Added OpenSSL package to server and sqlite3 images. Required to perform rehash of added CA certificates

2025-06-27 05:11:31 +02:00 · 2025-01-16 13:53:02 +09:00 · 2025-01-16 13:53:02 +09:00 · df3dbcc479
commit df3dbcc479
parent 792e0270a1
39 changed files with 66 additions and 0 deletions
--- a/Dockerfiles/proxy-mysql/alpine/Dockerfile
+++ b/Dockerfiles/proxy-mysql/alpine/Dockerfile
@ -44,6 +44,7 @@ RUN set -eux && \
            traceroute \
            nmap \
            iputils \
+            openssl \
            libcap \
            libcurl \
            libevent \
--- a/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh
@ -509,6 +509,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-mysql/centos/Dockerfile
+++ b/Dockerfiles/proxy-mysql/centos/Dockerfile
@ -55,6 +55,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            shadow-utils \
--- a/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh
@ -506,6 +506,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-mysql/ol/Dockerfile
+++ b/Dockerfiles/proxy-mysql/ol/Dockerfile
@ -55,6 +55,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            zlib \
--- a/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh
@ -506,6 +506,11 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    update_config_var $ZBX_CONFIG "WebDriverURL" "${ZBX_WEBDRIVERURL}"
+    update_config_var $ZBX_CONFIG "StartBrowserPollers" "${ZBX_STARTBROWSERPOLLERS}"
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-mysql/rhel/Dockerfile
+++ b/Dockerfiles/proxy-mysql/rhel/Dockerfile
@ -70,6 +70,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            libcurl \
            libevent \
            openldap \
+            openssl \
            libssh \
            libxml2 \
            mysql \
--- a/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh
@ -506,6 +506,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-mysql/ubuntu/Dockerfile
+++ b/Dockerfiles/proxy-mysql/ubuntu/Dockerfile
@ -48,6 +48,7 @@ RUN --mount=type=cache,target=/var/cache/apt/,sharing=locked \
            nmap \
            ca-certificates \
            fping \
+            openssl \
            libcurl4t64 \
            libevent-2.1 \
            libmysqlclient21 \
--- a/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh
@ -506,6 +506,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-sqlite3/alpine/Dockerfile
+++ b/Dockerfiles/proxy-sqlite3/alpine/Dockerfile
@ -44,6 +44,7 @@ RUN set -eux && \
            nmap \
            fping \
            iputils \
+            openssl \
            libcap \
            libcurl \
            libevent \
--- a/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh
@ -262,6 +262,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-sqlite3/centos/Dockerfile
+++ b/Dockerfiles/proxy-sqlite3/centos/Dockerfile
@ -51,6 +51,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            shadow-utils \
--- a/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh
@ -262,6 +262,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-sqlite3/ol/Dockerfile
+++ b/Dockerfiles/proxy-sqlite3/ol/Dockerfile
@ -52,6 +52,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            zlib \
--- a/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh
@ -262,6 +262,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-sqlite3/rhel/Dockerfile
+++ b/Dockerfiles/proxy-sqlite3/rhel/Dockerfile
@ -69,6 +69,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            libcurl \
            libevent \
            openldap \
+            openssl \
            libssh \
            libxml2 \
            net-snmp-agent-libs \
--- a/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh
@ -262,6 +262,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/proxy-sqlite3/ubuntu/Dockerfile
+++ b/Dockerfiles/proxy-sqlite3/ubuntu/Dockerfile
@ -47,6 +47,7 @@ RUN --mount=type=cache,target=/var/cache/apt/,sharing=locked \
            nmap \
            ca-certificates \
            fping \
+            openssl \
            libcurl4t64 \
            libevent-2.1 \
            libevent-pthreads-2.1 \
--- a/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh
@ -262,6 +262,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-mysql/alpine/Dockerfile
+++ b/Dockerfiles/server-mysql/alpine/Dockerfile
@ -45,6 +45,7 @@ RUN set -eux && \
            nmap \
            tzdata \
            iputils \
+            openssl \
            libcap \
            libcurl \
            libevent \
--- a/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh
@ -554,6 +554,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-mysql/centos/Dockerfile
+++ b/Dockerfiles/server-mysql/centos/Dockerfile
@ -59,6 +59,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            shadow-utils \
--- a/Dockerfiles/server-mysql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/centos/docker-entrypoint.sh
@ -551,6 +551,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-mysql/ol/Dockerfile
+++ b/Dockerfiles/server-mysql/ol/Dockerfile
@ -59,6 +59,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            zlib \
--- a/Dockerfiles/server-mysql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/ol/docker-entrypoint.sh
@ -551,6 +551,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-mysql/rhel/Dockerfile
+++ b/Dockerfiles/server-mysql/rhel/Dockerfile
@ -69,6 +69,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            iputils \
            hostname \
            libcurl \
+            openssl \
            libevent \
            openldap \
            libssh \
--- a/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh
@ -551,6 +551,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-mysql/ubuntu/Dockerfile
+++ b/Dockerfiles/server-mysql/ubuntu/Dockerfile
@ -50,6 +50,7 @@ RUN --mount=type=cache,target=/var/cache/apt/,sharing=locked \
            iputils-ping \
            traceroute \
            fping \
+            openssl \
            libcurl4t64 \
            libevent-2.1 \
            libmysqlclient21 \
--- a/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh
@ -551,6 +551,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-pgsql/alpine/Dockerfile
+++ b/Dockerfiles/server-pgsql/alpine/Dockerfile
@ -45,6 +45,7 @@ RUN set -eux && \
            fping \
            tzdata \
            iputils \
+            openssl \
            libcap \
            libcurl \
            libevent \
--- a/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh
@ -580,6 +580,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-pgsql/centos/Dockerfile
+++ b/Dockerfiles/server-pgsql/centos/Dockerfile
@ -57,6 +57,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            postgresql \
--- a/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh
@ -580,6 +580,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-pgsql/ol/Dockerfile
+++ b/Dockerfiles/server-pgsql/ol/Dockerfile
@ -57,6 +57,7 @@ RUN --mount=type=tmpfs,target=/var/lib/dnf/ \
            net-snmp-libs \
            OpenIPMI-libs \
            openldap \
+            openssl \
            openssl-libs \
            pcre2 \
            postgresql \
--- a/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh
@ -580,6 +580,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/Dockerfiles/server-pgsql/ubuntu/Dockerfile
+++ b/Dockerfiles/server-pgsql/ubuntu/Dockerfile
@ -50,6 +50,7 @@ RUN --mount=type=cache,target=/var/cache/apt/,sharing=locked \
            iputils-ping \
            traceroute \
            fping \
+            openssl \
            libcurl4t64 \
            libevent-2.1 \
            libevent-pthreads-2.1 \
--- a/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh
@ -580,6 +580,8 @@ update_zbx_config() {
    else
        update_config_var $ZBX_CONFIG "AllowRoot" "1"
    fi
+
+    command -v openssl >/dev/null 2>&1 && openssl rehash -v "$ZABBIX_USER_HOME_DIR/ssl/ssl_ca/" 1>/dev/null
 }

 clear_zbx_env() {
--- a/compose_zabbix_components.yaml
+++ b/compose_zabbix_components.yaml
@ -17,6 +17,9 @@ services:
   - ${DATA_DIRECTORY}/var/lib/zabbix/enc:/var/lib/zabbix/enc:ro
   - ${DATA_DIRECTORY}/var/lib/zabbix/ssh_keys:/var/lib/zabbix/ssh_keys:ro
   - ${DATA_DIRECTORY}/var/lib/zabbix/mibs:/var/lib/zabbix/mibs:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/certs:/var/lib/zabbix/ssl/certs:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/keys:/var/lib/zabbix/ssl/keys:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/ssl_ca:/var/lib/zabbix/ssl/ssl_ca:rw
   - snmptraps:/var/lib/zabbix/snmptraps:roz
  tmpfs: /tmp
  ulimits:
@ -168,6 +171,9 @@ services:
   - ${DATA_DIRECTORY}/var/lib/zabbix/enc:/var/lib/zabbix/enc:ro
   - ${DATA_DIRECTORY}/var/lib/zabbix/ssh_keys:/var/lib/zabbix/ssh_keys:ro
   - ${DATA_DIRECTORY}/var/lib/zabbix/mibs:/var/lib/zabbix/mibs:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/certs:/var/lib/zabbix/ssl/certs:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/keys:/var/lib/zabbix/ssl/keys:ro
+   - ${DATA_DIRECTORY}/var/lib/zabbix/ssl/ssl_ca:/var/lib/zabbix/ssl/ssl_ca:rw
   - snmptraps:/var/lib/zabbix/snmptraps:ro
  tmpfs: /tmp
  ulimits: