Evgeniy Kamenev | Записки системного администратора

Архивы автора

Мониторинг LSI MegaRAID в Zabbix

Июнь 1st, 2016

Evgeniy Kamenev

1.Установка скрипта на Zabbix-агенте

# megacli -LDInfo -LAll -a0 –NoLog

1	# megacli -LDInfo -LAll -a0 –NoLog

Adapter 0 -- Virtual Drive Information:
Virtual Drive: 0 (Target Id: 0)
Name                :
RAID Level          : Primary-1, Secondary-0, RAID Level Qualifier-0
Size                : 2.728 TB
Sector Size         : 512
Is VD emulated      : Yes
Mirror Data         : 2.728 TB
State               : Optimal
Strip Size          : 256 KB
Number Of Drives    : 2
Span Depth          : 1
Default Cache Policy: WriteBack, ReadAhead, Direct, Write Cache OK if Bad BBU
Current Cache Policy: WriteBack, ReadAhead, Direct, Write Cache OK if Bad BBU
Default Access Policy: Read/Write
Current Access Policy: Read/Write
Disk Cache Policy   : Disk's Default
Encryption Type     : None
Bad Blocks Exist: No
Is VD Cached: No

Exit Code: 0x00

Adapter 0 -- Virtual Drive Information:

Virtual Drive: 0 (Target Id: 0)

Name :

RAID Level : Primary-1, Secondary-0, RAID Level Qualifier-0

Size : 2.728 TB

Sector Size : 512

Is VD emulated : Yes

Mirror Data : 2.728 TB

State : Optimal

Strip Size : 256 KB

Number Of Drives : 2

Span Depth : 1

Default Cache Policy: WriteBack, ReadAhead, Direct, Write Cache OK if Bad BBU

Current Cache Policy: WriteBack, ReadAhead, Direct, Write Cache OK if Bad BBU

Default Access Policy: Read/Write

Current Access Policy: Read/Write

Disk Cache Policy : Disk's Default

Encryption Type : None

Bad Blocks Exist: No

Is VD Cached: No

Exit Code: 0x00

# megacli -PDlist -a0 -NoLog

1	# megacli -PDlist -a0 -NoLog

Adapter #0

Enclosure Device ID: 252
Slot Number: 0
Drive's position: DiskGroup: 0, Span: 0, Arm: 0
Enclosure position: N/A
Device Id: 3
WWN: 50014ee65b17627a
Sequence Number: 2
Media Error Count: 0
Other Error Count: 0
Predictive Failure Count: 0
Last Predictive Failure Event Seq Number: 0
PD Type: SATA

Raw Size: 2.728 TB [0x15d50a3b0 Sectors]
Non Coerced Size: 2.728 TB [0x15d40a3b0 Sectors]
Coerced Size: 2.728 TB [0x15d400000 Sectors]
Sector Size:  0
Logical Sector Size:  0
Physical Sector Size:  0
Firmware state: Online, Spun Up
Commissioned Spare : No
Emergency Spare : No
Device Firmware Level: 1K03
Shield Counter: 0
Successful diagnostics completion on :  N/A
SAS Address(0): 0x4433221103000000
Connected Port Number: 1(path0)
Inquiry Data:      WD-WMC1F0E62TV5WDC WD3000FYYZ-01UL1B2                  01.01K03
FDE Capable: Not Capable
FDE Enable: Disable
Secured: Unsecured
Locked: Unlocked
Needs EKM Attention: No
Foreign State: None
Device Speed: 6.0Gb/s
Link Speed: 6.0Gb/s
Media Type: Hard Disk Device
Drive:  Not Certified
Drive Temperature :41C (105.80 F)
PI Eligibility:  No
Drive is formatted for PI information:  No
PI: No PI
Drive's NCQ setting : N/A
Port-0 :
Port status: Active
Port's Linkspeed: 6.0Gb/s
Drive has flagged a S.M.A.R.T alert : No

Enclosure Device ID: 252
Slot Number: 1
Drive's position: DiskGroup: 0, Span: 0, Arm: 1
Enclosure position: N/A
Device Id: 2
WWN: 5000c500521a8d55
Sequence Number: 2
Media Error Count: 0
Other Error Count: 0
Predictive Failure Count: 0
Last Predictive Failure Event Seq Number: 0
PD Type: SATA

Raw Size: 2.728 TB [0x15d50a3b0 Sectors]
Non Coerced Size: 2.728 TB [0x15d40a3b0 Sectors]
Coerced Size: 2.728 TB [0x15d400000 Sectors]
Sector Size:  0
Logical Sector Size:  0
Physical Sector Size:  0
Firmware state: Online, Spun Up
Commissioned Spare : No
Emergency Spare : No
Device Firmware Level: CC4B
Shield Counter: 0
Successful diagnostics completion on :  N/A
SAS Address(0): 0x4433221102000000
Connected Port Number: 0(path0)
Inquiry Data:             S1F0YM5XST3000DM001-9YN166                      CC4B
FDE Capable: Not Capable
FDE Enable: Disable
Secured: Unsecured
Locked: Unlocked
Needs EKM Attention: No
Foreign State: None
Device Speed: 6.0Gb/s
Link Speed: 6.0Gb/s
Media Type: Hard Disk Device
Drive:  Not Certified
Drive Temperature :39C (102.20 F)
PI Eligibility:  No
Drive is formatted for PI information:  No
PI: No PI
Drive's NCQ setting : N/A
Port-0 :
Port status: Active
Port's Linkspeed: 6.0Gb/s
Drive has flagged a S.M.A.R.T alert : No

Adapter #0

Enclosure Device ID: 252

Slot Number: 0

Drive's position: DiskGroup: 0, Span: 0, Arm: 0

Enclosure position: N/A

Device Id: 3

WWN: 50014ee65b17627a

Sequence Number: 2

Media Error Count: 0

Other Error Count: 0

Predictive Failure Count: 0

Last Predictive Failure Event Seq Number: 0

PD Type: SATA

Raw Size: 2.728 TB [0x15d50a3b0 Sectors]

Non Coerced Size: 2.728 TB [0x15d40a3b0 Sectors]

Coerced Size: 2.728 TB [0x15d400000 Sectors]

Sector Size: 0

Logical Sector Size: 0

Physical Sector Size: 0

Firmware state: Online, Spun Up

Commissioned Spare : No

Emergency Spare : No

Device Firmware Level: 1K03

Shield Counter: 0

Successful diagnostics completion on : N/A

SAS Address(0): 0x4433221103000000

Connected Port Number: 1(path0)

Inquiry Data: WD-WMC1F0E62TV5WDC WD3000FYYZ-01UL1B2 01.01K03

FDE Capable: Not Capable

FDE Enable: Disable

Secured: Unsecured

Locked: Unlocked

Needs EKM Attention: No

Foreign State: None

Device Speed: 6.0Gb/s

Link Speed: 6.0Gb/s

Media Type: Hard Disk Device

Drive: Not Certified

Drive Temperature :41C (105.80 F)

PI Eligibility: No

Drive is formatted for PI information: No

PI: No PI

Drive's NCQ setting : N/A

Port-0 :

Port status: Active

Port's Linkspeed: 6.0Gb/s

Drive has flagged a S.M.A.R.T alert : No

Enclosure Device ID: 252

Slot Number: 1

Drive's position: DiskGroup: 0, Span: 0, Arm: 1

Enclosure position: N/A

Device Id: 2

WWN: 5000c500521a8d55

Sequence Number: 2

Media Error Count: 0

Other Error Count: 0

Predictive Failure Count: 0

Last Predictive Failure Event Seq Number: 0

PD Type: SATA

Raw Size: 2.728 TB [0x15d50a3b0 Sectors]

Non Coerced Size: 2.728 TB [0x15d40a3b0 Sectors]

Coerced Size: 2.728 TB [0x15d400000 Sectors]

Sector Size: 0

Logical Sector Size: 0

Physical Sector Size: 0

Firmware state: Online, Spun Up

Commissioned Spare : No

Emergency Spare : No

Device Firmware Level: CC4B

Shield Counter: 0

Successful diagnostics completion on : N/A

SAS Address(0): 0x4433221102000000

Connected Port Number: 0(path0)

Inquiry Data: S1F0YM5XST3000DM001-9YN166 CC4B

FDE Capable: Not Capable

FDE Enable: Disable

Secured: Unsecured

Locked: Unlocked

Needs EKM Attention: No

Foreign State: None

Device Speed: 6.0Gb/s

Link Speed: 6.0Gb/s

Media Type: Hard Disk Device

Drive: Not Certified

Drive Temperature :39C (102.20 F)

PI Eligibility: No

Drive is formatted for PI information: No

PI: No PI

Drive's NCQ setting : N/A

Port-0 :

Port status: Active

Port's Linkspeed: 6.0Gb/s

Drive has flagged a S.M.A.R.T alert : No

Узнаем расположение бинарника megacli

# which megacli

1	# which megacli

/usr/sbin/megacli

1	/usr/sbin/megacli

Если путь к бинарнику отличается,то изменяем его в скрипте и в файле /etc/sudoers

# nano /etc/zabbix/scripts/lsimegaraid.sh

1	# nano /etc/zabbix/scripts/lsimegaraid.sh

#!/bin/bash

export LC_ALL=""
export LANG="en_US.UTF-8"
#
MEGACLI="sudo /usr/sbin/megacli"
#
if [[ -n ${1} && -n ${2} && -z ${3} ]]; then
  ##### DISCOVERY #####
  TYPE="${2}"
  if [[ ${TYPE} == "virtdiskovery" ]]; then
    DRIVES=`${MEGACLI} -LDInfo -LAll -a0 -NoLog | awk '/Virtual Drive:/ {printf("VirtualDrive%d\n", $3)}'`
    if [[ -n ${DRIVES} ]]; then
      JSON="{ \"data\":["
      SEP=""
      for DRIVE in ${DRIVES}; do
        JSON=${JSON}"$SEP{\"{#VIRTNUM}\":\"${DRIVE}\"}"
        SEP=", "
      done
      JSON=${JSON}"]}"
      echo ${JSON}
    fi
  elif [[ ${TYPE} == "physdiskovery" ]]; then
    DRIVES=`${MEGACLI} -PDlist -a0 -NoLog | awk '/Slot Number:/ {printf("DriveSlot%d\n", $3)}'`
    if [[ -n ${DRIVES} ]]; then
      JSON="{ \"data\":["
      SEP=""
      for DRIVE in ${DRIVES}; do
        JSON=${JSON}"$SEP{\"{#PHYSNUM}\":\"${DRIVE}\"}"
        SEP=", "
      done
      JSON=${JSON}"]}"
      echo ${JSON}
    fi
  fi
  exit 0
elif [[ -n ${1} && -n ${2} && -n ${3} ]]; then
  ##### PARAMETERS #####
  ##### PARAMETERS #####
  HOST="${1}"
  DRIVE="${2}"
  METRIC="${3}"
  FILECACHE="/tmp/zabbix.lsimegaraid.cache"
  TTLCACHE="55"
  TIMENOW=`date '+%s'`
  ##### CACHE #####
  if [ -s "${FILECACHE}" ]; then
    TIMECACHE=`stat -c"%Y" "${FILECACHE}"`
  else
    TIMECACHE=0
  fi
  if [ "$((${TIMENOW} - ${TIMECACHE}))" -gt "${TTLCACHE}" ]; then
    echo "" >> ${FILECACHE} # !!!
    DATACACHE=`${MEGACLI} -PDlist -a0 -NoLog | awk -F':' '
        function ltrim(s) { sub(/^[ \t]+/, "", s); return s }
        function rtrim(s) { sub(/[ \t]+$/, "", s); return s }
        function trim(s)  { return rtrim(ltrim(s)); }
        /Slot Number/              {slotcounter+=1; slot[slotcounter]=trim($2)}
        /Inquiry Data/             {inquiry[slotcounter]=trim($2)}
        /Firmware state/           {state[slotcounter]=trim($2)}
        /Drive Temperature/        {temperature[slotcounter]=trim($2)}
        /S.M.A.R.T/                {smart[slotcounter]=trim($2)}
        /Media Error Count/        {mediaerror[slotcounter]=trim($2)}
        /Other Error Count/        {othererror[slotcounter]=trim($2)}
     /Predictive Failure Count/ {failurecount[slotcounter]=trim($2)}
        END {
          for (i=1; i<=slotcounter; i+=1) {
            printf ( "DriveSlot%d inquiry:%s\n",slot[i], inquiry[i]);
            printf ( "DriveSlot%d state:%s\n", slot[i], state[i]);
            printf ( "DriveSlot%d temperature:%d\n", slot[i], temperature[i]);
            printf ( "DriveSlot%d smart:%s\n", slot[i], smart[i]);
            printf ( "DriveSlot%d mediaerror:%d\n", slot[i], mediaerror[i]);
            printf ( "DriveSlot%d othererror:%d\n", slot[i], othererror[i]);
            printf ( "DriveSlot%d failurecount:%d\n", slot[i], failurecount[i]);
          }
        }';
        ${MEGACLI} -LDInfo -LAll -a0 -NoLog | awk -F':' '
        function ltrim(s) { sub(/^[ \t]+/, "", s); return s }
        function rtrim(s) { sub(/[ \t]+$/, "", s); return s }
        function trim(s)  { return rtrim(ltrim(s)); }
        /Virtual Drive:/ {drivecounter+=1; slot[drivecounter]=trim($2);}
        /State/          {state[drivecounter]=trim($2)}
        /Bad Blocks/     {badblock[drivecounter]=trim($2)}
        END {
          for (i=1; i<=drivecounter; i+=1) {
   printf ( "VirtualDrive%d state:%s\n", slot[i], state[i]);
            printf ( "VirtualDrive%d badblock:%s\n", slot[i], badblock[i]);
          }
        }'` || exit 1
    echo "${DATACACHE}" > ${FILECACHE} # !!!
  fi
  #
  cat "${FILECACHE}" | grep -i ${DRIVE} | awk -F':' "/${METRIC}/ {print \$2}" | head -n1
  exit 0
#
else
  exit 0
fi

#!/bin/bash

export LC_ALL=""

export LANG="en_US.UTF-8"

