CheckMK
prérequis
- Debian 13 ou 12
- Google Chrome >= 131; Firefox >= 133; Microsoft Edge >= 131; Safari >= 18.1
- Seconde machine
Docker
Prérequis
Désinstallation des paquets conflictuels
apt remove $(dpkg --get-selections docker.io docker-compose docker-doc podman-docker containerd runc | cut -f1)
Installation
# Add Docker's official GPG key:
apt update
apt install ca-certificates curl
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
chmod a+r /etc/apt/keyrings/docker.asc
# Add the repository to Apt sources:
tee /etc/apt/sources.list.d/docker.sources <<EOF
Types: deb
URIs: https://download.docker.com/linux/debian
Suites: $(. /etc/os-release && echo "$VERSION_CODENAME")
Components: stable
Signed-By: /etc/apt/keyrings/docker.asc
EOF
apt update
apt install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
Vérification
systemctl status docker
systemctl start docker
docker run hello-world
CheckMK
Tout ce qui est expliqué plus bas peut ce retrouver sur ces sources :
Déploiement du conteneur
mkdir -p checkmk
cd /var/opt/checkmk
touch docker-compose.yml
services:
checkmk:
image: "checkmk/check-mk-raw:2.4.0-latest"
container_name: "bigbrother"
environment:
- CMK_PASSWORD=mypassword #Entrer un mot de passe
- TZ=Europe/Paris
volumes:
- bigbrother:/omd/sites
tmpfs:
- /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
ports:
- 8080:5000
- 8000:8000
restart: always
volumes:
bigbrother:
Mise en place de mkcert
mkdir -p /var/opt/certif
cd /var/opt/certif
curl -sSL https://github.com/FiloSottile/mkcert/releases/latest/download/mkcert-v1.4.4-linux-amd64 -o /usr/local/bin/mkcert
chmod +x /usr/local/bin/mkcert
mkcert -install
mkcert bigbrother.eyrode.lan
ls -la
Ajout de caddy
docker compose complet
services:
checkmk:
image: "checkmk/check-mk-raw:2.4.0-latest"
container_name: "bigbrother"
environment:
- CMK_PASSWORD=mypassword #Entrer un mot de passe
- TZ=Europe/Paris
volumes:
- bigbrother:/omd/sites
tmpfs:
- /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
restart: always
caddy:
image: caddy:latest
container_name: "caddy"
ports:
- "80:80"
- "443:443"
volumes:
- /var/opt/certif:/certs:ro
- ./Caddyfile:/etc/caddy/Caddyfile:ro
depends_on:
- checkmk
restart: always
volumes:
bigbrother:
CaddyFile
bigbrother.eyrode.lan {
tls /certs/bigbrother.eyrode.lan.crt /certs/bigbrother.eyrode.lan.key
reverse_proxy checkmk:5000
}