dbname"]="pandora";
-\$config["dbuser"]="pandora";
-\$config["dbpass"]="pandora";
-\$config["dbhost"]="127.0.0.1";
-\$config["homedir"]="/var/www/html/pandora_console";
-\$config["homeurl"]="/pandora_console";
-error_reporting(0);
-\$ownDir = dirname(__FILE__) . '/';
-include (\$ownDir . "config_process.php");
-EO_CONFIG_F
-</code>
-----
-<code>
-cat > /etc/apache2/conf-enabled/pandora_security.conf << EO_CONFIG_F
-<Directory "/var/www/html">
-     Options Indexes FollowSymLinks
-     Allow Override All
-     Require all granted
-</Directory>
-EO_CONFIG_F
-cat >> /etc/apache2/mods-enabled/00-proxy.conf << 'EO_HTTPD_WSTUNNEL'
-Proxy Requests Off
-<Proxy *>
-     Require all granted
-</Proxy>
-ProxyPass /ws ws:127.0.0.1:8080
-ProxyPassReverse /ws ws:127.0.0.1:8080
-EO_HTTPD_WSTUNNEL
-</code>
-----
-<code>
-chmod 600 /var/www/html/pandora_console/include/config.php
-chown -R www-data:www-data /var/www/html/pandora_console
-mv /var/www/html/pandora_console/install.php /var/www/html/pandora_console/install.done
-</code>
-----
-<code>
-ln -s /etc/php/8.0/fpm/php.ini /etc/
-sed --follow-symlinks -i -e "s/^max_input_time.*/max_input_time = -1/g" /etc/php.ini
-sed --follow-symlinks -i -e "s/^max_execution_time.*/max_execution_time = 0/g" /etc/php.ini
-sed --follow-symlinks -i -e "s/^upload_max_filesize.*/upload_max_filesize = 800M/g" /etc/php.ini
-sed --follow-symlinks -i -e "s/^memory_limit.*/memory_limit = 800M/g" /etc/php.ini
-sed --follow-symlinks -i -e "s/.*post_max_size =.*/post_max_size = 800M/" /etc/php.ini
-sed --follow-symlinks -i -e "s/^disable_functions/;disable_functions/" /etc/php.ini
-</code>
-----
-<code>
-cat > /var/www/html/index.html << EOF_INDEX
-<meta HTTP-EQUIV="REFRESH" content="0; url=/pandora_console/">
-EOF_INDEX
-systemctl restart apache2
-systemctl restart php8.0-fpm
-</code>
-==== Pandora FMS エージェントとサーバ設定 ====
-<code>
-cat> /etc/snmp/snmptrapd.conf <<EOF
-authCommunity log public
-disableAuthorization yes
-EOF
-</code>
-----
-<code>
-sed -i -e "s/^dbhost.*/dbhost 127.0.0.1/g" /etc/pandora/pandora_server.conf
-sed -i -e "s/^dbname.*/dbname pandora/g" /etc/pandora/pandora_server.conf
-sed -i -e "s/^dbuser.*/dbuser pandora/g" /etc/pandora/pandora_server.conf
-sed -i -e "s|^dbpass.*|dbpass pandora|g" /etc/pandora/pandora_server.conf
-sed -i -e "s/^dbport.*/dbport 3306/g" /etc/pandora/pandora_server.conf
-sed -i -e "s/^#.mssql_driver.*/mssql_driver 17/g" /etc/pandora/pandora_server.conf
-</code>
-----
-<code>
-grep -q "group www-data" /etc/pandora/pandora_server.conf || \
-cat>> /etc/pandora/pandora_server.conf<<EOF_G
-#Adding group www-data to assigning remote-config permission correctly for ubuntu 22.04
-group www-data
-EOF_G
-</code>
-----
-<code>
-sed -i "s/^remote_config.*$/remote_config 1/g" /etc/pandora/pandora_agent.conf
-</code>
-----
-<code>
-cat> /etc/pandora/pandora_server.env <<'EOF_ENV'
-#!/bin/bash
-VERSION=19.8
-export PATH=$PATH:/opt/oracle/instantclient_19_8
-export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/oracle/instantclient_19_8
-export ORACLE_HOME=/opt/oracle/instantclient_19_8
-export OPENSSL_CONF=/etc/ssl
-EOF_ENV
-</code>
-----
-<code>
-cat>> /etc/sysctl.conf <<EO_KO
-# Pandora FMS Optimization
