原生态部署librenms

为什么写这个1、别的帖子都要钱我真看不惯。2、要了钱程序还搭不起来恶心。3、法布施是智慧聪明才艺地修因。正题开始一、部署目标本次 LibreNMS 部署以官方推荐架构为基础目标是搭建一套结构清晰、运行稳定、便于后续维护的监控系统。1.1 架构目标系统运行在 Ubuntu Server 24.04 上整体采用传统、成熟的部署方式Web 服务使用 NginxPHP 通过 PHP-FPM 独立进程池运行避免与其他站点相互影响Database后端数据库使用 MariaDBLibreNMS 通过源码方式部署不使用 Docker 或容器化方案。所有配置均来源于官方文档推荐做法不引入额外优化或魔改。1.2 访问与安全目标在满足功能需求的同时部署过程兼顾基本的安全性要求Web 访问统一通过 HTTPS证书使用自签名方式禁用 Nginx 默认站点仅暴露 LibreNMS 服务LibreNMS 程序及相关任务 不以 root 用户运行1.3 功能目标部署完成后LibreNMS 应达到以下运行状态Web 界面可正常访问并顺利完成初始化安装Scheduler 与 Cron 服务正常运行定时任务无报错SNMP 服务可用能够成功监控本机设备设备数据采集正常图表能够持续生成且无异常1.4 实施目标我所在单位目前有两栋楼每栋楼有三个网络因为安全考虑全部是物理分离的我用的是vitualbox导出导入虚拟机使得迁移很方便。二、系统时间与时区配置确保系统时间、时区和 NTP 同步正常避免后续数据采集、RRD 绘图出现时间错乱。sudo timedatectl set-timezone Asia/Shanghai sudo timedatectl set-ntp true sudo timedatectl status代码实例vboxusernms:~$ timedatectl set-timezone Asia/Shanghai AUTHENTICATING FOR org.freedesktop.timedate1.set-timezone Authentication is required to set the system timezone. Authenticating as: vboxuser Password: AUTHENTICATION COMPLETE vboxusernms:~$ timedatectl set-ntp true AUTHENTICATING FOR org.freedesktop.timedate1.set-ntp Authentication is required to control whether network time synchronization shall be enabled. Authenticating as: vboxuser Password: AUTHENTICATION COMPLETE vboxusernms:~$ timedatectl status Local time: Wed 2026-05-13 16:22:03 CST Universal time: Wed 2026-05-13 08:22:03 UTC RTC time: Wed 2026-05-13 08:22:03 Time zone: Asia/Shanghai (CST, 0800) System clock synchronized: yes NTP service: active RTC in local TZ: no三、安装基础依赖安装 LibreNMS 运行所需的所有系统组件包括 Web、数据库、PHP、SNMP、RRDTool 等。sudo apt install -y acl curl fping git graphviz imagemagick \ mariadb-client mariadb-server mtr-tiny nginx-full nmap \ php-cli php-curl php-fpm php-gd php-gmp php-json php-mbstring \ php-mysql php-snmp php-xml php-zip \ python3-command-runner python3-dotenv python3-pip \ python3-psutil python3-pymysql python3-redis \ python3-setuptools python3-systemd \ rrdtool snmp snmpd traceroute unzip whois vim四、创建 librenms 系统用户***必须***# 创建librenms用户 sudo useradd librenms -d /opt/librenms -M -r -s $(which bash) # 查看librenms用户是否创建成功 sudo cat /etc/passwd备注LibreNMS 官方要求使用独立用户运行程序避免使用 root提升安全性。五、下载 LibreNMS 程序# 查看当前位置 pwd # 跳转目录到/opt cd /opt # 通过官方 GitHub 仓库获取最新稳定代码。 sudo git clone https://github.com/librenms/librenms.git # 如果网速较慢推荐使用它只下载最新的快照不包含历史版本。 git clone --depth 1 https://github.com/librenms/librenms.git # 设置目录权限官方原样 sudo chown -R librenms:librenms /opt/librenms sudo chmod 771 /opt/librenms sudo setfacl -d -m g::rwx \ /opt/librenms/rrd \ /opt/librenms/logs \ /opt/librenms/bootstrap/cache/ \ /opt/librenms/storage/ sudo setfacl -R -m g::rwx \ /opt/librenms/rrd \ /opt/librenms/logs \ /opt/librenms/bootstrap/cache/ \ /opt/librenms/storage/六、安装 PHP 依赖# 修改librenms用户密码 sudo passwd librenms # 切换用户 su - librenms # 查看当前目录【***很关键***】 pwd # 当前目录为/opt/librenms # 安装 LibreNMS 所需的 PHP 库仅安装生产环境所需组件。 ./scripts/composer_wrapper.php install --no-dev看到如下提示为成功INFO Blade templates cached successfully. php artisan optimize INFO Caching framework bootstrap, configuration, and metadata. config ....................................................... 562.56ms DONE events ............................................................ 1.72ms DONE routes ....................................................... 102.78ms DONE views ........................................................ .600.07ms DONE php artisan config:clear INFO Configuration cache cleared successfully.七、配置 PHP确保 PHP CLI 与 PHP-FPM 使用正确时区否则会影响图表与数据采集。编辑以下两个文件每个都要改sudo vi /etc/php/8.3/fpm/php.ini sudo vi /etc/php/8.3/cli/php.ini设置date.timezone Asia/Shanghai提示在命令行模式下使用/date.timezone进行所搜找到了按回车光标定位。