Cacti新版1.2.18部署安装

1，关闭防火墙和selinux安装常用工具

systemctl stop firewalld && systemctl disable firewalld

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

cat /etc/selinux/config

关闭selinux后机器需要重启生效

检查系统时间是否有误

date

如果时间有问题，下载ntpdate同步时间

yum install -y ntpdate

ntpdate -u ntp1.aliyun.com

将系统时间写入到bios中

clock -w

yum install -y vim wget net-tools bash-completion yum-utils

2，下载安装编辑PHP7.2

rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

rpm -ivh http://rpms.remirepo.net/enterprise/remi-release-7.rpm

yum -y install httpd httpd-devel

vim /etc/httpd/conf.d/cacti.conf

这里是新建的一个cacti.conf文件，可以直接将内容复制粘贴上下述配置文件中

#Cacti: An RRDtool based graphing web application

#

# For security reasons, the Cacti web interface is accessible only to

# localhost in the default configuration. If you want to allow other clients

# to access your Cacti installation, change the httpd ACLs below.

# For example:

# On httpd 2.4, change "Require host localhost" to "Require all granted".

# On httpd 2.2, change "Allow from localhost" to "Allow from all".

#端口修改为80

<VirtualHost *:80>

LogLevel warn

#servername修改为自己主机地址

ServerName 192.168.200.242

ServerAdmin admin@yourdomain.com

DocumentRoot "/var/www/html/cacti"

Alias /cacti /var/www/html/cacti

#注释掉加密

# SSLEngine On

# SSLCertificateFile /etc/ssl/certs/YourOwnCertFile.crt

# SSLCertificateKeyFile /etc/ssl/private/YourOwnCertKey.key

<Directory /var/www/html/cacti/>

<IfModule mod_authz_core.c>

# httpd 2.4

Require all granted

</IfModule>

<IfModule !mod_authz_core.c>

# httpd 2.2

Order deny,allow

Deny from all

Allow from all

</IfModule>

</Directory>

<Directory /var/www/html/cacti/install>

# mod_security overrides.

# Uncomment these if you use mod_security.

# allow POST of application/x-www-form-urlencoded during install

#SecRuleRemoveById 960010

# permit the specification of the RRDtool paths during install

#SecRuleRemoveById 900011

</Directory>

# These sections marked "Require all denied" (or "Deny from all")

# should not be modified.

# These are in place in order to harden Cacti.

<Directory /var/www/html/cacti/log>

<IfModule mod_authz_core.c>

Require all denied

</IfModule>

<IfModule !mod_authz_core.c>

Order deny,allow

Deny from all

</IfModule>

</Directory>

<Directory /var/www/html/cacti/rra>

<IfModule mod_authz_core.c>

Require all denied

</IfModule>

<IfModule !mod_authz_core.c>

Order deny,allow

Deny from all

</IfModule>

</Directory>

</VirtualHost>

重启http服务并设置开机启动

systemctl restart httpd && systemctl enable httpd

3，安装net-snmp工具，并对其编辑，进行监控设备信息的抓取。

yum -y install net-snmp net-snmp-utils net-snmp-libs net-snmp-devel

systemctl enable snmpd

systemctl start snmpd

vim /etc/snmp/snmpd.conf

第85行取消注释

第151行取消注释，并修改相关参数

重启服务并进行简单测试，只要有数据返回，即表示成功。

systemctl restart snmpd

snmpwalk -v 2c -c public localhost

4，安装配置mariadb

编辑miradb.repo，安装10.4版本mariadb（yum库中默认版本5.5.56，版本太低，后续安装cacti会报错）或修改repo文件，通过yum安装最新版10.4

vim /etc/yum.repo/mariadb.repo

[mariadb]
name = MariaDB
baseurl = https://mirrors.ustc.edu.cn/mariadb/yum/10.4/centos7-amd64/
gpgkey=https://mirrors.ustc.edu.cn/mariadb/yum/RPM-GPG-KEY-MariaDB
gpgcheck=1

安装mariadb（如果安装的还是旧版本的，执行命令yum clean all && yum makecache）

yum -y install mariadb mariadb-server mariadb-devel MariaDB-client

systemctl enable mariadb && systemctl start mariadb

按需对数据库进行初始化

mysql_secure_installation

创建cacti数据库，设置编码为utf8，并创建cacti用户，密码为cacti，允许所有数据库的所有权限

mysql -uroot -p

create database cacti charset utf8;

grant all on *.* to cacti@localhost identified by 'cacti';

