Added sudo package for nmap processing

This commit is contained in:
Alexey Pustovalov 2022-12-16 16:23:51 +09:00
parent 5e0fb5d0bb
commit 769368bf28
19 changed files with 38 additions and 0 deletions

View File

@ -36,6 +36,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/database/mysql/create_proxy.sql
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
iputils \ iputils \
@ -69,6 +70,7 @@ RUN set -eux && \
--home /var/lib/zabbix/ \ --home /var/lib/zabbix/ \
zabbix && \ zabbix && \
adduser zabbix root && \ adduser zabbix root && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/enc && \ mkdir -p /var/lib/zabbix/enc && \

View File

@ -37,6 +37,7 @@ RUN set -eux && \
REPOLIST="baseos,appstream,epel" && \ REPOLIST="baseos,appstream,epel" && \
INSTALL_PKGS="libevent \ INSTALL_PKGS="libevent \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
gzip \ gzip \
@ -75,6 +76,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/enc && \ mkdir -p /var/lib/zabbix/enc && \

View File

@ -37,6 +37,7 @@ COPY ["conf/etc/yum.repos.d/oracle-epel-ol8.repo", "/etc/yum.repos.d/oracle-epel
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="libevent \ INSTALL_PKGS="libevent \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
gzip \ gzip \
@ -76,6 +77,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/enc && \ mkdir -p /var/lib/zabbix/enc && \

View File

@ -55,6 +55,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/database/mysql/create_proxy.sql
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
shadow-utils \ shadow-utils \
@ -105,6 +106,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/enc && \ mkdir -p /var/lib/zabbix/enc && \

View File

@ -37,6 +37,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/database/mysql/create_proxy.sql
RUN set -eux && \ RUN set -eux && \
echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \ echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \
INSTALL_PKGS="tini \ INSTALL_PKGS="tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
ca-certificates \ ca-certificates \
@ -70,6 +71,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/enc && \ mkdir -p /var/lib/zabbix/enc && \

View File

@ -35,6 +35,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/conf/zabbix_proxy.conf", "/etc/
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
fping \ fping \
@ -66,6 +67,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home /var/lib/zabbix/ \ --home /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
adduser zabbix root && \ adduser zabbix root && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \

View File

@ -36,6 +36,7 @@ RUN set -eux && \
REPOLIST="baseos,appstream,epel" && \ REPOLIST="baseos,appstream,epel" && \
INSTALL_PKGS="libevent \ INSTALL_PKGS="libevent \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
libssh \ libssh \
@ -71,6 +72,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/db_data && \ mkdir -p /var/lib/zabbix/db_data && \

View File

@ -36,6 +36,7 @@ COPY ["conf/etc/yum.repos.d/oracle-epel-ol8.repo", "/etc/yum.repos.d/oracle-epel
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="libevent \ INSTALL_PKGS="libevent \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
libssh \ libssh \
@ -72,6 +73,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/db_data && \ mkdir -p /var/lib/zabbix/db_data && \

View File

@ -54,6 +54,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/conf/zabbix_proxy.conf", "/etc/
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
shadow-utils \ shadow-utils \
@ -101,6 +102,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/db_data && \ mkdir -p /var/lib/zabbix/db_data && \

View File

@ -36,6 +36,7 @@ RUN set -eux && \
echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \ echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
ca-certificates \ ca-certificates \
@ -68,6 +69,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /var/lib/zabbix/db_data && \ mkdir -p /var/lib/zabbix/db_data && \

View File

@ -37,6 +37,7 @@ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
fping \ fping \
sudo \
traceroute \ traceroute \
nmap \ nmap \
tzdata \ tzdata \
@ -71,6 +72,7 @@ RUN set -eux && \
zabbix && \ zabbix && \
adduser zabbix root && \ adduser zabbix root && \
adduser zabbix dialout && \ adduser zabbix dialout && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -37,6 +37,7 @@ RUN set -eux && \
REPOLIST="baseos,appstream,epel" && \ REPOLIST="baseos,appstream,epel" && \
INSTALL_PKGS="fping \ INSTALL_PKGS="fping \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
file-libs \ file-libs \
@ -77,6 +78,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -38,6 +38,7 @@ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
fping \ fping \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
file-libs \ file-libs \
@ -79,6 +80,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -55,6 +55,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/database/mysql/create_server.sq
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
fping \ fping \
@ -107,6 +108,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -37,6 +37,7 @@ RUN set -eux && \
echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \ echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
tzdata \ tzdata \
@ -73,6 +74,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -37,6 +37,7 @@ COPY --from=builder ["/tmp/zabbix-${ZBX_VERSION}/database/postgresql/timescaledb
RUN set -eux && \ RUN set -eux && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
fping \ fping \
@ -72,6 +73,7 @@ RUN set -eux && \
zabbix && \ zabbix && \
adduser zabbix root && \ adduser zabbix root && \
adduser zabbix dialout && \ adduser zabbix dialout && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -39,6 +39,7 @@ RUN set -eux && \
INSTALL_PKGS="fping \ INSTALL_PKGS="fping \
file-libs \ file-libs \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
iputils \ iputils \
@ -77,6 +78,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -39,6 +39,7 @@ RUN set -eux && \
INSTALL_PKGS="fping \ INSTALL_PKGS="fping \
file-libs \ file-libs \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
iputils \ iputils \
@ -79,6 +80,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \

View File

@ -38,6 +38,7 @@ RUN set -eux && \
echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \ echo "#!/bin/sh\nexit 101" > /usr/sbin/policy-rc.d && \
INSTALL_PKGS="bash \ INSTALL_PKGS="bash \
tini \ tini \
sudo \
traceroute \ traceroute \
nmap \ nmap \
tzdata \ tzdata \
@ -74,6 +75,7 @@ RUN set -eux && \
--shell /sbin/nologin \ --shell /sbin/nologin \
--home-dir /var/lib/zabbix/ \ --home-dir /var/lib/zabbix/ \
zabbix && \ zabbix && \
echo "zabbix ALL=(root) NOPASSWD: /usr/bin/nmap" >> /etc/sudoers.d/zabbix && \
mkdir -p /etc/zabbix && \ mkdir -p /etc/zabbix && \
mkdir -p /var/lib/zabbix && \ mkdir -p /var/lib/zabbix && \
mkdir -p /usr/lib/zabbix/alertscripts && \ mkdir -p /usr/lib/zabbix/alertscripts && \