Áú»¢¶Ä²©

1. Red Hat Enterprise Linux §Ú §á§â§à§Ú§Ù§Ó§à§Õ§ß§í§Ö

§°§Ò§Ù§à§â

§°§æ§Ú§è§Ú§Ñ§Ý§î§ß§í§Ö §á§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© 7.0 §Õ§Ý§ñ Red Hat Enterprise Linux §Ó§Ö§â§ã§Ú§Û 6, 7, 8 §Ú 9, §Ñ §ä§Ñ§Ü§Ø§Ö §Õ§Ý§ñ AlmaLinux §Ó§Ö§â§ã§Ú§Û 8 §Ú 9, CentOS Stream, Oracle Linux §Ú Rocky Linux §Õ§à§ã§ä§å§á§ß§í §ß§Ñ §Ó§Ö§Ò-§ã§Ñ§Û§ä§Ö Áú»¢¶Ä²©.

§±§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© §Õ§Ý§ñ §ã§Ú§ã§ä§Ö§Þ Red Hat Enterprise Linux §á§â§Ö§Õ§ß§Ñ§Ù§ß§Ñ§é§Ö§ß§í §ä§à§Ý§î§Ü§à §Õ§Ý§ñ §ã§Ú§ã§ä§Ö§Þ RHEL. §£ §Ñ§Ý§î§ä§Ö§â§ß§Ñ§ä§Ú§Ó§ß§í§ç §ã§â§Ö§Õ§Ñ§ç, §ä§Ñ§Ü§Ú§ç §Ü§Ñ§Ü , §Þ§à§Ô§å§ä §à§ä§ã§å§ä§ã§ä§Ó§à§Ó§Ñ§ä§î §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§í§Ö §Õ§Ý§ñ §å§ã§á§Ö§ê§ß§à§Û §å§ã§ä§Ñ§ß§à§Ó§Ü§Ú §Ù§Ñ§Ó§Ú§ã§Ú§Þ§à§ã§ä§Ú §Ú §ä§â§Ö§Ò§à§Ó§Ñ§ß§Ú§ñ §á§à §Õ§à§ã§ä§å§á§å §Ü §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ð. §¹§ä§à§Ò§í §â§Ö§ê§Ú§ä§î §ä§Ñ§Ü§Ú§Ö §á§â§à§Ò§Ý§Ö§Þ§í, §á§â§Ö§Ø§Õ§Ö §é§Ö§Þ §á§â§à§Õ§à§Ý§Ø§Ú§ä§î §å§ã§ä§Ñ§ß§à§Ó§Ü§å Áú»¢¶Ä²© §Ú§Ù §á§Ñ§Ü§Ö§ä§à§Ó, §á§â§à§Ó§Ö§â§î§ä§Ö §ã§à§Ó§Þ§Ö§ã§ä§Ú§Þ§à§ã§ä§î §ã §è§Ö§Ý§Ö§Ó§à§Û §ã§â§Ö§Õ§à§Û §Ú §à§Ò§Ö§ã§á§Ö§é§î§ä§Ö §Õ§à§ã§ä§å§á §Ü §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§í§Þ §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ñ§Þ §Ú §Ù§Ñ§Ó§Ú§ã§Ú§Þ§à§ã§ä§ñ§Þ. §¥§Ý§ñ §á§à§Ý§å§é§Ö§ß§Ú§ñ §Õ§à§á§à§Ý§ß§Ú§ä§Ö§Ý§î§ß§à§Û §Ú§ß§æ§à§â§Þ§Ñ§è§Ú§Ú §ã§Þ§à§ä§â§Ú§ä§Ö §ª§Ù§Ó§Ö§ã§ä§ß§í§Ö §á§â§à§Ò§Ý§Ö§Þ§í.

§¥§à§ã§ä§å§á§ß§í §á§Ñ§Ü§Ö§ä§í §ã:

  • §Ò§Ñ§Ù§à§Û §Õ§Ñ§ß§ß§í§ç MySQL §Ú§Ý§Ú PostgreSQL
  • §á§à§Õ§Õ§Ö§â§Ø§Ü§à§Û §Ó§Ö§Ò-§ã§Ö§â§Ó§Ö§â§Ñ Apache §Ú§Ý§Ú Nginx.