编辑数据库配置文件

vim /etc/my.cnf.d/server.cnf

[client]

default-character-set = utf8mb4

[mysql]

default-character-set = utf8mb4

[mysqld]

character_set_server=utf8mb4

character-set-client-handshake = true

character_set_client = utf8mb4

collation-server = utf8mb4_unicode_ci

init_connect=’SET NAMES utf8mb4'

max_heap_table_size = 128M

max_allowed_packet = 16777216

join_buffer_size = 128M

innodb_file_format = Barracuda

tmp_table_size = 64M

join_buffer_size = 128M

innodb_file_per_table = ON

innodb_buffer_pool_size = 1024M

innodb_doublewrite = off

innodb_lock_wait_timeout = 50

innodb_flush_log_at_trx_commit = 2

innodb_large_prefix = 1

log-error = /var/log/mysql/mysql-error.log

log-queries-not-using-indexes = 1

slow-query-log = 1

slow-query-log-file = /var/log/mysql/mysql-slow.log

innodb_doublewrite = ON

innodb_flush_method = O_DIRECT

innodb_flush_log_at_timeout = 3

innodb_read_io_threads = 32

innodb_write_io_threads = 16

innodb_buffer_pool_instances = 9

innodb_io_capacity = 5000

innodb_io_capacity_max = 10000

重启数据库服务，使其生效：

systemctl restart mariadb

进行数据库时间更改（直接运行，不需要登录mysql）

mysql -uroot -p mysql</usr/share/mysql/mysql_test_data_timezone.sql

mysql -uroot -p

grant all on mysql.time_zone_name to cacti@localhost;

flush privileges;

5，下载安装cacti1.2.18

wget --no-check-certificate https://www.cacti.net/downloads/cacti-1.2.18.tar.gz

tar -xvf cacti-1.2.18.tar.gz -C /var/www/html/

mv /var/www/html/cacti-1.2.18/ /var/www/html/cacti

chown apache:apache -R /var/www/html/cacti/

chmod 777 -R /var/www/html/cacti/log/

chmod 777 -R /var/www/html/cacti/rra/

导入cacti默认数据库表（mysql -uroot -p cacti < /var/www/html/cacti/cacti.sql ）

或 mysql -uroot -p

use cacti;

source /var/www/html/cacti/cacti.sql;

6，安装rrdtool工具，默认安装是1.4.8版本

yum -y install gcc mysql-devel autautomake libtool dos2unix help2man openssl-devel perl perl-devel rpm-develoconf libxml2-devel libxml2 pcre pcre-devel pango pango-devel

yum -y install rrdtool perl-rrdtool* perl-DB*

7，安装配置php相关模块

yum -y install php-gmp php-mysql php-pear php-common php-gd php-devel php php-mbstring php-cli php-intl php-snmp php-ldap

进行php时区配置：

sed -i 's/;date.timezone =/date.timezone = Asia\/Shanghai/g' /etc/php.ini

sed -i 's/memory_limit = 128M/memory_limit = 2048M/g' /etc/php.ini

sed -i 's/max_execution_time = 60/max_execution_time = 30/g' /etc/php.ini

进行cacti1.2.18安装文件与数据库的设置：

vim /var/www/html/cacti/include/config.php

添加spine定时任务（这里时间是1分钟执行一次）：

crontab -e

*/1 * * * * /usr/bin/php /var/www/html/cacti/poller.php > /dev/null 2>&1

安装spine1.2.18（一定要选择与cacti一样的版本），如果不安装默认cacti 使用的是 cmd.php脚本去抓取数据，耗时太久，使用spine可提升10倍速度。

wget --no-check-certificate https://www.cacti.net/downloads/spine/cacti-spine-1.2.18.tar.gz

tar -xvf cacti-spine-1.2.18.tar.gz

cd cacti-spine-1.2.18

./bootstrap && ./configure && make && make install

chown root:root /usr/local/spine/bin/spine

chmod u+s /usr/local/spine/bin/spine

cd /usr/local/spine/etc/

cp spine.conf.dist spine.conf

vim spine.conf

cp spine.conf /etc/spine.conf

8，进行初始化和验证

先重启下mariadb和httpd服务

systemctl restart httpd && systemctl restart mariadb

执行下述命令，看下spine连接数据库是否正常（如果有报错1184表示cacti用户权限不足）

/usr/local/spine/bin/spine

正式开始cacti1.2.18的图形化安装了，#打开浏览器输入IP地址即可进行安装：

http://192.168.200.242/install/install.php

#默认cacti1.2.18的安装用户名和密码

user:admin

password:admin

提示这个是权限不足（执行chmod 777 /var/www/html/cacti/log/cacti.log）

设置中文接受许可协议

因为之前编辑数据文件时候已经配置好了，所以这边预安装是没有任何报错信息的

这里填写之前复制的spine.conf文件的路径

安装完毕