zabbix部署server和agent

Zabbix 是一个开源的企业级分布式监控解决方案，广泛应用于监控 IT 基础设施（如服务器、网络设备、虚拟机等）和应用程序。它支持多种监控方式（如 agent、SNMP、IPMI、SSH 等），提供实时数据采集、告警通知、趋势分析和历史存储。Zabbix 拥有强大的可扩展性和灵活的图形化 Web 界面，能够通过 Zabbix Server、Proxy 和 Agent 实现分布式部署，适用于大规模环境。其开源特性和丰富的模板、API 使其在中小企业到超大规模企业中都能得到广泛应用。

部署环境

系统：Anolis 8.10

软件：

Docker 28.3

Docker镜像：

mysql 8.0 304929b30183 5 days ago 781MB

zabbix/zabbix-web-nginx-mysql alpine-6.2-latest 09a4eb616c94 2 years ago 237MB

zabbix/zabbix-server-mysql 6.2-alpine-latest 69c2e207de22 2 years ago 86.5MB

zabbix/zabbix-java-gateway alpine-6.2-latest 8f70989cf9b1 2 years ago 91.1MB

docker部署server端

1. 准备操作

导入提前下载好的镜像

#!/bin/bash

# 扫描当前目录所有 tar 文件
for img in *.tar; do
  if [ -f "$img" ]; then
    echo "========================================"
    echo "[*] 正在导入镜像: $img"
    docker load -i "$img"
    echo "[✔] 导入完成: $img"
    echo
  fi
done

echo "========================================"
echo "[*] 当前所有镜像："
docker images

验证：docker images

[*] 当前所有镜像：
REPOSITORY                      TAG                 IMAGE ID       CREATED         SIZE
mysql                           8.0                 304929b30183   9 days ago      781MB
mysql                           5.7                 5107333e08a8   19 months ago   501MB
zabbix/zabbix-web-nginx-mysql   alpine-6.2-latest   09a4eb616c94   2 years ago     237MB
zabbix/zabbix-server-mysql      6.2-alpine-latest   69c2e207de22   2 years ago     86.5MB
zabbix/zabbix-java-gateway      alpine-6.2-latest   8f70989cf9b1   2 years ago     91.1MB
[root@localhost resources]#

2. docker部署mysql

选择将数据持久化存储到当前工作目录的mysql_data目录下

docker run --name mysql-server -t \
   -v $(pwd)/mysql_data:/var/lib/mysql \
   -e MYSQL_DATABASE="zabbix" \
   -e MYSQL_USER="zabbix" \
   -e MYSQL_PASSWORD="zabbix_pwd" \
   -e MYSQL_ROOT_PASSWORD="123456" \
   --restart=unless-stopped \
   -p 3306:3306 \
   -d mysql:8.0 \
   --character-set-server=utf8 --collation-server=utf8_bin \
   --default-authentication-plugin=mysql_native_password

3. docker部署zabbix-java-gateway

用于监控Java程序的JVM状态

1
2
3

docker run --name zabbix-java-gateway -t \
   --restart=unless-stopped \
   -d zabbix/zabbix-java-gateway:alpine-6.2-latest

4. docker部署zabbix-server

准备好挂载配置文件的目录和配置文件。

参考配置文件，使用docker的话不需要修改，其实也可以不用挂载出来。

这里挂载出来是为了后续测试或者迁移搬数据库使用。

这里面主要用的到设置是

参数作用是否必须改

DBHost 数据库主机（如果不在本机）通常必须

DBName 数据库名（默认 zabbix）根据实际

DBUser 数据库用户名通常必须

DBPassword 数据库密码必须

CacheSize 缓存大小（比如 128M, 256M）建议调

StartPollers 并发轮询进程数根据监控规模调

但是我们使用了起容器的时候用来–link，所以这个配置会自己生成好。

如果报错则可以不挂载配置文件起一个容器，然后docker cp出来配置文件。

参数	作用	是否必须改
`DBHost`	数据库主机（如果不在本机）	通常必须
`DBName`	数据库名（默认 zabbix）	根据实际
`DBUser`	数据库用户名	通常必须
`DBPassword`	数据库密码	必须
`CacheSize`	缓存大小（比如 128M, 256M）	建议调
`StartPollers`	并发轮询进程数	根据监控规模调

# This is a configuration file for Zabbix server daemon
# To get more information about Zabbix, visit http://www.zabbix.com