八、配置 MariaDB按照 LibreNMS 官方建议优化 MariaDB 行为避免大小写及 InnoDB 问题。编辑配置文件sudo vi /etc/mysql/mariadb.conf.d/50-server.cnf在 [mysqld] 下添加innodb_file_per_table1 lower_case_table_names0初始化数据库sudo systemctl enable mariadb sudo systemctl restart mariadb登录数据库sudo mysql -u root创建数据库CREATE DATABASE librenms CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;创建用户CREATE USER librenmslocalhost IDENTIFIED BY password;将数据库授权给用户GRANT ALL PRIVILEGES ON librenms.* TO librenmslocalhost;强制刷新权限FLUSH PRIVILEGES;退出EXIT;配置代码复现如下vboxusernms:~$ mysql -u root ERROR 1698 (28000): Access denied for user rootlocalhost vboxusernms:~$ vboxusernms:~$ vboxusernms:~$ vboxusernms:~$ sudo mysql -u root Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 32 Server version: 10.11.14-MariaDB-0ubuntu0.24.04.1 Ubuntu 24.04 Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others. Type help; or \h for help. Type \c to clear the current input statement. MariaDB [(none)] CREATE DATABASE librenms CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci; CREATE USER librenmslocalhost IDENTIFIED BY password; Query OK, 1 row affected (0.018 sec) MariaDB [(none)] CREATE USER librenmslocalhost IDENTIFIED BY password; Query OK, 0 rows affected (0.011 sec) MariaDB [(none)] GRANT ALL PRIVILEGES ON librenms.* TO librenmslocalhost; Query OK, 0 rows affected (0.004 sec) MariaDB [(none)] FLUSH PRIVILEGES; Query OK, 0 rows affected (0.000 sec) MariaDB [(none)] EXIT; Bye九、配置 PHP-FPM# 复制配置文件模版 sudo cp /etc/php/8.3/fpm/pool.d/www.conf /etc/php/8.3/fpm/pool.d/librenms.conf # 编辑配置文件 sudo vi /etc/php/8.3/fpm/pool.d/librenms.conf修改为[librenms] user librenms group librenms listen /run/php-fpm-librenms.sock# 重启服务sudo systemctl restart php8.3-fpm备注本步骤的主要目的是为 LibreNMS 创建独立的 PHP-FPM 池避免与其他站点冲突。十、配置 HTTPS在内网环境下使用 自签名证书 实现 HTTPS 访问。# 创建文件夹certsudo mkdir -p /etc/nginx/certs/# 进入文件夹certcd /etc/nginx/certs/# 一键生成自签名的 SSL 证书和私钥sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \-keyout librenms.key \-out librenms.crt \-subj /CCN/STShanghai/LShanghai/OLibreNMS/OUIT/CNlibrenms.local代码复现如下vboxusernms:/etc/nginx/certs$ sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \ -keyout librenms.key \ -out librenms.crt \ -subj /CCN/STShanghai/LShanghai/OLibreNMS/OUIT/CNlibrenms.local .....................................................................*.............................*................................................................................................................................................................................................................................................................................................................... .......*....................................................................................................*........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... ----- vboxusernms:/etc/nginx/certs$ ll total 16 drwxr-xr-x 2 root root 4096 May 13 20:10 ./ drwxr-xr-x 9 root root 4096 May 13 19:48 ../ -rw-r--r-- 1 root root 1350 May 13 20:10 librenms.crt -rw------- 1 root root 1704 May 13 20:10 librenms.key vboxusernms:/etc/nginx/certs$十一、配置 Nginx通过 Nginx 提供 HTTPS Web 访问并将 PHP 请求转交给 PHP-FPM。sudo vi /etc/nginx/conf.d/librenms.conf推荐完整配置HTTPS 1886 端口如果粘贴带格式推荐使用secureCRT nanosudo nano /etc/nginx/conf.d/librenms.confserver {listen 1886 ssl;server_name 192.168.1.152;ssl_certificate /etc/nginx/certs/librenms.crt;ssl_certificate_key /etc/nginx/certs/librenms.key;root /opt/librenms/html;index index.php;location / {try_files $uri $uri/ /index.php?$query_string;}location ~ \.php$ {include fastcgi.conf;fastcgi_pass unix:/run/php-fpm-librenms.sock;}location ~ /\.(?!well-known).* {deny all;}}禁用默认站点并重启服务sudo rm /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default备注这里一定是rm命令而不是mv命令这里我惯性思维用了mv报错了。sudo systemctl restart nginx sudo systemctl restart php8.3-fpm十二、启用 lnms 命令补全提升命令行操作体验支持 Tab 自动补全。sudo ln -s /opt/librenms/lnms /usr/bin/lnms sudo cp /opt/librenms/misc/lnms-completion.bash /etc/bash_completion.d/十三、配置 SNMP监控本机可选通过 SNMP 将本机作为第一台被监控设备。sudo cp /opt/librenms/snmpd.conf.example /etc/snmp/snmpd.conf sudo vi /etc/snmp/snmpd.conf将RANDOMSTRINGGOESHERE 修改为public123# 这是本服务器的snmp密钥后续在NMS添加的时候添加这个key启动服务sudo systemctl enable snmpd systemctl restart snmpd备注这步我没有做直接跳过了因为我现场有大量的h3c交换机直接就管理起来了。十四、配置 Cron 与 Scheduler目的确保设备发现、数据采集、告警等任务按计划自动执行。# 复制cron到librenms目录下 sudo cp /opt/librenms/dist/librenms.cron /etc/cron.d/librenms # 复制service和timer到system目录下 sudo cp /opt/librenms/dist/librenms-scheduler.service /opt/librenms/dist/librenms-scheduler.timer /etc/systemd/system/ # 激活timer sudo systemctl enable librenms-scheduler.timer # 打开timer sudo systemctl start librenms-scheduler.timer # 确认timer状态 sudo systemctl list-timers | grep librenms # 配置日志轮转 sudo cp /opt/librenms/misc/librenms.logrotate /etc/logrotate.d/librenms十五、Web 安装向导打开浏览器访问https://192.168.1.152:1886/installconfigure databseHost:localhostPort:3306Unix-Socket:User:librenmsPassword:passwordDatabase Name:librenmacreate admin userlibrenmslibrenms按照页面提示完成数据库、账号等配置即可。十六、解决检查报错首次登录 LibreNMS 进入 Web 界面右上角的 配置检查通常会看到几条系统检查告警。这些告警大多属于初始化阶段的正常现象。未添加设备告警是没有添加设备的原因添加设备就好了。base_url 相关告警配置路径Glocal Settings - system - server base_url编辑配置文件.envsudo nano /opt/librenms/.envsu - librenms lnms config:cache备注我一般喜欢reboot一下服务器校验是不是正常。再检查一下报错都没了。完成检查安装配置是否正确方法一前台网页https://192.168.1.152:1886/validate方法二后台代码cd /opt/librenms./validate.php代码复现如下librenmsnms:~$ ./validate.php Component | Version --------- | ------- LibreNMS | 26.4.1 (2026-05-13T10:53:4708:00) DB Schema | 2026_04_25_154814_move_operation_mute_to_operations_table (384) PHP | 8.3.6 Python | 3.12.3 Database | MariaDB 10.11.14-MariaDB-0ubuntu0.24.04.1 RRDTool | 1.7.2 SNMP | 5.9.4.pre2 [OK] Composer Version: 2.9.8 [OK] Dependencies up-to-date. [WARN] You have no devices. [FIX]: Consider adding a device such as localhost: /addhost [OK] Database Connected [OK] Database Schema is current [OK] SQL Server meets minimum requirements [OK] lower_case_table_names is enabled [OK] MySQL engine is optimal [OK] Database and column collations are correct [OK] Database schema correct [OK] MySQL and PHP time match [OK] Locks are functional [OK] Python poller wrapper is polling [OK] Redis is unavailable [OK] rrd_dir is writable [OK] rrdtool version ok重要提示***************如果服务器断电或重启启动Librenms**************# start MariaDB sudo systemctl enable --now mariadb sudo systemctl start mariadb # start Nginx sudo systemctl enable --now nginx sudo systemctl start nginx # start LibreNMS sudo systemctl enable --now librenms-scheduler.timer sudo systemctl start librenms-scheduler.timer # start SNMP sudo systemctl enable --now snmpd sudo systemctl start snmpd备注systemctl命令的格式如下以snmpd为例sudo systemctl enable snmpd 激活sudo systemctl start snmpd 启动sudo systemctl restart snmpd 重启sudo systemctl status snmpd 查看***************如果服务器断电或重启启动Librenms**************启动完成后浏览器访问https://192.168.1.152:1886libreLibrenms重要提示如果管理员账号无法登录新增管理员账号即可命令如下php lnms user:add libre --roleadmin --passwordLfac2206原来的管理员信息删不删除随你但是新增的时候不要和原来管理员重名否则失败。注意1、一定是HTTPS 安全的超文本传输协议数据经过加密通常使用 443 端口。2、端口不是默认的8000而是修改后的1886。尊重原文地址https://www.kd010.com/hyzs/2434.html