Werk #13228: Checkmk agent with systemd creates dedicated system user

Komponente Checks und Agenten
Titel Checkmk agent with systemd creates dedicated system user
Datum 12.10.2021
Checkmk-Editon Checkmk Raw (CRE)
Checkmk-Version 2.1.0i1
Level Kleine Änderung
Klasse Neues Feature
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

The installation of a systemd based agent package now creates a system user named cmk-agent. Failing to create (or find) such a user will cause the installation to fail.

This user will allow for upcoming architectural changes. In particular it will be running helper processes for new agent-to-site communication modes. Also, the created user will be the only user allowed to read the agent output locally.

The users home directory will be /etc/check-mk-agent/cmk-agent, it will have neither a login password nor a login shell.

Note that the user is not removed if the package is uninstalled, as you may still have files belonging to that user, and we do not want the UID to be reassigned to a different user by chance.

Zur Liste aller Werks