############ GENERAL PARAMETERS #################

### Option: ListenPort
#  Listen port for trapper.
#
# Mandatory: no
# Range: 1024-32767
# Default:
# ListenPort=10051

### Option: SourceIP
#  Source IP address for outgoing connections.
#
# Mandatory: no
# Default:
# SourceIP=

### Option: LogType
#  Specifies where log messages are written to:
#    system  - syslog
#    file    - file specified with LogFile parameter
#    console - standard output
#
# Mandatory: no
# Default:
# LogType=file
LogType=console

### Option: LogFile
#  Log file name for LogType 'file' parameter.
#
# Mandatory: yes, if LogType is set to file, otherwise no
# Default:
# LogFile=


### Option: LogFileSize
#  Maximum size of log file in MB.
#  0 - disable automatic log rotation.
#
# Mandatory: no
# Range: 0-1024
# Default:
# LogFileSize=1

### Option: DebugLevel
#  Specifies debug level:
#  0 - basic information about starting and stopping of Zabbix processes
#  1 - critical information
#  2 - error information
#  3 - warnings
#  4 - for debugging (produces lots of information)
#  5 - extended debugging (produces even more information)
#
# Mandatory: no
# Range: 0-5
# Default:
# DebugLevel=3

### Option: PidFile
#  Name of PID file.
#
# Mandatory: no
# Default:
# PidFile=/tmp/zabbix_server.pid

### Option: SocketDir
#  IPC socket directory.
#    Directory to store IPC sockets used by internal Zabbix services.
#
# Mandatory: no
# Default:
# SocketDir=/tmp

### Option: DBHost
#  Database host name.
#  If set to localhost, socket is used for MySQL.
#  If set to empty string, socket is used for PostgreSQL.
#  If set to empty string, the Net Service Name connection method is used to connect to Oracle database; also see
#  the TNS_ADMIN environment variable to specify the directory where the tnsnames.ora file is located.
#
# Mandatory: no
# Default:
# DBHost=localhost
DBHost=mysql-server

### Option: DBName
#  Database name.
#  If the Net Service Name connection method is used to connect to Oracle database, specify the service name from
#  the tnsnames.ora file or set to empty string; also see the TWO_TASK environment variable if DBName is set to
#  empty string.
#
# Mandatory: yes
# Default:
# DBName=

DBName=zabbix

### Option: DBSchema
#  Schema name. Used for PostgreSQL.
#
# Mandatory: no
# Default:
# DBSchema=

### Option: DBUser
#  Database user.
#
# Mandatory: no
# Default:
# DBUser=

DBUser=zabbix

### Option: DBPassword
#  Database password.
#  Comment this line if no password is used.
#
# Mandatory: no
# Default:
# DBPassword=
DBPassword=zabbix_pwd

### Option: DBSocket
#  Path to MySQL socket.
#
# Mandatory: no
# Default:
# DBSocket=

### Option: DBPort
#  Database port when not using local socket.
#  If the Net Service Name connection method is used to connect to Oracle database, the port number from the
#  tnsnames.ora file will be used. The port number set here will be ignored.
#
# Mandatory: no
# Range: 1024-65535
# Default:
# DBPort=
DBPort=3306

### Option: AllowUnsupportedDBVersions
#  Allow server to work with unsupported database versions.
#       0 - do not allow
#       1 - allow
#
# Mandatory: no
# Default:
# AllowUnsupportedDBVersions=0

### Option: HistoryStorageURL
#  History storage HTTP[S] URL.
#
# Mandatory: no
# Default:
# HistoryStorageURL=

### Option: HistoryStorageTypes
#  Comma separated list of value types to be sent to the history storage.
#
# Mandatory: no
# Default:
# HistoryStorageTypes=uint,dbl,str,log,text

### Option: HistoryStorageDateIndex
#  Enable preprocessing of history values in history storage to store values in different indices based on date.
#  0 - disable
#  1 - enable
#
# Mandatory: no
# Default:
# HistoryStorageDateIndex=0

### Option: ExportDir
#  Directory for real time export of events, history and trends in newline delimited JSON format.
#  If set, enables real time export.
#
# Mandatory: no
# Default:
# ExportDir=

### Option: ExportFileSize
#  Maximum size per export file in bytes.
#  Only used for rotation if ExportDir is set.
#
# Mandatory: no
# Range: 1M-1G
# Default:
# ExportFileSize=1G

