Create readme.md

:D

.gitignore

@@ -0,0 +1,9 @@
+*.pyc
+*.swp
+.project
+.pydevproject
+.settings
+pagekite*
+.idea
+MANIFEST
+dist

README.md

@@ -0,0 +1,4 @@
+nagios-plugins
+==============
+
+Small army of nagios-plugins either made or maintained by opinkerfi

check_apcext.pl/check_apcext.pl

@@ -1,4 +1,5 @@
 #!/usr/bin/perl
+# nagios: -epn
 #
 # check_apcext.pl - APC Extra gear monitoring plugin for Nagios
 # 05.02.07 Paul Venezia

check_apcext.pl/nagios-okplugin-apc.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check APC devices
 Name:		nagios-okplugin-apc
-Version:	2.1.0
+Version:	2.1.2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -38,6 +38,15 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/*
 
 %changelog
+* Mon Jun 09 2014 Tomas Edwardsson <tommi@tommi.org> 2.1.2-1
+- Disable embedded perl (tommi@tommi.org)
+
+* Thu Mar 20 2014 Tomas Edwardsson <tommi@tommi.org> 2.1.1-1
+- Merge github.com:opinkerfi/misc (palli@opensource.is)
+- Use the right value for the job nbmstemp (tommi@tommi.org)
+- Fixed metric conversion for all mibs (tommi@opensource.is)
+- Added fahrenheit to celsius conversion (tommi@tommi.org)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 2.1.0-1
 - Version number bumped to 2.1.0 (palli@opensource.is)
 - Added noarch buildarch (tommi@tommi.org)

check_bl/nagios-okplugin-mailblacklist.spec

@@ -2,8 +2,8 @@
 
 Summary:	A Nagios plugin to check SMTP blacklists
 Name:		nagios-okplugin-mailblacklist
-Version:	1.0
-Release:	1%{?dist}
+Version:	1.1
+Release:	2%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.ok.is/trac/wiki/Nagios-OKPlugin-MailBlacklist
@@ -11,7 +11,7 @@ Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_bl/releases/%
 Requires:	nagios-plugins
 Requires:	nagios-plugins-perl
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-Packager:	Tomas Edwardsson <tommi@ok.is>
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
 BuildArch:	noarch
 
 
@@ -22,6 +22,8 @@ Checks DNS Blacklists for existance of hosts
 %setup -q
 perl -pi -e "s|/usr/lib|%{_libdir}|g" check_bl
 
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude}|}^perl\\(utils\\)
+
 %build
 
 
@@ -38,6 +40,12 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/*
 
 %changelog
+* Fri May 04 2018 Richard Allen <ra@ok.is> 1.1-2
+- Filter out perl-utils dependancy
+
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 1.1-1
+- 
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.0-1
 - Updated buildarch to noarch (tommi@tommi.org)
 

check_bond/nagios-okplugin-bond.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check network bond devices
 Name:		nagios-okplugin-bond
-Version:	0.0.3
+Version:	0.0.4
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -40,6 +40,10 @@ rm -rf %{buildroot}
 %config(noreplace) %{_sysconfdir}/nrpe.d/check_bond.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 0.0.4-1
+- Merge pull request #5 from pallvalmundsson/check_yum_security_patch (palli-
+  github@minor.is)
+
 * Wed Mar 13 2013 Pall Sigurdsson <palli@opensource.is> 0.0.3-1
 - 
 

check_brocade/nagios-okplugin-brocade.spec

@@ -2,15 +2,15 @@
 
 Summary:	A Nagios plugin to check Brocade devices
 Name:		nagios-okplugin-brocade
-Version:	0.0.4
-Release:	1%{?dist}
+Version:	0.0.5
+Release:	2%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.ok.is/trac/wiki/Nagios-OKPlugin-Brocade
 Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_brocade/releases/nagios-okplugin-brocade-%{version}.tar.gz
 Requires:	perl-Nagios-Plugin
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-Packager:	Tomas Edwardsson <tommi@ok.is>
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
 
 
 %description
@@ -20,6 +20,8 @@ Checks Brocade devices
 %setup -q
 perl -pi -e "s|/usr/lib|%{_libdir}|g" check_brocade_env
 
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude}|}^perl\\(utils\\)
+
 %build
 
 
@@ -36,6 +38,12 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/*
 
 %changelog
+* Fri May 09 2018 Gardar Thorsteinsson <gardar@ok.is> 0.0.5-2
+- filter out perl-utils dep
+
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 0.0.5-1
+- 
+
 * Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 0.0.4-1
 - new package built with tito
 

check_cifs/nagios-okplugin-cifs.spec

@@ -2,8 +2,8 @@
 
 Summary:	A Nagios plugin to check CIFS shares
 Name:		nagios-okplugin-cifs
-Version:	1.0
-Release:	1%{?dist}
+Version:	1.1
+Release:	2%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.ok.is/trac/wiki/Nagios-OKPlugin-Brocade
@@ -11,7 +11,7 @@ Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_cifs/releases
 Requires:	perl-Nagios-Plugin
 Requires:	samba-client, krb5-workstation
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-Packager:	Tomas Edwardsson <tommi@ok.is>
+Packager: Gardar Thorsteinsson <gardar@ok.is>	
 BuildArch:	noarch
 
 
@@ -23,6 +23,8 @@ NTML authentication
 %setup -q
 perl -pi -e "s|/usr/lib|%{_libdir}|g" check_cifs
 
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude}|}^perl\\(utils\\)
+
 %build
 
 
@@ -39,6 +41,12 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/*
 
 %changelog
+* Fri May 09 2018 Gardar Thorsteinsson <gardar@ok.is> 1.1-2
+- Filter out perl-utils dep
+
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 1.1-1
+- Merge github.com:opinkerfi/misc (palli@opensource.is)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.0-1
 - version number of scripts bumped (palli@opensource.is)
 - Updates buildarch to noarch (tommi@tommi.org)

check_cpu.py/nagios-okplugin-check_cpu.spec

@@ -0,0 +1,59 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check CPU on Linux servers
+Name:		nagios-okplugin-check_cpu
+Version:	1.1
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/
+Source0:	https://github.com/opinkerfi/nagios-plugins/archive/%{name}-%{version}-%{release}.tar.gz
+Requires:	nagios-okplugin-common
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@tommi.org>
+BuildArch:	noarch
+
+%description
+Check cpu states on line machines
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 okplugin_check_cpu %{buildroot}%{_libdir}/nagios/plugins/okplugin_check_cpu
+install -D -p -m 0755 nrpe.d/okplugin_check_cpu.cfg %{buildroot}/etc/nrpe.d/okplugin_check_cpu.cfg
+
+
+%clean
+rm -rf %{buildroot}
+
+%post
+/sbin/service nrpe reload
+
+%files
+%defattr(-,root,root,-)
+%{_libdir}/nagios/plugins/*
+%{_sysconfdir}/nrpe.d/*
+
+
+
+%changelog
+* Mon Jan 20 2014 Tomas Edwardsson <tommi@tommi.org> 1.1-1
+- new package built with tito
+
+* Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.0-1
+- Version number bumped
+- Updates buildarch to noarch (tommi@tommi.org)
+
+* Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 0.3-1
+- new package built with tito
+
+* Thu Nov 25 2010  Pall Sigurdsson <palli@opensource.is> 0.1-2
+- Nrpe config now ships with plugin by default
+* Mon Mar  1 2010  Tomas Edwardsson <tommi@ok.is> 0.1-1
+- Initial packaging
+

check_cpu.py/nrpe.d/okplugin_check_cpu.cfg

@@ -0,0 +1 @@
+command[okplugin_check_cpu]=/usr/lib/nagios/plugins/okplugin_check_cpu

check_cpu.py/okplugin_check_cpu

@@ -0,0 +1,131 @@
+#!/usr/bin/python
+#
+# Copyright 2014, Tomas Edwardsson
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+"""
+Gathers information on cpu usage on a linux machine
+
+It returns performance data for both the last 5 seconds and from last run.
+"""
+
+from pynag.Plugins import PluginHelper, ok, unknown
+import os
+import time
+
+
+def main():
+    """The main logic of the program"""
+
+    # See man proc and search for /proc/stat
+    stat_fields = ['cpu', 'user', 'nice', 'system', 'idle', 'iowait', 'irq',
+                   'softirq', 'steal', 'guest', 'guest_nice']
+
+    pyplug = PluginHelper()
+
+    # Get the statistics from last run
+    old_stat = get_saved_stat()
+
+    # Get current state
+    stat = get_stat()
+
+    # Resample
+    time.sleep(5)
+    stat2 = get_stat()
+
+    try:
+        save_stat(stat)
+    except IOError, err:
+        pyplug.exit(unknown, "Unable to save cpu statistics: %s" % err)
+
+
+    # Calculate averages for the last few seconds
+    current_averages = diff_stats(stat2, stat)
+    for pos in range(len(current_averages)):
+        pyplug.add_metric(label=stat_fields[pos+1],
+                          value=current_averages[pos],
+                          uom="%")
+
+    # Calculate averages from last run
+    if old_stat:
+        last_run_avg = diff_stats(old_stat, stat)
+        for pos in range(len(current_averages)):
+            pyplug.add_metric(label=stat_fields[pos+1]+"_avg",
+                              value=last_run_avg[pos],
+                              uom="%")
+
+    pyplug.add_status(ok)
+    pyplug.add_summary("CPU load %.2f%%" % (100.0 - current_averages[3]))
+    pyplug.exit()
+
+def diff_stats(older, newer):
+    """Calculates the percentage between two stat arrays"""
+    if older:
+        diff = []
+        for pos in range(len(newer)):
+            diff.append(newer[pos] - older[pos])
+        averages =  calc_avg(diff)
+    else:
+        averages =  calc_avg(newer)
+
+    return averages
+
+
+def remove_stale_state():
+    """Removes the last state file if we have rebooted"""
+
+    try:
+        state_mtime = os.stat("/var/lib/nagios-okplugin/check_cpu").st_mtime
+        boot_time = os.stat("/proc/1").st_mtime
+        if state_mtime < boot_time:
+            os.unlink("/var/lib/nagios-okplugin/check_cpu")
+    except OSError:
+        return None
+
+    return state_mtime
+
+def calc_avg(stat):
+    """Calculates the average of each int in array"""
+    stat_sum = sum(stat)
+    avg = []
+    for pos in range(len(stat)):
+        avg.append(float(stat[pos]) / stat_sum * 100)
+    return avg
+
+def get_stat():
+    """Fetches the first line from /proc/stat and returns the numbers"""
+    stat_fh = open("/proc/stat")
+    return [int(pos) for pos in stat_fh.readline().split()[1:]]
+
+def get_saved_stat():
+    """Fetches information about the last run to be able to do averages"""
+
+    remove_stale_state()
+    try:
+        stat_fh = open("/var/lib/nagios-okplugin/check_cpu")
+    except IOError:
+        return None
+    return [int(pos) for pos in stat_fh.readline().split()[1:]]
+
+def save_stat(stat):
+    """Save statistics to compare to in next run"""
+    stat_fh = open("/var/lib/nagios-okplugin/check_cpu", "w")
+
+    stat_fh.write("cpu " + " ".join([str(pos) for pos in stat]) + "\n")
+    stat_fh.close()
+
+if __name__ == "__main__":
+    main()
+
+# vim: sts=4 expandtab

check_cpu.sh/nagios-plugins-check_cpu.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check CPU on Linux servers
 Name:		nagios-plugins-check_cpu
-Version:	1.0
+Version:	2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -45,6 +45,11 @@ rm -rf %{buildroot}
 
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- Added nrpe reload to post section (tommi@tommi.org)
+- Merge github.com:opinkerfi/misc (palli@opensource.is)
+- Added dependency on bc (palli@opensource.is)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.0-1
 - Version number bumped
 - Updates buildarch to noarch (tommi@tommi.org)

check_dataprotector/nagios-okplugin-check_dataprotector.spec

@@ -2,7 +2,7 @@
 
 Summary:	Nagios Plugins to monitor HP Dataprotector
 Name:		nagios-okplugin-check_dataprotector
-Version:	1.0.1
+Version:	2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -45,6 +45,10 @@ rm -rf %{buildroot}
 /etc/nrpe.d/check_dataprotector.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- removed warning threshold of 60 (palli@opensource.is)
+- contrib removed from plugin path (palli@opensource.is)
+
 * Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 1.0.1-1
 - new package built with tito
 

check_disks.pl/check_disks.pl

@@ -251,10 +251,10 @@ if ($ret > 1) {
 #
 
 foreach my $l (@output) {
+    next if ($l =~ m/$opt_R/);
+    next if ($l !~ m/$opt_r/);
+    next if ($l =~ m/$exclude_re/);
     if($l =~ /(\d+)\s+(\d+)\s+(\d+)\s+(\d+)\%\s+([\/\w\d\.-]+)$/) {
-        next if ($l =~ m/$opt_R/);
-        next if ($l !~ m/$opt_r/);
-        next if ($l =~ m/$exclude_re/);
         my ($s,$u,$f,$pu,$d) = ($1,$2,$3,$4,$5);
         $alldisks{$d}->{pused} = $pu;
         $alldisks{$d}->{pfree} = 100-$pu;
@@ -268,10 +268,10 @@ foreach my $l (@output) {
 # This is the output of df.exe on Windows
 #C:\    9097126      6094081      3003045    67% argon-c (ntfs)
     else {
-	if ($l =~ /(\w)\:\\\s+(\d+)\s+(\d+)\s+(\d+)\s+(\d+)\%\s+(.*)$/) {
         next if ($l =~ m/$opt_R/);
         next if ($l !~ m/$opt_r/);
         next if ($l =~ m/$exclude_re/);
+	if ($l =~ /(\w)\:\\\s+(\d+)\s+(\d+)\s+(\d+)\s+(\d+)\%\s+(.*)$/) {
         my ($d,$s,$u,$f,$pu) = ("/$1",$2,$3,$4,$5);
         $alldisks{$d}->{pused} = $pu;
         $alldisks{$d}->{pfree} = 100-$pu;
@@ -324,7 +324,7 @@ if($opt_f) {
             if(defined($alldisks{$f})) {
                 $checkdisks{$f}=$alldisks{$f};
             }
-        } elsif ($f =~ /([\/\w\d]+)\:(\w+)\:(\w+)/) {
+        } elsif ($f =~ /^(.+?)\:(\w+)\:(\w+)/) {
             if(defined($alldisks{$1})) {
                 $checkdisks{$1}=$alldisks{$1};
                 updateRates($1,$2,$3,$checkdisks{$1}->{somme});

check_disks.pl/nagios-okplugin-check_disks.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check disks via NRPE
 Name:		nagios-okplugin-check_disks
-Version:	1.0.4
+Version:	1.0.7
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -40,6 +40,16 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/check_disks.pl
 
 %changelog
+* Wed Oct 29 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.7-1
+- Fix invalid regex if mountpoint has . in path (tommi@tommi.org)
+- Regex filtering broke disk checks (tommi@tommi.org)
+
+* Tue Mar 25 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.6-1
+- Bumped version
+
+* Tue Mar 25 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.5-1
+- Added support for inodes (tryggvi@linux.is)
+
 * Sat Mar 02 2013 Tryggvi Farestveit <tryggvi@linux.is> 1.0.4-1
 - Added support for inodes
 

check_eva/nagios-okplugin-check_eva.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check HP EVA Disk Systems
 Name:		nagios-okplugin-check_eva
-Version:	1.0.2
+Version:	2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -40,6 +40,22 @@ rm -rf %{buildroot}
 /etc/nrpe.d/check_eva.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- Merge pull request #10 from gitmopp/patch-2 (palli-github@minor.is)
+- bug in for loop. Looped only once (mopp@gmx.net)
+- Fixed output to be more compatible (mopp@gmx.net)
+- check_eva new Make sure --timeout is an integer (palli@opensource.is)
+- check_eva new command line option --timeout (palli@opensource.is)
+- check_eva Fix undefined fix typos (palli@opensource.is)
+- PEP8 cleanup (palli@opensource.is)
+- merged (palli@opensource.is)
+- check_eva - minor bugfixes (palli@opensource.is)
+- check_eva.py more code cleanup with pycharm inspections (palli@opensource.is)
+- check_eva.py - Make code more readable (palli@opensource.is)
+- convert from tabs to spaces (palli@opensource.is)
+- check_eva - fix mixed tab/spaces (palli@opensource.is)
+- Update check_eva.py (sander.grendelman@gmail.com)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.0.2-1
 - changed sssu subcommands from being singlequoted to doublequoted for windows
   compatibility (palli@opensource.is)

check_firewall_active/check_firewall_active.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+EXIT_OK=0
+EXIT_WARN=1
+EXIT_CRIT=2
+
+PATH=/sbin:/usr/sbin:$PATH
+
+if [ "$(id -u)" != "0" ]; then
+	echo "This script must be run as root" 1>&2
+	exit $EXIT_CRIT
+fi
+
+blocks=$(iptables -L -v -n | egrep 'REJECT|DROP' | wc -l)
+
+if [ $blocks -eq 0 ]; then
+	echo "CRITICAL: No firewall detected"
+	exit $EXIT_CRIT
+fi
+
+echo "OK: Firewall is active"
+exit $EXIT_OK
+

