Install and configure a Grafana server: Difference between revisions

From techdocs
Jump to navigation Jump to search
(initial stub)
 
No edit summary
Line 13: Line 13:
</code>
</code>


* Install the Grafana package
* Install the Grafana package:
<code>apt update && apt install grafana-enterprise</code>
 
* Enable port-80 operation
<code># systemctl edit grafana-server</code> and insert:
<code>
<code>
apt update && apt install grafana-enterprise
[Service]
# Give the CAP_NET_BIND_SERVICE capability
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
 
# A private user cannot have process capabilities on the host's user
# namespace and thus CAP_NET_BIND_SERVICE has no effect.
PrivateUsers=false
</code>
</code>

Revision as of 14:41, 19 August 2022

  • Create a bare-bones nw server - no host-classes needed, just an IP address and host
  • Add the Grafana repository to /etc/apt/sources.list.d/grafana.list:

deb https://packages.grafana.com/enterprise/deb stable main

  • Grab the Grafana gpg key to allow installation from the repository:

apt install -y apt-transport-https software-properties-common wget gnupg

wget -q -O - https://packages.grafana.com/gpg.key

cat gpg.key | gpg --dearmor -o /etc/apt/trusted.gpg.d/grafana.gpg

  • Install the Grafana package:

apt update && apt install grafana-enterprise

  • Enable port-80 operation

# systemctl edit grafana-server and insert: [Service]

  1. Give the CAP_NET_BIND_SERVICE capability

CapabilityBoundingSet=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE

  1. A private user cannot have process capabilities on the host's user
  2. namespace and thus CAP_NET_BIND_SERVICE has no effect.

PrivateUsers=false