monitor-server.init

   1 #!/bin/bash
   2 #
   3 # priority: 850
   4 #
   5 # Manage settings for the Zabbix installtion and
   6 #       other monitor-related things
   7 #
   8 # Stephen Soltesz <soltesz@cs.princeton.edu>
   9 # Copyright (C) 2008 The Trustees of Princeton University
  10 #
  11 # $Id$
  12 #
  13
  14 # Source function library and configuration
  15 . /etc/plc.d/functions
  16 . /etc/planetlab/plc_config
  17 local_config=/etc/planetlab/configs/site.xml
  18
  19 MONITORPATH=/usr/share/monitor
  20
  21 # Be verbose
  22 set -x
  23
  24 # Default locations
  25 PGDATA=/var/lib/pgsql/data
  26 postgresql_conf=$PGDATA/postgresql.conf
  27 pghba_conf=$PGDATA/pg_hba.conf
  28
  29 # Export so that we do not have to specify -p to psql invocations
  30 export PGPORT=$PLC_DB_PORT
  31
  32
  33 ZABBIX_DB_USER="zabbixuser"
  34 ZABBIX_DB_NAME="zabbix"
  35
  36 MONITOR_DB_USER="monitoruser"
  37 MONITOR_DB_NAME="monitor"
  38
  39 WROTE_PG_CONFIG=
  40
  41 if [ -z "$PLC_MONITOR_IP" ] ; then
  42         PLC_MONITOR_IP=$( gethostbyname $PLC_MONITOR_HOST )
  43 fi
  44
  45 function check_pg_hba ()
  46 {
  47         NAME=$1
  48         USER=$2
  49         #### SETUP ACCESS to this user and database
  50         mkdir -p $PGDATA/pg_hba.conf.d
  51         CONF=$PGDATA/pg_hba.conf.d/${NAME}.conf
  52         if [ ! -f $CONF ] ; then
  53                 echo "host $NAME $USER 127.0.0.1/32 password"   > $CONF
  54                 echo "host $NAME $USER $PLC_MONITOR_IP/32 password" >> $CONF
  55
  56                 WROTE_PG_CONFIG="true"
  57         fi
  58 }
  59
  60 function check_user_and_db()
  61 {
  62     CREATED=
  63         NAME=$1
  64         USER=$2
  65     # confirm user is present or create it
  66     user_present=$( psql -U postgres -c "select * from pg_user;" -d template1 | grep $USER )
  67     if [ -z $user_present ] ; then
  68         createuser --no-superuser --no-createdb --no-createrole --login --unencrypted --echo $USER -U postgres
  69                 CREATED="true"
  70     fi
  71
  72     # confirm database is present or create it
  73     db_present=$( psql -U postgres -c "select * from pg_database;" -d template1 | grep $NAME )
  74     if [ -z $db_present ] ; then
  75         createdb --owner=$USER $NAME -U postgres
  76                 CREATED="true"
  77     fi
  78
  79     # Create/update the unprivileged database user and password
  80     if [[ -z "$PLC_MONITOR_DBPASSWORD" || "$PLC_MONITOR_DBPASSWORD" = "None" ]] ; then
  81         # Zabbix doesn't like plain uuidgen passwords
  82         PLC_MONITOR_DBPASSWORD=$( uuidgen | md5sum - | awk '{print $1}' )
  83         plc-config --category=plc_monitor --variable=dbpassword --value="$PLC_MONITOR_DBPASSWORD" --save=$local_config $local_config
  84         service plc reload
  85                 CREATED="true"
  86     fi
  87     if [ -n "$CREATED" ] ; then
  88         psql -d template1 -U postgres -c "ALTER USER $USER WITH PASSWORD '$PLC_MONITOR_DBPASSWORD';"
  89     fi
  90 }
  91
  92 function if_present_load ()
  93 {
  94     file=$1
  95     if [ -f $file ] ; then
  96         psql -d $ZABBIX_DB_NAME -U $ZABBIX_DB_USER < $file
  97     fi
  98 }
  99 function check_monitor_schema_and_data()
 100 {
 101         # NOTE: call create_all() to setup the database from the info model.