check_firewall_active/nagios-okplugin-check_firewall_active.spec

@@ -0,0 +1,52 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check if iptables are actually enforcing rules
+Name:		nagios-okplugin-check_firewall_active
+Version:	1.0.2
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/issues
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_firewall_active/releases/nagios-okplugin-check_firewall_active-%{version}.tar.gz
+Requires:	nagios-nrpe
+Requires:	iptables
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Richard Allen <ra@ok.is>
+
+
+
+%description
+A Nagios plugin to check if iptables are actually enforcing rules
+
+
+%prep
+%setup -q
+#perl -pi -e "s|/usr/lib64|%{_libdir}|g" nrpe.d/check_firewall_active.cfg
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_firewall_active.sh %{buildroot}%{_libdir}/nagios/plugins/check_firewall_active.sh
+install -D -p -m 0755 nrpe.d/check_firewall_active.cfg %{buildroot}/etc/nrpe.d/check_firewall_active.cfg
+install -D -p -m 0644 sudoers.d/check_firewall_active %{buildroot}/etc/sudoers.d/check_firewall_active
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+#%doc README LICENSE
+%{_libdir}/nagios/plugins/*
+/etc/nrpe.d/check_firewall_active.cfg
+/etc/sudoers.d/check_firewall_active
+
+%post
+restorecon -v %{_libdir}/nagios/plugins/check_firewall_active.sh /etc/nrpe.d/check_firewall_active.cfg /etc/sudoers.d/check_firewall_active
+
+%changelog
+* Thu Dec 21 2016  Gardar Thorsteinsson <gardart@gmail.com> 1.0.1-1
+* Thu Dec 21 2016  Gardar Thorsteinsson <gardart@gmail.com> 1.0.0-3
+* Thu Dec 20 2016  Richard Allen <ra@ok.is> 0.1-1
+- Initial packaging

check_firewall_active/nrpe.d/check_firewall_active.cfg

@@ -0,0 +1,3 @@
+
+
+command[check_firewall_active]=sudo /usr/lib64/nagios/plugins/check_firewall_active.sh

check_firewall_active/sudoers.d/check_firewall_active

@@ -0,0 +1,2 @@
+Defaults:nrpe	!requiretty
+nrpe		ALL = (root) NOPASSWD: /usr/lib64/nagios/plugins/check_firewall_active.sh

check_hpacucli/check_hpacucli.py

@@ -16,26 +16,22 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 # About this script
-# 
+#
 # This script will check the status of Smart Array Raid Controller
-# You will need the hpacucli binary in path (/usr/sbin/hpacucli is a good place)
+# You need the hpacucli binary in path (/usr/sbin/hpacucli is a good place)
 # hpacucli comes with the Proliant Support Pack (PSP) from HP
 
 debugging = False
 
-
-
 # No real need to change anything below here
-version="1.1"
-ok=0
-warning=1
-critical=2
-unknown=3 
-not_present = -1 
+version = "1.1"
+ok = 0
+warning = 1
+critical = 2
+unknown = 3
+not_present = -1
 nagios_status = -1
 
-
-
 state = {}
 state[not_present] = "Not Present"
 state[ok] = "OK"
@@ -44,286 +40,323 @@ state[critical] = "Critical"
 state[unknown] = "Unknown"
 
 
-longserviceoutput="\n"
-perfdata=""
-summary=""
-sudo=False
+longserviceoutput = "\n"
+perfdata = ""
+summary = ""
+sudo = False
 
 
 from sys import exit
 from sys import argv
-from os import getenv,putenv,environ
+from os import getenv, putenv, environ
 import subprocess
 
 
-
 def print_help():
-        print "check_hpacucli version %s" % version
-        print "This plugin checks HP Array with the hpacucli command"
-        print ""
-        print "Usage: %s " % argv[0]
-        print "Usage: %s [--help]" % argv[0]
-        print "Usage: %s [--version]" % argv[0]
-        print "Usage: %s [--path </path/to/hpacucli>]" % argv[0]
-        print "Usage: %s [--no-perfdata]" % argv[0]
-        print "Usage: %s [--no-longoutput]" % argv[0]
-        print  ""
+    print "check_hpacucli version %s" % version
+    print "This plugin checks HP Array with the hpacucli command"
+    print ""
+    print "Usage: %s " % argv[0]
+    print "Usage: %s [--help]" % argv[0]
+    print "Usage: %s [--version]" % argv[0]
+    print "Usage: %s [--path </path/to/hpacucli>]" % argv[0]
+    print "Usage: %s [--no-perfdata]" % argv[0]
+    print "Usage: %s [--no-longoutput]" % argv[0]
+    print  ""
 
 
 def error(errortext):
-        print "* Error: %s" % errortext
-        print_help()
-        print "* Error: %s" % errortext
-        exit(unknown)
-
-def debug( debugtext ):
-        global debugging
-        if debugging:
-                print  debugtext
+    print "* Error: %s" % errortext
+    print_help()
+    print "* Error: %s" % errortext
+    exit(unknown)
+
+
+def debug(debugtext):
+    global debugging
+    if debugging:
+        print  debugtext
 
 
-'''runCommand: Runs command from the shell prompt. Exit Nagios style if unsuccessful'''
 def runCommand(command):
-  proc = subprocess.Popen(command, shell=True, stdout=subprocess.PIPE,stderr=subprocess.PIPE,)
-  stdout, stderr = proc.communicate('through stdin to stdout')
-  if proc.returncode > 0:
-    print "Error %s: %s\n command was: '%s'" % (proc.returncode,stderr.strip(),command)
-    debug("results: %s" % (stdout.strip() ) )
-    if proc.returncode == 127: # File not found, lets print path
-        path=getenv("PATH")
+    """ Run command from the shell prompt. Exit Nagios style if unsuccessful"""
+    proc = subprocess.Popen(command,
+                            shell=True,
+                            stdout=subprocess.PIPE,
+                            stderr=subprocess.PIPE,
+                            )
+    stdout, stderr = proc.communicate('through stdin to stdout')
+    if proc.returncode > 0:
+        print "Error %s: %s\n command was: '%s'"\
+              % (proc.returncode, stderr.strip(), command)
+    debug("results: %s" % (stdout.strip()))
+    if proc.returncode == 127:  # File not found, lets print path
+        path = getenv("PATH")
         print "Check if your path is correct %s" % (path)
     if stderr.find('Password:') == 0 and command.find('sudo') == 0:
-      print "Check if user is in the sudoers file"
+        print "Check if user is in the sudoers file"
     if stderr.find('sorry, you must have a tty to run sudo') == 0 and command.find('sudo') == 0:
-      print "Please remove 'requiretty' from /etc/sudoers"
-    exit(unknown)
-  else:
-    return stdout
+        print "Please remove 'requiretty' from /etc/sudoers"
+        exit(unknown)
+    else:
+        return stdout
+
 
 def end():
-	global summary
-	global longserviceoutput
-	global perfdata
-	global nagios_status
-        print "%s - %s | %s" % (state[nagios_status], summary,perfdata)
-        print longserviceoutput
-	if nagios_status < 0: nagios_status = unknown
-        exit(nagios_status)
+    global summary
+    global longserviceoutput
+    global perfdata
+    global nagios_status
+    print "%s - %s | %s" % (state[nagios_status], summary, perfdata)
+    print longserviceoutput
+    if nagios_status < 0:
+        nagios_status = unknown
+    exit(nagios_status)
+
 
 def add_perfdata(text):
-        global perfdata
-        text = text.strip()
-        perfdata = perfdata + " %s " % (text)
+    global perfdata
+    text = text.strip()
+    perfdata = perfdata + " %s " % (text)
+
 
 def add_long(text):
-        global longserviceoutput
-        longserviceoutput = longserviceoutput + text + '\n'
+    global longserviceoutput
+    longserviceoutput = longserviceoutput + text + '\n'
+
 
 def add_summary(text):
-	global summary
-	summary = summary + text
+    global summary
+    summary = summary + text
+
 
 def set_path(path):
-	current_path = getenv('PATH')
-	if current_path.find('C:\\') > -1: # We are on this platform
-		if path == '':
-			path = ";C:\Program Files\Hewlett-Packard\Sanworks\Element Manager for StorageWorks HSV"
-			path = path + ";C:\Program Files (x86)\Compaq\Hpacucli\Bin"
-			path = path + ";C:\Program Files\Compaq\Hpacucli\Bin"
-		else: path = ';' + path
-	else:	# Unix/Linux, etc
-		if path == '': path = ":/usr/sbin"
-		else: path = ':' + path
-	current_path = "%s%s" % (current_path,path)
-	environ['PATH'] = current_path
+    current_path = getenv('PATH')
+    if current_path.find('C:\\') > -1:  # We are on this platform
+        if path == '':
+            path = ";C:\Program Files\Hewlett-Packard\Sanworks\Element Manager for StorageWorks HSV"
+            path = path + ";C:\Program Files (x86)\Compaq\Hpacucli\Bin"
+            path = path + ";C:\Program Files\Compaq\Hpacucli\Bin"
+        else:
+            path = ';' + path
+    else:  # Unix/Linux, etc
+        if path == '':
+            path = ":/usr/sbin"
+        else:
+            path = ':' + path
+    current_path = "%s%s" % (current_path, path)
+    environ['PATH'] = current_path
 
 
+def run_hpacucli(run_type='controllers', controller=None):
+    if run_type == 'controllers':
+        command = "hpacucli  controller all show detail"
+    elif run_type in ('logicaldisks', 'physicaldisks'):
+        if 'Slot' not in controller:
+            add_summary("Controller not found")
+            end()
+        identifier = 'slot=%s' % (controller['Slot'])
+        command = "hpacucli  controller %s %s all show detail"
+        if run_type == 'logicaldisks':
+            subcommand = 'ld'
+        elif run_type == 'physicaldisks':
+            subcommand = 'pd'
+        else:
+            end()
+            return
+        command = command % (identifier, subcommand)
+    debug(command)
+    if sudo:
+        command = "sudo " + command
+    output = runCommand(command)
+    # Some basic error checking
+    error_strings = ['Permission denied']
+    error_strings.append('Error: You need to have administrator rights to continue.')
+    for error in error_strings:
+        if output.find(error) > -1 and output.find("sudo") != 0:
+            command = "sudo " + command
+            print command
+            output = runCommand(command)
+    output = output.split('\n')
+    objects = []
+    my_object = None
+    for i in output:
+        if len(i) == 0:
+            continue
+        if i.strip() == '':
+            continue
+        if i.startswith('Note:'):
+            continue
+        if run_type == 'controllers' and i[0] != ' ':   # space on first line
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i
+        elif run_type == 'logicaldisks' and i.find('Logical Drive:') > 0:
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i.strip()
+        elif run_type == 'physicaldisks' and i.find('physicaldrive') > 0:
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i.strip()
+        else:
+            i = i.strip()
+            if i.find(':') < 1:
+                continue
+            i = i.split(':')
+            if i[0] == '':
+                continue  # skip empty lines
+            if len(i) == 1:
+                continue
+            key = i[0].strip()
+            value = ' '.join(i[1:]).strip()
+            my_object[key] = value
+    if my_object and not my_object in objects:
+        objects.append(my_object)
+    return objects
 
 
-def run_hpacucli(type='controllers', controller=None):
-	if type=='controllers':
-		command="hpacucli  controller all show detail"
-	elif type=='logicaldisks' or type=='physicaldisks':
-		if controller.has_key('Slot'):
-			identifier = 'slot=%s' % (controller['Slot'] )
-		else:
-			add_summary( "Controller not found" )
-			end()
-		if type=='logicaldisks':
-			command = "hpacucli  controller %s ld all show detail" % (identifier)
-		if type=='physicaldisks':
-			command = "hpacucli  controller %s pd all show detail" % (identifier)
-	
-	#command="hpacucli  controller slot=1 ld all show detail"
-	#command="hpacucli  controller slot=1 ld all show detail"
-	debug ( command ) 
-	if sudo: command = "sudo " + command
-	output = runCommand(command)
-	# Some basic error checking
-	error_strings = [ 'Permission denied' ]
-	error_strings.append('Error: You need to have administrator rights to continue.')
-	for error in error_strings:
-		if output.find( error ) > -1 and output.find("sudo") != 0:
-			command = "sudo " + command 
-			print command
-			output = runCommand(command)
-	output = output.split('\n')
-	objects = []
-	object = None
-	for i in output:
-		if len(i) == 0: continue
-		if i.strip() == '': continue
-		if type=='controllers' and i[0] != ' ': # No space on first line
-			if object and not object in objects: objects.append(object)
-			object = {}
-			object['name'] = i
-		elif type=='logicaldisks' and i.find('Logical Drive:') > 0:
-			if object and not object in objects: objects.append(object)
-			object = {}
-			object['name'] = i.strip() 
-		elif type=='physicaldisks' and i.find('physicaldrive') > 0:
-			if object and not object in objects: objects.append(object)
-			object = {}
-			object['name'] = i.strip() 
-		else:
-			i = i.strip()
-			if i.find(':') < 1: continue
-			i = i.split(':')
-			if i[0] == '': continue # skip empty lines
-			if len(i) == 1: continue
-			key = i[0].strip()
-			value = ' '.join( i[1:] ).strip()
-			object[key] = value
-	if object and not object in objects: objects.append(object)
-	return objects
-
 controllers = []
+
+
 def check_controllers():
-	global controllers
-	status = -1
-	controllers = run_hpacucli()
-	if len(controllers) == 0:
-		add_summary("No Disk Controllers Found. Exiting...")
-		global nagios_state
-		nagios_state = unknown
-		end()
-	add_summary( "Found %s controllers" % ( len(controllers) ) )
-	for i in controllers:
-		controller_status = check(i, 'Controller Status', 'OK' )
-		status = max(status, controller_status)
-		
-		cache_status = check(i, 'Cache Status' )
-		status = max(status, cache_status)
-		
-		controller_serial = 'n/a'
-		cache_serial = 'n/a'
-		if i.has_key('Serial Number'):
-			controller_serial = i['Serial Number']
-		if i.has_key('Cache Serial Number'):
-			cache_serial = i['Cache Serial Number']
-		add_long ( "%s" % (i['name']) )
-		add_long( "- Controller Status: %s (sn: %s)" % ( state[controller_status], controller_serial ) )
-		add_long( "- Cache Status: %s (sn: %s)" % ( state[cache_status], cache_serial ) )
+    global controllers
+    status = -1
+    controllers = run_hpacucli()
+    if len(controllers) == 0:
+        add_summary("No Disk Controllers Found. Exiting...")
+        global nagios_state
+        nagios_state = unknown
+        end()
+    add_summary("Found %s controllers" % (len(controllers)))
+    for i in controllers:
+        controller_status = check(i, 'Controller Status', 'OK')
+        status = max(status, controller_status)
 
-		if controller_status > ok or cache_status > ok:
-			add_summary( ";%s on %s;" % (state[controller_status], i['name']) )
+        cache_status = check(i, 'Cache Status')
+        status = max(status, cache_status)
 
-	add_summary(', ')	
-	return status
+        controller_serial = 'n/a'
+        cache_serial = 'n/a'
+        if 'Serial Number' in i:
+            controller_serial = i['Serial Number']
+        if 'Cache Serial Number' in i:
+            cache_serial = i['Cache Serial Number']
+        add_long("%s" % (i['name']))
+        add_long("- Controller Status: %s (sn: %s)"
+                 % (state[controller_status], controller_serial))
+        add_long("- Cache Status: %s (sn: %s)"
+                  % (state[cache_status], cache_serial))
+
+        if controller_status > ok or cache_status > ok:
+            add_summary(";%s on %s;" % (state[controller_status], i['name']))
+
+    add_summary(', ')
+    return status
 
 
 def check_logicaldisks():
-	global controllers
-	if len(controllers) < 1:
-		controllers = run_hpacucli()
-	logicaldisks = []
-	for controller in controllers:
-		for ld in  run_hpacucli(type='logicaldisks', controller=controller):
-			logicaldisks.append ( ld )
-        status = -1
-	add_long("\nChecking logical Disks:" )
-        add_summary( "%s logicaldisks" % ( len(logicaldisks) ) )
-	for i in logicaldisks:
-		ld_status =  check(i, 'Status' )
-		status = max(status, ld_status)
-		
-		mount_point = i['Mount Points']
-		add_long( "- %s (%s) = %s" % (i['name'], mount_point, state[ld_status]) )
-	add_summary(". ")
+    global controllers
+    if len(controllers) < 1:
+        controllers = run_hpacucli()
+    logicaldisks = []
+    for controller in controllers:
+        for ld in run_hpacucli(run_type='logicaldisks',
+                                controller=controller):
+            logicaldisks.append(ld)
+    status = -1
+    add_long("\nChecking logical Disks:")
+    add_summary("%s logicaldisks" % (len(logicaldisks)))
+    for i in logicaldisks:
+        ld_status = check(i, 'Status')
+        status = max(status, ld_status)
+
+        if i.get('Status') == 'Failed':
+            status = max(status, critical)
+
+        mount_point = i['Mount Points']
+        add_long("- %s (%s) = %s" % (i['name'], mount_point, state[ld_status]))
+    add_summary(". ")
+
 
 def check_physicaldisks():
-        global controllers
-	disktype='physicaldisks'
-        if len(controllers) < 1:
-                controllers = run_hpacucli()
-        disks = []
-        for controller in controllers:
-                for disk in  run_hpacucli(type=disktype, controller=controller):
-                        disks.append ( disk )
-        status = -1
-        add_long("\nChecking Physical Disks:" )
-        add_summary( "%s %s" % ( len(disks), disktype ) )
-        for i in disks:
-                disk_status =  check(i, 'Status' )
-                status = max(status, disk_status)
+    global controllers
+    disktype = 'physicaldisks'
+    if len(controllers) < 1:
+        controllers = run_hpacucli()
+    disks = []
+    for controller in controllers:
+        for disk in run_hpacucli(run_type=disktype, controller=controller):
+            disks.append(disk)
+    status = -1
+    add_long("\nChecking Physical Disks:")
+    add_summary("%s %s" % (len(disks), disktype))
+    for i in disks:
+        disk_status = check(i, 'Status')
+        status = max(status, disk_status)
 
