zabbix容器监控基础篇 ansible-playbook cronjob

2019/03/22 | Ansible,基本知识,运维 | Zhiming Zhang | 暂无评论 | 1294 views

我们的日常监控，除了zabbix自带的，就是我们自定义的脚本了，脚本每隔10分钟或者1个小时检查一次，并将检查的结果反馈给zabbix， zabbix再通过短信，邮件，微信，pagerduty将报警信息发送到我们SRE人员手中，其中重要一种实现方式就是使用cronjob 如何部署呢？通过playbook 看几个例子： [crayon-5d……

docker run 中的特殊指令

2019/03/21 | Docker,基本知识,运维 | Zhiming Zhang | 暂无评论 | 806 views

因为我们要在docker中监控主机，但是默认情况下容器中是看不到主机的进程，也看不到主机的网络的….. 而且，容器中的root其实只是一个普通用户….. 例如：

[root@docker ~]# docker run -it centos
Unable to find image 'centos:latest' locally
Trying to pull repository docker.io/library/centos ...
latest: Pulling from docker.io/library/centos
8ba884070f61: Pull complete
Digest: sha256:8d487d68857f5bc9595793279b33d082b03713341ddec91054382641d14db861
[root@0df145a906bf /]# ps
  PID TTY          TIME CMD
    1 ?        00:00:00 bash
   13 ?        00:00:00 ps
[root@0df145a906bf /]#

1

2

3

4

5

6

7

8

9

10

11

[root@docker ~]# docker run -it centos

Unable to find image 'centos:latest' locally

Trying to pull repository docker.io/library/centos ...

latest: Pulling from docker.io/library/centos

8ba884070f61: Pull complete

Digest: sha256:8d487d68857f5bc9595793279b33d082b03713341ddec91054382641d14db861

[root@0df145a906bf /]# ps

PID TTY TIME CMD

1 ? 00:00:00 bash

13 ? 00:00:00 ps

[root@0df145a906bf /]#

如果想改变这些，我们就需要加入以下特殊的启动参数，我们逐一介绍： –priv……

如何自己制作自己的zabbix-agent镜像

2019/03/20 | 监控工具 | Zhiming Zhang | 暂无评论 | 834 views

首先，zabbix自带的检查肯定是不能够满足大家需求的，例如，我们服务器上跑着apache(zabbix官方应该有apache模板),我需要一个独立的脚本来每隔1分钟检查一下apache服务的状态是否正常，这个时候我们就可以定制化我们的镜像了首先，我们先看一下官方的镜像是如何制作出来的 [crayon-5dd21a2e526076816……

使用容器搭建你的zabbix监控系统（下）

2019/03/18 | 监控工具,运维 | Zhiming Zhang | 暂无评论 | 805 views

安装好server端之后，我们就要安装zabbix-agent了，这个，我们也可以找到镜像登录需要被监控的主机： 1：iptables必须打开 2：docker 必须安装 3：端口10050必须打开

docker run --name my-zabbix-agent2 -p 10050:10050 -e ZBX_HOSTNAME="当前主机名称" -e ZBX_SERVER_HOST="server端ip地址" -d zabbix/zabbix-agent:latest

1	docker run --name my-zabbix-agent2 -p 10050:10050 -e ZBX_HOSTNAME="当前主机名称" -e ZBX_SERVER_HOST="server端ip地址" -d zabbix/zabbix-agent:latest

其中： my-zabbix-agent2 为docker启动的容器名称 ……

使用容器搭建你的zabbix监控系统（上）

2019/03/18 | 监控工具,运维 | Zhiming Zhang | 暂无评论 | 814 views

容器现在越来越火，如何使用容器快速部署的优势，高效快速的搭建一套基于zabbix的初始监控系统呢首先，zabbix是分 server端和agent端的，也就是说，你需要有一台服务器装server来负责收集信息，存储信息（默认mysql），展示信息（web页面）。但是这些信息从哪里来呢？从zabbix agent客户发来的&#82……

如何撤销yum 安装的包 yum history undo

2019/03/15 | 基本知识,运维 | Zhiming Zhang | 暂无评论 | 710 views

看例子吧：安装screen

# yum install screen
<snip>
Dependencies Resolved
=================================================================================
 Package          Arch       Version            Repository              Size        
=================================================================================
Installing:
 screen           i686       4.0.3-16.el6       rhel-6-server-rpms      484 k      

<snip>

Installed:
  screen.i686 0:4.0.3-16.el6
Complete!

1

2

3

4

5

6

7

8

9

10

11

12

13

14

# yum install screen

<snip>

Dependencies Resolved

=================================================================================

Package Arch Version Repository Size

=================================================================================

Installing:

screen i686 4.0.3-16.el6 rhel-6-server-rpms 484 k

<snip>

Installed:

screen.i686 0:4.0.3-16.el6

Complete!

