[comment]: # aside:8

[comment]: # ({0535e4cb-0535e4cb})
# Building Zabbix agent on macOS

[comment]: # ({/0535e4cb-0535e4cb})

[comment]: # ({161fafaa-161fafaa})
#### Overview

This section demonstrates how to build Zabbix macOS agent binaries from
sources with or without TLS.

[comment]: # ({/161fafaa-161fafaa})

[comment]: # ({5d4dd66b-7e7224fc})
#### Prerequisites

You will need command line developer tools (Xcode is not required),
Automake, pkg-config and PCRE (v8.x) or PCRE2 (v10.x). If you want to build agent
binaries with TLS, you will also need OpenSSL or GnuTLS.

To install Automake and pkg-config, you will need a Homebrew package
manager from <https://brew.sh/>. To install it, open terminal and run
the following command:

    /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

Then install Automake and pkg-config:

    brew install automake
    brew install pkg-config

Preparing PCRE, OpenSSL and GnuTLS libraries depends on the way how they
are going to be linked to the agent.

If you intend to run agent binaries on a macOS machine that already has
these libraries, you can use precompiled libraries that are provided by
Homebrew. These are typically macOS machines that use Homebrew for
building Zabbix agent binaries or for other purposes.

If agent binaries will be used on macOS machines that don't have the
shared version of libraries, you should compile static libraries from
sources and link Zabbix agent with them.

[comment]: # ({/5d4dd66b-7e7224fc})

[comment]: # ({8ee327a1-5e97a918})
#### Building agent binaries with shared libraries

Install PCRE2 (replace *pcre2* with *pcre* in the commands below, if needed):

    brew install pcre2

When building with TLS, install OpenSSL and/or GnuTLS:

    brew install openssl
    brew install gnutls

Download Zabbix source:

    git clone https://git.zabbix.com/scm/zbx/zabbix.git

Build agent without TLS:

    cd zabbix
    ./bootstrap.sh
    ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6
    make
    make install

Build agent with OpenSSL:

    cd zabbix
    ./bootstrap.sh
    ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6 --with-openssl=/usr/local/opt/openssl
    make
    make install

Build agent with GnuTLS:

    cd zabbix-source/
    ./bootstrap.sh
    ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6 --with-gnutls=/usr/local/opt/gnutls
    make
    make install

[comment]: # ({/8ee327a1-5e97a918})

[comment]: # ({d64f422c-90fe7eb9})
#### Building agent binaries with static libraries without TLS

Let's assume that PCRE static libraries will be installed in
`$HOME/static-libs`. We will use PCRE2 10.39.

    PCRE_PREFIX="$HOME/static-libs/pcre2-10.39"

Download and build PCRE with Unicode properties support:

    mkdir static-libs-source
    cd static-libs-source
    curl --remote-name https://github.com/PhilipHazel/pcre2/releases/download/pcre2-10.39/pcre2-10.39.tar.gz
    tar xf pcre2-10.39.tar.gz
    cd pcre2-10.39
    ./configure --prefix="$PCRE_PREFIX" --disable-shared --enable-static --enable-unicode-properties
    make
    make check
    make install

Download Zabbix source and build agent:

    git clone https://git.zabbix.com/scm/zbx/zabbix.git
    cd zabbix
    ./bootstrap.sh
    ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6 --with-libpcre2="$PCRE_PREFIX"
    make
    make install

[comment]: # ({/d64f422c-90fe7eb9})

[comment]: # ({8ba21217-b985c38b})
#### Building agent binaries with static libraries with OpenSSL

When building OpenSSL, it's recommended to run `make test` after
successful building. Even if building was successful, tests sometimes
fail. If this is the case, problems should be researched and resolved
before continuing.

Let's assume that PCRE and OpenSSL static libraries will be installed in
`$HOME/static-libs`. We will use PCRE2 10.39 and OpenSSL 1.1.1a.