### Option: ExportType
#  List of comma delimited types of real time export - allows to control export entities by their
#  type (events, history, trends) individually.
#  Valid only if ExportDir is set.
#
# Mandatory: no
# Default:
# ExportType=events,history,trends

############ ADVANCED PARAMETERS ################

### Option: StartPollers
#  Number of pre-forked instances of pollers.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartPollers=5

### Option: StartIPMIPollers
#  Number of pre-forked instances of IPMI pollers.
#    The IPMI manager process is automatically started when at least one IPMI poller is started.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartIPMIPollers=0

### Option: StartPreprocessors
#  Number of pre-forked instances of preprocessing workers.
#    The preprocessing manager process is automatically started when preprocessor worker is started.
#
# Mandatory: no
# Range: 1-1000
# Default:
# StartPreprocessors=3

### Option: StartPollersUnreachable
#  Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java).
#  At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers
#  are started.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartPollersUnreachable=1

### Option: StartHistoryPollers
#  Number of pre-forked instances of history pollers.
#  Only required for calculated checks.
#  A database connection is required for each history poller instance.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartHistoryPollers=5

### Option: StartTrappers
#  Number of pre-forked instances of trappers.
#  Trappers accept incoming connections from Zabbix sender, active agents and active proxies.
#  At least one trapper process must be running to display server availability and view queue
#  in the frontend.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartTrappers=5

### Option: StartPingers
#  Number of pre-forked instances of ICMP pingers.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartPingers=1

### Option: StartDiscoverers
#  Number of pre-forked instances of discoverers.
#
# Mandatory: no
# Range: 0-250
# Default:
# StartDiscoverers=1

### Option: StartHTTPPollers
#  Number of pre-forked instances of HTTP pollers.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartHTTPPollers=1

### Option: StartTimers
#  Number of pre-forked instances of timers.
#  Timers process maintenance periods.
#  Only the first timer process handles host maintenance updates. Problem suppression updates are shared
#  between all timers.
#
# Mandatory: no
# Range: 1-1000
# Default:
# StartTimers=1

### Option: StartEscalators
#  Number of pre-forked instances of escalators.
#
# Mandatory: no
# Range: 1-100
# Default:
# StartEscalators=1

### Option: StartAlerters
#  Number of pre-forked instances of alerters.
#  Alerters send the notifications created by action operations.
#
# Mandatory: no
# Range: 1-100
# Default:
# StartAlerters=3

### Option: JavaGateway
#  IP address (or hostname) of Zabbix Java gateway.
#  Only required if Java pollers are started.
#
# Mandatory: no
# Default:
# JavaGateway=

### Option: JavaGatewayPort
#  Port that Zabbix Java gateway listens on.
#
# Mandatory: no
# Range: 1024-32767
# Default:
# JavaGatewayPort=10052

### Option: StartJavaPollers
#  Number of pre-forked instances of Java pollers.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartJavaPollers=0

### Option: StartVMwareCollectors
#  Number of pre-forked vmware collector instances.
#
# Mandatory: no
# Range: 0-250
# Default:
# StartVMwareCollectors=0

### Option: VMwareFrequency
#  How often Zabbix will connect to VMware service to obtain a new data.
#
# Mandatory: no
# Range: 10-86400
# Default:
# VMwareFrequency=60

### Option: VMwarePerfFrequency
#  How often Zabbix will connect to VMware service to obtain performance data.
#
# Mandatory: no
# Range: 10-86400
# Default:
# VMwarePerfFrequency=60

### Option: VMwareCacheSize
#  Size of VMware cache, in bytes.
#  Shared memory size for storing VMware data.
#  Only used if VMware collectors are started.
#
# Mandatory: no
# Range: 256K-2G
# Default:
# VMwareCacheSize=8M

### Option: VMwareTimeout
#  Specifies how many seconds vmware collector waits for response from VMware service.
#
# Mandatory: no
# Range: 1-300
# Default:
# VMwareTimeout=10

### Option: SNMPTrapperFile
#  Temporary file used for passing data from SNMP trap daemon to the server.
#  Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file.
#
# Mandatory: no
# Default:
# SNMPTrapperFile=/tmp/zabbix_traps.tmp

### Option: StartSNMPTrapper
#  If 1, SNMP trapper process is started.
#
# Mandatory: no
# Range: 0-1
# Default:
# StartSNMPTrapper=0