 102         python -c "from monitor.database.info.model import *; from elixir import create_all; create_all()"
 103 }
 104
 105 function check_zabbix_schema_and_data()
 106 {
 107     schema_present=$( psql -U $ZABBIX_DB_USER $ZABBIX_DB_NAME -c "\d;" < /dev/null | grep hosts )
 108     if [ -z $schema_present ] ; then
 109         echo "... initial import can take SEVERAL minutes. please wait ..."
 110         if_present_load "/usr/local/zabbix/misc/create/schema/postgresql.sql"
 111         if_present_load "/usr/local/zabbix/misc/create/data/data.sql"
 112         if_present_load "/usr/local/zabbix/misc/create/data/images_pgsql.sql"
 113         ## TODO: update ZABBIX Server entry, "update hosts set status=0, host='MyPLC Server' where hostid=10017"
 114     fi
 115 }
 116
 117 function check_zabbix_templates_and_import ()
 118 {
 119         # LOG IN
 120         COOKIE_FILE=/tmp/cookiejar.txt
 121         rm -f ${COOKIE_FILE}
 122         TEMPLATES_DIR=${MONITORPATH}/zabbix/templates
 123         curl -s --cookie $COOKIE_FILE --cookie-jar $COOKIE_FILE \
 124                         --form "enter=Enter" \
 125                         --form "name=Admin" \
 126                         --form "password=zabbix" \
 127                         "http://${PLC_MONITOR_HOST}/zabbix/index.php?login=1"
 128
 129         deleted=$( grep 'deleted' $COOKIE_FILE )
 130         if [ -n "$deleted" ] ; then
 131                 echo "Login to the zabbix web server failed!!!"
 132                 return 1
 133         fi
 134
 135         for file in ${TEMPLATES_DIR}/*.xml ; do
 136                 # 0 - update , 1 - skip, 0 - add
 137                 echo "############### IMPORTING $file" >> /var/log/monitor.log
 138                 curl -s --cookie $COOKIE_FILE --cookie-jar $COOKIE_FILE \
 139                         --form "config=1" \
 140                         --form "import_file=@${file}" \
 141                         --form "rules[host][exist]=0" \
 142                         --form "rules[host][missed]=0" \
 143                         --form "rules[template][exist]=0" \
 144                         --form "rules[template][missed]=1" \
 145                         --form "rules[item][exist]=0" \
 146                         --form "rules[item][missed]=0" \
 147                         --form "rules[trigger][exist]=0" \
 148                         --form "rules[trigger][missed]=0" \
 149                         --form "rules[graph][exist]=0" \
 150                         --form "rules[graph][missed]=0" \
 151                         --form "import=Import" \
 152                         "http://${PLC_MONITOR_HOST}/zabbix/exp_imp.php" >> /var/log/monitor.log
 153         done
 154 }
 155
 156
 157 function check_monitor_conf ()
 158 {
 159         MONITOR_CONFIG=/etc/monitor.conf
 160
 161
 162         # Using plcsh add default, monitor user
 163         plcsh <<EOF &>/dev/null
 164 AddPerson({'first_name' : 'Monitor', 'last_name' : 'Server', 'password' : '${PLC_MONITOR_DBPASSWORD}', 'email' : '${PLC_MONITOR_EMAIL}'})
 165 AddRoleToPerson('admin', '${PLC_MONITOR_EMAIL}')
 166 AddPersonToSite('${PLC_MONITOR_EMAIL}', '${PLC_SLICE_PREFIX}')
 167 UpdatePerson('${PLC_MONITOR_EMAIL}', { 'enabled' : True, 'password' : '${PLC_MONITOR_DBPASSWORD}' })
