mirror of
https://github.com/LPJon/cwpfixes.git
synced 2026-09-10 22:20:47 -05:00
Create install_netdata
Fixes netdata installation for CWP (CentOS Web Panel) in CentOS 7. Fixes installation issue as well as netdata service starts on reboots
This commit is contained in:
151
install_netdata
Normal file
151
install_netdata
Normal file
@@ -0,0 +1,151 @@
|
||||
#!/bin/bash
|
||||
# Netdata installer for cwp
|
||||
|
||||
# To uninstall netdata please use this command, it will require some confirmation
|
||||
# /usr/local/src/netdata/packaging/installer/netdata-uninstaller.sh --yes
|
||||
|
||||
# ToDo:
|
||||
# Automatic activate on boot
|
||||
|
||||
# Check centos version
|
||||
centosversion=$(rpm -qa \*-release | grep -Ei "oracle|redhat|centos|cloudlinux" | cut -d"-" -f3 | cut -d"." -f 1 | head -n 1)
|
||||
if [[ "$centosversion" -eq "8" ]];then
|
||||
yum -y install 'dnf-command(config-manager)'
|
||||
yum -y install http://repo.okay.com.mx/centos/8/x86_64/release/okay-release-1-3.el8.noarch.rpm
|
||||
yum -y install curl gcc make autoconf autoconf-archive autogen automake --enablerepo=epel --enablerepo=powertools
|
||||
yum -y install MySQL-python python python-yaml python-psycopg2 nodejs lm_sensors --enablerepo=epel --enablerepo=powertools
|
||||
yum -y install nmap-ncat git zlib-devel libuuid-devel --enablerepo=epel --enablerepo=powertools
|
||||
yum -y install libmnl-devel libuv-devel --enablerepo=epel --enablerepo=powertools
|
||||
yum -y install json-c-devel libatomic libyaml-devel lz4-devel systemd-devel
|
||||
yum -y install lz4-devel lz4 json-c-devel libuv-devel libuv --nobest --enablerepo=epel --enablerepo=powertools
|
||||
yum -y install http://mirror.centos.org/centos/8/PowerTools/x86_64/os/Packages/Judy-devel-1.0.5-18.module_el8.1.0+217+4d875839.x86_64.rpm
|
||||
|
||||
# new centos 8 stream
|
||||
cd /usr/local/src
|
||||
wget https://github.com/libuv/libuv/archive/refs/tags/v1.41.0.zip
|
||||
unzip v1.41.0.zip
|
||||
cd libuv-1.41.0
|
||||
## important to run 2 times:
|
||||
sh autogen.sh
|
||||
sh autogen.sh
|
||||
./configure
|
||||
make
|
||||
make install
|
||||
else
|
||||
yum -y install curl gcc make autoconf autoconf-archive autogen automake --enablerepo=epel
|
||||
yum -y install MySQL-python python python-yaml python-psycopg2 nodejs lm_sensors --enablerepo=epel
|
||||
yum -y install nmap-ncat git zlib-devel libuuid-devel --enablerepo=epel
|
||||
yum -y install libmnl-devel libuv-devel --enablerepo=epel
|
||||
yum -y install json-c-devel libatomic libyaml-devel lz4-devel systemd-devel
|
||||
fi
|
||||
|
||||
git clone https://github.com/firehol/netdata.git --depth=1 /usr/local/src/netdata
|
||||
|
||||
if [ -e "/usr/local/src/netdata" ];then
|
||||
cd /usr/local/src/netdata
|
||||
./netdata-installer.sh --disable-cloud --dont-wait
|
||||
fi
|
||||
|
||||
# Apache
|
||||
APACHECHK=`grep -i "^Listen" /usr/local/apache/conf/httpd.conf|grep 8181`
|
||||
|
||||
if [ ! -z "APACHECHK" ];then
|
||||
sed -i "s@http://localhost/@http://localhost:8181/@g" /usr/lib/netdata/conf.d/python.d/apache.conf
|