MEGACLI="sudo /usr/sbin/megacli"

if [[ -n ${1} && -n ${2} && -z ${3} ]]; then

##### DISCOVERY #####

TYPE="${2}"

if [[ ${TYPE} == "virtdiskovery" ]]; then

DRIVES=`${MEGACLI} -LDInfo -LAll -a0 -NoLog | awk '/Virtual Drive:/ {printf("VirtualDrive%d\n", $3)}'`

if [[ -n ${DRIVES} ]]; then

JSON="{ \"data\":["

SEP=""

for DRIVE in ${DRIVES}; do

JSON=${JSON}"$SEP{\"{#VIRTNUM}\":\"${DRIVE}\"}"

SEP=", "

done

JSON=${JSON}"]}"

echo ${JSON}

elif [[ ${TYPE} == "physdiskovery" ]]; then

DRIVES=`${MEGACLI} -PDlist -a0 -NoLog | awk '/Slot Number:/ {printf("DriveSlot%d\n", $3)}'`

if [[ -n ${DRIVES} ]]; then

JSON="{ \"data\":["

SEP=""

for DRIVE in ${DRIVES}; do

JSON=${JSON}"$SEP{\"{#PHYSNUM}\":\"${DRIVE}\"}"

SEP=", "

done

JSON=${JSON}"]}"

echo ${JSON}

exit 0

elif [[ -n ${1} && -n ${2} && -n ${3} ]]; then

##### PARAMETERS #####

HOST="${1}"

DRIVE="${2}"

METRIC="${3}"

FILECACHE="/tmp/zabbix.lsimegaraid.cache"

TTLCACHE="55"

TIMENOW=`date '+%s'`

##### CACHE #####

if [ -s "${FILECACHE}" ]; then

TIMECACHE=`stat -c"%Y" "${FILECACHE}"`

else

TIMECACHE=0

if [ "$((${TIMENOW} - ${TIMECACHE}))" -gt "${TTLCACHE}" ]; then

echo "" >> ${FILECACHE} # !!!

DATACACHE=`${MEGACLI} -PDlist -a0 -NoLog | awk -F':' '

function ltrim(s) { sub(/^[ \t]+/, "", s); return s }

function rtrim(s) { sub(/[ \t]+$/, "", s); return s }

function trim(s) { return rtrim(ltrim(s)); }

/Slot Number/ {slotcounter+=1; slot[slotcounter]=trim($2)}

/Inquiry Data/ {inquiry[slotcounter]=trim($2)}

/Firmware state/ {state[slotcounter]=trim($2)}

/Drive Temperature/ {temperature[slotcounter]=trim($2)}

/S.M.A.R.T/ {smart[slotcounter]=trim($2)}

/Media Error Count/ {mediaerror[slotcounter]=trim($2)}

/Other Error Count/ {othererror[slotcounter]=trim($2)}

/Predictive Failure Count/ {failurecount[slotcounter]=trim($2)}

END {

for (i=1; i<=slotcounter; i+=1) {

printf ( "DriveSlot%d inquiry:%s\n",slot[i], inquiry[i]);

printf ( "DriveSlot%d state:%s\n", slot[i], state[i]);

printf ( "DriveSlot%d temperature:%d\n", slot[i], temperature[i]);

printf ( "DriveSlot%d smart:%s\n", slot[i], smart[i]);

printf ( "DriveSlot%d mediaerror:%d\n", slot[i], mediaerror[i]);

printf ( "DriveSlot%d othererror:%d\n", slot[i], othererror[i]);

printf ( "DriveSlot%d failurecount:%d\n", slot[i], failurecount[i]);

}

}';

${MEGACLI} -LDInfo -LAll -a0 -NoLog | awk -F':' '

function ltrim(s) { sub(/^[ \t]+/, "", s); return s }

function rtrim(s) { sub(/[ \t]+$/, "", s); return s }

function trim(s) { return rtrim(ltrim(s)); }

/Virtual Drive:/ {drivecounter+=1; slot[drivecounter]=trim($2);}

/State/ {state[drivecounter]=trim($2)}

/Bad Blocks/ {badblock[drivecounter]=trim($2)}

END {

for (i=1; i<=drivecounter; i+=1) {

printf ( "VirtualDrive%d state:%s\n", slot[i], state[i]);

printf ( "VirtualDrive%d badblock:%s\n", slot[i], badblock[i]);

}

}'` || exit 1

echo "${DATACACHE}" > ${FILECACHE} # !!!

cat "${FILECACHE}" | grep -i ${DRIVE} | awk -F':' "/${METRIC}/ {print \$2}" | head -n1

exit 0

else

exit 0

Установка прав

# chown root:zabbix /etc/zabbix/scripts/lsimegaraid.sh

1	# chown root:zabbix /etc/zabbix/scripts/lsimegaraid.sh

# chmod 550 /etc/zabbix/scripts/lsimegaraid.sh

1	# chmod 550 /etc/zabbix/scripts/lsimegaraid.sh

2.Настройка прав пользователю zabbix в sudo

# visudo

# visudo

# zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli -LDInfo -LAll -a0 -NoLog
# zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli -PDlist -a0 –NoLog
zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli

# zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli -LDInfo -LAll -a0 -NoLog

# zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli -PDlist -a0 –NoLog

zabbix ALL=(ALL) NOPASSWD: /usr/sbin/megacli

Проверка работы скрипта для пользователя Zabbix

# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none virtdiskovery

1	# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none virtdiskovery

# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none physdiskovery

1	# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none physdiskovery

# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none VirtualDrive0 state

1	# sudo -u zabbix /etc/zabbix/scripts/lsimegaraid.sh none VirtualDrive0 state

3.Настройка Zabbix-агента

# nano /etc/zabbix/zabbix_agentd.d/userparameter_lsimegaraid.conf

1	# nano /etc/zabbix/zabbix_agentd.d/userparameter_lsimegaraid.conf

[…]

Опубликовано в рубрике Centos, Debian/Ubuntu, Monitoring, Monitoring

Метки: LSI MegaRaid, monitoring, zabbix

Комментарии отключены

Мониторинг Exim в Zabbix

Июнь 1st, 2016

Evgeniy Kamenev

1.Настройка скрипта для анализа Exim-логов на Zabbix-агенте

# nano /etc/zabbix/scripts/exim4.sh

1	# nano /etc/zabbix/scripts/exim4.sh

#!/bin/bash
# Egor Minko. Synchron LLC. May.2012

zexim4ver="ver 2.1"
rval=0

# MULTIPLE PARSERS PROTECTION
LOCK=/tmp/zexim4.pid
while [ -e "$LOCK" ]; do
PID="`cat $LOCK`"
while [ "`ps h -p $PID -o pid,comm|wc -l`" -gt 0 ]
do
sleep 0.$[ ( $RANDOM % 10 ) + 1 ]s
done
done
echo $$ > $LOCK
trap "rm -f $LOCK; exit" INT TERM EXIT


# USAGE
function usage()
{
echo "zexim version: $zexim4ver"
echo "usage:"
echo " $0 deliver -- Delivered Messages"
echo " $0 arrive -- Submited Pakets"
echo " $0 error -- Errors Total for Messages"
echo " $0 defer -- Error status: Defered Messages"
echo " $0 unroute -- Error status: Unroutable address"
echo " $0 local -- Local/Virtual delivery of Messages"
echo " $0 complete -- Finished Packets"
echo " $0 reject -- Rejects Total for Packets"
echo " $0 badrelay -- Reject status: Relay not permited"
echo " $0 Pqueue -- Queue size in Packets"
echo " $0 Mqueue -- Queue size in Messages"
echo " $0 frozen -- Frozen Packets"
echo ""
echo " Packet = letter with many recipients"
echo " Message = A single message for one recipient"
echo ""
}

