Zabbix 5.0 LTS版本的安装小结
1:准备Zabbix的服务器。
这里可能需要一台或多台服务器，视需求和资源而定。也可以将Zabbix_Server、MySQL、Zabbix Web等安装在同一台服务器上。
这里我们打算安装在一台测试服务器上。操作系统版本为CentOS Linux release 8.2.2004 (Core)。
环境要求
Zabbix 5.0 版本对基础环境的要求有大的变化，最大的就是对 php 版本的要求，最低要求 7.2.0 版本,对 php 扩展组件版本也有要求，详见官网文档https://www.zabbix.com/documentation/current/manual/installation/requirements。 这里有对硬件资源、操作系统、数据库版本等相关的规范要求。
2：关闭SELINXU
如果想关闭SeLinux,又不想重启服务器，那么使用下面命令。但是该命令只能将SeLinux在enforcing、permissive这两种模式之间切换.服务器重启后,又会恢复到/etc/selinux/config下的设置,也就是说setenforce的修改是不能持久的。
# setenforce 0
# getenforce
所以你想永久关闭SeLinux的话，还是必须调整/etc/selinux/config下的参数。
# vi /etc/selinux/config
将SELINUX=enforcing调整为SELINUX=disabled 或Permissive
你也可以使用shell脚本修改参数
# getenforceEnforcing
# sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
调整完参数后，最好重启一下服务器
3：安装MySQL数据库
Zabbix支持MySQL、PostgreSQL、Oracle 等数据库，另外MySQL数据库可以用MySQL社区版或MariaDB。具体的版本要求为：MySQL.5.62 - 8.0.x ，如果是MariaDB则要求10.0.37或后续版本。
下面我们打算安装MySQL社区版。yum安装方式的简单过程如下：
安装MySQL Repository
#rpm -ivh https://dev.mysql.com/get/mysql80-community-release-el8-1.noarch.rpm
验证MySQL Repository是否安装
#yum repolist all | grep mysql | grep enabled
[root@appliance ~]# yum repolist all | grep mysql | grep enabledmysql-connectors-community MySQL Connectors Community enabled
mysql-tools-community MySQL Tools Community enabled
mysql80-community MySQL 8.0 Community Server enabled
Yum方式安装MySQL
#yum --disablerepo=AppStream install -y mysql-community-server
#systemctl enable mysqld #设置开机启动MySQL
#systemctl start mysqld #启动MySQL服务
#systemctl status mysqld #检查MySQL服务状态
获取MySQL root的临时密码
[root@appliance ~]# cat /var/log/mysqld.log | grep -i 'temporary password'2020-07-02T07:37:04.495297Z 6 [Note] [MY-010454] [Server] A temporary password is generated for root@localhost: AgI<w+2,hwyW[root@appliance ~]#
执行mysql_secure_installation安全配置向导来做一些常规化安全设置
[root@appliance ~]# mysql_secure_installationSecuring the MySQL server deployment.
Enter password for user root: The existing password for the user account root has expired. Please set a new password.New password:
Re-enter new password:
The 'validate_password' component is installed on the server.The subsequent steps will run with the existing configuration
of the component.
Using existing password for root.Estimated strength of the password: 100
Change the password for root ? ((Press y|Y for Yes, any other key for No) : YES
New password:
Re-enter new password:
Estimated strength of the password: 100
Do you wish to continue with the password provided?(Press y|Y for Yes, any other key for No) : y
By default, a MySQL installation has an anonymous user,allowing anyone to log into MySQL without having to have
a user account created for them. This is intended only for
testing, and to make the installation go a bit smoother.
You should remove them before moving into a production
environment.
Remove anonymous users? (Press y|Y for Yes, any other key for No) : y
Success.
Normally, root should only be allowed to connect from
'localhost'. This ensures that someone cannot guess atthe root password from the network.
Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y
Success.
By default, MySQL comes with a database named 'test' that
anyone can access. This is also intended only for testing,and should be removed before moving into a production
environment.
Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y
- Dropping test database...
Success.
- Removing privileges on test database...
Success.
Reloading the privilege tables will ensure that all changes
made so far will take effect immediately.
Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y
Success.
All done!
