Allow to start Zabbix processes under root and other users

This commit is contained in:
Alexey Pustovalov 2019-10-03 20:52:14 +03:00
parent 7fb5abe44f
commit 7b5b22da8f
13 changed files with 46 additions and 9 deletions

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix agent" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
mkdir -p /etc/zabbix && \

View File

@ -104,7 +104,6 @@ update_config_multiple_var() {
prepare_zbx_agent_config() {
echo "** Preparing Zabbix agent configuration file"
ZBX_AGENT_CONFIG=$ZABBIX_ETC_DIR/zabbix_agentd.conf
: ${ZBX_PASSIVESERVERS:=""}
@ -172,6 +171,12 @@ prepare_zbx_agent_config() {
update_config_var $ZBX_AGENT_CONFIG "TLSKeyFile" "${ZBX_TLSKEYFILE}"
update_config_var $ZBX_AGENT_CONFIG "TLSPSKIdentity" "${ZBX_TLSPSKIDENTITY}"
update_config_var $ZBX_AGENT_CONFIG "TLSPSKFile" "${ZBX_TLSPSKFILE}"
if [ "$(id -u)" != '0' ]; then
update_config_var $ZBX_AGENT_CONFIG "User" "$(whoami)"
else
update_config_var $ZBX_AGENT_CONFIG "AllowRoot" "1"
fi
}
prepare_agent() {

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix Java Gateway" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
mkdir -p /etc/zabbix/ && \

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix proxy (MySQL)" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
mkdir -p /etc/zabbix && \

View File

@ -375,6 +375,12 @@ update_zbx_config() {
update_config_var $ZBX_CONFIG "TLSPSKIdentity" "${ZBX_TLSPSKIDENTITY}"
update_config_var $ZBX_CONFIG "TLSPSKFile" "${ZBX_TLSPSKFILE}"
if [ "$(id -u)" != '0' ]; then
update_config_var $ZBX_CONFIG "User" "$(whoami)"
else
update_config_var $ZBX_CONFIG "AllowRoot" "1"
fi
}
prepare_proxy() {

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix proxy (SQLite3)" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
mkdir -p /etc/zabbix && \

View File

@ -225,6 +225,12 @@ update_zbx_config() {
update_config_var $ZBX_CONFIG "TLSPSKIdentity" "${ZBX_TLSPSKIDENTITY}"
update_config_var $ZBX_CONFIG "TLSPSKFile" "${ZBX_TLSPSKFILE}"
if [ "$(id -u)" != '0' ]; then
update_config_var $ZBX_CONFIG "User" "$(whoami)"
else
update_config_var $ZBX_CONFIG "AllowRoot" "1"
fi
}
prepare_proxy() {

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix server (MySQL)" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
adduser zabbix dialout && \

View File

@ -417,6 +417,12 @@ update_zbx_config() {
update_config_var $ZBX_CONFIG "TLSCertFile" "${ZBX_TLSCERTFILE}"
update_config_var $ZBX_CONFIG "TLSKeyFile" "${ZBX_TLSKEYFILE}"
if [ "$(id -u)" != '0' ]; then
update_config_var $ZBX_CONFIG "User" "$(whoami)"
else
update_config_var $ZBX_CONFIG "AllowRoot" "1"
fi
}
prepare_server() {

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix server (PostgreSQL)" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
zabbix && \
adduser zabbix dialout && \

View File

@ -384,6 +384,12 @@ update_zbx_config() {
update_config_var $ZBX_CONFIG "TLSCertFile" "${ZBX_TLSCERTFILE}"
update_config_var $ZBX_CONFIG "TLSKeyFile" "${ZBX_TLSKEYFILE}"
if [ "$(id -u)" != '0' ]; then
update_config_var $ZBX_CONFIG "User" "$(whoami)"
else
update_config_var $ZBX_CONFIG "AllowRoot" "1"
fi
}
prepare_server() {

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix web-interface (Apache, MySQL)" \
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
-H \
zabbix && \

View File

@ -10,9 +10,10 @@ LABEL org.opencontainers.image.title="Zabbix web-interface (Apache, PostgreSQL)"
STOPSIGNAL SIGTERM
RUN set -eux && \
addgroup zabbix && \
addgroup -S -g 1000 zabbix && \
adduser -S \
-D -G zabbix \
-u 999 \
-h /var/lib/zabbix/ \
-H \
zabbix && \