-#default=5
-net.ipv4.tcp_syn_retries = 3
-#default=5
-net.ipv4.tcp_synack_retries = 3
-#default=1024
-net.ipv4.tcp_max_syn_backlog = 65536
-#default=124928
-net.core.wmem_max = 8388608
-#default=131071
-net.core.rmem_max = 8388608
-#default = 128
-net.core.somaxconn = 1024
-#default = 20480
-net.core.optmem_max = 81920
-EO_KO
-sysctl --system
-</code>
-----
-<code>
-chown pandora: www-data /var/log/pandora
-chmod g+s /var/log/pandora
-cat> /etc/logrotate.d/pandora_server <<EO_LR
-/var/log/pandora/pandora_server.log
-/var/log/pandora/web_socket.log
-/var/log/pandora/pandora_server.error {
-         your apache root
-         weekly
-         missingok
-         size 300000
-         rotate 3
-         max age 90
-         compress
-         notifempty
-         copytruncate
-         create 660 pandora apache
-}
-/var/log/pandora/pandora_snmptrap.log {
-         your apache root
-         weekly
-         missingok
-         size 500000
-         rotate 1
-         max age 30
-         notifempty
-         copytruncate
-         create 660 pandora apache
-}
-EO_LR
-</code>
-----
-<code>
-cat> /etc/logrotate.d/pandora_agent <<EO_LRA
-/var/log/pandora/pandora_agent.log {
-         your apache root
-         weekly
-         missingok
-         size 300000
-         rotate 3
-         max age 90
-         compress
-         notifempty
-         copytruncate
-}
-EO_LRA
-chmod 0644 /etc/logrotate.d/pandora_server
-chmod 0644 /etc/logrotate.d/pandora_agent
-</code>
-==== Tentacle および cron ====
-<code>
-/etc/init.d/pandora_server start
-systemctl enablepandora_server
-service tentacle_server start
-systemctl enable tentacle_server
-</code>
-----
-<code>
-echo "* * * * * root wget -q -O - --no-check-certificate --load-cookies /tmp/cron-session-cookies --save-cookies /tmp/cron-session-cookies --keep -session-cookies http://127.0.0.1/pandora_console/enterprise/cron.php >> $PANDORA_CONSOLE/log/cron.log" >> /etc/crontab
-echo "@hourly root bash -c /etc/cron.hourly/pandora_db" >> /etc/crontab
-</code>
-----
-Agent remote configuration:
-エージェントリモート設定:
-<code>
-sed -i "s/^remote_config.*$/remote_config 1/g" /etc/pandora/pandora_agent.conf
-/etc/init.d/pandora_agent_daemon start
-systemctl enable pandora_agent_daemon
-</code>
-<WRAP center round tip 60%>
-If there was a problem with PhantomJS:
-</WRAP>
-<WRAP center round tip 60%>
-PhantomJS で問題があった場合:
-</WRAP>
-<code>
-sed --follow-symlinks -i -e "s/^openssl_conf = openssl_init/#openssl_conf = openssl_init/g" /etc/ssl/openssl.cnf
-</code>
-===== Pandora FMS へのログイン =====
-To access the Web Console, type the IP address (or URL) of the device followed by ''/pandora_console/'' .
-Web コンソールにアクセスするには、デバイスの IP アドレス (または URL) に続けて ''/pandora_console/'' を入力します。
-The default login credentials are:
-デフォルトのログイン情報は次の通りです。
-   * user: ''admin''
-   * password: ''pandora''
-   * ユーザ: ''admin''
-   * パスワード: ''pandora''
-[[:ja:documentation:start|Pandora FMS ドキュメント一覧に戻る]]
-===== (OBSOLETE) =====
-==== Websocket エンジン ====
-<code>
-mv /var/www/html/pandora_console/pandora_websocket_engine /etc/init.d/
-chmod +x /etc/init.d/pandora_websocket_engine
-/etc/init.d/pandora_websocket_engine start
-systemctl enable pandora_websocket_engine
-</code>