Install Netbox on CentOS 7

Love The Way You Lie 2023-10-18 21:29 8阅读 0赞

## Install Netbox on CentOS 7 ##

[John W Kerns][]October 10, 2016

[![Packetsar\_Icon][Packetsar_Icon]][Packetsar_Icon_Packetsar_Icon]A few months ago, [Jeremy Stretch][] of [PacketLife][] released a new IPAM/DCIM open source solution on behalf of Digital Ocean called [Netbox][]. Most of the install documentation is centered around a Debian(ish) OS (of which I am not a big fan). After some googling and tinkering, I was able to get Netbox successfully installed on CentOS 7 using Apache as the web server. Below is the install process I worked out.

--------------------

This installation assumes a minimal install of CentOS 7 (available [here][]) with nothing done other than the install of the OS and configuration of the network adapter (can be done during install)

#### Variables Used ####

*  Netbox Version: **1.6.2-r1**
 *  Server Name: **netbox.mydomain.com**
 *  PSQL Username: **netbox**
 *  PSQL Password: **somepassword**
 *  Secret Key: **jkC3e8tzgLrDNS0**

#### Install Netbox Dependencies ####

*  Update CentOS (optional):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>yum update -y</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Install EPEL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>yum install -y epel-release</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Disable SELinux:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i --follow-symlinks 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Reboot Machine to take effect:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>shutdown -r now</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Install Packages:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>yum install -y git gcc wget postgresql-server python-psycopg2 postgresql-devel python-devel libxml2-devel libxslt libffi-devel graphviz openssl-devel libxslt-devel httpd python-pip supervisor python-gunicorn</p> </td> 
      </tr> 
     </tbody> 
    </table>

#### Set Up PostgreSQL (PSQL) ####

*  Enable PSQL on Startup:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>systemctl enable postgresql</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Initialize PSQL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>/usr/bin/postgresql-setup initdb</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Start PSQL Service:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>systemctl start postgresql</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Log into PSQL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sudo -u postgres psql</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Create new database:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>CREATE DATABASE netbox;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Create new user:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>CREATE USER netbox WITH PASSWORD 'somepassword';</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Grant Privs to database:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>GRANT ALL PRIVILEGES ON DATABASE netbox TO netbox;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Exit PSQL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>\q</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Set PSQL to allow login:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i -e 's/ident/md5/' /var/lib/pgsql/data/pg_hba.conf</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Restart PSQL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>systemctl restart postgresql</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Log into new database with new user, enter password when prompted (if you get a “*netbox=>*” prompt, you are good, otherwise you missed something):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>psql -U netbox -h localhost -W</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Exit PSQL:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>\q</p> </td> 
      </tr> 
     </tbody> 
    </table>

#### Install NetBox Files ####

Go find the release of Netbox you want to install from [here][here 1]. Grab the *tar.gz* URL path from the downloads section of the release. In this article, we are installing 1.6.2-r1.

*  Download the files:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>wget https://github.com/digitalocean/netbox/archive/v1.6.2-r1.tar.gz</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Extract to /opt:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>tar -xzf v1.6.2-r1.tar.gz -C /opt</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Create a symlink (shortcut) to the netbox directory:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>ln -s /opt/netbox-1.6.2-r1/ /opt/netbox</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Run the Netbox Installer (this one takes a while and will error out of any dependencies are missing):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sudo pip install -r /opt/netbox/requirements.txt</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Make a copy of the example config file:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>cp /opt/netbox/netbox/netbox/configuration.example.py /opt/netbox/netbox/netbox/configuration.py</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Set the server name or IP (replace “netbox.mydomain.com” with the DNS name or IP address of your server):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i --follow-symlinks "s/ALLOWED_HOSTS = \[\]/ALLOWED_HOSTS = \['netbox.mydomain.com'\]/g" /opt/netbox/netbox/netbox/configuration.py</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Set Database Username:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i --follow-symlinks "s/'USER': ''/'USER': 'netbox'/g" /opt/netbox/netbox/netbox/configuration.py</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Set database password:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i --follow-symlinks "s/'PASSWORD': ''/'PASSWORD': 'somepassword'/g" /opt/netbox/netbox/netbox/configuration.py</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Set Secret Key (replace “jkC3e8tzgLrDNS0” with something else if this will be production):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>sed -i --follow-symlinks "s/SECRET_KEY = ''/SECRET_KEY = 'jkC3e8tzgLrDNS0'/g" /opt/netbox/netbox/netbox/configuration.py</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Migrate data into the database:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>/opt/netbox/netbox/manage.py migrate</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Create a Netbox User for web login (follow the prompts to create the user):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>/opt/netbox/netbox/manage.py createsuperuser</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Move static files (type “yes” to confirm):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>/opt/netbox/netbox/manage.py collectstatic</p> </td> 
      </tr> 
     </tbody> 
    </table>

#### Run a Test ####

At this point, Netbox files are installed and we can use the built-in Django web server to test it

*  Run the test server:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;/opt/netbox/netbox/manage.py runserver 0.0.0.0:8000 --insecure&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Visit the server by going to **http://netbox.mydomain.com:8000**
    
     *  You should see the UI and be able to browse through it at this point, but we are not done yet

[![Netbox][Netbox 1]][Netbox_Netbox 1]

#### Web Server Integration (Apache) ####

Now we will set up Apache to host Netbox and set everything to run as a service and startup on boot. To do this, we will be creating three files on the system using the editor VI. You can google how to use VI, but here is what you need to know for this task:

*  Once VI is opened, hit the “i” key to enter edit mode
 *  After you have entered the text, hit the ESC key to exit from edit mode
 *  Once out of edit mode, type “:wq” to write the file and exit the app

Create the three files listed below with their text using the listed commands

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p>&lt;em&gt;&lt;strong&gt;vi /etc/httpd/conf.d/netbox.conf&lt;/strong&gt;&lt;/em&gt;</p> </td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> <p>6</p> <p>7</p> <p>8</p> <p>9</p> <p>10</p> <p>11</p> <p>12</p> <p>13</p> <p>14</p> <p>15</p> <p>16</p> <p>17</p> <p>18</p> <p>19</p> <p>20</p> </td> 
   <td> <p>&amp;lt;VirtualHost *:80&amp;gt;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; ProxyPreserveHost On</p> <p>&nbsp;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; ServerName netbox.mydomain.com</p> <p>&nbsp;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; Alias /static /opt/netbox/netbox/static</p> <p>&nbsp;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;Directory /opt/netbox/netbox/static&amp;gt;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Options Indexes FollowSymLinks MultiViews</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; AllowOverride None</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Require all granted</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/Directory&amp;gt;</p> <p>&nbsp;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;Location /static&amp;gt;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; ProxyPass !</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; &amp;lt;/Location&amp;gt;</p> <p>&nbsp;</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; ProxyPass / http://127.0.0.1:8001/</p> <p>&amp;nbsp;&amp;nbsp;&amp;nbsp; ProxyPassReverse / http://127.0.0.1:8001/</p> <p>&amp;lt;/VirtualHost&amp;gt;</p> </td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p>&lt;em&gt;&lt;strong&gt;vi /opt/netbox/gunicorn_config.py&lt;/strong&gt;&lt;/em&gt;</p> </td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> </td> 
   <td> <p>command = '/usr/bin/gunicorn'</p> <p>pythonpath = '/opt/netbox/netbox'</p> <p>bind = '0.0.0.0:8001'</p> <p>workers = 3</p> <p>user = 'apache'</p> </td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p>&lt;em&gt;&lt;strong&gt;vi /etc/supervisord.d/netbox.ini&lt;/strong&gt;&lt;/em&gt;</p> </td> 
  </tr> 
 </tbody> 
</table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> </td> 
   <td> <p>[program:netbox]</p> <p>command = gunicorn -c /opt/netbox/gunicorn_config.py netbox.wsgi</p> <p>directory = /opt/netbox/netbox/</p> <p>user = apache</p> </td> 
  </tr> 
 </tbody> 
</table>

#### Restart Services and Test ####

*  Enable Apache for Startup:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl enable httpd&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Restart Apache:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl restart httpd&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Enable Supervisor for Startup:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl enable supervisord&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Restart Supervisor:
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl restart supervisord&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Check status of Netbox service under Supervisor (you should see the Netbox service running):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;supervisorctl status&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Check status of Apache (status should show green and running):
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl status httpd&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>

At this point, you should be able to visit **http://netbox.mydomain.com** and see the UI, then log in using the superuser account you created. If you get a Bad Request 400 error, then check that you replaced “netbox.mydomain.com” with the same DNS name or IP address that you are using in your browser to get to the server.

