php-mbstring未安裝會造成500 ERROR
#### **Add librenms user** ``` useradd librenms -d /opt/librenms -M -r -s "$(which bash)" ``` #### **Download LibreNMS** ``` cd /opt git clone https://github.com/librenms/librenms.git ``` #### **Set permissions** ``` chown -R librenms:librenms /opt/librenms chmod 771 /opt/librenms setfacl -d -m g::rwx /opt/librenms/rrd /opt/librenms/logs /opt/librenms/bootstrap/cache/ /opt/librenms/storage/ setfacl -R -m g::rwx /opt/librenms/rrd /opt/librenms/logs /opt/librenms/bootstrap/cache/ /opt/librenms/storage/ ``` #### **更改時區** ``` nano /etc/php/8.1/fpm/php.ini nano /etc/php/8.1/cli/php.ini 搜尋[Date] 把時區改為 Asia/Taipei ``` #### **修改MariaDB** ``` nano /etc/mysql/mariadb.conf.d/50-server.cnf Within the [mysqld] section add: innodb_file_per_table=1 lower_case_table_names=0 ``` ``` systemctl enable mariadb systemctl restart mariadb ``` ``` mysql -u root CREATE USER 'librenmsuser'@'localhost' IDENTIFIED BY 'librenmsuserpswd'; GRANT ALL PRIVILEGES ON librenms.* TO 'librenmsuser'@'localhost'; FLUSH PRIVILEGES; exit ``` #### **修改PHP-FPM** ``` cp /etc/php/8.1/fpm/pool.d/www.conf /etc/php/8.1/fpm/pool.d/librenms.conf nano /etc/php/8.1/fpm/pool.d/librenms.conf Change [www] to [librenms]: [librenms] Change user and group to “librenms”: user = librenms group = librenms Change listen to a unique name: listen = /run/php-fpm-librenms.sock Configure Web Server ``` #### **建立librenms.conf** ``` nano /etc/nginx/conf.d/librenms.conf server { listen 80; server_name 127.0.0.1; root /opt/librenms/html; index index.php; charset utf-8; gzip on; gzip_types text/css application/javascript text/javascript application/x-javascript image/svg+xml text/plain text/xsd text/xsl text/xml image/x-icon; location / { try_files $uri $uri/ /index.php?$query_string; } location ~ [^/]\.php(/|$) { fastcgi_pass unix:/run/php-fpm-librenms.sock; fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi.conf; } location ~ /\.(?!well-known).* { deny all; } } ``` ``` rm /etc/nginx/sites-enabled/default rm /etc/nginx/sites-available/default systemctl restart nginx systemctl restart php8.1-fpm ``` #### **Enable lnms command completion** ``` ln -s /opt/librenms/lnms /usr/bin/lnms cp /opt/librenms/misc/lnms-completion.bash /etc/bash_completion.d/ ``` #### **Configure snmpd** ``` cp /opt/librenms/snmpd.conf.example /etc/snmp/snmpd.conf curl -o /usr/bin/distro https://raw.githubusercontent.com/librenms/librenms-agent/master/snmp/distro chmod +x /usr/bin/distro systemctl enable snmpd systemctl restart snmpd ``` #### **Cron job** ``` cp /opt/librenms/librenms.nonroot.cron /etc/cron.d/librenms ``` #### **Copy logrotate config** ``` cp /opt/librenms/misc/librenms.logrotate /etc/logrotate.d/librenms ``` 瀏覽器`http://ip`，依序安裝後進行組態驗證 ``` cd /opt/librenms su librenms ./validate.php ``` # LibreNMS 警報相關設定 LibreNMS 警報相關設定 # LibreNMS LINE Messaging API 設定 ##### **運行環境** - **Librenms 25.9.0** ##### **LINE Messaging API 申請** **先在LINE Developers新增一個channel並選擇Messaging API** **[](https://note.homesitetw.com/uploads/images/gallery/2025-09/lNtimage.png)** ##### **設定警報傳送** **Type選擇LINE Messaging API** **Access token輸入Channel access token** **userID輸入Channel 內的user ID** **[](https://note.homesitetw.com/uploads/images/gallery/2025-09/e3Rimage.png)** **設定好後點選右邊Test，LINE有出現測試訊息則成功** **[](https://note.homesitetw.com/uploads/images/gallery/2025-09/qFkimage.png)** # LibreNMS Mdadm RAID監控警報 ##### **啟用Mdadm** **確認已安裝[Mdadm監控](https://note.homesitetw.com/books/librenms/page/librenms-mdadm-raid)** ##### **新增警報規則** **Severity:警報等級** **Max alert ：最多通知幾次** **Delay ：延遲多久再來通知** **Interval ：通知間隔** **Transports:選擇傳送類別** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/K2Eimage.png) ##### **新增警報範本** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/yb6image.png) ``` {{ $alert->title }} 設備名稱: {{ $alert->sysName }} 等級: {{ $alert->severity }} 運行時間: {{ $alert->uptime_short }} 警示時間: {{ $alert->timestamp }} @foreach ($alert->faults as $key => $value) RAID : @php echo (explode("_", $value['metric'])[0]); @endphp @endforeach ``` ##### **測試** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/XS4image.png) [](https://note.homesitetw.com/uploads/images/gallery/2025-09/GpWimage.png) # LibreNMS 硬碟使用率監控警報 ##### **新增警報規則** **範例監控"/"根目錄使用率超過80%** **Severity:警報等級** **Max alert ：最多通知幾次** **Delay ：延遲多久再來通知** **Interval ：通知間隔** **Transports:選擇傳送類別** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/sQDimage.png) ##### **新增警報範本** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/cPqimage.png) ``` {{ $alert->title }} 設備名稱: {{ $alert->sysName }} 等級: {{ $alert->severity }} 運行時間: {{ $alert->uptime_short }} 警示時間: {{ $alert->timestamp }} @foreach ($alert->faults as $key => $value) 硬碟名稱: {{ $value['storage_descr'] }} 目前硬碟使用率: {{ $value['storage_perc'] }} % @endforeach ``` ##### **測試** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/lKRimage.png) [](https://note.homesitetw.com/uploads/images/gallery/2025-09/bsGimage.png) # LibreNMS CPU使用率監控警報 ##### **新增警報規則** **Severity:警報等級** **Max alert ：最多通知幾次** **Delay ：延遲多久再來通知** **Interval ：通知間隔** **Transports:選擇傳送類別** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/4rIimage.png) **由於多核心CPU預設一顆CPU觸發就會警報，故修改使用平均使用率計算** **官方解決範本[https://docs.librenms.org/Alerting/Rules/#advanced](https://docs.librenms.org/Alerting/Rules/#advanced)，不過有GROUP語法錯誤告警** **以下為自訂修改版本搭配警報範本使用，Override SQL記得開啟** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/Pzfimage.png) ``` SELECT devices.device_id, devices.hostname, devices.status, devices.disabled, devices.ignore, AVG(processors.processor_usage) AS cpu_avg, MIN(processor_descr) AS processor_descr FROM devices INNER JOIN processors ON devices.device_id = processors.device_id WHERE devices.device_id = ? AND devices.status = 1 AND devices.disabled = 0 AND devices.ignore = 0 GROUP BY devices.device_id, devices.hostname, devices.status, devices.disabled,devices.ignore,processor_descr HAVING AVG(processors.processor_usage) > 70; ``` ##### **新增警報範本** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/IoZimage.png) ``` {{ $alert->title }} 設備名稱: {{ $alert->sysName }} 等級: {{ $alert->severity }} 運行時間: {{ $alert->uptime_short }} 警示時間: {{ $alert->timestamp }} @foreach ($alert->faults as $key => $value) CPU名稱: {{ $value['processor_descr'] }} 目前CPU使用率: {{ round($value['cpu_avg']) }} % @endforeach ``` ##### **測試** [](https://note.homesitetw.com/uploads/images/gallery/2025-09/Mwwimage.png) [](https://note.homesitetw.com/uploads/images/gallery/2025-09/jqXimage.png) # LibreNMS 外部整合 # LibreNMS Smokeping 安裝設定**SmokePing為開源的網路品質監控專案，LibreNMS可整合Smokeping方便監測設備**
##### **安裝Smokeping** **下載Smokeping** ``` apt-get install smokeping ``` **複製Librenms smokeping腳本到cron** ``` sudo cp /opt/librenms/misc/smokeping-debian.example /etc/cron.hourly/librenms-smokeping sudo chmod +x /etc/cron.hourly/librenms-smokeping ``` **手動執行cron一次並確認有建立檔案** ``` /etc/cron.hourly/librenms-smokeping