### Option: ListenIP
#  List of comma delimited IP addresses that the trapper should listen on.
#  Trapper will listen on all network interfaces if this parameter is missing.
#
# Mandatory: no
# Default:
# ListenIP=0.0.0.0

### Option: HousekeepingFrequency
#  How often Zabbix will perform housekeeping procedure (in hours).
#  Housekeeping is removing outdated information from the database.
#  To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency
#  hours of outdated information are deleted in one housekeeping cycle, for each item.
#  To lower load on server startup housekeeping is postponed for 30 minutes after server start.
#  With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option.
#  In this case the period of outdated information deleted in one housekeeping cycle is 4 times the
#  period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days.
#
# Mandatory: no
# Range: 0-24
# Default:
# HousekeepingFrequency=1

### Option: MaxHousekeeperDelete
#  The table "housekeeper" contains "tasks" for housekeeping procedure in the format:
#  [housekeeperid], [tablename], [field], [value].
#  No more than 'MaxHousekeeperDelete' rows (corresponding to [tablename], [field], [value])
#  will be deleted per one task in one housekeeping cycle.
#  If set to 0 then no limit is used at all. In this case you must know what you are doing!
#
# Mandatory: no
# Range: 0-1000000
# Default:
# MaxHousekeeperDelete=5000

### Option: CacheSize
#  Size of configuration cache, in bytes.
#  Shared memory size for storing host, item and trigger data.
#
# Mandatory: no
# Range: 128K-64G
# Default:
# CacheSize=32M

### Option: CacheUpdateFrequency
#  How often Zabbix will perform update of configuration cache, in seconds.
#
# Mandatory: no
# Range: 1-3600
# Default:
# CacheUpdateFrequency=60

### Option: StartDBSyncers
#  Number of pre-forked instances of DB Syncers.
#
# Mandatory: no
# Range: 1-100
# Default:
# StartDBSyncers=4

### Option: HistoryCacheSize
#  Size of history cache, in bytes.
#  Shared memory size for storing history data.
#
# Mandatory: no
# Range: 128K-2G
# Default:
# HistoryCacheSize=16M

### Option: HistoryIndexCacheSize
#  Size of history index cache, in bytes.
#  Shared memory size for indexing history cache.
#
# Mandatory: no
# Range: 128K-2G
# Default:
# HistoryIndexCacheSize=4M

### Option: TrendCacheSize
#  Size of trend write cache, in bytes.
#  Shared memory size for storing trends data.
#
# Mandatory: no
# Range: 128K-2G
# Default:
# TrendCacheSize=4M

### Option: TrendFunctionCacheSize
#  Size of trend function cache, in bytes.
#  Shared memory size for caching calculated trend function data.
#
# Mandatory: no
# Range: 128K-2G
# Default:
# TrendFunctionCacheSize=4M

### Option: ValueCacheSize
#  Size of history value cache, in bytes.
#  Shared memory size for caching item history data requests.
#  Setting to 0 disables value cache.
#
# Mandatory: no
# Range: 0,128K-64G
# Default:
# ValueCacheSize=8M

### Option: Timeout
#  Specifies how long we wait for agent, SNMP device or external check (in seconds).
#
# Mandatory: no
# Range: 1-30
# Default:
# Timeout=3


### Option: TrapperTimeout
#  Specifies how many seconds trapper may spend processing new data.
#
# Mandatory: no
# Range: 1-300
# Default:
# TrapperTimeout=300

### Option: UnreachablePeriod
#  After how many seconds of unreachability treat a host as unavailable.
#
# Mandatory: no
# Range: 1-3600
# Default:
# UnreachablePeriod=45

### Option: UnavailableDelay
#  How often host is checked for availability during the unavailability period, in seconds.
#
# Mandatory: no
# Range: 1-3600
# Default:
# UnavailableDelay=60

### Option: UnreachableDelay
#  How often host is checked for availability during the unreachability period, in seconds.
#
# Mandatory: no
# Range: 1-3600
# Default:
# UnreachableDelay=15

### Option: AlertScriptsPath
#  Full path to location of custom alert scripts.
#  Default depends on compilation options.
#  To see the default path run command "zabbix_server --help".
#
# Mandatory: no
# Default:
# AlertScriptsPath=${datadir}/zabbix/alertscripts
AlertScriptsPath=/usr/lib/zabbix/alertscripts