§±§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© §Ñ§Ô§Ö§ß§ä§Ñ, §Ü§Ñ§Ü §Ú §å§ä§Ú§Ý§Ú§ä§í Áú»¢¶Ä²© get §Ú Áú»¢¶Ä²© sender, §ä§Ñ§Ü§Ø§Ö §Õ§à§ã§ä§å§á§ß§í §Ó §à§æ§Ú§è§Ú§Ñ§Ý§î§ß§à§Þ §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Ú Áú»¢¶Ä²© §Õ§Ý§ñ §ã§Ý§Ö§Õ§å§ð§ë§Ú§ç §°§³:

  • RHEL , , §Ú
  • AlmaLinux §Ú
  • CentOS Stream §Ú
  • Oracle Linux §Ú
  • Rocky Linux §Ú /x86_64/)

§¯§Ñ§é§Ú§ß§Ñ§ñ §ã Áú»¢¶Ä²© 7.0.5, §á§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© §Ñ§Ô§Ö§ß§ä§Ñ 2 §Ò§à§Ý§î§ê§Ö §ß§Ö §Õ§à§ã§ä§å§á§ß§í §Õ§Ý§ñ §Ú§Ù-§Ù§Ñ §ß§Ö§ã§à§Ó§Þ§Ö§ã§ä§Ú§Þ§à§ã§ä§Ú Go 1.22 (§Ú §ß§à§Ó§Ö§Ö) §ã GCC 4.4.7, §á§â§Ö§Õ§à§ã§ä§Ñ§Ó§Ý§ñ§Ö§Þ§í§Þ RHEL 6, §é§ä§à §á§â§Ú§Ó§à§Õ§Ú§ä §Ü §à§ê§Ú§Ò§Ü§Ñ§Þ §Ü§à§Þ§á§Ú§Ý§ñ§è§Ú§Ú. §°§Õ§ß§Ñ§Ü§à §ã§Ý§Ö§Õ§å§Ö§ä §à§ä§Þ§Ö§ä§Ú§ä§î, §é§ä§à §á§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© §Ñ§Ô§Ö§ß§ä§Ñ §á§à-§á§â§Ö§Ø§ß§Ö§Þ§å §á§à§Õ§Õ§Ö§â§Ø§Ú§Ó§Ñ§ð§ä§ã§ñ.

§°§æ§Ú§è§Ú§Ñ§Ý§î§ß§í§Û §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Û Áú»¢¶Ä²© §ä§Ñ§Ü§Ø§Ö §á§â§Ö§Õ§à§ã§ä§Ñ§Ó§Ý§ñ§Ö§ä §á§Ñ§Ü§Ö§ä§í fping, iksemel §Ú libssh2. §¿§ä§Ú §á§Ñ§Ü§Ö§ä§í §â§Ñ§ã§á§à§Ý§à§Ø§Ö§ß§í §Ó §á§Ñ§á§Ü§Ö .

§²§Ö§á§à§Ù§Ú§ä§à§â§Ú§Û EPEL §Õ§Ý§ñ EL9 §ä§Ñ§Ü§Ø§Ö §á§â§Ö§Õ§à§ã§ä§Ñ§Ó§Ý§ñ§Ö§ä §á§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²©. §¦§ã§Ý§Ú §å§ã§ä§Ñ§ß§à§Ó§Ý§Ö§ß§í §Ú §à§æ§Ú§è§Ú§Ñ§Ý§î§ß§í§Û §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Û Áú»¢¶Ä²©, §Ú §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Ú EPEL, §ä§à §á§Ñ§Ü§Ö§ä§í Áú»¢¶Ä²© §Ó EPEL §Õ§à§Ý§Ø§ß§í §Ò§í§ä§î §Ú§ã§Ü§Ý§ð§é§Ö§ß§í §á§å§ä§×§Þ §Õ§à§Ò§Ñ§Ó§Ý§Ö§ß§Ú§ñ §ã§Ý§Ö§Õ§å§ð§ë§Ö§Ô§à §á§å§ß§Ü§ä§Ñ §Ó §æ§Ñ§Û§Ý §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§Ú §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ñ EPEL §Ó /etc/yum.repos.d/:

[epel]
       ...
       excludepkgs=zabbix*

§³§Þ§à§ä§â§Ú§ä§Ö §ä§Ñ§Ü§Ø§Ö: §¯§Ö§á§â§Ö§Õ§ß§Ñ§Þ§Ö§â§Ö§ß§ß§Ñ§ñ §å§ã§ä§Ñ§ß§à§Ó§Ü§Ñ §á§Ñ§Ü§Ö§ä§à§Ó EPEL Áú»¢¶Ä²©

§±§â§Ú§Þ§Ö§é§Ñ§ß§Ú§ñ §á§à §å§ã§ä§Ñ§ß§à§Ó§Ü§Ö

§°§Ò§â§Ñ§ä§Ú§ä§Ö§ã§î §Ü §Ú§ß§ã§ä§â§å§Ü§è§Ú§ñ§Þ §á§à §å§ã§ä§Ñ§ß§à§Ó§Ü§Ö §á§à §Ü§Ñ§Ø§Õ§à§Û §á§Ý§Ñ§ä§æ§à§â§Þ§Ö §ß§Ñ §ã§ä§â§Ñ§ß§Ú§è§Ö §Ù§Ñ§Ô§â§å§Ù§Ü§Ú, §é§ä§à§Ò§í:

  • §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Û
  • §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î §ã§Ö§â§Ó§Ö§â/§Ñ§Ô§Ö§ß§ä/§Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã
  • §ã§à§Ù§Õ§Ñ§ä§î §ß§Ñ§é§Ñ§Ý§î§ß§å§ð §Ò§Ñ§Ù§å §Õ§Ñ§ß§ß§í§ç, §Ú§Þ§á§à§â§ä§Ú§â§à§Ó§Ñ§ä§î §ß§Ñ§é§Ñ§Ý§î§ß§í§Ö §Õ§Ñ§ß§ß§í§Ö
  • §ß§Ñ§ã§ä§â§à§Ú§ä§î §Ò§Ñ§Ù§å §Õ§Ñ§ß§ß§í§ç §Õ§Ý§ñ §â§Ñ§Ò§à§ä§í §ã Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§à§Þ
  • §ß§Ñ§ã§ä§â§à§Ú§ä§î PHP §Õ§Ý§ñ §â§Ñ§Ò§à§ä§í §ã §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§à§Þ Áú»¢¶Ä²©
  • §Ù§Ñ§á§å§ã§ä§Ú§ä§î §á§â§à§è§Ö§ã§ã§í §ã§Ö§â§Ó§Ö§â§Ñ/§Ñ§Ô§Ö§ß§ä§Ñ
  • §ß§Ñ§ã§ä§â§à§Ú§ä§î §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã Áú»¢¶Ä²©

§¦§ã§Ý§Ú §Ó§í §ç§à§ä§Ú§ä§Ö §Ù§Ñ§á§å§ã§Ü§Ñ§ä§î Áú»¢¶Ä²© §Ñ§Ô§Ö§ß§ä§Ñ §ã §á§â§Ñ§Ó§Ñ§Þ§Ú root, §ã§Þ§à§ä§â§Ú§ä§Ö §©§Ñ§á§å§ã§Ü §Ñ§Ô§Ö§ß§ä§Ñ §ã §á§â§Ñ§Ó§Ñ§Þ§Ú root.

§¥§Ý§ñ §á§â§à§è§Ö§ã§ã§Ñ §Ó§Ö§Ò-§ã§Ö§â§Ó§Ú§ã§Ñ Áú»¢¶Ä²©, §Ü§à§ä§à§â§í§Û §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §Õ§Ý§ñ §Ô§Ö§ß§Ö§â§Ñ§è§Ú§Ú §à§ä§é§×§ä§à§Ó §á§à §â§Ñ§ã§á§Ú§ã§Ñ§ß§Ú§ð, §ä§â§Ö§Ò§å§Ö§ä§ã§ñ §Ò§â§Ñ§å§Ù§Ö§â Google Chrome. §¿§ä§à§ä §Ò§â§Ñ§å§Ù§Ö§â §ß§Ö §Ó§Ü§Ý§ð§é§×§ß §Ó §á§Ñ§Ü§Ö§ä§í, §Ú §Ö§Ô§à §ß§å§Ø§ß§à §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î §Ó§â§å§é§ß§å§ð §à§ä§Õ§Ö§Ý§î§ß§à.

§ª§Þ§á§à§â§ä §Õ§Ñ§ß§ß§í§ç §á§â§Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§Ú Timescale DB

§±§â§Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ß§Ú§Ú TimescaleDB §Ó §Õ§à§á§à§Ý§ß§Ö§ß§Ú§Ö §Ü §Ü§à§Þ§Ñ§ß§Õ§Ö §Ú§Þ§á§à§â§ä§Ñ §Õ§Ý§ñ §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç PostgreSQL §ä§Ñ§Ü§Ø§Ö §Ó§í§á§à§Ý§ß§Ú§ä§Ö:

cat /usr/share/zabbix-sql-scripts/postgresql/timescaledb/schema.sql | sudo -u zabbix psql zabbix

TimescaleDB §á§à§Õ§Õ§Ö§â§Ø§Ú§Ó§Ñ§Ö§ä§ã§ñ §ä§à§Ý§î§Ü§à Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§à§Þ.

§¬§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§ñ SELinux

Áú»¢¶Ä²© §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä §Þ§Ö§Ø§á§â§à§è§Ö§ã§ã§ß§à§Ö §Ó§Ù§Ñ§Ú§Þ§à§Õ§Ö§Û§ã§ä§Ó§Ú§Ö §ß§Ñ §à§ã§ß§à§Ó§Ö §ã§à§Ü§Ö§ä§à§Ó. §£ §ã§Ú§ã§ä§Ö§Þ§Ñ§ç, §Ô§Õ§Ö §Ó§Ü§Ý§ð§é§×§ß SELinux, §Þ§à§Ø§Ö§ä §á§à§ä§â§Ö§Ò§à§Ó§Ñ§ä§î§ã§ñ §Õ§à§Ò§Ñ§Ó§Ú§ä§î §á§â§Ñ§Ó§Ú§Ý§Ñ SELinux, §é§ä§à§Ò§í §á§à§Ù§Ó§à§Ý§Ú§ä§î Áú»¢¶Ä²© §ã§à§Ù§Õ§Ñ§Ó§Ñ§ä§î/§Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §Õ§à§Þ§Ö§ß§ß§í§Ö §ã§à§Ü§Ö§ä§í UNIX §Ó §Ü§Ñ§ä§Ñ§Ý§à§Ô§Ö SocketDir. §£ §ß§Ñ§ã§ä§à§ñ§ë§Ö§Ö §Ó§â§Ö§Þ§ñ §æ§Ñ§Û§Ý§í §ã§à§Ü§Ö§ä§à§Ó §Ú§ã§á§à§Ý§î§Ù§å§ð§ä§ã§ñ §ã§Ö§â§Ó§Ö§â§à§Þ (§à§á§à§Ó§Ö§ë§Ö§ß§Ú§Ö, §á§â§Ö§Õ§Ó§Ñ§â§Ú§ä§Ö§Ý§î§ß§Ñ§ñ §à§Ò§â§Ñ§Ò§à§ä§Ü§Ñ, IPMI) §Ú §á§â§à§Ü§ã§Ú (IPMI). §¶§Ñ§Û§Ý§í §ã§à§Ü§Ö§ä§à§Ó §ñ§Ó§Ý§ñ§ð§ä§ã§ñ §á§à§ã§ä§à§ñ§ß§ß§í§Þ§Ú, §ä§à §Ö§ã§ä§î §à§ß§Ú §á§â§Ú§ã§å§ä§ã§ä§Ó§å§ð§ä §Ó§ã§× §Ó§â§Ö§Þ§ñ, §á§à§Ü§Ñ §á§â§à§è§Ö§ã§ã §Ó§í§á§à§Ý§ß§ñ§Ö§ä§ã§ñ.

§£§Ü§Ý§ð§é§Ú§Ó §ã§ä§Ñ§ä§å§ã SELinux §Ó §á§â§Ú§ß§å§Õ§Ú§ä§Ö§Ý§î§ß§à§Þ §â§Ö§Ø§Ú§Þ§Ö (enforcing mode), §Ó§Ñ§Þ §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§à §Ó§í§á§à§Ý§ß§Ú§ä§î §ã§Ý§Ö§Õ§å§ð§ë§Ú§Ö §Ü§à§Þ§Ñ§ß§Õ§í §Õ§Ý§ñ §â§Ñ§Ù§â§Ö§ê§Ö§ß§Ú§ñ §Ü§à§Þ§Þ§å§ß§Ú§Ü§Ñ§è§Ú§Û §Þ§Ö§Ø§Õ§å §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§à§Þ Áú»¢¶Ä²© §Ú §ã§Ö§â§Ó§Ö§â§à§Þ:

RHEL 7 §Ú §Ò§à§Ý§Ö§Ö §á§à§Ù§Õ§ß§Ú§Ö §Ó§Ö§â§ã§Ú§Ú §Ý§Ú§Ò§à AlmaLinux, CentOS Stream, Oracle Linux, Rocky Linux 8 §Ú §Ò§à§Ý§Ö§Ö §á§à§Ù§Õ§ß§Ú§Ö §Ó§Ö§â§ã§Ú§Ú:

setsebool -P httpd_can_connect_zabbix on

§¦§ã§Ý§Ú §Ò§Ñ§Ù§Ñ §Õ§Ñ§ß§ß§í§ç §Õ§à§ã§ä§å§á§ß§Ñ §á§à §ã§Ö§ä§Ú (§Ó§Ü§Ý§ð§é§Ñ§ñ ?localhost? §Ó §ã§Ý§å§é§Ñ§Ö PostgreSQL), §Ó§Ñ§Þ §ä§Ñ§Ü§Ø§Ö §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§à §â§Ñ§Ù§â§Ö§ê§Ú§ä§î §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§å Áú»¢¶Ä²© §á§à§Õ§Ü§Ý§ð§é§Ñ§ä§î§ã§ñ §Ü §Ò§Ñ§Ù§Ö §Õ§Ñ§ß§ß§í§ç:

setsebool -P httpd_can_network_connect_db on

RHEL §Õ§à 7 §Ó§Ö§â§ã§Ú§Ú:

setsebool -P httpd_can_network_connect on
       setsebool -P zabbix_can_network on

