Zabbix 6.4 分布式企业级性能监控平台#

1
Zabbix Server 核心服务端 部署
2
官网：https://www.zabbix.com/cn
3
     https://www.zabbix.com/cn/download?zabbix=7.2&os_distribution=rocky_linux&os_version=9&components=server_frontend_agent&db=mysql&ws=nginx

一、Zabbix 功能简介#

1
针对整个IT架构各个关键设备运行状态的实时监控与及时预警，是运维管理中的一个极其重要的工作环节，及时感知性能瓶颈与故障，本 身就是自动化运维工作的一个组成部分。
2

3
Zabbix 作为一个企业级的性能监控系统，可以采用多种方式来获取关键设备的运行状态数据，例如：网络设备状态、主机硬件状态、系统 运行状态、程序运行状态等等，因此得到了企业的广泛赞誉与生产应用。
4

5
Zabbix 功能十分强大，其分布式平台管理架构，无论是对于拥有少量服务器的中小型企业，还是拥有大量服务器的大型企业而言，在经过 适当的配置之后，均可在IT基础设施的性能监控方面发挥重要作用，世界上许多不同规模的组织都采用Zabbix作为主要的监控平台。
6

7
Zabbix 支持主动轮询和被动捕获的方式，来获取IT基础设施的性能状态数据，并可配置使用多种通知机制，来及时予以故障报警，从而有 助于运维工程师的快速响应并排查故障，Zabbix Web前端还为我们提供了出色的可视化数据展示与数据报告的功能。
8

9
Zabbix 遵循 GPL 通用公共许可证，作为一个开源软件项目，它的源代码可以免费分发、公共使用。
10

11
现在依据官方文档，将其功能特性介绍如下：

二、部署Zabbix Server 6.4 核心服务器#

1
Zabbix 作为一个开源的分布式性能监控管理平台，在其管理架构中，主要分为<Zabbix Server 服务器>、<Zabbix Proxy 代理服务器>、<Zabbix 各类客户端> 这三种角色。
2

3
<Zabbix Server 服务器>是整个 Zabbix 性能监控管理平台的核心，本章将指导大家安装部署<Zabbix Server 6.4 核心服务器>。

1. 环境说明：#

1
★ 本次部署，采用：松耦合方式，尽可能独立部署<Zabbix Server 服务器>的各个功能组件，从而方便我们在生产中予以集群化部署。

节点	角色	IP 地址	操作系统：	硬件规格
rocky-9-16	MySQL 数据库(版本：8.0)	192.168.168.16/24	Rocky Linux 9	1 vCPU、2GB 内存
rocky-9-17	Nginx + PHP Web 前端	192.168.168.17/24	Rocky Linux 9	1 vCPU、2GB 内存
rocky-9-18	Zabbix Server 核心服务(版本：6.4)	192.168.168.18/24	Rocky Linux 9	1 vCPU、2GB 内存

2. 安装部署：MySQL数据库#

1
##
2
## 安装：MySQL 数据库，并创建<zabbix 用户数据库>
3
##

1
    [root@Rocky-9-16 ~]# dnf install -y mysql-server mysql
2
    [root@Rocky-9-16 ~]# systemctl enable mysqld
3
    [root@Rocky-9-16 ~]# systemctl restart mysqld
4
    [root@Rocky-9-16 ~]# mysqladmin -uroot password 'a123456!'
5

6
    [root@Rocky-9-16 ~]# mysql -uroot -p'a123456!' <<EOF
7
    create database if not exists zabbix character set utf8mb4 collate utf8mb4_bin;
8
    create user if not exists root@'%' identified by 'a123456!';
9
    grant all privileges on *.* to root@'%';
10
    create user if not exists zabbix@localhost identified by 'a123456!';
11
    grant all privileges on zabbix.* to zabbix@localhost;
12
    create user if not exists zabbix@'%' identified by 'a123456!';
13
    grant all privileges on zabbix.* to zabbix@'%';
14
    set global log_bin_trust_function_creators = 1;     ## 在<zabbix 用户数据库>导入数据之前，允许：<非特权用户>创建<存储函数>
15
    EOF
16

17
    [root@Rocky-9-16 ~]# firewall-cmd --permanent --add-port=3306/tcp
18
    [root@Rocky-9-16 ~]# firewall-cmd --reload

3. 安装部署：Nginx Web 前端#

1
##
2
## (1) 禁用：<EPEL 源>中的<Zabbix 软件包>
3
##

1
    [root@Rocky-9-17 ~]# vi /etc/yum.repos.d/ustc_epel_9.repo     ## 这是：一个国内的 EPEL YUM 镜像源
2
    [epel]
3
    name=Extra Packages for Enterprise Linux $releasever - $basearch
4
    baseurl=https://mirrors.ustc.edu.cn/epel/$releasever//Everything/$basearch    #可以使用阿里云平替
5
    failovermethod=priority
6
    enabled=1
7
    gpgcheck=0
8
    excludepkgs=zabbix*

1
##
2
## (2) 获取：<Zabbix 软件包>的<repo 源配置文件>
3
##

1
    [root@Rocky-9-17 ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
2
    [root@Rocky-9-17 ~]# yum clean all
3
    [root@Rocky-9-17 ~]# yum makecache

1
##
2
## (3) 安装：<Nginx Web 前端>
3
##

1
    [root@Rocky-9-17 ~]# dnf install -y zabbix-web-mysql zabbix-nginx-conf

1
##
2
## (4) 针对<Nginx Web 前端>配置：侦听端口、虚拟主机名称
3
##

1
    [root@Rocky-9-17 ~]# vim /etc/nginx/conf.d/zabbix.conf
2
    ......
3
    listen 80;
4
    server_name zabbix.test.cn;
5
    root /usr/share/zabbix;
6
    index index.php;
7
    ......

1
##
2
## (5) 配置：<Nginx Web 前端>的<PHP 配置文件>，设置正确的<时区>
3
##

1
    [root@Rocky-9-17 ~]# vim /etc/php-fpm.d/zabbix.conf
2
    [zabbix]
3
    user = nginx
4
    group = nginx
5
    listen = /run/php-fpm/zabbix.sock
6
    listen.acl_users = apache,nginx
7
    listen.allowed_clients = 127.0.0.1
8
    ... ...
9
    php_value[date.timezone] = Asia/Shanghai

1
##
2
## (6) 授予：<nginx 用户>针对</etc/zabbix/web 目录>具备<写入权限>，因为在<Web 安装向导>中，需要自定生成<配置文件>
3
##

1
    [root@Rocky-9-17 ~]# setfacl -m u:nginx:rwx /etc/zabbix/web/

1
##
2
## (7) 启动：Nginx 服务进程、php-fpm 服务进程
3
##

1
    [root@Rocky-9-17 ~]# systemctl enable nginx php-fpm
2
    [root@Rocky-9-17 ~]# systemctl restart nginx php-fpm
3
    [root@Rocky-9-17 ~]# firewall-cmd --permanent --zone=public --add-port=80/tcp
4
    [root@Rocky-9-17 ~]# firewall-cmd --reload
5
    ## 禁用：SElinux
6
    if ! [[ $(getenforce) == "Disabled" ]]; then
7
        sed -r -i 's/^\s*SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
8
        reboot
9
    fi

1
##
2
## (8) 添加：可视化的<中文字体>支持
3
##
4
##
5
## ① win+r 搜索：fonts，从而打开 Windows 的<Fonts 目录>
6
##
7
##
8
## ② 挑选：simfang.ttf 字体文件，并将其上传到 /usr/share/zabbix/assets/fonts 目录
9
##

## ## ③ 挑选：simfang.ttf 字体文件，并将其上传到 /usr/share/zabbix/assets/fonts 目录 ## ## ## ④ 修改：/usr/share/zabbix/include/defines.inc.php 配置文件 ##

1
    [root@Rocky-9-17 ~]# vim /usr/share/zabbix/include/defines.inc.php
2
    ......
3
    define('ZBX_GRAPH_FONT_NAME', 'simfang'); // font file name
4
    ......