 168 EOF
 169
 170         if [ ! -f ${MONITOR_CONFIG} ] ; then
 171                 cat <<EOF > ${MONITOR_CONFIG}
 172 [monitorconfig]
 173 RT_DB_HOST=rt.planet-lab.org
 174 RT_DB_USER=
 175 RT_DB_PASSWORD=
 176 RT_DB_NAME=
 177
 178 # RT Web user account
 179 RT_WEB_SERVER=https://rt.planet-lab.org/
 180 RT_WEB_TOOLS_PATH=
 181 RT_WEB_USER=
 182 RT_WEB_PASSWORD=
 183 RT_WEB_DEBUG=0
 184 RT_QUEUE=
 185
 186 # PLC admin account
 187 API_SERVER=https://${PLC_BOOT_HOST}/PLCAPI/
 188 API_AUTH_USER=${PLC_MONITOR_EMAIL}
 189 API_AUTH_PASSWORD=${PLC_MONITOR_DBPASSWORD}
 190
 191 # SERVER PATHS
 192 MONITOR_SCRIPT_ROOT=${MONITORPATH}
 193 MONITOR_DATA_ROOT=/var/lib/monitor
 194 MONITOR_ARCHIVE_ROOT=/var/lib/monitor/archive-pdb
 195
 196 MONITOR_HOSTNAME=${PLC_MONITOR_HOST}
 197 MONITOR_IP=${PLC_MONITOR_IP}
 198
 199 PLC_WWW_HOSTNAME=${PLC_WWW_HOST}
 200
 201 # used for debug mode
 202 email=
 203
 204 # all messages will appear to be from this address
 205 from_email=${PLC_MONITOR_EMAIL}
 206
 207 # a separate address for support messages
 208 support_email=${PLC_MAIL_SUPPORT_ADDRESS}
 209
 210 # mailing list copied on all out-going messages
 211 cc_email=
 212
 213 [monitordatabase]
 214 monitor_dburi=postgres://${MONITOR_DB_USER}:${PLC_MONITOR_DBPASSWORD}@localhost:5432/${MONITOR_DB_NAME}
 215 zabbix_dburi=postgres://${ZABBIX_DB_USER}:${PLC_MONITOR_DBPASSWORD}@localhost:5432/${ZABBIX_DB_NAME}
 216
 217 cachetime=60
 218
 219 # Evaluated as true or false
 220 [commandline]
 221 cachecalls=True
 222 embedded=False
 223
 224 echo=False
 225 debug=False
 226 mail=True
 227 bcc=False
 228 run=False
 229 checkopt=False
 230 squeeze=True
 231 policysavedb=True
 232 EOF
 233
 234         fi
 235 }
 236
 237 function create_httpd_conf ()
 238 {
 239         MONITOR_HTTP_CONF=/etc/httpd/conf.d/monitorweb.conf
 240
 241         if [ ! -f ${MONITOR_HTTP_CONF} ] ; then
 242                 # note: we need to either start this script before httpd, or always
 243                 # restart httpd, since there's no way to know beyond file's existence
 244                 # whether the values have changed or not.
 245                 WROTE_HTTP_CONFIG="true"
 246         fi
 247
 248         # TODO: support HTTPS as well as port 80.  currently not specifying port
 249         #               80 breaks https for other content on the myplc.
 250         # TODO: make proxy port configurable.
 251
 252         cat <<EOF > ${MONITOR_HTTP_CONF}
 253
 254 # NOTE: I've tried other means of redirection, including mod_rewrite, but did
 255 #       not have any success.  The means below is not idea, b/c it does not keep
 256 #       non-ssl session as non-ssl.  But it works.
 257
 258 # NOTE: redirect path without trailing '/' to path with.  Favor SSL.
 259 Redirect /monitor https://${MONITOR_HOSTNAME}:${PLC_WWW_SSL_PORT}/monitor/
 260
 261 # NOTE: this directive strips '/monitor/' from the requested path and pastes
 262 #       the remaining part to the end of the ProxyPass url below.  All TG urls
 263 #       should be relative to their current position, or the absolute path
 264 #       that includes /monitor/ at the beginning.
 265 # TODO: make location configurable.