ls -l /etc/smokeping/config.d/librenms-targets.conf ls -l /etc/smokeping/config.d/librenms-probes.conf ``` **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/Zzvimage.png)** **刪除`/etc/smokeping/config.d/Probes`內容並新增以下** ``` *** Probes *** @include /etc/smokeping/config.d/librenms-probes.conf ``` **刪除`/etc/smokeping/config.d/Targets`內容並新增以下** ``` *** Targets *** probe = FPing menu = Top title = Network Latency Grapher remark = Welcome to the SmokePing website of Insert Company Name Here. \ Here you will learn all about the latency of our network. @include /etc/smokeping/config.d/librenms-targets.conf ``` **建立Smokeping資料儲存位置** ``` mkdir /opt/librenms/rrd/smokeping ``` **由於Smokeping執行會無法寫入`/opt/librenms/rrd/smokeping`** **須將smokeping加入librenms群組對`/opt/librenms/rrd/smokeping`可讀寫** ``` chown librenms:librenms /opt/librenms/rrd/smokeping usermod -a -G librenms smokeping ``` **網頁上設定剛剛建立的目錄，並設定每次測試發 20 個封包** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/jR6image.png)** **編輯`/etc/smokeping/config.d/Database`，修改step改為每分鐘做一次測試(預設5分鐘)** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/N53image.png)** **編輯`/etc/smokeping/config.d/pathnames`，datadir 改為上面新增的目錄** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/ULsimage.png)** **重啟smokeping** ``` service smokeping restart service smokeping status ``` **確認Librenms RRD內的smokeping已有資料** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/QUyimage.png)** **網頁上Latency內已有smokeping數值** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/ouIimage.png)** ##### **網頁 Web UI 設定** **安裝 fcgiwrap 才能使 CGI 包裝器與 Nginx 互動** ``` apt install fcgiwrap ``` **編輯`/etc/nginx/conf.d/librenms.conf`設定檔加入smokeping設定** ``` # Browsing to `http://yourlibrenms/smokeping/` should bring up the smokeping web interface location = /smokeping/ { fastcgi_intercept_errors on; fastcgi_param SCRIPT_FILENAME /usr/lib/cgi-bin/smokeping.cgi; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param REQUEST_URI $request_uri; fastcgi_param DOCUMENT_URI $document_uri; fastcgi_param DOCUMENT_ROOT $document_root; fastcgi_param SERVER_PROTOCOL $server_protocol; fastcgi_param GATEWAY_INTERFACE CGI/1.1; fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; fastcgi_param REMOTE_ADDR $remote_addr; fastcgi_param REMOTE_PORT $remote_port; fastcgi_param SERVER_ADDR $server_addr; fastcgi_param SERVER_PORT $server_port; fastcgi_param SERVER_NAME $server_name; fastcgi_param HTTPS $https if_not_empty; fastcgi_pass unix:/var/run/fcgiwrap.socket; } location ^~ /smokeping/ { alias /usr/share/smokeping/www/; index smokeping.cgi; gzip off; } ``` **重啟Nginx** ``` nginx -t service nginx restart ``` **網頁上URL填入`/smokeping`** **[](https://note.homesitetw.com/uploads/images/gallery/2025-11/H2Nimage.png)** **重整網頁後選擇`工具`>`smokeping`** ``
**[](https://note.homesitetw.com/uploads/images/gallery/2025-11/J4dimage.png)**
##### **自訂監控設定**
**安裝好Web UI後顯示的是Librenms監控的設備清單，可自行加入host監控**
**編輯`/etc/smokeping/config.d/Targets`，新增自訂監控設定**
```
@include /etc/smokeping/config.d/custom.conf
```
**編輯`/etc/smokeping/config.d/custom.conf`，加入想要監控的host**
```
+ Others
menu = Others
title = Others
++ GoogleDNS
menu = Google DNS
title = Google DNS
host = 8.8.8.8
++ CHTDNS
menu = CHT DNS
title = CHT DNS
host = 168.95.1.1
```
**確認設定正確後重啟服務**
```
smokeping --check
service smokeping restart
```
**網頁上即可看到剛剛新增的host**
[](https://note.homesitetw.com/uploads/images/gallery/2025-11/buDimage.png)