§±§à§ã§Ý§Ö §Ù§Ñ§Ó§Ö§â§ê§Ö§ß§Ú§ñ §ß§Ñ§ã§ä§â§à§Û§Ü§Ú §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§Ñ §Ú SELinux §á§Ö§â§Ö§Ù§Ñ§á§å§ã§ä§Ú§ä§Ö §Ó§Ö§Ò §ã§Ö§â§Ó§Ö§â Apache:

systemctl restart httpd

§¬§â§à§Þ§Ö §ä§à§Ô§à, Áú»¢¶Ä²© §á§â§Ö§Õ§à§ã§ä§Ñ§Ó§Ý§ñ§Ö§ä §á§Ñ§Ü§Ö§ä zabbix-selinux-policy §Ü§Ñ§Ü §é§Ñ§ã§ä§î §Ú§ã§ç§à§Õ§ß§í§ç §á§Ñ§Ü§Ö§ä§à§Ó RPM §Õ§Ý§ñ §ã§Ý§Ö§Õ§å§ð§ë§Ú§ç §°§³:

  • RHEL , , and
  • AlmaLinux and
  • CentOS Stream and
  • Oracle Linux and
  • Rocky Linux and

§¿§ä§à§ä §á§Ñ§Ü§Ö§ä §á§â§Ö§Õ§à§ã§ä§Ñ§Ó§Ý§ñ§Ö§ä §Ò§Ñ§Ù§à§Ó§å§ð §á§à§Ý§Ú§ä§Ú§Ü§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð §Õ§Ý§ñ SELinux §Ú §á§à§Ù§Ó§à§Ý§ñ§Ö§ä §Ü§à§Þ§á§à§ß§Ö§ß§ä§Ñ§Þ zabbix §â§Ñ§Ò§à§ä§Ñ§ä§î ?§Ú§Ù §Ü§à§â§à§Ò§Ü§Ú?, §á§à§Ù§Ó§à§Ý§ñ§ñ Áú»¢¶Ä²© §ã§à§Ù§Õ§Ñ§Ó§Ñ§ä§î §Ú §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §ã§à§Ü§Ö§ä§í §Ú §â§Ñ§Ù§â§Ö§ê§Ñ§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§Ö httpd §Ü PostgreSQL (§Ú§ã§á§à§Ý§î§Ù§å§Ö§Þ§à§Ö §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§à§Þ).

§ª§ã§ç§à§Õ§ß§í§Û §æ§Ñ§Û§Ý zabbix_policy.te §ã§à§Õ§Ö§â§Ø§Ú§ä §ã§Ý§Ö§Õ§å§ð§ë§Ú§Ö §á§â§Ñ§Ó§Ú§Ý§Ñ:

module zabbix_policy 1.2;
       
       require {
         type zabbix_t;
         type zabbix_port_t;
         type zabbix_var_run_t;
         type postgresql_port_t;
         type httpd_t;
         class tcp_socket name_connect;
         class sock_file { create unlink };
         class unix_stream_socket connectto;
       }
       
       #============= zabbix_t ==============
       allow zabbix_t self:unix_stream_socket connectto;
       allow zabbix_t zabbix_port_t:tcp_socket name_connect;
       allow zabbix_t zabbix_var_run_t:sock_file create;
       allow zabbix_t zabbix_var_run_t:sock_file unlink;
       allow httpd_t zabbix_port_t:tcp_socket name_connect;
       
       #============= httpd_t ==============
       allow httpd_t postgresql_port_t:tcp_socket name_connect;

§¿§ä§à§ä §á§Ñ§Ü§Ö§ä §Ò§í§Ý §ã§à§Ù§Õ§Ñ§ß, §é§ä§à§Ò§í §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§Ú §ß§Ö §à§ä§Ü§Ý§ð§é§Ñ§Ý§Ú SELinux §Ú§Ù-§Ù§Ñ §ã§Ý§à§Ø§ß§à§ã§ä§Ú §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§Ú. §°§ß §ã§à§Õ§Ö§â§Ø§Ú§ä §á§à§Ý§Ú§ä§Ú§Ü§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð, §Ü§à§ä§à§â§à§Û §Õ§à§ã§ä§Ñ§ä§à§é§ß§à §Õ§Ý§ñ §å§ã§Ü§à§â§Ö§ß§Ú§ñ §â§Ñ§Ù§Ó§Ö§â§ä§í§Ó§Ñ§ß§Ú§ñ §Ú §ß§Ñ§ã§ä§â§à§Û§Ü§Ú Áú»¢¶Ä²©. §¥§Ý§ñ §Þ§Ñ§Ü§ã§Ú§Þ§Ñ§Ý§î§ß§à§Ô§à §å§â§à§Ó§ß§ñ §Ò§Ö§Ù§à§á§Ñ§ã§ß§à§ã§ä§Ú §â§Ö§Ü§à§Þ§Ö§ß§Õ§å§Ö§ä§ã§ñ §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§î§ã§Ü§Ú§Ö §ß§Ñ§ã§ä§â§à§Û§Ü§Ú SELinux.

§µ§ã§ä§Ñ§ß§à§Ó§Ü§Ñ §á§â§à§Ü§ã§Ú

§±§à§ã§Ý§Ö §Õ§à§Ò§Ñ§Ó§Ý§Ö§ß§Ú§ñ §ä§â§Ö§Ò§å§Ö§Þ§à§Ô§à §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ñ §Ó§í §Þ§à§Ø§Ö§ä§Ö §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú, §Ó§í§á§à§Ý§ß§Ú§Ó §ã§Ý§Ö§Õ§å§ð§ë§å§ð §Ü§à§Þ§Ñ§ß§Õ§å:

dnf install zabbix-proxy-mysql zabbix-sql-scripts

§©§Ñ§Þ§Ö§ß§Ú§ä§Ö ?mysql? §Ó §Ü§à§Þ§Ñ§ß§Õ§Ö §ß§Ñ ?pgsql?, §é§ä§à§Ò§í §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î PostgreSQL, §Ú§Ý§Ú §ß§Ñ ?sqlite3? §é§ä§à§Ò§í §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î SQLite3 (§ä§à§Ý§î§Ü§à §á§â§à§Ü§ã§Ú).

§±§Ñ§Ü§Ö§ä ?zabbix-sql-scripts? §ã§à§Õ§Ö§â§Ø§Ú§ä §ã§ç§Ö§Þ§í §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç §Õ§Ý§ñ §Ó§ã§Ö§ç §á§à§Õ§Õ§Ö§â§Ø§Ú§Ó§Ñ§Ö§Þ§í§ç §ã§Ú§ã§ä§Ö§Þ §å§á§â§Ñ§Ó§Ý§Ö§ß§Ú§ñ §Ò§Ñ§Ù§Ñ§Þ§Ú §Õ§Ñ§ß§ß§í§ç §Ü§Ñ§Ü §Õ§Ý§ñ Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§Ñ, §ä§Ñ§Ü §Ú §Õ§Ý§ñ Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú. §¿§ä§à§ä §á§Ñ§Ü§Ö§ä §Ú§ã§á§à§Ý§î§Ù§å§Ö§ä§ã§ñ §Õ§Ý§ñ §Ú§Þ§á§à§â§ä§Ñ §Õ§Ñ§ß§ß§í§ç.

§³§à§Ù§Õ§Ñ§ß§Ú§Ö §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç

§³§à§Ù§Õ§Ñ§Û§ä§Ö §à§ä§Õ§Ö§Ý§î§ß§å§ð §Ò§Ñ§Ù§å §Õ§Ñ§ß§ß§í§ç §Õ§Ý§ñ Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú.

Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â §Ú Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú §ß§Ö §Þ§à§Ô§å§ä §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §à§Õ§ß§å §Ú §ä§å §Ø§Ö §Ò§Ñ§Ù§å §Õ§Ñ§ß§ß§í§ç. §¦§ã§Ý§Ú §à§ß§Ú §å§ã§ä§Ñ§ß§à§Ó§Ý§Ö§ß§í §ß§Ñ §à§Õ§ß§à§Þ §ç§à§ã§ä§Ö, §ä§à§Ô§Õ§Ñ §Ú§Þ§ñ §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç §á§â§à§Ü§ã§Ú §Õ§à§Ý§Ø§ß§à §à§ä§Ý§Ú§é§Ñ§ä§î§ã§ñ.

§ª§Þ§á§à§â§ä §Õ§Ñ§ß§ß§í§ç

§ª§Þ§á§à§â§ä§Ú§â§å§Û§ä§Ö §ß§Ñ§é§Ñ§Ý§î§ß§å§ð §ã§ç§Ö§Þ§å:

cat /usr/share/zabbix-sql-scripts/mysql/proxy.sql | mysql -uzabbix -p zabbix

§¥§Ý§ñ §á§â§à§Ü§ã§Ú §ã PostgreSQL (§Ú§Ý§Ú SQLite):

cat /usr/share/zabbix-sql-scripts/postgresql/proxy.sql | sudo -u zabbix psql zabbix
       cat /usr/share/zabbix-sql-scripts/sqlite3/proxy.sql | sqlite3 zabbix.db
§¯§Ñ§ã§ä§â§à§Û§Ü§Ñ §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç §Õ§Ý§ñ Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú

§°§ä§â§Ö§Õ§Ñ§Ü§ä§Ú§â§å§Û§ä§Ö §æ§Ñ§Û§Ý §Ü§à§ß§æ§Ú§Ô§å§â§Ñ§è§Ú§Ú Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú (/etc/zabbix/zabbix_proxy.conf):

DBHost=localhost
       DBName=zabbix
       DBUser=zabbix
       DBPassword=<§á§Ñ§â§à§Ý§î>

§£ DBName §Õ§Ý§ñ Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú §Ú§ã§á§à§Ý§î§Ù§å§Û§ä§Ö §Ò§Ñ§Ù§å §Õ§Ñ§ß§ß§í§ç, §à§ä§Ý§Ú§é§ß§å§ð §à§ä §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§Ñ.

§£ DBPassword §Ú§ã§á§à§Ý§î§Ù§å§Û§ä§Ö §á§Ñ§â§à§Ý§î §Ü §Ò§Ñ§Ù§Ö §Õ§Ñ§ß§ß§í§ç Áú»¢¶Ä²© §Õ§Ý§ñ MySQL; §á§Ñ§â§à§Ý§î §Ü PostgreSQL §á§à§Ý§î§Ù§à§Ó§Ñ§ä§Ö§Ý§ð §Õ§Ý§ñ PosgreSQL.

§ª§ã§á§à§Ý§î§Ù§å§Û§ä§Ö DBHost= §ã PostgreSQL. §£§à§Ù§Þ§à§Ø§ß§à, §Ó§í §Ù§Ñ§ç§à§ä§Ú§ä§Ö §à§ã§ä§Ñ§Ó§Ú§ä§î §ß§Ñ§ã§ä§â§à§Û§Ü§å §á§à §å§Þ§à§Ý§é§Ñ§ß§Ú§ð DBHost=localhost (§Ú§Ý§Ú IP §Ñ§Õ§â§Ö§ã), §ß§à §Ó §ï§ä§à§Þ §ã§Ý§å§é§Ñ§Ö PostgreSQL §Ò§å§Õ§Ö§ä §Ú§ã§á§à§Ý§î§Ù§à§Ó§Ñ§ä§î §ã§Ö§ä§Ö§Ó§à§Û §ã§à§Ü§Ö§ä §Õ§Ý§ñ §á§à§Õ§Ü§Ý§ð§é§Ö§ß§Ú§ñ §Ü Áú»¢¶Ä²©. §³§Þ§à§ä§â§Ú§ä§Ö §Ú§ß§ã§ä§â§å§Ü§è§Ú§Ú §á§à §ß§Ñ§ã§ä§â§à§Û§Ü§Ö SELinux.

§©§Ñ§á§å§ã§Ü §á§â§à§è§Ö§ã§ã§Ñ Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú

§¹§ä§à§Ò§í §Ù§Ñ§á§å§ã§ä§Ú§ä§î §á§â§à§è§Ö§ã§ã Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú §Ú §Õ§à§Ò§Ñ§Ó§Ú§ä§î §Ö§Ô§à §Ó §Ñ§Ó§ä§à§Ù§Ñ§Ô§â§å§Ù§Ü§å §á§â§Ú §Ù§Ñ§Ô§â§å§Ù§Ü§Ö §ã§Ú§ã§ä§Ö§Þ§í, §Ó§í§á§à§Ý§ß§Ú§ä§Ö §ã§Ý§Ö§Õ§å§ð§ë§Ú§Ö §Ü§à§Þ§Ñ§ß§Õ§í:

systemctl start zabbix-proxy
       systemctl enable zabbix-proxy
§¯§Ñ§ã§ä§â§à§Û§Ü§Ñ §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§Ñ

Áú»¢¶Ä²© §á§â§à§Ü§ã§Ú §ß§Ö §Ú§Þ§Ö§Ö§ä §Ó§Ö§Ò-§Ú§ß§ä§Ö§â§æ§Ö§Û§ã§Ñ; §á§â§à§Ü§ã§Ú §à§Ò§Þ§Ö§ß§Ú§Ó§Ñ§Ö§ä§ã§ñ §Ú§ß§æ§à§â§Þ§Ñ§è§Ú§Ö§Û §ä§à§Ý§î§Ü§à §ã Áú»¢¶Ä²© §ã§Ö§â§Ó§Ö§â§à§Þ.

