FreeBSD15.x : Icinga2 インストール

# pkg update
# pkg upgrade -y
# pkg install -y icinga2

# sysrc icinga2_enable="YES"
# service icinga2 start
# service icinga2 status
icinga2 is running as pid 2212.

# vi /usr/local/etc/ipfw.rules

xxxは他と重ならないようにして、下記を追加
$IPF xxx allow tcp from any to any 5665 in
$IPF xxx allow tcp from any to any 5665 out

# service ipfw restart
Firewall rules loaded.

# pkg install monitoring-plugins

# ls /usr/local/libexec/nagios/ 
check_apt               check_icmp              check_nntps             check_ssh
check_breeze            check_ifoperstatus      check_nscp_api          check_ssmtp
check_by_ssh            check_ifstatus          check_ntp_peer          check_swap
check_clamd             check_imap              check_ntp_time          check_tcp
check_cluster           check_ircd              check_oracle            check_time
check_dhcp              check_jabber            check_ping              check_udp
check_dig               check_load              check_pop               check_ups
check_disk              check_log               check_procs             check_uptime
check_disk_smb          check_mailq             check_real              check_users
check_dummy             check_mrtg              check_rpc               check_wave
check_file_age          check_mrtgtraf          check_sensors           negate
check_flexlm            check_mssql             check_simap             urlize
check_ftp               check_nagios            check_smtp              utils.pm
check_http              check_nntp              check_spop              utils.sh

# icinga2 --version
icinga2 - The Icinga 2 network monitoring daemon (version: r2.16.3-1)

Copyright (c) 2012-2026 Icinga GmbH (https://icinga.com/)
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl-3.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
  Platform: FreeBSD
  Platform version: 15.1-RELEASE-p3
  Kernel: FreeBSD
  Kernel version: 15.1-RELEASE-p3
  Architecture: amd64

Build information:
  Compiler: Clang 19.1.7
  Build host: 150amd64-quarterly-job-04
  OpenSSL version: OpenSSL 3.5.6 7 Apr 2026

Application information:

General paths:
  Config directory: /usr/local/etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /var/run/icinga2

Old paths (deprecated):
  Installation root: /usr/local
  Sysconf directory: /usr/local/etc
  Run directory (base): /var/run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/local/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /var/run/icinga2/icinga2.pid

# icinga2 api setup

information/cli: Generating new CA.
information/base: Writing private key to '/var/lib/icinga2/ca//ca.key'.
information/base: Writing X509 certificate to '/var/lib/icinga2/ca//ca.crt'.
information/cli: Generating new CSR in '/var/lib/icinga2/certs//lepard.csr'.
information/base: Writing private key to '/var/lib/icinga2/certs//lepard.key'.
information/base: Writing certificate signing request to '/var/lib/icinga2/certs//lepard.csr'.
information/cli: Signing CSR with CA and writing certificate to '/var/lib/icinga2/certs//lepard.crt'.
information/pki: Writing certificate to file '/var/lib/icinga2/certs//lepard.crt'.
information/cli: Copying CA certificate to '/var/lib/icinga2/certs//ca.crt'.
information/cli: Adding new ApiUser 'root' in '/usr/local/etc/icinga2/conf.d/api-users.conf'.
information/cli: Reading '/usr/local/etc/icinga2/icinga2.conf'.
information/cli: Enabling the 'api' feature.
Enabling feature api. Make sure to restart Icinga 2 for these changes to take effect.
information/cli: Updating 'NodeName' constant in '/usr/local/etc/icinga2/constants.conf'.
information/cli: Created backup file '/usr/local/etc/icinga2/constants.conf.orig'.
information/cli: Updating 'ZoneName' constant in '/usr/local/etc/icinga2/constants.conf'.
information/cli: Backup file '/usr/local/etc/icinga2/constants.conf.orig' already exists. Skipping backup.
Done.

Now restart your Icinga 2 daemon to finish the installation!

# service icinga2 restart

# sockstat -l | grep :5665
icinga icinga2    3138 18 tcp46   *:5665                *:*

# mysql -u root -p 

> CREATE DATABASE icingadb;
> CREATE USER 'icingauser'@'localhost' IDENTIFIED BY '?Ww123456';
> GRANT ALL ON icingadb.* TO 'icingauser'@'localhost';

> CREATE DATABASE icingaweb2db;
> CREATE USER 'icingaweb2user'@'localhost' IDENTIFIED BY '?Yy123456';
> GRANT ALL ON icingaweb2db.* TO 'icingaweb2user'@'localhost';

> FLUSH PRIVILEGES;
> exit;

# pkg install net-mgmt/icingadb databases/redis

# vi /usr/local/etc/redis.conf
139行目当たり
port 6380

# sysrc redis_enable="YES"
# service redis start

# mysql -u root -p icingadb < /usr/local/share/examples/icingadb/schema/mysql/schema.sql

# vi /usr/local/etc/icingadb/config.yml
 
6行目以降database:項目の内容を次のようにする
database:
  type: mysql
  host: localhost
  port: 3306
  database: icingadb
  user: icingauser
  password: ?Ww123456

64行目　Redis接続設定項目を編集
redis:
  host: "localhost"
  port: 6380

# vi /usr/local/etc/icinga2/features-available/icingadb.conf

下記の通り設定
object IcingaDB "icingadb" {
  host = "127.0.0.1"
  port = 6380
  //password = "xxx"
}

# sysrc icingadb_enable="YES"
# service icingadb start

# icinga2 feature enable icingadb
# service icinga2 restart

# pkg install mod_php83 php83-mysqli php83-gettext php83-intl php83-mbstring php83-xml php83-curl php83-gd php83-ldap icingaweb2-php83

# pkg install icingaweb2-php83
# pkg install icingaweb2-module-icingadb-php83
# pkg install php83-filter

# vi /usr/local/etc/apache24/httpd.conf

181行目あたり : コメント解除
LoadModule rewrite_module libexec/apache24/mod_rewrite.so

# service apache24 restart
# service php_fpm restart

# icingacli setup token create
The newly generated setup token is: 7bbef81db5c239cc

# chown -R root:www /usr/local/etc/icingaweb2
# chmod 2770 /usr/local/etc/icingaweb2
# chmod 640 /usr/local/etc/icingaweb2/setup.token

# pkg install php83-pecl-imagick

# service apache24 restart
# service php_fpm restart

# vi /usr/local/etc/icinga2/conf.d/api-users.conf

object ApiUser "root" {
    password = "a721e6d0d0ccbce6"

# systemctl restart icingadb

# pkg install icingaweb2-module-director-php83

# mysql -u root -p

> CREATE DATABASE directordb ;
> CREATE USER 'directoruser'@'localhost' IDENTIFIED BY '?Xx123456';
> GRANT ALL ON directordb.* TO 'directoruser'@'localhost';
> FLUSH PRIVILEGES;
> EXIT;

# mysql -u root -p icingadb < /usr/local/www/icingaweb2/modules/director/schema/mysql.sql

# sysrc icinga_director_enable="YES"
# service icinga-director start

# icingacli module enable incubator

# vi /etc/hosts
下記記入
192.168.11.83    lepard   ←ホスト名

# pkg install -y icinga2

# sysrc icinga2_enable="YES"
# service icinga2 start
# service icinga2 status
icinga2 is running as pid 1477.

# vi /usr/local/etc/ipfw.rules

xxxは他と重ならないようにして、下記を追加
$IPF xxx allow tcp from any to any 5665 in
$IPF xxx allow tcp from any to any 5665 out

