This image integrates Icinga 2 into your Docker environment.
docker network create icinga
# CA
docker run --rm \
-h icinga-master \
-v icinga-master:/data \
-e ICINGA_MASTER=1 \
icinga/icinga2 \
cat /var/lib/icinga2/certs/ca.crt > icinga-ca.crt
# Ticket
docker run --rm \
-h icinga-master \
-v icinga-master:/data \
-e ICINGA_MASTER=1 \
icinga/icinga2 \
icinga2 daemon -C
docker run --rm \
-h icinga-master \
-v icinga-master:/data \
-e ICINGA_MASTER=1 \
icinga/icinga2 \
icinga2 pki ticket --cn icinga-agent > icinga-agent.ticket
# Master
docker run --rm -d \
--network icinga \
--name icinga-master \
-h icinga-master \
-p 5665:5665 \
-v icinga-master:/data \
-e ICINGA_MASTER=1 \
icinga/icinga2
# Agent
docker run --rm -d \
--network icinga \
-h icinga-agent \
-v icinga-agent:/data \
-e ICINGA_ZONE=icinga-agent \
-e ICINGA_ENDPOINT=icinga-master,icinga-master,5665 \
-e ICINGA_CACERT="$(< icinga-ca.crt)" \
-e ICINGA_TICKET="$(< icinga-agent.ticket)" \
icinga/icinga2
The container may listen on port 5665 and expects
a volume on /data
and a specific persistent hostname.
To configure it, do one of the following:
/data
.
Hint: docker run --rm -it -h icinga-master -v icinga-master:/data icinga/icinga2 icinga2 node wizard
/data/etc/icinga2
and /data/var/...
by yourself.
Consult the Icinga 2 configuration documentation
on which configuration files there are.To notify by e-mail, provide an msmtp configuration - either
by mounting the /etc/msmtprc
file or by specifying the desired content
of ~icinga/.msmtprc
via the environment variable MSMTPRC
.
*Don't mount volumes under /data/etc/icinga2
or `/data/var//icinga2** unless
/dataalready contains all of these directories! Otherwise
/data` will stay incomplete, i.e. broken.
Most of the following variables correspond to
icinga2 node setup
CLI parameters.
If any of these is present and icinga2 node setup
has not been run yet, it will run.
Consult the node setup command documentation on what are which parameters for.
Regular variables:
Variable | Node setup CLI |
---|---|
ICINGA_ACCEPT_COMMANDS=1 |
--accept-commands |
ICINGA_ACCEPT_CONFIG=1 |
--accept-config |
ICINGA_DISABLE_CONFD=1 |
--disable-confd |
ICINGA_MASTER=1 |
--master |
ICINGA_CN=icinga-master |
--cn icinga-master |
ICINGA_ENDPOINT=icinga-master,2001:db8::192.0.2.9,5665 |
--endpoint icinga-master,2001:db8::192.0.2.9,5665 |
ICINGA_GLOBAL_ZONES=global-config |
--global_zones global-config |
ICINGA_LISTEN=::,5665 |
--listen ::,5665 |
ICINGA_PARENT_HOST=2001:db8::192.0.2.9,5665 |
--parent_host 2001:db8::192.0.2.9,5665 |
ICINGA_PARENT_ZONE=master |
--parent_zone master |
ICINGA_TICKET=0123456789abcdef0123456789abcdef01234567 |
--ticket 0123456789abcdef0123456789abcdef01234567 |
ICINGA_ZONE=master |
--zone master |
Special variables:
ICINGA_TRUSTEDCERT
's value is written to a temporary file
which is passed to icinga2 node setup
via --trustedcert
.ICINGA_CACERT
's value is written to /var/lib/icinga2/certs/ca.crt
.git clone https://github.com/Icinga/icinga2.git
#pushd icinga2
#git checkout v2.12.0
#popd
./build.bash ./icinga2
In order to run the script on macOS, coreutils must be installed:
brew install coreutils