查看历史，获取编号：

# yum history
Loaded plugins: product-id, refresh-packagekit, subscription-manager
Updating Red Hat repositories.
ID     | Login user               | Date and time    | Action(s)      | Altered
-------------------------------------------------------------------------------
     8 | root <root>              | 2011-10-03 14:40 | Install        |    1   
     7 | root <root>              | 2011-09-21 04:24 | Install        |    1 ##
     6 | root <root>              | 2011-09-21 04:23 | Install        |    1 ##
     5 | root <root>              | 2011-09-16 13:35 | Install        |    1   
     4 | root <root>              | 2011-09-16 13:33 | Erase          |    1   
     3 | root <root>              | 2011-09-14 14:36 | Install        |    1   
     2 | root <root>              | 2011-09-12 15:48 | I, U           |   80   
     1 | System <unset>           | 2011-09-12 14:57 | Install        | 1025

1

2

3

4

5

6

7

8

9

10

11

12

13

# yum history

Loaded plugins: product-id, refresh-packagekit, subscription-manager

Updating Red Hat repositories.

ID | Login user | Date and time | Action(s) | Altered

-------------------------------------------------------------------------------

8 | root <root> | 2011-10-03 14:40 | Install | 1

7 | root <root> | 2011-09-21 04:24 | Install | 1 ##

6 | root <root> | 2011-09-21 04:23 | Install | 1 ##

5 | root <root> | 2011-09-16 13:35 | Install | 1

4 | root <root> | 2011-09-16 13:33 | Erase | 1

3 | root <root> | 2011-09-14 14:36 | Install | 1

2 | root <root> | 2011-09-12 15:48 | I, U | 80

1 | System <unset> | 2011-09-12 14:57 | Install | 1025

undo 撤销：

# yum history undo 8
Loaded plugins: product-id, refresh-packagekit, subscription-manager
Updating Red Hat repositories.
Undoing transaction 8, from Mon Oct  3 14:40:01 2011
    Install screen-4.0.3-16.el6.i686
Resolving Dependencies
--> Running transaction check
---> Package screen.i686 0:4.0.3-16.el6 will be erased
--> Finished Dependency Resolution

Dependencies Resolved
================================================================================
 Package          Arch       Version            Repository              Size
================================================================================
Removing:
 screen           i686       4.0.3-16.el6       @rhel-6-server-rpms     783 k

<snip>

Removed:
  screen.i686 0:4.0.3-16.el6
Complete!

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

# yum history undo 8

Loaded plugins: product-id, refresh-packagekit, subscription-manager

Updating Red Hat repositories.

Undoing transaction 8, from Mon Oct 3 14:40:01 2011

Install screen-4.0.3-16.el6.i686

Resolving Dependencies

--> Running transaction check

---> Package screen.i686 0:4.0.3-16.el6 will be erased

--> Finished Dependency Resolution

Dependencies Resolved

================================================================================

Package Arch Version Repository Size

================================================================================

Removing:

screen i686 4.0.3-16.el6 @rhel-6-server-rpms 783 k

<snip>

Removed:

screen.i686 0:4.0.3-16.el6

Complete!

ansible-playbook 里的判断与循环

2019/03/13 | Ansible | Zhiming Zhang | 暂无评论 | 756 views

ansible-playbook我们经常用到template，也就是平时j2文件，我们很多时候都需要通过判断输出一些东西例如：

{% if the_name == 'abc' %}

{{ domain}}

{% endif %}

1

2

3

4

5

{% if the_name == 'abc' %}

{% endif %}

还有for循环：

{% for domain in g_abc %} {{ domain}}.{{ oso_name }}.503error.com {% endfor %}

1	{% for domain in g_abc %} {{ domain}}.{{ oso_name }}.503error.com {% endfor %}

如何通过Python脚本来检查网站的证书过期时间

2019/03/12 | python | Zhiming Zhang | 暂无评论 | 969 views

近期发现有个别网站的证书到期后未及时更新导致的一系列问题，所以需要写个脚本监控一下网站一搜发现都是需要你提前把证书弄下来的，有了证书，然后再去链接…..感觉有点麻烦（我就是懒）

#!/usr/bin/env python
import urllib2
import httplib
import ssl
import socket
import os

CERT_FILE = os.path.join(os.path.dirname(__file__), 'cacert.pem')


class ValidHTTPSConnection(httplib.HTTPConnection):
        "This class allows communication via SSL."

        default_port = httplib.HTTPS_PORT

        def __init__(self, *args, **kwargs):
            httplib.HTTPConnection.__init__(self, *args, **kwargs)

        def connect(self):
            "Connect to a host on a given (SSL) port."