§µ§ã§ä§Ñ§ß§à§Ó§Ü§Ñ Java gateway

Java gateway §ß§Ö§à§Ò§ç§à§Õ§Ú§Þ§à §å§ã§ä§Ñ§ß§Ñ§Ó§Ý§Ú§Ó§Ñ§ä§î, §ä§à§Ý§î§Ü§à §Ö§ã§Ý§Ú §Ó§í §ç§à§ä§Ú§ä§Ö §Þ§à§ß§Ú§ä§à§â§Ú§ä§î JMX §á§â§Ú§Ý§à§Ø§Ö§ß§Ú§ñ. Java gateway §Ý§Ö§Ô§Ü§à§Ó§Ö§ã§ß§í§Û §Ú §ß§Ö §ä§â§Ö§Ò§å§Ö§ä §ß§Ñ§Ý§Ú§é§Ú§ñ §Ò§Ñ§Ù§í §Õ§Ñ§ß§ß§í§ç.

§±§à§ã§Ý§Ö §Õ§à§Ò§Ñ§Ó§Ý§Ö§ß§Ú§ñ §ä§â§Ö§Ò§å§Ö§Þ§à§Ô§à §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ñ §Ó§í §Þ§à§Ø§Ö§ä§Ö §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î Áú»¢¶Ä²© Java gateway, §Ó§í§á§à§Ý§ß§Ú§Ó §ã§Ý§Ö§Õ§å§ð§ë§å§ð §Ü§à§Þ§Ñ§ß§Õ§å:

dnf install zabbix-java-gateway

§±§Ö§â§Ö§Û§Õ§Ú§ä§Ö §Ü §â§Ñ§Ù§Õ§Ö§Ý§å §ß§Ñ§ã§ä§â§à§Û§Ü§Ú §Õ§Ý§ñ §á§à§Ý§å§é§Ö§ß§Ú§ñ §Ò§à§Ý§Ö§Ö §á§à§Õ§â§à§Ò§ß§í§ç §ã§Ó§Ö§Õ§Ö§ß§Ú§Û §Ü§Ñ§ã§Ñ§ä§Ö§Ý§î§ß§à §ß§Ñ§ã§ä§â§à§Û§Ü§Ú §Ú §Ù§Ñ§á§å§ã§Ü§Ñ Java gateway.

§µ§ã§ä§Ñ§ß§à§Ó§Ü§Ñ debuginfo §á§Ñ§Ü§Ö§ä§à§Ó

§±§Ñ§Ü§Ö§ä§í Debuginfo §Ó §ß§Ñ§ã§ä§à§ñ§ë§Ö§Ö §Ó§â§Ö§Þ§ñ §Õ§à§ã§ä§å§á§ß§í §ä§à§Ý§î§Ü§à §Õ§Ý§ñ §Ó§Ö§â§ã§Ú§Û RHEL 7 §Ú 6.

§¹§ä§à§Ò§í §Ó§Ü§Ý§ð§é§Ú§ä§î debuginfo §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§Û, §à§ä§â§Ö§Õ§Ñ§Ü§ä§Ú§â§å§Û§ä§Ö §æ§Ñ§Û§Ý /etc/yum.repos.d/zabbix.repo. §ª§Ù§Þ§Ö§ß§Ú§ä§Ö enabled=0 §ß§Ñ enabled=1 §å §â§Ö§á§à§Ù§Ú§ä§à§â§Ú§ñ zabbix-debuginfo.

[zabbix-debuginfo]
       name=Áú»¢¶Ä²© Official Repository debuginfo - $basearch
       baseurl=http://repo.zabbix.com/zabbix/7.0/rhel/7/$basearch/debuginfo/
       enabled=0
       gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
       gpgcheck=1

§¿§ä§à §Ú§Ù§Þ§Ö§ß§Ö§ß§Ú§Ö §á§à§Ù§Ó§à§Ý§Ú§ä §Ó§Ñ§Þ §å§ã§ä§Ñ§ß§à§Ó§Ú§ä§î §á§Ñ§Ü§Ö§ä zabbix-debuginfo.

dnf install zabbix-debuginfo

§¿§ä§à§ä §Ö§Õ§Ú§ß§ã§ä§Ó§Ö§ß§ß§í§Û §á§Ñ§Ü§Ö§ä §ã§à§Õ§Ö§â§Ø§Ú§ä §à§ä§Ý§Ñ§Õ§à§é§ß§å§ð §Ú§ß§æ§à§â§Þ§Ñ§è§Ú§ð §á§à §Ó§ã§Ö§Þ §Ò§Ú§ß§Ñ§â§ß§í§Þ §æ§Ñ§Û§Ý§Ñ§Þ §Ü§à§Þ§á§à§ß§Ö§ß§ä§à§Ó Áú»¢¶Ä²©.