 266 <Location '/monitor/'>
 267     #LogLevel debug
 268     #Errorlog /var/log/httpd/monitorwebapp-error_log
 269     #Customlog /var/log/httpd/monitorwebapp-access_log common
 270
 271     ProxyPass http://127.0.0.1:8080/
 272     ProxyPassReverse http://127.0.0.1:8080/
 273 </Location>
 274
 275 EOF
 276 }
 277
 278 function start_tg_server ()
 279 {
 280         stop_tg_server
 281         pushd ${MONITORPATH}/web/MonitorWeb/
 282         ./start-monitorweb.py ${MONITORPATH}/web/MonitorWeb/prod.cfg &> /var/log/monitorweb.log &
 283         popd
 284 }
 285
 286 function stop_tg_server ()
 287 {
 288         pid=$( cat /var/run/monitorweb.pid )
 289         if [ -n "$pid" ] ; then
 290                 kill $pid
 291         fi
 292 }
 293
 294 function check_zab_server ()
 295 {
 296         ZABBIXCFG=/etc/zabbix
 297         TMP_FILE=`mktemp /tmp/zbxtmpXXXXXX`
 298
 299         if [ -f ${ZABBIXCFG}/zabbix_server.conf ] ; then
 300                 sed -e "s/#DBHost=.*/DBHost=$PLC_MONITOR_HOST/g" \
 301                     -e "s#DBName=.*#DBName=$ZABBIX_DB_NAME#g" \
 302                     -e "s#DBUser=.*#DBUser=$ZABBIX_DB_USER#g" \
 303                     -e "s#DBPassword=.*#DBPassword=$PLC_MONITOR_DBPASSWORD#g" \
 304                     -e "s#.*ExternalScripts=.*#ExternalScripts=${MONITORPATH}/zabbix#g" \
 305                     ${ZABBIXCFG}/zabbix_server.conf > $TMP_FILE
 306                 cat $TMP_FILE > ${ZABBIXCFG}/zabbix_server.conf
 307         fi
 308         service zabbix_server start
 309         rm -f $TMP_FILE
 310
 311 }
 312 function check_zab_agentd ()
 313 {
 314         ZABBIXCFG=/etc/zabbix
 315         TMP_FILE=`mktemp /tmp/zbxtmpXXXXXX`
 316         if [ -f ${ZABBIXCFG}/zabbix_agentd.conf ] ; then
 317                 HOST=`hostname`
 318                 sed -e "s#Server=.*#Server=$PLC_MONITOR_HOST#g" \
 319                     -e "s#Hostname=.*#Hostname=$HOST#g" \
 320                     ${ZABBIXCFG}/zabbix_agentd.conf > $TMP_FILE
 321                 cat $TMP_FILE > ${ZABBIXCFG}/zabbix_agentd.conf
 322         fi
 323         service zabbix_agentd start
 324         rm -f $TMP_FILE
 325 }
 326 function check_zab_webconfig()
 327 {
 328         # SETUP zabbix gui configuration
 329         ZABBIX_WEB_CFG=/var/www/html/zabbix/conf/zabbix.conf.php
 330         if [ ! -f $ZABBIX_WEB_CFG ] ; then
 331                 touch  $ZABBIX_WEB_CFG
 332                 cat <<EOF > $ZABBIX_WEB_CFG
 333 <?php
 334 global \$DB;
 335
 336 \$DB["TYPE"]            = "POSTGRESQL";
 337 \$DB["SERVER"]          = "localhost";
 338 \$DB["PORT"]            = "0";
 339 \$DB["DATABASE"]                = "$ZABBIX_DB_NAME";
 340 \$DB["USER"]            = "$ZABBIX_DB_USER";
 341 \$DB["PASSWORD"]                = "$PLC_MONITOR_DBPASSWORD";
 342 \$ZBX_SERVER            = "$PLC_MONITOR_HOST";
 343 \$ZBX_SERVER_PORT       = "10051";
 344 \$IMAGE_FORMAT_DEFAULT  = IMAGE_FORMAT_PNG;
 345 ?>
 346 EOF
 347                 chmod 644 $ZABBIX_WEB_CFG
 348         fi
 349 }
 350
 351 if [ "$PLC_MONITOR_ENABLED" != "1" ] ; then
 352     exit 0
 353 fi
 354
 355 case "$1" in
 356         start)
