Zabbix SIAは、以下の公式RPMおよびDEBパッケージを提供します。
各OSのディストリビューションのyum/dnf、apt、およびzypperリポジトリのパッケージファイルは、Zabbix公式リポジトリで入手できます。
一部のOSディストリビューション(特にDebianベースのディストリビューション)は独自のZabbixパッケージを提供しています。これらのパッケージはZabbixがサポートしていないことに注意してください。サードパーティのZabbixパッケージは古くなっている可能性があり、最新の機能やバグ修正が不足している可能性があります。 Zabbix公式リポジトリのパッケージのみを使用することをお勧めします。以前に非公式のZabbixパッケージを使用したことがある場合はOSリポジトリからのZabbixパッケージアップグレードに関する注意事項を参照してください。
The following notes apply to all systems:
DBHost=localhost
(or an IP address) in Zabbix server/proxy configuration makes PostgreSQL use a network socket instead of a local UNIX socket; see SELinux configuration for related setup instructions.The following notes apply to RHEL and its derivatives:
fping
are also available at the Zabbix Official Repository.iksemel
are also available at the Zabbix Official Repository.libssh2
are also available at the Zabbix Official Repository.Zabbix uses socket-based inter-process communication. On systems where Security-Enhanced Linux (SELinux) is enabled, you may need to add SELinux rules to allow Zabbix create/use UNIX domain sockets in the SocketDir directory. Socket files are used by Zabbix server (alerter, preprocessing, IPMI) and Zabbix proxy (IPMI), and they're present while the process is running.
Having SELinux enabled in enforcing mode, execute the following commands to enable communication between Zabbix frontend and server:
For RHEL 7 (and later), AlmaLinux, CentOS Stream, Oracle Linux, Rocky Linux 8 (and later):
If the database is accessed over the network (including localhost
for PostgreSQL), also allow Zabbix frontend to connect to the database:
For RHEL prior to 7:
After applying SELinux settings, restart Apache:
Optionally, you can install a pre-defined zabbix-selinux-policy
package from The Zabbix Official Repository. This package is provided for all supported OS versions to simplify Zabbix deployment and prevent users from turning off SELinux because of the configuration complexity.
For maximum security, it is recommended to set custom SELinux settings.
The zabbix-selinux-policy
package contains a basic SELinux policy, allowing Zabbix to create and use sockets and enabling HTTPd connection to PostgreSQL (used by frontend).
The source zabbix_policy.te
file contains the following rules:
module zabbix_policy 1.2;
require {
type zabbix_t;
type zabbix_port_t;
type zabbix_var_run_t;
type postgresql_port_t;
type httpd_t;
class tcp_socket name_connect;
class sock_file { create unlink };
class unix_stream_socket connectto;
}
#============= zabbix_t ==============
allow zabbix_t self:unix_stream_socket connectto;
allow zabbix_t zabbix_port_t:tcp_socket name_connect;
allow zabbix_t zabbix_var_run_t:sock_file create;
allow zabbix_t zabbix_var_run_t:sock_file unlink;
allow httpd_t zabbix_port_t:tcp_socket name_connect;
#============= httpd_t ==============
allow httpd_t postgresql_port_t:tcp_socket name_connect;
Debuginfo packages contain debugging symbols for Zabbix binaries. They are not required for normal installation or operation but are useful for advanced troubleshooting.
To enable the zabbix-debuginfo
repository:
/etc/yum.repos.d/zabbix.repo
and set enabled=1
for the zabbix-debuginfo
section:[zabbix-debuginfo]
name=Zabbix Official Repository debuginfo - $basearch
baseurl=http://repo.zabbix.com/zabbix/7.0/stable/rhel/7/$basearch/debuginfo/
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ZABBIX-A14FE591
gpgcheck=1
/etc/zypp/repos.d/zabbix.repo
and set enabled=1
for the zabbix-debuginfo
section:[zabbix-debuginfo]
name=Zabbix Official Repository debuginfo
type=rpm-md
baseurl=https://repo.zabbix.com/zabbix/7.0/stable/sles/15/x86_64/debuginfo/
gpgcheck=1
gpgkey=https://repo.zabbix.com/zabbix/7.0/stable/sles/15/x86_64/debuginfo/repodata/repomd.xml.key
enabled=0
update=1
Once enabled, install the packages: