02firstboot = $(CHROOT)/usr/local/bin/02firstboot.start cert-renew.sh = $(CHROOT)/etc/ssl/cert-renew.sh zabbix-userparameter = $(CHROOT)/var/lib/zabbix/userparameter_mysql.conf portage-env-zabbix = $(CHROOT)/etc/portage/env/net-analyzer/zabbix systemd-units: appliance/MySQL-Backup.sh appliance/backup.service appliance/backup.timer appliance/cert-renew.service appliance/cert-renew.timer mkdir -p $(CHROOT)/usr/local/bin cp appliance/MySQL-Backup.sh $(CHROOT)/usr/local/bin/ cp appliance/backup.service appliance/backup.timer appliance/cert-renew.service appliance/cert-renew.timer $(CHROOT)/etc/systemd/system/ $(02firstboot): appliance/02firstboot.start mkdir -p $(CHROOT)/usr/local/bin cp $< $@ touch $(CHROOT)/02firstboot $(cert-renew.sh): appliance/cert-renew.sh mkdir -p $(CHROOT)/etc/ssl cp $< $@ $(CHROOT)/var/lib/mysql: mariadb/my.cnf.root # MariaDB-Konfiguration ($$, weil make ein $ entfernt) sed -i "s/^character-set-server.*$$/character-set-server = utf8mb4/" $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf sed -iE 's/^\(log-bin\)/#\1/' $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf echo >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf echo "# innodb tuning" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf echo "innodb_buffer_pool_size = 2G" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf echo "innodb_strict_mode = OFF" >> $(CHROOT)/etc/mysql/mariadb.d/50-distro-server.cnf cp mariadb/my.cnf.root $(CHROOT)/root/.my.cnf chmod 0600 $(CHROOT)/root/.my.cnf rm -rf $(CHROOT)/var/lib/mysql/* RUN bash -c 'yes gentoo | emerge --config dev-db/mariadb' apache-php: sed -i 's:APACHE2_OPTS=\":APACHE2_OPTS=\"-D PHP :' $(CHROOT)/etc/conf.d/apache2 find $(CHROOT)/etc/php/apache2-*/ -iname php.ini -print | xargs \sed -i \ -e 's:.*date.timezone =.*:date.timezone = Europe/Berlin:' \ -e 's:.*pcre.jit=.*:pcre.jit=0:' \ -e 's:.*max_execution_time =.*:max_execution_time = 300:' \ -e 's:.*max_input_time =.*:max_input_time = 300:' \ -e 's:.*post_max_size =.*:post_max_size = 16M:' \ -e 's:.*always_populate_raw_post_data =.*:always_populate_raw_post_data = -1:' zabbix-services: echo "zabbix-agent 10050/tcp Zabbix Agent" >> $(CHROOT)/etc/services echo "zabbix-agent 10050/udp Zabbix Agent" >> $(CHROOT)/etc/services echo "zabbix-trapper 10051/tcp Zabbix Trapper" >> $(CHROOT)/etc/services echo "zabbix-trapper 10051/udp Zabbix Trapper" >> $(CHROOT)/etc/services zabbix-webapp: RUN webapp-config -h localhost -d zabbix -I zabbix `ls $(CHROOT)/usr/share/webapps/zabbix` cp $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php.example $(CHROOT)/var/www/localhost/htdocs/zabbix/conf/zabbix.conf.php # enable any language sed -i "s:'display' => false]:'display' => true]:" $(CHROOT)/var/www/localhost/htdocs/zabbix/include/locales.inc.php # im Zabbix-Ebuild wird fowners und fperms vor webapp_src_install aufgerufen und deswegen wieder überschrieben RUN chown -R zabbix:zabbix \ /etc/zabbix \ /var/lib/zabbix \ /var/lib/zabbix/home \ /var/lib/zabbix/scripts \ /var/lib/zabbix/alertscripts \ /var/lib/zabbix/externalscripts \ /var/log/zabbix chmod 0750 \ $(CHROOT)/etc/zabbix \ $(CHROOT)/var/lib/zabbix \ $(CHROOT)/var/lib/zabbix/home \ $(CHROOT)/var/lib/zabbix/scripts \ $(CHROOT)/var/lib/zabbix/alertscripts \ $(CHROOT)/var/lib/zabbix/externalscripts \ $(CHROOT)/var/log/zabbix $(zabbix-userparameter): zabbix/userparameter_mysql.conf mkdir -p $(CHROOT)/var/lib/zabbix cp $< $@ $(portage-env-zabbix): zabbix/portage-env-zabbix mkdir -p $(CHROOT)/etc/portage/env/net-analyzer cp $< $@ zabbix-syslog: # Zabbix Syslog (https://github.com/v-zhuravlev/zabbix-syslog) mkdir -p $(CHROOT)/etc/zabbix/scripts/lib cp zabbix/zabbix-syslog/zabbix_syslog_create_urls.