new Installation failed

[vtrac]

Hi,
How are you doing?
Sorry, but I don't understand what you meant by "some days of idle".

Were the system online or live?

Could you please share screenshot of the issues?

Also, please check the "/var/log/mariadb/mariadb.log"

If you have a crashed table, please run the below command to fix it:

Code: Select all

/usr/local/nagiosxi/scripts/repair_databases.sh

Also, please run the below commands:

Code: Select all

rm -f /usr/local/nagios/etc/import/*

/usr/local/nagiosxi/scripts/reconfigure_nagios.sh

systemctl restart nagios.service

If you still experience issue, please upload "profile.zip":
Nagios XI GUI > Admin > System Config > System Profile


Best Regards,
Vinh

[scharft]

Hi,

there is now mariadb but mysqldb:
[root@itrinag001 log]# cd mysql/
[root@itrinag001 mysql]# ls
mysqld.log mysqld.log-20210501 mysqld.log-20210601
[root@itrinag001 mysql]# vi mysqld.log
2021-06-08T04:57:24.352792Z 0 [System] [MY-010116] [Server] /usr/libexec/mysqld (mysqld 8.0.21) starting as process 1091696
2021-06-08T04:57:24.362176Z 1 [System] [MY-013576] [InnoDB] InnoDB initialization has started.
2021-06-08T04:57:24.834527Z 1 [System] [MY-013577] [InnoDB] InnoDB initialization has ended.
2021-06-08T04:57:25.006182Z 0 [System] [MY-011323] [Server] X Plugin ready for connections. Bind-address: '0.0.0.0' port: 33060, socket: /var/lib/mysql/mysqlx.sock
2021-06-08T04:57:26.156090Z 0 [Warning] [MY-010068] [Server] CA certificate ca.pem is self signed.
2021-06-08T04:57:26.156272Z 0 [System] [MY-013602] [Server] Channel mysql_main configured to support TLS. Encrypted connections are now supported for this channel.
2021-06-08T04:57:26.179458Z 0 [System] [MY-010931] [Server] /usr/libexec/mysqld: ready for connections. Version: '8.0.21' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution.

The repair and reconfigure scripts doesn't helped to fix the issue and exporting the profiel don't work =>
Gateway Timeout
The gateway did not receive a timely response from the upstream server or application

After adding a host, creating a service or anything else, clicking "apply configuration" ends in a neverending "waiting for configuration"

[vtrac]

Hi,
Hope you are having a good day!!

Were you using the RPM or source install?

Looking at the error provided on May 31 (below), last run 4248 days ago .... something not right?
Last Run 4248d 0h 24m 9s Ago

I asked my teammate to help look at this issue and he noticed that you have "SElinux" turned on.
Please turn that off and re-install Nagios XI again since the installation was not complete correctly.

Please run the below command to turn SELinux off, then do the install over again. Once completed you can turn it back on.

Code: Select all

setenforce 0

Also, please update (share) the install log "/tmp/xi-install.log" once completed.


Best Regards,
Vinh

[vtrac]

Hi,
Here's my suggestion for doing the re-install (again):

Download this file to your /tmp directory of your XI server:

Code: Select all

cd /tmp
wget https://repo.nagios.com/nagios/8/nagiosxi-5.8.3-1.el8.x86_64.rpm

Then as root, run these commands on your XI server:

Code: Select all

setenforce 0

cd /tmp
rm -rf nagiosxi
rpm2cpio nagiosxi-5.8.3-1.el8.x86_64.rpm | cpio -idmv
cd tmp/nagiosxi
./rpmupgrade

Then send us the full output of all the commands if it fails.

Best Regards,
Vinh

[scharft]

Hi

thanks for the instructions.

Selinux was disabled.
[root@itrinag001 ~]# vi /etc/selinux/config

SELINUX=disabled
SELINUXTYPE=targeted
SETLOCALDEFS=0

[root@itrinag001 ~]# getenforce
Disabled


[root@itrinag001 ~]# yum reinstall nagiosxi
Updating Subscription Management repositories.
Extra Packages for Enterprise Linux Modular 8 - x86_64
Errors during downloading metadata for repository 'epel-modular':
- Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://mirrors.fedoraproject.org/metalink?repo=eet local issuer certificate]
Error: Failed to download metadata for repo 'epel-modular': Cannot prepare internal mirrorlist: Curl error (60): Peer certificate cannot be aumodular-8&arch=x86_64&infra=$infra&content=$contentdir [SSL certificate problem: unable to get local issuer certificate]

[root@itrinag001 ~]# cd /tmp
[root@itrinag001 tmp]# wget https://repo.nagios.com/nagios/8/nagios ... x86_64.rpm
--2021-06-09 10:36:56-- https://repo.nagios.com/nagios/8/nagios ... x86_64.rpm
Connecting to 10.150.25.80:80... connected.
ERROR: The certificate of ‘repo.nagios.com’ is not trusted.
ERROR: The certificate of ‘repo.nagios.com’ hasn't got a known issuer.

[vtrac]

Hi,
How are you doing?
Do you have internet on your Nagios XI machine?

