[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/thomseddon/icinga2/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","thomseddon","reponame","icinga2","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":21,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2018-07-02T13:57:43.76417Z","description","Icinga2 with fileshipper","is_private","last_updated","2018-07-02T14:23:34.750189Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",323,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# icinga2\n\nThis repository contains the source for the [icinga2](https://www.icinga.org/icinga2/) [docker](https://www.docker.com) image.\n\nThe dockerhub-repository is located at [https://hub.docker.com/r/jordan/icinga2/](https://hub.docker.com/r/jordan/icinga2/).\n\nThis build is automated by push for the git-repo. Just crawl it via:\n\n docker pull jordan/icinga2\n\n## Image details\n\n1. Based on debian:stretch\n1. Key-Features:\n - icinga2\n - icingacli\n - icingaweb2\n - icingaweb2-director module\n - icingaweb2-graphite module\n - icingaweb2-module-aws\n - ssmtp\n - MySQL\n - Supervisor\n - Apache2\n - SSL Support\n1. No SSH. Use docker [exec](https://docs.docker.com/engine/reference/commandline/exec/) or [nsenter](https://github.com/jpetazzo/nsenter)\n1. If passwords are not supplied, they will be randomly generated and shown via stdout.\n\n## Usage\n\nStart a new container and bind to host's port 80\n\n docker run -p 80:80 -h icinga2 -t jordan/icinga2:latest\n\n## Icinga Web 2\n\nIcinga Web 2 can be accessed at [http://localhost/icingaweb2](http://localhost/icingaweb2) with the credentials *icingaadmin*:*icinga* (if not set differently via variables).\n\n### Saving PHP Sessions\n\nIf you want to save your php-sessions over multiple boots, mount `/var/lib/php/sessions/` into your container. Session files will get saved there.\n\nexample:\n```\ndocker run [...] -v $PWD/icingaweb2-sessions:/var/lib/php/sessions/ jordan/icinga2\n```\n\n## Graphite\n\nThe graphite writer can be enabled by setting the `ICINGA2_FEATURE_GRAPHITE` variable to `true` or `1` and also supplying values for `ICINGA2_FEATURE_GRAPHITE_HOST` and `ICINGA2_FEATURE_GRAPHITE_PORT`. This container does not have graphite and the carbon daemons installed so `ICINGA2_FEATURE_GRAPHITE_HOST` should not be set to `localhost`.\n\nExample:\n\n```\ndocker run -t \\\n --link graphite:graphite \\\n -e ICINGA2_FEATURE_GRAPHITE=true \\\n -e ICINGA2_FEATURE_GRAPHITE_HOST=graphite \\\n -e ICINGA2_FEATURE_GRAPHITE_PORT=2003 \\\n jordan/icinga2:latest\n```\n\n## Icinga Director\n\nThe [Icinga Director](https://github.com/Icinga/icingaweb2-module-director) Icinga Web 2 module is installed and enabled by default. You can disable the automatic kickstart when the container starts by setting the `DIRECTOR_KICKSTART` variable to false. To customize the kickstart settings, modify the `/etc/icingaweb2/modules/director/kickstart.ini`.\n\n## API Master\n\nThe container gets automatically configured as an API master. But it has some caveats. Please make sure:\n\n- Set the container's hostname (`-h` or `hostname`)\n - The hostname has to match the name, your sattelites are configured to access the master.\n- Forward the `5665` port\n- Mount **both** volumes: `/etc/icinga2`, `/var/lib/icinga2`\n\n## Sending Notification Mails\n\nThe container has `ssmtp` installed, which forwards mails to a preconfigured static server.\n\nYou have to create the files `ssmtp.conf` for general configuration and `revaliases` (mapping from local Unix-user to mail-address).\n\n```\n# ssmtp.conf\nroot=\nmailhub=smtp.:587\nUseSTARTTLS=YES\nAuthUser=\nAuthPass=\nFromLineOverride=NO\n```\n**But be careful, ssmtp is not able to process special chars within the password correctly!**\n\n`revaliases` follows the format: `Unix-user:e-Mail-address:server`.\nTherefore the e-Mail-address has to match the `root`'s value in `ssmtp.conf`\nAlso server has to match mailhub from `ssmtp.conf` **but without the port**.\n\n```\n# revaliases\nroot::smtp.\nnagios::smtp.\nwww-data::smtp.\n```\n\nThese files have to get mounted into the container. Add these flags to your `docker run`-command:\n```\n-v $(pwd)/revaliases:/etc/ssmtp/revaliases:ro\n-v $(pwd)/ssmtp.conf:/etc/ssmtp/ssmtp.conf:ro\n```\n\nIf you want to change the display-name of sender-address, you have to define the variable `ICINGA2_USER_FULLNAME`.\n\nIf this does not work, please ask your provider for the correct mail-settings or consider the [ssmtp.conf(5)-manpage](https://linux.die.net/man/5/ssmtp.conf) or Section [\"Reverse Aliases\" on ssmtp(8)](https://linux.die.net/man/8/ssmtp).\nAlso you can debug your config, by executing inside your container `ssmtp -v $address` and pressing 2x Enter.\nIt will send an e-Mail to `$address` and give verbose log and all error-messages.\n\n## SSL Support\n\nFor enabling of SSL support, just add a volume to `/etc/apache2/ssl`, which contains these files:\n\n- `icinga2.crt`: The certificate file for apache\n- `icinga2.key`: The corresponding private key\n- `icinga2.chain` (optional): If a certificate chain is needed, add this file. Consult your CA-vendor for additional info.\n\nFor https-redirection or http/https dualstack consult `APACHE2_HTTP` env-variable.\n\n# Adding own modules\n\nTo use your own modules, you're able to install these into `enabledModules`-folder of your `/etc/icingaweb2` volume.\n\n# MySQL connections\n\nThe container has support to run a MySQL server inside or access some external resources. By default, the MySQL server inside the container is setup, but when using the `docker-compose.yml` project, the server is located inside an extra container. Future releases will have this as the default and require an external MySQL/MariaDB container.\n\nIf you use the image plain or the `docker-compose.yml` project, you don't have to worry about anything for MySQL. Only, if you want to split the container from the MySQL server, it's necessary to give some variables.\n\n## External MySQL servers\n\nIf you have the image running plain or use the `docker-compose.yml` project, there is no necessity to fool around with these variables.\n\nTo connect the container with the MySQL server, you have fine granular control via environment variables. For every necessary database, there is a set of variables, which describe the connection to it. In theory, the databases could get distributed over multiple hosts.\n\nAll variables are a combination of the service and the property with the format `_MYSQL_`, while\n\n- `` can be one of `ICINGA2_IDO`, `ICINGAWEB2`, `ICINGAWEB2_DIRECTOR`\n- `` can be one of `HOST`, `PORT`, `DATA`, `USER`, `PASS`\n\nThe variables default their respective `DEFAULT` service variable.\n\n- `DEFAULT_MYSQL_HOST`: The server hostname (defaults to `localhost`)\n- `DEFAULT_MYSQL_PORT`: The server port (defaults to `3306`)\n- `DEFAULT_MYSQL_DATA`: The database (defaults to *unset*, the specific services have separate DBs)\n\t- `ICINGA2_IDO_MYSQL_DATA`: The database for icinga2 IDO (defaults to `icinga2idomysql`)\n\t- `ICINGAWEB2_MYSQL_DATA`: The database for icingaweb2 (defaults to `icingaweb2`)\n\t- `ICINGAWEB2_DIRECTOR_MYSQL_DATA`: The database for icingaweb2 director (defaults to `icingaweb2_director`)\n- `DEFAULT_MYSQL_USER`: The MySQL user to access the database (defaults to `icinga2`)\n- `DEFAULT_MYSQL_PASS`: The password for the MySQL user. (defaults to *randomly generated string*)\n\n## Moving to separate MySQL-container\n\n1. Start your current container as always.\n1. Run `docker exec i2-port-mysqldb`\n1. Shutdown the container\n1. Copy the MySQL datafolder from the `icinga2` container to your new `mariadb` container.\n1. Change the environment variable `DEFAULT_MYSQL_HOST` to point to your new MySQL container.\n1. Add the environment variable `MYSQL_ROOT_PASSWORD` to the icinga2 container, with the value of your password you currently set.\n1. Start your container**s**.