Cactiをインストールする (CentOS 7環境)

httpdのインストール

phpのインストール

net-snmpのインストール

SELinuxの無効化

MariaDBのインストール

MariaDBの起動

RRDTool のインストール

EPEL Repository (EPELリポジトリ)を有効にする

Cacti のインストール

httpd.conf (/etc/httpd/conf.d/cacti.conf) の編集

変更前

#
# Cacti: An rrd based graphing tool
#

# For security reasons, the Cacti web interface is accessible only to
# localhost in the default configuration. If you want to allow other clients
# to access your Cacti installation, change the httpd ACLs below.
# For example:
# On httpd 2.4, change "Require host localhost" to "Require all granted".
# On httpd 2.2, change "Allow from localhost" to "Allow from all".

Alias /cacti    /usr/share/cacti

<Directory /usr/share/cacti/>
	<IfModule mod_authz_core.c>
		# httpd 2.4
		Require host localhost
	</IfModule>
	<IfModule !mod_authz_core.c>
		# httpd 2.2
		Order deny,allow
		Deny from all
		Allow from localhost
	</IfModule>
</Directory>

<Directory /usr/share/cacti/install>
	# mod_security overrides.
	# Uncomment these if you use mod_security.
	# allow POST of application/x-www-form-urlencoded during install
	#SecRuleRemoveById 960010
	# permit the specification of the rrdtool paths during install
	#SecRuleRemoveById 900011
</Directory>


# These sections marked "Require all denied" (or "Deny from all")
# should not be modified.
# These are in place in order to harden Cacti.
<Directory /usr/share/cacti/log>
	<IfModule mod_authz_core.c>
		Require all denied
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order deny,allow
		Deny from all
	</IfModule>
</Directory>
<Directory /usr/share/cacti/rra>
	<IfModule mod_authz_core.c>
		Require all denied
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order deny,allow
		Deny from all
	</IfModule>
</Directory>

変更後

#
# Cacti: An rrd based graphing tool
#

# For security reasons, the Cacti web interface is accessible only to
# localhost in the default configuration. If you want to allow other clients
# to access your Cacti installation, change the httpd ACLs below.
# For example:
# On httpd 2.4, change "Require host localhost" to "Require all granted".
# On httpd 2.2, change "Allow from localhost" to "Allow from all".

Alias /cacti    /usr/share/cacti

<Directory /usr/share/cacti/>
	<IfModule mod_authz_core.c>
		# httpd 2.4
		#Require host localhost
		Require all granted
	</IfModule>
	<IfModule !mod_authz_core.c>
		# httpd 2.2
		Order deny,allow
		Deny from all
		Allow from localhost
	</IfModule>
</Directory>

<Directory /usr/share/cacti/install>
	# mod_security overrides.
	# Uncomment these if you use mod_security.
	# allow POST of application/x-www-form-urlencoded during install
	#SecRuleRemoveById 960010
	# permit the specification of the rrdtool paths during install
	#SecRuleRemoveById 900011
</Directory>


# These sections marked "Require all denied" (or "Deny from all")
# should not be modified.
# These are in place in order to harden Cacti.
<Directory /usr/share/cacti/log>
	<IfModule mod_authz_core.c>
		Require all denied
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order deny,allow
		Deny from all
	</IfModule>
</Directory>
<Directory /usr/share/cacti/rra>
	<IfModule mod_authz_core.c>
		Require all denied
	</IfModule>
	<IfModule !mod_authz_core.c>
		Order deny,allow
		Deny from all
	</IfModule>
</Directory>

MariaDB(MySQL) タイムゾーンの設定

/etc/my.cnf.d/server.cnf

[mysqld]
default-time-zone = 'Asia/Tokyo'

  show variables like '%time_zone%';

+------------------+---------------+
| Variable_name    | Value         |
+------------------+---------------+
| system_time_zone | ???? (?W????) |
| time_zone        | Asia/Tokyo    |
+------------------+---------------+
2 rows in set (0.01 sec)

  grant select on mysql.time_zone_name to 'cactiuser'@'localhost' identified by '(cactiuser のパスワード)';

MariaDBの設定

/etc/my.cnf.d/server.cnf

[mysqld]
default-time-zone = 'Asia/Tokyo'
collation-server = utf8mb4_unicode_ci
character-set-client = utf8mb4
character-set-server = utf8mb4
max_heap_table_size = 300M
tmp_table_size = 128M
join_buffer_size = 128M
innodb_buffer_pool_size = 960M
innodb_doublewrite = OFF
innodb_flush_log_at_timeout = 5
innodb_read_io_threads = 48
innodb_write_io_threads = 32

データベースの作成

mysql -u root -p

create database cacti;

ユーザーの作成

GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY '(cactiユーザーのパスワード)';
FLUSH privileges;

GRANT ALL ON cacti.* TO cacti@localhost IDENTIFIED BY '(cactiユーザーのパスワード)';
FLUSH privileges;

quit;

補足

mysqladmin -u root -p create cactiuser

mysqladmin -u root -p create cacti

テーブル等の作成

mysql -u cactiuser -p cacti < /usr/share/doc/cacti-0.8.8g/cacti.sql

データベースユーザーが "cacti" の場合

mysql -u cacti -p cacti < /usr/share/doc/cacti-0.8.8g/cacti.sql

mysql -u (データベースのユーザー名) -p (データベース名) < /usr/share/doc/cacti-0.8.8g/cacti.sql

/etc/cacti/db.php の編集

補足

<?php
/*
 +-------------------------------------------------------------------------+
 | Copyright (C) 2004-2016 The Cacti Group                                 |
 |                                                                         |
 | This program is free software; you can redistribute it and/or           |
 | modify it under the terms of the GNU General Public License             |
 | as published by the Free Software Foundation; either version 2          |
 | of the License, or (at your option) any later version.                  |
 |                                                                         |
 | This program is distributed in the hope that it will be useful,         |
 | but WITHOUT ANY WARRANTY; without even the implied warranty of          |
 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the           |
 | GNU General Public License for more details.                            |
 +-------------------------------------------------------------------------+
 | Cacti: The Complete RRDTool-based Graphing Solution                     |
 +-------------------------------------------------------------------------+
 | This code is designed, written, and maintained by the Cacti Group. See  |
 | about.php and/or the AUTHORS file for specific developer information.   |
 +-------------------------------------------------------------------------+
 | http://www.cacti.net/                                                   |
 +-------------------------------------------------------------------------+
*/

/* make sure these values refect your actual database/host/user/password */
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser"; /* 必要に応じて変更 */
$database_password = "(cactiユーザーのパスワード)"; /* 必要に応じて変更 */
$database_port = "3306";
$database_ssl = false;

/*
   Edit this to point to the default URL of your Cacti install
   ex: if your cacti install as at http://serverip/cacti/ this
   would be set to /cacti/
*/
//$url_path = "/cacti/";

/* Default session name - Session name must contain alpha characters */
//$cacti_session_name = "Cacti";

?>

アクセス権の変更

cron.d の編集

変更前

#*/5 * * * *	cacti	/usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1

変更後

*/5 * * * *	cacti	/usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1

ファイアウォールの編集

著者

neg

iPentec.com の代表。ハードウェア、サーバー投資、管理などを担当。
Office 365やデータベースの記事なども担当。