Install Cacti Server on CentOS 8

In this article, you will learn how to install Cacti network monitoring server on CentOS 8. This article provides the complete installation steps including SELinux configuration.

 

This Article Provides:

• What is Cacti?
• Cacti Features
• Environment Specification
• Upgrade CentOS 8 Software Packages
• Install Apache HTTP Server on CentOS 8
• Install MariaDB Server on CentOS 8
• Install PHP on CentOS 8
• Install SNMP on CentOS 8
• Install RRDTool on CentOS 8
• Configure PHP Settings for Cacti
• Install Cacti on CentOS 8
• Create a MariaDB Database for Cacti
• Configure Cacti on CentOS 8
• Configure SELinux for Cacti on CentOS 8

 

What is Cacti? :

Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-end application for the open-source, industry-standard data logging tool RRDtool.

Cacti uses a Poller to collect system metrics at a predetermined intervals and graph the resulting data. Cacti can use one of two back ends: "cmd.php", a PHP script suitable for smaller installations, or "Spine" (formerly Cactid), a C-based poller which can scale to thousands of hosts.

The front end can handle multiple users, each with their own graph sets, so it is sometimes used by web hosting providers to display bandwidth statistics for their customers. Cacti can be extended to monitor any source via shell scripts and executables.

Cacti is maintained by The Cacti Group, Inc. and distributed under GNU GPL license.

 

Cacti Features:

Some of the popular features of Cacti network monitoring software are:

• unlimited graph items
• auto-padding support for graphs
• graph data manipulation
• flexible data sources
• data gathering on a non-standard timespan
• custom data-gathering scripts
• built-in SNMP support
• graph, devices and data sources templates
• tree, list, and preview views of graph data
• user and user group based management and security
• remote data collection
• graph aggregation
• device, graph and tree automation
• network discovery

 

Environment Specification:

We are using a minimal CentOS 8 KVM machine with following specification.

• CPU - 3.4 Ghz (2 cores)
• Memory - 2 GB
• Storage - 20 GB
• Operating System - CentOS 8.2
• Hostname – cacti-01.centlinux.com
• IP Address - 192.168.116.206 /24

 

Upgrade CentOS 8 Software Packages:

Connect with cacti-01.centlinux.com as root user by using a ssh tool.

First of all, we are upgrading the existing software packages of our CentOS 8 server.