##### **自訂Probes**
**除了內建使用fping，也可以下載Github上的[tcpping](https://github.com/deajan/tcpping "tcpping")，使用traceroute和tcptraceroute的命令，增加TCP PORT的監控**
```
curl -o /usr/bin/tcpping -L https://raw.githubusercontent.com/deajan/tcpping/master/tcpping
chmod +x /usr/bin/tcpping
```
**測試tcpping正常**
```
root@librenms:~# tcpping google.com 443
seq 0: tcp response from nctsaa-ac-in-f14.1e100.net (142.250.196.206) 7.402 ms
seq 1: tcp response from hkg07s38-in-f14.1e100.net (142.250.204.46) 7.545 ms
seq 2: tcp response from lctsaa-aa-in-f14.1e100.net (142.250.66.78) 7.399 ms
```
**預設情況下，traceroute 需要 root 權限，所以要允許smokeping使用traceroute**
**建立`/etc/tcpping.conf`設定檔，並加入`-Z`參數(使用sudo)**
```
TCPPING_EXTRA_ARGS="-Z"
```
**執行`visudo`，讓 smokeping 以 root 身分執行 traceroute 無須密碼**
```
smokeping ALL=(ALL) NOPASSWD: /usr/bin/traceroute
```
**編輯`/etc/smokeping/config.d/Probes`，增加tcpping**
```
+ TCPPing
binary = /usr/bin/tcpping
```
[](https://note.homesitetw.com/uploads/images/gallery/2025-11/3Znimage.png)
**在監控設定檔內新增需要的host並指定probe和port**
```
++ Google-https
menu = Google https
title = Google https
probe = TCPPing
port = 443
host = google.com
```
**重啟smokeping後可以看到probe使用TCP Ping**
[](https://note.homesitetw.com/uploads/images/gallery/2025-11/CCyimage.png)
# LibreNMS 應用程式設定
LibreNMS 應用程式設定
# LibreNMS Mdadm RAID監控
**使LibreNMS可監控Mdadm RAID狀態**
**安裝jq套件**
```
apt install jq
```
**下載mdadm script**
```
wget https://raw.githubusercontent.com/librenms/librenms-agent/master/snmp/mdadm -O /etc/snmp/mdadm
```
```
chmod +x /etc/snmp/mdadm
```
**確認可執行**
```
root@LS-WVL885:~# /etc/snmp/mdadm
{"data":[{"name":"md0","level":"raid1","size":999227392,"disc_count":2,"
```
**編輯`/etc/snmp/snmpd.conf`**
**extend擴展記得included .1.3.6.1.4.1.8072.1.3**
```
extend mdadm /etc/snmp/mdadm
```
```
service snmpd restart
```
**確認snmpwalk可以抓到mdadm**
```
jason@test:~$ snmpwalk -v2c -c public 192.168.1.1 .1.3.6.1.4.1.8072.1.3
NET-SNMP-EXTEND-MIB::nsExtendNumEntries.0 = INTEGER: 2
NET-SNMP-EXTEND-MIB::nsExtendCommand."mdadm" = STRING: /etc/snmp/mdadm
NET-SNMP-EXTEND-MIB::nsExtendOutput1Line."mdadm" = STRING: {"data":[{"name":"md0","level":"raid1...
```
**LibreNMS內應用程式會自動開啟Mdadm**
[](https://note.homesitetw.com/uploads/images/gallery/2025-09/XQSimage.png)
**應用程式有RAID狀態**
[](https://note.homesitetw.com/uploads/images/gallery/2025-09/xxwimage.png)
# LibreNMS 被監控設備SNMP設定
#### **於被監控的主機上安裝Snmpd**
```
apt install snmpd -y
```
某些 Linux 發行版不會在SNMP中取得正確版本訊息，透過 LibreNMS 提供的 Distro 工具取得正確版本訊息
``` curl -o /usr/bin/distro https://raw.githubusercontent.com/librenms/librenms-agent/master/snmp/distro chmod +x /usr/bin/distro ``` #### **設定Snmpd** 編輯`/etc/snmp/snmpd.conf` ``` agentAddress udp:192.168.0.1:161 view systemview included .1.3.6.1.2.1.1 view systemview included .1.3.6.1.4.1.2021 view systemview included .1.3.6.1.2.1.25 view systemview excluded .1.3.6.1.4.1.2021.13.16 view systemview included .1.3.6.1.2.1.2 view systemview included .1.3.6.1.2.1.31 extend .1.3.6.1.4.1.2021.7890.1 distro /usr/bin/distro rocommunity nms 192.168.0.10/32 -V systemview includeAllDisks 10% load 12 10 5 ``` **以下為第二種extend設定，GPT回答** **你看到的「`extend .1.3.6.1.4.1.2021.7890.x ...`」是 早期的寫法，因為：** 1. **舊版 SNMP / LibreNMS agent 腳本** **以前大家習慣把 extend 掛在 `.1.3.6.1.4.1.2021`（UCD-SNMP-MIB），這個 MIB 原本就有 CPU/Mem/Load，大家直接沿用。** 2. **相容性考量** **舊的監控系統（Cacti、Nagios plugins）或舊版 LibreNMS，預設就是去 `.2021.7890.x` 找。這樣寫不用改 view，裝好就能抓到。** 3. **官方後來才引入 NET-SNMP-EXTEND-MIB** **新版 net-snmp (`5.4+`) 支援 `extend