 357                 MESSAGE=$"Bootstrap Monitoring (please wait...)"
 358                 dialog "$MESSAGE"
 359
 360                 # DATABASE acces, creation, and data loading
 361                 check_pg_hba $MONITOR_DB_NAME $MONITOR_DB_USER
 362                 check_user_and_db $MONITOR_DB_NAME $MONITOR_DB_USER
 363                 # WRITE default /etc/monitor.conf
 364                 check_monitor_conf
 365                 check_monitor_schema_and_data
 366
 367                 check_pg_hba $ZABBIX_DB_NAME $ZABBIX_DB_USER
 368                 check_user_and_db $ZABBIX_DB_NAME $ZABBIX_DB_USER
 369
 370                 if [ -n "$WROTE_PG_CONFIG" ] ; then
 371                         # NOTE: restart db to enable access by users granted above.
 372                         service plc restart postgresql
 373                         service plc restart httpd
 374                         MESSAGE=$"Bootstrap Monitoring 2 (please wait...)"
 375                         dialog "$MESSAGE"
 376                 fi
 377
 378                 check_zabbix_schema_and_data
 379                 check_zabbix_templates_and_import
 380
 381
 382                 # create /etc/httpd/conf.d/monitorweb.conf
 383                 create_httpd_conf
 384                 if [ -n "$WROTE_HTTP_CONFIG" ] ; then
 385                         # NOTE: restart web server to enable access web cfg
 386                         service plc restart httpd
 387                         MESSAGE=$"Bootstrap Monitoring 3 (please wait...)"
 388                         dialog "$MESSAGE"
 389                 fi
 390                 start_tg_server
 391
 392                 # START zabbix services.  SETUP default config files.
 393                 check_zab_server
 394                 check_zab_agentd
 395                 check_zab_webconfig
 396
 397                 result "$MESSAGE"
 398         ;;
 399
 400         restartweb)
 401                 MESSAGE=$"Restarting monitor web app..."
 402                 dialog "$MESSAGE"
 403
 404                 stop_tg_server
 405                 start_tg_server
 406
 407                 result "$MESSAGE"
 408         ;;
 409
 410         sync)
 411                 MESSAGE=$"Syncing PLC db with Zabbix DB"
 412                 dialog "$MESSAGE"
 413
 414                 # turn off zabbix server, etc. before writing to the db.
 415                 service plc stop monitor
 416
 417                 $MONITORPATH/zabbix/zabbixsync.py --setupids &> /var/log/monitor-server
 418                 $MONITORPATH/zabbix/zabbixsync.py --setupglobal 2>&1 >> /var/log/monitor-server
 419                 # import any templates
 420                 check_zabbix_templates_and_import
 421
 422                 service plc start monitor
 423
 424                 result "$MESSAGE"
 425         ;;
 426
 427         delete)
 428                 MESSAGE=$"Deleting databases..."
 429                 dialog "$MESSAGE"
 430
 431                 dropdb -U postgres $ZABBIX_DB_NAME
 432                 dropuser -U postgres $ZABBIX_DB_USER
 433
 434                 dropdb -U postgres $MONITOR_DB_NAME
 435                 dropuser -U postgres $MONITOR_DB_USER
 436
 437                 result "$MESSAGE"
 438         ;;
 439
 440         stop)
 441                 MESSAGE=$"Stopping Monitor"
 442                 dialog "$MESSAGE"
 443
 444                 stop_tg_server
 445                 service zabbix_server stop
 446                 service zabbix_agentd stop
 447                 # TODO: is there anything to stop?
 448                 result "$MESSAGE"
 449         ;;
 450 esac
 451
 452 exit $ERRORS