||||
sed -i "s@http://127.0.0.1/@http://127.0.0.1:8181/@g" /usr/lib/netdata/conf.d/python.d/apache.conf
|
||||
else
|
||||
sed -i "s@http://localhost:8181/@http://localhost/@g" /usr/lib/netdata/conf.d/python.d/apache.conf
|
||||
sed -i "s@http://127.0.0.1:8181/@http://127.0.0.1/@g" /usr/lib/netdata/conf.d/python.d/apache.conf
|
||||
fi
|
||||
|
||||
# Nginx
|
||||
if [ ! -e "/etc/nginx/conf.d/netdata.conf" ];then
|
||||
cat > /etc/nginx/conf.d/netdata.conf <<EOF
|
||||
server {
|
||||
listen 127.0.0.1:80;
|
||||
server_name 127.0.0.1;
|
||||
|
||||
location /stub_status {
|
||||
stub_status;
|
||||
allow 127.0.0.1;
|
||||
deny all;
|
||||
}
|
||||
}
|
||||
EOF
|
||||
fi
|
||||
service nginx reload
|
||||
|
||||
# Varnish
|
||||
gpasswd -a netdata varnish
|
||||
|
||||
# MySQL
|
||||
mysql -e "create user 'netdata'@'localhost';"
|
||||
mysql -e "grant usage on *.* to 'netdata'@'localhost';"
|
||||
mysql -e "flush privileges;"
|
||||
|
||||
# LFD Alerts FIX
|
||||
LFDGREP=`grep "user:netdata" /etc/csf/csf.pignore`
|
||||
if [ -z "$LFDGREP" ];then
|
||||
echo "user:netdata" >> /etc/csf/csf.pignore
|
||||
service lfd restart
|
||||
fi
|
||||
|
||||
|
||||
# Create netdata socket run folder
|
||||
if [ ! -e "/run/netdata" ];then
|
||||
mkdir -p /run/netdata
|
||||
chown netdata.netdata /run/netdata
|
||||
fi
|
||||
|
||||
CHKNETDATA=`grep netdata /usr/local/cwpsrv/conf/cwp_services.conf`
|
||||
sed -i "s/# bind to = \*/bind to = unix:\/run\/netdata\/netdata.sock/g" /etc/netdata/netdata.conf
|
||||
|
||||
if [ -z "$CHKNETDATA" ];then
|
||||
cat >> /usr/local/cwpsrv/conf/cwp_services.conf <<EOF
|
||||
location /netdata {
|
||||
return 301 /netdata/;
|
||||
}
|
||||
|
||||
location ~ /netdata/(?<ndpath>.*) {
|
||||
auth_pam "Secure Zone | root login required";
|
||||
auth_pam_service_name "cwpadmin-auth";
|
||||
|
||||
proxy_redirect off;
|
||||
proxy_set_header Host \$host;
|
||||
|
||||
proxy_set_header X-Forwarded-Host \$host;
|
||||
proxy_set_header X-Forwarded-Server \$host;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_http_version 1.1;
|
||||
proxy_pass_request_headers on;
|
||||
proxy_set_header Connection "keep-alive";
|
||||
proxy_store off;
|
||||
proxy_pass http://unix:/run/netdata/netdata.sock:/\$ndpath\$is_args\$args;
|
||||
|
||||
gzip on;
|
||||
gzip_proxied any;
|
||||
gzip_types *;
|
||||
}
|
||||
EOF
|
||||
fi
|
||||
|
||||
if [ ! -e "/etc/pam.d/cwpadmin-auth" ];then
|
||||
cat > "/etc/pam.d/cwpadmin-auth" <<EOF
|
||||
#%PAM-1.0
|
||||
auth required pam_succeed_if.so user ingroup root
|
||||
auth include password-auth
|
||||
auth required pam_shells.so
|
||||
auth required pam_nologin.so
|
||||
|
||||
account include password-auth
|
||||
password include password-auth
|
||||
|
||||
session required pam_loginuid.so
|
||||
session include password-auth
|
||||
EOF
|
||||
fi
|
||||
|
||||
# restart netdata
|
||||
echo "d /var/run/netdata 0755 root root" > /usr/lib/tmpfiles.d/netdata.conf
|
||||
service netdata restart
|
||||
service cwpsrv reload
|
||||
sleep 3
|
||||
Reference in New Issue
Block a user