4. 安装部署：Zabbix Server 核心服务器#

1
##
2
## (1) 禁用：EPEL 源中的 Zabbix
3
##

1
    [root@Rocky-9-18 ~]# vim /etc/yum.repos.d/ustc_epel_9.repo         ## 这是：一个国内的 EPEL YUM 镜像源
2
    [epel]
3
    name=Extra Packages for Enterprise Linux $releasever - $basearch
4
    baseurl=https://mirrors.ustc.edu.cn/epel/$releasever//Everything/$basearch
5
    failovermethod=priority
6
    enabled=1
7
    gpgcheck=0
8
    excludepkgs=zabbix*

1
##
2
## (2) 获取：<Zabbix 软件包>的<repo 源配置文件>
3
##

1
    [root@Rocky-9-18 ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
2
    [root@Rocky-9-18 ~]# yum clean all
3
    [root@Rocky-9-18 ~]# yum makecache

1
##
2
## (3) 安装：Zabbix Server 核心服务、Agent 客户端代理
3
##

1
    [root@Rocky-9-18 ~]# dnf install -y zabbix-server-mysql zabbix-sql-scripts zabbix-selinux-policy zabbix-agent

1
##
2
## (4) 针对 MySQL 数据库，导入：初始架构和数据
3
##

1
    [root@Rocky-9-18 ~]# dnf install -y mysql
2
    [root@Rocky-9-18 ~]# zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | \
3
    mysql --default-character-set=utf8mb4 -uzabbix -p'a123456!' -h 192.168.168.16 zabbix

1
##
2
## (5) 在导入数据库架构之后，针对 MySQL 数据库，禁用：log_bin_trust_function_creators 选项。
3
##

1
    [root@Rocky-9-18 ~]# mysql -uroot -p'a123456!' -h 192.168.168.16 <<EOF
2
    set global log_bin_trust_function_creators = 0;     ## 在<zabbix 用户数据库>导入数据之后，禁止：<非特权用户>创建<存储函数>
3
    use zabbix;
4
    show tables;
5
    EOF

1
##
2
## (6) 针对 Zabbix Server 核心服务，配置：数据库连接参数
3
##

1
    [root@Rocky-9-18 ~]# vim /etc/zabbix/zabbix_server.conf
2
    ......
3
    DBHost=192.168.168.16
4
    DBName=zabbix
5
    DBUser=zabbix
6
    DBPassword=a123456!
7
    DBPort=3306
8
    ......

1
    [root@Rocky-9-18 ~]# cat /etc/zabbix/zabbix_server.conf | grep -vE "^\s*(#|$)"
2
    LogFile=/var/log/zabbix/zabbix_server.log
3
    LogFileSize=0
4
    PidFile=/run/zabbix/zabbix_server.pid
5
    SocketDir=/run/zabbix
6
    DBHost=192.168.168.16
7
    DBName=zabbix
8
    DBUser=zabbix
9
    DBPassword=a123456!
10
    DBPort=3306
11
    SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
12
    Timeout=4
13
    AlertScriptsPath=/usr/lib/zabbix/alertscripts
14
    ExternalScripts=/usr/lib/zabbix/externalscripts
15
    LogSlowQueries=3000
16
    StatsAllowedIP=127.0.0.1

1
##
2
## (7) 启动：Zabbix Server 服务进程、Agent 客户端代理
3
##

1
    [root@Rocky-9-18 ~]# systemctl enable zabbix-server zabbix-agent
2
    [root@Rocky-9-18 ~]# systemctl restart zabbix-server zabbix-agent
3
    [root@Rocky-9-18 ~]# firewall-cmd --permanent --zone=public --add-port=10050/tcp ## 防火墙放行：<Zabbix Agent 客户端代理>的<侦听端口>
4
    [root@Rocky-9-18 ~]# firewall-cmd --permanent --zone=public --add-port=10051/tcp ## 防火墙放行：<Zabbix Server 核心服务>的<侦听端口>
5
    [root@Rocky-9-18 ~]# firewall-cmd --reload
6
    ## 禁用：SElinux
7
    if ! [[ $(getenforce) == "Disabled" ]]; then
8
        sed -r -i 's/^\s*SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
9
        reboot
10
    fi

5. 执行：Web安装向导#

1
http://zabbix.test.cn

1
##
2
## Web 登录：
3
##     管理员：Admin
4
##     默认口令：zabbix
5
##

1
##
2
## 在<Web 安装向导>执行完成之后，需编辑：<Nginx Web 前端>的</etc/zabbix/web/zabbix.conf.php>
3
## 明确指定：$ZBX_SERVER = '192.168.168.18'; ## 这是：Zabbix Server 的 IP 地址
4
## $ZBX_SERVER_PORT = '10051'; ## 这是：Zabbix Server 的侦听端口
5
## 从而访问：分离式部署的<Zabbix Server 核心服务节点>
6
## 否则：将会默认访问<localhost>
7
##

1
    vi /etc/zabbix/web/zabbix.conf.php
2
    ......
3
    $ZBX_SERVER = '192.168.168.18';
4
    $ZBX_SERVER_PORT = '10051';
5
    $ZBX_SERVER_NAME = 'zabbix_server';
6
    ......

1
##
2
## 刷新页面
3
##

1
##
2
## 修改：<Zabbix Web 前端>的<Admin 管理员密码>
3
##

6. 查看日志：zabbix-server.log 日志#

1
cat /var/log/zabbix/zabbix_server.log

★ Zabbix -1-作业#

1. 采用松耦合的方式#

采用松耦合的方式，来部署 Zabbix Server 核心服务、Nginx Web 前端、MySQL 数据库

1
[root@Rocky-9-16 ~]# dnf install -y mysql-server mysql
2
[root@Rocky-9-16 ~]# systemctl enable mysqld
3
Created symlink /etc/systemd/system/multi-user.target.wants/mysqld.service → /usr/lib/systemd/system/mysqld.service.
4
[root@Rocky-9-16 ~]# systemctl restart mysqld
5
[root@Rocky-9-16 ~]# ss -tunlp | grep mysql
6
tcp   LISTEN 0      70                 *:33060            *:*    users:(("mysqld",pid=38456,fd=31))
7
tcp   LISTEN 0      151                *:3306             *:*    users:(("mysqld",pid=38456,fd=33))
8

9
[root@Rocky-9-16 ~]# mysqladmin -uroot password 'a123456!'
10
mysqladmin: [Warning] Using a password on the command line interface can be insecure.
11
Warning: Since password will be sent to server in plain text, use ssl connection to ensure password safety.
12

13
[root@Rocky-9-16 ~]# mysql -uroot -p"a123456!" -e "show databases;"
14
mysql: [Warning] Using a password on the command line interface can be insecure.
15
+--------------------+
16
| Database           |
17
+--------------------+
18
| information_schema |
19
| mysql              |
20
| performance_schema |
21
| sys                |
22
+--------------------+
23
=
24
[root@Rocky-9-16 ~]# mysql -uroot -p'a123456!' <<EOF
25
> create database if not exists zabbix character set utf8mb4 collate utf8mb4_bin;
26
> create user if not exists root@'%' identified by 'a123456!';
27
> grant all privileges on *.* to root@'%';
28
> create user if not exists zabbix@localhost identified by 'a123456!';
29
> grant all privileges on zabbix.* to zabbix@localhost;
30
> create user if not exists zabbix@'%' identified by 'a123456!';
31
> grant all privileges on zabbix.* to zabbix@'%';
32
> set global log_bin_trust_function_creators = 1;
33
> EOF
34
mysql: [Warning] Using a password on the command line interface can be insecure.
35

36
[root@Rocky-9-16 ~]#
37
[root@Rocky-9-16 ~]# systemctl status firewalld.service
38
○ firewalld.service - firewalld - dynamic firewall daemon
39
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; preset: enabled)
40
     Active: inactive (dead)
41
       Docs: man:firewalld(1)
42
[root@Rocky-9-16 ~]#
43

44

45

46

47
[root@Rocky-9-17 ~]# vim /etc/yum.repos.d/ustc_epel_9.repo
48
[root@Rocky-9-17 ~]# cat /etc/yum.repos.d/ustc_epel_9.repo
49
[epel]
50
name=Extra Packages for Enterprise Linux $releasever - $basearch
51
baseurl=https://mirrors.aliyun.com/epel/$releasever//Everything/$basearch
52
failovermethod=priority
53
enabled=1
54
gpgcheck=0
55
excludepkgs=zabbix*
56

57
[root@Rocky-9-17 ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
58
获取https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
59
警告：/var/tmp/rpm-tmp.J9AvCl: 头V4 RSA/SHA512 Signature, 密钥 ID 08efa7dd: NOKEY
60
Verifying...                          ################################# [100%]
61
准备中...                          ################################# [100%]
62
正在升级/安装...
63
   1:zabbix-release-6.0-4.el9         ################################# [100%]
64

65
[root@Rocky-9-17 ~]# dnf clean all && dnf makecache
66
33 个文件已删除
67
Rocky Linux 9 - BaseOS                                                                                                                                                       1.1 MB/s | 9.9 MB     00:09
68
Rocky Linux 9 - AppStream                                                                                                                                                     39 kB/s |  14 MB     06:06
69
Rocky Linux 9 - Extras                                                                                                                                                       140  B/s |  17 kB     02:02
70
Extra Packages for Enterprise Linux 9 - x86_64                                                                                                                               2.4 MB/s |  20 MB     00:08
71
Zabbix Official Repository - x86_64                                                                                                                                           72 kB/s | 566 kB     00:07
72
Zabbix Official Repository (non-supported) - x86_64                                                                                                                          661  B/s | 1.1 kB     00:01
73
Zabbix Official Repository (Agent2 Plugins) - x86_64                                                                                                                         102  B/s | 1.6 kB     00:16
74
元数据缓存已建立。
75