            sock = socket.create_connection((self.host, self.port),
                                            self.timeout, self.source_address)
            if self._tunnel_host:
                self.sock = sock
                self._tunnel()
            self.sock = ssl.wrap_socket(sock,
                                        ca_certs=CERT_FILE,
                                        cert_reqs=ssl.CERT_REQUIRED)


class ValidHTTPSHandler(urllib2.HTTPSHandler):

    def https_open(self, req):
            return self.do_open(ValidHTTPSConnection, req)

opener = urllib2.build_opener(ValidHTTPSHandler)


def test_access(url):
    print "Acessing", url
    page = opener.open(url)
    print page.info()
    data = page.read()
    print "First 100 bytes:", data[0:100]
    print "Done accesing", url
    print ""

# This should work
test_access("https://www.google.com")

# Accessing a page with a self signed certificate should not work
# At the time of writing, the following page uses a self signed certificate
test_access("https://tidia.ita.br/")

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

#!/usr/bin/env python

import urllib2

import httplib

import ssl

import socket

import os

CERT_FILE = os.path.join(os.path.dirname(__file__), 'cacert.pem')

class ValidHTTPSConnection(httplib.HTTPConnection):

"This class allows communication via SSL."

default_port = httplib.HTTPS_PORT

def __init__(self, *args, **kwargs):

httplib.HTTPConnection.__init__(self, *args, **kwargs)

def connect(self):

"Connect to a host on a given (SSL) port."

sock = socket.create_connection((self.host, self.port),

self.timeout, self.source_address)

if self._tunnel_host:

self.sock = sock

self._tunnel()

self.sock = ssl.wrap_socket(sock,

ca_certs=CERT_FILE,

cert_reqs=ssl.CERT_REQUIRED)

class ValidHTTPSHandler(urllib2.HTTPSHandler):

def https_open(self, req):

return self.do_open(ValidHTTPSConnection, req)

opener = urllib2.build_opener(ValidHTTPSHandler)

def test_access(url):

print "Acessing", url

page = opener.open(url)

print page.info()

data = page.read()

print "First 100 bytes:", data[0:100]

print "Done accesing", url

print ""

# This should work

test_access("https://www.google.com")

# Accessing a page with a self signed certificate should not work

# At the time of writing, the following page uses a self signed certificate

test_access("https://tidia.ita.br/")

然后又找到一种不需要提前下载证书的： [crayon-5dd21a2e53a672……

新疆8日自驾游计划参考

2019/03/10 | 生活随笔 | Zhiming Zhang | 暂无评论 | 280 views

根据上次去新疆的行程规划了新的行程（不包含独库公路），独库公路开放的时间不好控制，可能5月就开了，也可能6月底也没开，而且独库公路开了以后机票翻倍….另外这次没有包含吐鲁番和天山天池，最后的行程可以自由调整具体名称：

乌鲁木齐-> 乌尔禾  周六

乌尔禾->奎屯  周天

奎屯->赛里木湖->赛里木湖大酒店  周一

赛里木湖大酒店->新源县 周二

新源县->巴音布鲁克 周三

巴音布鲁克->库尔勒 周四

库尔勒->达坂城 周五

达坂城->乌鲁木齐 周六

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

乌鲁木齐-> 乌尔禾周六

乌尔禾->奎屯周天

奎屯->赛里木湖->赛里木湖大酒店周一

赛里木湖大酒店->新源县周二

新源县->巴音布鲁克周三

巴音布鲁克->库尔勒周四

库尔勒->达坂城周五

达坂城->乌鲁木齐周六

ansible-playbook shell模块转义大括号 {{}} 单引号

2019/03/07 | Ansible | Zhiming Zhang | 1 条评论 | 1086 views

今天发现要在shell命令中使用大括号{{}} 刚开始的playbook如下：

#!/usr/bin/ansible-playbook
#############################
- hosts: localhost
  remote_user: root
  gather_facts: false

  tasks:

  - name: "{{ check_command }}"
    shell: /usr/bin/oc get secrets -n namespace secrentname --template '{{ index .data "abc.crt" }}' | base64 -d | openssl x509 -noout -text|grep After
    register: ssl_out
    - debug: var=ssl_out

1

2

3

4

5

6

7

8

9

10

11

12

#!/usr/bin/ansible-playbook

#############################

- hosts: localhost

remote_user: root

gather_facts: false

tasks:

- name: "{{ check_command }}"

shell: /usr/bin/oc get secrets -n namespace secrentname --template '{{ index .data "abc.crt" }}' | base64 -d | openssl x509 -noout -text|grep After

register: ssl_out

- debug: var=ssl_out

发现有两个问题，单引号需要转义，大括号需要转义 ansible 的shell模块中对于单引号的转义很简单”，两个连续的单引号就可以了但是对于大括号则需要：{{ ‘{{&……