#### Set Up SSL ####

If you want to set up SSL for Netbox, here is a quick and dirty process you can follow

*  Install the Apache SSL Mod
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;yum -y install mod_ssl&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Generate a self-signed SSL certificate
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;openssl req -newkey rsa:2048 -nodes -keyout netbox_ssl.key -x509 -days &lt;a href="tel:3650"&gt;3650&lt;/a&gt; -out netbox_ssl.crt&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Modify the ***/etc/httpd/conf.d/ssl.conf*** SSL config file
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;vi nano /etc/httpd/conf.d/ssl.conf&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
    
     *  Modify the ***SSLCertificateFile*** setting to point to your new ***netbox\_ssl.crt*** file
     *  Modify the ***SSLCertificateKeyFile*** setting to point to your new ***netbox\_ssl.key*** file
     *  Add the VirtualHost config below the existing ***<VirtualHost \_default\_:443>***tag

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> <p>6</p> <p>7</p> <p>8</p> <p>9</p> <p>10</p> <p>11</p> <p>12</p> <p>13</p> <p>14</p> <p>15</p> <p>16</p> <p>17</p> <p>18</p> </td> 
   <td> <p>ProxyPreserveHost On</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;ServerName netbox.mydomain.com</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;Alias /static /opt/netbox/netbox/static</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Options Indexes FollowSymLinks MultiViews</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AllowOverride None</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Require all granted</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ProxyPass !</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;ProxyPass / http://127.0.0.1:8001/</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;ProxyPassReverse / http://127.0.0.1:8001/</p> </td> 
  </tr> 
 </tbody> 
</table>

*  Restart Apache to have config take effect
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;systemctl restart httpd&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>
 *  Browse to https://netbox.mydomain.com and make sure the site works with SSL
 *  To disable non-SSL connectivity and automatically redirect it to SSL, modify your original VirtualHost config
    
    <table> 
     <tbody> 
      <tr> 
       <td> <p>1</p> </td> 
       <td> <p>&lt;em&gt;&lt;strong&gt;vi /etc/httpd/conf.d/netbox.conf&lt;/strong&gt;&lt;/em&gt;</p> </td> 
      </tr> 
     </tbody> 
    </table>

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> </td> 
   <td> <p>&nbsp;&nbsp;&nbsp;&nbsp;ProxyPreserveHost On</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;ServerName netbox.mydomain.com</p> <p>&nbsp;</p> <p>&nbsp;&nbsp;&nbsp;&nbsp;Redirect "/" "https://netbox.mydomain.com/"</p> </td> 
  </tr> 
 </tbody> 
</table>

[John W Kerns]: https://packetpushers.net/author/john-w-kerns/
[Packetsar_Icon]: https://packetpushers.net/wp-content/uploads/2016/10/PacketsarIcon-150x150.png
[Packetsar_Icon_Packetsar_Icon]: https://packetpushers.net/wp-content/uploads/2016/10/PacketsarIcon.png
[Jeremy Stretch]: https://twitter.com/packetlife
[PacketLife]: http://packetlife.net/
[Netbox]: https://github.com/digitalocean/netbox
[here]: http://isoredirect.centos.org/centos/7/isos/x86_64/CentOS-7-x86_64-Minimal-1511.iso
[here 1]: https://github.com/digitalocean/netbox/releases
[Netbox 1]: https://packetpushers.net/wp-content/uploads/2016/10/Netbox-300x161.png
[Netbox_Netbox 1]: https://packetpushers.net/wp-content/uploads/2016/10/Netbox.png