[root@cacti-01 ~]# dnf update -y
...
Upgraded:
  libdrm-2.4.100-1.el8.x86_64
  libmaxminddb-1.2.0-7.el8.x86_64
  libmspack-0.7-0.3.alpha.el8.4.x86_64
  libxkbcommon-0.9.1-1.el8.x86_64
  open-vm-tools-11.0.0-4.el8.x86_64
  plymouth-0.9.3-16.el8.x86_64
  plymouth-core-libs-0.9.3-16.el8.x86_64
  plymouth-scripts-0.9.3-16.el8.x86_64
  python3-newt-0.52.20-11.el8.x86_64
  python3-unbound-1.7.3-11.el8_2.x86_64
  rsyslog-8.1911.0-3.el8.x86_64
  unbound-libs-1.7.3-11.el8_2.x86_64
  xkeyboard-config-2.28-1.el8.noarch
  NetworkManager-1:1.22.8-4.el8.x86_64
  NetworkManager-libnm-1:1.22.8-4.el8.x86_64
  NetworkManager-team-1:1.22.8-4.el8.x86_64
  NetworkManager-tui-1:1.22.8-4.el8.x86_64
  audit-3.0-0.17.20191104git1c2f876.el8.x86_64
  audit-libs-3.0-0.17.20191104git1c2f876.el8.x86_64
  bind-export-libs-32:9.11.13-3.el8.x86_64
  centos-gpg-keys-8.2-2.2004.0.1.el8.noarch
  centos-release-8.2-2.2004.0.1.el8.x86_64
  centos-repos-8.2-2.2004.0.1.el8.x86_64
  coreutils-8.30-7.el8_2.1.x86_64
  coreutils-common-8.30-7.el8_2.1.x86_64
  crypto-policies-20191128-2.git23e1bf1.el8.noarch
  cryptsetup-libs-2.2.2-1.el8.x86_64
  curl-7.61.1-12.el8.x86_64
  device-mapper-8:1.02.169-3.el8.x86_64
  device-mapper-event-8:1.02.169-3.el8.x86_64
  device-mapper-event-libs-8:1.02.169-3.el8.x86_64
  device-mapper-libs-8:1.02.169-3.el8.x86_64
  device-mapper-persistent-data-0.8.5-3.el8.x86_64
  dhcp-client-12:4.3.6-40.el8.x86_64
  dhcp-common-12:4.3.6-40.el8.noarch
  dhcp-libs-12:4.3.6-40.el8.x86_64
  diffutils-3.6-6.el8.x86_64
  dmidecode-1:3.2-5.el8.x86_64
  dnf-4.2.17-6.el8.noarch
  dnf-data-4.2.17-6.el8.noarch
  dnf-plugins-core-4.0.12-3.el8.noarch
  dracut-049-70.git20200228.el8.x86_64
  dracut-config-rescue-049-70.git20200228.el8.x86_64
  dracut-network-049-70.git20200228.el8.x86_64
  dracut-squash-049-70.git20200228.el8.x86_64
  e2fsprogs-1.45.4-3.el8.x86_64
  e2fsprogs-libs-1.45.4-3.el8.x86_64
  elfutils-default-yama-scope-0.178-7.el8.noarch
  elfutils-libelf-0.178-7.el8.x86_64
  elfutils-libs-0.178-7.el8.x86_64
  file-5.33-13.el8.x86_64
  file-libs-5.33-13.el8.x86_64
  firewalld-0.8.0-4.el8.noarch
  firewalld-filesystem-0.8.0-4.el8.noarch
  glib2-2.56.4-8.el8.x86_64
  glibc-2.28-101.el8.x86_64
  glibc-common-2.28-101.el8.x86_64
  glibc-langpack-en-2.28-101.el8.x86_64
  gnutls-3.6.8-10.el8_2.x86_64
  grub2-common-1:2.02-81.el8.noarch
  grub2-pc-1:2.02-81.el8.x86_64
  grub2-pc-modules-1:2.02-81.el8.noarch
  grub2-tools-1:2.02-81.el8.x86_64
  grub2-tools-efi-1:2.02-81.el8.x86_64
  grub2-tools-extra-1:2.02-81.el8.x86_64
  grub2-tools-minimal-1:2.02-81.el8.x86_64
  grubby-8.40-38.el8.x86_64
  hwdata-0.314-8.4.el8.noarch
  info-6.5-6.el8.x86_64
  initscripts-10.00.6-1.el8_2.1.x86_64
  ipcalc-0.2.4-4.el8.x86_64
  iproute-5.3.0-1.el8.x86_64
  iptables-1.8.4-10.el8.x86_64
  iptables-ebtables-1.8.4-10.el8.x86_64
  iptables-libs-1.8.4-10.el8.x86_64
  iwl100-firmware-39.31.5.1-97.el8.1.noarch
  iwl1000-firmware-1:39.31.5.1-97.el8.1.noarch
  iwl105-firmware-18.168.6.1-97.el8.1.noarch
  iwl135-firmware-18.168.6.1-97.el8.1.noarch
  iwl2000-firmware-18.168.6.1-97.el8.1.noarch
  iwl2030-firmware-18.168.6.1-97.el8.1.noarch
  iwl3160-firmware-1:25.30.13.0-97.el8.1.noarch
  iwl3945-firmware-15.32.2.9-97.el8.1.noarch
  iwl4965-firmware-228.61.2.24-97.el8.1.noarch
  iwl5000-firmware-8.83.5.1_1-97.el8.1.noarch
  iwl5150-firmware-8.24.2.2-97.el8.1.noarch
  iwl6000-firmware-9.221.4.1-97.el8.1.noarch
  iwl6000g2a-firmware-18.168.6.1-97.el8.1.noarch
  iwl6050-firmware-41.28.5.1-97.el8.1.noarch
  iwl7260-firmware-1:25.30.13.0-97.el8.1.noarch
  kernel-tools-4.18.0-193.6.3.el8_2.x86_64
  kernel-tools-libs-4.18.0-193.6.3.el8_2.x86_64
  kexec-tools-2.0.20-14.el8.x86_64
  kmod-25-16.el8.x86_64
  kmod-libs-25-16.el8.x86_64
  kpartx-0.8.3-3.el8.x86_64
  krb5-libs-1.17-18.el8.x86_64
  libblkid-2.32.1-22.el8.x86_64
  libcap-2.26-3.el8.x86_64
  libcap-ng-0.7.9-5.el8.x86_64
  libcom_err-1.45.4-3.el8.x86_64
  libcomps-0.1.11-4.el8.x86_64
  libcurl-7.61.1-12.el8.x86_64
  libdnf-0.39.1-5.el8.x86_64
  libfdisk-2.32.1-22.el8.x86_64
  libgcc-8.3.1-5.el8.0.2.x86_64
  libgomp-8.3.1-5.el8.0.2.x86_64
  libldb-2.0.7-3.el8.x86_64
  libmodulemd1-1.8.16-0.2.8.2.1.x86_64
  libmount-2.32.1-22.el8.x86_64
  libndp-1.7-3.el8.x86_64
  libnfsidmap-1:2.3.3-31.el8.x86_64
  libnftnl-1.1.5-4.el8.x86_64
  libnl3-3.5.0-1.el8.x86_64
  libnl3-cli-3.5.0-1.el8.x86_64
  librepo-1.11.0-2.el8.x86_64
  libreport-filesystem-2.9.5-10.el8.x86_64
  libselinux-2.9-3.el8.x86_64
  libselinux-utils-2.9-3.el8.x86_64
  libsemanage-2.9-2.el8.x86_64
  libsmartcols-2.32.1-22.el8.x86_64
  libsolv-0.7.7-1.el8.x86_64
  libss-1.45.4-3.el8.x86_64
  libsss_autofs-2.2.3-20.el8.x86_64
  libsss_certmap-2.2.3-20.el8.x86_64
  libsss_idmap-2.2.3-20.el8.x86_64
  libsss_nss_idmap-2.2.3-20.el8.x86_64
  libsss_sudo-2.2.3-20.el8.x86_64
  libstdc++-8.3.1-5.el8.0.2.x86_64
  libtalloc-2.2.0-7.el8.x86_64
  libtdb-1.4.2-2.el8.x86_64
  libteam-1.29-1.el8.x86_64
  libtevent-0.10.0-2.el8.x86_64
  libuuid-2.32.1-22.el8.x86_64
  libxml2-2.9.7-7.el8.x86_64
  libxslt-1.1.32-4.el8.x86_64
  linux-firmware-20191202-97.gite8a0f4c9.el8.noarch
  lshw-B.02.18-23.el8.x86_64
  lvm2-8:2.03.08-3.el8.x86_64
  lvm2-libs-8:2.03.08-3.el8.x86_64
  microcode_ctl-4:20191115-4.20200602.2.el8_2.x86_64
  mozjs52-52.9.0-2.el8.x86_64
  mozjs60-60.9.0-4.el8.x86_64
  newt-0.52.20-11.el8.x86_64
  nftables-1:0.9.3-12.el8.x86_64
  numactl-libs-2.0.12-9.el8.x86_64
  openssl-1:1.1.1c-15.el8.x86_64
  openssl-libs-1:1.1.1c-15.el8.x86_64
  openssl-pkcs11-0.4.10-2.el8.x86_64
  pam-1.3.1-8.el8.x86_64
  passwd-0.80-3.el8.x86_64
  pigz-2.4-4.el8.x86_64
  platform-python-3.6.8-23.el8.x86_64
  platform-python-pip-9.0.3-16.el8.noarch
  policycoreutils-2.9-9.el8.x86_64
  polkit-0.115-11.el8.x86_64
  polkit-libs-0.115-11.el8.x86_64
  python3-cryptography-2.3-3.el8.x86_64
  python3-dnf-4.2.17-6.el8.noarch
  python3-dnf-plugins-core-4.0.12-3.el8.noarch
  python3-firewall-0.8.0-4.el8.noarch
  python3-hawkey-0.39.1-5.el8.x86_64
  python3-libcomps-0.1.11-4.el8.x86_64
  python3-libdnf-0.39.1-5.el8.x86_64
  python3-librepo-1.11.0-2.el8.x86_64
  python3-libs-3.6.8-23.el8.x86_64
  python3-libselinux-2.9-3.el8.x86_64
  python3-libxml2-2.9.7-7.el8.x86_64
  python3-perf-4.18.0-193.6.3.el8_2.x86_64
  python3-pip-wheel-9.0.3-16.el8.noarch
  python3-ply-3.9-8.el8.noarch
  python3-rpm-4.14.2-37.el8.x86_64
  python3-syspurpose-1.26.17-1.el8_2.x86_64
  rng-tools-6.8-3.el8.x86_64
  rpm-4.14.2-37.el8.x86_64
  rpm-build-libs-4.14.2-37.el8.x86_64
  rpm-libs-4.14.2-37.el8.x86_64
  rpm-plugin-selinux-4.14.2-37.el8.x86_64
  rpm-plugin-systemd-inhibit-4.14.2-37.el8.x86_64
  selinux-policy-3.14.3-41.el8_2.4.noarch
  selinux-policy-targeted-3.14.3-41.el8_2.4.noarch
  setup-2.12.2-5.el8.noarch
  sg3_utils-1.44-5.el8.x86_64
  sg3_utils-libs-1.44-5.el8.x86_64
  sqlite-3.26.0-6.el8.x86_64
  sqlite-libs-3.26.0-6.el8.x86_64
  sssd-client-2.2.3-20.el8.x86_64
  sssd-common-2.2.3-20.el8.x86_64
  sssd-kcm-2.2.3-20.el8.x86_64
  sssd-nfs-idmap-2.2.3-20.el8.x86_64
  sudo-1.8.29-5.el8.x86_64
  systemd-239-30.el8_2.x86_64
  systemd-libs-239-30.el8_2.x86_64
  systemd-pam-239-30.el8_2.x86_64
  systemd-udev-239-30.el8_2.x86_64
  teamd-1.29-1.el8.x86_64
  tuned-2.13.0-6.el8.noarch
  tzdata-2020a-1.el8.noarch
  util-linux-2.32.1-22.el8.x86_64
  which-2.21-12.el8.x86_64
  xfsprogs-5.0.0-2.el8.x86_64
  yum-4.2.17-6.el8.noarch
  yum-utils-4.0.12-3.el8.noarch
  zlib-1.2.11-13.el8.x86_64

