debian_xen_host.cfg

# /etc/icinga/objects/debian_xen_host.cfg

define host {
host_name srv1
address 192.168.1.1
use generic-host
hostgroups raid1, debian
}

define service {
use generic-service
host_name srv1
service_description ssh_check_mem
check_command ssh_check_mem!20!10
}

define service {
use generic-service
host_name srv1
service_description ssh_check_load
check_command ssh_check_load!15!10!5!30!25!20
}

define service {
use generic-service
host_name srv1
service_description ssh_check_procs
check_command ssh_check_p

extinfo_icinga.cfg

# /etc/icinga/objects/extinfo_icinga.cfg

# icon path
# /usr/share/icinga/htdocs/images/logos/base/

define hostextinfo{
hostgroup_name snom
icon_image base/phone.png
icon_image_alt VoIP phone
}

define hostextinfo{
hostgroup_name mx
icon_image base/mail.png
icon_image_alt Mailserver
}

define hostextinfo{
hostgroup_name printer
icon_image base/printer.png
icon_image_alt Printer
}

define hostextinfo{
hostgroup_name debian
icon_image base/debi

SSH server enable / disable password authentication

Enable
sed -i 's|[#]*PasswordAuthentication no|PasswordAuthentication yes|g' /etc/ssh/sshd_config
sed -i 's|UsePAM no|UsePAM yes|g' /etc/ssh/sshd_config
service ssh restart

Disable (don´t forget to install pre-shared-key first: http://www.panticz.de/ssh_pre-shared-key_authentication)
<?php
$URL="https://raw.githubusercontent.com/panticz/scripts/master/disable_ssh_password_authentication.sh";
echo "wget -q --no-check-certificate $URL -O - | bash -";
echo " 

";
$c = curl_init();
curl_setopt($c, CURLOPT_URL, $URL);
curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);
echo htmlspecialchars(curl_exec($c));
curl_close($c);
echo "

";
?>

# LXC
# disable login without password
lxc-attach -n ${CONTAINER} -- sed -i 's|[#]*PasswordAuthentication yes|PasswordAuthentication no|g' /etc/ssh/sshd_config
lxc-attach -n ${CONTAINER} -- sed -i 's|UsePAM yes|UsePAM no|g' /etc/ssh/sshd_config
lxc-attach -n ${CONTAINER} -- service ssh restart

# generate SSH key for root
lxc-attach -n ${CONTAINER} -- ssh-keygen -q -f /root/.ssh/id_rsa -N ''

Icinga plugins

# basic plugins
apt-get install -y nagios-plugins-basic

# memory
wget -q --no-check-certificate https://raw.githubusercontent.com/panticz/icinga/master/plugins/scripts/check_mem.sh -O - | bash -

# hddtemp
https://raw.githubusercontent.com/panticz/icinga/master/plugins/scripts/check_hddtemp.sh

# ipmi
http://www.thomas-krenn.com/de/wiki/IPMI_Sensor_Monitoring_Plugin_Version_1.x

# sensors
http://www.panticz.de/lm-sensors

# automatic apt-update

# harddisc temperature (http://exchange.nagios.org/components/com_mtree/attachment.php?link_id=341&cf_id=24)

pnp4nagios

#
# graph (server)
# TODO: BROKEN with Icinga 1.7.1?
#
apt-get install -y pnp4nagios

sed -i 's|/cgi-bin/nagios3|/icinga/cgi-bin|g' /etc/pnp4nagios/config.php

sed -i 's|/etc/nagios3/htpasswd.users|/etc/icinga/htpasswd.users|g' /etc/pnp4nagios/apache.conf

sed -i 's|process_performance_data=0|process_performance_data=1|g' /etc/icinga/icinga.cfg
sed -i 's|#broker_module=/usr/lib/icinga/idomod.so config_file=/etc/icinga/idomod.cfg|broker_module=/usr/lib/pnp4nagios/npcdmod.o config_file=/etc/pnp4nagios/npcd.cfg|g' /etc/icinga/icinga.cfg

sed -i 's|log_type = syslog|log_type = file|g'

Install icinga SSH on client

# icinga SSH on server
# run once
# /var/lib/nagios/.ssh/config
su -s /bin/bash nagios -c "ssh-keygen -q -f /var/lib/nagios/.ssh/id_rsa -N ''"

# run for every client
# TODO: automate, one command?
su -s /bin/bash nagios
ssh-copy-id root@192.168.1.222
ssh root@192.168.1.222
exit

# install on client
# apt-get install -y nagios-plugins
apt-get install -y nagios-plugins-basic
# apt-get install -y nagios-plugins-standard
# apt-get install -y nagios-plugins-contrib --no-install-recommends

chown root:root /usr/lib/nagios/plugins/check_ide_smart
chmod u+s /usr/lib/nagios/pl

Subscribe to