Please try install CA certificate. As "root", please run the below command:

Code: Select all

yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

yum clean all
yum repolist
yum install ca-certificates

Add the following to /etc/wgetrc:

Code: Select all

check_certificate = off

If still not working, please add "--no-check-certificate" to the wget command:

Code: Select all

cd /tmp
wget --no-check-certificate https://repo.nagios.com/nagios/8/nagiosxi-5.8.3-1.el8.x86_64.rpm

setenforce 0

cd /tmp
rm -rf nagiosxi
rpm2cpio nagiosxi-5.8.3-1.el8.x86_64.rpm | cpio -idmv
cd tmp/nagiosxi
./rpmupgrade

Best Regards,
Vinh

[vtrac]

Hi,
Pre-requisites for Nagios XI. Please make sure you do the following for either "CentOS 8" or "RHEL 8".

If you are installing on CentOS 8you will need to add the following:

Code: Select all

yum install epel-release -y
yum config-manager --enable powertools

IF you are installing on RHEL 8 you will need to add the following:

Code: Select all

yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms

https://repo.nagios.com/?repo=rpm-rhel


Best Regards,
Vinh

[scharft]

Hi,

we reinstalled nagios with yum and had no issues but the issue is still the same.
Most of the System Component Status are red, last Run 4258 days!!!

Restart the VM and repaird script, nothing worked...

[vtrac]

Hi,
How are you doing?

I am very sorry, but may I ask you a couple questions here ...

Is this a brand new (clean) install? ..... meaning a new empty RHEL 8 VM that you are install new clean Nagios XI

What I am worry is that your "/tmp" folder do not allow "exec" to run from the "/tmp" filesystem.
Also, you might have "SELinux" turned on.

Please run the following commands and (share) post outputs or screenshots .... (please!!):

Code: Select all

sestatus

df -kh

mount

Please also check the system date/time, make sure it is correct:

Code: Select all

date

Please share outputs of those commands above.
I need to know if this is a CLEAN (empty) system and new (clean) Nagios XI installation.
I need to know if your "/tmp" filesystem have "exec" permission and date/time are set correctly. Once I get those info, we will proceed to next step trying to resolve the issue.

Also, please share (upload) system "profile.zip" file:
Nagios XI GUI > Admin > System Profile > click "Download Profile"


Best Regards,
Vinh

[scharft]

Hi,

yes this is a new installation.
SELinux is disabled
here are the output:
[root@itrinag001 ~]# sestatus
SELinux status: disabled

[root@itrinag001 ~]# df -kh
Filesystem Size Used Avail Use% Mounted on
devtmpfs 3.8G 0 3.8G 0% /dev
tmpfs 3.8G 0 3.8G 0% /dev/shm
tmpfs 3.8G 385M 3.5G 10% /run
tmpfs 3.8G 0 3.8G 0% /sys/fs/cgroup
/dev/mapper/vg00-root 50G 4.8G 46G 10% /
/dev/sda1 1014M 295M 720M 30% /boot
/dev/mapper/vg00-var 20G 4.2G 16G 21% /var
tmpfs 778M 0 778M 0% /run/user/1002
[root@itrinag001 ~]# mount
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
devtmpfs on /dev type devtmpfs (rw,nosuid,size=3961368k,nr_inodes=990342,mode=755)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,mode=755)
tmpfs on /sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,mode=755)
cgroup on /sys/fs/cgroup/systemd type cgroup (rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd)
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
cgroup on /sys/fs/cgroup/blkio type cgroup (rw,nosuid,nodev,noexec,relatime,blkio)
cgroup on /sys/fs/cgroup/devices type cgroup (rw,nosuid,nodev,noexec,relatime,devices)
cgroup on /sys/fs/cgroup/cpu,cpuacct type cgroup (rw,nosuid,nodev,noexec,relatime,cpu,cpuacct)
cgroup on /sys/fs/cgroup/hugetlb type cgroup (rw,nosuid,nodev,noexec,relatime,hugetlb)
cgroup on /sys/fs/cgroup/freezer type cgroup (rw,nosuid,nodev,noexec,relatime,freezer)
cgroup on /sys/fs/cgroup/perf_event type cgroup (rw,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /sys/fs/cgroup/pids type cgroup (rw,nosuid,nodev,noexec,relatime,pids)
cgroup on /sys/fs/cgroup/rdma type cgroup (rw,nosuid,nodev,noexec,relatime,rdma)
cgroup on /sys/fs/cgroup/cpuset type cgroup (rw,nosuid,nodev,noexec,relatime,cpuset)
cgroup on /sys/fs/cgroup/net_cls,net_prio type cgroup (rw,nosuid,nodev,noexec,relatime,net_cls,net_prio)
cgroup on /sys/fs/cgroup/memory type cgroup (rw,nosuid,nodev,noexec,relatime,memory)
none on /sys/kernel/tracing type tracefs (rw,relatime)
configfs on /sys/kernel/config type configfs (rw,relatime)
/dev/mapper/vg00-root on / type xfs (rw,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,relatime,pagesize=2M)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=37,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=19684)
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
mqueue on /dev/mqueue type mqueue (rw,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,relatime)
/dev/sda1 on /boot type xfs (rw,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota)
/dev/mapper/vg00-var on /var type xfs (rw,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota)
tmpfs on /run/user/1002 type tmpfs (rw,nosuid,nodev,relatime,size=795652k,mode=700,uid=1002,gid=666)
tmpfs on /run/user/987 type tmpfs (rw,nosuid,nodev,relatime,size=795652k,mode=700,uid=987,gid=984)

[root@itrinag001 ~]# date
Tue Jun 15 07:51:09 CEST 2021

downloadig the system profile is not possible:
Gateway Timeout
The gateway did not receive a timely response from the upstream server or application.