Grafana 配置 MySQL 数据持久化存储
一、mysql8.0.30 安装
1.1、解压并初始化 MySQL8.0.30
查询是否存在
MariaDB
和
MySQL
，存在需要删除后进行安装
rpm -qa|grep MariaDB
rpm -qa|grep MySQL
解压
&
赋权
tar zxvf mysql-8.0.30-el7-x86_64.tar.gz -C /usr/local/
mv mysql-8.0.30-el7-x86_64 mysql
chmod 755 -R /usr/local/mysql
mkdir /usr/local/mysql/data
创建
MySQL
用户和用户组
groupadd mysql
useradd -g mysql mysql
chown -R mysql. /usr/local/mysql
初始化
./mysqld
--user=mysql
--lower-case-table-names=1
--basedir=/usr/local/mysql
--datadir=/usr/local/mysql/data/ --initialize
#
记录初始密码
添加系统服务
cp /usr/local/mysql/support-files/mysql.server /etc/init.d/mysql
chmod 755 /etc/init.d/mysql
chkconfig --add mysql
ln -s /usr/local/mysql/bin/mysql /usr/sbin/mysql
vim /etc/profile
...
export PATH=$PATH:/usr/local/mysql/bin/
1.2、创建配置文件并启动 MySQL 服务
vim /etc/my.cnf
[mysqld]
port=3306
basedir=/usr/local/mysql/
datadir=/usr/local/mysql/data
max_connect_errors=100
character-set-server=utf8mb4
default-storage-engine=INNODB
default_authentication_plugin=mysql_native_password
lower_case_table_names = 1
interactive_timeout = 1800
wait_timeout = 1800
lock_wait_timeout = 3600
tmp_table_size = 64M
max_heap_table_size = 64M
[mysql]
default-character-set=utf8mb4
[client]
port=3306
default-character-set=utf8mb4
启动
MySQL
服务
service mysql start
修改
root
初始密码
# mysql -uroot -p
alter user 'root'@'localhost' identified by '123456';
use mysql;
update user set host = '%' where user = 'root';
flush privileges;
1.3、创建 grafana 数据库
CREATE DATABASE IF NOT EXISTS grafana default charset utf8 COLLATE utf8_general_ci;
1.4、创建 grafana 用户及赋权访问 grafana 数据库
create user grafana identified by 'grafana';
grant all on grafana.* to 'grafana'@'%';
flush privileges;
二、grafana 安装
2.1、解压 grafana 并修改配置文件
tar xvf grafana-enterprise-9.0.3.linux-amd64.tar-C /usr/local
mv /usr/local/grafana-enterprise-9.0.3.linux-amd64 /usr/local/grafana
chmod 755 -R /usr/local/grafana
vim /usr/local/grafana/conf/defaults.ini
...
[database]
type = mysql
host = 127.0.0.1:3306
name = grafana
user = grafana
password = grafana
url = mysql://grafana:grafana@10.10.10.130:3306/grafana
...
2.2、启动 grafana
/usr/local/grafana/bin/grafana-server &
Grafana配置HTTPS
1、生成私有认证文件
# mkdir /etc/grafana/ssl
# mkdir /etc/nginx/ssl
# openssl req -newkey rsa:4096 -nodes -sha256 -keyout ca.key -x509 -days 365 -out ca.crt
# ls
生成
ca.crt
和
ca.key
文件
2、将生成的crt和key文件导入到系统证书位置和grafana、nginx 对应的 ssl 证书位置并更新
# cp ca.key /etc/pki/ca-trust/source/anchors/
# cp ca.crt /etc/pki/ca-trust/source/anchors/
# update-ca-trust extract
# update-ca-trust enable
#cp ca.key /etc/grafana/ssl
#cp ca.crt /etc/grafana/ssl
#cp ca.key /etc/nginx/ssl
#cp ca.crt /etc/nginx/ssl
3、修改 grafana 配置文件，配置 https 协议和 ssl 证书位置
# vim default.ini
[server]
protocol = https
domain = umct.ocsd.com
root_url = %(protocol)s://%(domain)s:%(http_port)s/
grafana
serve_from_sub_path = true
cert_file = /etc/grafana/ssl/www.surrender.com.crt
cert_key = /etc/grafana/ssl/www.surrender.com.key
4、Nginx 配置
# vim /etc/nginx/conf/grafana.conf
server {
listen 443 ssl;
server_name example.com;
ssl_certificate /etc/nginx/ssl/ca.crt; #
证书位置
ssl_certificate_key /etc/nginx/ssl/ca.key; #
证书
key
位置
location / {
root
html;
index index.html index.htm;
}
location /grafana/ {
root html;
index index.html index.htm;
proxy_pass
https://10.10.10.130:3000;
#grafana
地址
proxy_redirect default;
proxy_max_temp_file_size 0k;
proxy_connect_timeout 30;
proxy_send_timeout 60;
proxy_read_timeout 60;
proxy_next_upstream error timeout invalid_header http_502;
}
}
5、启动 grafana、nginx
# ./grafana-server &
# nginx -s reload
6、验证
https://10.10.10.130/grafana
额外：配置匿名登陆注意：
[auth]
#
跳过登陆页面
disable_login_form = true
[auth.anonymous]
#
开启匿名登陆
enabled = true
注意：修改 https 访问后，匿名登陆也需要使用 https 访问，否则页面报错。
