From 2e71a996aaf9bd792e836f3bc188e618fcc4c34b Mon Sep 17 00:00:00 2001
From: Ramil Valitov <ramilvalitov@gmail.com>
Date: Sat, 21 Dec 2019 19:14:37 +0300
Subject: [PATCH] [add] more details how to run Zabbix agent as root

---
 README.md | 60 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)

diff --git a/README.md b/README.md
index 429ecef..8a285d8 100644
--- a/README.md
+++ b/README.md
@@ -183,6 +183,66 @@ Edit Zabbix agent configuration file `/etc/zabbix/zabbix_agentd.conf`, find `All
 AllowRoot=1
 ```
 
+In the same file find option `User` and set it to `root`:
+
+
+```
+### Option: User
+#       Drop privileges to a specific, existing user on the system.
+#       Only has effect if run as 'root' and AllowRoot is disabled.
+#
+# Mandatory: no
+# Default:
+# User=zabbix
+User=root
+```
+
+Restart the Zabbix agent service, for example:
+
+```console
+systemctl restart zabbix-agent
+```
+
+Check that the Zabbix agent runs under `root` user:
+
+```console
+user@server:~$ ps aux | grep "zabbix_agent"
+user       3761  0.0  0.0   8132   928 pts/0    S+   18:32   0:00 grep zabbix_agent
+root      6026  0.0  0.0  86968  3472 ?        S    Dec14   0:00 /usr/sbin/zabbix_agentd -c /etc/zabbix/zabbix_agentd.conf
+root      6027  0.7  0.0  87056  5044 ?        S    Dec14  76:00 /usr/sbin/zabbix_agentd: collector [idle 1 sec]
+root      6028  0.0  0.0 161160 11092 ?        S    Dec14   7:41 /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
+root      6029  0.0  0.0 161244 11180 ?        S    Dec14   7:43 /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
+root      6030  0.0  0.0 161136 11072 ?        S    Dec14   7:43 /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
+```
+
+You should see `root` above. Otherwise, the Zabbix agent works without `root` privileges and will not be able to discover the PHP pools.
+
+Since some updates of Zabbix agent and in some OS the above changes are not enough and the following actions must be performed (as desribed in Zabbix manual for versions [4.0](https://www.zabbix.com/documentation/4.0/manual/appendix/install/run_agent_as_root), [4.4](https://www.zabbix.com/documentation/4.4/manual/appendix/install/run_agent_as_root)). 
+
+Create a directory for configuration file:
+
+```console
+mkdir /etc/systemd/system/zabbix-agent.service.d
+
+```
+
+Create file `/etc/systemd/system/zabbix-agent.service.d/override.conf` with the following content:
+
+```console
+[Service]
+User=root
+Group=root
+```
+
+Reload daemons and restart `zabbix-agent` service:
+
+```console
+systemctl daemon-reload
+systemctl restart zabbix-agent
+```
+
+Check again that the Zabbix agent runs as `root` now.
+
 ##### 1.3.2 Grant privileges to the PHP-FPM auto discovery script only
 If you don't want to run Zabbix Agent as root, then you can configure the privileges only to our script. In this case you need to have `sudo` installed: