# Installation The preferred way of installing Icinga Web 2 is to use the official package repositories depending on which operating system and distribution you are running. In case you are upgrading from an older version of Icinga Web 2 please make sure to read the [upgrading](80-Upgrading.md#upgrading) section thoroughly. Source and automated setups are described inside the [advanced topics](20-Advanced-Topics.md#advanced-topics) chapter. ## Installing Requirements * [Icinga 2](https://www.icinga.com/products/icinga-2/) with the IDO database backend (MySQL or PostgreSQL) * A web server, e.g. Apache or Nginx * PHP version >= 5.6.0. Though Icinga Web 2 version 2.5.x is compatible with PHP version >= 5.3.2 there are modules which require a higher PHP version. Also, future versions of Icinga Web 2 will drop support for outdated PHP versions. Packages for Icinga Web 2 already require PHP >= 5.6.0 * The following PHP modules must be installed: cURL, gettext, intl, mbstring, OpenSSL and xml * Default time zone configured for PHP in the php.ini file * LDAP PHP library when using Active Directory or LDAP for authentication * MySQL or PostgreSQL PHP libraries ## Installing Icinga Web 2 from Package Below is a list of official package repositories for installing Icinga Web 2 for various operating systems. | Distribution | Repository | | ------------- | ---------- | | Debian | [Icinga Repository](http://packages.icinga.com/debian/) | | Ubuntu | [Icinga Repository](http://packages.icinga.com/ubuntu/) | | RHEL/CentOS | [Icinga Repository](http://packages.icinga.com/epel/) | | openSUSE | [Icinga Repository](http://packages.icinga.com/openSUSE/) | | SLES | [Icinga Repository](http://packages.icinga.com/SUSE/) | | Gentoo | [Upstream](https://packages.gentoo.org/packages/www-apps/icingaweb2) | | FreeBSD | [Upstream](http://portsmon.freebsd.org/portoverview.py?category=net-mgmt&portname=icingaweb2) | | ArchLinux | [Upstream](https://aur.archlinux.org/packages/icingaweb2) | | Alpine Linux | [Upstream](http://git.alpinelinux.org/cgit/aports/tree/community/icingaweb2/APKBUILD) | Packages for distributions other than the ones listed above may also be available. Please contact your distribution packagers. ### Setting up Package Repositories You need to add the Icinga repository to your package management configuration for installing Icinga Web 2. If you've already configured your OS to use the Icinga repository for installing Icinga 2, you may skip this step. Below is a list with **examples** for various distributions. **Debian Stretch**: ``` wget -O - http://packages.icinga.com/icinga.key | apt-key add - echo 'deb http://packages.icinga.com/debian icinga-stretch main' >/etc/apt/sources.list.d/icinga.list apt-get update ``` > INFO > > For other Debian versions just replace `stretch` with your distribution's code name. **Ubuntu Xenial**: ``` wget -O - http://packages.icinga.com/icinga.key | apt-key add - add-apt-repository 'deb http://packages.icinga.com/ubuntu icinga-xenial main' apt-get update ``` > INFO > > For other Ubuntu versions just replace xenial with your distribution's code name. **RHEL and CentOS 7**: ``` yum install https://packages.icinga.com/epel/icinga-rpm-release-7-latest.noarch.rpm ``` **Fedora 26**: ``` dnf install https://packages.icinga.com/fedora/icinga-rpm-release-26-latest.noarch.rpm ``` **SLES 12**: ``` zypper ar http://packages.icinga.com/SUSE/ICINGA-release.repo zypper ref ``` **openSUSE**: ``` zypper ar http://packages.icinga.com/openSUSE/ICINGA-release.repo zypper ref ``` **Alpine Linux**: ``` echo "http://dl-cdn.alpinelinux.org/alpine/edge/community" >> /etc/apk/repos apk update ``` > INFO > > Latest version of Icinga Web 2 is in the edge repository, which is the -dev branch. #### RHEL/CentOS Notes Our packages are build on and with packages from the **[EPEL repository](https://fedoraproject.org/wiki/EPEL)**. Please enable it prior installing the Icinga packages. CentOS 7/6: ``` yum install epel-release ``` RedHat 7: ``` yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm ``` If you are using RHEL you need enable