因为规划将MySQL的数据库放在/mysql下面，所以我们还需要移动MySQL的datadir到/mysql下，关于如何移动MySQL数据库存储目录，参考我这篇博客“CentOS 7上更改MySQL数据库存储目录浅析。” 这里就不展开介绍细节信息了。
如果要安装MariaDB也非常简单。使用下面命令即可快捷方便的安装MariaDB
yum install mariadb-server -y
4：安装Zabbix Repository
#rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/8/x86_64/zabbix-release-5.0-1.el8.noarch.rpm
#dnf clean all
[root@appliance mysql]# rpm -Uvh https://repo.zabbix.com/zabbix/5.0/rhel/8/x86_64/zabbix-release-5.0-1.el8.noarch.rpmRetrieving https://repo.zabbix.com/zabbix/5.0/rhel/8/x86_64/zabbix-release-5.0-1.el8.noarch.rpm
warning: /var/tmp/rpm-tmp.Am4Zqr: Header V4 RSA/SHA512 Signature, key ID a14fe591: NOKEY
Verifying... ################################# [100%]Preparing... ################################# [100%]Updating / installing...
1:zabbix-release-5.0-1.el8 ################################# [100%][root@appliance mysql]# dnf clean all28 files removed
5：安装Zabbix Server、Zabbix Agent、Zabbix Web
Nginx
dnf install zabbix-server-mysql zabbix-web-mysql zabbix-nginx-conf zabbix-agent
Apache
# dnf install zabbix-server-mysql zabbix-web-mysql zabbix-apache-conf zabbix-agent
6：初始化Zabbix的数据库
# mysql -uroot -p
password #输入具体的账号密码
mysql> create database zabbix character set utf8 collate utf8_bin;
mysql> create user zabbix@localhost identified by 'xxxxx'; #实际情况中，输入具体的账号密码(这里在某些数据库版本有个坑，后面讲述这个坑)
mysql> grant all privileges on zabbix.* to zabbix@localhost;
mysql> quit;
导入Zabbix数据库结构和数据
# zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p zabbix
7：配置Zabbix Server连接数据库设置
/etc/zabbix/zabbix_server.conf
一般情况执行配置DBPassword,但是如果你修改了一些默认配置，那么还需设置一些其他参数。例如DBSocket、DBPort等等。
### Option: DBHost# Database host name.# If set to localhost, socket is used for MySQL.# If set to empty string, socket is used for PostgreSQL.## Mandatory: no# Default:# DBHost=localhostDBHost=localhost
### Option: DBName# Database name.## Mandatory: yes# Default:# DBName=DBName=zabbix
### Option: DBPassword# Database password.# Comment this line if no password is used.## Mandatory: no# Default:# DBPassword=DBPassword=xxxxxx
### Option: DBSocket# Path to MySQL socket.## Mandatory: no# Default:# DBSocket=DBSocket=/mysql_data/mysql/mysql.sock
这里要根据实际情况进行配置，有些参数也可以不配置。有些参数，例如DBSocket，我修改过MySQL数据库的数据文件目录，所以这里必须修改。否则后面会遇到一些错误。
8：Zabbix前端的PHP配置
/etc/php-fpm.d/zabbix.conf
参数date.timezone的默认配置如下，一般我们必须取消注释，将时区修改为Asia/Shanghai
; php_value[date.timezone] = Europe/Riga
9： 修改nginx或Apache的配置
/etc/nginx/conf.d/zabbix.conf 配置端口和指定server_name的IP地址
listen 80;
server_name xxx.xxx.xxx.xx;
如果是Apache暂时不用设置任何配置。
10：设置防火墙端口
#firewall-cmd --permanent --add-port=10050/tcp#firewall-cmd --permanent --add-port=10051/tcp#firewall-cmd --permanent --add-port=80/tcp#firewall-cmd --reload
10: 启动服务并将其设置为开机自启动
Nginx
# systemctl restart zabbix-server zabbix-agent nginx php-fpm
# systemctl enable zabbix-server zabbix-agent nginx php-fpm
Apache
#systemctl restart zabbix-server zabbix-agent httpd php-fpm
#systemctl enable zabbix-server zabbix-agent httpd php-fpm
11：http://xxx.xxx.xxx.xxx/ 进入设置界面。
Nginx
http://192.168.xxx.xxx/setup.php
Apache
http://192.168.xxx.xxx/zabbix/setup.php
配置完成后，登录系统修改账号密码，禁用一些账号。然后就可以开始使用Zabbix了。
问题小结
1：导入Zabbix数据库结构和数据时遇到告警：“No database selected”
安装测试过两次，有一次遇到下面错误“No database selected”，解决办法是，在create.sql.gz中加入一行SQL：
[root@appliance ~]# zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -pEnter password:
ERROR 1046 (3D000) at line 1: No database selected
可以先解压gz文件，加入use zabbix;这一句SQL，或者直接使用vim编辑gz文件文件
# vim create.sql.gz
其实出现上面错误，是因为脚本没有指定数据库，如下书写即可避免这个问题。你也可以通过参数 -D指定数据库。
# zcat /usr/share/doc/zabbix-server-mysql*/create.sql.gz | mysql -uzabbix -p zabbix
2：配置DB Connection过程遇到“Cannot Connect to the Database"错误
检查Zabbix Server的日志，发现如下错误信息。
19690:20200702:184818.882 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
19690:20200702:184818.882 database is down: reconnecting in 10 seconds
19690:20200702:184828.883 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
19690:20200702:184828.883 database is down: reconnecting in 10 seconds19690:20200702:184838.883 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
19690:20200702:184838.883 database is down: reconnecting in 10 seconds
19690:20200702:184848.884 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
19690:20200702:184848.884 database is down: reconnecting in 10 seconds19690:20200702:184858.884 [Z3001] connection to database 'zabbix' failed: [2002] Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)
19690:20200702:184858.884 database is down: reconnecting in 10 seconds
这个是Zabbix Server连接MySQL有问题。因为我移动过MySQL的数据目录，所以需要修改/etc/zabbix/zabbix_server.conf文件下的参数DBScoket，如下所示
然后Zabbix Server的错误日志中上述错误消失，但是依然报这个错误，如下截图所示， 此时必须将Database Host从localhost改为127.0.0.1
问题解决后，登录系统，修改Zabbix用户密码。
3：配置DB Connection过程遇到“Cannot Connect to the Database"错误，如下截图所示：
检查Zabbix Server的日志，tail -80f /var/log/zabbix/zabbix_server.log 如下所示,提示下面错误
63446:20200707:141746.072 Starting Zabbix Server. Zabbix 5.0.1 (revision c2a0b03480).
63446:20200707:141746.073 ****** Enabled features ******
63446:20200707:141746.073 SNMP monitoring: YES
63446:20200707:141746.073 IPMI monitoring: YES
63446:20200707:141746.073 Web monitoring: YES
63446:20200707:141746.073 VMware monitoring: YES
63446:20200707:141746.073 SMTP authentication: YES
63446:20200707:141746.073 ODBC: YES
63446:20200707:141746.073 SSH support: YES
63446:20200707:141746.073 IPv6 support: YES
63446:20200707:141746.073 TLS support: YES
63446:20200707:141746.073 ******************************
63446:20200707:141746.073 using configuration file: /etc/zabbix/zabbix_server.conf
63446:20200707:141746.080 [Z3001] connection to database 'zabbix' failed: [2059] Plugin caching_sha2_password could not be loaded: lib64/mariadb/plugin/caching_sha2_password.so: cannot open shared object file: No such file or directory63446:20200707:141746.080 Cannot connect to the database. Exiting
这个是因为MySQL 8数据库的加密方式改变了，可以设置参数default_authentication_plugin='mysql_native_password'，使用旧版本中的认证方式。当然也可以使用下面方式修改一下账号
mysql> select version();+-----------+
| version() |
+-----------+
| 8.0.20 |
+-----------+
1 row in set (0.00 sec)
mysql> show variables like 'default_authentication_plugin';
+-------------------------------+-----------------------+
| Variable_name | Value |+-------------------------------+-----------------------+
| default_authentication_plugin | caching_sha2_password |
+-------------------------------+-----------------------+
1 row in set (0.01 sec)
mysql> select host,user,plugin from mysql.user;
+-----------+------------------+-----------------------+
| host | user | plugin |
+-----------+------------------+-----------------------+
| localhost | mysql.infoschema | caching_sha2_password |
| localhost | mysql.session | caching_sha2_password || localhost | mysql.sys | caching_sha2_password |
| localhost | root | caching_sha2_password |
| localhost | zabbix | caching_sha2_password |
+-----------+------------------+-----------------------+
5 rows in set (0.00 sec)
mysql> alter user 'zabbix'@'localhost' identified with mysql_native_password by 'xxxxxx';
Query OK, 0 rows affected (0.02 sec)mysql>
之所以遇到这种问题，是因为上面创建账号时，使用的是下面这个SQL引起
mysql> create user zabbix@localhost identified by 'xxxxx';
参考资料：
https://www.zabbix.com/documentation/current/manual/installation/install#installing_frontend
https://www.itzgeek.com/how-tos/linux/centos-how-tos/how-to-install-zabbix-server-on-centos-8-rhel-8.html
https://www.zabbix.com/cn/download?zabbix=5.0&os_distribution=centos&os_version=8&db=mysql&ws=apache
https://www.itzgeek.com/how-tos/linux/centos-how-tos/how-to-install-mysql-8-0-on-rhel-8.html
https://bobcares.com/blog/zabbix-cannot-connect-to-the-database/
http://www.zsythink.net/archives/500