check_pakfire

                                        
A Nagios / Icinga plugin for checking IPFire pakfire updates

                    

        
        

            
            

                

    

    
check_pakfire


check_pakfire is a Nagios / Icinga plugin for checking IPFire Pakfire updates and required reboots.


Requirements


I successfully tested the plugin with IPFire 2.x. I'm not sure whether IPFire 3.x comes with a new Pakfire architecture - so, use this on newer versions at your own risk. ;-)


No additional Python packages are required - just deploy the script and use it.


Note: Beginning with plugin version 1.4, Python 3 is the only supported version. If you're using an older IPFire release, you will need to use plugin version 1.3.


Usage


By default, the script checks for core updates and also packages upgrades - it is also possible to only check core updates (-e / --exclude-packages parameters). Gathering performance data (outdated packages) can be useful when monitoring a big amount of IPFire systems.


The following parameters can be specified:






Parameter
Description






-d / --debug
enable debugging outputs (default: no)




-h / --help
shows help and quits




-e / --exclude-packages
disables checking for package updates (default: no)




-m / --mirror
defines one or multiple mirrors (default: system mirror list)




-n / --need-reboot
defines exit level if reboot is required (default: w)




-P / --show-perfdata
enables performance data (default: no)




-w / --packages-warning
defines warning threshold for outdated packages (default: 1)




-c / --packages-critical
defines warning threshold for outdated packages (default: 5)




-W / --core-warning
defines warning threshold for outdated core (default: 1)




-C / --core-critical
defines warning threshold for outdated core (default: 3)




--version
prints programm version and quits






Examples


The following example checks for core updates only:


$ ./check_pakfire.py -e
OK: Core update (124) up2date


A IPFire host with some outdated packages:


$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux)


An updated IPFire host with performance data:


$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux) | 'system_updates'=0;;;; 'outdated_packages'=2.0;1.0;5.0;;


An outdated host with a pending reboot:


$ ./check_pakfire.py
CRITICAL: Core update (128) outdated (130), packages up2date, system reboot required


Installation


To install the plugin, move the Python script into the appropriate directory and create a configuration.


Configuration


Nagios / Icinga 1.x


Within Nagios / Icinga you will need to configure a remote check command, e.g. for NRPE:


# check_nrpe_pakfire
define command{
    command_name        check_nrpe_pakfire
    command_line        $USER1$/check_nrpe -H $HOSTADDRESS$ -c check_pakfire -a $ARG1$
}


Configure the check for a particular host, e.g.:


# DIAG: Updates
define service{
        use                             generic-service
        host_name                       st-ipfire03
        service_description             DIAG: Updates
        check_command                   check_nrpe_pakfire!-P
}


Icinga2


Define a service like this:


apply Service "DIAG: Updates" {
  import "generic-service"
  check_command = "by_ssh"
  vars.by_ssh_command = [ "/opt/check_pakfire.py", "-P" ]
  vars.by_ssh_port = host.vars.ssh_port
  vars.by_ssh_logname = "icinga"
  assign where host.vars.os == "Linux" && host.vars.app == "router"
}


Define SSH port and application for your IPFire host:


object Host "st-ipfire03.stankowic.loc" {
  import "generic-host"

  address = "xxx"

  vars.os = "Linux"
  vars.app = "router"

  vars.ssh_port = 222
}


Validate the configuration and reload the Icinga2 daemon:


# icinga2 daemon -C
# service icinga2 reload