76
[root@Rocky-9-17 ~]#
77
[root@Rocky-9-17 ~]# dnf install -y zabbix-web-mysql zabbix-nginx-conf
78
[root@Rocky-9-17 ~]# vim /etc/nginx/conf.d/zabbix.conf
79
[root@Rocky-9-17 ~]# head -n9 /etc/nginx/conf.d/zabbix.conf | grep -vE "^\s*(#|$)"
80
server {
81
        listen          80;
82
        server_name     zabbix.test.cn;
83
        root    /usr/share/zabbix;
84
        index   index.php;
85
        location = /favicon.ico {
86

87
[root@Rocky-9-17 ~]# vim /etc/php-fpm.d/zabbix.conf
88
[root@Rocky-9-17 ~]# cat /etc/php-fpm.d/zabbix.conf | grep -E "user|group|listen|date"
89
user = nginx
90
group = nginx
91
listen = /run/php-fpm/zabbix.sock
92
listen.acl_users = apache,nginx
93
listen.allowed_clients = 127.0.0.1
94
php_value[date.timezone] = Asia/Shanghai
95

96
[root@Rocky-9-17 ~]# setfacl -m u:nginx:rwx /etc/zabbix/web/
97
[root@Rocky-9-17 ~]# ls -ald /etc/zabbix/web/
98
drwxrwxr-x+ 2 apache apache 33  2月  5 14:49 /etc/zabbix/web/
99

100
[root@Rocky-9-17 ~]# systemctl status firewalld.service
101
○ firewalld.service - firewalld - dynamic firewall daemon
102
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; preset: enabled)
103
     Active: inactive (dead)
104
       Docs: man:firewalld(1)
105

106
[root@Rocky-9-17 ~]# getenforce
107
Disabled
108
[root@Rocky-9-17 ~]# cat /etc/selinux/config | grep SELINUX
109
# SELINUX= can take one of these three values:
110
# NOTE: Up to RHEL 8 release included, SELINUX=disabled would also
111
#SELINUX=enforcing
112
SELINUX=disabled
113
# SELINUXTYPE= can take one of these three values:
114
SELINUXTYPE=targeted
115

116
[root@Rocky-9-17 ~]#
117
[root@Rocky-9-17 ~]# systemctl enable nginx php-fpm --now
118
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
119
Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.
120
[root@Rocky-9-17 ~]# ss -tunlp
121
Netid  State   Recv-Q  Send-Q   Local Address:Port   Peer Address:Port Process
122
udp    UNCONN  0       0            127.0.0.1:323         0.0.0.0:*     users:(("chronyd",pid=763,fd=5))
123
udp    UNCONN  0       0                [::1]:323            [::]:*     users:(("chronyd",pid=763,fd=6))
124
tcp    LISTEN  0       511            0.0.0.0:80          0.0.0.0:*     users:(("nginx",pid=39202,fd=6),("nginx",pid=39201,fd=6),("nginx",pid=39200,fd=6),("nginx",pid=39199,fd=6),("nginx",pid=39198,fd=6))
125
tcp    LISTEN  0       128            0.0.0.0:22          0.0.0.0:*     users:(("sshd",pid=783,fd=3))
126
tcp    LISTEN  0       511               [::]:80             [::]:*     users:(("nginx",pid=39202,fd=7),("nginx",pid=39201,fd=7),("nginx",pid=39200,fd=7),("nginx",pid=39199,fd=7),("nginx",pid=39198,fd=7))
127
tcp    LISTEN  0       128               [::]:22             [::]:*     users:(("sshd",pid=783,fd=4))
128

129
[root@Rocky-9-17 ~]# systemctl status nginx.service php-fpm.service
130
● nginx.service - The nginx HTTP and reverse proxy server
131
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: disabled)
132
    Drop-In: /usr/lib/systemd/system/nginx.service.d
133
             └─php-fpm.conf
134
     Active: active (running) since Thu 2026-02-05 15:04:15 CST; 42s ago
135
    Process: 39194 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)
136
    Process: 39196 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=0/SUCCESS)
137
    Process: 39197 ExecStart=/usr/sbin/nginx (code=exited, status=0/SUCCESS)
138
   Main PID: 39198 (nginx)
139
      Tasks: 5 (limit: 4178)
140
     Memory: 4.7M (peak: 5.0M)
141
        CPU: 42ms
142
     CGroup: /system.slice/nginx.service
143
             ├─39198 "nginx: master process /usr/sbin/nginx"
144
             ├─39199 "nginx: worker process"
145
             ├─39200 "nginx: worker process"
146
             ├─39201 "nginx: worker process"
147
             └─39202 "nginx: worker process"
148

149
2月 05 15:04:15 Rocky-9-17 systemd[1]: Starting The nginx HTTP and reverse proxy server...
150
2月 05 15:04:15 Rocky-9-17 nginx[39196]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
151
2月 05 15:04:15 Rocky-9-17 nginx[39196]: nginx: configuration file /etc/nginx/nginx.conf test is successful
152
2月 05 15:04:15 Rocky-9-17 systemd[1]: Started The nginx HTTP and reverse proxy server.
153

154
● php-fpm.service - The PHP FastCGI Process Manager
155
     Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; preset: disabled)
156
     Active: active (running) since Thu 2026-02-05 15:04:15 CST; 42s ago
157
   Main PID: 39195 (php-fpm)
158
     Status: "Processes active: 0, idle: 10, Requests: 0, slow: 0, Traffic: 0req/sec"
159
      Tasks: 11 (limit: 4178)
160
     Memory: 18.5M (peak: 19.0M)
161
        CPU: 95ms
162
     CGroup: /system.slice/php-fpm.service
163
             ├─39195 "php-fpm: master process (/etc/php-fpm.conf)"
164
             ├─39203 "php-fpm: pool www"
165
             ├─39204 "php-fpm: pool www"
166
             ├─39205 "php-fpm: pool www"
167
             ├─39206 "php-fpm: pool www"
168
             ├─39207 "php-fpm: pool www"
169
             ├─39208 "php-fpm: pool zabbix"
170
             ├─39209 "php-fpm: pool zabbix"
171
             ├─39210 "php-fpm: pool zabbix"
172
             ├─39211 "php-fpm: pool zabbix"
173
             └─39212 "php-fpm: pool zabbix"
174

175
2月 05 15:04:15 Rocky-9-17 systemd[1]: Starting The PHP FastCGI Process Manager...
176
2月 05 15:04:15 Rocky-9-17 systemd[1]: Started The PHP FastCGI Process Manager.
177
[root@Rocky-9-17 ~]#

1
[root@Rocky-9-17 ~]# chmod 777 simfang.ttf
2
[root@Rocky-9-17 ~]# mv simfang.ttf /usr/share/zabbix/assets/fonts/
3
[root@Rocky-9-17 ~]# vim +88 /usr/share/zabbix/include/defines.inc.php
4
[root@Rocky-9-17 ~]# grep -n ZBX_GRAPH_FONT_NAME /usr/share/zabbix/include/defines.inc.php
5
88://define('ZBX_GRAPH_FONT_NAME',              'graphfont'); // font file name
6
89:define('ZBX_GRAPH_FONT_NAME',                'simfang'); // font file name
7
[root@Rocky-9-17 ~]# systemctl restart nginx.service php-fpm.service
8

9

10

11

12
[root@Rocky-9-18 ~]# vim /etc/yum.repos.d/ustc_epel_9.repo
13
[root@Rocky-9-18 ~]# cat /etc/yum.repos.d/ustc_epel_9.repo
14
[epel]
15
name=Extra Packages for Enterprise Linux $releasever - $basearch
16
baseurl=https://mirrors.aliyun.com/epel/$releasever//Everything/$basearch
17
failovermethod=priority
18
enabled=1
19
gpgcheck=0
20
excludepkgs=zabbix*
21

22
[root@Rocky-9-18 ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
23
获取https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
24
警告：/var/tmp/rpm-tmp.hosafe: 头V4 RSA/SHA512 Signature, 密钥 ID 08efa7dd: NOKEY
25
Verifying...                          ################################# [100%]
26
准备中...                          ################################# [100%]
27
正在升级/安装...
28
   1:zabbix-release-6.0-4.el9         ################################# [100%]
29

30
[root@Rocky-9-18 ~]# dnf clean all && dnf makecache
31
25 个文件已删除
32
Rocky Linux 9 - BaseOS                                                                                                                                                        98 kB/s | 9.9 MB     01:43
33
Rocky Linux 9 - AppStream                                                                                                                                                    904 kB/s |  14 MB     00:15
34
Rocky Linux 9 - Extras                                                                                                                                                       493  B/s |  17 kB     00:34
35
Extra Packages for Enterprise Linux 9 - x86_64                                                                                                                               2.3 MB/s |  20 MB     00:08
36
元数据缓存已建立。
37

