centos下安装mysqlgalera centos下安装cacti

在安装cacti前，要先安装其它附件

PHP - 模块支持 (必须)
Cacti 的安装对一些PHP 模块有要求. 如果缺少其中任何一个,您将无法继续,直到条件满足.另外, 为了获得更佳的系统性能, Cacti 应该运行在特定的MySQL 配置之下.请根据您的意愿遵循MySQL 配置建议. 如果您有任何问题, 请务必查阅MySQL 文档.
以下PHP 扩展是强制性的, 必须在安装Cacti 之前安装.

所需的PHP 模块
 sockets simplexml session pdo_mysql spl standard posix zlib xml PDO pcre gmp gd filter date hash json openssl mbstring ldap ctype 
 PHP - 模块支持(可选)
 建议使用以下PHP 扩展,并应在继续安装Cacti 之前安装.注意: 如果您计划使用IPv6支持的SNMPv3,则此时不应安装php-snmp 模块.
 可选模块
 snmp gettext TrueType Box TrueType Text安装基础软件包
 Mysql，PHP，RRDTool，net-snmp 和 支持 PHP 的 Web服务器，如 Apache，Nginx 或 IIS等安装mysql数据库
配置MariaDB官方yum源，这里安装mariadb10.3.5版本：
[root@localhost ~]# vim /etc/yum.repos.d/MariaDB.repo
 [mariadb]
 name=MariaDB
 baseurl= http://yum.mariadb.org/10.3.5/centos74-amd64/ gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
 gpgcheck=1安装mariadb server和mariadb client
[root@localhost ~]# yum install -y MariaDB-server MariaDB-client MariaDB-devel
 Installed:
 MariaDB-client.x86_64 0:10.3.5-1.el7.centos
 MariaDB-devel.x86_64 0:10.3.5-1.el7.centos安装httpd和php
 yum install -y httpd php安装php扩展
 yum install –y php-mysql php-snmp php-xml php-ldap php-gd php-mbstring php-posix
 装完可用php -m查看安装net-snmp
 yum install -y net-snmp* (注意：这里是net-snmp的所有软件包)安装RRDTOOL绘图工具
 yum install –y rrdtool rrdtool-devel rrdtool-php rrdtool-perl perl-devel perl-CPAN perl-YAML安装相关lib库
 yum install gcc glibcglibc-common cairo pango zlib zlib-devel freetype freetype-devel gd -y配置webserver
查看httpd.conf配置文件，确保包含以下内容：
 [root@cacti ~]# vim /etc/httpd/conf/httpd.conf
 #Load config files in the “/etc/httpd/conf.d” directory, if any.
 IncludeOptional conf.d/*.conf配置php.conf配置文件，末尾添加以下内容：
[root@cacti ~]# vim /etc/httpd/conf.d/php.conf
 …
 #PHP is an HTML-embedded scripting language which attempts to make it
 #easy for developers to write dynamically generated webpages.
 LoadModule php5_module modules/libphp5.so#Cause the PHP interpreter to handle files with a .php extension.
 AddHandler php5-script .php
 AddType text/html .php#Add index.php to the list of files that will be served as directory
 #indexes.
 DirectoryIndex index.php启动httpd并将其设置为开机自启
 systemctl start httpd && systemctl enable httpd把服务加入防火墙
 firewall-cmd --permanent --add-service=http
 firewall-cmd --reload配置php
 确保模块已被安装
 修改php.ini配置文件,添加或找到如下内容
 关闭安全模式并修改时区
 [root@localhost ~]# vim /etc/php.ini
 [PHP]
 safe_mode = Off
 ……
 date.timezone = Asia/Shanghai (#修改时区，记得把时区前的"；"拿掉)测试php与apache解析是否正常，创建php测试页面
[root@cacti ~]# vim /var/www/html/index.php
 <?php phpinfo(); ?> 
重启httpd并在网页测试
 systemctl restart httpd配置MySQL
启动mysql数据库服务并设为开机启动,同时加入防火墙规则
 [root@localhost ~]# systemctl start mariadb && systemctl enable mariadb
 firewall-cmd --permanent --add-port=3306/tcp
 firewall-cmd --reload初始化MariaDB数据库,主要创建mysql数据库密码（此root密码设为123456），然后全部Y下一步：
[root@localhost ~]# mysql_secure_installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
 SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!In order to log into MariaDB to secure it, we’ll need the current
 password for the root user. If you’ve just installed MariaDB, and
 you haven’t set the root password yet, the password will be blank,
 so you should just press enter here.Enter current password for root (enter for none): //当前数据库密码为空，直接按回车键
 OK, successfully used password, moving on…Setting the root password ensures that nobody can log into the MariaDB
 root user without the proper authorisation.Set root password? [Y/n] Y //输入要为root管理员设置的密码（数据库root非linux root）
 New password:
 Re-enter new password:
 Password updated successfully!
 Reloading privilege tables…
 … Success!By default, a MariaDB installation has an anonymous user, allowing anyone
 to log into MariaDB without having to have a user account created for
 them. This is intended only for testing, and to make the installation
 go a bit smoother. You should remove them before moving into a
 production environment.Remove anonymous users? [Y/n] Y //删除匿名账号
 … Success!Normally, root should only be allowed to connect from ‘localhost’. This
 ensures that someone cannot guess at the root password from the network.Disallow root login remotely? [Y/n] Y //禁止root管理员从远程登录
 … Success!By default, MariaDB comes with a database named ‘test’ that anyone can
 access. This is also intended only for testing, and should be removed
 before moving into a production environment.Remove test database and access to it? [Y/n] Y //删除test数据库并取消对它的访问权限
• Dropping test database…
 … Success!• Removing privileges on test database…
 … Success!Reloading the privilege tables will ensure that all changes made so far
 will take effect immediately.Reload privilege tables now? [Y/n] Y //刷新授权表，让初始化后的设定立即生效
 … Success!Cleaning up…
All done! If you’ve completed all of the above steps, your MariaDB
 installation should now be secure.Thanks for using MariaDB!
修改mysql配置文件，在[server]下增加如下内容
[root@cacti ~]# vim /etc/my.cnf.d/server.cnf
 [server]
 #this is only for the mysqld standalone daemon
 character_set_server = utf8mb4
 collation-server = utf8mb4_unicode_ci
 character_set_client = utf8mb4
 max_heap_table_size = 256M
 max_allowed_packet = 16777216
 tmp_table_size = 64M
 join_buffer_size = 64M
 innodb_file_per_table = ON
 #innodb_file_format = Barracuda
 #innodb_large_prefix = 1
 innodb_buffer_pool_size = 1024M
 innodb_doublewrite = OFF
 #innodb_additional_mem_pool_size = 96M
 innodb_lock_wait_timeout = 55
 innodb_flush_log_at_timeout = 3
 innodb_flush_log_at_trx_commit = 2
 innodb_read_io_threads = 32
 innodb_write_io_threads =16数据库与PHP测试：
 [root@cacti ~]# vim /var/www/html/index.php <?php $a=mysql_connect("localhost","root","123456"); if($a){echo "ok";}else{echo "err";} ?> 
重启httpd并在网页中测试
配置SNMP
 #vim /etc/snmp/snmpd.conf
 //修改default为本机ip，修改public为自己的团体名（可以不改），42行
 com2sec notConfigUser 127.0.0.1 public
 //把systemview改成all ,供所有snmp 访问权限 64行
 access notConfigGroup “” any noauth exact all none none
 //去掉此行注释
 view all included .1 80 // 去掉#号 85行重启SNMP
 systemctl restart snmpd.service && systemctl enable snmpd.service测试本地SNMP
 snmpwalk -v 2c -c public localhost system
 测试远程SNMP
 snmpwalk -v 2c -c public ip system安装和配置cacti
 #wget https://github.com/Cacti/cacti/archive/release/1.1.38.tar.gz #tar -zxvf 1.1.38.tar.gz
 #cp -R cacti-release-1.1.38/ /var/www/html/cacti创建 cacti 数据库
 创建cacti数据库，创建数据库用户cactiuser，密码为cactiuser 设置用户相关授权
 [root@cacti ~]# mysql –u root -p
 MariaDB [(none)]> create database cacti;
 Query OK, 1 row affected (0.00 sec)
 MariaDB [(none)]> grant all on cacti.* to cactiuser@localhost identified by “cactiuser”;
 Query OK, 0 rows affected (0.00 sec)
 MariaDB [(none)]> GRANT SELECT ON mysql.time_zone_name TO ‘cactiuser’@‘localhost’ IDENTIFIED BY ‘cactiuser’;
 Query OK, 0 rows affected (0.00 sec)
 MariaDB [cacti]> flush privileges;
 Query OK, 0 rows affected (0.00 sec)导入 Cacti 默认数据库
MariaDB [(none)]> use cacti;
 Database changed
 MariaDB [cacti]> source /var/www/html/cacti/cacti.sql;
 ………………
 MariaDB [cacti]> flush privileges;
 Query OK, 0 rows affected (0.00 sec)MariaDB [cacti]> quit
 Bye配置数据库时区：
 [root@cacti ~]# mysql_tzinfo_to_sql /usr/share/zoneinfo/ | mysql -u root -p mysql
 Enter password:
 Warning: Unable to load ‘/usr/share/zoneinfo//leapseconds’ as time zone. Skipping it.
 Warning: Unable to load ‘/usr/share/zoneinfo//tzdata.zi’ as time zone. Skipping it.创建 cacti 系统用户，设置目录权限
 [root@cacti ~]# useradd -r -M cacti
 [root@cacti ~]# chown -R cacti /var/www/html/cacti/{rra,log}/
 [root@cacti ~]# chown -R apache.apache /var/www/html/cacti/{resource,cache,scripts}/
 [root@cacti ~]# chmod -R 777 /var/www/html/cacti/添加定时任务
将每5分钟执行一次的数据获取脚本加入crontab
 配置crontab前，请使用以下命令测试是否可以获取数据
 /usr/bin/php /data/www/cacti/poller.php
 如果不通过，记得要把/rra里的东西清空[root@cacti ~]# crontab -e
 no crontab for root - using an empty one
 */5 * * * * cactiuser php /var/www/html/cacti/poller.php > /dev/null 2>&1如果出现You don’t have permission to access / on this server.
修改Apache 目录 (先用su切换到root角色) vim /etc/httpd/conf/httpd.conf 1、修改以下几个地方 a、DocumentRoot “/var/www/html” b、# Further relax access to the default document root: <Directory “/var/www/html”> c、<Directory “/var/www/html”> 2、修改权限，发现只要是节点下的Require all XXXX 改成Require all granted 3、修改权限，<Files “.ht*”> 节点下的Require all XXXX 改成Require all granted 4、给目录设置权限 chmod -R 755 修改的目录 chmod -R 777 修改的目录 执行了目录权限以后在执行以下这个吧(不执行也行，后面错的话就执行下)： chmod o+x 修改的目录(这里0可以换为a，表示所有用户，同时修改目录的每一个上级也可以执行一次)， 5、关闭selinux服务(同样也要用su切换到root) vi /etc/sysconfig/selinux 把ELINUX=enforcing 改为 SELINUX=disabled 从启