[ZBX-17531] Permission denied when setting ZBX_EXPORTFILESIZE in Zabbix docker containers Created: 2020 Mar 31  Updated: 2020 Apr 06

Status: Confirmed
Project: ZABBIX BUGS AND ISSUES
Component/s: None
Affects Version/s: 4.4.7
Fix Version/s: None

Type: Problem report Priority: Trivial
Reporter: Jad Assignee: Zabbix Development Team
Resolution: Unresolved Votes: 0
Labels: Docker
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Docker

Attachments: File docker-compose.yml     Text File zabbix_docker_compose_logs.txt    

 Description   

Steps to reproduce:

  1. Copy this docker-compose.yml below
  2. docker-compose up

docker-compose.yml (Minimal Working Example)

version: '3.1'
services:
  zabbix-server:
    image: zabbix/zabbix-server-mysql:alpine-4.4.7
    environment:
      - ZBX_EXPORTFILESIZE=1G
      - MYSQL_USER=zabbix
      - MYSQL_PASSWORD=zabbix
      - DB_SERVER_HOST=mysql-server
    networks:
      zabbix:
    depends_on:
      - mysql-server
  mysql-server:
    image: mariadb:10.4.12
    command: [--character-set-server=utf8, --collation-server=utf8_bin]
    environment:
      - MYSQL_RANDOM_ROOT_PASSWORD=yes
      - MYSQL_USER=zabbix
      - MYSQL_PASSWORD=zabbix
      - MYSQL_DATABASE=zabbix
    networks:
      zabbix:
networks:
  zabbix:
    driver: bridge

Notes:

  • Version numbers are pinned for immutability
  • Notice that I did not mount the export directory. The failure happens even without it being mounted

 

Result:

zabbix-server_1  |      7:20200331:085115.501 cannot initialize export: Cannot access path "/var/lib/zabbix/export/": [13] Permission denied.
zabbix-export-issue_zabbix-server_1 exited with code 1

 

Debugging:

It seems the /var/lib/zabbix/export directory has default root:root permissions without write permissions

[root@ip-172-31-32-132 zabbix-export-issue]# docker run zabbix/zabbix-server-mysql:alpine-4.4.7 ls -l /var/lib/zabbix
total 0
drwxr-sr-x    2 zabbix   root             6 Mar 24 00:51 enc
drwxr-xr-x    2 root     root             6 Mar 31 09:07 export
drwxr-sr-x    2 zabbix   root             6 Mar 24 00:51 mibs
drwxr-sr-x    2 zabbix   root             6 Mar 24 00:51 modules
drwxr-sr-x    2 zabbix   root             6 Mar 24 00:51 snmptraps
drwxr-sr-x    2 zabbix   root             6 Mar 24 00:51 ssh_keys
drwxr-sr-x    5 zabbix   root            45 Mar 24 00:51 ssl

 

 Comments   
Comment by Jad [ 2020 Mar 31 ]

Tracked here: github.com/zabbix/zabbix-docker/issues/567

Comment by Edgar Akhmetshin [ 2020 Apr 06 ]

Hello Jad,

Thank you for reporting the issue! Confirmed. Should be fixed:

Directory permissions are not assigned correctly since directory is not created before permissions changed, for example:

...
    mkdir -p /etc/zabbix && \
    mkdir -p /var/lib/zabbix && \
    mkdir -p /usr/lib/zabbix/alertscripts && \
    mkdir -p /var/lib/zabbix/enc && \
    mkdir -p /usr/lib/zabbix/externalscripts && \
    mkdir -p /var/lib/zabbix/mibs && \
    mkdir -p /var/lib/zabbix/modules && \
    mkdir -p /var/lib/zabbix/snmptraps && \
    mkdir -p /var/lib/zabbix/ssh_keys && \
    mkdir -p /var/lib/zabbix/ssl && \
    mkdir -p /var/lib/zabbix/ssl/certs && \
    mkdir -p /var/lib/zabbix/ssl/keys && \
    mkdir -p /var/lib/zabbix/ssl/ssl_ca && \
...
VOLUME ["/usr/lib/zabbix/alertscripts", "/usr/lib/zabbix/externalscripts", "/var/lib/zabbix/enc", "/var/lib/zabbix/mibs", "/var/lib/zabbix/modules"]
VOLUME ["/var/lib/zabbix/snmptraps", "/var/lib/zabbix/ssh_keys", "/var/lib/zabbix/ssl/certs", "/var/lib/zabbix/ssl/keys", "/var/lib/zabbix/ssl/ssl_ca"]
VOLUME ["/var/lib/zabbix/export"]
...

Checked with modified image after fixing Dockerfile - permissions are set correctly.

Regards,
Edgar

Generated at Fri Apr 11 09:02:21 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.