the **optional repository** in order to use some contents of EPEL. RedHat: ``` subscription-manager repos --enable rhel-7-server-optional-rpms # or subscription-manager repos --enable rhel-6-server-optional-rpms ``` Since version 2.5.0 we also require a **newer PHP version** than what is available in RedHat itself. You need to enable the SCL repository, so that the dependencies can pull in the newer PHP. CentOS: ``` yum install centos-release-scl ``` RedHat: ``` subscription-manager repos --enable rhel-server-rhscl-7-rpms # or subscription-manager repos --enable rhel-server-rhscl-6-rpms ``` Make sure to also read the chapter on [Setting up FPM](02-Installation.md#setting-up-fpm). #### Alpine Linux Notes The example provided suppose that you are running Alpine edge, which is the -dev branch and is a rolling release. If you are using a stable version, in order to use the latest Icinga Web 2 version you should "pin" the edge repository. In order to correctly manage your repository, please follow [these instructions](https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management). ### Installing Icinga Web 2 You can install Icinga Web 2 by using your distribution's package manager to install the `icingaweb2` package. Below is a list with examples for various distributions. The additional package `icingacli` is necessary to follow further steps in this guide. The additional package `libapache2-mod-php` is necessary on Ubuntu to make Icinga Web 2 working out-of-the-box if you aren't sure or don't care about [PHP FPM](02-Installation.md#setting-up-fpm). **Debian**: ``` apt-get install icingaweb2 icingacli ``` **Ubuntu**: ``` apt-get install icingaweb2 libapache2-mod-php icingacli ``` **RHEL, CentOS and Fedora**: ``` yum install icingaweb2 icingacli ``` If you have [SELinux](90-SELinux.md) enabled, the package `icingaweb2-selinux` is also required. For RHEL/CentOS please read the [package repositories notes](02-Installation.md#package-repositories-rhel-notes). **SLES and openSUSE**: ``` zypper install icingaweb2 icingacli ``` **Alpine Linux**: ``` apk add icingaweb2 ``` For Alpine Linux please read the [package repositories notes](02-Installation.md#package-repositories-alpine-notes). ## Installing the web server Depending on your OS you might have to install, and or configure the web server. We usually only require PHP as hard dependency. We usually build on Apache httpd as the default web server, but you also can use nginx. **RedHat / CentOS / Fedora** Make sure to install httpd, start and enable it on boot. ``` yum install httpd systemctl start httpd.service systemctl enable httpd.service ``` Note for **EPEL 6 and 7**: See "Setting up FPM" below! Note for **Fedora >= 27**: You need to choose which httpd PHP mode you want to use! 1. Enable mod_php: \ Edit `/etc/httpd/conf.modules.d/00-mpm.conf` and enable `prefork` instead of `event` 2. or start php-fpm: \ `systemctl start php-fpm.service` \ `systemctl enable` **SUSE SLE / openSUSE** Make sure that web server is installed, and the required modules are loaded. ``` zypper install apache2 a2enmod rewrite a2enmod php7 systemctl start apache2.service systemctl enable apache2.service ``` **Debian / Ubuntu** Your web server should be up and running after the installation. ### Setting up FPM If you are on CentOS / RedHat 6 or 7, or just want to run Icinga Web 2 with PHP-FPM instead of the Apache module. | Operating System | FPM configuration path | |---------------------|-----------------------------------| | RedHat 7 (with SCL) | `/etc/opt/rh/rh-php71/php-fpm.d/` | | RedHat 6 (with SCL) | `/etc/opt/rh/rh-php70/php-fpm.d/` | | Fedora | `/etc/php-fpm.d/` | | Debian/Ubuntu | `/etc/php*/*/fpm/pool.d/` | The default pool `www` should be sufficient for Icinga Web 2. On RedHat you need to start and enable the FPM service. RedHat / CentOS 7 (SCL package): ``` systemctl start rh-php71-php-fpm.service systemctl enable rh-php71-php-fpm.service ``` RedHat / CentOS 6 (SCL package): ``` service rh-php70-php-fpm start chkconfig rh-php70-php-fpm on ``` Fedora: ``` systemctl start php-fpm.service