    PCRE_PREFIX="$HOME/static-libs/pcre2-10.39"
    OPENSSL_PREFIX="$HOME/static-libs/openssl-1.1.1a"

Let's build static libraries in `static-libs-source`:

    mkdir static-libs-source
    cd static-libs-source

Download and build PCRE with Unicode properties support:

    curl --remote-name https://github.com/PhilipHazel/pcre2/releases/download/pcre2-10.39/pcre2-10.39.tar.gz
    tar xf pcre2-10.39.tar.gz
    cd pcre2-10.39
    ./configure --prefix="$PCRE_PREFIX" --disable-shared --enable-static --enable-unicode-properties
    make
    make check
    make install
    cd ..

Download and build OpenSSL:

    curl --remote-name https://www.openssl.org/source/openssl-1.1.1a.tar.gz
    tar xf openssl-1.1.1a.tar.gz
    cd openssl-1.1.1a
    ./Configure --prefix="$OPENSSL_PREFIX" --openssldir="$OPENSSL_PREFIX" --api=1.1.0 no-shared no-capieng no-srp no-gost no-dgram no-dtls1-method no-dtls1_2-method darwin64-x86_64-cc
    make
    make test
    make install_sw
    cd ..

Download Zabbix source and build agent:

    git clone https://git.zabbix.com/scm/zbx/zabbix.git
    cd zabbix
    ./bootstrap.sh
    ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6 --with-libpcre2="$PCRE_PREFIX" --with-openssl="$OPENSSL_PREFIX"
    make
    make install

[comment]: # ({/8ba21217-b985c38b})

[comment]: # ({d90d667e-8165604b})
#### Building agent binaries with static libraries with GnuTLS

GnuTLS depends on the Nettle crypto backend and GMP arithmetic library.
Instead of using full GMP library, this guide will use mini-gmp which is
included in Nettle.

When building GnuTLS and Nettle, it's recommended to run `make check`
after successful building. Even if building was successful, tests
sometimes fail. If this is the case, problems should be researched and
resolved before continuing.

Let's assume that PCRE, Nettle and GnuTLS static libraries will be
installed in `$HOME/static-libs`. We will use PCRE2 10.39, Nettle 3.4.1
and GnuTLS 3.6.5.

    PCRE_PREFIX="$HOME/static-libs/pcre2-10.39"
    NETTLE_PREFIX="$HOME/static-libs/nettle-3.4.1"
    GNUTLS_PREFIX="$HOME/static-libs/gnutls-3.6.5"

Let's build static libraries in `static-libs-source`:

    mkdir static-libs-source
    cd static-libs-source

Download and build Nettle:

    curl --remote-name https://ftp.gnu.org/gnu/nettle/nettle-3.4.1.tar.gz
    tar xf nettle-3.4.1.tar.gz
    cd nettle-3.4.1
    ./configure --prefix="$NETTLE_PREFIX" --enable-static --disable-shared --disable-documentation --disable-assembler --enable-x86-aesni --enable-mini-gmp
    make
    make check
    make install
    cd ..

Download and build GnuTLS:

    curl --remote-name https://www.gnupg.org/ftp/gcrypt/gnutls/v3.6/gnutls-3.6.5.tar.xz
    tar xf gnutls-3.6.5.tar.xz
    cd gnutls-3.6.5
    PKG_CONFIG_PATH="$NETTLE_PREFIX/lib/pkgconfig" ./configure --prefix="$GNUTLS_PREFIX" --enable-static --disable-shared --disable-guile --disable-doc --disable-tools --disable-libdane --without-idn --without-p11-kit --without-tpm --with-included-libtasn1 --with-included-unistring --with-nettle-mini
    make
    make check
    make install
    cd ..

Download Zabbix source and build agent:

    git clone https://git.zabbix.com/scm/zbx/zabbix.git
    cd zabbix
    ./bootstrap.sh
    CFLAGS="-Wno-unused-command-line-argument -framework Foundation -framework Security" \
    > LIBS="-lgnutls -lhogweed -lnettle" \
    > LDFLAGS="-L$GNUTLS_PREFIX/lib -L$NETTLE_PREFIX/lib" \
    > ./configure --sysconfdir=/usr/local/etc/zabbix --enable-agent --enable-ipv6 --with-libpcre2="$PCRE_PREFIX" --with-gnutls="$GNUTLS_PREFIX"
    make
    make install

[comment]: # ({/d90d667e-8165604b})