### Option: ExternalScripts
#  Full path to location of external scripts.
#  Default depends on compilation options.
#  To see the default path run command "zabbix_server --help".
#
# Mandatory: no
# Default:
# ExternalScripts=${datadir}/zabbix/externalscripts
ExternalScripts=/usr/lib/zabbix/externalscripts

### Option: FpingLocation
#  Location of fping.
#  Make sure that fping binary has root ownership and SUID flag set.
#
# Mandatory: no
# Default:
# FpingLocation=/usr/sbin/fping
FpingLocation=/usr/sbin/fping

### Option: Fping6Location
#  Location of fping6.
#  Make sure that fping6 binary has root ownership and SUID flag set.
#  Make empty if your fping utility is capable to process IPv6 addresses.
#
# Mandatory: no
# Default:
# Fping6Location=/usr/sbin/fping6

### Option: SSHKeyLocation
#  Location of public and private keys for SSH checks and actions.
#
# Mandatory: no
# Default:
# SSHKeyLocation=
SSHKeyLocation=/var/lib/zabbix/ssh_keys

### Option: LogSlowQueries
#  How long a database query may take before being logged (in milliseconds).
#  Only works if DebugLevel set to 3, 4 or 5.
#  0 - don't log slow queries.
#
# Mandatory: no
# Range: 1-3600000
# Default:
# LogSlowQueries=0


### Option: TmpDir
#  Temporary directory.
#
# Mandatory: no
# Default:
# TmpDir=/tmp

### Option: StartProxyPollers
#  Number of pre-forked instances of pollers for passive proxies.
#
# Mandatory: no
# Range: 0-250
# Default:
# StartProxyPollers=1

### Option: ProxyConfigFrequency
#  How often Zabbix Server sends configuration data to a Zabbix Proxy in seconds.
#  This parameter is used only for proxies in the passive mode.
#
# Mandatory: no
# Range: 1-3600*24*7
# Default:
# ProxyConfigFrequency=300

### Option: ProxyDataFrequency
#  How often Zabbix Server requests history data from a Zabbix Proxy in seconds.
#  This parameter is used only for proxies in the passive mode.
#
# Mandatory: no
# Range: 1-3600
# Default:
# ProxyDataFrequency=1

### Option: StartLLDProcessors
#  Number of pre-forked instances of low level discovery processors.
#
# Mandatory: no
# Range: 1-100
# Default:
# StartLLDProcessors=2

### Option: AllowRoot
#  Allow the server to run as 'root'. If disabled and the server is started by 'root', the server
#  will try to switch to the user specified by the User configuration option instead.
#  Has no effect if started under a regular user.
#  0 - do not allow
#  1 - allow
#
# Mandatory: no
# Default:
# AllowRoot=0

### Option: User
#  Drop privileges to a specific, existing user on the system.
#  Only has effect if run as 'root' and AllowRoot is disabled.
#
# Mandatory: no
# Default:
# User=zabbix
User=zabbix

### Option: Include
#  You may include individual files or all files in a directory in the configuration file.
#  Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time.
#
# Mandatory: no
# Default:
# Include=

# Include=/usr/local/etc/zabbix_server.general.conf
# Include=/usr/local/etc/zabbix_server.conf.d/
# Include=/usr/local/etc/zabbix_server.conf.d/*.conf

### Option: SSLCertLocation
#  Location of SSL client certificates.
#  This parameter is used only in web monitoring.
#  Default depends on compilation options.
#  To see the default path run command "zabbix_server --help".
#
# Mandatory: no
# Default:
# SSLCertLocation=${datadir}/zabbix/ssl/certs
SSLCertLocation=/var/lib/zabbix/ssl/certs/

### Option: SSLKeyLocation
#  Location of private keys for SSL client certificates.
#  This parameter is used only in web monitoring.
#  Default depends on compilation options.
#  To see the default path run command "zabbix_server --help".
#
# Mandatory: no
# Default:
# SSLKeyLocation=${datadir}/zabbix/ssl/keys
SSLKeyLocation=/var/lib/zabbix/ssl/keys/

### Option: SSLCALocation
#  Override the location of certificate authority (CA) files for SSL server certificate verification.
#  If not set, system-wide directory will be used.
#  This parameter is used in web monitoring, SMTP authentication, HTTP agent items and for communication with Vault.
#
# Mandatory: no
# Default:
# SSLCALocation=
SSLCALocation=/var/lib/zabbix/ssl/ssl_ca/

### Option: StatsAllowedIP
#  List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances.
#  Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests
#  will be accepted.
#  If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally
#  and '::/0' will allow any IPv4 or IPv6 address.
#  '0.0.0.0/0' can be used to allow any IPv4 address.
#  Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
#
# Mandatory: no
# Default:
# StatsAllowedIP=

####### LOADABLE MODULES #######

### Option: LoadModulePath
#  Full path to location of server modules.
#  Default depends on compilation options.
#  To see the default path run command "zabbix_server --help".
#
# Mandatory: no
# Default:
# LoadModulePath=${libdir}/modules
LoadModulePath=/var/lib/zabbix/modules/

### Option: LoadModule
#  Module to load at server startup. Modules are used to extend functionality of the server.
#  Formats:
#    LoadModule=<module.so>
#    LoadModule=<path/module.so>
#    LoadModule=</abs_path/module.so>
#  Either the module must be located in directory specified by LoadModulePath or the path must precede the module name.
#  If the preceding path is absolute (starts with '/') then LoadModulePath is ignored.
#  It is allowed to include multiple LoadModule parameters.
#
# Mandatory: no
# Default:
# LoadModule=

####### TLS-RELATED PARAMETERS #######

### Option: TLSCAFile
#  Full pathname of a file containing the top-level CA(s) certificates for
#  peer certificate verification.
#
# Mandatory: no
# Default:
# TLSCAFile=

### Option: TLSCRLFile
#  Full pathname of a file containing revoked certificates.
#
# Mandatory: no
# Default:
# TLSCRLFile=

### Option: TLSCertFile
#  Full pathname of a file containing the server certificate or certificate chain.
#
# Mandatory: no
# Default:
# TLSCertFile=

### Option: TLSKeyFile
#  Full pathname of a file containing the server private key.
#
# Mandatory: no
# Default:
# TLSKeyFile=

####### For advanced users - TLS ciphersuite selection criteria #######

### Option: TLSCipherCert13
#  Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
#  Override the default ciphersuite selection criteria for certificate-based encryption.
#
# Mandatory: no
# Default:
# TLSCipherCert13=

### Option: TLSCipherCert
#  GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
#  Override the default ciphersuite selection criteria for certificate-based encryption.
#  Example for GnuTLS:
#    NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
#  Example for OpenSSL:
#    EECDH+aRSA+AES128:RSA+aRSA+AES128
#
# Mandatory: no
# Default:
# TLSCipherCert=

### Option: TLSCipherPSK13
#  Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
#  Override the default ciphersuite selection criteria for PSK-based encryption.
#  Example:
#    TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
#
# Mandatory: no
# Default:
# TLSCipherPSK13=

### Option: TLSCipherPSK
#  GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
#  Override the default ciphersuite selection criteria for PSK-based encryption.
#  Example for GnuTLS:
#    NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL
#  Example for OpenSSL:
#    kECDHEPSK+AES128:kPSK+AES128
#
# Mandatory: no
# Default:
# TLSCipherPSK=

### Option: TLSCipherAll13
#  Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
#  Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
#  Example:
#    TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
#
# Mandatory: no
# Default:
# TLSCipherAll13=

### Option: TLSCipherAll
#  GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
#  Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
#  Example for GnuTLS:
#    NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
#  Example for OpenSSL:
#    EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128
#
# Mandatory: no
# Default:
# TLSCipherAll=

### Option: DBTLSConnect
#  Setting this option enforces to use TLS connection to database.
#  required    - connect using TLS
#  verify_ca   - connect using TLS and verify certificate
#  verify_full - connect using TLS, verify certificate and verify that database identity specified by DBHost
#                matches its certificate
#  On MySQL starting from 5.7.11 and PostgreSQL following values are supported: "required", "verify_ca" and
#  "verify_full".
#  On MariaDB starting from version 10.2.6 "required" and "verify_full" values are supported.
#  Default is not to set any option and behavior depends on database configuration
#
# Mandatory: no
# Default:
# DBTLSConnect=

### Option: DBTLSCAFile
#  Full pathname of a file containing the top-level CA(s) certificates for database certificate verification.
#  Supported only for MySQL and PostgreSQL
#
# Mandatory: no
#  (yes, if DBTLSConnect set to one of: verify_ca, verify_full)
# Default:
# DBTLSCAFile=

### Option: DBTLSCertFile
#  Full pathname of file containing Zabbix server certificate for authenticating to database.
#  Supported only for MySQL and PostgreSQL
#
# Mandatory: no
# Default:
# DBTLSCertFile=

### Option: DBTLSKeyFile
#  Full pathname of file containing the private key for authenticating to database.
#  Supported only for MySQL and PostgreSQL
#
# Mandatory: no
# Default:
# DBTLSKeyFile=

### Option: DBTLSCipher
#  The list of encryption ciphers that Zabbix server permits for TLS protocols up through TLSv1.2
#  Supported only for MySQL
#
# Mandatory no
# Default:
# DBTLSCipher=

### Option: DBTLSCipher13
#  The list of encryption ciphersuites that Zabbix server permits for TLSv1.3 protocol
#  Supported only for MySQL, starting from version 8.0.16
#
# Mandatory no
# Default:
# DBTLSCipher13=

### Option: Vault
#  Specifies vault:
#    HashiCorp - HashiCorp KV Secrets Engine - Version 2
#    CyberArk  - CyberArk Central Credential Provider
#
# Mandatory: no
# Default:
# Vault=HashiCorp

### Option: VaultToken
#  Vault authentication token that should have been generated exclusively for Zabbix server with read only permission
#  to paths specified in Vault macros and read only permission to path specified in optional VaultDBPath
#  configuration parameter.
#  It is an error if VaultToken and VAULT_TOKEN environment variable are defined at the same time.
#
# Mandatory: no
#  (yes, if Vault is explicitly set to HashiCorp)
# Default:
# VaultToken=

### Option: VaultURL
#  Vault server HTTP[S] URL. System-wide CA certificates directory will be used if SSLCALocation is not specified.
#
# Mandatory: no
# Default:
# VaultURL=https://127.0.0.1:8200

### Option: VaultDBPath
#  Vault path or query depending on the Vault from where credentials for database will be retrieved by keys.
#  Keys used for HashiCorp are 'password' and 'username'.
#  Example path:
#    secret/zabbix/database
#  Keys used for CyberArk are 'Content' and 'UserName'.
#  Example query:
#    AppID=zabbix_server&Query=Safe=passwordSafe;Object=zabbix_server_database
#  This option can only be used if DBUser and DBPassword are not specified.
#
# Mandatory: no
# Default:
# VaultDBPath=

### Option: VaultTLSCertFile
#  Name of the SSL certificate file used for client authentication. The certificate file must be in PEM1 format.
#  If the certificate file contains also the private key, leave the SSL key file field empty. The directory
#  containing this file is specified by configuration parameter SSLCertLocation.
#
# Mandatory: no
# Default:
# VaultTLSCertFile=

### Option: VaultTLSKeyFile
#  Name of the SSL private key file used for client authentication. The private key file must be in PEM1 format.
#  The directory containing this file is specified by configuration parameter SSLKeyLocation.
#
# Mandatory: no
# Default:
# VaultTLSKeyFile=

### Option: StartReportWriters
#  Number of pre-forked report writer instances.
#
# Mandatory: no
# Range: 0-100
# Default:
# StartReportWriters=0

### Option: WebServiceURL
#  URL to Zabbix web service, used to perform web related tasks.
#  Example: http://localhost:10053/report
#
# Mandatory: no
# Default:
# WebServiceURL=
WebServiceURL=http://zabbix-web-service:10053/report

### Option: ServiceManagerSyncFrequency
#  How often Zabbix will synchronize configuration of a service manager (in seconds).
#
# Mandatory: no
# Range: 1-3600
# Default:
# ServiceManagerSyncFrequency=60

### Option: ProblemHousekeepingFrequency
#  How often Zabbix will delete problems for deleted triggers (in seconds).
#
# Mandatory: no
# Range: 1-3600
# Default:
# ProblemHousekeepingFrequency=60

## Option: StartODBCPollers
#  Number of pre-forked ODBC poller instances.
#
# Mandatory: no
# Range: 0-1000
# Default:
# StartODBCPollers=1

####### For advanced users - TCP-related fine-tuning parameters #######

## Option: ListenBacklog
#       The maximum number of pending connections in the queue. This parameter is passed to
#       listen() function as argument 'backlog' (see "man listen").
#
# Mandatory: no
# Range: 0 - INT_MAX (depends on system, too large values may be silently truncated to implementation-specified maximum)
# Default: SOMAXCONN (hard-coded constant, depends on system)
# ListenBacklog=


####### High availability cluster parameters #######

## Option: HANodeName
#  The high availability cluster node name.
#  When empty, server is working in standalone mode; a node with empty name is registered with address for the frontend to connect to.
#
# Mandatory: no
# Default: 
# HANodeName=

## Option: NodeAddress
#  IP or hostname with optional port to specify how frontend should connect to the server.
#  Format: <address>[:<port>]
#
#  If IP or hostname is not set, then ListenIP value will be used. In case ListenIP is not set, localhost will be used.
#  If port is not set, then ListenPort value will be used. In case ListenPort is not set, 10051 will be used.
#  This option can be overridden by address specified in frontend configuration.
#
# Mandatory: no
# Default: 
# NodeAddress=localhost:10051

起容器的命令：

docker run --name zabbix-server-mysql -t \
    -v /root/zabbix-server/zabbix_server/zabbix_server.conf:/etc/zabbix/zabbix_server.conf \
    -e DB_SERVER_HOST="mysql-server"  \
    -e MYSQL_DATABASE="zabbix"  \
    -e MYSQL_USER="zabbix"   \
    -e MYSQL_PASSWORD="zabbix_pwd"   \
    -e MYSQL_ROOT_PASSWORD="123456"   \
    -e ZBX_JAVAGATEWAY="zabbix-java-gateway"   \
    --link mysql-server:mysql   \
    --link zabbix-java-gateway:zabbix-java-gateway  \
    --restart=unless-stopped   \
    -p 10051:10051   \
    -d zabbix/zabbix-server-mysql:6.2-alpine-latest

5. docker部署zabbix前端

docker run --name zabbix-web-nginx-mysql -t \
   -e PHP_TZ="Asia/Shanghai" \
   -e ZBX_SERVER_HOST="zabbix-server-mysql" \
      -e DB_SERVER_HOST="mysql-server" \
      -e MYSQL_DATABASE="zabbix" \
      -e MYSQL_USER="zabbix" \
      -e MYSQL_PASSWORD="zabbix_pwd" \
      -e MYSQL_ROOT_PASSWORD="123456" \
      --link mysql-server:mysql \
      --link zabbix-server-mysql:zabbix-server \
      -p 80:8080 \
      --restart unless-stopped \
      -d zabbix/zabbix-web-nginx-mysql:alpine-6.2-latest

至此server端的组件均已安装

访问 IP:80即可访问到zabbix服务端，账号密码为Admin/Zabbix

服务器部署agent

使用docker部署agent在不做其他配置的情况下只会监测容器本身。因此这里使用直接安装的方式部署zabbix-agent

使用包管理器安装

1. 添加与系统版本一致的仓库

1	dnf install -y https://repo.zabbix.com/zabbix/7.0/rhel/8/x86_64/zabbix-release-7.0-1.el8.noarch.rpm

2. 清理并刷新缓存

1
2
3

dnf clean all
dnf makecache

3. 安装

1	dnf install -y zabbix-agent

离线包安装

1. 准备离线包

以下是安装zabbix7.0所需要的所有包。主包为zabbix7.0-7.0.16-1.el8.x86_64.rpm

仅仅适用于Anolis8.10环境下。

2. 安装

1	yum localinstall *.rpm

3. 配置agent并启用

1	vim /etc/zabbix/zabbix_agentd.conf

两处地方修改为zabbix-server的IP，Hostname改为合适的名字

保存退出后重启服务

1	systemctl restart zabbix-agent.service

确认正常运行中

4. server端连接agent

登录server端后点击：

等待连接变为绿色即可

附：

离线包下载方法

导入 Zabbix 官方仓库

1	dnf install -y https://repo.zabbix.com/zabbix/7.0/rhel/8/x86_64/zabbix-release-7.0-1.el8.noarch.rpm

下载到本地

1	dnf download --resolve --destdir=./ zabbix-agent

开放agent端口

1
2
3

# 添加规则（在 Agent 所在机器上）
sudo firewall-cmd --permanent --add-port=10050/tcp
sudo firewall-cmd --reload

监控宿主机

因为server端是容器起的，在宿主机安装好了agent之后的server IP需要填容器IP

宿主机 IP（如 192.168.1.100）默认不直接路由到容器。

1 2	Server=172.17.0.4 ServerActive=172.17.0.4