38
[root@Rocky-9-18 ~]#
39
[root@Rocky-9-18 ~]# dnf install -y zabbix-server-mysql zabbix-sql-scripts zabbix-selinux-policy zabbix-agent
40
上次元数据过期检查：0:37:19 前，执行于 2026年02月05日 星期四 15时03分56秒。
41
软件包 zabbix-server-mysql-6.0.43-release1.el9.x86_64 已安装。
42
软件包 zabbix-sql-scripts-6.0.43-release1.el9.noarch 已安装。
43
软件包 zabbix-selinux-policy-6.0.43-release1.el9.x86_64 已安装。
44
软件包 zabbix-agent-6.0.43-release1.el9.x86_64 已安装。
45
依赖关系解决。
46
无需任何处理。
47
完毕！
48

49
[root@Rocky-9-18 ~]# dnf install -y mysql
50
上次元数据过期检查：0:18:47 前，执行于 2026年02月05日 星期四 15时48分37秒。
51
软件包 mysql-8.0.44-1.el9_7.x86_64 已安装。
52
依赖关系解决。
53
无需任何处理。
54
完毕！
55

56
[root@Rocky-9-18 ~]# #初始架构和数据
57
[root@Rocky-9-18 ~]# zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | mysql --default-character-set=utf8mb4 -uzabbix -p'a123456!' -h 192.168.88.11 zabbix
58
mysql: [Warning] Using a password on the command line interface can be insecure.
59

60
[root@Rocky-9-18 ~]# #禁用：log_bin_trust_function_creators 选项。
61
[root@Rocky-9-18 ~]#
62
[root@Rocky-9-18 ~]# mysql -uroot -p'a123456!' -h 192.168.88.11 <<EOF
63
> set global log_bin_trust_function_creators = 0;
64
> use zabbix;
65
> show tables;
66
> EOF
67
mysql: [Warning] Using a password on the command line interface can be insecure.
68
Tables_in_zabbix
69
acknowledges
70
actions
71
alerts
72
auditlog
73
......
74
widget
75
widget_field
76

77
[root@Rocky-9-18 ~]# #配置：数据库连接参数
78
[root@Rocky-9-18 ~]#
79
[root@Rocky-9-18 ~]# vim /etc/zabbix/zabbix_server.conf
80
[root@Rocky-9-18 ~]# cat /etc/zabbix/zabbix_server.conf | grep -vE "^\s*(#|$)"
81
LogFile=/var/log/zabbix/zabbix_server.log
82
LogFileSize=0
83
PidFile=/run/zabbix/zabbix_server.pid
84
SocketDir=/run/zabbix
85
DBHost=192.168.88.11
86
DBName=zabbix
87
DBUser=zabbix
88
DBPassword=a123456!
89
DBPort=3306
90
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
91
Timeout=4
92
AlertScriptsPath=/usr/lib/zabbix/alertscripts
93
ExternalScripts=/usr/lib/zabbix/externalscripts
94
LogSlowQueries=3000
95
StatsAllowedIP=127.0.0.1
96
[root@Rocky-9-18 ~]#
97
[root@Rocky-9-18 ~]# systemctl enable zabbix-server zabbix-agent
98
Created symlink /etc/systemd/system/multi-user.target.wants/zabbix-server.service → /usr/lib/systemd/system/zabbix-server.service.
99
Created symlink /etc/systemd/system/multi-user.target.wants/zabbix-agent.service → /usr/lib/systemd/system/zabbix-agent.service.
100
[root@Rocky-9-18 ~]# systemctl restart zabbix-server zabbix-agent
101
[root@Rocky-9-18 ~]#

1
[root@Rocky-9-17 ~]# vim /etc/zabbix/web/zabbix.conf.php
2
[root@Rocky-9-17 ~]# grep ZBX_SE /etc/zabbix/web/zabbix.conf.php
3
// $ZBX_SERVER                  = '';
4
// $ZBX_SERVER_PORT             = '';
5
$ZBX_SERVER                     = '192.168.88.13';
6
$ZBX_SERVER_PORT                = '10051';
7
$ZBX_SERVER_NAME                = 'Zabbix_Server';
8
[root@Rocky-9-17 ~]#

2. 采用紧耦合的方式#

采用紧耦合的方式，来部署 Zabbix Server 核心服务、Nginx Web 前端、MySQL 数据库

1
[root@zabbix ~]# systemctl status firewalld.service
2
○ firewalld.service - firewalld - dynamic firewall daemon
3
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; preset: enabled)
4
     Active: inactive (dead)
5
       Docs: man:firewalld(1)
6

7
[root@zabbix ~]# getenforce
8
Disabled
9
[root@zabbix ~]# cat /etc/selinux/config | grep SELINUX
10
# SELINUX= can take one of these three values:
11
# NOTE: Up to RHEL 8 release included, SELINUX=disabled would also
12
#SELINUX=enforcing
13
SELINUX=disabled
14
# SELINUXTYPE= can take one of these three values:
15
SELINUXTYPE=targeted
16

17
[root@zabbix ~]# vim /etc/yum.repos.d/ustc_epel_9.repo
18
[root@zabbix ~]# cat /etc/yum.repos.d/ustc_epel_9.repo
19
[epel]
20
name=Extra Packages for Enterprise Linux $releasever - $basearch
21
baseurl=https://mirrors.aliyun.com/epel/$releasever//Everything/$basearch
22
failovermethod=priority
23
enabled=1
24
gpgcheck=0
25
excludepkgs=zabbix*
26

27
[root@Rocky-9-17 ~]# dnf clean all && dnf makecache
28
33 个文件已删除
29
Rocky Linux 9 - BaseOS                                                                                                                                                       1.1 MB/s | 9.9 MB     00:09
30
Rocky Linux 9 - AppStream                                                                                                                                                     39 kB/s |  14 MB     06:06
31
Rocky Linux 9 - Extras                                                                                                                                                       140  B/s |  17 kB     02:02
32
Extra Packages for Enterprise Linux 9 - x86_64                                                                                                                               2.4 MB/s |  20 MB     00:08
33
Zabbix Official Repository - x86_64                                                                                                                                           72 kB/s | 566 kB     00:07
34
Zabbix Official Repository (non-supported) - x86_64                                                                                                                          661  B/s | 1.1 kB     00:01
35
Zabbix Official Repository (Agent2 Plugins) - x86_64                                                                                                                         102  B/s | 1.6 kB     00:16
36
元数据缓存已建立。
37

38
#[root@zabbix ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/8/x86_64/zabbix-release-6.0-4.el8.noarch.rpm     //适配 Rocky 8 的 Zabbix 6.0 源
39
[root@zabbix ~]# rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm     //适配 Rocky 9 的 Zabbix 6.0 源
40
获取https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm
41
警告：/var/tmp/rpm-tmp.jiGmYA: 头V4 RSA/SHA512 Signature, 密钥 ID 08efa7dd: NOKEY
42
Verifying...                          ################################# [100%]
43
准备中...                          ################################# [100%]
44
正在升级/安装...
45
   1:zabbix-release-6.0-4.el9         ################################# [100%]
46

47
[root@zabbix ~]# dnf install -y mysql-server mysql
48
Rocky Linux 9 - BaseOS                                                                                                                                                        94  B/s | 4.3 kB     00:46
49
Rocky Linux 9 - AppStream                                                                                                                                                    106  B/s | 4.8 kB     00:46
50
Rocky Linux 9 - Extras                                                                                                                                                        68  B/s | 3.1 kB     00:46
51
依赖关系解决。
52
=====================================
53
已安装:
54
  mariadb-connector-c-config-3.2.6-1.el9_0.noarch    mecab-0.996-3.el9.4.x86_64            mysql-8.0.44-1.el9_7.x86_64           mysql-common-8.0.44-1.el9_7.x86_64    mysql-errmsg-8.0.44-1.el9_7.x86_64
55
  mysql-selinux-1.0.14-1.el9_6.noarch                mysql-server-8.0.44-1.el9_7.x86_64    protobuf-lite-3.14.0-16.el9.x86_64
56

57
完毕！
58

59
[root@zabbix ~]# systemctl enable mysqld --now
60
Created symlink /etc/systemd/system/multi-user.target.wants/mysqld.service → /usr/lib/systemd/system/mysqld.service.
61

62
[root@zabbix ~]# ss -tunlp | grep mysql
63
tcp   LISTEN 0      151                *:3306             *:*    users:(("mysqld",pid=31681,fd=33))
64
tcp   LISTEN 0      70                 *:33060            *:*    users:(("mysqld",pid=31681,fd=31))
65

66
[root@zabbix ~]# mysqladmin -uroot password 'a123456!'
67
mysqladmin: [Warning] Using a password on the command line interface can be insecure.
68
Warning: Since password will be sent to server in plain text, use ssl connection to ensure password safety.
69