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl cp zabbix/zabbix-syslog/zabbix_syslog_lkp_host.pl $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl cp zabbix/zabbix-syslog/Template_syslog.xml $(CHROOT)/etc/zabbix/scripts/Template_syslog.xml cp zabbix/zabbix-syslog/zabbix_syslog.cfg $(CHROOT)/etc/zabbix/zabbix_syslog.cfg cp zabbix/zabbix-syslog/lib/ZabbixAPI.pm $(CHROOT)/etc/zabbix/scripts/lib/ZabbixAPI.pm cp zabbix/zabbix-syslog/70-zabbix_rsyslog.conf $(CHROOT)/etc/rsyslog.d/70-zabbix_rsyslog.conf RUN chown -R zabbix:zabbix /etc/zabbix/scripts chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_create_urls.pl chmod +x $(CHROOT)/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl zabbix-config: sed -i \ -e 's:# PidFile=/tmp/zabbix_agent2.pid:PidFile=/run/zabbix/zabbix_agent2.pid:' \ -e 's:# LogFile=/tmp/zabbix_agent2.log:LogFile=/var/log/zabbix/zabbix_agent2.log:' \ $(CHROOT)/etc/zabbix/zabbix_agent2.conf sed -i \ -e 's:LogFile=/tmp/zabbix_proxy.log:LogFile=/var/log/zabbix/zabbix_proxy.log:' \ -e 's:# PidFile=/tmp/zabbix_proxy.pid:PidFile=/run/zabbix/zabbix_proxy.pid:' \ $(CHROOT)/etc/zabbix/zabbix_proxy.conf sed -i \ -e 's:LogFile=/tmp/zabbix_server.log:LogFile=/var/log/zabbix/zabbix_server.log:' \ -e 's:# PidFile=/tmp/zabbix_server.pid:PidFile=/run/zabbix/zabbix_server.pid:' \ -e 's:# StartPollers=5:StartPollers=15:' \ -e 's:# StartIPMIPollers=0:StartIPMIPollers=5:' \ -e 's:# StartPollersUnreachable=1:StartPollersUnreachable=15:' \ -e 's:# StartPingers=1:StartPingers=25:' \ -e 's:# StartDiscoverers=1:StartDiscoverers=5:' \ -e 's:# JavaGateway=:JavaGateway=127.0.0.1:' \ -e 's:# VMwareCacheSize=8M:VMwareCacheSize=16M:' \ -e 's:# VMwareTimeout=10:VMwareTimeout=30:' \ -e 's:# SNMPTrapperFile=/tmp/zabbix_traps.tmp:SNMPTrapperFile=/var/log/snmptt/snmptt.log:' \ -e 's:# CacheSize=8M:CacheSize=32M:' \ -e 's:# HistoryIndexCacheSize=4M:HistoryIndexCacheSize=8M:' \ -e 's:Timeout=4:Timeout=10:' \ -e 's:^# AlertScriptsPath=.*:AlertScriptsPath=/var/lib/zabbix/alertscripts:' \ -e 's:^# ExternalScripts=.*:ExternalScripts=/var/lib/zabbix/externalscripts:' \ -e 's:# ProxyConfigFrequency=3600:ProxyConfigFrequency=360:' \ -e 's:# ProxyDataFrequency=1:ProxyDataFrequency=60:' \ $(CHROOT)/etc/zabbix/zabbix_server.conf fping-perm: chmod u=rwsx,g=rx,o=rx $(CHROOT)/usr/sbin/fping chmod u=rwsx,g=rx,o=rx $(CHROOT)/usr/sbin/fping6 snmp-conf: cp -f snmp/snmpd.conf $(CHROOT)/etc/snmp/snmpd.conf cp -f snmp/snmptrapd.conf $(CHROOT)/etc/snmp/snmptrapd.conf cp -f snmp/snmptt.conf $(CHROOT)/etc/snmp/snmptt.conf sed -i \ -e 's:^mode = .*:mode = standalone:' \ -e 's:^net_snmp_perl_enable = .*:net_snmp_perl_enable = 1:' \ -e 's:^translate_log_trap_oid = .*:translate_log_trap_oid = 2:' \ -e 's:^translate_integers = .*:translate_integers = 0:' \ -e 's:^#mibs_environment = .*:mibs_environment = ALL:' \ -e 's.^#date_time_format =.date_time_format = %H:%M:%S %Y/%m/%d.' \ -e 's:^daemon_uid = .*:daemon_uid = zabbix:' \ -e 's:^log_system_enable = .*:log_system_enable = 1:' \ -e 's:^unknown_trap_log_enable = .*:unknown_trap_log_enable = 1:' \ -e 's:^syslog_level = .*:syslog_level = err:' \ -e 's:^syslog_system_level = .*:syslog_system_level = err:' \ $(CHROOT)/etc/snmp/snmptt.ini mkdir -p $(CHROOT)/var/log/snmptt chmod 0775 $(CHROOT)/var/log/snmptt RUN chown zabbix:zabbix /var/log/snmptt preinstall: $(portage-env-zabbix) postinstall: systemd-units $(02firstboot) $(cert-renew.sh) $(CHROOT)/var/lib/mysql apache-php zabbix-services zabbix-webapp $(zabbix-userparameter) zabbix-syslog zabbix-config fping-perm snmp-conf