Execute Checks on Linux maschines without Agent?

[mike1098 (Michael FRANK)]

@mschlenker Thank you, I didnt knew that.
Beside that a community member added this how to:

Running the Checkmk agent without root privileges

Editor’s Note: This is an article from a community member who wish to remain anonymous. Nevertheless, the discussion here is open! The author and the tribe29 team would gladly follow-up with more details. We wanted to post this to start a discussion, so we count on you to share your thoughts The tribe29 team always recommends using the Checkmk agent as root. Because the Shell script is completely transparent, you should be able to convince others to follow this best practice. There may …

I agree that the symmetric encryption is not the perfect security measure.
Because of the I developed solutions to use GPG or OPENSSL:

Asymmetric agent encryption with GNU PGP

Agent encryption with GNU PGP Here is described how to use GPG to encrypt the agent output on the monitored host and decrypt it on the monitoring servers. It is necessary to create a key with gpg and export the public key which is used for encryption. The public key must be available in the keyring of each monitored host. 1. Create a PGP key The key needs to be created at the master monitoring server under the site user . First it needs to be validated that the tty could be accessed by gpg. …

Asymmetric agent encryption with OPENSSL

Asymmetric agent encryption with OPENSSL I already wrote a How-To Article about asymmetric agent encryption with GNU GPG here: Asymmetric agent encryption with GNU PGP. Unjustly GPG has a bad reputation and is called complex and complicated, which is not really the case in my opinion. Nevertheless II provide here a secure solution using OPENSSL to encrypt agent output. This article just show a concept how OPENSSL could be used to asymmetric encryption of the agent content. It is not the final…