mirror of
https://github.com/enix/x509-certificate-exporter.git
synced 2026-02-14 18:10:01 +00:00
14f6bb149b
If the MemoryHigh value is set and too low regarding real memory usage, the exporter is heavilly slowed down and may take too long to respond, resulting in a "context deadline exceeded" on Prometheus side. Memory used usually vary between 10 and 20MiB, remove the MemoryHigh limit which do more harm than good and increase default MemoryMax to allow memory usage spike if needed.
Installation for Linux
If you wish to run the exporter with systemd, a service file available here.
We do not build packages for any distro and recommend the use of an automated configuration system such as Ansible.
Security can be improved with mTLS using exporter_exporter.
Quick Install
Use this shell snippet for evaluation or a quick-and-dirty deployment.
# replace with latest version released
VERSION=3.X.X
TMP=$(mktemp)
curl -L -o ${TMP} https://github.com/enix/x509-certificate-exporter/releases/download/v${VERSION}/x509-certificate-exporter-linux-amd64.tar.gz
sudo tar xvfz ${TMP} -C /usr/local/bin/ x509-certificate-exporter
sudo chown root:root /usr/local/bin/x509-certificate-exporter
sudo chmod 755 /usr/local/bin/x509-certificate-exporter
curl -L -o ${TMP} https://raw.githubusercontent.com/enix/x509-certificate-exporter/master/deploy/linux/x509-certificate-exporter.service
sudo install -o root -g root -m 644 ${TMP} /etc/systemd/system/x509-certificate-exporter.service
rm -f ${TMP}
# edit exporter arguments in /etc/systemd/system/x509-certificate-exporter.service
# no configuration is supported
sudo systemctl daemon-reload
sudo systemctl enable --now x509-certificate-exporter
sudo systemctl status x509-certificate-exporter