70
[root@zabbix ~]# mysql -uroot -p"a123456!" -e "show databases;"
71
mysql: [Warning] Using a password on the command line interface can be insecure.
72
+--------------------+
73
| Database           |
74
+--------------------+
75
| information_schema |
76
| mysql              |
77
| performance_schema |
78
| sys                |
79
+--------------------+
80

81
[root@zabbix ~]# mysql -uroot -p'a123456!' <<EOF
82
> create database if not exists zabbix character set utf8mb4 collate utf8mb4_bin;
83
> create user if not exists root@'%' identified by 'a123456!';
84
> grant all privileges on *.* to root@'%';
85
> create user if not exists zabbix@localhost identified by 'a123456!';
86
> grant all privileges on zabbix.* to zabbix@localhost;
87
> create user if not exists zabbix@'%' identified by 'a123456!';
88
> grant all privileges on zabbix.* to zabbix@'%';
89
> set global log_bin_trust_function_creators = 1;
90
> EOF
91

92

93
[root@zabbix ~]# dnf install -y zabbix-web-mysql zabbix-nginx-conf
94
上次元数据过期检查：0:00:39 前，执行于 2026年02月06日 星期五 09时31分03秒。
95
依赖关系解决。
96
====================================
97
完毕！
98

99

100
[root@zabbix ~]# vim /etc/nginx/conf.d/zabbix.conf
101
[root@zabbix ~]# head -n9 /etc/nginx/conf.d/zabbix.conf | grep -vnE "^\s*(#|$)"
102
1:server {
103
2:        listen          80;
104
3:        server_name     zabbix.test.cn;
105
5:        root    /usr/share/zabbix;
106
7:        index   index.php;
107
9:        location = /favicon.ico {
108

109
[root@zabbix ~]# vim /etc/php-fpm.d/zabbix.conf
110
[root@zabbix ~]# cat /etc/php-fpm.d/zabbix.conf | grep -nE "user|group|listen|date"
111
2:user = nginx
112
3:group = nginx
113
5:listen = /run/php-fpm/zabbix.sock
114
6:listen.acl_users = apache,nginx
115
7:listen.allowed_clients = 127.0.0.1
116
25:php_value[date.timezone] = Asia/Shanghai
117

118
[root@zabbix ~]# setfacl -m u:nginx:rwx /etc/zabbix/web/
119
[root@zabbix ~]# ls -ald /etc/zabbix/web/
120
drwxrwxr-x+ 2 apache apache 33  2月  6 09:32 /etc/zabbix/web/
121
[root@zabbix ~]#

1
[root@zabbix ~]# chmod 777 simfang.ttf
2
[root@zabbix ~]# cp simfang.ttf /usr/share/zabbix/assets/fonts/
3
[root@zabbix ~]# vim +88 /usr/share/zabbix/include/defines.inc.php
4
[root@zabbix ~]# grep -n ZBX_GRAPH_FONT_NAME /usr/share/zabbix/include/defines.inc.php
5
88://define('ZBX_GRAPH_FONT_NAME',              'graphfont'); // font file name
6
89:define('ZBX_GRAPH_FONT_NAME',                'simfang'); // font file name
7

8
[root@zabbix ~]# systemctl enable nginx php-fpm --now
9
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
10
Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service → /usr/lib/systemd/system/php-fpm.service.
11

12
[root@zabbix ~]# systemctl status nginx.service php-fpm.service
13
● nginx.service - The nginx HTTP and reverse proxy server
14
     Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; preset: disabled)
15
    Drop-In: /usr/lib/systemd/system/nginx.service.d
16
             └─php-fpm.conf
17
        ................
18

19

20
[root@zabbix ~]#
21
[root@zabbix ~]# dnf install -y zabbix-server-mysql zabbix-sql-scripts zabbix-selinux-policy zabbix-agent
22
上次元数据过期检查：0:14:19 前，执行于 2026年02月06日 星期五 09时31分03秒。
23
依赖关系解决。
24
==========================
25
   ................
26
  zabbix-sql-scripts-6.0.43-release1.el9.noarch
27
完毕！
28

29

30
[root@zabbix ~]# zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | mysql --default-character-set=utf8mb4 -uzabbix -p'a123456!' zabbix
31
mysql: [Warning] Using a password on the command line interface can be insecure.
32

33
[root@zabbix ~]# mysql -uroot -p'a123456!' <<EOF
34
> set global log_bin_trust_function_creators = 0;
35
> use zabbix;
36
> show tables;
37
> EOF
38

39
................
40
widget_field
41

42
[root@zabbix ~]#
43
[root@zabbix ~]# vim /etc/zabbix/zabbix_server.conf
44
[root@zabbix ~]# cat /etc/zabbix/zabbix_server.conf | grep -vnE "^\s*(#|$)"
45
38:LogFile=/var/log/zabbix/zabbix_server.log
46
49:LogFileSize=0
47
72:PidFile=/run/zabbix/zabbix_server.pid
48
82:SocketDir=/run/zabbix
49
93:DBHost=localhost
50
105:DBName=zabbix
51
121:DBUser=zabbix
52
129:DBPassword=a123456!
53
146:DBPort=3306
54
391:SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
55
515:Timeout=4
56
556:AlertScriptsPath=/usr/lib/zabbix/alertscripts
57
565:ExternalScripts=/usr/lib/zabbix/externalscripts
58
601:LogSlowQueries=3000
59
716:StatsAllowedIP=127.0.0.1
60

61
[root@zabbix ~]# systemctl enable zabbix-server zabbix-agent --now
62
Created symlink /etc/systemd/system/multi-user.target.wants/zabbix-server.service → /usr/lib/systemd/system/zabbix-server.service.
63
Created symlink /etc/systemd/system/multi-user.target.wants/zabbix-agent.service → /usr/lib/systemd/system/zabbix-agent.service.

紧耦合Zabbix_Server安装脚本#

1
#!/bin/bash
2
# Zabbix 6.0 最终完美版 | Rocky Linux 9
3
# 已严格匹配你的所有配置：EPEL、MySQL、Nginx、PHP、Zabbix Server
4

5
# ===================== 固定配置 =====================
6
DB_PASSWORD="a123456!"
7
ZABBIX_DB="zabbix"
8
ZABBIX_USER="zabbix"
9
TIMEZONE="Asia/Shanghai"
10
# ======================================================
11

12
echo -e "\n===== 1. 关闭防火墙 ====="
13
# 停止防火墙
14
if systemctl stop firewalld  ; then
15
    echo "✅ 防火墙 停止成功"
16
else
17
    echo "⚠️ 防火墙 未运行或停止失败"
18
fi
19

20
# 禁用开机自启
21
if systemctl disable firewalld  ; then
22
    echo "✅ 防火墙 开机自启 已禁用"
23
else
24
    echo "⚠️ 防火墙 开机自启 禁用失败/已禁用"
25
fi
26

27

28
# ======================================================
29
echo -e "\n===== 2. 关闭 SELinux ====="
30
# 永久修改配置文件
31
sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
32
if grep -q "SELINUX=disabled" /etc/selinux/config; then
33
    echo "✅ SELinux 配置已永久禁用（重启生效）"
34
else
35
    echo "❌ SELinux 配置修改失败"
36
fi
37

38
# 临时关闭（当前会话）+ 不退出脚本
39
setenforce 0 > /dev/null 2>&1
40
if [ $? -eq 0 ]; then
41
    echo "✅ SELinux 临时关闭成功"
42
else
43
    echo "⚠️ SELinux 已关闭，无需重复操作"
44
fi
45

46

47
# ======================================================
48
echo -e "\n===== 3. 配置阿里云 EPEL 源 ====="
49
# 写入 repo 文件
50
cat > /etc/yum.repos.d/ustc_epel_9.repo <<EOF
51
[epel]
52
name=Extra Packages for Enterprise Linux \$releasever - \$basearch
53
baseurl=https://mirrors.aliyun.com/epel/\$releasever//Everything/\$basearch
54
failovermethod=priority
55
enabled=1
56
gpgcheck=0
57
excludepkgs=zabbix*
58
EOF
59

60
# 检测文件是否创建成功
61
if [ -f /etc/yum.repos.d/ustc_epel_9.repo ]; then
62
    echo "✅ EPEL 源文件创建成功"
63
else
64
    echo "❌ EPEL 源文件创建失败"
65
fi
66

67

68
# ======================================================
69
echo -e "\n===== 4. 安装 Zabbix 官方源 ====="
70
# 安装 Zabbix 源（静默安装 + 失败忽略）
71
rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm --nosignature
72

73
# 检测是否安装成功
74
if rpm -q zabbix-release  ; then
75
    echo "✅ Zabbix 官方源 安装成功"
76
else
77
    echo "⚠️ Zabbix 官方源 已安装或安装失败"
78
fi
79

80

81
# ======================================================
82
echo -e "\n===== 5. 重建缓存 ====="
83

84
# 自动检测并杀死 DNF/YUM 锁进程
85
echo "🔍 检测是否有 DNF/YUM 进程占用..."
86
for pid in $(ps -ef | grep -E "dnf|yum" | grep -v grep | awk '{print $2}'); do
87
    kill -9 $pid >/dev/null 2>&1 && echo "✅ 已强制结束占用进程 PID: $pid"
88
done
89

90
# 强制删除 yum/dnf 锁文件（最关键！）
91
rm -f /var/run/yum.pid /var/run/dnf.pid /var/lib/dnf/rpm.lock
92
rm -f /var/lib/rpm/.rpm.lock
93

94
# 清理并重建缓存（静默执行）
95
dnf clean all && dnf makecache -y
96

97
# 检测是否成功
98
if [ $? -eq 0 ]; then
99
    echo "✅ 缓存重建成功"
100
else
101
    echo "❌ 缓存重建失败"
102
fi
103
# ======================================================
104
echo -e "\n===== 6. 安装 MySQL ====="
105

106
# 安装 MySQL（静默安装）
107
dnf install -y mysql-server mysql
108

109
# 检测安装是否成功
110
if [ $? -eq 0 ]; then
111
    echo "✅ MySQL 安装成功"
112
else
113
    echo "❌ MySQL 安装失败"
114
    exit 1
115
fi
116

117
# 启动并开机自启
118
systemctl enable mysqld --now
119

120
# 检测服务状态
121
if systemctl is-active --quiet mysqld; then
122
    echo "✅ MySQL 服务已启动并开机自启"
123
else
124
    echo "❌ MySQL 服务启动失败"
125
fi
126

127

128
# ======================================================
129
echo -e "\n===== 7. 设置 MySQL 密码 ====="
130

131
# 尝试设置密码（兼容已设置过的情况）
132
mysqladmin -uroot password "$DB_PASSWORD" 2>/dev/null || true
133

134
# 检测是否能正常登录（验证密码有效性）
135
if mysql -uroot -p"$DB_PASSWORD" -e "SELECT 1"  ; then
136
    echo "✅ MySQL 密码设置成功，可正常登录"
137
else
138
    echo "⚠️ MySQL 密码已设置，无需重复操作"
139
fi
140

141
# ======================================================
142
echo -e "\n===== 8. 创建库与授权 ====="
143

144
# 执行数据库初始化（修复了拼写错误）
145
mysql -uroot -p"$DB_PASSWORD"   <<EOF
146
create database if not exists zabbix character set utf8mb4 collate utf8mb4_bin;
147
create user if not exists root@'%' identified by 'a123456!';
148
grant all privileges on *.* to root@'%';
149
create user if not exists zabbix@localhost identified by 'a123456!';
150
grant all privileges on zabbix.* to zabbix@localhost;
151
create user if not exists zabbix@'%' identified by 'a123456!';
152
grant all privileges on zabbix.* to zabbix@'%';
153
set global log_bin_trust_function_creators = 1;
154
FLUSH PRIVILEGES;
155
EOF
156

157
# 检测执行结果
158
if [ $? -eq 0 ]; then
159
    echo "✅ 数据库创建与权限授权成功"
160
else
161
    echo "❌ 数据库初始化失败"
162
    exit 1
163
fi
164

165
# ======================================================
166
echo -e "\n===== 9. 安装 Zabbix WEB + Nginx + PHP ====="
167

168
# 安装
169
dnf install -y zabbix-web-mysql zabbix-nginx-conf
170

171
# 检测安装结果
172
if [ $? -eq 0 ]; then
173
    echo "✅ Zabbix WEB + Nginx + PHP 安装成功"
174
else
175
    echo "❌ 安装失败，请检查网络或YUM源"
176
    exit 1
177
fi
178

179
# ======================================================
180
echo -e "\n===== 10. Nginx 配置 ====="
181

182
# 备份原有配置（不存在也不报错）
183
cp /etc/nginx/conf.d/zabbix.conf /etc/nginx/conf.d/zabbix.conf-backup
184

185
# 写入新配置
186
cat > /etc/nginx/conf.d/zabbix.conf <<'EOF'
187
server {
188
        listen          80;
189
        server_name     zabbix.test.cn;
190

191
        root    /usr/share/zabbix;
192

193
        index   index.php;
194

195
        location = /favicon.ico {
196
                log_not_found   off;
197
        }
198

199
        location / {
200
                try_files       $uri $uri/ =404;
201
        }
202

203
        location /assets {
204
                access_log      off;
205
                expires         10d;
206
        }
207

208
        location ~ /\.ht {
209
                deny            all;
210
        }
211

212
        location ~ /(api\/|conf[^\.]|include|locale) {
213
                deny            all;
214
                return          404;
215
        }
216

217
        location /vendor {
218
                deny            all;
219
                return          404;
220
        }
221

222
        location ~ [^/]\.php(/|$) {
223
                fastcgi_pass    unix:/run/php-fpm/zabbix.sock;
224
                fastcgi_split_path_info ^(.+\.php)(/.+)$;
225
                fastcgi_index   index.php;
226

227
                fastcgi_param   DOCUMENT_ROOT   /usr/share/zabbix;
228
                fastcgi_param   SCRIPT_FILENAME /usr/share/zabbix$fastcgi_script_name;
229
                fastcgi_param   PATH_TRANSLATED /usr/share/zabbix$fastcgi_script_name;
230

231
                include fastcgi_params;
232
                fastcgi_param   QUERY_STRING    $query_string;
233
                fastcgi_param   REQUEST_METHOD  $request_method;
234
                fastcgi_param   CONTENT_TYPE    $content_type;
235
                fastcgi_param   CONTENT_LENGTH  $content_length;
236

237
                fastcgi_intercept_errors        on;
238
                fastcgi_ignore_client_abort     off;
239
                fastcgi_connect_timeout         60;
240
                fastcgi_send_timeout            180;
241
                fastcgi_read_timeout            180;
242
                fastcgi_buffer_size             128k;
243
                fastcgi_buffers                 4 256k;
244
                fastcgi_busy_buffers_size       256k;
245
                fastcgi_temp_file_write_size    256k;
246
        }
247
}
248
EOF
249

250
# 检测配置文件是否生成成功
251
if [ -f /etc/nginx/conf.d/zabbix.conf ]; then
252
    echo "✅ Nginx 配置文件写入成功"
253
else
254
    echo "❌ Nginx 配置文件写入失败"
255
    exit 1
256
fi
257

258

259
# ======================================================
260
echo -e "\n===== 11. PHP-FPM 配置 ====="
261

262
# 备份原有配置（不存在也不报错）
263
cp /etc/php-fpm.d/zabbix.conf /etc/php-fpm.d/zabbix.conf.backup
264

265
# 写入新配置
266
cat > /etc/php-fpm.d/zabbix.conf <<'EOF'
267
[zabbix]
268
user = nginx
269
group = nginx
270

271
listen = /run/php-fpm/zabbix.sock
272
listen.acl_users = apache,nginx
273
listen.allowed_clients = 127.0.0.1
274

275
pm = dynamic
276
pm.max_children = 50
277
pm.start_servers = 5
278
pm.min_spare_servers = 5
279
pm.max_spare_servers = 35
280
pm.max_requests = 200
281

282
php_value[session.save_handler] = files
283
php_value[session.save_path]    = /var/lib/php/session
284

285
php_value[max_execution_time] = 300
286
php_value[memory_limit] = 128M
287
php_value[post_max_size] = 16M
288
php_value[upload_max_filesize] = 2M
289
php_value[max_input_time] = 300
290
php_value[max_input_vars] = 10000
291
php_value[date.timezone] = Asia/Shanghai
292
EOF
293

294
# 检测配置文件是否生成成功
295
if [ -f /etc/php-fpm.d/zabbix.conf ]; then
296
    echo "✅ PHP-FPM 配置文件写入成功"
297
else
298
    echo "❌ PHP-FPM 配置文件写入失败"
299
    exit 1
300
fi
301

302

303
# ======================================================
304
echo -e "\n===== 12. 目录权限 ====="
305

306
# 设置权限（不存在也不报错）
307
setfacl -m u:nginx:rwx /etc/zabbix/web/
308

309
# 验证权限是否设置成功
310
if getfacl /etc/zabbix/web/ | grep -q "nginx:rwx"; then
311
    echo "✅ Nginx 目录权限设置成功"
312
else
313
    echo "⚠️  目录权限无需设置或已存在"
314
fi
315

316
# ======================================================
317
echo -e "\n===== 13. 中文字体（解决图形乱码）====="
318

319
# 下载字体（修复可用地址 + 静默）
320
wget -O /root/simfang.ttf https://gitcode.com/qq_39549344/soft/raw/main/simfang.ttf --no-check-certificate -q
321

322
# 检测是否下载成功
323
if [ -f /root/simfang.ttf ]; then
324
    echo "✅ 中文字体下载成功"
325

326
    # 复制并替换配置
327
    chmod 777 /root/simfang.ttf
328
    cp /root/simfang.ttf /usr/share/zabbix/assets/fonts/
329

330
    # 修改Zabbix字体配置
331
    sed -i '88s/^/\/\//' /usr/share/zabbix/include/defines.inc.php 2>/dev/null
332
    sed -i '88a define('"'"'ZBX_GRAPH_FONT_NAME'"'"',                '"'"'simfang'"'"'); // font file name' /usr/share/zabbix/include/defines.inc.php 2>/dev/null
333

334
    echo "✅ 中文字体已部署到 Zabbix"
335
else
336
    echo "⚠️ 字体下载失败（网络问题），跳过配置"
337
fi
338

339

340
# ======================================================
341
echo -e "\n===== 14. 安装 Zabbix Server & Agent & get ====="
342

343
# 静默安装
344
dnf install -y zabbix-server-mysql zabbix-sql-scripts zabbix-selinux-policy zabbix-agent zabbix-get
345

346
# 检测安装结果
347
if [ $? -eq 0 ]; then
348
    echo "✅ Zabbix Server & Agent 安装成功"
349
else
350
    echo "❌ 安装失败，请检查 YUM 源或网络"
351
    exit 1
352
fi
353

354
# ======================================================
355
echo -e "\n===== 15. 导入数据库 ====="
356

357
# 静默导入数据库
358
zcat /usr/share/zabbix-sql-scripts/mysql/server.sql.gz | mysql --default-character-set=utf8mb4 -uzabbix -p"$DB_PASSWORD" zabbix
359

360
# 检测导入是否成功
361
if [ $? -eq 0 ]; then
362
    echo "✅ Zabbix 数据库导入成功"
363
else
364
    echo "❌ 数据库导入失败（密码错误或文件不存在）"
365
    exit 1
366
fi
367

368
# ======================================================
369
echo -e "\n===== 16. 关闭函数信任 ====="
370

371
# 执行关闭命令（静默）
372
mysql -uroot -p"$DB_PASSWORD" -e "set global log_bin_trust_function_creators = 0;"
373

374
# 检测是否执行成功
375
if [ $? -eq 0 ]; then
376
    echo "✅ 函数信任已关闭"
377
else
378
    echo "❌ 关闭函数信任失败"
379
    exit 1
380
fi
381

382
# ======================================================
383
echo -e "\n===== 17. Zabbix Server 配置 ====="
384

385
# 备份原有配置
386
cp /etc/zabbix/zabbix_server.conf /etc/zabbix/zabbix_server.conf-backup
387

388
# 写入全新配置
389
cat > /etc/zabbix/zabbix_server.conf << 'EOF'
390
LogFile=/var/log/zabbix/zabbix_server.log
391
LogFileSize=0
392
PidFile=/run/zabbix/zabbix_server.pid
393
SocketDir=/run/zabbix
394
DBHost=localhost
395
DBName=zabbix
396
DBUser=zabbix
397
DBPassword=a123456!
398
DBPort=3306
399
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
400
Timeout=4
401
AlertScriptsPath=/usr/lib/zabbix/alertscripts
402
ExternalScripts=/usr/lib/zabbix/externalscripts
403
LogSlowQueries=3000
404
StatsAllowedIP=127.0.0.1
405
EOF
406

407
# ===================== 【配置检测】 =====================
408
# 检查文件是否生成
409
if [ ! -f /etc/zabbix/zabbix_server.conf ]; then
410
    echo "❌ 配置文件生成失败！"
411
    exit 1
412
fi
413

414
# 检查关键配置是否正确
415
ok=true
416
grep -q "^DBHost=localhost" /etc/zabbix/zabbix_server.conf || ok=false
417
grep -q "^DBName=zabbix" /etc/zabbix/zabbix_server.conf || ok=false
418
grep -q "^DBUser=zabbix" /etc/zabbix/zabbix_server.conf || ok=false
419
grep -q "^DBPassword=a123456!" /etc/zabbix/zabbix_server.conf || ok=false
420
grep -q "^DBPort=3306" /etc/zabbix/zabbix_server.conf || ok=false
421

422
# 输出结果
423
if $ok; then
424
    echo "✅ Zabbix Server 配置文件生成并验证成功"
425
else
426
    echo "❌ Zabbix 配置文件内容错误"
427
    exit 1
428
fi
429
# ===================== 服务端日志检测：存在跳过，不存在创建赋权 =====================
430
echo -e "\n===== 检查 Zabbix Server 日志文件 ====="
431
SERVER_LOG="/var/log/zabbix/zabbix_server.log"
432
SNMP_LOG="/var/log/snmptrap/snmptrap.log"
433

434
# 处理 zabbix_server.log
435
if [ -f "$SERVER_LOG" ]; then
436
    echo "✅ $SERVER_LOG 已存在，跳过"
437
else
438
    mkdir -p /var/log/zabbix/
439
    touch "$SERVER_LOG"
440
    chown -R zabbix:zabbix /var/log/zabbix/
441
    chmod 644 "$SERVER_LOG"
442
    echo "✅ $SERVER_LOG 已创建并授权"
443
fi
444

445
# 处理 snmptrap.log
446
if [ -f "$SNMP_LOG" ]; then
447
    echo "✅ $SNMP_LOG 已存在，跳过"
448
else
449
    mkdir -p /var/log/snmptrap/
450
    touch "$SNMP_LOG"
451
    chown -R zabbix:zabbix /var/log/snmptrap/
452
    chmod 644 "$SNMP_LOG"
453
    echo "✅ $SNMP_LOG 已创建并授权"
454
fi
455
# ======================================================
456
echo -e "\n===== 18. 启动所有服务 ====="
457

458
# 重启服务
459
systemctl daemon-reload
460
systemctl enable nginx php-fpm zabbix-server zabbix-agent --now
461
systemctl restart nginx php-fpm zabbix-server zabbix-agent
462

463
# 逐个检测服务状态
464
all_ok=true
465
for service in nginx php-fpm zabbix-server zabbix-agent; do
466
    if ! systemctl is-active --quiet $service; then
467
        echo "❌ $service 启动失败！"
468
        all_ok=false
469
    fi
470
done
471

472
# 最终结果提示
473
if $all_ok; then
474
    echo "✅ 所有服务启动并运行正常"
475
else
476
    echo "❌ 部分服务启动异常，请检查！"
477
    exit 1
478
fi
479

480
# ======================================================
481
echo -e "\n========================================"
482
echo -e "✅ Zabbix 6.0 安装完成！"
483
echo -e "🌐 访问：http://本机IP"
484
echo -e "👤 用户：Admin"
485
echo -e "🔑 密码：zabbix"
486
echo -e "🗝️ 数据库密码：$DB_PASSWORD"
487
echo -e "========================================"
488

489

490
    📌 使用方法（超级简单）
491
    1. 上传字体文件
492
    把你的 `simfang.ttf` 上传到 **/root** 目录
493

494
    2. 创建脚本
495
    ```bash
496
    vim install_zabbix6.sh
497
    ```
498
    **粘贴上面全部代码**，保存退出。
499

500
    3. 加权限
501
    ```bash
502
    chmod +x install_zabbix6.sh
503
    ```
504

505
    4. 运行安装
506
    ```bash
507
    ./install_zabbix6.sh
508
    ```
509

510
    ✅ 脚本自动完成以下所有操作
511
    - 关闭防火墙
512
    - 永久关闭 SELinux
513
    - 配置阿里云 EPEL 源
514
    - 安装 MySQL 8
515
    - 自动设置密码：`a123456!`
516
    - 创建 zabbix 库 + 用户
517
    - 安装 zabbix-web、nginx、php
518
    - 配置中文、时区
519
    - 替换字体（**解决图形中文乱码**）
520
    - 导入 zabbix 初始数据库
521
    - 配置 zabbis_server.conf
522
    - 启动所有服务：nginx/php-fpm/zabbix-server/zabbix-agent
523

524
    🌐 安装完成后
525
    **访问：**
526
    ```
527
    http://192.168.88.10
528
    ```
529

530
    **默认账号：**
531
    ```
532
    用户名：Admin
533
    密码：zabbix
534
    ```

Zabbix-agent安装脚本#

1
#!/bin/bash
2
# Zabbix Agent 自动安装脚本 | Rocky Linux 9 / RHEL 9
3
# 优化：防卡死、防冲突、变量生效、格式正确、全流程检测
4

5
# ===================== 固定配置 =====================
6
hostname=$(hostname) # 获取本地设备名
7
ZABBIX_ALLOW_NETWORK="192.168.88.0/24"  # 被动监控本地的地址、允许整个网段监控
8
ZABBIX_ACTIVE_IP="192.168.88.1" # 本地主动推送的地址、只允许IP
9
# ======================================================
10

