# 检查是否已安装MySQL，反之下载安装
[root@ZabbixClient-01 ~]# rpm -qa | grep mysql
[root@ZabbixClient-01 ~]# wget //repo.mysql.com/yum/mysql-5.7-community/el/7/x86_64/mysql57-community-release-el7-10.noarch.rpm
[root@ZabbixClient-01 ~]# rpm -Uvh mysql57-community-release-el7-10.noarch.rpm
[root@ZabbixClient-01 ~]# yum list all | grep mysql-community
[root@ZabbixClient-01 ~]# yum install mysql-community-server mysql-community-client -y
[root@ZabbixClient-01 ~]# mysql -V
mysql  Ver 14.14 Distrib 5.7.36, for Linux (x86_64) using  EditLine wrapper

# 检查是否正常启动
[root@ZabbixClient-01 ~]# systemctl start mysqld && systemctl enable mysqld
[root@ZabbixClient-01 ~]# netstat -nutpl | grep mysql
tcp6       0      0 :::3306                 :::*                    LISTEN      7350/mysqld

[root@ZabbixClient-01 ~]# ps -ef | grep mysql
mysql      7350      1  0 14:43 ?        00:00:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid

# MySQL安全初始化
[root@Mysql-Master01 ~]# grep 'temporary password' /var/log/mysqld.log
2021-08-19T04:08:59.720748Z 1 [Note] A temporary password is generated for root@localhost: .!aTlyih4r2y

[root@Mysql-Master01 ~]# mysql_secure_installation

Securing the MySQL server deployment.

Enter password for user root:　　# 输入MySQL初始密码 .!aTlyih4r2y

The existing password for the user account root has expired. Please set a new password.

New password:　　　　# 输入符合复杂密码策略的新密码 Client@01

Re-enter new password:　　# 再次输入 Client@01
The 'validate_password' plugin is installed on the server.
The subsequent steps will run with the existing configuration
of the plugin.
Using existing password for root.

Estimated strength of the password: 100
Change the password for root ? ((Press y|Y for Yes, any other key for No) : n　　　　# 上面以已经修改了，无需再修改

 ... skipping.
By default, a MySQL installation has an anonymous user,
allowing anyone to log into MySQL without having to have
a user account created for them. This is intended only for
testing, and to make the installation go a bit smoother.
You should remove them before moving into a production
environment.

Remove anonymous users? (Press y|Y for Yes, any other key for No) : y　　　　# 是否删除匿名用户
Success.


Normally, root should only be allowed to connect from
'localhost'. This ensures that someone cannot guess at
the root password from the network.

Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y　　# 是否禁用root远程登录
Success.

By default, MySQL comes with a database named 'test' that
anyone can access. This is also intended only for testing,
and should be removed before moving into a production
environment.


Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y　　# 是否删除test库和对test库的访问权限
 - Dropping test database...
Success.

 - Removing privileges on test database...
Success.

Reloading the privilege tables will ensure that all changes
made so far will take effect immediately.

Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y　　　# 是否刷新授权表使修改生效
Success.

All done!

# root测试登录MySQL，并创建监控用户
[root@ZabbixClient-01 ~]# mysql -u root -p
Enter password:　　# 输入上面刚更改的密码 Client@01
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 113
Server version: 5.7.36 MySQL Community Server (GPL)

Copyright (c) 2000, 2021, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
# 创建用户zbx_monitor 密码ZabbixClient@01
mysql> create user 'zbx_monitor'@'localhost' identified by 'ZabbixClient@01';
Query OK, 0 rows affected (0.00 sec)

# 授予zbx_monitor权限
mysql> grant usage,replication client,process,show databases,show view on *.* to 'zbx_monitor'@'localhost';
Query OK, 0 rows affected (0.00 sec)
　　或 
mysql> grant all privileges on *.* to 'zbx_monitor'@'localhost';
Query OK, 0 rows affected (0.00 sec)

# 刷新授权，使其立即生效
mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)

mysql> select user,host from mysql.user;
+---------------+-----------+
| user          | host      |
+---------------+-----------+
| mysql.session | localhost |
| mysql.sys     | localhost |
| root          | localhost |
| zbx_monitor   | localhost |
+---------------+-----------+
4 rows in set (0.00 sec)

mysql> show grants for 'zbx_monitor'@'localhost';
+----------------------------------------------------------+
| Grants for zbx_monitor@localhost                         |
+----------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'zbx_monitor'@'localhost' |
+----------------------------------------------------------+
1 row in set (0.00 sec)

# zbx_monitor用户测试登录，并查看已有权限
[root@ZabbixClient-01 ~]# mysql -u zbx_monitor -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 6
Server version: 5.7.36 MySQL Community Server (GPL)

Copyright (c) 2000, 2021, Oracle and/or its affiliates.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

mysql> show grants for current_user();
+----------------------------------------------------------+
| Grants for zbx_monitor@localhost                         |
+----------------------------------------------------------+
| GRANT ALL PRIVILEGES ON *.* TO 'zbx_monitor'@'localhost' |
+----------------------------------------------------------+
1 row in set (0.00 sec)

# /etc/zabbix下新增一个文件 .my.cnf
[root@ZabbixClient-01 ~]# vim /etc/zabbix/.my.cnf
[mysql]
user=zbx_monitor
password=ZabbixClient@01

[mysqladmin]
user=zbx_monitor
password=ZabbixClient@01

# 搜索zabbix-agent自带的MySQL Key配置文件
[root@ZabbixClient-01 ~]# find / -iname userparameter_mysql*
/usr/share/doc/zabbix-agent-5.0.17/userparameter_mysql.conf
[root@ZabbixClient-01 ~]# cp /usr/share/doc/zabbix-agent-5.0.17/userparameter_mysql.conf /etc/zabbix/zabbix_agentd.d/

# 修改userparameter_mysql.conf配置文件(其实只多了一个 HOME=/etc/zabbix)
[root@ZabbixClient-01 ~]# sed -i_bak$(date +%Y%m%d) -e 's#],#], HOME=/etc/zabbix#g' /etc/zabbix/zabbix_agentd.d/userparameter_mysql.conf
[root@ZabbixClient-01 ~]# systemctl restart zabbix-agent && systemctl restart mysqld

[root@ZabbixClient-01 ~]# systemctl stop mysqld
[root@ZabbixClient-01 ~]# ps -ef | grep mysqld
root      71766   1141  0 11:30 pts/0    00:00:00 grep --color=auto mysqld

[root@ZabbixClient-01 ~]# systemctl start mysqld
[root@ZabbixClient-01 ~]# ps -ef | grep mysqld
mysql     96660      1  0 11:58 ?        00:00:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      96816   1141  0 12:06 pts/0    00:00:00 grep --color=auto mysqld

# 增加远程执行命令操作配置
[root@ZabbixClient-01 ~]# sed -i -e '$a\EnableRemoteCommands=1\nLogRemoteCommands=1' /etc/zabbix/zabbix_agentd.conf
解析:EnableRemoteCommands=1    #允许远程执行命令
　　 LogRemoteCommands=1      #开启远程执行命令操作日志

# 配置zabbix客户端的sudo权限
[root@ZabbixClient-01 ~]# visudo
#....
# 末行添加以下两行内容
# allows 'zabbix' user to restart mysqld without password.
zabbix ALL=NOPASSWD:/usr/bin/systemctl restart mysqld