��Ĳ�

Table of Contents

1 Red Hat Enterprise Linux and derivatives

1 Red Hat Enterprise Linux and derivatives

Overview

Official ��Ĳ� 7.2 packages for Red Hat Enterprise Linux as well as for AlmaLinux, Oracle Linux, Rocky Linux, AmazonLinux, and CentOS are available on ��Ĳ� website.

��Ĳ� packages for Red Hat Enterprise Linux systems are intended only for RHEL systems. Alternative environments, such as , may lack the necessary dependencies and repository access requirements for successful installation. To address such issues, verify compatibility with the target environment and ensure access to required repositories and dependencies before proceeding with ��Ĳ� installation from packages. For more information, see Known issues.

Packages are available with:

MySQL or PostgreSQL database
Apache or Nginx web server support

��Ĳ� agent packages, as well as ��Ĳ� get and ��Ĳ� sender utilities are also available in ��Ĳ� Official for the following OS:

RHEL 7, 8, and 9
AlmaLinux 8 and 9
AmazonLinux 2023
CentOS Stream 8, 9, and 10
Oracle Linux 8 and 9
Rocky Linux 8 and 9

The official ��Ĳ� repository provides fping, iksemel and libssh2 packages as well. These packages are located in the directory.

The EPEL repository for EL9 also provides ��Ĳ� packages. If both the official ��Ĳ� repository and EPEL repositories are installed, then the ��Ĳ� packages in EPEL must be excluded by adding the following clause to the EPEL repo configuration file under /etc/yum.repos.d/:

[epel]
       ...
       excludepkgs=zabbix*

Notes on installation

See installation instructions per platform in the download page for:

installing the repository
installing server/agent/frontend
creating initial database, importing initial data
configuring database for ��Ĳ� server
configuring PHP for ��Ĳ� frontend
starting server/agent processes
configuring ��Ĳ� frontend

If you want to run ��Ĳ� agent as root, see Running agent as root.

��Ĳ� web service process, which is used for scheduled report generation, requires Google Chrome browser. The browser is not included into packages and has to be installed manually.

Importing data with Timescale DB

With TimescaleDB, in addition to the import command for PostgreSQL, also run:

cat /usr/share/zabbix/sql-scripts/postgresql/timescaledb/schema.sql | sudo -u zabbix psql zabbix

TimescaleDB is supported with ��Ĳ� server only.

SELinux configuration

��Ĳ� uses socket-based inter-process communication. On systems where SELinux is enabled, it may be required to add SELinux rules to allow ��Ĳ� create/use UNIX domain sockets in the SocketDir directory. Currently, socket files are used by server (alerter, preprocessing, IPMI) and proxy (IPMI). Socket files are persistent, meaning they are present while the process is running.

Having SELinux status enabled in enforcing mode, you need to execute the following commands to enable communication between ��Ĳ� frontend and server:

RHEL 7 and later or AlmaLinux, CentOS Stream, Oracle Linux, Rocky Linux 8 and later:

setsebool -P httpd_can_connect_zabbix on

If the database is accessible over network (including 'localhost' in case of PostgreSQL), you need to allow ��Ĳ� frontend to connect to the database too:

setsebool -P httpd_can_network_connect_db on

RHEL prior to 7:

setsebool -P httpd_can_network_connect on
       setsebool -P zabbix_can_network on

After the frontend and SELinux configuration is done, restart the Apache web server:

systemctl restart httpd

Optionally, you can download a pre-defined zabbix-selinux-policy package from ��Ĳ� repository. This package is provided for all supported OS versions to speed up ��Ĳ� deployment and configuration and prevent users from turning off SELinux because of the configuration complexity.