11
echo -e "\n===== 1. 关闭防火墙 ====="
12
if systemctl stop firewalld >/dev/null 2>&1; then
13
    echo "✅ 防火墙 停止成功"
14
else
15
    echo "⚠️ 防火墙 未运行或停止失败"
16
fi
17

18
if systemctl disable firewalld >/dev/null 2>&1; then
19
    echo "✅ 防火墙 开机自启 已禁用"
20
else
21
    echo "⚠️ 防火墙 开机自启 禁用失败/已禁用"
22
fi
23

24

25
echo -e "\n===== 2. 关闭 SELinux ====="
26
sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
27
if grep -q "SELINUX=disabled" /etc/selinux/config; then
28
    echo "✅ SELinux 配置已永久禁用（重启生效）"
29
else
30
    echo "❌ SELinux 配置修改失败"
31
fi
32

33
setenforce 0 >/dev/null 2>&1
34
if [ $? -eq 0 ]; then
35
    echo "✅ SELinux 临时关闭成功"
36
else
37
    echo "⚠️ SELinux 已关闭，无需重复操作"
38
fi
39

40

41
echo -e "\n===== 3. 配置阿里云 EPEL 源 ====="
42
cat > /etc/yum.repos.d/aliyun_epel_9.repo <<EOF
43
[epel]
44
name=Extra Packages for Enterprise Linux \$releasever - \$basearch
45
baseurl=https://mirrors.aliyun.com/epel/\$releasever/Everything/\$basearch
46
failovermethod=priority
47
enabled=1
48
gpgcheck=0
49
excludepkgs=zabbix*
50
EOF
51

52
if [ -f /etc/yum.repos.d/aliyun_epel_9.repo ]; then
53
    echo "✅ EPEL 源文件创建成功"
54
else
55
    echo "❌ EPEL 源文件创建失败"
56
fi
57

58

59
echo -e "\n===== 4. 安装 Zabbix 官方源 ====="
60
rpm -Uvh https://repo.zabbix.com/zabbix/6.0/rhel/9/x86_64/zabbix-release-6.0-4.el9.noarch.rpm --nosignature
61

62
if rpm -q zabbix-release >/dev/null 2>&1; then
63
    echo "✅ Zabbix 官方源 安装成功"
64
else
65
    echo "⚠️ Zabbix 官方源 已安装或安装失败"
66
fi
67

68

69
echo -e "\n===== 5. 重建缓存（防卡死强制解锁） ====="
70

71
echo "🔍 清理 DNF/YUM 占用进程..."
72
for pid in $(ps -ef | grep -E "dnf|yum|rpm" | grep -v grep | awk '{print $2}'); do
73
    kill -9 $pid >/dev/null 2>&1 && echo "✅ 已结束占用进程 PID: $pid"
74
done
75

76
rm -f /var/run/yum.pid /var/run/dnf.pid /var/lib/dnf/rpm.lock /var/lib/rpm/.rpm.lock
77

78
dnf clean all >/dev/null 2>&1
79
timeout 120 dnf makecache -y >/dev/null 2>&1
80

81
if [ $? -eq 0 ]; then
82
    echo "✅ 缓存重建成功"
83
else
84
    echo "⚠️ 缓存跳过，继续安装"
85
fi
86

87

88
echo -e "\n===== 6. 安装 zabbix-agent + zabbix-sender ====="
89
dnf install -y zabbix-agent zabbix-sender
90

91
if [ $? -eq 0 ]; then
92
    echo "✅ zabbix-agent + zabbix-sender 安装成功"
93
else
94
    echo "❌ 安装失败，请检查YUM源"
95
    exit 1
96
fi
97

98

99
echo -e "\n===== 7. Zabbix-agent 配置（变量自动生效） ====="
100

101
# 备份
102
cp -n /etc/zabbix/zabbix_agentd.conf /etc/zabbix/zabbix_agentd.conf.backup
103

104
# 写入正确配置（无空格、变量生效）
105
cat > /etc/zabbix/zabbix_agentd.conf << EOF
106
PidFile=/run/zabbix/zabbix_agentd.pid
107
LogFile=/var/log/zabbix/zabbix_agentd.log
108
LogFileSize=0
109
        # Zabbix服务地址，谁可以监控我/可以写网段
110
Server=$ZABBIX_ALLOW_NETWORK
111
ListenPort=10050
112
        # Zabbix服务地址，是我主动推数据给谁/只能写IP
113
ServerActive=$ZABBIX_ACTIVE_IP
114
        # 本地主机设备名
115
Hostname=$hostname
116
Timeout=30
117
Include=/etc/zabbix/zabbix_agentd.d/*.conf
118
EOF
119

120
# 权限
121
chown zabbix:zabbix /etc/zabbix/zabbix_agentd.conf
122
chmod 644 /etc/zabbix/zabbix_agentd.conf
123

124
echo "✅ Zabbix agent 配置已生成"
125

126
# ===================== 客户端日志检测：存在跳过，不存在创建赋权 =====================
127
echo -e "\n===== 检查 Zabbix Agent 日志文件 ====="
128
AGENT_LOG="/var/log/zabbix/zabbix_agentd.log"
129

130
if [ -f "$AGENT_LOG" ]; then
131
    echo "✅ $AGENT_LOG 已存在，跳过"
132
else
133
    mkdir -p /var/log/zabbix/
134
    touch "$AGENT_LOG"
135
    chown -R zabbix:zabbix /var/log/zabbix/
136
    chmod 644 "$AGENT_LOG"
137
    echo "✅ $AGENT_LOG 已创建并授权"
138
fi
139

140
echo -e "\n===== 8. 启动并开机自启 ====="
141
systemctl daemon-reload
142
systemctl enable --now zabbix-agent
143
systemctl restart zabbix-agent
144

145
if systemctl is-active --quiet zabbix-agent; then
146
    echo "✅ zabbix-agent 正在运行"
147
else
148
    echo "❌ zabbix-agent 启动失败，请检查配置"
149
fi
150

151

152
echo -e "\n========================================"
153
echo -e "✅ Zabbix-agent 安装完成！"
154
echo -e "📌 当前 Hostname：$hostname"
155
echo -e "📌 允许监控网段：$ZABBIX_ALLOW_NETWORK"
156
echo -e "📌 主动上报IP：$ZABBIX_ACTIVE_IP"
157
echo -e "⚠️  如未自动替换，请修改：vim /etc/zabbix/zabbix_agentd.conf"
158
echo -e "========================================"

卸载脚本#

1
#!/bin/bash
2
# Zabbix 6.0 彻底卸载清空脚本 | Rocky Linux 9
3
# 安全版：不删除系统依赖，只删 Zabbix + 安装的组件
4

5
echo -e "\n===== 🔴 开始彻底卸载 Zabbix 6.0 ====="
6

7
# 1. 停止相关服务
8
echo -e "1. 停止服务..."
9
systemctl stop zabbix-server zabbix-agent nginx php-fpm mysqld 2>/dev/null
10
systemctl disable zabbix-server zabbix-agent nginx php-fpm mysqld 2>/dev/null
11

12
# 2. 卸载 Zabbix + MySQL + Nginx + PHP
13
echo -e "2. 卸载软件包..."
14
dnf remove -y zabbix-server-mysql zabbix-sql-scripts zabbix-selinux-policy zabbix-agent zabbix-get zabbix-web-mysql zabbix-nginx-conf mysql-server mysql zabbix* zabbix-agent mysql-server mysql nginx php*
15
rpm -e zabbix-release 2>/dev/null
16

17
# 3. 删除 Zabbix 源
18
#echo -e "3. 删除 YUM 源..."
19
#rm -rf /etc/y.repos.d/zabbix*.repo
20

21
# 4. 删除所有配置 & 数据文件
22
echo -e "4. 删除配置与数据..."
23
rm -rf /etc/zabbix
24
rm -rf /usr/share/zabbix
25
rm -rf /var/lib/zabbix
26
rm -rf /var/log/zabbix
27

28
rm -rf /etc/nginx/conf.d/zabbix.conf
29
rm -rf /etc/php-fpm.d/zabbix.conf
30
rm -rf /var/lib/php/session/*
31

32
rm -rf /var/lib/mysql
33
rm -rf /var/log/mysql*
34

35
rm -rf /run/zabbix
36
rm -rf /run/php-fpm/zabbix.sock
37

38
# 5. 清理字体与临时文件
39
echo -e "5. 清理临时文件..."
40
rm -rf /root/simfang.ttf
41

42
# 6. 清理系统缓存
43
# echo -e "6. 清理 DNF 缓存..."
44
# dnf clean all >/dev/null 2>&1
45
# dnf makecache -y >/dev/null 2>&1
46

47
echo -e "\n========================================"
48
echo -e "✅ Zabbix 已彻底卸载干净！"
49
echo -e "✅ MySQL/Nginx/PHP 已清空"
50
echo -e "✅ 可直接重新运行安装脚本"
51
echo -e "========================================\n"