cd /root/download
wget 'https://centos7.iuscommunity.org/ius-release.rpm'yum install -y ius-release.rpmyum install -y httpd php56u php56u-cli php56u-mysql php56u-mbstring php56u-mcrypt php56u-xml php56u-xmlrpc php56u-intl php56u-pecl-jsonc php56u-pecl-memcache php56u-pecl-memcached php56u-bcmath php56u-gd php56u-opcache php56u-pecl-redis mod_sslsed -i 's/;date.timezone =/date.timezone = "Asia\/Kuala_Lumpur"/g' /etc/php.inised -i 's/short_open_tag = Off/short_open_tag = On/g' /etc/php.inised -i 's/;error_log = syslog/error_log = syslog/g' /etc/php.inised -i 's/post_max_size = 8M/post_max_size = 32M/g' /etc/php.inised -i 's/max_execution_time = 30/max_execution_time = 600/g' /etc/php.inised -i 's/max_input_time = 60/max_input_time = 600/g' /etc/php.inised -i 's/;always_populate_raw_post_data = -1/always_populate_raw_post_data = -1/g' /etc/php.inivi /etc/httpd/conf/httpd.confServerRoot "/etc/httpd"ServerTokens prodPidFile run/httpd.pidUser apacheGroup apacheSetEnv SCR8_ENV productionSetEnv ENVIRONMENT productionListen 0.0.0.0:80ServerAdmin support@sky3888.comServerName myself.zabbix.comUseCanonicalName OffHostnameLookups OffKeepAlive OnKeepAliveTimeout 60DirectoryIndex index.php index.html index.html.varTypesConfig /etc/mime.typesAccessFileName .htaccessAcceptPathInfo On<IfModule prefork.c>StartServers 5MinSpareServers 5MaxSpareServers 10ServerLimit 128MaxClients 128MaxRequestsPerChild 128</IfModule>LoadModule mpm_prefork_module modules/mod_mpm_prefork.soLoadModule unixd_module modules/mod_unixd.soLoadModule systemd_module modules/mod_systemd.soLoadModule authn_core_module modules/mod_authn_core.soLoadModule access_compat_module modules/mod_access_compat.soLoadModule authz_core_module modules/mod_authz_core.so#LoadModule authz_user_module modules/mod_authz_user.so#LoadModule auth_basic_module modules/mod_auth_basic.so#LoadModule authn_file_module modules/mod_authn_file.so#LoadModule autoindex_module modules/mod_autoindex.so#LoadModule negotiation_module modules/mod_negotiation.so#LoadModule headers_module modules/mod_headers.soLoadModule authz_host_module modules/mod_authz_host.soLoadModule log_config_module modules/mod_log_config.soLoadModule setenvif_module modules/mod_setenvif.soLoadModule mime_module modules/mod_mime.soLoadModule dir_module modules/mod_dir.soLoadModule alias_module modules/mod_alias.soLoadModule rewrite_module modules/mod_rewrite.so#LoadModule status_module modules/mod_status.so#LoadModule ssl_module modules/mod_ssl.soLoadModule env_module modules/mod_env.soLoadModule php5_module modules/libphp5.soAddHandler php5-script .phpAddType text/html .phpDocumentRoot /var/www/html<Directory /> Options FollowSymLinks AllowOverride None</Directory><Directory /var/www/html> Options FollowSymLinks AllowOverride None Order allow,deny Allow from all</Directory><Files ~ ^\.ht> Order allow,deny Deny from all Satisfy All</Files>LogLevel warn<IfModule log_config_module> LogFormat "%V \"%{X-Forwarded-For}i\" %h %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined LogFormat "%h %l %u %t \"%r\" %>s %b" common SetEnvIf User-Agent ".*internal dummy connection.*" dontlog CustomLog "|/usr/bin/logger -t apache-access -p local6.notice" combined env=!dontlog ErrorLog "|/usr/bin/logger -t apache-error -p local6.err"</IfModule>#NameVirtualHost *:80## myself.zabbix.com#<VirtualHost *:80> ServerAdmin support@sky3888.com DocumentRoot /var/www/html/zabbix ServerName myself.zabbix.com RewriteEngine on ErrorLog "|/usr/bin/logger -t apache-error -p local6.err" CustomLog "|/usr/bin/logger -t apache-access -p local6.notice" combined env=!dontlog <Directory /var/www/html/zabbix/> Options FollowSymLinks AllowOverride all Order allow,deny allow from all </Directory></VirtualHost>apachectl configtestmysql5.7cd /root/download/wget https://dev.mysql.com/get/mysql80-community-release-el7-1.noarch.rpmrpm -Uvh mysql80-community-release-el7-1.noarch.rpmyum repolist all | grep mysqlyum install -y yum-utilsyum-config-manager --disable mysql80-communityyum-config-manager --enable mysql57-communityyum repolist all | grep mysqlyum install -y mysql-community-servervi /etc/my.cnf[mysqld]## Generalignore-db-dir = lost+founddatadir = /var/lib/mysqlsocket = /var/lib/mysql/mysql.socktmpdir = /var/lib/mysqltmp## Cachetable-definition-cache = 4096table-open-cache = 4096#table-open-cache-instances = 1#thread-cache-size = 16#query-cache-size = 32M#query-cache-type = 1## Per-thread Buffersjoin-buffer-size = 512Kread-buffer-size = 512Kread-rnd-buffer-size = 512Ksort-buffer-size = 512K## Temp Tablesmax-heap-table-size = 64Mtmp-table-size = 32M## Networking#interactive-timeout = 3600max-connections = 400max-connect-errors = 1000000max-allowed-packet = 64Mskip-name-resolvewait-timeout = 600## MyISAMkey-buffer-size = 64M#myisam-recover = FORCE,BACKUPmyisam-sort-buffer-size = 128M## InnoDBdefault_storage_engine = innodbinnodb-buffer-pool-size = 4Ginnodb-data-file-path = ibdata1:64M:autoextend#innodb-file-format = Barracudainnodb-file-per-table = 1innodb-flush-method = O_DIRECTinnodb-log-file-size = 128Minnodb_max_dirty_pages_pct = 75#innodb_doublewrite = 0#innodb_thread_concurrency = 4innodb_flush_log_at_trx_commit = 1innodb_log_buffer_size = 32Minnodb_log_file_size = 256Minnodb_log_files_in_group = 3innodb_lock_wait_timeout = 120## Replication and PITRbinlog-format = ROWexpire-logs-days = 7log-bin = /var/log/mysql/bin-log#log-slave-updates = 1max-binlog-size = 128M#read-only = 1#relay-log = /var/log/mysql/relay-log#relay-log-space-limit = 16Gserver-id = 1## Logging#log-output = FILE#log-slow-admin-statements#log-slow-slave-statements#log-warnings = 0long-query-time = 1slow-query-log = 1slow-query-log-file = /var/log/mysql/slow-log[mysqld_safe]log-error = /var/log/mysqld.log#malloc-lib = /usr/lib64/libjemalloc.so.1open-files-limit = 65535[mysql]no-auto-rehashsocket=/var/lib/mysql/mysql.sockprompt=\u:[\d]>\_mkdir /var/lib/mysqltmpmkdir /var/log/mysqlchown -R mysql.mysql /var/log/mysqlchown -R mysql.mysql /var/lib/mysqltmpmysqld --defaults-file=/etc/my.cnf --initialize-insecure --user=mysqlyum install -y policycoreutils-pythonsemanage fcontext --list|grep mysqlsemanage fcontext -a -t mysqld_db_t "/var/log/mysql(/.*)?"restorecon -Rv /var/log/mysqlsystemctl start mysqldmysql_secure_installationpasswd:Zabbixxxxmysql_config_editor set --login-path=root --host=localhost --user=root --passwordmysql --login-path=rootmysql>grant all privileges on zabbix.* to zabbix@'%' identified by 'Zabbixxxx';mysql>create database zabbix default charset utf8 COLLATE utf8_general_ci;zabbix-servercd /root/download/wget http://repo.zabbix.com/zabbix/3.4/rhel/7/x86_64/zabbix-release-3.4-2.el7.noarch.rpmyum install zabbix-release-3.4-2.el7.noarch.rpm -yyum install -y zabbix-proxy-mysql zabbix-server-mysql zabbix-web-mysql zabbix-getzcat /usr/share/doc/zabbix-server-mysql-3.4.15/create.sql.gz |mysql -uzabbix -p zabbixvi /etc/zabbix/zabbix_server.confLogFile=/var/log/zabbix/zabbix_server.logLogFileSize=0PidFile=/var/run/zabbix/zabbix_server.pidDBHost=xxxDBName=zabbixDBUser=zabbixDBPassword=ZabbixxxStartPollers=30SNMPTrapperFile=/var/log/snmptrap/snmptrap.logTimeout=8AlertScriptsPath=/usr/lib/zabbix/alertscriptsExternalScripts=/usr/lib/zabbix/externalscriptsLogSlowQueries=3000setsebool -P httpd_can_network_connect onsetsebool -P mysql_connect_any onsetsebool -P zabbix_can_network oncd /root/download/vi zabbix_server_add.temodule zabbix_server_add 1.1;require { type zabbix_var_run_t; type tmp_t; type zabbix_t; class sock_file { create unlink write }; class unix_stream_socket connectto; class process setrlimit;}#============= zabbix_t ==============#!!!! This avc is allowed in the current policyallow zabbix_t self:process setrlimit;#!!!! This avc is allowed in the current policyallow zabbix_t self:unix_stream_socket connectto;#!!!! This avc is allowed in the current policyallow zabbix_t tmp_t:sock_file { create unlink write };#!!!! This avc is allowed in the current policyallow zabbix_t zabbix_var_run_t:sock_file { create unlink write };checkmodule -M -m -o zabbix_server_add.mod zabbix_server_add.tesemodule_package -m zabbix_server_add.mod -o zabbix_server_add.ppsemodule -i zabbix_server_add.ppausearch -c 'python' --raw | audit2allow -M my-pythonsemodule -i my-python.pp systemctl start zabbix-serversystemctl start httpdcp -R /usr/share/zabbix /var/www/html/http://xxxxcentos7 zabbix-agentcd /root/download/wget http://repo.zabbix.com/zabbix/3.4/rhel/7/x86_64/zabbix-agent-3.4.14-1.el7.x86_64.rpmyum install -y zabbix-agent-3.4.14-1.el7.x86_64.rpmvi /etc/zabbix/zabbix_agentd.confPidFile=/var/run/zabbix/zabbix_agentd.pidLogFile=/var/log/zabbix/zabbix_agentd.logLogFileSize=1DebugLevel=3Server=xxxListenPort=10050StartAgents=3AllowRoot=0User=zabbixInclude=/etc/zabbix/zabbix_agentd.d/*.confsystemctl enable zabbix-agentsystemctl start zabbix-agentselinux for zabbix exec pythonsemanage permissive -a zabbix_agent_t