-		size = i['Size']
-		firmware = i['Firmware Revision']
-		interface = i['Interface Type']
-		serial = i['Serial Number']
-		model = i['Model']
-                add_long( "- %s, %s, %s = %s" % (i['name'], interface, size, state[disk_status]) )
-		if disk_status > ok:
-			add_long( "-- Replace drive, firmware=%s, model=%s, serial=%s" % (firmware,model, serial))
-	if status > ok:
-		add_summary( "(errors)" )
+        size = i['Size']
+        firmware = i['Firmware Revision']
+        interface = i['Interface Type']
+        serial = i['Serial Number']
+        model = i['Model']
+        add_long("- %s, %s, %s = %s" %
+                 (i['name'], interface, size, state[disk_status])
+        )
+        if disk_status > ok:
+            error_str = "-- Replace drive, firmware=%s, model=%s, serial=%s"
+            add_long(error_str % (firmware, model, serial))
+    if status > ok:
+        add_summary("(errors)")
         add_summary(". ")
 
 
-def check(object, field, valid_states = ['OK']):
-	state = -1
-	global nagios_status
-	if object.has_key(field):
-		if object[field] in valid_states:
-			state = ok
-		else:
-			state = warning
-	nagios_status = max(nagios_status, state)
-	return state
-
+def check(my_object, field, valid_states=None):
+    if valid_states is None:
+        valid_states = ['OK']
+    state = -1
+    global nagios_status
+    if field in my_object:
+        if my_object[field] in valid_states:
+            state = ok
+        else:
+            state = warning
+    nagios_status = max(nagios_status, state)
+    return state
 
 
 def parse_arguments():
-	arguments = argv[1:]
-	while len(arguments) > 0:
-		arg = arguments.pop(0)
-		if arg == '--help':
-			print_help()
-			exit(ok)
-		elif arg == '--path':
-			path = arguments.pop(0)
-			set_path(path)
-		elif arg == '--debug':
-			global debugging
-			debugging = True
-		elif arg == '--sudo':
-			global sudo
-			sudo = True
-		else:
-			print_help()
-			exit(unknown)
-			
-
+    arguments = argv[1:]
+    while len(arguments) > 0:
+        arg = arguments.pop(0)
+        if arg == '--help':
+            print_help()
+            exit(ok)
+        elif arg == '--path':
+            path = arguments.pop(0)
+            set_path(path)
+        elif arg == '--debug':
+            global debugging
+            debugging = True
+        elif arg == '--sudo':
+            global sudo
+            sudo = True
+        else:
+            print_help()
+            exit(unknown)
 
 
 def main():
-	parse_arguments()
-	set_path('')
-	check_controllers()
-	check_logicaldisks()
-	check_physicaldisks()
-	end()	
+    parse_arguments()
+    set_path('')
+    check_controllers()
+    check_logicaldisks()
+    check_physicaldisks()
+    end()
 
 
 if __name__ == '__main__':
-	main()
+    main()

check_hpacucli/nagios-okplugin-check_hpacucli.spec

@@ -2,8 +2,8 @@
 
 Summary:	A Nagios plugin to check HP Array with hpacucli
 Name:		nagios-okplugin-check_hpacucli
-Version:	1.2
-Release:	2%{?dist}
+Version:	2
+Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.is/trac/wiki/check_hpacucli
@@ -19,6 +19,7 @@ Checks HP Array with hpacucli
 %prep
 %setup -q
 perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_hpacucli.cfg
+perl -pi -e "s|/usr/lib64|%{_libdir}|g" sudoers.d/*
 
 %build
 
@@ -27,6 +28,7 @@ perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_hpacucli.cfg
 rm -rf %{buildroot}
 install -D -p -m 0755 check_hpacucli.py %{buildroot}%{_libdir}/nagios/plugins/check_hpacucli.py
 install -D -p -m 0755 nrpe.d/check_hpacucli.cfg %{buildroot}/etc/nrpe.d/check_hpacucli.cfg
+install -D -p -m 0440 sudoers.d/check_hpacucli %{buildroot}/etc/sudoers.d/check_hpacucli
 
 %clean
 rm -rf %{buildroot}
@@ -36,8 +38,20 @@ rm -rf %{buildroot}
 %doc README LICENSE
 %{_libdir}/nagios/plugins/*
 /etc/nrpe.d/check_hpacucli.cfg
+/etc/sudoers.d/check_hpacucli
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- check_hpacucli.py - fix typo in hpacucli command (palli@opensource.is)
+- check_hpacucli.py: pep8 cleanup (palli@opensource.is)
+- check_hpacucli - fix tab indentation (palli@opensource.is)
+- check_hpacucli: ignore hpacucli output that starts with "Note:"
+  (palli@opensource.is)
+- sudoers.d added to install (you@example.com)
+- dummy commit (you@example.com)
+- dummy commit (you@example.com)
+- Add sudoers support to check_hpacucli (palli@opensource.is)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.2-2
 - version number of scripts bumped (palli@opensource.is)
 

check_hpacucli/sudoers.d/check_hpacucli

@@ -0,0 +1,2 @@
+Defaults:nrpe	!requiretty
+nrpe        ALL=(ALL)       NOPASSWD: /usr/lib64/nagios/plugins/check_hpacucli.py

check_hparray/check_hparray

@@ -81,7 +81,7 @@ check_raid()
 {
         raid_ok=`cat $TEMPFILE |grep -i ok|wc -l`
         raid_warning=`cat $TEMPFILE|grep -i -E  'rebuild|predictive' |wc -l`
-        raid_critical_1=`cat $TEMPFILE|grep -i 'failed|recovery' | wc -l`
+        raid_critical_1=`cat $TEMPFILE|grep -i -E 'failed|recovery' | wc -l`
 
         err_check=`expr $raid_ok + $raid_warning + $raid_critical_1 `
 
@@ -133,7 +133,7 @@ case "$1" in
                 exit 0
                 ;;
 	--all)
-		controllers=`sudo -u root hpacucli controller all show | sed 's/.*Slot \([0-9]*\).*/\1/'`
+		controllers=`sudo -u root $HPACUCLI controller all show | sed 's/.*Slot \([0-9]*\).*/\1/'`
 		for i in $controllers ; do sudo -u root $HPACUCLI controller slot=$i pd all show status;done > $TEMPFILE
 		check_raid
 		;;

check_hpasm/nagios-okplugin-check_hpasm.spec

@@ -0,0 +1,55 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check HP Hardware Status 
+Name:		nagios-okplugin-check_hpasm
+Version:	4.1.4
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		http://opensource.is/trac/wiki/check_hpasm
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_hpasm/releases/nagios-okplugin-check_hpasm-%{version}.tar.gz
+Requires:	nagios-okconfig-nrpe
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Pall Sigurdsson <palli@opensource.is>
+BuildArch:	noarch
+
+
+
+%description
+A Nagios plugin to check HP Hardware Status
+
+
+%prep
+%setup -q
+
+%build
+perl -pi -e "s|/usr/lib|%{_libdir}|g" sudoers.d/check_hpasm
+perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_hpasm.cfg
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_hpasm %{buildroot}%{_libdir}/nagios/plugins/check_hpasm
+install -D -p -m 0440 sudoers.d/check_hpasm %{buildroot}/etc/sudoers.d/check_hpasm
+install -D -p -m 0644 nrpe.d/check_hpasm.cfg %{buildroot}/etc/nrpe.d/check_hpasm.cfg
+
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+#%doc README LICENSE
+#%{_libdir}/nagios/plugins/*
+%{_libdir}/nagios/plugins/check_hpasm
+/etc/sudoers.d/check_hpasm
+/etc/nrpe.d/check_hpasm.cfg
+
+%changelog
+* Fri Oct 03 2014 Tomas Edwardsson <tommi@tommi.org> 4.1.4-1
+- hpasm invalid nrpe check command name (tommi@tommi.org)
+
+* Thu May 15 2014 Tomas Edwardsson <tommi@tommi.org> 4.1.3-1
+- new package built with tito
+
+* Tue Jun 4 2013 Pall Sigurdsson <palli@opensource.is> 4.1.2-1
+- Initial packaging

check_hpasm/nrpe.d/check_hpasm.cfg

@@ -0,0 +1,3 @@
+
+
+command[check_hpasm]=sudo /usr/lib/nagios/plugins/check_hpasm

check_hpasm/sudoers.d/check_hpasm

@@ -0,0 +1,2 @@
+Defaults:nrpe	!requiretty
+nrpe		ALL = (root) NOPASSWD: /usr/lib/nagios/plugins/check_hpasm

check_hpssacli/LICENSE

@@ -0,0 +1,341 @@
+		    GNU GENERAL PUBLIC LICENSE
+		       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.
+               51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+			    Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Library General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+		    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+			    NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+		     END OF TERMS AND CONDITIONS
+
+
+	    How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) 19yy  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) 19yy name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Library General
+Public License instead of this License.

check_hpssacli/README

@@ -0,0 +1,53 @@
+= check_hpssacli =
+Checks the raid status on a HP Array using hpssacli. to check the following:
+
+ * Controller Status
+ * Controller Cache Status
+ * Logical disk health (raid status)
+ * Physical disk health
+
+== Download ==
+check_hpssacli.py depends on the hpssacli binary which comes with the HP Proliant Support Pack (PSP). The PSP can be downloaded [http://downloads.linux.hp.com/SDR/downloads/ProLiantSupportPack here].
+
+You can get check_hpacucly.py directly from our subversion repo [http://opensource.is/trac/browser/nagios-plugins/check_hpssacli/trunk here]
+
+== help page ==
+{{{
+# python check_hpssacli.py  --help
+check_hpssacli version 1.0
+This plugin checks HP Array with the hpssacli command
+
+Usage: check_hpssacli.py 
+Usage: check_hpssacli.py [--help]
+Usage: check_hpssacli.py [--version]
+Usage: check_hpssacli.py [--path </path/to/hpssacli>]
+Usage: check_hpssacli.py [--no-perfdata]
+Usage: check_hpssacli.py [--no-longoutput]
+
+
+}}}
+
+== Example output ==
+{{{
+# ./check_hparray --all
+OK - Found 1 controllers, 2 logicaldisks. 8 physicaldisks.  | 
+
+Smart Array P400 in Slot 1
+- Controller Status: OK (sn: P61620F9VV6FX2)
+- Cache Status: OK (sn: PA82C0H9VV4695)
+
+Checking logical Disks:
+- Logical Drive: 1 (/boot 101 MB) = OK
+- Logical Drive: 2 (None) = OK
+
+Checking Physical Disks:
+- physicaldrive 2I:1:1, SAS, 146 GB = OK
+- physicaldrive 2I:1:2, SAS, 146 GB = OK
+- physicaldrive 1I:1:5, SAS, 146 GB = OK
+- physicaldrive 1I:1:6, SAS, 146 GB = OK
+- physicaldrive 1I:1:7, SAS, 146 GB = OK
+- physicaldrive 1I:1:8, SAS, 146 GB = OK
+- physicaldrive 2I:1:3, SAS, 146 GB = OK
+- physicaldrive 2I:1:4, SAS, 146 GB = OK
+}}}
+

check_hpssacli/check_hpssacli.py

@@ -0,0 +1,362 @@
+#!/usr/bin/python
+#
+# Copyright 2019, Gardar Thorsteinsson <gardar@ok.is>
+#
+# check_hpssacli.py is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# check_hpssacli.py is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# About this script
+#
+# This script will check the status of Smart Array Raid Controller
+# You need the hpssacli binary in path (/usr/sbin/hpssacli is a good place)
+# hpssacli comes with the Proliant Support Pack (PSP) from HP
+
+debugging = False
+
+# No real need to change anything below here
+version = "1.1"
+ok = 0
+warning = 1
+critical = 2
+unknown = 3
+not_present = -1
+nagios_status = -1
+
+state = {}
+state[not_present] = "Not Present"
+state[ok] = "OK"
+state[warning] = "Warning"
+state[critical] = "Critical"
+state[unknown] = "Unknown"
+
+
+longserviceoutput = "\n"
+perfdata = ""
+summary = ""
+sudo = False
+
+
+from sys import exit
+from sys import argv
+from os import getenv, putenv, environ
+import subprocess
+
+
+def print_help():
+    print "check_hpssacli version %s" % version
+    print "This plugin checks HP Array with the hpssacli command"
+    print ""
+    print "Usage: %s " % argv[0]
+    print "Usage: %s [--help]" % argv[0]
+    print "Usage: %s [--version]" % argv[0]
+    print "Usage: %s [--path </path/to/hpssacli>]" % argv[0]
+    print "Usage: %s [--no-perfdata]" % argv[0]
+    print "Usage: %s [--no-longoutput]" % argv[0]
+    print  ""
+
+
+def error(errortext):
+    print "* Error: %s" % errortext
+    print_help()
+    print "* Error: %s" % errortext
+    exit(unknown)
+
+
+def debug(debugtext):
+    global debugging
+    if debugging:
+        print  debugtext
+
+
+def runCommand(command):
+    """ Run command from the shell prompt. Exit Nagios style if unsuccessful"""
+    proc = subprocess.Popen(command,
+                            shell=True,
+                            stdout=subprocess.PIPE,
+                            stderr=subprocess.PIPE,
+                            )
+    stdout, stderr = proc.communicate('through stdin to stdout')
+    if proc.returncode > 0:
+        print "Error %s: %s\n command was: '%s'"\
+              % (proc.returncode, stderr.strip(), command)
+    debug("results: %s" % (stdout.strip()))
+    if proc.returncode == 127:  # File not found, lets print path
+        path = getenv("PATH")
+        print "Check if your path is correct %s" % (path)
+    if stderr.find('Password:') == 0 and command.find('sudo') == 0:
+        print "Check if user is in the sudoers file"
+    if stderr.find('sorry, you must have a tty to run sudo') == 0 and command.find('sudo') == 0:
+        print "Please remove 'requiretty' from /etc/sudoers"
+        exit(unknown)
+    else:
+        return stdout
+
+
+def end():
+    global summary
+    global longserviceoutput
+    global perfdata
+    global nagios_status
+    print "%s - %s | %s" % (state[nagios_status], summary, perfdata)
+    print longserviceoutput
+    if nagios_status < 0:
+        nagios_status = unknown
+    exit(nagios_status)
+
+
+def add_perfdata(text):
+    global perfdata
+    text = text.strip()
+    perfdata = perfdata + " %s " % (text)
+
+
+def add_long(text):
+    global longserviceoutput
+    longserviceoutput = longserviceoutput + text + '\n'
+
+
+def add_summary(text):
+    global summary
+    summary = summary + text
+
+
+def set_path(path):
+    current_path = getenv('PATH')
+    if current_path.find('C:\\') > -1:  # We are on this platform
+        if path == '':
+            path = ";C:\Program Files\hp\hpssacli\Bin"
+            path = path + ";C:\Program Files (x86)\hp\hpssacli\Bin"
+            path = path + ";C:\Program Files\Smart Storage Administrator\ssacli\bin"
+        else:
+            path = ';' + path
+    else:  # Unix/Linux, etc
+        if path == '':
+            path = ":/usr/sbin"
+        else:
+            path = ':' + path
+    current_path = "%s%s" % (current_path, path)
+    environ['PATH'] = current_path
+
+
+def run_hpssacli(run_type='controllers', controller=None):
+    if run_type == 'controllers':
+        command = "hpssacli  controller all show detail"
+    elif run_type in ('logicaldisks', 'physicaldisks'):
+        if 'Slot' not in controller:
+            add_summary("Controller not found")
+            end()
+        identifier = 'slot=%s' % (controller['Slot'])
+        command = "hpssacli  controller %s %s all show detail"
+        if run_type == 'logicaldisks':
+            subcommand = 'ld'
+        elif run_type == 'physicaldisks':
+            subcommand = 'pd'
+        else:
+            end()
+            return
+        command = command % (identifier, subcommand)
+    debug(command)
+    if sudo:
+        command = "sudo " + command
+    output = runCommand(command)
+    # Some basic error checking
+    error_strings = ['Permission denied']
+    error_strings.append('Error: You need to have administrator rights to continue.')
+    for error in error_strings:
+        if output.find(error) > -1 and output.find("sudo") != 0:
+            command = "sudo " + command
+            print command
+            output = runCommand(command)
+    output = output.split('\n')
+    objects = []
+    my_object = None
+    for i in output:
+        if len(i) == 0:
+            continue
+        if i.strip() == '':
+            continue
+        if i.startswith('Note:'):
+            continue
+        if run_type == 'controllers' and i[0] != ' ':   # space on first line
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i
+        elif run_type == 'logicaldisks' and i.find('Logical Drive:') > 0:
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i.strip()
+        elif run_type == 'physicaldisks' and i.find('physicaldrive') > 0:
+            if my_object and not my_object in objects:
+                objects.append(my_object)
+            my_object = {}
+            my_object['name'] = i.strip()
+        else:
+            i = i.strip()
+            if i.find(':') < 1:
+                continue
+            i = i.split(':')
+            if i[0] == '':
+                continue  # skip empty lines
+            if len(i) == 1:
+                continue
+            key = i[0].strip()
+            value = ' '.join(i[1:]).strip()
+            my_object[key] = value
+    if my_object and not my_object in objects:
+        objects.append(my_object)
+    return objects
+
+
+controllers = []
+
+
+def check_controllers():
+    global controllers
+    status = -1
+    controllers = run_hpssacli()
+    if len(controllers) == 0:
+        add_summary("No Disk Controllers Found. Exiting...")
+        global nagios_state
+        nagios_state = unknown
+        end()
+    add_summary("Found %s controllers" % (len(controllers)))
+    for i in controllers:
+        controller_status = check(i, 'Controller Status', 'OK')
+        status = max(status, controller_status)
+
+        cache_status = check(i, 'Cache Status')
+        status = max(status, cache_status)
+
+        controller_serial = 'n/a'
+        cache_serial = 'n/a'
+        if 'Serial Number' in i:
+            controller_serial = i['Serial Number']
+        if 'Cache Serial Number' in i:
+            cache_serial = i['Cache Serial Number']
+        add_long("%s" % (i['name']))
+        add_long("- Controller Status: %s (sn: %s)"
+                 % (state[controller_status], controller_serial))
+        add_long("- Cache Status: %s (sn: %s)"
+                  % (state[cache_status], cache_serial))
+
+        if controller_status > ok or cache_status > ok:
+            add_summary(";%s on %s;" % (state[controller_status], i['name']))
+
+    add_summary(', ')
+    return status
+
+
+def check_logicaldisks():
+    global controllers
+    if len(controllers) < 1:
+        controllers = run_hpssacli()
+    logicaldisks = []
+    for controller in controllers:
+        for ld in run_hpssacli(run_type='logicaldisks',
+                                controller=controller):
+            logicaldisks.append(ld)
+    status = -1
+    add_long("\nChecking logical Disks:")
+    add_summary("%s logicaldisks" % (len(logicaldisks)))
+    for i in logicaldisks:
+        ld_status = check(i, 'Status')
+        status = max(status, ld_status)
+
+        if i.get('Status') == 'Failed':
+            status = max(status, critical)
+
+        mount_point = i['Mount Points']
+        add_long("- %s (%s) = %s" % (i['name'], mount_point, state[ld_status]))
+    add_summary(". ")
+
+
+def check_physicaldisks():
+    global controllers
+    disktype = 'physicaldisks'
+    if len(controllers) < 1:
+        controllers = run_hpssacli()
+    disks = []
+    for controller in controllers:
+        for disk in run_hpssacli(run_type=disktype, controller=controller):
+            disks.append(disk)
+    status = -1
+    add_long("\nChecking Physical Disks:")
+    add_summary("%s %s" % (len(disks), disktype))
+    for i in disks:
+        disk_status = check(i, 'Status')
+        status = max(status, disk_status)
+
+        size = i['Size']
+        firmware = i['Firmware Revision']
+        interface = i['Interface Type']
+        serial = i['Serial Number']
+        model = i['Model']
+        add_long("- %s, %s, %s = %s" %
+                 (i['name'], interface, size, state[disk_status])
+        )
+        if disk_status > ok:
+            error_str = "-- Replace drive, firmware=%s, model=%s, serial=%s"
+            add_long(error_str % (firmware, model, serial))
+    if status > ok:
+        add_summary("(errors)")
+        add_summary(". ")
+
+
+def check(my_object, field, valid_states=None):
+    if valid_states is None:
+        valid_states = ['OK']
+    state = -1
+    global nagios_status
+    if field in my_object:
+        if my_object[field] in valid_states:
+            state = ok
+        else:
+            state = warning
+    nagios_status = max(nagios_status, state)
+    return state
+
+
+def parse_arguments():
+    arguments = argv[1:]
+    while len(arguments) > 0:
+        arg = arguments.pop(0)
+        if arg == '--help':
+            print_help()
+            exit(ok)
+        elif arg == '--path':
+            path = arguments.pop(0)
+            set_path(path)
+        elif arg == '--debug':
+            global debugging
+            debugging = True
+        elif arg == '--sudo':
+            global sudo
+            sudo = True
+        else:
+            print_help()
+            exit(unknown)
+
+
+def main():
+    parse_arguments()
+    set_path('')
+    check_controllers()
+    check_logicaldisks()
+    check_physicaldisks()
+    end()
+
+
+if __name__ == '__main__':
+    main()