For maximum security level, it is recommended to set custom SELinux settings.

zabbix-selinux-policy package contains a basic default policy for SELinux allowing ��Ĳ� to create and use sockets and enabling HTTPd connection to PostgreSQL (used by frontend). The source zabbix_policy.te file contains the following rules:

module zabbix_policy 1.2;
       
       require {
         type zabbix_t;
         type zabbix_port_t;
         type zabbix_var_run_t;
         type postgresql_port_t;
         type httpd_t;
         class tcp_socket name_connect;
         class sock_file { create unlink };
         class unix_stream_socket connectto;
       }
       
       #============= zabbix_t ==============
       allow zabbix_t self:unix_stream_socket connectto;
       allow zabbix_t zabbix_port_t:tcp_socket name_connect;
       allow zabbix_t zabbix_var_run_t:sock_file create;
       allow zabbix_t zabbix_var_run_t:sock_file unlink;
       allow httpd_t zabbix_port_t:tcp_socket name_connect;
       
       #============= httpd_t ==============
       allow httpd_t postgresql_port_t:tcp_socket name_connect;

Proxy installation

Once the required repository is added, you can install ��Ĳ� proxy by running:

dnf install zabbix-proxy-mysql zabbix-sql-scripts

Substitute 'mysql' in the commands with 'pgsql' to use PostgreSQL, or with 'sqlite3' to use SQLite3 (proxy only).

The package 'zabbix-sql-scripts' contains database schemas for all supported database management systems for both ��Ĳ� server and ��Ĳ� proxy and will be used for data import.

Creating database

Create a separate database for ��Ĳ� proxy.

��Ĳ� server and ��Ĳ� proxy cannot use the same database. If they are installed on the same host, the proxy database must have a different name.

Importing data

Import initial schema:

cat /usr/share/zabbix/sql-scripts/mysql/proxy.sql | mysql -uzabbix -p zabbix

For proxy with PostgreSQL (or SQLite):

cat /usr/share/zabbix/sql-scripts/postgresql/proxy.sql | sudo -u zabbix psql zabbix
       cat /usr/share/zabbix/sql-scripts/sqlite3/proxy.sql | sqlite3 zabbix.db

Configure database for ��Ĳ� proxy

Edit ��Ĳ� proxy configuration file (/etc/zabbix/zabbix_proxy.conf):

DBHost=localhost
       DBName=zabbix
       DBUser=zabbix
       DBPassword=<password>

In DBName for ��Ĳ� proxy use a separate database from ��Ĳ� server.

In DBPassword use ��Ĳ� database password for MySQL; PostgreSQL user password for PostgreSQL.

Use DBHost= with PostgreSQL. You might want to keep the default setting DBHost=localhost (or an IP address), but this would make PostgreSQL use a network socket for connecting to ��Ĳ�. See SELinux configuration for instructions.

Starting ��Ĳ� proxy process

To start a ��Ĳ� proxy process and make it start at system boot:

systemctl start zabbix-proxy
       systemctl enable zabbix-proxy

Frontend configuration

A ��Ĳ� proxy does not have a frontend; it communicates with ��Ĳ� server only.

Java gateway installation

It is required to install Java gateway only if you want to monitor JMX applications. Java gateway is lightweight and does not require a database.

Once the required repository is added, you can install ��Ĳ� Java gateway by running:

dnf install zabbix-java-gateway

Proceed to setup for more details on configuring and running Java gateway.

Installing debuginfo packages

Debuginfo package is currently available for RHEL 7.

To enable debuginfo repository, edit /etc/yum.repos.d/zabbix.repo file. Change enabled=0 to enabled=1 for zabbix-debuginfo repository.

[zabbix-debuginfo]
       name=�����Ĳ� Official Repository debuginfo - $basearch
       baseurl=http://repo.zabbix.com/zabbix/7.2/stable/rhel/7/$basearch/debuginfo/
       enabled=0
       gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
       gpgcheck=1

This will allow you to install the zabbix-debuginfo package.

dnf install zabbix-debuginfo

This single package contains debug information for all binary ��Ĳ� components.

�����Ĳ�

Documentation