admin/Cactidocumentation
1
0 Fork 0
mirror of https://github.com/Cacti/documentation.git synced 2026-10-23 03:26:44 +09:00
Code Issues Packages Projects Releases Wiki Activity

Updates for installing under rhel 8 (#166)

Browse Source 
Co-authored-by: Mark Brugnoli-Vinten <netniv@hotmail.com>
This commit is contained in:
Sean ManciniandMark Brugnoli-Vinten authored and GitHub committed 2023-01-02 01:35:18 +00:00
1 parent bfb70c4755
commit ccb029a3aa
5 files changed
+143 -34
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

General-Installing-Instructions.md
+38 -7
View File
@@ -256,14 +256,14 @@ back into rotation.
MySQL> flush privileges;
```
Note that if your `root` (or equivalent) user does not have `SUPER` permissions,
it may still be possible to `GRANT SELECT` privileges to the Cacti user via an
`INSERT INTO mysql.tables_priv`.
Note that if your `root` (or equivalent) user does not have `SUPER` permissions,
it may still be possible to `GRANT SELECT` privileges to the Cacti user via an
`INSERT INTO mysql.tables_priv`.
```sql
INSERT INTO mysql.tables_priv (Host, Db, User, Table_name, Grantor, Table_priv)
VALUES ('localhost', 'mysql', 'cactiuser', 'time_zone_name', 'root@localhost', 'Select');
```
```sql
INSERT INTO mysql.tables_priv (Host, Db, User, Table_name, Grantor, Table_priv)
VALUES ('localhost', 'mysql', 'cactiuser', 'time_zone_name', 'root@localhost', 'Select');
```
5. Edit `include/config.php` and specify the database type, name, host, user
and password for your Cacti configuration.
@@ -368,5 +368,36 @@ DB_Password cacti
DB_Port 3306
```
### Considerations when using Proxys in front of Cacti (Cacti 1.2.23+)
For optimal security, only specify the HTTP headers that are set by your proxy software to prevent unauthorized access. These can be set by editing the following section of config.php
```
* Allow the use of Proxy IPs when searching for client
* IP to be used
*
* This can be set to one of the following:
* - false: to use only REMOTE_ADDR
* - true: to use all allowed headers (not advised)
* - array of one or more the following:
* 'X-Forwarded-For',
* 'X-Client-IP',
* 'X-Real-IP',
* 'X-ProxyUser-Ip',
* 'CF-Connecting-IP',
* 'True-Client-IP',
* 'HTTP_X_FORWARDED',
* 'HTTP_X_FORWARDED_FOR',
* 'HTTP_X_CLUSTER_CLIENT_IP',
* 'HTTP_FORWARDED_FOR',
* 'HTTP_FORWARDED',
* 'HTTP_CLIENT_IP',
*
* NOTE: The following will always be checked:
* 'REMOTE_ADDR',
*/
$proxy_headers = null;
```
---
<copy>Copyright (c) 2004-2022 The Cacti Group</copy>
Install-Under-CentOS_LAMP.md
+50 -4
View File
@@ -1,17 +1,25 @@
# Installing on CentOS 7
# Installing on CentOS/RHEL/ROCKY
## LAMP (Linux, Apache, MySQL/MariaDB, PHP) Required packages
### Web Server (Apache)
1. Enable Epel repo to enable PHP 7.2 package download
1. Enable Epel repo to enable PHP 7.2 package download ( 7.x and Below)
```console
yum install <http://rpms.remirepo.net/enterprise/remi-release-7.rpm> -y
yum install http://rpms.remirepo.net/enterprise/remi-release-7.rpm -y
yum install yum-utils -y
yum-config-manager --enable remi-php72
```
For Centos/RHEL/ROCKY 8+
```console
dnf module reset php
dnf module enable php:8.0
```
2. Install Apache
```console
@@ -234,7 +242,7 @@ during the installation.
MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.00 sec)
```
5. Save the Database Charset and Collation
```sql
@@ -356,6 +364,13 @@ configure the basics for Cacti.
1. Install the necessary packages to compile and install spine
For RHEL/CENTOS/ROCKY 8+, you must enable the powertools repo first before downloading the below packages
```console
yum config-manager --set-enabled powertools
```
For RHEL/CENTOS/ROCKY 7.x and below
```console
yum install -y autoconf automake libtool dos2unix help2man \
openssl-devel mariadb-devel net-snmp-devel
@@ -437,6 +452,37 @@ documentation on how to make your SELinux policy right.
setenforce 1
```
### Considerations when using Proxies in front of Cacti (Cacti 1.2.23+)
For optimal security, only specify the HTTP headers that are set by your proxy software to prevent unauthorized access. These can be set by editing the following section of config.php
```
* Allow the use of Proxy IPs when searching for client
* IP to be used
*
* This can be set to one of the following:
* - false: to use only REMOTE_ADDR
* - true: to use all allowed headers (not advised)
* - array of one or more the following:
* 'X-Forwarded-For',
* 'X-Client-IP',
* 'X-Real-IP',
* 'X-ProxyUser-Ip',
* 'CF-Connecting-IP',
* 'True-Client-IP',
* 'HTTP_X_FORWARDED',
* 'HTTP_X_FORWARDED_FOR',
* 'HTTP_X_CLUSTER_CLIENT_IP',
* 'HTTP_FORWARDED_FOR',
* 'HTTP_FORWARDED',
* 'HTTP_CLIENT_IP',
*
* NOTE: The following will always be checked:
* 'REMOTE_ADDR',
*/
$proxy_headers = null;
```
**Note:** If you installed Cacti out of `/var/www/html` make sure you fix up
all SELinux context and permissions.
Installing-Under-Ubuntu-Debian.md
+53 -23
View File
@@ -75,39 +75,69 @@ $database_ssl_key = '';
### Create your cron task file or systemd units file
Starting with Cacti 1.2.16, you have the option to use either the
legacy Crontab entry, or an optional cactid units file and server
to run your Cacti pollers.
Starting with Cacti 1.2.16, you have the option to use either the
legacy Crontab entry, or an optional cactid units file and server
to run your Cacti pollers.
For Crontab use, follow the instructions below:
For Crontab use, follow the instructions below:
Create and edit `/etc/cron.d/cacti` file.
Make sure to setup the correct path to poller.php
Create and edit `/etc/cron.d/cacti` file.
Make sure to setup the correct path to poller.php
```console
*/5 * * * * apache php /var/www/html/cacti/poller.php &>/dev/null
```
```console
*/5 * * * * apache php /var/www/html/cacti/poller.php &>/dev/null
```
For systemd unit's file install, you will need to modify the
included units file to following your install location
and desired user and group's to run the Cacti poller as.
To complete the task, follow the procedure below:
For systemd unit's file install, you will need to modify the
included units file to following your install location
and desired user and group's to run the Cacti poller as.
To complete the task, follow the procedure below:
```console
vim /var/www/html/cacti/service/cactid.service (edit the path)
touch /etc/sysconfig/cactid
cp -p /var/www/html/cacti/service/cactid.service /etc/systemd/system
systemctl enable cactid
systemctl start cactid
systemctl status cactid
```
```console
vim /var/www/html/cacti/service/cactid.service (edit the path)
touch /etc/sysconfig/cactid
cp -p /var/www/html/cacti/service/cactid.service /etc/systemd/system
systemctl enable cactid
systemctl start cactid
systemctl status cactid
```
The systemd units file makes managing a highly available Cacti
setup a bit more convenient.
The systemd units file makes managing a highly available Cacti
setup a bit more convenient.
The system is now ready to finialise the steps by browsing to
[http://serverip/cacti](http://serverip/cacti) to start the cacti initialization
wizard.
### Considerations when using Proxys in front of Cacti (Cacti 1.2.23+)
For optimal security, only specify the HTTP headers that are set by your proxy software to prevent unauthorized access. These can be set by editing the following section of config.php
```
* Allow the use of Proxy IPs when searching for client
* IP to be used
*
* This can be set to one of the following:
* - false: to use only REMOTE_ADDR
* - true: to use all allowed headers (not advised)
* - array of one or more the following:
* 'X-Forwarded-For',
* 'X-Client-IP',
* 'X-Real-IP',
* 'X-ProxyUser-Ip',
* 'CF-Connecting-IP',
* 'True-Client-IP',
* 'HTTP_X_FORWARDED',
* 'HTTP_X_FORWARDED_FOR',
* 'HTTP_X_CLUSTER_CLIENT_IP',
* 'HTTP_FORWARDED_FOR',
* 'HTTP_FORWARDED',
* 'HTTP_CLIENT_IP',
*
* NOTE: The following will always be checked:
* 'REMOTE_ADDR',
*/
$proxy_headers = null;
```
---
<copy>Copyright (c) 2004-2022 The Cacti Group</copy>
Settings-Data.md
+2
View File
@@ -50,6 +50,8 @@ Those settings include:
## RRDfile Checker
![RRD Checker](images/rrd_check.PNG)
RRDfile checker scans RRDfiles and try to find problems like stale values.
Those settings include:
images/rrd_check.PNG
BIN
View File
Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 20 KiB