check_hpssacli/nagios-okplugin-check_hpssacli.spec

@@ -0,0 +1,45 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check HP Array with hpssacli
+Name:		nagios-okplugin-check_hpssacli
+Version:	1.1
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		http://opensource.is/trac/wiki/check_hpssacli
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_hpssacli/releases/nagios-okplugin-check_hpssacli-%{version}.tar.gz
+Requires:	hpssacli
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
+
+
+%description
+Checks HP Array with hpssacli
+
+%prep
+%setup -q
+perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_hpssacli.cfg
+perl -pi -e "s|/usr/lib64|%{_libdir}|g" sudoers.d/*
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_hpssacli.py %{buildroot}%{_libdir}/nagios/plugins/check_hpssacli.py
+install -D -p -m 0755 nrpe.d/check_hpssacli.cfg %{buildroot}/etc/nrpe.d/check_hpssacli.cfg
+install -D -p -m 0440 sudoers.d/check_hpssacli %{buildroot}/etc/sudoers.d/check_hpssacli
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+%doc README LICENSE
+%{_libdir}/nagios/plugins/*
+/etc/nrpe.d/check_hpssacli.cfg
+/etc/sudoers.d/check_hpssacli
+
+%changelog
+* Fri Jun 14 2019 Gardar Thorsteinsson <gardar@ok.is> 1.1
+- Initial packaging

check_hpssacli/nrpe.d/check_hpssacli.cfg

@@ -0,0 +1,2 @@
+command[check_hpssacli]=sudo /usr/lib/nagios/plugins/check_hpssacli.py
+

check_hpssacli/sudoers.d/check_hpssacli

@@ -0,0 +1,2 @@
+Defaults:nrpe	!requiretty
+nrpe        ALL=(ALL)       NOPASSWD: /usr/lib64/nagios/plugins/check_hpssacli.py

check_http_multi/README.md

@@ -0,0 +1,40 @@
+Introduction
+============
+Check http multi was created to check multiple websites in one plugin. You can check the following:
+
+* Latency per website
+* Overall runtime of http requests (serial)
+* Number of failed websites
+* Percentage of failed websites
+
+
+How
+===
+
+Check Percentage Failed
+-----------------------
+Here we check http://www.google.com and http://adagios.org
+
+Failure rates of 
+* 0%-30% are ok
+* 30%-60% are warning
+* everything above is critical
+
+```
+$ check_http_multi -u http://www.google.com -u http://adagios.org/ \
+    --th metric=failed_percentage,warning=30..60,critical=60..inf 
+Checked 2 uris, 0 failed | 'http://www.google.com'=0.24s;;;; 'http://adagios.org/'=0.47s;;;; 'failed'=0;;;; 'failed_percentage'=0.0%;30..60;60..inf;; 'runtime'=0.711745977402s;;;;
+http://www.google.com fetched in 0.24 seconds
+http://adagios.org/ fetched in 0.47 seconds
+```
+
+
+
+Author
+======
+Tomas Edwardsson <tommi@tommi.org>
+
+
+License
+=======
+GPLv3 or later

check_http_multi/check_http_multi

@@ -0,0 +1,90 @@
+#!/usr/bin/python
+# Copyright 2013, Tomas Edwardsson
+#
+# This script is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This script is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+from pynag.Plugins import PluginHelper, critical, warning, ok
+import requests
+import time
+import signal
+
+
+class TimeoutException(Exception):
+    pass
+
+
+def signal_alarm(signo, frame):
+    raise TimeoutException()
+
+
+def main():
+    plugin = PluginHelper()
+
+    plugin.parser.add_option('-u', help="http uris", dest="uri", action="append")
+    plugin.parse_arguments()
+
+    if not plugin.options.uri:
+        plugin.parser.error("-u (uri) argument is required")
+
+    start_time = time.time()
+    # Assign timeout handler
+    signal.signal(signal.SIGALRM, signal_alarm)
+
+    success = 0
+    failed = 0
+    for uri in plugin.options.uri:
+	if not uri: continue
+        webstate, status = check_website(uri)
+        if webstate:
+            success += 1
+            plugin.add_long_output("%s fetched in %s seconds" % (uri, status))
+            plugin.add_metric(uri, status, uom="s")
+
+        else:
+            failed += 1
+            plugin.add_long_output("%s failed, %s" % (uri, status))
+
+    plugin.add_summary("Checked %i uris, %i failed" % ((failed + success), failed))
+    plugin.status(ok)
+    plugin.add_metric("failed", failed)
+    plugin.add_metric("failed_percentage", (100 * failed / float(failed + success)), uom="%")
+    plugin.add_metric("runtime", time.time() - start_time, uom="s")
+    plugin.check_all_metrics()
+
+    plugin.exit()
+
+
+
+def check_website(uri, timeout=10):
+    """Tries fetching the uri specified
+    returns (False, "Invalid status code <status_code>") on any failure and status code other than 2XX
+    returns (None, "Timeout in %f seconds") on timeout
+    returns (True, time (float)) it took to fetch the website on success"""
+
+    start_time = time.time()
+    signal.alarm(timeout)
+    try:
+        req = requests.get(uri)
+        if str(req.status_code)[0] != "2":
+            return False, "Invalid HTTP status: " + str(req.status_code)
+    except TimeoutException:
+        return None, "Timeout in %.2f seconds" % (time.time() - start_time)
+    except Exception, e:
+        return False, "Error encountered: " + e.message
+    signal.alarm(0)
+    return True, "%.2f" % (time.time() - start_time)
+
+
+if __name__ == "__main__":
+    main()

check_http_multi/nagios-okplugin-check_http_multi.spec

@@ -0,0 +1,43 @@
+%define debug_package %{nil}
+%define plugin check_http_multi
+
+Summary:	A Nagios plugin to check multiple websites
+Name:		nagios-okplugin-%{plugin}
+Version:	0.1.1
+Release:	1%{?dist}
+License:	GPLv3+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/misc/tree/master/nagios-plugins/check_%{plugin}
+Source0:	https://github.com/opinkerfi/misc/tree/master/nagios-plugins/check_%{plugin}/releases/%{name}-%{version}.tar.gz
+Requires:	nagios-okconfig-nrpe >= 0.0.4
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@tommi.org>
+BuildArch:	noarch
+
+
+%description
+Checks multiple websites for latency and failures. You can specify how many
+of them will fail to return warning or critical state.
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+%doc README.md
+%{_libdir}/nagios/plugins/*
+
+%changelog
+* Thu Jun 06 2013 Tomas Edwardsson <tommi@tommi.org> 0.1.1-1
+- new package built with tito
+

check_ibm_bladecenter/nagios-okplugin-check_ibm_bladecenter.spec

@@ -2,8 +2,8 @@
 
 Summary:	A Nagios plugin to check IBM Bladecenters 
 Name:		nagios-okplugin-check_ibm_bladecenter
-Version:	1.1.2
-Release:	3%{?dist}
+Version:	4
+Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.ok.is/trac/wiki/Nagios-OKPlugin-check_ibm_bladecenter
@@ -40,6 +40,21 @@ rm -rf %{buildroot}
 #%config(noreplace) %{_sysconfdir}/nrpe.d/check_bond.cfg
 
 %changelog
+* Fri Feb 21 2014 Pall Sigurdsson <palli@opensource.is> 4-1
+- 
+
+* Fri Feb 21 2014 Unknown name 3-1
+- Merge branch 'master' of github.com:opinkerfi/nagios-plugins
+  (palli@opensource.is)
+- ibm_bladecenter - another firmware bug workaround (palli@opensource.is)
+- pep8 fixes (palli@opensource.is)
+- Fix workaround for firmware bug (palli@opensource.is)
+
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- Merge branch 'master' of github.com:opinkerfi/misc (palli@opensource.is)
+- --exclude option added. Added workaround around false positives
+  (palli@opensource.is)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.1.2-3
 - version number of scripts bumped (palli@opensource.is)
 

check_ifoperstate/README.md

@@ -0,0 +1,5 @@
+Checks the operator status of network interfaces
+
+Requires:
+
+	The get_ifoperstate.sh script

check_ifoperstate/check_ifoperstate

@@ -0,0 +1,84 @@
+#!/usr/bin/python
+#
+# Copyright 2013, Tomas Edwardsson
+#
+# This script is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This script is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+# Enumerates interfaces and their operstate (up/down/unknown).
+
+__author__ = 'Tomas Edwardsson <tommi@tommi.org>'
+
+from subprocess import PIPE, Popen
+import os
+import sys
+from pynag.Plugins import PluginHelper, ok, critical, unknown
+
+helper = PluginHelper()
+
+helper.parser.add_option('-I', "--interface", help="Interface (eth0/bond/em/..) multiple supported with -I ... -I ...",
+                         dest="interfaces", action="append")
+helper.parser.add_option('-H', "--hostname", help="Check interface on remote host", dest="host_name")
+helper.parser.add_option('-l', "--list-interfaces", help="List interfaces", dest="list_interfaces", action="store_true")
+
+helper.parse_arguments()
+
+local_env = os.environ
+local_env["PATH"] += ":%s" % (":".join([
+    "/usr/lib/nagios/plugins",
+    "/usr/lib64/nagios/plugins",
+    "/usr/local/libexec",
+    "/usr/libexec",
+    "/usr/local/nagios/libexec"]))
+
+if helper.options.host_name:
+    command = ("check_nrpe -H %s -c get_ifoperstate" % helper.options.host_name).split()
+else:
+    command = ["get_ifoperstate.sh"]
+
+
+# List the interfaces and exit
+def get_interfaces():
+    interfaces = []
+    try:
+        cmd = Popen(command, stdout=PIPE, shell=False)
+        for line in cmd.stdout.readlines():
+            interface, status = line.strip().split(":")
+            interfaces.append((interface, status))
+
+    except Exception, e:
+        helper.add_summary("Unable to get interfaces \"%s\": %s" % (" ".join(command), e))
+        helper.status(unknown)
+        helper.exit()
+    return interfaces
+
+interface_state = get_interfaces()
+
+if helper.options.list_interfaces:
+    for interface in interface_state:
+        print "%-20s %s" % (interface[0], interface[1])
+    sys.exit(0)
+
+
+for interface in interface_state:
+    if not helper.options.interfaces or interface[0] in helper.options.interfaces:
+        if interface[1] == "unknown":
+            helper.add_status(unknown)
+        elif interface[1] == "up":
+            helper.add_status(ok)
+        else:
+            helper.add_status(critical)
+        helper.add_long_output("%s operstate is %s" % (interface[0], interface[1]))
+
+helper.check_all_metrics()
+helper.exit()

check_ifoperstate/nagios-okplugin-check_ifoperstate.spec

@@ -0,0 +1,45 @@
+%define debug_package %{nil}
+%define plugin check_ifoperstate
+
+Summary:	A Nagios plugin to check interface operator status
+Name:		nagios-okplugin-%{plugin}
+Version:	0.0.3
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/misc/tree/master/nagios-plugins/check_%{plugin}
+Source0:	https://github.com/opinkerfi/misc/tree/master/nagios-plugins/check_%{plugin}/releases/%{name}-%{version}.tar.gz
+Requires:	nagios-okconfig-nrpe >= 0.0.4
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@tommi.org>
+BuildArch:	noarch
+
+
+%description
+Checks the operator status of network interfaces
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+%doc README.md
+%{_libdir}/nagios/plugins/*
+
+%changelog
+* Wed Jun 05 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.3-1
+- Rename ifoperstate (tommi@tommi.org)
+
+* Wed Jun 05 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.2-1
+- new package built with tito
+

check_ipa/README

@@ -1,3 +0,0 @@
-check_ipa
-
-Various checks for IPA http://freeipa.org/ server

check_ipa/README.md

@@ -0,0 +1,19 @@
+check_ipa_replication
+=====================
+You need some configuration for this plugin to have access to replication
+information.
+
+Allow anonymous read to replication information
+-----------------------------------------------
+You will need to do this for every IPA server, masters and replicas
+
+```
+ldapmodify -x -D "cn=directory manager" -W -f grant_anonymous_replication_view.ldif -h ipa-host.example.com
+```
+
+Configure the directory manager credentials
+-------------------------------------------
+NOT RECOMENDED, you can use -D and -w with the directory manager credentials
+and the plugin will work as expected.
+
+

check_ipa/check_ipa_replication

@@ -15,7 +15,7 @@
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 import ldap
-from pynag.Plugins import PluginHelper,critical, warning
+from pynag.Plugins import PluginHelper, critical, warning, ok
 
 plugin = PluginHelper()
 
