Werk #13228: Checkmk agent with systemd creates dedicated system user
Component | Checks & agents |
Title | Checkmk agent with systemd creates dedicated system user |
Date | Oct 12, 2021 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk Version | 2.1.0b1 |
Level | Trivial Change |
Class | New Feature |
Compatibility | Compatible - no manual interaction needed |
The installation of a systemd based agent package now creates a system user named cmk-agent. Failing to create (or find) such a user will cause the installation to fail.
This user will allow for upcoming architectural changes. In particular it will be running helper processes for new agent-to-site communication modes. Also, the created user will be the only user allowed to read the agent output locally.
The users home directory will be /var/lib/cmk-agent, it will have neither a login password nor a login shell.
Note that the user is not removed if the package is uninstalled, as you may still have files belonging to that user, and we do not want the UID to be reassigned to a different user by chance.