TimWillemstein2 (Customer) asked a question.

Running AveksaAgent (Remote) as a service

Is there a way to register the AveksaAgent that is installed on a remote host to be used as a service? For example the AFX Server can registered as a service as per the installation guide:

imageimageThe documentation does not list a similar option for the AveksaAgent. Has anyone ever done this?


      • TimWillemstein2 (Customer)

        So for future references, even though the guide is for version 8.0 it will also work for version 7.5.2.

  • Staines_ian (RSA Security)

    I think the best we can ever state in this situation is that we do not know it will not work.

  • OverthinkerDave (Customer)

    Personally I think it is time to start supporting systemd more.

     

    I am currently evaluating a full systemctl config

    • edit a (new) /etc/systemd/system/agent_server.service (using the original agent_server.service-file in systemd directory as template)
      • [Unit]-section: edit start/stop to non-root-directory:
        • ExecStart=/usr/bin/bash /home/agentuser/AveksaAgent/bin/aveksa_agent start
        • ExecStop=/usr/bin/bash /home/agentuser/AveksaAgent/bin/aveksa_agent stop
      • [Unit]-section: add non-root-user config:
        • User=agentuser
        • Group=agentuser
      • [Unit]-section: add "Environment=PATH=/sbin:/bin:/usr/sbin:/usr/bin"

     

    Activate service (as root still):

    • systemctl daemon-reload
    • systemctl enable agent_server.service

     

    And so far I do not know this is NOT working.

     

    Where manually can start/stop your service with:

    • systemctl start agent_server.service
    • systemctl stop agent_server.service

     

     

    Not a "init.d" file in sight.... as in many future linux distributions

     

    But still with "Full disclaimer" this is work-in-progress

     

    ... and that there are (probably) even better ways to do it. Like registering non-root-services under "/home/agentuser/.config/systemd/user", which in theory (not tried yet) should allow to register services without the need of root.

    Expand Post