systemctl enable php-fpm.service ``` All module packages for PHP have this SCL prefix, so you can install a database module like this: ``` yum install rh-php71-php-mysqlnd # or yum install rh-php71-php-pgsql # on el6 yum install rh-php70-php-mysqlnd # or yum install rh-php70-php-pgsql ``` On RedHat / CentOS 6 you also need to install `mod_proxy_fcgi` for httpd: ``` yum install mod_proxy_fcgi ``` Depending on your web server installation, we might have installed or updated the config file for icingaweb2 with defaults for FPM. Check `/etc/httpd/conf.d/icingaweb2.conf` or `/etc/apache2/conf.d/icingaweb2.conf`. And `*.rpm*` `*.dpkg*` files there with updates. Make sure that the `FilesMatch` part is included for Apache >= 2.4. For Apache < 2.4 you have to include the `LocationMatch` block. Also see the example from icingacli: ``` icingacli setup config webserver apache ``` ### Upgrading to FPM Valid for: * RedHat / CentOS 6 * RedHat / CentOS 7 Other distributions are also possible if preferred, but not included here. Some upgrading work needs to be done manually, while we install PHP FPM as dependency, you need to start the service, and configure some things. Please read [Setting up FPM](02-Installation.md#setting-up-fpm) first. **php.ini settings** you have tuned in the past needs to be migrated to a SCL installation of PHP. Check these directories: * `/etc/php.ini` * `/etc/php.d/*.ini` Most important for icingaweb2 is `date.timezone`. PHP settings should be stored to: * RedHat / CentOS 7: `/etc/opt/rh/rh-php71/php.d/` * RedHat / CentOS 6: `/etc/opt/rh/rh-php70/php.d/` Make sure to **install the required database modules** RedHat / CentOS 7: ``` yum install rh-php71-php-mysqlnd # or yum install rh-php71-php-pgsql ``` RedHat / CentOS 6: ``` yum install rh-php70-php-mysqlnd # or yum install rh-php70-php-pgsql ``` After any PHP related change you now need to **restart FPM**: RedHat / CentOS 7: ``` systemctl restart rh-php71-php-fpm.service ``` RedHat / CentOS 6: ``` service rh-php70-php-fpm restart ``` If you don't need mod_php for other apps on the server, you should disable it in Apache. Disable PHP in Apache httpd: ``` cd /etc/httpd cp conf.d/php.conf{,.bak} : >conf.d/php.conf # ONLY on el7! cp conf.modules.d/10-php.conf{,.bak} : >conf.modules.d/10-php.conf systemctl restart httpd.service # or on el6 service httpd restart ``` You can also uninstall the mod_php package, or all non-SCL PHP related packages. ``` yum remove php # or yum remove php-common ``` ### Preparing Web Setup You can set up Icinga Web 2 quickly and easily with the Icinga Web 2 setup wizard which is available the first time you visit Icinga Web 2 in your browser. When using the web setup you are required to authenticate using a token. In order to generate a token use the `icingacli`: ``` icingacli setup token create ``` In case you do not remember the token you can show it using the `icingacli`: ``` icingacli setup token show ``` #### Preparing Web Setup on Debian On Debian, you need to manually create a database and a database user prior to starting the web wizard. This is due to local security restrictions whereas the web wizard cannot create a database/user through a local unix domain socket. ``` MariaDB [mysql]> CREATE DATABASE icingaweb2; MariaDB [mysql]> GRANT ALL ON icingaweb2.* TO icingaweb2@localhost IDENTIFIED BY 'CHANGEME'; ``` You may also create a separate administrative account with all privileges instead. > Note: This is only required if you are using a local database as authentication type. ### Starting Web Setup Finally visit Icinga Web 2 in your browser to access the setup wizard and complete the installation: `/icingaweb2/setup`. > **Note for Debian** > > Use the same database, user and password details created above when asked. The setup wizard automatically detects the required packages. In case one of them is missing, e.g. a PHP module, please install the package, restart your webserver and reload the setup page. If you have SELinux enabled, please ensure to either have the selinux package for Icinga Web 2 installed, or disable it.