@@ -46,7 +46,12 @@ except Exception, e:
 # Loop through replication agreements
 for rhost in replication:
     plugin.add_summary("Replica %s Status: %s" % (rhost[1]['nsDS5ReplicaHost'][0], rhost[1]['nsds5replicaLastUpdateStatus'][0]))
-    if rhost[1]['nsds5replicaLastUpdateStatus'][0][:2] != "0 ":
+    if rhost[1]['nsds5replicaLastUpdateStatus'][0][7:8] == "0":
+        plugin.status(ok)
+    elif rhost[1]['nsds5replicaLastUpdateStatus'][0][7:8] == "1":
+        # Busy Replica is not an error, its "unknown" (but its "ok" for now)
+        plugin.status(ok)
+    else:
         plugin.status(critical)
 
 if not len(replication):

check_ipa/grant_anonymous_replication_view.ldif

@@ -0,0 +1,4 @@
+dn: cn="dc=mr,dc=lan",cn=mapping tree,cn=config
+changetype: modify
+add: aci
+aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0; aci "permission:Read Replication Agreements"; allow (read, search, compare) groupdn = "ldap:///anyone";)

check_ipa/nagios-okplugin-ipa.spec

@@ -3,7 +3,7 @@
 
 Summary:	A Nagios plugin to check IPA server status
 Name:		nagios-okplugin-%{plugin}
-Version:	0.0.3
+Version:	0.0.4
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -37,10 +37,17 @@ rm -rf %{buildroot}
 %files
 %defattr(-,root,root,-)
 %doc README
+%doc grant_anonymous_replication_view.ldif
 %{_libdir}/nagios/plugins/*
 %config(noreplace) %{_sysconfdir}/nrpe.d/check_ipa.cfg
 
 %changelog
+* Fri Apr 04 2014 Tomas Edwardsson <tommi@tommi.org> 0.0.4-1
+- Renamed to markdown (tommi@tommi.org)
+- Added examples and documentation (tommi@tommi.org)
+- Missing colon (tommi@tommi.org)
+- Added missing OK when things worked out (tommi@tommi.org)
+
 * Thu Apr 25 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.3-1
 - Preliminary testing done, released
 - Various errors in syntax fixed (tommi@tommi.org)

check_ironport/nagios-okplugin-check_ironport.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check Cisco Ironport 
 Name:		nagios-okplugin-check_ironport
-Version:	1.1.4
+Version:	2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -37,6 +37,10 @@ rm -rf %{buildroot}
 #%config(noreplace) %{_sysconfdir}/nrpe.d/check_bond.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- Merge branch 'master' of https://opensource.ok.is/git/misc
+  (palli@opensource.is)
+
 * Tue Jul 31 2012 Pall Sigurdsson <palli@opensource.is> 1.1.4-1
 - initial packaging for nagios-okplugin-check_ironport (palli@opensource.is)
 

check_lvm_mirror/check_lvm_mirror.py

@@ -0,0 +1,117 @@
+#!/usr/bin/python
+
+from pynag.Plugins import simple as Plugin, WARNING, CRITICAL, UNKNOWN, OK
+from subprocess import Popen, PIPE
+import os
+
+
+def main():
+    global plugin
+
+    plugin = Plugin(must_threshold=False)
+    plugin.add_arg("l", "logical-volume",
+                   "Comma seperated list of VG/LV, eg vg00/data,vg00/snap",
+                   required=False)
+    plugin.add_arg("V", "volume-group",
+                   "Comma seperated list of VG, eg vg00,vg01",
+                   required=False)
+    plugin.add_arg("a", "check-all", "Check all LVs", required=False,
+                   action="store_true")
+    plugin.activate()
+
+    lvs = plugin["logical-volume"] and plugin["logical-volume"].split(
+        ",") or []
+    vgs = plugin["volume-group"] and plugin["volume-group"].split(",") or []
+
+    if not lvs and not vgs and not plugin['check-all']:
+        plugin.parser.error(
+            "Either logical-volume or volume-group must be specified")
+    elif plugin['check-all'] and ( lvs or vgs ):
+        plugin.parser.error(
+            "Mixing check-all and logical-volume or volume-group does not make sense")
+
+    check_mirror(lvs, vgs, plugin['check-all'], plugin['host'])
+
+    (code, message) = (plugin.check_messages(joinallstr="\n"))
+    plugin.nagios_exit(code, message)
+
+
+def check_mirror(lv_list, vg_list, check_all, hostname):
+    # Ensure the right locale for text parsing
+    """
+
+        :rtype : None
+        """
+    # Change lang setting for string consitency
+    env = os.environ.copy()
+    env['LC_ALL'] = 'C'
+
+    # Remote execution
+    if hostname:
+        cmd = ['check_nrpe', '-H', hostname, '-c', 'get_lvm_mirrors']
+        # Local
+    else:
+        cmd = ["lvs", "--separator", ";", "-o",
+               "vg_name,lv_name,lv_attr,copy_percent"]
+    # Execute lvs
+    ret = None
+    lvs_output = None
+    try:
+        lvs = Popen(cmd, stdout=PIPE, shell=False, env=env)
+        ret = lvs.wait()
+        lvs_output = lvs.stdout.readlines()
+    except Exception, e:
+        plugin.nagios_exit(UNKNOWN, "Unable to execute lvs: %s" % (e))
+
+    if ret != 0:
+        plugin.nagios_exit(CRITICAL,
+                       "lvs execution failed, return code %i" % (ret))
+    all_lvs = []
+    all_vgs = []
+
+    # Loop through lvs output
+    linenumber = 0
+    for l in lvs_output:
+        linenumber += 1
+        try:
+            vg_name, lv_name, lv_attr, copy_percent = l.strip().split(";")
+        except ValueError as error:
+            plugin.add_message(UNKNOWN,
+                               "Unable to parse lvs line %i: %s\n%s" % (
+                                   linenumber, error, l))
+            continue
+        all_lvs.append("%s/%s" % (vg_name, lv_name))
+        if vg_name not in all_vgs:
+            all_vgs.append(vg_name)
+
+        if check_all or "%s/%s" % (
+                vg_name, lv_name) in lv_list or vg_name in vg_list:
+            if lv_attr[0] != "m" and lv_attr[0] != "M":
+                plugin.add_message(CRITICAL,
+                                   "LV %s/%s not mirrored" % (vg_name, lv_name))
+            elif lv_attr[2] != "a":
+                plugin.add_message(CRITICAL,
+                                   "LV %s/%s not active" % (vg_name, lv_name))
+            elif lv_attr[5] != "o":
+                plugin.add_message(CRITICAL,
+                                   "LV %s/%s not open" % (vg_name, lv_name))
+            elif float(copy_percent or 0) < 100:
+                plugin.add_message(WARNING, "LV %s/%s Copy Percent %s" % (
+                    vg_name, lv_name, copy_percent))
+            else:
+                plugin.add_message(OK, "LV %s/%s functioning" % (vg_name, lv_name))
+
+    # Find lvs that were specified in cmd line but were not found via lvs
+    for v in vg_list:
+        if v not in all_vgs:
+            plugin.add_message(CRITICAL, "VG %s not found" % (v))
+
+    # Find lvs that were specified in cmd line but were not found via lvs
+    for l in lv_list:
+        if l not in all_lvs:
+            plugin.add_message(CRITICAL, "LV %s not found" % (l))
+
+if __name__ == "__main__":
+    main()
+
+

check_msa_hardware-pl/README.md

@@ -0,0 +1 @@
+Checks hardware status of MSA disk arrays also known as HP P2000

check_msa_hardware-pl/nagios-okplugin-check_msa.spec

@@ -0,0 +1,72 @@
+%define debug_package %{nil}
+%define plugin check_msa_hardware
+%define packager Gardar Thorsteinsson <gardar@ok.is>
+
+Summary:	A Nagios plugin to check status of an MSA (HP P2000) disk array
+Name:		nagios-okplugin-%{plugin}
+Version:	1.0.5
+Release:	2%{?dist}
+License:	GPLv3+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}
+Source0:	https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}/releases/%{name}-%{version}.tar.gz
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	%{packager}
+BuildArch:	noarch
+Requires:	pynag
+
+
+%description
+Checks status of a remote MSA disk array, also known as HP P2000 
+%prep
+%setup -q
+
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude}|}^perl\\(utils\\)
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+mkdir -p %{buildroot}%{_sysconfdir}/nrpe.d
+sed "s^/usr/lib64^%{_libdir}^g" nrpe.d/%{plugin}.cfg >  %{buildroot}%{_sysconfdir}/nrpe.d/%{plugin}.cfg
+
+# Temporary fix for selinux
+chcon system_u:object_r:nagios_unconfined_plugin_exec_t:s0 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+
+%clean
+rm -rf %{buildroot}
+
+%post
+/sbin/service nrpe status &> /dev/null && /sbin/service nrpe reload || :
+
+%files
+%defattr(-,root,root,-)
+%doc README.md
+%{_libdir}/nagios/plugins/*
+%config(noreplace) %{_sysconfdir}/nrpe.d/%{plugin}.cfg
+
+%changelog
+* Fri May 09 2018 Gardar Thorsteinsson <gardar@ok.is> 1.0.5-2
+- Filter out perl-utils dep
+
+* Thu Jan 30 2014 Pall Sigurdsson <palli@opensource.is> 1.0.5-1
+- 
+
+* Thu Jan 30 2014 Pall Sigurdsson <palli@opensource.is> 1.0.4-1
+- README.md added (you@example.com)
+- nrpe.d added to check_msa (you@example.com)
+- rename check_msa_hardware-pl (you@example.com)
+
+* Thu Jan 30 2014 Pall Sigurdsson <palli@opensource.is> 1.0.3-1
+- new package built with tito
+
+* Thu Jan 30 2014 Pall Sigurdsson <palli@opensource.is> 1.0.2-1
+- new package built with tito
+
+* Thu Jan 30 2014 Unknown name 1.0.1-1
+- new package built with tito
+
+* Fri Jan 27 2014 Pall Sigurdsson 1.0.0-1
+- Initial Packaging

check_msa_hardware-pl/nrpe.d/check_msa_hardware.cfg

@@ -0,0 +1 @@
+command[check_msa_hardware]=/usr/lib64/nagios/plugins/check_msa_hardware

check_multipath/check_multipath

@@ -48,9 +48,9 @@ print_help() {
 
 	echo "Add this to your sudoers file by running visudo to add access:"
 	if [ -r /proc/modules ]; then
-		echo "Cmnd_Alias MULTIPATH=$MULTIPATH -l"
+		echo "Cmnd_Alias MULTIPATH=$MULTIPATH -ll"
 	else
-		echo "Cmnd_Alias MULTIPATH=$MULTIPATH -l, $SUDO"
+		echo "Cmnd_Alias MULTIPATH=$MULTIPATH -ll, $SUDO"
 	fi
 	echo "nagios  ALL= NOPASSWD: MULTIPATH"
 	echo "The user nagios may very well be nobody or someone else depending on your configuration"
@@ -98,7 +98,7 @@ if [ $(id -un) != "root" ]; then
 	fi
 fi
 
-OUTPUT=$($MULTIPATH -l 2>/dev/null)
+OUTPUT=$($MULTIPATH -ll 2>/dev/null)
 if [ $? != 0 ]; then
 	# Failed. grab more info why
 	if [ $(id -un) != "root" ] && [ `$SUDO -l | grep -c multipath` -eq 0 ]; then
@@ -112,7 +112,7 @@ if [ $? != 0 ]; then
 		exit $STATE_UNKNOWN
 	fi
 
-	echo "MULTIPATH: $(MULTIPATH -l 2>&1)"
+	echo "MULTIPATH: $($MULTIPATH -ll 2>&1)"
 	exit $STATE_UNKNOWN
 fi
 
@@ -137,6 +137,7 @@ if [ "$NUMPATHS" ]; then
    	/^ \\/ {targets++; next} # count targets (lenny)
    	/[0-9]+:[0-9]+:[0-9]+:[0-9]+/ { 
    		if (/active undef running/) { targets++ }	# count targets (squeeze)
+   		if (/active ready running/) { targets++ }	# count targets (RHEL6)
    		next
    	} 
 	{

check_nagios/check_nagios_ghostservices

@@ -1,10 +1,32 @@
 #!/bin/sh
 TMP=`mktemp`
-LAST_HOUR=`date "+%b %e %H:" -d "1 hour ago"`
-CURRENT_HOUR=`date "+%b %e %H:"`
+EPOCH_HOUR_AGO=$(( $(date +%s) - 3600 ))
 
-tail -n 2000 /var/log/messages | \
-grep -E "$CURRENT_HOUR|$LAST_HOUR" | \
+exit_unknown() {
+	msg="$1"
+
+	echo "${msg}"
+	exit 3
+}
+
+find_nagios_log() {
+	# Try to locate the nagios log, fallback to messages log
+	for log in /var/log/nagios/nagios.log /var/log/nagios3/nagios.log /var/spool/nagios/nagios.log \
+		/usr/local/nagios/var/nagios.log
+	do
+		if [ -e "${log}" ]; then
+			echo ${log}
+			return 0
+		fi
+	done
+	return 3
+}
+
+LOG=$(find_nagios_log) || exit_unknown "Unable to locate logfile for parsing"
+
+tail -n 1 ${LOG} &> ${TMP} || exit_unknown "Unable to parse logfile: $(cat ${TMP})"
+tail -n 2000 ${LOG} | \
+awk "BEGIN { FS=\"[\\\\[\\\\]]\" } \$2 > ${EPOCH_HOUR_AGO} {print \$0}" | \
 grep "Passive check result was received" | \
 grep -i "could not be found"  | \
 sed 's/.*Passive check result was received for service //' | \

check_nagios/nagios-okplugin-check_nagios.spec

@@ -2,7 +2,7 @@
 
 Summary:	A set of Nagios plugins to check the health of a nagios host
 Name:		nagios-okplugin-check_nagios
-Version:	1.1
+Version:	1.2
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -40,6 +40,12 @@ rm -rf %{buildroot}
 /etc/nrpe.d/check_nagios.cfg
 
 %changelog
+* Wed May 22 2013 Tomas Edwardsson <tommi@tommi.org> 1.2-1
+- Modified to parse on epoch rather that syslog date (tommi@tommi.org)
+- Emit unknown if unable to open the logfile and detect location
+  (tommi@tommi.org)
+- Fix tmp file cleanup (palli@opensource.is)
+
 * Thu Aug 23 2012 Pall Sigurdsson <palli@opensource.is> 1.1-1
 - Version number bumped
 - bugfix, check_nagios_needs_reload check for reload instead of reparse

check_other/README

@@ -0,0 +1,14 @@
+check_other
+===========
+
+This plugin is designed to execute another plugin that is given as an argument.
+
+Usually you want this to use the perfdata parsing of pynag and you want to alert on specific thresholds in the other plugin.
+
+Usage:
+```
+check_other -- check_nrpe -H localhost -c check_load
+
+# Same as above, but alert on performance metric load1
+check_other --threshold metric=load1,warn=2..inf -- check_nrpe -H localhost -c check_load
+```

check_other/check_other

@@ -0,0 +1,50 @@
+#!/usr/bin/env python
+# This script runs whatever command is printed on the command line
+# Usage:
+#   ./check_other -- someotherplugin --arguments-for-the-other-plugin
+#
+# Example:
+#   ./check_other -- check_nrpe -H localhost
+#
+# If you want to provide options to check_other (for example to enforce a threshold:
+# ./check_other --threshold=load1,warn=5..inf -- check_nrpe -H localhost check_load
+
+
+import subprocess
+import sys
+
+from pynag.Plugins import PluginHelper
+from pynag.Utils import runCommand, PluginOutput, PerfData
+
+p = PluginHelper()
+
+p.parser.add_option('--string', dest='string', help='run this command (will be shell expanded, use quotes)')
+p.parse_arguments()
+
+
+# --string was provided
+if p.options.string:
+    return_code, stdout, stderr = runCommand(p.options.string)
+# No --string, and no arguments on the command line
+elif not p.arguments:
+    p.parser.error("You need to provide an external command as an argument. Try:  %s ls" % sys.argv[0])
+# some arguments were provided
+else:
+    try:
+        proc = subprocess.Popen(p.arguments, shell=False, stdout=subprocess.PIPE, stderr=subprocess.PIPE,)
+        stdout, stderr = proc.communicate('through stdin to stdout')
+        return_code = proc.returncode
+    except Exception, e:
+        p.set_summary("Failed to execute '%s': %s " % (p.arguments[0], e))
+        p.status(3)
+        p.exit()
+
+p.status(return_code)
+other = PluginOutput(stdout)
+
+p.set_summary(other.summary)
+p.set_long_output(other.long_output)
+p._perfdata = PerfData(other.perfdata)
+
+p.check_all_metrics()
+p.exit()

check_package_updates/LICENSE-GPL3

@@ -0,0 +1,678 @@
+-------------------------------------------------------------------------
+
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+the GNU General Public License is intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.  We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors.  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights.  Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received.  You must make sure that they, too, receive
+or can get the source code.  And you must show them these terms so they
+know their rights.
+
+  Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+  For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software.  For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+  Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so.  This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software.  The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable.  Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products.  If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+  Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary.  To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Use with the GNU Affero General Public License.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU Affero General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+    <program>  Copyright (C) <year>  <name of author>
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU GPL, see
+<http://www.gnu.org/licenses/>.
+
+  The GNU General Public License does not permit incorporating your program
+into proprietary programs.  If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.  But first, please read
+<http://www.gnu.org/philosophy/why-not-lgpl.html>.
+
+-------------------------------------------------------------------------

check_package_updates/README.md

@@ -0,0 +1,113 @@
+About
+=====
+
+This Nagios plugin checks for available updates using PackageKit
+http://packagekit.org/ on Linux systems
+
+Why a new plugin?
+=================
+
+There are already plugins out there like check_yum and check_apt which do
+check for updates but they are distribution specific. The main drivers are:
+
+* Can run unprivileged, for instance the nrpe user
+* No sudo/selinux problems
+* Non distribution specific, works on debian, ubuntu, fedora, centos, rhel...
+
+Usage
+=====
+
+Critical Security
+-----------------
+
+Critical on all security type updates
+```
+$ check_package_updates --no-longoutput --th "metric=security,critical=1..inf"
+Critical - Total: 67, Security: 15, Bug fix: 48, Enhancement: 0, Normal: 4. Critical on security | 'total'=67;;;; 'security'=15;;1..inf;; 'bug fix'=48;;;; 'normal'=4;;;;
+```
+
+Total Updates
+-------------
+
+Critical on all security type updates and warning on many total updates
+```
+$ python check_package_updates --no-longoutput --th "metric=security,critical=1..inf" --th "metric=total,warning=40..inf"
+Critical - Total: 67, Security: 15, Bug fix: 48, Enhancement: 0, Normal: 4. Critical on security. Warning on total | 'total'=67;40..inf;;; 'security'=15;;1..inf;; 'bug fix'=48;;;; 'normal'=4;;;;
+```
+
+Long Output
+-----------
+With long output (default) you also get the list of packages
+
+```
+$ python check_package_updates --th "metric=security,critical=1..inf" --th "metric=total,warning=40..inf"
+Critical - Total: 32, Security: 1, Bug fix: 31, Enhancement: 0, Normal: 0. Critical on security | 'total'=32;40..inf;;; 'security'=1;;1..inf;; 'bug fix'=31;;;;
+Security
+  python-bugzilla-0.9.0-1.fc18.noarch
+Bug fix
+  ibus-typing-booster-1.2.1-1.fc18.noarch
+  nodejs-abbrev-1.0.4-6.fc18.noarch
+  nodejs-archy-0.0.2-8.fc18.noarch
+  nodejs-async-0.2.9-2.fc18.noarch
+  nodejs-block-stream-0.0.6-7.fc18.noarch
+  nodejs-chmodr-0.1.0-4.fc18.noarch
+  nodejs-chownr-0.0.1-9.fc18.noarch
+  nodejs-combined-stream-0.0.4-3.fc18.noarch
+  nodejs-delayed-stream-0.0.5-5.fc18.noarch
+  nodejs-fstream-0.1.22-3.fc18.noarch
+  nodejs-ini-1.1.0-3.fc18.noarch
+  nodejs-lru-cache-2.3.0-3.fc18.noarch
+  nodejs-mime-1.2.9-3.fc18.noarch
+  nodejs-minimatch-0.2.12-2.fc18.noarch
+  nodejs-mkdirp-0.3.5-3.fc18.noarch
+  nodejs-mute-stream-0.0.3-6.fc18.noarch
+  nodejs-node-uuid-1.4.0-4.fc18.noarch
+  nodejs-nopt-2.1.1-3.fc18.noarch
+  nodejs-once-1.1.1-5.fc18.noarch
+  nodejs-opener-1.3.0-7.fc18.noarch
+  nodejs-osenv-0.0.3-5.fc18.noarch
+  nodejs-promzard-0.2.0-6.fc18.noarch
+  nodejs-proto-list-1.2.2-5.fc18.noarch
+  nodejs-read-1.0.4-8.fc18.noarch
+  nodejs-retry-0.6.0-5.fc18.noarch
+  nodejs-sigmund-1.0.0-5.fc18.noarch
+  nodejs-tar-0.1.17-3.fc18.noarch
+  nodejs-uid-number-0.0.3-7.fc18.noarch
+  nodejs-which-1.0.5-8.fc18.noarch
+  python-virtinst-0.600.4-2.fc18.noarch
+  vgabios-0.6c-9.fc18.noarch
+```
+
+
+
+Caveats
+=======
+* PackageKit does draw in quite a few packages with it.
+* Does not work on older distros, like centos/rhel 5.
+
+Dependencies
+============
+
+* pynag-0.4.7+
+* Known to work with PackageKit 0.7.6 or later
+
+Install
+=======
+
+* Install pynag (available through your favorite package manager)
+* Install PackageKit (packagekit in Debian)
+
+```
+wget https://raw.github.com/opinkerfi/nagios-plugins/master/check_package_updates/check_package_updates
+```
+
+Room for improvement
+====================
+
+The plugin executes pkcon instead of using the API directly. I actually gave
+the API a whirl via "from gi.repository import PackageKitGlib as packagekit"
+but the documentation was very lacking so I ended up with pkcon.
+
+License
+=======
+GPLv3 or newer, see LICENSE-GPL3 in the root of the project

check_package_updates/check_package_updates

@@ -0,0 +1,106 @@
+#!/usr/bin/python
+#
+# Copyright 2013, Tomas Edwardsson <tommi@tommi.org>
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License as published by
+#    the Free Software Foundation, either version 3 of the License, or
+#    (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+from subprocess import Popen, PIPE
+from pynag.Plugins import PluginHelper, unknown, ok
+from collections import defaultdict
+known_types = ['Enhancement', 'Normal', 'Bug fix', 'Security']
+
+
+def main():
+    p = PluginHelper()
+    p.parse_arguments()
+    p.status(ok)
+
+    total_updates = 0
+    pkg_updates = {}
+    try:
+        total_updates, pkg_updates = pkcon_get_updates()
+    except Exception, e:
+        p.add_summary("Error: " + e.message)
+        p.status(unknown)
+        p.exit()
+
+    p.add_summary("Total: %i, " % total_updates +
+                  ", ".join(["%s: %i" % (x, len(pkg_updates[x])) for x in pkg_updates.keys()]))
+    p.add_metric("total", total_updates)
+    for update_type in pkg_updates:
+        p.add_metric(update_type.lower(), len(pkg_updates[update_type]))
+        if len(pkg_updates[update_type]):
+            p.add_long_output(update_type)
+            for pkg in pkg_updates[update_type]:
+                p.add_long_output("  %s" % pkg)
+
+    for m in known_types:
+        m = m.lower()
+        if not p.get_metric(m):
+            p.add_metric(m, 0)
+
+    p.check_all_metrics()
+    p.exit()
+
+
+def pkcon_get_updates():
+    """
+    Fetches all package updates and returns a tuple containing:
+        total_updates,
+        dictionary where the type of update is the key and the value is a array of package names.
+
+    :return: { "Bug fix": [ "pkg-1.0.1", "anthr-pkg-3.1.4" ], "Security": [ "pkg2-2.1.1" ],
+    """
+    update_types = defaultdict(list)
+    for t in known_types:
+        update_types[t] = []
+
+    stdout = ""
+    stderr = ""
+    rc = 255
+    try:
+        p = Popen(["pkcon", "get-updates"], stdout=PIPE, stderr=PIPE)
+        stdout, stderr = p.communicate()
+        rc = p.wait() >> 8
+    except OSError, e:
+        if e.errno == 2:
+            raise Exception("%s - PackageKit not installed?" % e.strerror)
+
+    total_updates = 0
+    results_section = False
+    for line in stdout.splitlines():
+        if not line:
+            continue
+        if line.startswith("There are no updates"):
+            continue
+        if results_section is False and line == "Results:":
+            results_section = True
+        elif results_section:
+            update_type = line[:13].strip()
+            update_package = line[13:].strip()
+
+            update_types[update_type].append(update_package)
+            total_updates += 1
+
+    if rc > 0:
+        raise Exception(
+            "pkcon returned non zero return code %i, output:\n%s\nstderr output:\n%s" % (rc, stdout, stderr))
+    if results_section is False:
+        raise Exception("pkcon returned no 'Results:' section. Output of pkcon command:\n" + stdout)
+
+    return total_updates, update_types
+
+
+if __name__ == "__main__":
+    main()

check_package_updates/nagios-okplugin-check_package_updates.spec

@@ -0,0 +1,77 @@
+%define debug_package %{nil}
+%define plugin check_package_updates
+
+Summary:	A Nagios plugin to check operating system updates
+Name:		nagios-okplugin-%{plugin}
+Version:	0.0.7
+Release:	1%{?dist}
+License:	GPLv3+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}
+Source0:	https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}/releases/%{name}-%{version}.tar.gz
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@opensource.is>
+BuildArch:	noarch
+Requires:	nrpe
+Requires:	pynag
+Requires:	PackageKit
+
+
+%description
+Checks updates via PackageKit and can notify on various different situations
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+mkdir -p %{buildroot}%{_sysconfdir}/nrpe.d
+sed "s^/usr/lib64^%{_libdir}^g" nrpe.d/%{plugin}.cfg >  %{buildroot}%{_sysconfdir}/nrpe.d/%{plugin}.cfg
+# Temporary fix for selinux
+chcon system_u:object_r:nagios_unconfined_plugin_exec_t:s0 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+
+%clean
+rm -rf %{buildroot}
+
+%post
+/sbin/service nrpe status &> /dev/null && /sbin/service nrpe reload || :
+
+%files
+%defattr(-,root,root,-)
+%doc README.md
+%{_libdir}/nagios/plugins/*
+%config(noreplace) %{_sysconfdir}/nrpe.d/%{plugin}.cfg
+
+%changelog
+* Fri Sep 13 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.7-1
+- check_package_updates - minor refactor (palli@opensource.is)
+- check_package_updates - fix inconsistent tab/space (palli@opensource.is)
+- Removed obsoletes and thresholds (tommi@tommi.org)
+- Removed Draft, should be working pretty good (tommi@tommi.org)
+- Added --legacy to default since that is the default format (tommi@tommi.org)
+- Added nrpe reload since moving from check_yum needs it (tommi@tommi.org)
+- Added obsolete for okplugin check_updates (tommi@tommi.org)
+
+* Tue Jul 16 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.6-1
+- Fix failure on a fully patched system (tommi@tommi.org)
+
+* Tue Jul 16 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.5-1
+- Known types always have a metric, even if 0 (tommi@tommi.org)
+
+* Tue Jul 16 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.4-1
+- new package built with tito
+
+* Tue Jul 16 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.3-1
+- Plugin should conflict with check_yum (tommi@tommi.org)
+- No obsolete (tommi@tommi.org)
+- Obsolete nagios-okplugin-check_yum (tommi@tommi.org)
+
+* Tue Jul 16 2013 Tomas Edwardsson <tommi@tommi.org> 0.0.2-1
+- new package built with tito
+
+* Wed Jul 16 2013 Tomas Edwardsson <tommi@opensource.is> 0.0.1-1
+- Initial Packaging

check_package_updates/nrpe.d/check_package_updates.cfg

@@ -0,0 +1,5 @@
+# Critical on security updates, warning if 40 or more total updates
+command[check_package_updates]=/usr/lib64/nagios/plugins/check_package_updates --legacy
+
+# Critical on security updates
+command[check_package_updates_security]=/usr/lib64/nagios/plugins/check_package_updates --th "metric=security,critical=1..inf" --legacy

check_rhcs/check_rhcs

@@ -72,12 +72,11 @@ def getLocalNodeState(dom):
     """
     Get the state of the local node
     """
-    hostname = socket.gethostname()
     nodesList = dom.getElementsByTagName('node')
     nodeState = {}
     
     for node in nodesList:
-        if node.attributes['name'].value == hostname:
+        if node.attributes['local'].value == "1":
             nodeState['name'] = node.attributes['name'].value
             nodeState['state'] = node.attributes['state'].value 
             nodeState['rgmanager'] = node.attributes['rgmanager'].value 
@@ -95,7 +94,6 @@ def getServiceState(dom, service):
     Get the state of the named service
     """
     groupList = dom.getElementsByTagName('group')
-    hostname = socket.gethostname()
     serviceState = {}
     for group in groupList:
         if group.attributes['name'].value in (service,"service:"+service,"vm:"+service):

check_rhcs/nagios-okplugin-check_rhcs.spec

@@ -6,7 +6,7 @@
 
 Summary:	A Nagios plugin to check Red Hat Cluster suite (rhel5 and rhel6)
 Name:		nagios-okplugin-%{plugin_name}
-Version:	%{version}
+Version:	1
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -45,6 +45,11 @@ rm -rf %{buildroot}
 /etc/nrpe.d/%{plugin_name}.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 1-1
+- Updated rhcs nrpe config as well (tommi@tommi.org)
+- Added check for suspended services -Z (tommi@tommi.org)
+- Fix broken libdir on 64-bit platforms (palli@opensource.is)
+
 * Thu May 24 2012 Pall Sigurdsson <palli@opensource.is> 0.0.4-1
 - version bump of check_rhcs (palli@opensource.is)
 - check_rhcs_fence added for rhel6 compatibility (palli@opensource.is)

check_selinux/check_selinux

@@ -17,7 +17,7 @@
 
 # About this script
 #
-# Checks uptime of a specified host, using NRPE is host is remote
+# Checks selinux status of a specified host, using NRPE if the host is remote
 
 HOSTN="localhost" 		# By default check localhost
 CHECK_COMMAND="getenforce" 	# Default command to check selinux status
@@ -62,29 +62,29 @@ done
 
 
 
-# We we are not checking localhost, lets get remote uptime via NRPE
+# We we are not checking localhost, lets get remote selinux status via NRPE
 if [ "$HOSTN" != "localhost" ]; then
 	export PATH=$PATH:/usr/lib/nagios/plugins:/usr/lib64/nagios/plugins:/nagios/usr/lib/nagios/plugins
 	CHECK_COMMAND="check_nrpe -H $HOSTN -c get_selinux"
 fi
 
 
-# Get the uptime, raise error if we are unsuccessful
+# Get the selinux status, raise error if we are unsuccessful
 OUTPUT=`$CHECK_COMMAND`
 RESULT=$?
 
 if [ $RESULT -gt 0 ]; then
-	echo "Error - Could not run command $CHECK_COMMAND"
-	echo "Error was: $OUTPUT"
+	echo "UNKNOWN - Could not run command $CHECK_COMMAND"
+        echo "Error was: $OUTPUT"
 	exit 3
 fi
 
 # Parse the output from the command
 if [ "$OUTPUT" == "$STATUS" ]; then
-	echo "ok, selinux status is $OUTPUT"
+	echo "OK - SELinux status is $OUTPUT"
 	exit 0
 else
-	echo "warning, selinux status is $OUTPUT (supposed to be $STATUS)"
+	echo "WARNING - SELinux status is $OUTPUT (supposed to be $STATUS)"
 	exit 1
 fi
 

check_selinux/nagios-plugins-check_selinux.spec

@@ -0,0 +1,48 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check SELinux status on Linux servers
+Name:		nagios-plugins-check_selinux
+Version:	1.3
+Release:	1%{?dist}
+License:	GPLv3+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/tree/master/check_selinux
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_selinux/releases/nagios-plugins-check_selinux-%{version}.tar.gz
+Requires:	nagios-plugins-nrpe libselinux-utils
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@ok.is>
+BuildArch:	noarch
+
+%description
+This plugin check the enforcing selinux status of a specified host, using NRPE
+if the host is remote.
+
+%prep
+%setup -q
+
+%build
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_selinux %{buildroot}%{_libdir}/nagios/plugins/check_selinux
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+%{_libdir}/nagios/plugins/*
+
+
+%changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 1.3-1
+- 
+
+* Thu Feb 20 2014 Pall Sigurdsson
+- 
+
+* Wed May 22 2013 Tomas Edwardsson <tommi@tommi.org> 1.1-1
+- new package built with tito
+
+* Wed May 22 2013 Tomas Edwardsson <tommi@opensource.is> 1.0-1
+- Initial packaging

check_service.sh/check_service.sh

@@ -0,0 +1,349 @@
+#!/usr/bin/env bash
+set -o pipefail
+
+# Author: Jon Schipp
+# 2015-03-09 [Pascal Hegy] - Add sudo for linux
+# 2015-03-09 [Pascal Hegy] - Change USER variable to USERNAME to avoid the use and confusion with the USER env variable
+# 2017-08-30 [Roberto Leibman] - Reordered checks to make sure dead and inactive get checked first
+# 2018-04-25 [Robin Gierse] - Update check via systemctl for Linux with grep to produce better output for systemctl
+# 2019-03-15 [nem / liberodark] - Add support for check all failed services in linux
+
+########
+# Examples:
+
+# 1.) List services for osx
+# $ ./check_service.sh -l -o osx
+#
+# 2.) Check status of SSH service on a linux machine
+# $ ./check_service.sh -o linux -s sshd
+
+# 3.) Manually select service management tool and service
+# $ ./check_service.sh -o linux -t "service rsyslog status"
+# Exemple for check all failed services
+# $ ./check_service.sh -o linux -t "systemctl list-units --state=failed"
+
+# Nagios Exit Codes
+OK=0
+WARNING=1
+CRITICAL=2
+UNKNOWN=3
+
+# Weather or not we can trust the exit code from the service management tool.
+# Defaults to 0, put to 1 for systemd.  Otherwise we must rely on parsing the
+# output from the service management tool.
+TRUST_EXIT_CODE=0
+
+usage()
+{
+cat <<EOF
+
+Check status of system services for Linux, FreeBSD, OSX, and AIX.
+
+     Options:
+        -s <service>    Specify service name
+        -l              List services
+        -o <os>         OS type, "linux/osx/freebsd/aix"
+        -u <user>       User if you need to ``sudo -u'' for launchctl (def: nagios, linux and osx only)
+        -t <tool>       Manually specify service management tool (def: autodetect) with status and service
+                        e.g. ``-t "service nagios status"''
+
+
+EOF
+}
+
+argcheck() {
+# if less than n argument
+if [ $ARGC -lt $1 ]; then
+        echo "Missing arguments! Use \`\`-h'' for help."
+        exit 1
+fi
+}
+
+os_check() {
+if [ "$OS" == null ]; then
+	unamestr=$(uname)
+        if [[ $unamestr == 'Linux' ]]; then
+                OS='linux'
+        elif [[ $unamestr == 'FreeBSD' ]]; then
+               OS='freebsd'
+        elif [[ $unamestr == 'Darwin' ]]; then
+               OS='osx'	       
+        else
+                echo "OS not recognized, Use \`-o\` and specify the OS as an argument"
+                exit 3
+        fi
+fi
+}
+
+
+
+determine_service_tool() {
+if [[ $OS == linux ]]; then
+        if command -v systemctl >/dev/null 2>&1; then
+                SERVICETOOL="systemctl status $SERVICE | grep -i Active"
+                LISTTOOL="systemctl"
+                if [ $USERNAME ]; then
+                    SERVICETOOL="sudo -u $USERNAME systemctl status $SERVICE"
+                    LISTTOOL="sudo -u $USERNAME systemctl"
+                fi
+		TRUST_EXIT_CODE=1
+        elif command -v service >/dev/null 2>&1; then
+                SERVICETOOL="service $SERVICE status"
+                LISTTOOL="service --status-all"
+                if [ $USERNAME ]; then
+                    SERVICETOOL="sudo -u $USERNAME service $SERVICE status"
+                    LISTTOOL="sudo -u $USERNAME service --status-all"
+                fi
+        elif command -v initctl >/dev/null 2>&1; then
+                SERVICETOOL="status $SERVICE"
+                LISTTOOL="initctl list"
+                if [ $USERNAME ]; then
+                    SERVICETOOL="sudo -u $USERNAME status $SERVICE"
+                    LISTTOOL="sudo -u $USERNAME initctl list"
+                fi
+        elif command -v chkconfig >/dev/null 2>&1; then
+                SERVICETOOL=chkconfig
+                LISTTOOL="chkconfig --list"
+                if [ $USERNAME ]; then
+                    SERVICETOOL="sudo -u $USERNAME chkconfig"
+                    LISTTOOL="sudo -u $USERNAME chkconfig --list"
+                fi
+        elif [ -f /etc/init.d/$SERVICE ] || [ -d /etc/init.d ]; then
+                SERVICETOOL="/etc/init.d/$SERVICE status | tail -1"
+                LISTTOOL="ls -1 /etc/init.d/"
+                if [ $USERNAME ]; then
+                    SERVICETOOL="sudo -u $USERNAME /etc/init.d/$SERVICE status | tail -1"
+                    LISTTOOL="sudo -u $USERNAME ls -1 /etc/init.d/"
+                fi
+        else
+                echo "Unable to determine the system's service tool!"
+                exit 1
+        fi
+fi
+
+if [[ $OS == freebsd ]]; then
+        if command -v service >/dev/null 2>&1; then
+                SERVICETOOL="service $SERVICE status"
+                LISTTOOL="service -l"
+        elif [ -f /etc/rc.d/$SERVICE ] || [ -d /etc/rc.d ]; then
+                SERVICETOOL="/etc/rc.d/$SERVICE status"
+                LISTTOOL="ls -1 /etc/rc.d/"
+        else
+                echo "Unable to determine the system's service tool!"
+                exit 1
+        fi
+fi
+
+if [[ $OS == osx ]]; then
+        if [ -f /usr/sbin/serveradmin >/dev/null 2>&1 ] && serveradmin list | grep "$SERVICE" 2>&1 >/dev/null; then
+                SERVICETOOL="serveradmin status $SERVICE"
+                LISTTOOL="serveradmin list"
+        elif [ -f /Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin >/dev/null 2>&1 ] && \
+               /Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin list | \
+                grep "$SERVICE" 2>&1 >/dev/null; then
+                SERVICETOOL="/Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin status $SERVICE"
+                LISTTOOL="/Applications/Server.app/Contents/ServerRoot/usr/sbin/serveradmin list"
+        elif command -v launchctl >/dev/null 2>&1; then
+                SERVICETOOL="launchctl list | grep -v ^- | grep $SERVICE || echo $SERVICE not running! "
+                LISTTOOL="launchctl list"
+                if [ $USERNAME ]; then
+                        SERVICETOOL="sudo -u $USERNAME launchctl list | grep -v ^- | grep $SERVICE || echo $SERVICE not running! "
+                        LISTTOOL="sudo -u $USERNAME launchctl list"
+                fi
+        elif command -v service >/dev/null 2>&1; then
+                SERVICETOOL="service --test-if-configured-on $SERVICE"
+                LISTTOOL="service list"
+        else
+                echo "Unable to determine the system's service tool!"
+                exit 1
+        fi
+fi
+
+if [[ $OS == aix ]]; then
+        if command -v lssrc >/dev/null 2>&1; then
+                SERVICETOOL="lssrc -s $SERVICE | grep -v Subsystem"
+                LISTTOOL="lssrc -a"
+        else
+                echo "Unable to determine the system's service tool!"
+                exit 1
+        fi
+fi
+}
+
+ARGC=$#
+LIST=0
+MANUAL=0
+OS=null
+SERVICETOOL=null
+LISTTOOL=null
+SERVICE=".*"
+#USERNAME=nagios
+
+argcheck 1
+
+while getopts "hls:o:t:u:" OPTION
+do
+     case $OPTION in
+         h)
+             usage
+             exit 0
+             ;;
+         l)
+             LIST=1
+             ;;
+         s)
+             SERVICE="$OPTARG"
+             ;;
+         o)
+             if [[ "$OPTARG" == linux ]]; then
+                     OS="$OPTARG"
+             elif [[ "$OPTARG" == osx ]]; then
+                     OS="$OPTARG"
+             elif [[ "$OPTARG" == freebsd ]]; then
+                     OS="$OPTARG"
+             elif [[ "$OPTARG" == aix ]]; then
+                     OS="$OPTARG"
+             else
+                     echo "Unknown type!"
+                     exit 1
+             fi
+             ;;
+         t)
+             MANUAL=1
+             MANUALSERVICETOOL="$OPTARG"
+             ;;
+         u)
+             USERNAME="$OPTARG"
+             ;;
+         \?)
+             exit 1
+             ;;
+     esac
+done
+
+os_check
+
+if [ $MANUAL -eq 1 ]; then
+SERVICETOOL=$MANUALSERVICETOOL
+else
+determine_service_tool
+fi
+
+# -l conflicts with -t                                                                                                                                                   
+if [ $MANUAL -eq 1 ] && [ $LIST -eq 1 ]; then
+    echo "Options conflict: \`\`-t'' and \`\`-l''"
+    exit 2
+fi
+
+if [ $LIST -eq 1 ]; then
+        if [[ $LISTTOOL != null ]]; then
+                $LISTTOOL
+                exit 0
+        else
+                echo "OS not specified! Use \`\`-o''"
+                exit 2
+        fi
+fi
+
+# Check the status of a service
+STATUS_MSG=$(eval "$SERVICETOOL" 2>&1)
+EXIT_CODE=$?
+
+## Exit code from the service tool - if it's non-zero, we should
+## probably return CRITICAL.  (though, in some cases UNKNOWN would
+## probably be more appropriate)
+[ $EXIT_CODE -ne 0 ] && echo "$STATUS_MSG" && exit $CRITICAL
+
+## For systemd and most systems, $EXIT_CODE can be trusted - if it's 0, the service is running.
+## Ref https://github.com/jonschipp/nagios-plugins/issues/15
+[ $TRUST_EXIT_CODE -eq 1 ] && [ $EXIT_CODE -eq 0 ] && echo "$STATUS_MSG" && exit $OK 
+
+case $STATUS_MSG in
+
+*stop*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*STOPPED*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*not*running*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*NOT*running*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*NOT*RUNNING*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+#*inactive*)
+#        echo "$STATUS_MSG"
+#        exit $CRITICAL
+#        ;;
+*dead*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*running*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+*RUNNING*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+*SUCCESS*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+*[eE]rr*)
+        echo "Error in command: $STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*[fF]ailed*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*[eE]nable*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+*[dD]isable*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*[cC]annot*)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+*[aA]ctive*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+*Subsystem*not*on*file)
+        echo "$STATUS_MSG"
+        exit $CRITICAL
+        ;;
+[1-9][1-9]*)
+        echo "$SERVICE running: $STATUS_MSG"
+        exit $OK
+        ;;
+"")
+	echo "$SERVICE is not running: no output from service command"
+	exit $CRITICAL
+	;;
+*)
+        echo "Unknown status: $STATUS_MSG"
+        echo "Is there a typo in the command or service configuration?: $STATUS_MSG"
+        exit $UNKNOWN
+        ;;
+*0\ loaded*)
+        echo "$STATUS_MSG"
+        exit $OK
+        ;;
+esac
+

check_service.sh/nagios-plugins-check_service.spec

@@ -0,0 +1,48 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check services on Linux servers
+Name:		nagios-plugins-check_service
+Version:	0
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/jonschipp/nagios-plugins/blob/master/check_service.sh
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_service/releases/nagios-plugins-check_service-%{version}.tar.gz
+Requires:	nrpe
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
+BuildArch:	noarch
+
+%description
+Check status of system services for Linux, FreeBSD, OSX, and AIX.
+
+%prep
+%setup -q
+perl -pi -e "s|/usr/lib/|%{_libdir}/|g" nrpe.d/check_service.cfg
+perl -pi -e "s|/usr/lib64/|%{_libdir}/|g" nrpe.d/check_service.cfg
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_service.sh %{buildroot}%{_libdir}/nagios/plugins/check_service.sh
+install -D -p -m 0755 nrpe.d/check_service.cfg %{buildroot}/etc/nrpe.d/check_service.cfg
+
+%clean
+rm -rf %{buildroot}
+
+%post
+/sbin/service nrpe reload
+
+%files
+%defattr(-,root,root,-)
+#%doc README LICENSE
+%{_libdir}/nagios/plugins/*
+/etc/nrpe.d/check_service.cfg
+
+
+%changelog
+* Tue Apr 21 2020  <gardar@ok.is> 0.1-1
+- Initial packaging
+

check_service.sh/nrpe.d/check_service.cfg

@@ -0,0 +1 @@
+command[check_service]=/usr/lib/nagios/plugins/check_service.sh

check_snmp/check_snmp_cpfw.pl

@@ -5,6 +5,9 @@
 # Author  : Patrick Proy (patrick at proy.org)
 # Help : http://nagios.manubulon.com
 # Licence : GPL - http://www.fsf.org/licenses/gpl.txt
+# Patch 1.2.1c
+# Author : monitoreo.osi@uchile.cl
+# Desc:  warn/crit threshold to conns/seg check
 # TODO : 
 # - check sync method
 #################################################################
@@ -19,6 +22,7 @@ use Getopt::Long;
 # Nagios specific
 
 use lib "/usr/local/nagios/libexec";
+#use lib "/usr/lib/nagios/plugins"; # use in ubugtu
 use utils qw(%ERRORS $TIMEOUT);
 #my $TIMEOUT = 15;
 #my %ERRORS=('OK'=>0,'WARNING'=>1,'CRITICAL'=>2,'UNKNOWN'=>3,'DEPENDENT'=>4);
@@ -26,87 +30,90 @@ use utils qw(%ERRORS $TIMEOUT);
 ########### SNMP Datas ########### 
 
 ###### FW data
-my $policy_state	= "1.3.6.1.4.1.2620.1.1.1.0"; # "Installed"
-my $policy_name		= "1.3.6.1.4.1.2620.1.1.2.0"; # Installed policy name
-my $connections		= "1.3.6.1.4.1.2620.1.1.25.3.0"; # number of connections
-#my $connections_peak	= "1.3.6.1.4.1.2620.1.1.25.4.0"; # peak number of connections
-my @fw_checks 		= ($policy_state,$policy_name,$connections);
+my $policy_state     = "1.3.6.1.4.1.2620.1.1.1.0";        # Installed
+my $policy_name      = "1.3.6.1.4.1.2620.1.1.2.0";        # Installed policy name
+my $connections      = "1.3.6.1.4.1.2620.1.1.25.3.0";     # Number of connections
+my $connectionsSR    = "1.3.6.1.4.1.2620.1.1.26.11.6.0" ; # FwConnectionsStatConnectionRate aka connx/seg
+my $connectionsPeak  = "1.3.6.1.4.1.2620.1.1.25.4.0";     # Peak number of connections
+my @fw_checks        = ($policy_state,$policy_name,$connections,$connectionsSR,$connectionsPeak);
 
 ###### SVN data
-my $svn_status		= "1.3.6.1.4.1.2620.1.6.102.0"; # "OK" svn status
-my %svn_checks		= ($svn_status,"OK");
-my %svn_checks_n	= ($svn_status,"SVN status");
-my @svn_checks_oid	= ($svn_status);
+my $svn_status    = "1.3.6.1.4.1.2620.1.6.102.0"; # "OK" svn status
+my %svn_checks    = ($svn_status,"OK");
+my %svn_checks_n  = ($svn_status,"SVN status");
+my @svn_checks_oid  = ($svn_status);
 
 ###### HA data
 
-my $ha_active		= "1.3.6.1.4.1.2620.1.5.5.0"; 	# "yes"
-my $ha_state		= "1.3.6.1.4.1.2620.1.5.6.0"; 	# "active" / "standby"
-my $ha_block_state	= "1.3.6.1.4.1.2620.1.5.7.0"; 	#"OK" : ha blocking state
-my $ha_status		= "1.3.6.1.4.1.2620.1.5.102.0"; # "OK" : ha status
+my $ha_active       = "1.3.6.1.4.1.2620.1.5.5.0";       # "yes"
+my $ha_state        = "1.3.6.1.4.1.2620.1.5.6.0";       # "active" / "standby"
+my $ha_status       = "1.3.6.1.4.1.2620.1.5.102.0";     # "OK" : ha status
+my $ha_block_state  = "1.3.6.1.4.1.2620.1.5.7.0";       # "OK" : ha blocking state
 
-my %ha_checks		=( $ha_active,"yes",$ha_state,"active",$ha_block_state,"OK",$ha_status,"OK");
-my %ha_checks_stand	=( $ha_active,"yes",$ha_state,"standby",$ha_block_state,"OK",$ha_status,"OK");
-my %ha_checks_n		=( $ha_active,"HA active",$ha_state,"HA state",$ha_block_state,"HA block state",$ha_status,"ha_status");
-my @ha_checks_oid	=( $ha_active,$ha_state,$ha_block_state,$ha_status);
+my %ha_checks       =( $ha_active,"yes",$ha_state,"active",$ha_block_state,"OK",$ha_status,"OK");
+my %ha_checks_stand =( $ha_active,"yes",$ha_state,"standby",$ha_block_state,"OK",$ha_status,"OK");
+my %ha_checks_n     =( $ha_active,"HA active",$ha_state,"HA state",$ha_block_state,"HA block state",$ha_status,"ha_status");
+my @ha_checks_oid   =( $ha_active,$ha_state,$ha_block_state,$ha_status);
 
-my $ha_mode		= "1.3.6.1.4.1.2620.1.5.11.0";  # "Sync only"/"High Availability (Active Up)" : ha Working mode
+my $ha_mode         = "1.3.6.1.4.1.2620.1.5.11.0";  # "Sync only"/"High Availability (Active Up)" : ha Working mode
+my $ha_tables       = "1.3.6.1.4.1.2620.1.5.13.1";  # ha status table
+my $ha_tables_index = ".1";
+my $ha_tables_name  = ".2";
+my $ha_tables_state = ".3"; # "OK"
+my $ha_tables_prbdesc = ".6"; # Description if state is != "OK"
 
-my $ha_tables		= "1.3.6.1.4.1.2620.1.5.13.1"; 	# ha status table
-my $ha_tables_index	= ".1";
-my $ha_tables_name	= ".2";
-my $ha_tables_state	= ".3"; # "OK"
-my $ha_tables_prbdesc	= ".6"; # Description if state is != "OK"
-
-#my @ha_table_check	= ("Synchronization","Filter","cphad","fwd"); # process to check
+#my @ha_table_check = ("Synchronization","Filter","cphad","fwd"); # process to check
 
 ####### MGMT data
 
-my $mgmt_status		= "1.3.6.1.4.1.2620.1.7.5.0";	# "active" : management status
-my $mgmt_alive		= "1.3.6.1.4.1.2620.1.7.6.0";   # 1 : management is alive if 1
-my $mgmt_stat_desc	= "1.3.6.1.4.1.2620.1.7.102.0"; # Management status description
-my $mgmt_stats_desc_l	= "1.3.6.1.4.1.2620.1.7.103.0"; # Management status long description
+my $mgmt_status   = "1.3.6.1.4.1.2620.1.7.5.0";       # "active" : management status
+my $mgmt_alive    = "1.3.6.1.4.1.2620.1.7.6.0";       # 1 : management is alive if 1
+my $mgmt_stat_desc  = "1.3.6.1.4.1.2620.1.7.102.0";   # Management status description
+my $mgmt_stats_desc_l = "1.3.6.1.4.1.2620.1.7.103.0"; # Management status long description
 
-my %mgmt_checks		= ($mgmt_status,"active",$mgmt_alive,"1");
-my %mgmt_checks_n	= ($mgmt_status,"Mgmt status",$mgmt_alive,"Mgmt alive");
-my @mgmt_checks_oid	= ($mgmt_status,$mgmt_alive);
+my %mgmt_checks   = ($mgmt_status,"active",$mgmt_alive,"1");
+my %mgmt_checks_n = ($mgmt_status,"Mgmt status",$mgmt_alive,"Mgmt alive");
+my @mgmt_checks_oid = ($mgmt_status,$mgmt_alive);
 
 #################################### Globals ##############################""
 
-my $Version='1.2.1';
+my $Version='1.2.1b';
 
