Werk #13228: Checkmk agent with systemd creates dedicated system user

Component Checks & Agents
Title Checkmk agent with systemd creates dedicated system user
Date Oct 12, 2021
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.1.0i1
Level Trivial Change
Class New Feature
Compatibility Compatible - no manual interaction needed

The installation of a systemd based agent package now creates a system user named cmk-agent. Failing to create (or find) such a user will cause the installation to fail.

This user will allow for upcoming architectural changes. In particular it will be running helper processes for new agent-to-site communication modes. Also, the created user will be the only user allowed to read the agent output locally.

The users home directory will be /etc/check-mk-agent/cmk-agent, it will have neither a login password nor a login shell.

Note that the user is not removed if the package is uninstalled, as you may still have files belonging to that user, and we do not want the UID to be reassigned to a different user by chance.

To the list of all Werks