# GLOBAL INSTRUCTIONS
CACHETTL="58" # sec
main_log=/var/log/exim_mainlog
tmp_log=/tmp/exim_log_pars.txt
stats=/tmp/stats.txt
exim=`which exim`
function create_data()
{
# CREATING STATS FILE
if [ ! -e "$stats" ] ; then touch $stats ; fi

# CREATING TMP FILE
# additional 'sub' in 'awk' used for cutting special chars that breaks next 'sed' parsing. For now: []()
position=`tail -1 $stats |awk '{print $1" "$2" "$3}'`
position_log=`tail -1 $main_log | awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print $1" "$2" "$3}'`

# BUILDING REPORT ONLY IF THERE IS DIFFERENCE BETWEEN LAST LINE IN LOG
if [ "$position" == "$position_log" ]
then
vars="0 0 0 0 0 0 0 0 0"
else
if ! grep -qc "" $stats || ! awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log|grep -qc "$position"
then
awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log $main_log > $tmp_log
else
awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log |sed 1,/"$position"/d | sed /"$position"/d > $tmp_log
fi
vars="`awk '\
BEGIN {deliver=0; arrive=0; error=0; local=0; complete=0; reject=0; badrelay=0; defer=0; unroute=0}\
/[-=]>/ { deliver++ }\
/<=/ {arrive++}\
/ \*\* / {error++}\
/[=][=]/ {defer++}\
/al_delivery/ {local++}\
/Completed/ {complete++}\
/rejected/ {reject++}\
/relay not permitted/ {badrelay++}\
/Unrouteable address/ {unroute++}\
END {print deliver" "arrive" "error" "defer" "local" "complete" "reject" "badrelay" "unroute}' $tmp_log`"
fi

queue_size="`$exim -bpc`"
recipients="`exipick -bpu |awk '$2==""{print $1}'|grep -vE "^$"|wc -l`"
frozen="`exiqgrep -zi|wc -l`"
echo $position_log $vars $queue_size $recipients $frozen >> $stats

}
function zabbix_answer()
{
case $CASE_VALUE in
'deliver')
tail -n1 "$stats"|awk '{print $4}'
rval=$?;;
'arrive')
tail -n1 "$stats"|awk '{print $5}'
rval=$?;;
'error')
tail -n1 "$stats"|awk '{print $6}'
rval=$?;;
'defer')
tail -n1 "$stats"|awk '{print $7}'
rval=$?;;
'local')
tail -n1 "$stats"|awk '{print $8}'
rval=$?;;
'complete')
tail -n1 "$stats"|awk '{print $9}'
rval=$?;;
'reject')
tail -n1 "$stats"|awk '{print $10}'
rval=$?;;
'badrelay')
tail -n1 "$stats"|awk '{print $11}'
rval=$?;;
'unroute')
tail -n1 "$stats"|awk '{print $12}'
rval=$?;;
'Pqueue')
tail -n1 "$stats"|awk '{print $13}'
rval=$?;;
'Mqueue')
tail -n1 "$stats"|awk '{print $14}'
rval=$?;;
'frozen')
tail -n1 "$stats"|awk '{print $15}'
rval=$?;;
'version')
echo "$zexim4ver"
rm $LOCK
trap - INT TERM EXIT
exit $rval;;
*)
usage
rm $LOCK
trap - INT TERM EXIT
exit $rval;;
esac
}
if [ -s "$stats" ]; then
TIMECACHE=`stat -c"%Z" "$stats"`
else
TIMECACHE=0
fi


TIMENOW=`date '+%s'`
if [[ $# == 1 ]];then
CASE_VALUE=$1
if [ "$(($TIMENOW - $TIMECACHE))" -gt "$CACHETTL" ]; then
create_data
fi
zabbix_answer
if [ "$rval" -ne 0 ]; then
echo "ZBX_NOTSUPPORTED"
fi
rm $LOCK
trap - INT TERM EXIT
exit $rval
else
usage
rm $LOCK
trap - INT TERM EXIT
exit 0
fi

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

#!/bin/bash

# Egor Minko. Synchron LLC. May.2012

zexim4ver="ver 2.1"

rval=0

# MULTIPLE PARSERS PROTECTION

LOCK=/tmp/zexim4.pid

while [ -e "$LOCK" ]; do

PID="`cat $LOCK`"

while [ "`ps h -p $PID -o pid,comm|wc -l`" -gt 0 ]

sleep 0.$[ ( $RANDOM % 10 ) + 1 ]s

done

echo $$ > $LOCK

trap "rm -f $LOCK; exit" INT TERM EXIT

# USAGE

function usage()

{

echo "zexim version: $zexim4ver"

echo "usage:"

echo " $0 deliver -- Delivered Messages"

echo " $0 arrive -- Submited Pakets"

echo " $0 error -- Errors Total for Messages"

echo " $0 defer -- Error status: Defered Messages"

echo " $0 unroute -- Error status: Unroutable address"

echo " $0 local -- Local/Virtual delivery of Messages"

echo " $0 complete -- Finished Packets"

echo " $0 reject -- Rejects Total for Packets"

echo " $0 badrelay -- Reject status: Relay not permited"

echo " $0 Pqueue -- Queue size in Packets"

echo " $0 Mqueue -- Queue size in Messages"

echo " $0 frozen -- Frozen Packets"

echo ""

echo " Packet = letter with many recipients"

echo " Message = A single message for one recipient"

echo ""

}

# GLOBAL INSTRUCTIONS

CACHETTL="58" # sec

main_log=/var/log/exim_mainlog

tmp_log=/tmp/exim_log_pars.txt

stats=/tmp/stats.txt

exim=`which exim`

function create_data()

{

# CREATING STATS FILE

if [ ! -e "$stats" ] ; then touch $stats ; fi

# CREATING TMP FILE

# additional 'sub' in 'awk' used for cutting special chars that breaks next 'sed' parsing. For now: []()

position=`tail -1 $stats |awk '{print $1" "$2" "$3}'`

position_log=`tail -1 $main_log | awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print $1" "$2" "$3}'`

# BUILDING REPORT ONLY IF THERE IS DIFFERENCE BETWEEN LAST LINE IN LOG

if [ "$position" == "$position_log" ]

then

vars="0 0 0 0 0 0 0 0 0"

else

if ! grep -qc "" $stats || ! awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log|grep -qc "$position"

then

awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log $main_log > $tmp_log

else

awk '{sub(/\]/,""); sub(/\[/,""); sub(/\)/,""); sub(/\(/,""); print}' $main_log |sed 1,/"$position"/d | sed /"$position"/d > $tmp_log

vars="`awk '\

BEGIN {deliver=0; arrive=0; error=0; local=0; complete=0; reject=0; badrelay=0; defer=0; unroute=0}\

/[-=]>/ { deliver++ }\

/<=/ {arrive++}\

/ \*\* / {error++}\

/[=][=]/ {defer++}\

/al_delivery/ {local++}\

/Completed/ {complete++}\

/rejected/ {reject++}\

/relay not permitted/ {badrelay++}\

/Unrouteable address/ {unroute++}\

END {print deliver" "arrive" "error" "defer" "local" "complete" "reject" "badrelay" "unroute}' $tmp_log`"

queue_size="`$exim -bpc`"

recipients="`exipick -bpu |awk '$2==""{print $1}'|grep -vE "^$"|wc -l`"

frozen="`exiqgrep -zi|wc -l`"

echo $position_log $vars $queue_size $recipients $frozen >> $stats

}

function zabbix_answer()

{

case $CASE_VALUE in

'deliver')

tail -n1 "$stats"|awk '{print $4}'

rval=$?;;

'arrive')

tail -n1 "$stats"|awk '{print $5}'

rval=$?;;

'error')

tail -n1 "$stats"|awk '{print $6}'

rval=$?;;

'defer')

tail -n1 "$stats"|awk '{print $7}'

rval=$?;;

'local')

tail -n1 "$stats"|awk '{print $8}'

rval=$?;;

'complete')

tail -n1 "$stats"|awk '{print $9}'

rval=$?;;

'reject')

tail -n1 "$stats"|awk '{print $10}'

rval=$?;;

'badrelay')

tail -n1 "$stats"|awk '{print $11}'

rval=$?;;

'unroute')

tail -n1 "$stats"|awk '{print $12}'

rval=$?;;

'Pqueue')

tail -n1 "$stats"|awk '{print $13}'

rval=$?;;

'Mqueue')

tail -n1 "$stats"|awk '{print $14}'

rval=$?;;

'frozen')

tail -n1 "$stats"|awk '{print $15}'

rval=$?;;

'version')

echo "$zexim4ver"

rm $LOCK

trap - INT TERM EXIT

exit $rval;;

usage

rm $LOCK

trap - INT TERM EXIT

exit $rval;;

esac

}

if [ -s "$stats" ]; then

TIMECACHE=`stat -c"%Z" "$stats"`

else

TIMECACHE=0

TIMENOW=`date '+%s'`

if [[ $# == 1 ]];then

CASE_VALUE=$1

if [ "$(($TIMENOW - $TIMECACHE))" -gt "$CACHETTL" ]; then

create_data

zabbix_answer

if [ "$rval" -ne 0 ]; then

echo "ZBX_NOTSUPPORTED"

rm $LOCK

trap - INT TERM EXIT

exit $rval

else

usage

rm $LOCK

trap - INT TERM EXIT

exit 0

# chmod +x /etc/zabbix/scripts/exim4.sh

1	# chmod +x /etc/zabbix/scripts/exim4.sh

В скрипте указываем корректный путь к Exim-лог файлу в переменной main_log По умолчанию стоит

main_log=/var/log/exim_mainlog

1	main_log=/var/log/exim_mainlog

Если утилита exipick не установлена в системе (например, на Cpanel-установках), то скачиваем ее с официального сайта и сохраняем под именем /usr/sbin/exipick

# wget -O /usr/sbin/exipick  http://jetmore.org/john/code/exipick

1	# wget -O /usr/sbin/exipick http://jetmore.org/john/code/exipick

# chmod +x /usr/sbin/exipick

1	# chmod +x /usr/sbin/exipick

Проверяем работу утилиты exipick

# exipick -bpu

1	# exipick -bpu

2.Настройка […]

Опубликовано в рубрике Centos, Debian/Ubuntu, Monitoring, Monitoring

Метки: Exim, monitoring, zabbix

Комментарии отключены

Мониторинг Apache в Zabbix

Июнь 1st, 2016

Evgeniy Kamenev

1.Настройка Apache-статуса на Zabbix-агенте Проверка поддержки модуля

# apache2ctl -M | grep status

1	# apache2ctl -M \| grep status

 status_module (shared)

1	status_module (shared)

Если модуль не активирован,то активируем вручную

# a2enmod status

1	# a2enmod status

Debian/Ubuntu Apache версии 2.4.X

# nano /etc/apache2/mods-enabled/status.conf

1	# nano /etc/apache2/mods-enabled/status.conf

<Location /server-status>
                SetHandler server-status
                Require local
                Require ip <IP _ZABBIX_AGENT> <IP_ZABBIX_SERVER>
        </Location>
        ExtendedStatus On

SetHandler server-status

Require local

Require ip <IP _ZABBIX_AGENT> <IP_ZABBIX_SERVER>

</Location>

ExtendedStatus On

Аpache версии 2.2.X

# nano /etc/apache2/mods-enabled/status.conf

1	# nano /etc/apache2/mods-enabled/status.conf

<Location /server-status>
       SetHandler server-status
       Order Deny,Allow
       Deny from all
       Allow from <IP _ZABBIX_AGENT> <IP_ZABBIX_SERVER>
</Location>
       ExtendedStatus On

SetHandler server-status

Order Deny,Allow

Deny from all

Allow from <IP _ZABBIX_AGENT> <IP_ZABBIX_SERVER>

</Location>

ExtendedStatus On

Проверка синтаксиса и перезапуск Apache-сервера

# apache2ctl configtest && service apache2 reload

1	# apache2ctl configtest && service apache2 reload

2.Настройка скрипта на Zabbix-агенте

# nano /etc/zabbix/scripts/apache-stats.sh

1	# nano /etc/zabbix/scripts/apache-stats.sh

#!/bin/bash
if [[ -z "$1" || -z "$2" || -z "$3" ]]; then
  exit 1
fi
##### PARAMETERS #####
RESERVED="$1"
METRIC="$2"
URL="$3"
STATSURL="${URL}?auto"
#
CACHE_TTL="55"
CACHE_FILE="/tmp/zabbix.apache2.`echo ${URL} | md5sum | cut -d" " -f1`.cache"
EXEC_TIMEOUT="2"
NOW_TIME=`date '+%s'`
##### RUN #####
if [ -s "${CACHE_FILE}" ]; then
  CACHE_TIME=`stat -c"%Y" "${CACHE_FILE}"`
else
  CACHE_TIME=0
fi
DELTA_TIME=$((${NOW_TIME} - ${CACHE_TIME}))
#
if [ ${DELTA_TIME} -lt ${EXEC_TIMEOUT} ]; then
  sleep $((${EXEC_TIMEOUT} - ${DELTA_TIME}))
elif [ ${DELTA_TIME} -gt ${CACHE_TTL} ]; then
  echo "" >> "${CACHE_FILE}" # !!!
  DATACACHE=`curl -sS --insecure --max-time ${EXEC_TIMEOUT} "${STATSURL}" 2>&1`
  echo "${DATACACHE}" > "${CACHE_FILE}" # !!!
  echo "URL=${URL}"  >> "${CACHE_FILE}" # !!!
  chmod 640 "${CACHE_FILE}"
fi
#
if [ "${METRIC}" = "accesses" ]; then
  cat "${CACHE_FILE}" | grep -i "accesses" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "kbytes" ]; then
  cat "${CACHE_FILE}" | grep -i "kbytes" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "cpuload" ]; then
  cat "${CACHE_FILE}" | grep -i "cpuload" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "uptime" ]; then
  cat "${CACHE_FILE}" | grep -i "uptime" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "avgreq" ]; then
  cat "${CACHE_FILE}" | grep -i "ReqPerSec" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "avgreqbytes" ]; then
  cat "${CACHE_FILE}" | grep -i "BytesPerReq" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "avgbytes" ]; then
  cat "${CACHE_FILE}" | grep -i "BytesPerSec" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "busyworkers" ]; then
  cat "${CACHE_FILE}" | grep -i "BusyWorkers" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "idleworkers" ]; then
  cat "${CACHE_FILE}" | grep -i "idleworkers" | cut -d':' -f2 | head -n1
fi
if [ "${METRIC}" = "totalslots" ]; then
  cat "${CACHE_FILE}" | grep -i "Scoreboard" | cut -d':' -f2 | sed -e 's/ //g' | wc -c | awk '{print $1-1}'
fi
#
exit 0

#!/bin/bash

if [[ -z "$1" || -z "$2" || -z "$3" ]]; then

exit 1

##### PARAMETERS #####

RESERVED="$1"

METRIC="$2"

URL="$3"

STATSURL="${URL}?auto"

CACHE_TTL="55"

CACHE_FILE="/tmp/zabbix.apache2.`echo ${URL} | md5sum | cut -d" " -f1`.cache"

EXEC_TIMEOUT="2"

NOW_TIME=`date '+%s'`

##### RUN #####

if [ -s "${CACHE_FILE}" ]; then

CACHE_TIME=`stat -c"%Y" "${CACHE_FILE}"`

else

CACHE_TIME=0

DELTA_TIME=$((${NOW_TIME} - ${CACHE_TIME}))

if [ ${DELTA_TIME} -lt ${EXEC_TIMEOUT} ]; then

sleep $((${EXEC_TIMEOUT} - ${DELTA_TIME}))

elif [ ${DELTA_TIME} -gt ${CACHE_TTL} ]; then

echo "" >> "${CACHE_FILE}" # !!!

DATACACHE=`curl -sS --insecure --max-time ${EXEC_TIMEOUT} "${STATSURL}" 2>&1`

echo "${DATACACHE}" > "${CACHE_FILE}" # !!!

echo "URL=${URL}" >> "${CACHE_FILE}" # !!!

chmod 640 "${CACHE_FILE}"

if [ "${METRIC}" = "accesses" ]; then

cat "${CACHE_FILE}" | grep -i "accesses" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "kbytes" ]; then

cat "${CACHE_FILE}" | grep -i "kbytes" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "cpuload" ]; then

cat "${CACHE_FILE}" | grep -i "cpuload" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "uptime" ]; then

cat "${CACHE_FILE}" | grep -i "uptime" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "avgreq" ]; then

cat "${CACHE_FILE}" | grep -i "ReqPerSec" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "avgreqbytes" ]; then

cat "${CACHE_FILE}" | grep -i "BytesPerReq" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "avgbytes" ]; then

cat "${CACHE_FILE}" | grep -i "BytesPerSec" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "busyworkers" ]; then

cat "${CACHE_FILE}" | grep -i "BusyWorkers" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "idleworkers" ]; then

cat "${CACHE_FILE}" | grep -i "idleworkers" | cut -d':' -f2 | head -n1

if [ "${METRIC}" = "totalslots" ]; then

cat "${CACHE_FILE}" | grep -i "Scoreboard" | cut -d':' -f2 | sed -e 's/ //g' | wc -c | awk '{print $1-1}'

exit 0

Скрипт предусматривает кеш, что позволяет сократить количество реальных обращений к серверу. Время действия кеша […]

Опубликовано в рубрике Centos, Debian/Ubuntu, Monitoring, Monitoring

Метки: apache, monitoring, zabbix

Комментарии отключены

Настройка бекапа на Hetzner сервер

Май 5th, 2016

Evgeniy Kamenev

username

username

-имя пользователя в панели Robot в разделе Backup

password

password

-пароль для пользователя username, который доступен при активации бекапа Пример данных из Robot-консоли

Current product	100 GB Backup space - inclusive
Server	username.your-backup.de
User name	username
Samba/CIFS share	//username.your-backup.de/backup

Current product 100 GB Backup space - inclusive

Server username.your-backup.de

User name username

Samba/CIFS share //username.your-backup.de/backup

1.Генерируем пару SSH-ключ, с помощью которых будем аутентифицироваться на Backup-сервере

# ssh-keygen

1	# ssh-keygen

2.Приводим публичный ключ к виду, необходимого для Hetzner-сервера бекапов

# ssh-keygen -e -f .ssh/id_rsa.pub | grep -v "Comment:" > .ssh/id_rsa_rfc.pub

1	# ssh-keygen -e -f .ssh/id_rsa.pub \| grep -v "Comment:" > .ssh/id_rsa_rfc.pub

# cat .ssh/id_rsa_rfc.pub >> backup_authorized_keys

1	# cat .ssh/id_rsa_rfc.pub >> backup_authorized_keys

3.Создаем каталог .ssh на удаленном сервере бекапов

# echo mkdir .ssh | sftp username@username.your-backup.de

1	# echo mkdir .ssh \| sftp username@username.your-backup.de

[…]

Опубликовано в рубрике Backup, Backup, Backup, Centos, Debian/Ubuntu, Linux/Unix General

Метки: backup, Hetzner

Комментарии отключены

Настройка Master-Slave DNS-серверов на Debian/Ubuntu

Апрель 25th, 2016

Evgeniy Kamenev

Домен: kamaok.org.ua Master-сервер -192.168.1.51 Slave-сервер -192.168.1.52 1.Установка Bind-сервера на MASTER и SLAVE-серверах

# apt-get install bind9 dnsutils

1	# apt-get install bind9 dnsutils

# cp /etc/bind/named.conf /etc/bind/named.conf~

1	# cp /etc/bind/named.conf /etc/bind/named.conf~

2.Настройка Master-сервера

# grep -vE  '//|^$' /etc/bind/named.conf.options

1	# grep -vE '//\|^$' /etc/bind/named.conf.options

options {
        directory "/var/cache/bind";
        dnssec-validation auto;
        auth-nxdomain no;    # conform to RFC1035
  allow-query { any; };
  allow-transfer { 192.168.1.52; };
  allow-update { none; };
  recursion yes;
  allow-recursion { 127.0.0.1; };
  notify yes;
  listen-on-v6 { none; };
  version "My DNS Server";
  forwarders { 8.8.8.8; 8.8.4.4; };
};

options {

directory "/var/cache/bind";

dnssec-validation auto;

auth-nxdomain no; # conform to RFC1035

allow-query { any; };

allow-transfer { 192.168.1.52; };

allow-update { none; };

recursion yes;

allow-recursion { 127.0.0.1; };

notify yes;

listen-on-v6 { none; };

version "My DNS Server";

forwarders { 8.8.8.8; 8.8.4.4; };

};

Проверка синтаксиса основного конфигурационного файла /etc/bind/named.conf

# named-checkconf  /etc/bind/named.conf

1	# named-checkconf /etc/bind/named.conf

Настройка поддержки зоны kamaok.org.ua

# nano  /etc/bind/named.conf

1	# nano /etc/bind/named.conf

include "/etc/bind/named.conf.zones";

1	include "/etc/bind/named.conf.zones";

# nano /etc/bind/named.conf.zones

1	# nano /etc/bind/named.conf.zones

zone "kamaok.org.ua" {
type master;
file "/etc/bind/zones/master/kamaok.org.ua";
};

zone "kamaok.org.ua" {

type master;

file "/etc/bind/zones/master/kamaok.org.ua";

};

Создаем необходимую структур каталогов и выставляем корректного владельца/группу

# mkdir -p /etc/bind/zones/master/

1	# mkdir -p /etc/bind/zones/master/

# chown -R bind:bind /etc/bind/zones

1	# chown -R bind:bind /etc/bind/zones

Создание файла описания зоны

# nano /etc/bind/zones/master/kamaok.org.ua

1	# nano /etc/bind/zones/master/kamaok.org.ua

$TTL    900
@               IN      SOA     ns1.kamaok.org.ua. ns2.kamaok.org.ua. (
2016042101      ; Serial
600            ; Refresh
1200             ; Retry
3600            ; Expire
900            ; Minimum)
@               IN      NS      ns1.kamaok.org.ua.
@               IN      NS      ns2.kamaok.org.ua.
@               IN      MX      10      mail.kamaok.org.ua.
@               IN      A       192.168.1.51
www             IN      CNAME   @
mail            IN      A       192.168.1.51
ns1              IN      A       192.168.1.51
ns2             IN      A       192.168.1.51

$TTL 900

@ IN SOA ns1.kamaok.org.ua. ns2.kamaok.org.ua. (

2016042101 ; Serial

600 ; Refresh

1200 ; Retry

3600 ; Expire

900 ; Minimum)

@ IN NS ns1.kamaok.org.ua.

@ IN NS ns2.kamaok.org.ua.

@ IN MX 10 mail.kamaok.org.ua.

@ IN A 192.168.1.51

www IN CNAME @

mail IN A 192.168.1.51

ns1 IN A 192.168.1.51

ns2 IN A 192.168.1.51

Проверка синтаксиcа файла описания зоны […]

Опубликовано в рубрике Debian/Ubuntu, Other

Метки: Bind, DNS, master, rndc, slave

Комментарии отключены

Установка и настройка Bind на Debian/Ubuntu

Апрель 22nd, 2016

Evgeniy Kamenev

1.Установка Bind-демона, добавление в автозагрузку

# apt-get install bind9 dnsutils

1	# apt-get install bind9 dnsutils

# update-rc.d bind9 defaults

1	# update-rc.d bind9 defaults

2.Основной конфигурационный файл /etc/bind/named.conf

# nano /etc/bind/named.conf

1	# nano /etc/bind/named.conf

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/named.conf.zones";

include "/etc/bind/named.conf.options";

include "/etc/bind/named.conf.local";

include "/etc/bind/named.conf.default-zones";

include "/etc/bind/named.conf.zones";

Дефолтные файлы со стандартными зонами уже поставляются в комплекте с пакетом

# grep -vE '//|^$' /etc/bind/named.conf.default-zones

1	# grep -vE '//\|^$' /etc/bind/named.conf.default-zones

zone "." {
        type hint;
        file "/etc/bind/db.root";
};
zone "localhost" {
        type master;
        file "/etc/bind/db.local";
};
zone "127.in-addr.arpa" {
        type master;
        file "/etc/bind/db.127";
};
zone "0.in-addr.arpa" {
        type master;
        file "/etc/bind/db.0";
};
zone "255.in-addr.arpa" {
        type master;
        file "/etc/bind/db.255";
};

zone "." {

type hint;

file "/etc/bind/db.root";

};

zone "localhost" {

type master;

file "/etc/bind/db.local";

};

zone "127.in-addr.arpa" {

type master;

file "/etc/bind/db.127";

};

zone "0.in-addr.arpa" {

type master;

file "/etc/bind/db.0";

};

zone "255.in-addr.arpa" {

type master;

file "/etc/bind/db.255";

};

3.Файл с настройками Bind

# nano /etc/bind/named.conf.options

1	# nano /etc/bind/named.conf.options

options {
directory "/var/cache/bind";
dnssec-validation auto;
auth-nxdomain no;    # conform to RFC1035
listen-on-v6 { none; };
listen-on port 53 { 127.0.0.1; 192.168.1.72; };
allow-query { any; };
recursion yes;
allow-recursion { 127.0.0.1; };
forwarders { 8.8.8.8; 8.8.4.4; };
allow-transfer { none; };
version "My DNS Server";
};

options {

directory "/var/cache/bind";

dnssec-validation auto;

auth-nxdomain no; # conform to RFC1035

listen-on-v6 { none; };

listen-on port 53 { 127.0.0.1; 192.168.1.72; };

allow-query { any; };

recursion yes;

allow-recursion { 127.0.0.1; };

forwarders { 8.8.8.8; 8.8.4.4; };

allow-transfer { none; };

version "My DNS Server";

};

4.Настройка поддержки зоны kamaok.org.ua

# nano /etc/bind/named.conf.zones

1	# nano /etc/bind/named.conf.zones

zone "kamaok.org.ua" { 
                type master; 
                file "/etc/bind/zones/kamaok.org.ua.zone"; 
                     };

zone "kamaok.org.ua" {

type master;

file "/etc/bind/zones/kamaok.org.ua.zone";

};

5.Настройка файла описания зоны

# mkdir /etc/bind/zones

1	# mkdir /etc/bind/zones

# nano /etc/bind/zones/kamaok.org.ua.zone

1	# nano /etc/bind/zones/kamaok.org.ua.zone

$TTL 900
@       IN      SOA     ns1.kamaok.org.ua.      root.kamaok.org.ua. (
                                                2014071601 ; Serial
                                                14400      ; Refresh
                                                3600       ; Retry
                                                1209600    ; Expire 
                                                900 )      ; Minimal

kamaok.org.ua. IN      NS      ns1.kamaok.org.ua.
kamaok.org.ua. IN      NS      ns2.kamaok.org.ua.

kamaok.org.ua.    IN MX 10 mail.kamaok.org.ua.
localhost       IN      A       127.0.0.1

kamaok.org.ua. IN      A       192.168.1.72
app02        IN      A       192.168.1.72

ns1   IN      A       192.168.1.72
ns2   IN      A       192.168.1.72
mail  IN      A       192.168.1.72

*     IN      CNAME   kamaok.org.ua.

$TTL 900

@ IN SOA ns1.kamaok.org.ua. root.kamaok.org.ua. (

2014071601 ; Serial

14400 ; Refresh

3600 ; Retry

1209600 ; Expire

900 ) ; Minimal

kamaok.org.ua. IN NS ns1.kamaok.org.ua.

kamaok.org.ua. IN NS ns2.kamaok.org.ua.

kamaok.org.ua. IN MX 10 mail.kamaok.org.ua.

localhost IN A 127.0.0.1

kamaok.org.ua. IN A 192.168.1.72

app02 IN A 192.168.1.72

ns1 IN A 192.168.1.72

ns2 IN A 192.168.1.72

mail IN A 192.168.1.72

* IN CNAME kamaok.org.ua.

