d96613b8fe
@joshdata squashed pull request #1398, removed some comments, and added these notes: * The old init.d script for the management daemon is replaced with a systemd service. * A systemd service configuration is added to configure permissions for munin on startup. * nginx SSL settings are updated because nginx's options and defaults have changed, and we now enable http2. * Automatic SSHFP record generation is updated to know that 22 is the default SSH daemon port, since it is no longer explicit in sshd_config. * The dovecot-lucene package is dropped because the Mail-in-a-Box PPA where we built the package has not been updated for Ubuntu 18.04. * The stock postgrey package is installed instead of the one from our PPA (which we no longer support), which loses the automatic whitelisting of DNSWL.org-whitelisted senders. * Drop memcached and the status check for memcached, which we used to use with ownCloud long ago but are no longer installing. * Other minor changes.
79 lines
2.8 KiB
Bash
Executable file
79 lines
2.8 KiB
Bash
Executable file
#!/bin/bash
|
|
# Munin: resource monitoring tool
|
|
#################################################
|
|
|
|
source setup/functions.sh # load our functions
|
|
source /etc/mailinabox.conf # load global vars
|
|
|
|
# install Munin
|
|
echo "Installing Munin (system monitoring)..."
|
|
apt_install munin munin-node libcgi-fast-perl
|
|
# libcgi-fast-perl is needed by /usr/lib/munin/cgi/munin-cgi-graph
|
|
|
|
# edit config
|
|
cat > /etc/munin/munin.conf <<EOF;
|
|
dbdir /var/lib/munin
|
|
htmldir /var/cache/munin/www
|
|
logdir /var/log/munin
|
|
rundir /var/run/munin
|
|
tmpldir /etc/munin/templates
|
|
|
|
includedir /etc/munin/munin-conf.d
|
|
|
|
# path dynazoom uses for requests
|
|
cgiurl_graph /admin/munin/cgi-graph
|
|
|
|
# a simple host tree
|
|
[$PRIMARY_HOSTNAME]
|
|
address 127.0.0.1
|
|
|
|
# send alerts to the following address
|
|
contacts admin
|
|
contact.admin.command mail -s "Munin notification ${var:host}" administrator@$PRIMARY_HOSTNAME
|
|
contact.admin.always_send warning critical
|
|
EOF
|
|
|
|
# The Debian installer touches these files and chowns them to www-data:adm for use with spawn-fcgi
|
|
chown munin. /var/log/munin/munin-cgi-html.log
|
|
chown munin. /var/log/munin/munin-cgi-graph.log
|
|
|
|
# ensure munin-node knows the name of this machine
|
|
# and reduce logging level to warning
|
|
tools/editconf.py /etc/munin/munin-node.conf -s \
|
|
host_name=$PRIMARY_HOSTNAME \
|
|
log_level=1
|
|
|
|
# Update the activated plugins through munin's autoconfiguration.
|
|
munin-node-configure --shell --remove-also 2>/dev/null | sh
|
|
|
|
# Deactivate monitoring of NTP peers. Not sure why anyone would want to monitor a NTP peer. The addresses seem to change
|
|
# (which is taken care of my munin-node-configure, but only when we re-run it.)
|
|
find /etc/munin/plugins/ -lname /usr/share/munin/plugins/ntp_ -print0 | xargs -0 /bin/rm -f
|
|
|
|
# Deactivate monitoring of network interfaces that are not up. Otherwise we can get a lot of empty charts.
|
|
for f in $(find /etc/munin/plugins/ \( -lname /usr/share/munin/plugins/if_ -o -lname /usr/share/munin/plugins/if_err_ -o -lname /usr/share/munin/plugins/bonding_err_ \)); do
|
|
IF=$(echo $f | sed s/.*_//);
|
|
if ! ifquery $IF >/dev/null 2>/dev/null; then
|
|
rm $f;
|
|
fi;
|
|
done
|
|
|
|
# Create a 'state' directory. Not sure why we need to do this manually.
|
|
mkdir -p /var/lib/munin-node/plugin-state/
|
|
|
|
# Create a systemd service for munin.
|
|
ln -sf $(pwd)/management/munin_start.sh /usr/local/lib/mailinabox/munin_start.sh
|
|
chmod 0744 /usr/local/lib/mailinabox/munin_start.sh
|
|
hide_output systemctl link conf/munin.service
|
|
hide_output systemctl daemon-reload
|
|
hide_output systemctl unmask munin.service
|
|
hide_output systemctl enable munin.service
|
|
|
|
# Restart services.
|
|
restart_service munin
|
|
restart_service munin-node
|
|
|
|
# generate initial statistics so the directory isn't empty
|
|
# (We get "Pango-WARNING **: error opening config file '/root/.config/pango/pangorc': Permission denied"
|
|
# if we don't explicitly set the HOME directory when sudo'ing.)
|
|
sudo -H -u munin munin-cron
|