Installed:
  kernel-4.18.0-193.6.3.el8_2.x86_64
  kernel-core-4.18.0-193.6.3.el8_2.x86_64
  kernel-modules-4.18.0-193.6.3.el8_2.x86_64
  elfutils-debuginfod-client-0.178-7.el8.x86_64
  libzstd-1.4.2-2.el8.x86_64
  python3-nftables-1:0.9.3-12.el8.x86_64

Removed:
  kernel-4.18.0-80.11.2.el8_0.x86_64
  kernel-core-4.18.0-80.11.2.el8_0.x86_64
  kernel-modules-4.18.0-80.11.2.el8_0.x86_64

Complete!

Our CentOS 8.1 machine has been upgraded to CentOS 8.2. We can confirm it by using following commands.

[root@cacti-01 ~]# uname -a
Linux cacti-01.centlinux.com 4.18.0-193.6.3.el8_2.x86_64 #1 SMP Wed Jun 10 11:09:32 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@cacti-01 ~]# cat /etc/redhat-release
CentOS Linux release 8.2.2004 (Core)

You can follow our previous post to upgrade CentOS 7 to CentOS 8 Server.

 

Install Apache HTTP Server on CentOS 8:

Cacti network monitoring server is a PHP based web application, therefore, we need a PHP supported web browser to run it.

We are using the popular Apache HTTP Server for this purpose.

[root@cacti-01 ~]# dnf install -y httpd httpd-devel
...
Installed:
  apr-1.6.3-9.el8.x86_64
  apr-devel-1.6.3-9.el8.x86_64
  apr-util-1.6.1-6.el8.x86_64
  apr-util-bdb-1.6.1-6.el8.x86_64
  apr-util-devel-1.6.1-6.el8.x86_64
  apr-util-openssl-1.6.1-6.el8.x86_64
  centos-logos-httpd-80.5-2.el8.noarch
  cyrus-sasl-2.1.27-1.el8.x86_64
  cyrus-sasl-devel-2.1.27-1.el8.x86_64
  expat-devel-2.2.5-3.el8.x86_64
  httpd-2.4.37-21.module_el8.2.0+382+15b0afa8.x86_64
  httpd-devel-2.4.37-21.module_el8.2.0+382+15b0afa8.x86_64
  httpd-filesystem-2.4.37-21.module_el8.2.0+382+15b0afa8.noarch
  httpd-tools-2.4.37-21.module_el8.2.0+382+15b0afa8.x86_64
  libdb-devel-5.3.28-37.el8.x86_64
  mailcap-2.1.48-3.el8.noarch
  mod_http2-1.11.3-3.module_el8.2.0+307+4d18d695.x86_64
  openldap-devel-2.4.46-11.el8_1.x86_64
  perl-Carp-1.42-396.el8.noarch
  perl-Errno-1.28-416.el8.x86_64
  perl-Exporter-5.72-396.el8.noarch
  perl-File-Path-2.15-2.el8.noarch
  perl-IO-1.38-416.el8.x86_64
  perl-PathTools-3.74-1.el8.x86_64
  perl-Scalar-List-Utils-3:1.49-2.el8.x86_64
  perl-Socket-4:2.027-3.el8.x86_64
  perl-Text-Tabs+Wrap-2013.0523-395.el8.noarch
  perl-Unicode-Normalize-1.25-396.el8.x86_64
  perl-constant-1.33-396.el8.noarch
  perl-interpreter-4:5.26.3-416.el8.x86_64
  perl-libs-4:5.26.3-416.el8.x86_64
  perl-macros-4:5.26.3-416.el8.x86_64
  perl-parent-1:0.237-1.el8.noarch
  perl-threads-1:2.21-2.el8.x86_64
  perl-threads-shared-1.58-2.el8.x86_64

Complete!

Enable and start Apache service.

[root@cacti-01 ~]# systemctl enable --now httpd.service
Created symlink /etc/systemd/system/multi-user.target.wants/httpd.service â /usr/lib/systemd/system/httpd.service.

Allow the Apache Service in Linux firewall, to make it accessible from the network computers.

[root@cacti-01 ~]# firewall-cmd --permanent --add-service=http
success
[root@cacti-01 ~]# firewall-cmd --reload
success

 

Install MariaDB Server on CentOS 8:

Cacti requires a MySQL database for its metadata repository. Therefore, we are installing MariaDB server. Please follow our previous article, if you want to install latest version of MariaDB on CentOS 8.

[root@cacti-01 ~]# dnf install -y mariadb-server
...
Installed:
  mariadb-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-backup-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-common-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-connector-c-3.0.7-1.el8.x86_64
  mariadb-connector-c-config-3.0.7-1.el8.noarch
  mariadb-errmsg-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-gssapi-server-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-server-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  mariadb-server-utils-3:10.3.17-1.module_el8.1.0+257+48736ea6.x86_64
  perl-DBD-MySQL-4.046-3.module_el8.1.0+203+e45423dc.x86_64
  perl-DBI-1.641-3.module_el8.1.0+199+8f0a6bbd.x86_64
  perl-Data-Dumper-2.167-399.el8.x86_64
  perl-Digest-1.17-395.el8.noarch
  perl-Digest-MD5-2.55-396.el8.x86_64
  perl-Encode-4:2.97-3.el8.x86_64
  perl-File-Temp-0.230.600-1.el8.noarch
  perl-Getopt-Long-1:2.50-4.el8.noarch
  perl-HTTP-Tiny-0.074-1.el8.noarch
  perl-IO-Socket-IP-0.39-5.el8.noarch
  perl-IO-Socket-SSL-2.066-4.el8.noarch
  perl-MIME-Base64-3.15-396.el8.x86_64
  perl-Math-BigInt-1:1.9998.11-7.el8.noarch
  perl-Math-Complex-1.59-416.el8.noarch
  perl-Mozilla-CA-20160104-7.el8.noarch
  perl-Net-SSLeay-1.88-1.el8.x86_64
  perl-Pod-Escapes-1:1.07-395.el8.noarch
  perl-Pod-Perldoc-3.28-396.el8.noarch
  perl-Pod-Simple-1:3.35-395.el8.noarch
  perl-Pod-Usage-4:1.69-395.el8.noarch
  perl-Storable-1:3.11-3.el8.x86_64
  perl-Term-ANSIColor-4.06-396.el8.noarch
  perl-Term-Cap-1.17-395.el8.noarch
  perl-Text-ParseWords-3.30-395.el8.noarch
  perl-Time-Local-1:1.280-1.el8.noarch
  perl-URI-1.73-3.el8.noarch
  perl-libnet-3.11-3.el8.noarch
  perl-podlators-4.11-1.el8.noarch
  psmisc-23.1-4.el8.x86_64

Complete!

Enable and start MariaDB database service.

[root@cacti-01 ~]# systemctl enable --now mariadb.service
Created symlink /etc/systemd/system/mysql.service â /usr/lib/systemd/system/mariadb.service.
Created symlink /etc/systemd/system/mysqld.service â /usr/lib/systemd/system/mariadb.service.
Created symlink /etc/systemd/system/multi-user.target.wants/mariadb.service â /usr/lib/systemd/system/mariadb.service.

Configure MariaDB Server and set the password of root user.

[root@cacti-01 ~]# mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.

Set root password? [Y/n] Y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] Y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] Y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] Y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

 

Install PHP on CentOS 8:

Cacti is developed in PHP programming language, thus it requires a PHP supported web server to run. We have already installed Apache HTTP Server and now we are installing PHP on CentOS 8.

[root@cacti-01 ~]# dnf install -y php-fpm php-common php-mysqlnd php-xml php-ldap php-json php-cli php-gd php-gmp php-mbstring php-process
...
Installed:
  nginx-filesystem-1:1.14.1-9.module_el8.0.0+184+e34fea82.noarch
  php-common-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-fpm-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-ldap-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-mysqlnd-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-pdo-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-xml-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-json-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-cli-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  gd-2.2.5-6.el8.x86_64
  jbigkit-libs-2.1-14.el8.x86_64
  libXpm-3.5.12-8.el8.x86_64
  libjpeg-turbo-1.5.3-10.el8.x86_64
  libtiff-4.0.9-17.el8.x86_64
  libwebp-1.0.0-1.el8.x86_64
  php-gd-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-gmp-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-mbstring-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  php-process-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64

Complete!

Enable and start PHP-FPM Service.

[root@cacti-01 ~]# systemctl enable --now php-fpm.service
Created symlink /etc/systemd/system/multi-user.target.wants/php-fpm.service â /usr/lib/systemd/system/php-fpm.service.

 

Install SNMP on CentOS 8:

SNMP (Simple Network Management Protocol) is an Internet standard protocol for collecting and organizing information about managed devices on IP networks.

Install net-snmp and net-snmp-utils packages to install SNMP and php-snmp to enable PHP support for SNMP.

[root@cacti-01 ~]# dnf install -y net-snmp php-snmp net-snmp-utils
...
Installed:
  lm_sensors-libs-3.4.0-21.20180522git70f7e08.el8.x86_64
  net-snmp-1:5.8-14.el8.x86_64
  net-snmp-agent-libs-1:5.8-14.el8.x86_64
  net-snmp-libs-1:5.8-14.el8.x86_64
  php-snmp-7.2.24-1.module_el8.2.0+313+b04d0a66.x86_64
  net-snmp-utils-1:5.8-14.el8.x86_64

Complete!

 

Install RRDTool on CentOS 8:

Cacti requires RRDTool (RRD stands for Round Robin Database) for maintaining system metrics data. Therefore, we are installing rrdtool package using dnf command.

[root@cacti-01 ~]# dnf install -y rrdtool
...
Installed:
  cairo-1.15.12-3.el8.x86_64
  dejavu-fonts-common-2.35-6.el8.noarch
  dejavu-sans-mono-fonts-2.35-6.el8.noarch
  fontconfig-2.13.1-3.el8.x86_64
  fontpackages-filesystem-1.44-22.el8.noarch
  fribidi-1.0.4-8.el8.x86_64
  graphite2-1.3.10-10.el8.x86_64
  harfbuzz-1.7.5-3.el8.x86_64
  libX11-1.6.8-3.el8.x86_64
  libX11-common-1.6.8-3.el8.noarch
  libXau-1.0.8-13.el8.x86_64
  libXext-1.3.3-9.el8.x86_64
  libXft-2.3.2-10.el8.x86_64
  libXrender-0.9.10-7.el8.x86_64
  libdatrie-0.2.9-7.el8.x86_64
  libthai-0.1.27-2.el8.x86_64
  libxcb-1.13.1-1.el8.x86_64
  pango-1.42.4-6.el8.x86_64
  pixman-0.38.4-1.el8.x86_64
  rrdtool-1.7.0-16.el8.x86_64

Complete!

 

Configure PHP Settings for Cacti:

To use Cacti network monitoring server, we need to customize PHP settings accordingly.

Edit /etc/php.ini configuration file and configure it for using Cacti.

[root@cacti-01 ~]# vi /etc/php.ini

Locate and set following parameters therein.

safe_mode = Off                 ; Disable safe mode
date.timezone = "Asia/Karachi"  ; Define timezone to avoid warnings on time/date functions
file_uploads = On               ; Allow import of templates
memory_limit = 400M             ; maximum amount of memory a PHP script can consume
max_execution_time = 60         ; maximum execution time (in seconds) of a PHP script

 

Install Cacti on CentOS 8:

We are downloading latest stable version of Cacti from their official website.

[root@cacti-01 ~]# cd /tmp
[root@cacti-01 tmp]# wget https://www.cacti.net/downloads/cacti-1.2.12.tar.gz
--2020-06-19 09:50:55--  https://www.cacti.net/downloads/cacti-1.2.12.tar.gz
Resolving www.cacti.net (www.cacti.net)... 104.28.9.127, 172.67.196.107, 104.28.8.127, ...
Connecting to www.cacti.net (www.cacti.net)|104.28.9.127|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 25126474 (24M) [application/octet-stream]
Saving to: âcacti-1.2.12.tar.gzâ

cacti-1.2.12.tar.gz 100%[===================>]  23.96M  2.34MB/s    in 11s

2020-06-19 09:51:08 (2.12 MB/s) - âcacti-1.2.12.tar.gzâ saved [25126474/25126474]

Extract downloaded tarball into default DOCUMENT_ROOT.

[root@cacti-01 tmp]# tar -C /var/www/html -xzf cacti-1.2.12.tar.gz
[root@cacti-01 tmp]# cd

Rename the Cacti directory to a simple name for easy accessibility.

[root@cacti-01 ~]# mv /var/www/html/cacti-1.2.12 /var/www/html/cacti

 

Create a MariaDB Database for Cacti:

Connect with MariaDB server as root user.

[root@cacti-01 ~]# mysql -u root -p123
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 8
Server version: 10.3.17-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]>

Create a database for Cacti network monitoring server.

MariaDB [(none)]> create database cacti CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
Query OK, 1 row affected (0.112 sec)

Create a user for Cacti software and grant complete rights on cacti database.

MariaDB [(none)]> GRANT ALL ON cacti.* TO cacti@localhost IDENTIFIED BY 'Str0ngPa55word';
Query OK, 0 rows affected (0.254 sec)

Grant Time Zone selection privilege to cacti user.

MariaDB [(none)]> GRANT SELECT ON mysql.time_zone_name TO cacti@localhost;
Query OK, 0 rows affected (0.042 sec)

Reload privileges tables.

MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.083 sec)

Exit from MySQL shell.

MariaDB [(none)]> QUIT
Bye

Cacti tarball also contains a SQL script for creating the necessary database objects. We can use this script to create tables and other objects in the cacti database.

[root@cacti-01 ~]# mysql -D cacti -u cacti -pStr0ngPa55word < /var/www/html/cacti/cacti.sql

Before moving forward, we need to load the MariaDB timezone tables. Otherwise, the Cacti web installer will give you warning on timezones.

Use following command to load timezone tables with available timezones from CentOS 8 operating system.

[root@cacti-01 ~]# mysql_tzinfo_to_sql /usr/share/zoneinfo | mysql -u root -p123 mysql
Warning: Unable to load '/usr/share/zoneinfo/leapseconds' as time zone. Skipping it.
Warning: Unable to load '/usr/share/zoneinfo/tzdata.zi' as time zone. Skipping it.

Timezones has been successfully loaded into MariaDB tables. Don't worry about the warnings, it is because these files do not contain a valid timezone.

Edit MariaDB configuration file.

[root@cacti-01 ~]# vi /etc/my.cnf.d/mariadb-server.cnf

Set following global variables under [mysqld] section, as required by Cacti network monitoring software.

join_buffer_size=30M
innodb_file_format=Barracuda
innodb_buffer_pool_size=256M
innodb_buffer_pool_instances=1
innodb_flush_log_at_timeout=3
innodb_read_io_threads=32
innodb_write_io_threads=16
innodb_io_capacity=5000
innodb_io_capacity_max=10000
innodb_large_prefix=1
character_set_client=utf8mb4
character_set_server=utf8mb4
collation_server=utf8mb4_unicode_ci

 

Configure Cacti on CentOS 8:

Edit config.php file and update parameters according to your environment.

[root@cacti-01 ~]# vi /var/www/html/cacti/include/config.php

Locate and update following parameters.

$database_username = 'cacti';
$database_password = 'Str0ngPa55word';

Make apache user as owner of the Cacti software directory.

[root@cacti-01 ~]# chown -R apache:apache /var/www/html/cacti/

Restart Apache and PHP services to apply changes.

[root@cacti-01 ~]# systemctl restart httpd.service php-fpm.service

 

Configure SELinux for Cacti on CentOS 8:

Install required SELinux commands i.e. semanage by using dnf command..

[root@cacti-01 ~]# dnf install -y policycoreutils-python-utils-2.9-9.el8.noarch
...
Installed:
  checkpolicy-2.9-1.el8.x86_64
  policycoreutils-python-utils-2.9-9.el8.noarch
  python3-audit-3.0-0.17.20191104git1c2f876.el8.x86_64
  python3-libsemanage-2.9-2.el8.x86_64
  python3-policycoreutils-2.9-9.el8.noarch
  python3-setools-4.2.2-2.el8.x86_64

Complete!

Configure SELinux to allow read/write on the following directories.

[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/log(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/resource/snmp_queries(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/resource/script_server(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/resource/script_queries(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/scripts(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/cache/boost(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/cache/mibcache(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/cache/realtime(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/cache/spikekill(/.*)?"
[root@cacti-01 ~]# semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html/cacti/rra(/.*)?"

Reapply the filecontexts on the cacti directory.

[root@cacti-01 ~]# restorecon -R /var/www/html/cacti/

Configure a cron job to run poller.php script in every 5 minutes. This script will collect and update the system metrics in /rra directory.

[root@cacti-01 ~]# echo  "*/5 * * * *    apache   /usr/bin/php /var/www/html/cacti/poller.php > /dev/null 2>&1" >> /etc/crontab

Open URL http://cacti-01.centlinux.com/cacti in a client's browser such as Google Chrome.

Login by using default username/password i.e. admin/admin

Since, we are login to Cacti web interface for the first time, therefore, we are required to change the default password of admin user.

Read and accept the License Agreement of Cacti network monitoring software.

If you have followed the installation steps in this article correctly, then you won't found any warning on this page.

We are skipping a warning about innodb_buffer_pool_instances, a MariaDB global variable, because we are installing MariaDB on a machine with limited memory. If you install MariaDB on a machine with more than 1 GB RAM available for InnoDB buffer, you won't see this warning.

Choose your preferred installation type. Since, this is our first Cacti server therefore, we have selected "New Primary Server".

If you have configured the SELinux correctly, then there won't be any warnings.

Setup is checking for required binaries, their locations and required versions.

Setup will inform you about a security concern and how to handle it. Accept it and continue.

Adjust your default profile and continue.

Select the required device templates and continue.

Setup is checking the MariaDB server and database collation.

If your configurations are fine, then Cacti setup will display this page and it will ask you to start installation.

Cacti network monitoring server has been installed on CentOS 8.

After successful installation, you will reached at the Cacti Dashboard.

You can see some graphs by clicking on the Graphs tab.

We have successfully installed and configured Cacti network monitoring software on CentOS 8. Before you begin using the Cacti network monitoring server, we recommend that you should read Cacti Beginner's Guide - Second Edition by Packt Publishing. It will be really helpful to understand the Cacti web interface and it's usage.