icinga2

This repository contains the source for the icinga2 docker image.

The dockerhub-repository is located at https://hub.docker.com/r/jordan/icinga2/.

This build is automated by push for the git-repo. Just crawl it via:

docker pull jordan/icinga2

Image details

1. Based on debian:stretch
2. Key-Features:
   • icinga2
   • icingacli
   • icingaweb2
   • icingaweb2-director module
   • icingaweb2-graphite module
   • icingaweb2-module-aws
   • ssmtp
   • MySQL
   • Supervisor
   • Apache2
   • SSL Support
3. No SSH. Use docker exec or nsenter
4. If passwords are not supplied, they will be randomly generated and shown via stdout.

Usage

Start a new container and bind to host's port 80

docker run -p 80:80 -t jordan/icinga2:latest

Icinga Web 2

Icinga Web 2 can be accessed at http://localhost/icingaweb2 with the credentials icingaadmin:icinga (if not set differently via variables).

Saving PHP Sessions

If you want to save your php-sessions over multiple boots, mount /var/lib/php/sessions/ into your container. Session files will get saved there.

example:

docker run [...] -v $PWD/icingaweb2-sessions:/var/lib/php/sessions/ jordan/icinga2

Graphite

The graphite writer can be enabled by setting the ICINGA2_FEATURE_GRAPHITE variable to true or 1 and also supplying values for ICINGA2_FEATURE_GRAPHITE_HOST and ICINGA2_FEATURE_GRAPHITE_PORT. This container does not have graphite and the carbon daemons installed so ICINGA2_FEATURE_GRAPHITE_HOST should not be set to localhost.

Example:

docker run -t \
  --link graphite:graphite \
  -e ICINGA2_FEATURE_GRAPHITE=true \
  -e ICINGA2_FEATURE_GRAPHITE_HOST=graphite \
  -e ICINGA2_FEATURE_GRAPHITE_PORT=2003 \
  jordan/icinga2:latest

Icinga Director

The Icinga Director Icinga Web 2 module is installed and enabled by default. You can disable the automatic kickstart when the container starts by setting the DIRECTOR_KICKSTART variable to false. To customize the kickstart settings, modify the /etc/icingaweb2/modules/director/kickstart.ini.

Sending Notification Mails

The container has ssmtp installed, which forwards mails to a preconfigured static server.

You have to create the files ssmtp.conf for general configuration and revaliases (mapping from local Unix-user to mail-address).

# ssmtp.conf
root=<E-Mail address to use on>
mailhub=smtp.<YOUR_MAILBOX>:587
UseSTARTTLS=YES
AuthUser=<Username for authentication (mostly the complete e-Mail-address)>
AuthPass=<YOUR_PASSWORD>
FromLineOverride=NO

But be careful, ssmtp is not able to process special chars within the password correctly!

revaliases follows the format: Unix-user:e-Mail-address:server. Therefore the e-Mail-address has to match the root's value in ssmtp.conf Also server has to match mailhub from ssmtp.conf but without the port.

# revaliases
root:<VALUE_FROM_ROOT>:smtp.<YOUR_MAILBOX>
nagios:<VALUE_FROM_ROOT>:smtp.<YOUR_MAILBOX>
www-data:<VALUE_FROM_ROOT>:smtp.<YOUR_MAILBOX>

These files have to get mounted into the container. Add these flags to your docker run-command:

-v $(pwd)/revaliases:/etc/ssmtp/revaliases:ro
-v $(pwd)/ssmtp.conf:/etc/ssmtp/ssmtp.conf:ro

If you want to change the display-name of sender-address, you have to define the variable ICINGA2_USER_FULLNAME.

If this does not work, please ask your provider for the correct mail-settings or consider the ssmtp.conf(5)-manpage or Section "Reverse Aliases" on ssmtp(8). Also you can debug your config, by executing inside your container ssmtp -v $address and pressing 2x Enter. It will send an e-Mail to $address and give verbose log and all error-messages.

SSL Support

For enabling of SSL support, just add a volume to /etc/apache2/ssl, which contains these files:

• icinga2.crt: The certificate file for apache
• icinga2.key: The corresponding private key
• icinga2.chain (optional): If a certificate chain is needed, add this file. Consult your CA-vendor for additional info.

For https-redirection or http/https dualstack consult APACHE2_HTTP env-variable.

Adding own modules

To use your own modules, you're able to install these into enabledModules-folder of your /etc/icingaweb2 volume.

Environment variables Reference

Environmental Variable	Default Value	Description
ICINGA_PASSWORD	randomly generated	MySQL password for icinga
ICINGAWEB2_PASSWORD	randomly generated	MySQL password for icingaweb2
DIRECTOR_PASSWORD	randomly generated	MySQL password for icinga director
IDO_PASSWORD	randomly generated	MySQL password for ido
ICINGA2_FEATURE_GRAPHITE	false	Set to true or 1 to enable graphite writer
ICINGA2_FEATURE_GRAPHITE_HOST	graphite	hostname or IP address where Carbon/Graphite daemon is running
ICINGA2_FEATURE_GRAPHITE_PORT	2003	Carbon port for graphite
ICINGA2_FEATURE_GRAPHITE_URL	http://${ICINGA2_FEATURE_GRAPHITE_HOST}	Web-URL for Graphite
ICINGA2_FEATURE_DIRECTOR	true	Set to false or 0 to disable icingaweb2 director
DIRECTOR_KICKSTART	true	Set to false to disable icingaweb2 director's auto kickstart at container startup. Value is only used, if icingaweb2 director is enabled.
ICINGAWEB2_ADMIN_USER	icingaadmin	Icingaweb2 Login User After changing the username, you should also remove the old User in icingaweb2-> Configuration-> Authentication-> Users
ICINGAWEB2_ADMIN_PASS	icinga	Icingaweb2 Login Password
ICINGA2_USER_FULLNAME	Icinga	Sender's display-name for notification e-Mails
APACHE2_HTTP	REDIRECT	Variable is only active, if both SSL-certificate and SSL-key are in place. BOTH: Allow HTTP and https connections simulateously. REDIRECT: Rewrite HTTP-requests to HTTPS

Volume Reference

All these folders are configured and able to get mounted as volume. The bottom ones are not quite neccessary.

Volume	ro/rw	Description & Usage
/etc/apache2/ssl	ro	Mount optional SSL-Certificates (see SSL Support)
/etc/ssmtp/revaliases	ro	revaliases map (see Sending Notification Mails)
/etc/ssmtp/ssmtp.conf	ro	ssmtp configufation (see Sending Notification Mails)
/etc/icinga2	rw	Icinga2 configuration folder
/etc/icingaweb2	rw	Icingaweb2 configuration folder
/var/lib/mysql	rw	MySQL Database
/var/lib/icinga2	rw	Icinga2 Data
/var/lib/php5/sessions/	rw	Icingaweb2 PHP Session Files
/var/log/apache2	rw	logfolder for apache2 (not neccessary)
/var/log/icinga2	rw	logfolder for icinga2 (not neccessary)
/var/log/icingaweb2	rw	logfolder for icingaweb2 (not neccessary)
/var/log/mysql	rw	logfolder for mysql (not neccessary)
/var/log/supervisor	rw	logfolder for supervisord (not neccessary)
/var/spool/icinga2	rw	spool-folder for icinga2 (not neccessary)
/var/cache/icinga2	rw	cache-folder for icinga2 (not neccessary)