# service ipfw restart
Firewall rules loaded.

# pkg install monitoring-plugins

# ls /usr/local/libexec/nagios/ 
check_apt               check_icmp              check_nntps             check_ssh
check_breeze            check_ifoperstatus      check_nscp_api          check_ssmtp
check_by_ssh            check_ifstatus          check_ntp_peer          check_swap
check_clamd             check_imap              check_ntp_time          check_tcp
check_cluster           check_ircd              check_oracle            check_time
check_dhcp              check_jabber            check_ping              check_udp
check_dig               check_load              check_pop               check_ups
check_disk              check_log               check_procs             check_uptime
check_disk_smb          check_mailq             check_real              check_users
check_dummy             check_mrtg              check_rpc               check_wave
check_file_age          check_mrtgtraf          check_sensors           negate
check_flexlm            check_mssql             check_simap             urlize
check_ftp               check_nagios            check_smtp              utils.pm
check_http              check_nntp              check_spop              utils.sh

# icinga2 --version
icinga2 - The Icinga 2 network monitoring daemon (version: r2.16.3-1)

Copyright (c) 2012-2026 Icinga GmbH (https://icinga.com/)
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl-3.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
  Platform: FreeBSD
  Platform version: 14.3-RELEASE-p16
  Kernel: FreeBSD
  Kernel version: 14.3-RELEASE-p16
  Architecture: amd64

Build information:
  Compiler: Clang 19.1.7
  Build host: 144amd64-quarterly-job-24
  OpenSSL version: OpenSSL 3.0.20 7 Apr 2026

Application information:

General paths:
  Config directory: /usr/local/etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /var/run/icinga2

Old paths (deprecated):
  Installation root: /usr/local
  Sysconf directory: /usr/local/etc
  Run directory (base): /var/run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/local/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /var/run/icinga2/icinga2.pid

# vi /etc/hosts
192.168.11.83   lepard
192.168.11.85   Lion

# icinga2 pki ticket --cn 'Lion'
0cf1682f55272481d5634acf9b2b188ecdcebdb5

# icinga2 node wizard

Welcome to the Icinga 2 Setup Wizard!

We will guide you through all required configuration details.

Please specify if this is an agent/satellite setup ('n' installs a master setup) [Y/n]: y

Starting the Agent/Satellite setup routine...

Please specify the common name (CN) [Lion]:

Please specify the parent endpoint(s) (master or satellite) where this node should connect to:
Master/Satellite Common Name (CN from your master/satellite node): lepard

Do you want to establish a connection to the parent node from this node? [Y/n]: y
Please specify the master/satellite connection information:
Master/Satellite endpoint host (IP address or FQDN): 192.168.11.83
Master/Satellite endpoint port [5665]:

Add more master/satellite endpoints? [y/N]: N
Parent certificate information:

 Version:             3
 Subject:             CN = lepard
 Issuer:              CN = Icinga CA
 Valid From:          Sep  6 09:33:09 2026 GMT
 Valid Until:         Oct  8 09:33:09 2027 GMT
 Serial:              ae:1c:cc:4c:2e:b9:a5:39:cb:b2:1f:25:ca:02:1e:3b:6b:89:7d:a6

 Signature Algorithm: sha256WithRSAEncryption
 Subject Alt Names:   lepard
 Fingerprint:         12 49 9E 72 FD D9 D1 7A C1 82 DA 68 EF 54 6E 3E C6 30 25 3A 20 17 65 FE 9A 48 52 C5 7B 58 51 90

Is this information correct? [y/N]: y

Please specify the request ticket generated on your Icinga 2 master (optional).
 (Hint: # icinga2 pki ticket --cn 'Lion'): 0cf1682f55272481d5634acf9b2b188ecdcebdb5
Please specify the API bind host/port (optional):
Bind Host []: 0.0.0.0
Bind Port []: 5665

Accept config from parent node? [y/N]: y
Accept commands from parent node? [y/N]: y

Reconfiguring Icinga...

Local zone name [Lion]:
Parent zone name [master]:

Default global zones: global-templates director-global
Do you want to specify additional global zones? [y/N]: N

Do you want to disable the inclusion of the conf.d directory [Y/n]: y
Disabling the inclusion of the conf.d directory...

Done.

Now restart your Icinga 2 daemon to finish the installation!

# service icinga2 restart