\n\n# Reference\n\n## Environment variables Reference\n\n| Environmental Variable | Default Value | Description |\n| ---------------------- | ------------- | ----------- |\n| `ICINGA2_FEATURE_GRAPHITE` | false | Set to true or 1 to enable graphite writer |\n| `ICINGA2_FEATURE_GRAPHITE_HOST` | graphite | hostname or IP address where Carbon/Graphite daemon is running |\n| `ICINGA2_FEATURE_GRAPHITE_PORT` | 2003 | Carbon port for graphite |\n| `ICINGA2_FEATURE_GRAPHITE_URL` | http://${ICINGA2_FEATURE_GRAPHITE_HOST} | Web-URL for Graphite |\n| `ICINGA2_FEATURE_DIRECTOR` | true | Set to false or 0 to disable icingaweb2 director |\n| `DIRECTOR_KICKSTART` | true | Set to false to disable icingaweb2 director's auto kickstart at container startup. *Value is only used, if icingaweb2 director is enabled.* |\n| `ICINGAWEB2_ADMIN_USER` | icingaadmin | Icingaweb2 Login User
*After changing the username, you should also remove the old User in icingaweb2-> Configuration-> Authentication-> Users* |\n| `ICINGAWEB2_ADMIN_PASS` | icinga | Icingaweb2 Login Password |\n| `ICINGA2_USER_FULLNAME` | Icinga | Sender's display-name for notification e-Mails |\n| `APACHE2_HTTP` | `REDIRECT` | **Variable is only active, if both SSL-certificate and SSL-key are in place.** `BOTH`: Allow HTTP and https connections simultaneously. `REDIRECT`: Rewrite HTTP-requests to HTTPS |\n| `MYSQL_ROOT_PASSWORD` | *unset* | If your MySQL host is not on `localhost`, but you want the icinga2 container to setup the DBs for itself, specify the root password of your MySQL server in this variable. |\n| *other MySQL variables* | *none* | All combinations of MySQL variables aren't listed in this reference. Please see above in the MySQL section for this. |\n\n## Volume Reference\n\nAll these folders are configured and able to get mounted as volume. The bottom ones are not quite necessary.\n\n| Volume | ro/rw | Description & Usage |\n| ------ | ----- | ------------------- |\n| /etc/apache2/ssl | **ro** | Mount optional SSL-Certificates (see SSL Support) |\n| /etc/locale.gen | **ro** | In format of the well known locale.gen file. All locales listed in this file will get generated. |\n| /etc/ssmtp/revaliases | **ro** | revaliases map (see Sending Notification Mails) |\n| /etc/ssmtp/ssmtp.conf | **ro** | ssmtp configuration (see Sending Notification Mails) |\n| /etc/icinga2 | rw | Icinga2 configuration folder |\n| /etc/icingaweb2 | rw | Icingaweb2 configuration folder |\n| /var/lib/mysql | rw | MySQL Database |\n| /var/lib/icinga2 | rw | Icinga2 Data |\n| /var/lib/php5/sessions/ | rw | Icingaweb2 PHP Session Files |\n| /var/log/apache2 | rw | logfolder for apache2 (not neccessary) |\n| /var/log/icinga2 | rw | logfolder for icinga2 (not neccessary) |\n| /var/log/icingaweb2 | rw | logfolder for icingaweb2 (not neccessary) |\n| /var/log/mysql | rw | logfolder for mysql (not neccessary) |\n| /var/log/supervisor | rw | logfolder for supervisord (not neccessary) |\n| /var/spool/icinga2 | rw | spool-folder for icinga2 (not neccessary) |\n| /var/cache/icinga2 | rw | cache-folder for icinga2 (not neccessary) |\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",219292306,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},"content_type","creator",699935,"full_size",219281744,"id",30235627,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},"architecture","amd64","digest","sha256:c7510ad6f26fa0d5548b454f21886915f7ae65ddab7ca013ad889d45f22e226b","features","","last_pulled","2026-10-02T17:23:18.623074666Z","last_pushed","2018-07-02T14:23:18Z","os","linux","os_features","os_version","size","variant","2018-07-02T14:23:17.97956Z","last_updater","last_updater_username","media_type","latest","repository",5685650,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":146,"_79":21,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":64,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},[158],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},[],"canDeleteTags","actionData","errors"]

thomseddon/icinga2

Tags for thomseddon/icinga2