6.Проверка синтаксиса основного конфигурационного файла […]

Опубликовано в рубрике Debian/Ubuntu, Other

Метки: Bind, DNS

Комментарии отключены

Настройка программного RAID-1 на работающей системе Centos7

Апрель 13th, 2016

Evgeniy Kamenev

В систему уже существует диск /dev/sda разбитый на разделы

/dev/sda1 – boot
/dev/sda2 -/
/dev/sda3 – swap

/dev/sda1 – boot

/dev/sda2 -/

/dev/sda3 – swap

Добавляем новый диск /dev/sdb для создания RAID1-массива

# fdisk -l | grep /dev

1	# fdisk -l \| grep /dev

Disk /dev/sda: 7516 MB, 7516192768 bytes, 14680064 sectors
/dev/sda1   *        2048     1001471      499712   83  Linux
/dev/sda2         1001472    12681215     5839872   83  Linux
/dev/sda3        12681216    14680063      999424   82  Linux swap / Solaris
Disk /dev/sdb: 7516 MB, 7516192768 bytes, 14680064 sectors

Disk /dev/sda: 7516 MB, 7516192768 bytes, 14680064 sectors

/dev/sda1 * 2048 1001471 499712 83 Linux

/dev/sda2 1001472 12681215 5839872 83 Linux

/dev/sda3 12681216 14680063 999424 82 Linux swap / Solaris

Disk /dev/sdb: 7516 MB, 7516192768 bytes, 14680064 sectors

Установка утилиты mdadm

# yum install mdadm

1	# yum install mdadm

1.Копирование таблицы разделов с /dev/sda на /dev/sdb

# sfdisk -d /dev/sda | sfdisk --force /dev/sdb

1	# sfdisk -d /dev/sda \| sfdisk --force /dev/sdb

2.Подгрузка необходимыx модулей ядра

# modprobe linear

1	# modprobe linear

# modprobe raid0

1	# modprobe raid0

# modprobe raid1

1	# modprobe raid1

Проверка состояния RAID-массива

# cat /proc/mdstat

1	# cat /proc/mdstat

Personalities : [linear] [raid0] [raid1]
unused devices: <none>

1 2	Personalities : [linear] [raid0] [raid1] unused devices: <none>

Проверка, что оба диска имеют одинаковую таблицу разделов

# fdisk -l | grep dev

1	# fdisk -l \| grep dev

[…]

Опубликовано в рубрике Centos, Other

Метки: centos7, RAID, RAID-1, RAID1

Комментарии отключены

Настройка программного RAID-1 на работающей системе Ubuntu 14

Апрель 13th, 2016

Evgeniy Kamenev

Ubuntu 14 c разбивкой диска sda указанной ниже + был добавлен диск /dev/sdb одинакового с диском /dev/sda диском

# lsblk

# lsblk

NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
sda      8:0    0    10G  0 disk
├─sda1   8:1    0   190M  0 part /boot
├─sda2   8:2    0   488M  0 part [SWAP]
└─sda3   8:3    0   9.3G  0 part /
sdb      8:16   0    10G  0 disk
sr0     11:0    1  1024M  0 rom

NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT

sda 8:0 0 10G 0 disk

├─sda1 8:1 0 190M 0 part /boot

├─sda2 8:2 0 488M 0 part [SWAP]

└─sda3 8:3 0 9.3G 0 part /

sdb 8:16 0 10G 0 disk

sr0 11:0 1 1024M 0 rom

Установка необходимых пакетов/инструментов

# apt-get install mdadm initramfs-tools

1	# apt-get install mdadm initramfs-tools

Загрузка необходимых модулей

# modprobe linear

1	# modprobe linear

# modprobe raid1

1	# modprobe raid1

# modprobe raid1

1	# modprobe raid1

Для создание RAID-1-массива на уже существующей системе необходимо А) Подготовить новый диск /dev/sdb для RAID-массива Б) Скопировать содержимое диска /dev/sda на диск /dev/sdb В) Добавить […]

Опубликовано в рубрике Debian/Ubuntu, Other

Метки: RAID-1, RAID1, Ubuntu

Комментарии отключены

Настройка Let’s Encrypt SSL-сертификата на Ubuntu/Centos

Апрель 9th, 2016

Evgeniy Kamenev

1.Установка Let’s Encrypt При использовании Nginx в качестве Web-сервера Установка git Ubuntu/Debian

# apt-get install git

1	# apt-get install git

Centos

# yum install git

1	# yum install git

# cd /usr/local/

1	# cd /usr/local/

# git clone https://github.com/letsencrypt/letsencrypt

1	# git clone https://github.com/letsencrypt/letsencrypt

# cd /usr/local/letsencrypt/

1	# cd /usr/local/letsencrypt/

Остановка Nginx, который прослушивает 80 порт. Перед генерацией сертификатов необходимо убедиться, что все имена домена(включая www-поддомен ,если он должен быть включен в сертификат), для которых генерируются сертификаты имеют запись типа А в ДНС. Также необходимо остановить […]

Опубликовано в рубрике Centos, Debian/Ubuntu, Web, Web, Web

Метки: https, let's encrypt, security, SSL

Комментарии отключены

Базовая настройка Ubuntu 14 после минимальной установки

Март 30th, 2016

Evgeniy Kamenev

1.Настройка сети, DNS-серверов, имени хоста

# nano /etc/network/interfaces

1	# nano /etc/network/interfaces

auto eth0
iface eth0 inet static
        address 192.168.1.84
        netmask 255.255.255.0
        gateway 192.168.1.1

auto eth0

iface eth0 inet static

address 192.168.1.84

netmask 255.255.255.0

gateway 192.168.1.1

Настройка DNS-серверов По умолчанию используется resolvconf-утилита, которая перезаписует все изменения, сделанные вручную в файле /etc/resolv.conf после перезагрузки Поэтому для того,чтобы изменения сохранились после перезагрузки необходимо эти изменения добавить в файл

/etc/resolvconf/resolv.conf.d/base

1	/etc/resolvconf/resolv.conf.d/base

Проверим,что утилита установлена

# dpkg -l | grep resolvconf

1	# dpkg -l \| grep resolvconf

# nano /etc/resolvconf/resolv.conf.d/base

1	# nano /etc/resolvconf/resolv.conf.d/base

nameserver 8.8.8.8
nameserver 8.8.4.4
search domain.com

nameserver 8.8.8.8

nameserver 8.8.4.4

search domain.com

До перезагрузки нужно подредактировать /etc/resolv.conf

# nano /etc/resolv.conf

1	# nano /etc/resolv.conf

nameserver 8.8.8.8
nameserver 8.8.4.4
search domain.com

nameserver 8.8.8.8

nameserver 8.8.4.4

search domain.com

Настрока имени хоста

# nano /etc/hosts

1	# nano /etc/hosts

[…]

Опубликовано в рубрике Debian/Ubuntu, System

Метки: base, configure, Ubuntu

Комментарии отключены

Архивы автора

Мониторинг LSI MegaRAID в Zabbix

Мониторинг Exim в Zabbix

Мониторинг Apache в Zabbix

Настройка бекапа на Hetzner сервер

Настройка Master-Slave DNS-серверов на Debian/Ubuntu

Установка и настройка Bind на Debian/Ubuntu

Настройка программного RAID-1 на работающей системе Centos7

Настройка программного RAID-1 на работающей системе Ubuntu 14

Настройка Let’s Encrypt SSL-сертификата на Ubuntu/Centos

Базовая настройка Ubuntu 14 после минимальной установки

Страницы

Свежие записи

Архивы

Рубрики

Админ-панель