I have a customer who absolutely demands running Checkmk agent with non-root user. I was able to follow the original guide for 1.x (Running the Checkmk agent without root privileges). However, I’m using Checkmk Enterprise 2.3. Additionally, I needed to run the Oracle plugin. I was able to get the agent working with the Oracle plugin, but only after I used SSH access instaed of the regular agent access through port 6556. I used a feature “Setup > Agents > Other integrations > Individual program call instead of agent access” and documentation from version 2.0.0 (Monitoring Linux - The agent for Linux in detail). Later documentation does not mention this feature anymore , presumably because the 2.1 version introduced TLS encryption for the agent.
This particular customer actually prefers SSH access, because they’re used to it from the past. It also means, I don’t need to install the agent, but only need to transfer the agent script. But I’m worried this might be a feature which will be deprecated somewhere along the line and I will end up with a non-supported setup. Any thoughts on this?
BTW, I was also able to make the Postgresql plugin running, but I needed to modify the plugin script with a single “sudo” statement (switch user to “postgres”) and, of course create a sudoers file to enable running it.