How to Install Icinga 2 and Icinga Web 2 on CentOS 7

Table of Contents

Icinga 2 is a popular open source network resource monitoring system, and Icinga Web 2 is a web interface for Icinga 2. This article will describe how to install them on a CentOS 7 server.

Step 1: Update the system

sudo yum install epel-release -y
sudo yum update -y
sudo shutdown -r now

After the reboot, use the same sudo user to log in.

To make CentOS network interface enable at system start-up, please also run follow¹:

cd /etc/sysconfig/network-scripts/
sed -i -e 's@^ONBOOT="no@ONBOOT="yes@' ifcfg-eth0

Step 2: Install Apache

Install Apache using YUM:

sudo yum install httpd -y

Disable the pre-set Apache welcome page:

sudo sed -i 's/^/#&/g' /etc/httpd/conf.d/welcome.conf

Forbid Apache from exposing files and directories within the web root directory /var/www/html to visitors:

sudo sed -i "s/Options Indexes FollowSymLinks/Options FollowSymLinks/" /etc/httpd/conf/httpd.conf

Start the Apache service and get it started on boot:

sudo systemctl start httpd.service
sudo systemctl enable httpd.service

Step 3: Install MariaDB

Install MariaDB using YUM:

sudo yum install mariadb mariadb-server -y

Start the MariaDB service:

sudo systemctl start mariadb.service
sudo systemctl enable mariadb.service

Secure the installation of MariaDB:

sudo /usr/bin/mysql_secure_installation

During the process, answer questions on the screen as below:

Enter current password for root (enter for none): Enter
Set root password? [Y/n]: Y
New password: <your-password>
Re-enter new password: <your-password>
Remove anonymous users? [Y/n]: Y
Disallow root login remotely? [Y/n]: Y
Remove test database and access to it? [Y/n]: Y
Reload privilege tables now? [Y/n]: Y

Step 4: Install PHP

Install PHP and necessary PHP extensions as required by Icinga 2 and Icinga Web 2:

sudo yum install php php-gd php-intl php-ldap php-ZendFramework php-ZendFramework-Db-Adapter-Pdo-Mysql -y

Then you need to setup the proper timezone for your machine, which can be determined from the PHP official website.

Open the PHP configuration file with the vi editor:

sudo vi /etc/php.ini

Find the line:

;date.timezone =

Change it to:

date.timezone = Asia/Hong_Kong

Save and quit:

:wq!

Restart the Apache service in order to put new configurations into effect:

sudo systemctl restart httpd.service

Step 5: Install Icinga 2 and Its Plugins

On CentOS 7, you can install Icinga 2 and its plugins using the icinga YUM repo:

sudo yum install https://packages.icinga.com/epel/icinga-rpm-release-7-latest.noarch.rpm
sudo yum install icinga2 nagios-plugins-all -y

You can learn more about these plugins from the Monitoring Plugins Project.

Start the Icinga 2 service:

sudo systemctl start icinga2.service
sudo systemctl enable icinga2.service

By default, the Icinga 2 program will enable three features: checker, mainlog, and notification. You can verify that using the following command:

sudo icinga2 feature list

Step 6: Setup the Icinga 2 IDO Modules

6.1) Install the IDO (Icinga Data Output) modules for MySQL

sudo yum install icinga2-ido-mysql -y

6.2) Create a database for Icinga 2

Log into the MySQL shell as root:

mysql -u root -p

Use the MariaDB root password you set in step 3 to log in.

Create a database named “icinga” and a database user named icinga with the password icinga, and then grant privileges on this database to this database user.

CREATE DATABASE icinga;
GRANT SELECT, INSERT, UPDATE, DELETE, DROP, CREATE VIEW, INDEX, EXECUTE ON icinga.* TO 'icinga'@'localhost' IDENTIFIED BY 'icinga';
FLUSH PRIVILEGES;
EXIT;

6.3) Import the Icinga 2 IDO schema

mysql -u root -p icinga < /usr/share/icinga2-ido-mysql/schema/mysql.sql

When prompted, input the MariaDB root password to finish the job.

6.4) Enable the IDO MySQL module

sudo vi /etc/icinga2/features-available/ido-mysql.conf

Find these lines:

//user = "icinga"
//password = "icinga"
//host = "localhost"
//database = "icinga"

uncomment them as below:

user = "icinga"
password = "icinga"
host = "localhost"
database = "icinga"

Save and quit:

:wq!

