check_pakfire

                                        
A Nagios / Icinga plugin for checking IPFire pakfire updates

                    

        
        

            
            

                

    

    
check_pakfire


check_pakfire is a Nagios / Icinga plugin for checking IPFire Pakfire updates and required reboots.


Requirements


I successfully tested the plugin with IPFire 2.x. I'm not sure whether IPFire 3.x comes with a new Pakfire architecture - so, use this on newer versions at your own risk. ;-)


No additional Python packages are required - just deploy the script and use it.


Usage


By default, the script checks for core updates and also packages upgrades - it is also possible to only check core updates (-e / --exclude-packages parameters). Gathering performance data (outdated packages) can be useful when monitoring a big amount of IPFire systems.


The following parameters can be specified:






Parameter
Description






-d / --debug
enable debugging outputs (default: no)




-h / --help
shows help and quits




-e / --exclude-packages
disables checking for package updates (default: no)




-m / --mirror
defines one or multiple mirrors (default: system mirror list)




-n / --need-reboot
defines exit level if reboot is required (default: w)




-P / --show-perfdata
enables performance data (default: no)




-w / --packages-warning
defines warning threshold for outdated packages (default: 1)




-c / --packages-critical
defines warning threshold for outdated packages (default: 5)




-W / --core-warning
defines warning threshold for outdated core (default: 1)




-C / --core-critical
defines warning threshold for outdated core (default: 3)




--version
prints programm version and quits






Examples


The following example checks for core updates only:


$ ./check_pakfire.py -e
OK: Core update (124) up2date


A IPFire host with some outdated packages:


$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux)


An updated IPFire host with performance data:


$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux) | 'system_updates'=0;;;; 'outdated_packages'=2.0;1.0;5.0;;


An outdated host with a pending reboot:


$ ./check_pakfire.py
CRITICAL: Core update (128) outdated (130), packages up2date, system reboot required


Installation


To install the plugin, move the Python script into the appropriate directory and create a configuration.


Configuration


Nagios / Icinga 1.x


Within Nagios / Icinga you will need to configure a remote check command, e.g. for NRPE:


#check_nrpe_pakfire
define command{
    command_name        check_nrpe_pakfire
    command_line        $USER1$/check_nrpe -H $HOSTADDRESS$ -c check_pakfire -a $ARG1$
}


Configure the check for a particular host, e.g.:


#DIAG: Updates
define service{
        use                             generic-service
        host_name                       st-ipfire03
        service_description             DIAG: Updates
        check_command                   check_nrpe_pakfire!-P
}


Icinga2


Define a service like this:


apply Service "DIAG: Updates" {
  import "generic-service"
  check_command = "by_ssh"
  vars.by_ssh_command = [ "/opt/check_pakfire.py", "-P" ]
  vars.by_ssh_port = host.vars.ssh_port
  vars.by_ssh_logname = "icinga"
  assign where host.vars.os == "Linux" && host.vars.app == "router"
}


Define SSH port and application for your IPFire host:


object Host "st-ipfire03.stankowic.loc" {
  import "generic-host"

  address = "xxx"

  vars.os = "Linux"
  vars.app = "router"

  vars.ssh_port = 222
}


Validate the configuration and reload the Icinga2 daemon:


# icinga2 daemon -C
# service icinga2 reload