Skip to content

Latest commit

 

History

History
425 lines (318 loc) · 12.7 KB

02-Installation.md

File metadata and controls

425 lines (318 loc) · 12.7 KB
Raw

Installation

The preferred way of installing Icinga Web 2 is to use the official package repositories depending on which operating system and distribution you are running.

In case you are upgrading from an older version of Icinga Web 2 please make sure to read the upgrading section thoroughly.

Source and automated setups are described inside the advanced topics chapter.

Installing Requirements

  • Icinga 2 with the IDO database backend (MySQL or PostgreSQL)
  • A web server, e.g. Apache or Nginx
  • PHP version >= 5.6.0. Though Icinga Web 2 version 2.5.x is compatible with PHP version >= 5.3.2 there are modules which require a higher PHP version. Also, future versions of Icinga Web 2 will drop support for outdated PHP versions. Packages for Icinga Web 2 already require PHP >= 5.6.0
  • The following PHP modules must be installed: cURL, gettext, intl, mbstring, OpenSSL and xml
  • Default time zone configured for PHP in the php.ini file
  • LDAP PHP library when using Active Directory or LDAP for authentication
  • MySQL or PostgreSQL PHP libraries

Installing Icinga Web 2 from Package

Below is a list of official package repositories for installing Icinga Web 2 for various operating systems.

Distribution Repository
Debian Icinga Repository
Ubuntu Icinga Repository
RHEL/CentOS Icinga Repository
openSUSE Icinga Repository
SLES Icinga Repository
Gentoo Upstream
FreeBSD Upstream
ArchLinux Upstream
Alpine Linux Upstream

Packages for distributions other than the ones listed above may also be available. Please contact your distribution packagers.

Setting up Package Repositories

You need to add the Icinga repository to your package management configuration for installing Icinga Web 2. If you've already configured your OS to use the Icinga repository for installing Icinga 2, you may skip this step. Below is a list with examples for various distributions.

Debian Stretch:

wget -O - http://packages.icinga.com/icinga.key | apt-key add -
echo 'deb http://packages.icinga.com/debian icinga-stretch main' >/etc/apt/sources.list.d/icinga.list
apt-get update

INFO

For other Debian versions just replace stretch with your distribution's code name.

Ubuntu Xenial:

wget -O - http://packages.icinga.com/icinga.key | apt-key add -
add-apt-repository 'deb http://packages.icinga.com/ubuntu icinga-xenial main'
apt-get update

INFO

For other Ubuntu versions just replace xenial with your distribution's code name.

RHEL and CentOS 7:

yum install https://packages.icinga.com/epel/icinga-rpm-release-7-latest.noarch.rpm

Fedora 26:

dnf install https://packages.icinga.com/fedora/icinga-rpm-release-26-latest.noarch.rpm

SLES 12:

zypper ar http://packages.icinga.com/SUSE/ICINGA-release.repo
zypper ref

openSUSE:

zypper ar http://packages.icinga.com/openSUSE/ICINGA-release.repo
zypper ref

Alpine Linux:

echo "http://dl-cdn.alpinelinux.org/alpine/edge/community" >> /etc/apk/repos
apk update

INFO

Latest version of Icinga Web 2 is in the edge repository, which is the -dev branch.

RHEL/CentOS Notes

Our packages are build on and with packages from the EPEL repository. Please enable it prior installing the Icinga packages.

CentOS 7/6:

yum install epel-release

RedHat 7:

yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

If you are using RHEL you need enable the optional repository in order to use some contents of EPEL.

RedHat:

subscription-manager repos --enable rhel-7-server-optional-rpms
# or
subscription-manager repos --enable rhel-6-server-optional-rpms

Since version 2.5.0 we also require a newer PHP version than what is available in RedHat itself. You need to enable the SCL repository, so that the dependencies can pull in the newer PHP.

CentOS:

yum install centos-release-scl

RedHat:

subscription-manager repos --enable rhel-server-rhscl-7-rpms
# or
subscription-manager repos --enable rhel-server-rhscl-6-rpms

Make sure to also read the chapter on Setting up FPM.

Alpine Linux Notes

The example provided suppose that you are running Alpine edge, which is the -dev branch and is a rolling release. If you are using a stable version, in order to use the latest Icinga Web 2 version you should "pin" the edge repository. In order to correctly manage your repository, please follow these instructions.

Installing Icinga Web 2

You can install Icinga Web 2 by using your distribution's package manager to install the icingaweb2 package. Below is a list with examples for various distributions. The additional package icingacli is necessary to follow further steps in this guide. The additional package libapache2-mod-php is necessary on Ubuntu to make Icinga Web 2 working out-of-the-box if you aren't sure or don't care about PHP FPM.

Debian:

apt-get install icingaweb2 icingacli

Ubuntu:

apt-get install icingaweb2 libapache2-mod-php icingacli

RHEL, CentOS and Fedora:

yum install icingaweb2 icingacli

If you have SELinux enabled, the package icingaweb2-selinux is also required. For RHEL/CentOS please read the package repositories notes.

SLES and openSUSE:

zypper install icingaweb2 icingacli

Alpine Linux:

apk add icingaweb2

For Alpine Linux please read the package repositories notes.

Installing the web server

Depending on your OS you might have to install, and or configure the web server. We usually only require PHP as hard dependency.

We usually build on Apache httpd as the default web server, but you also can use nginx.

RedHat / CentOS / Fedora

Make sure to install httpd, start and enable it on boot.

yum install httpd

systemctl start httpd.service
systemctl enable httpd.service

Note for EPEL 6 and 7: See "Setting up FPM" below!

Note for Fedora >= 27:

You need to choose which httpd PHP mode you want to use!

  1. Enable mod_php:
    Edit /etc/httpd/conf.modules.d/00-mpm.conf and enable prefork instead of event
  2. or start php-fpm:
    systemctl start php-fpm.service
    systemctl enable

SUSE SLE / openSUSE

Make sure that web server is installed, and the required modules are loaded.

zypper install apache2

a2enmod rewrite
a2enmod php7

systemctl start apache2.service
systemctl enable apache2.service

Debian / Ubuntu

Your web server should be up and running after the installation.

Setting up FPM

If you are on CentOS / RedHat 6 or 7, or just want to run Icinga Web 2 with PHP-FPM instead of the Apache module.

Operating System FPM configuration path
RedHat 7 (with SCL) /etc/opt/rh/rh-php71/php-fpm.d/
RedHat 6 (with SCL) /etc/opt/rh/rh-php70/php-fpm.d/
Fedora /etc/php-fpm.d/
Debian/Ubuntu /etc/php*/*/fpm/pool.d/

The default pool www should be sufficient for Icinga Web 2.

On RedHat you need to start and enable the FPM service.

RedHat / CentOS 7 (SCL package):

systemctl start rh-php71-php-fpm.service
systemctl enable rh-php71-php-fpm.service

RedHat / CentOS 6 (SCL package):

service rh-php70-php-fpm start
chkconfig rh-php70-php-fpm on

Fedora:

systemctl start php-fpm.service
systemctl enable php-fpm.service

All module packages for PHP have this SCL prefix, so you can install a database module like this:

yum install rh-php71-php-mysqlnd
# or
yum install rh-php71-php-pgsql

# on el6
yum install rh-php70-php-mysqlnd
# or
yum install rh-php70-php-pgsql

On RedHat / CentOS 6 you also need to install mod_proxy_fcgi for httpd:

yum install mod_proxy_fcgi

Depending on your web server installation, we might have installed or updated the config file for icingaweb2 with defaults for FPM.

Check /etc/httpd/conf.d/icingaweb2.conf or /etc/apache2/conf.d/icingaweb2.conf. And *.rpm* *.dpkg* files there with updates.

Make sure that the FilesMatch part is included for Apache >= 2.4. For Apache < 2.4 you have to include the LocationMatch block.

Also see the example from icingacli:

icingacli setup config webserver apache

Upgrading to FPM

Valid for:

  • RedHat / CentOS 6
  • RedHat / CentOS 7

Other distributions are also possible if preferred, but not included here.

Some upgrading work needs to be done manually, while we install PHP FPM as dependency, you need to start the service, and configure some things.

Please read Setting up FPM first.

php.ini settings you have tuned in the past needs to be migrated to a SCL installation of PHP.

Check these directories:

  • /etc/php.ini
  • /etc/php.d/*.ini

Most important for icingaweb2 is date.timezone.

PHP settings should be stored to:

  • RedHat / CentOS 7: /etc/opt/rh/rh-php71/php.d/
  • RedHat / CentOS 6: /etc/opt/rh/rh-php70/php.d/

Make sure to install the required database modules

RedHat / CentOS 7:

yum install rh-php71-php-mysqlnd
# or
yum install rh-php71-php-pgsql

RedHat / CentOS 6:

yum install rh-php70-php-mysqlnd
# or
yum install rh-php70-php-pgsql

After any PHP related change you now need to restart FPM:

RedHat / CentOS 7:

systemctl restart rh-php71-php-fpm.service

RedHat / CentOS 6:

service rh-php70-php-fpm restart

If you don't need mod_php for other apps on the server, you should disable it in Apache.

Disable PHP in Apache httpd:

cd /etc/httpd
cp conf.d/php.conf{,.bak}
: >conf.d/php.conf

# ONLY on el7!
cp conf.modules.d/10-php.conf{,.bak}
: >conf.modules.d/10-php.conf

systemctl restart httpd.service
# or on el6
service httpd restart

You can also uninstall the mod_php package, or all non-SCL PHP related packages.

yum remove php
# or
yum remove php-common

Preparing Web Setup

You can set up Icinga Web 2 quickly and easily with the Icinga Web 2 setup wizard which is available the first time you visit Icinga Web 2 in your browser. When using the web setup you are required to authenticate using a token. In order to generate a token use the icingacli:

icingacli setup token create

In case you do not remember the token you can show it using the icingacli:

icingacli setup token show

Preparing Web Setup on Debian

On Debian, you need to manually create a database and a database user prior to starting the web wizard. This is due to local security restrictions whereas the web wizard cannot create a database/user through a local unix domain socket.

MariaDB [mysql]> CREATE DATABASE icingaweb2;

MariaDB [mysql]> GRANT ALL ON icingaweb2.* TO icingaweb2@localhost IDENTIFIED BY 'CHANGEME';

You may also create a separate administrative account with all privileges instead.

Note: This is only required if you are using a local database as authentication type.

Starting Web Setup

Finally visit Icinga Web 2 in your browser to access the setup wizard and complete the installation: /icingaweb2/setup.

Note for Debian

Use the same database, user and password details created above when asked.

The setup wizard automatically detects the required packages. In case one of them is missing, e.g. a PHP module, please install the package, restart your webserver and reload the setup page.

If you have SELinux enabled, please ensure to either have the selinux package for Icinga Web 2 installed, or disable it.