Enable the ido-mysql feature:

sudo icinga2 feature enable ido-mysql
sudo systemctl restart icinga2.service

Step 7: Install Icinga Web 2

7.1) Setup external command pipe

sudo icinga2 feature enable command
sudo systemctl restart icinga2.service

Before you can send commands to Icinga 2 using a web interface, you need to add the “apache” user to the icingacmd group:

sudo usermod -a -G icingacmd apache

You can verify your modification using the following command:

id apache

7.2) Please enable it prior installing the Icinga packages.

sudo yum install epel-release

7.3) Since version 2.5.0 we also require a newer PHP version than what is available in RedHat itself. You need to enable the SCL repository, so that the dependencies can pull in the newer PHP.

sudo yum install centos-release-scl

7.4) Install the icingaweb2 and icingacli RPM packages

sudo yum install icingaweb2 icingacli icingaweb2-selinux -y

If you have SELinux enabled, the package icingaweb2-selinux is also required. For RHEL/CentOS please read the package repositories notes.

Then point the Apache web root directory to the location of Icinga Web 2:

sudo icingacli setup config webserver apache --document-root /usr/share/icingaweb2/public
sudo systemctl restart httpd.service

7.5) Setting up FPM

systemctl start rh-php71-php-fpm.service
systemctl enable rh-php71-php-fpm.service

7.6) Generate a setup token for later use in the web interface

sudo icingacli setup token create

7.7) Modify firewall rules in order to allow web access

sudo firewall-cmd --zone=public --permanent --add-service=http
sudo firewall-cmd --reload

Step 8: Icinga Web 2 Installation Setup

8.1) Initiate the Icinga 2 installation wizard in the web interface

Point your web browser to the following URL:

http://<your-server-ip>/icingaweb2/setup

8.2) On the Welcome page, input the setup token you generated earlier, and then click the “Next” button.

8.3) On the Modules page, select modules you want to enable (at least, the Monitoring module is required), and then click the “Next” button.

8.4) On the Requirements page, make sure that every requirement item is satisfied, and then click the “Next” button.

8.5) On the Authentication page, you need to choose the authentication method when accessing Icinga Web 2. Here, you can choose Database, and then click the “Next” button.

8.6) On the Database Resource page, fill out all required fields as below, and then click the “Next” button.

Resource Name*: icingaweb_db
Database Type*: MySQL
Host*: localhost
Database Name*: icingaweb2
Username*: root
Password*: <MariaDB-root-password>

8.7) On the Authentication Backend page, using the default backend name icingaweb2, click the Next button to move on.

8.8) On the Administration page, setup the first Icinga Web 2 administrative account (say it is icingaweb2admin) and password (icingaweb2pass), and then click the “Next” button.

8.9) On the Application Configuration page, you can adjust application- and logging-related configuration options to fit your needs. For now, you can use the default values listed below and click the “Next” button to proceed.

Show Stacktraces: Checked
User Preference Storage Type*: Database
Logging Type*: Syslog
Logging Level*: Error
Application Prefix*: icingaweb2

8.10) On the Review page, double check your configuration, and then click the Next button.

8.11) On the Monitoring Module Configuration Welcome page, click the Next button.

8.12) On the Monitoring Backend page, use the default backend name icinga and backend type IDO, and then click the “Next” button.

8.13) On the Monitoring IDO Resource page, input IDO database details you setup earlier, and then click the “Next” button.

Resource Name*: icinga_ido
Database Type*: MySQL
Host*: localhost
Database Name*: icinga
Username*: icinga
Password*: icinga

8.14) On the Command Transport page, still use these default values listed below. Click the Next button to move on.

Transport Name*: icinga2
Transport Type*: Local Command File
Command File*: /var/run/icinga2/cmd/icinga2.cmd

8.15) On the Monitoring Security page, still use the default value:

Protected Custom Variables: *pw*,*pass*,community

Click the “Next” button to go to next page.

8.16) On the review page, double check your configuration, and then click the Finish button.

8.17) On the Congratulations! page, click the Login to Icinga Web 2 button to jump to the Icinga Web 2 login page. Use the Icinga Web 2 administrative account and password you setup earlier to log in. Feel free to explore the Icinga Web 2 dashboard. 😆

- End of all, type with ❤️ -