-my $o_host = 	undef; 		# hostname
-my $o_community = undef; 	# community
-my $o_version2	=undef;		# Version 2
-my $o_port = 	161; 		# port
-my $o_help=	undef; 		# wan't some help ?
-my $o_verb=	undef;		# verbose mode
-my $o_version=	undef;		# print version
-my $o_timeout=  5;            	# Default 5s Timeout
-my $o_warn=	undef;		# Warning for connections
-my $o_crit=	undef;		# Crit for connections
-my $o_svn=	undef;		# Check for SVN status
-my $o_fw=	undef;		# Check for FW status
-my $o_ha=	undef;		# Check for HA status
-my $o_mgmt=	undef;		# Check for management status
-my $o_policy=	undef;		# Check for policy name
-my $o_conn=	undef;		# Check for connexions
-my $o_perf=	undef;		# Performance data output 
+my $o_host =  undef;      # hostname
+my $o_community = undef;  # community
+my $o_version2  = undef;  # Version 2
+my $o_port =  161;        # port
+my $o_help= undef;        # wan't some help ?
+my $o_verb= undef;        # verbose mode
+my $o_version=  undef;    # print version
+my $o_timeout=  5;        # Default 5s Timeout
+my $o_warn= undef;        # Warning for connections
+my $o_crit= undef;        # Crit for connections
+my $o_warnSR= undef;      # Warning for connectionsSR
+my $o_critSR= undef;      # Crit for connectionsSR
+my $o_svn=  undef;        # Check for SVN status
+my $o_fw= undef;          # Check for FW status
+my $o_ha= undef;          # Check for HA status
+my $o_mgmt= undef;        # Check for management status
+my $o_policy= undef;      # Check for policy name
+my $o_conn= undef;        # Check for connexions
+my $o_connSR= undef;      # Check for connexionsSR
+my $o_perf= undef;        # Performance data output 
 
 # SNMPv3 specific
-my $o_login=	undef;		# Login for snmpv3
-my $o_passwd=	undef;		# Pass for snmpv3
-my $v3protocols=undef;	# V3 protocol list.
-my $o_authproto='md5';		# Auth protocol
-my $o_privproto='des';		# Priv protocol
-my $o_privpass= undef;		# priv password
+my $o_login=  undef;      # Login for snmpv3
+my $o_passwd= undef;      # Pass for snmpv3
+my $v3protocols=undef;    # V3 protocol list.
+my $o_authproto='md5';    # Auth protocol
+my $o_privproto='des';    # Priv protocol
+my $o_privpass= undef;    # priv password
 
 # functions
 
 sub p_version { print "check_snmp_cpfw version : $Version\n"; }
 
 sub print_usage {
-    print "Usage: $0 [-v] -H <host> -C <snmp_community> [-2] | (-l login -x passwd [-X pass -L <authp>,<privp>]) [-s] [-w [-p=pol_name] [-c=warn,crit]] [-m] [-a [standby] ] [-f] [-p <port>] [-t <timeout>] [-V]\n";
+    print "Usage: $0 [-v] -H <host> -C <snmp_community> [-2] | (-l login -x passwd [-X pass -L <authp>,<privp>]) [-s] [-w [-p=pol_name] [-c=warn,crit]] [-r=warn,crit]]  [-m] [-a [standby] ] [-f] [-p <port>] [-t <timeout>] [-V]\n";
 }
 
 sub isnnum { # Return true if arg is not a number
@@ -117,7 +124,7 @@ sub isnnum { # Return true if arg is not a number
 
 sub help {
    print "\nSNMP Checkpoint FW-1 Monitor for Nagios version ",$Version,"\n";
-   print "GPL Licence, (c)2004-2007 - Patrick Proy\n\n";
+   print "GPL Licence, (c)2004-2020 - Patrick Proy\n\n";
    print_usage();
    print <<EOT;
 -v, --verbose
@@ -157,6 +164,8 @@ sub help {
    SNMP port (Default 161)
 -t, --timeout=INTEGER
    timeout for SNMP (Default: Nagios default)   
+-r, --connexionsSR=WARN,CRIT
+   check warn and critical number of connexionsSR (must have -w)
 -V, --version
    prints version number
 EOT
@@ -168,69 +177,81 @@ sub verb { my $t=shift; print $t,"\n" if defined($o_verb) ; }
 sub check_options {
     Getopt::Long::Configure ("bundling");
     GetOptions(
-   	'v'	=> \$o_verb,		'verbose'	=> \$o_verb,
-        'h'     => \$o_help,    	'help'        	=> \$o_help,
-        'H:s'   => \$o_host,		'hostname:s'	=> \$o_host,
-        'P:i'   => \$o_port,   		'port:i'	=> \$o_port,
-        'C:s'   => \$o_community,	'community:s'	=> \$o_community,
-	'2'     => \$o_version2,        'v2c'           => \$o_version2,
-	'l:s'	=> \$o_login,		'login:s'	=> \$o_login,
-	'x:s'	=> \$o_passwd,		'passwd:s'	=> \$o_passwd,
-	'X:s'	=> \$o_privpass,		'privpass:s'	=> \$o_privpass,
-	'L:s'	=> \$v3protocols,		'protocols:s'	=> \$v3protocols,   
- 	't:i'   => \$o_timeout,       	'timeout:i'     => \$o_timeout,
-	'V'	=> \$o_version,		'version'	=> \$o_version,
-	's'	=> \$o_svn,		'svn'		=> \$o_svn,
-	'w'	=> \$o_fw,		'fw'		=> \$o_fw,
-	'a:s'	=> \$o_ha,		'ha:s'		=> \$o_ha,
-	'm'	=> \$o_mgmt,		'mgmt'		=> \$o_mgmt,
-	'p:s'	=> \$o_policy,		'policy:s'	=> \$o_policy,
-	'c:s'	=> \$o_conn,		'connexions:s'	=> \$o_conn,
-	'f'	=> \$o_perf,		'perfparse'	=> \$o_perf
-    );
+    'v' => \$o_verb,    'verbose' => \$o_verb,
+        'h'     => \$o_help,      'help'          => \$o_help,
+        'H:s'   => \$o_host,    'hostname:s'  => \$o_host,
+        'P:i'   => \$o_port,      'port:i'  => \$o_port,
+        'C:s'   => \$o_community, 'community:s' => \$o_community,
+  '2'     => \$o_version2,        'v2c'           => \$o_version2,
+  'l:s' => \$o_login,   'login:s' => \$o_login,
+  'x:s' => \$o_passwd,    'passwd:s'  => \$o_passwd,
+  'X:s' => \$o_privpass,    'privpass:s'  => \$o_privpass,
+  'L:s' => \$v3protocols,   'protocols:s' => \$v3protocols,   
+  't:i'   => \$o_timeout,         'timeout:i'     => \$o_timeout,
+  'V' => \$o_version,   'version' => \$o_version,
+  's' => \$o_svn,   'svn'   => \$o_svn,
+  'w' => \$o_fw,    'fw'    => \$o_fw,
+  'a:s' => \$o_ha,    'ha:s'    => \$o_ha,
+  'm' => \$o_mgmt,    'mgmt'    => \$o_mgmt,
+  'p:s' => \$o_policy,    'policy:s'  => \$o_policy,
+  'c:s' => \$o_conn,    'connexions:s'  => \$o_conn,
+  'r:s' => \$o_connSR,   'rate:s' => \$o_connSR,
+  'f' => \$o_perf,    'perfparse' => \$o_perf
+  );
     if (defined ($o_help) ) { help(); exit $ERRORS{"UNKNOWN"}};
     if (defined($o_version)) { p_version(); exit $ERRORS{"UNKNOWN"}};
     if ( ! defined($o_host) ) # check host and filter 
-	{ print_usage(); exit $ERRORS{"UNKNOWN"}}
+      { print_usage(); exit $ERRORS{"UNKNOWN"}}
     # check snmp information
     if ( !defined($o_community) && (!defined($o_login) || !defined($o_passwd)) )
-	  { print "Put snmp login info!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
-	if ((defined($o_login) || defined($o_passwd)) && (defined($o_community) || defined($o_version2)) )
-	  { print "Can't mix snmp v1,2c,3 protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
-	if (defined ($v3protocols)) {
-	  if (!defined($o_login)) { print "Put snmp V3 login info with protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
-	  my @v3proto=split(/,/,$v3protocols);
-	  if ((defined ($v3proto[0])) && ($v3proto[0] ne "")) {$o_authproto=$v3proto[0];	}	# Auth protocol
-	  if (defined ($v3proto[1])) {$o_privproto=$v3proto[1];	}	# Priv  protocol
-	  if ((defined ($v3proto[1])) && (!defined($o_privpass))) {
-	    print "Put snmp V3 priv login info with priv protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
-	}
+      { print "Put snmp login info!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+    if ((defined($o_login) || defined($o_passwd)) && (defined($o_community) || defined($o_version2)) )
+      { print "Can't mix snmp v1,2c,3 protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+    if (defined ($v3protocols)) {
+      if (!defined($o_login)) { print "Put snmp V3 login info with protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+      my @v3proto=split(/,/,$v3protocols);
+      if ((defined ($v3proto[0])) && ($v3proto[0] ne "")) {$o_authproto=$v3proto[0];  } # Auth protocol
+      if (defined ($v3proto[1])) {$o_privproto=$v3proto[1]; } # Priv  protocol
+      if ((defined ($v3proto[1])) && (!defined($o_privpass))) {
+        print "Put snmp V3 priv login info with priv protocols!\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+    }
     # Check firewall options
     if ( defined($o_conn)) {
       if ( ! defined($o_fw))
- 	{ print "Cannot check connexions without checking fw\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+        { print "Cannot check connexions without checking fw\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
       my @warncrit=split(/,/ , $o_conn);
       if ( $#warncrit != 1 ) 
         { print "Put warn,crit levels with -c option\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
       ($o_warn,$o_crit)=@warncrit;
       if ( isnnum($o_warn) || isnnum($o_crit) )
-	{ print "Numeric values for warning and critical in -c options\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
-      if ($o_warn >= $o_crit)
-	{ print "warning <= critical ! \n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+        { print "Numeric values for warning and critical in -c options\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+          if ($o_warn >= $o_crit)
+           { print "warning <= critical ! \n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+    }
+    if ( defined($o_connSR)) {
+      if ( ! defined($o_fw))
+        { print "Cannot check connexionsSR without checking fw\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+      my @warncritSR=split(/,/ , $o_connSR);
+      if ( $#warncritSR != 1 ) 
+        { print "Put warn,crit levels with -c option\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+      ($o_warnSR,$o_critSR)=@warncritSR;
+      if ( isnnum($o_warnSR) || isnnum($o_critSR) )
+        { print "Numeric values for warning and critical in -r options\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+          if ($o_warnSR >= $o_critSR)
+           { print "warning <= critical ! \n";print_usage(); exit $ERRORS{"UNKNOWN"}}
     }
     if ( defined($o_policy)) {
       if (! defined($o_fw))
-	{ print "Cannot check policy name without checking fw\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
+        { print "Cannot check policy name without checking fw\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
       if ($o_policy eq "")
         { print "Put a policy name !\n"; print_usage(); exit $ERRORS{"UNKNOWN"}}
     }
     if (defined($o_perf) && ! defined ($o_conn))
-	{ print "Nothing selected for perfparse !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+      { print "Nothing selected for perfparse !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
     if (!defined($o_fw) && !defined($o_ha) && !defined($o_mgmt) && !defined($o_svn))
-	{ print "Must select a product to check !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
+      { print "Must select a product to check !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
     if (defined ($o_ha) && ($o_ha ne "") && ($o_ha ne "standby")) 
-	{ print "-a option comes with 'standby' or nothing !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
-	
+      { print "-a option comes with 'standby' or nothing !\n";print_usage(); exit $ERRORS{"UNKNOWN"}}
 }
 
 ########## MAIN #######
@@ -259,49 +280,49 @@ if ( defined($o_login) && defined($o_passwd)) {
     if (!defined ($o_privpass)) {
   verb("SNMPv3 AuthNoPriv login : $o_login, $o_authproto");
     ($session, $error) = Net::SNMP->session(
-      -hostname   	=> $o_host,
-      -version		=> '3',
-      -username		=> $o_login,
-      -port      	=> $o_port,
-      -authpassword	=> $o_passwd,
-      -authprotocol	=> $o_authproto,
+      -hostname     => $o_host,
+      -version    => '3',
+      -username   => $o_login,
+      -port       => $o_port,
+      -authpassword => $o_passwd,
+      -authprotocol => $o_authproto,
       -timeout          => $o_timeout
     );  
   } else {
     verb("SNMPv3 AuthPriv login : $o_login, $o_authproto, $o_privproto");
     ($session, $error) = Net::SNMP->session(
-      -hostname   	=> $o_host,
-      -version		=> '3',
-      -username		=> $o_login,
-      -port      	=> $o_port,
-      -authpassword	=> $o_passwd,
-      -authprotocol	=> $o_authproto,
-      -privpassword	=> $o_privpass,
-	  -privprotocol => $o_privproto,
+      -hostname     => $o_host,
+      -version    => '3',
+      -username   => $o_login,
+      -port       => $o_port,
+      -authpassword => $o_passwd,
+      -authprotocol => $o_authproto,
+      -privpassword => $o_privpass,
+      -privprotocol => $o_privproto,
       -timeout          => $o_timeout
     );
   }
 } else {
-	if (defined ($o_version2)) {
-		# SNMPv2 Login
-		verb("SNMP v2c login");
-		  ($session, $error) = Net::SNMP->session(
-		 -hostname  => $o_host,
-		 -version   => 2,
-		 -community => $o_community,
-		 -port      => $o_port,
-		 -timeout   => $o_timeout
-		);
-  	} else {
-	  # SNMPV1 login
-	  verb("SNMP v1 login");
-	  ($session, $error) = Net::SNMP->session(
-		-hostname  => $o_host,
-		-community => $o_community,
-		-port      => $o_port,
-		-timeout   => $o_timeout
-	  );
-	}
+  if (defined ($o_version2)) {
+    # SNMPv2 Login
+    verb("SNMP v2c login");
+      ($session, $error) = Net::SNMP->session(
+     -hostname  => $o_host,
+     -version   => 2,
+     -community => $o_community,
+     -port      => $o_port,
+     -timeout   => $o_timeout
+    );
+    } else {
+    # SNMPV1 login
+    verb("SNMP v1 login");
+    ($session, $error) = Net::SNMP->session(
+    -hostname  => $o_host,
+    -community => $o_community,
+    -port      => $o_port,
+    -timeout   => $o_timeout
+    );
+  }
 }
 if (!defined($session)) {
    printf("ERROR opening session: %s.\n", $error);
@@ -327,8 +348,8 @@ $resultat = $session->get_request(
     foreach $key ( keys %svn_checks) {
       verb("$svn_checks_n{$key} : $svn_checks{$key} / $$resultat{$key}");
       if ( $$resultat{$key} ne $svn_checks{$key} ) {
-	$svn_print .= $svn_checks_n{$key} . ":" . $$resultat{$key} . " ";
-	$svn_state=2;
+  $svn_print .= $svn_checks_n{$key} . ":" . $$resultat{$key} . " ";
+  $svn_state=2;
       }  
     }
   } else {
@@ -380,6 +401,8 @@ if (defined ($o_mgmt)) {
 my $fw_state=0;
 my $fw_print="";
 my $perf_conn=undef;
+my $perf_connSR=undef;
+my $perf_connPeak=undef;
 
 if (defined ($o_fw)) {
 
@@ -392,6 +415,8 @@ if (defined ($o_fw)) {
     verb("State : $$resultat{$policy_state}");
     verb("Name : $$resultat{$policy_name}");
     verb("connections : $$resultat{$connections}");
+    verb("connectionsSR : $$resultat{$connectionsSR}");
+    verb("connectionsPeak : $$resultat{$connectionsPeak}");
 
     if ($$resultat{$policy_state} ne "Installed") {
       $fw_state=2;
@@ -401,22 +426,38 @@ if (defined ($o_fw)) {
 
     if (defined($o_policy)) {
       if ($$resultat{$policy_name} ne $o_policy) {
-	    $fw_state=2;
-	    $fw_print .= "Policy installed : $$resultat{$policy_name}";
+      $fw_state=2;
+      $fw_print .= "Policy installed : $$resultat{$policy_name}";
       }
     }
 
     if (defined($o_conn)) {
       if ($$resultat{$connections} > $o_crit) {
-	 $fw_state=2;
+        $fw_state=2;
         $fw_print .= "Connexions : ".$$resultat{$connections}." > ".$o_crit." ";
       } else {
-	if ($$resultat{$connections} > $o_warn) {
-	  if ($fw_state!=2) {$fw_state=1;}
-	  $fw_print .= "Connexions : ".$$resultat{$connections}." > ".$o_warn." ";    
-	}
+      if ($$resultat{$connections} > $o_warn) {
+        if ($fw_state!=2) {$fw_state=1;}
+          $fw_print .= "Connexions : ".$$resultat{$connections}." > ".$o_warn." ";    
+          }
       }
       $perf_conn=$$resultat{$connections};
+      $perf_connSR=$$resultat{$connectionsSR};
+      $perf_connPeak=$$resultat{$connectionsPeak};
+    }
+    if (defined($o_connSR)) {
+      if ($$resultat{$connectionsSR} > $o_critSR) {
+        $fw_state=3;
+        $fw_print .= "Conn/seg  : ".$$resultat{$connectionsSR}." > ".$o_critSR." ";
+      } else {
+      if ($$resultat{$connectionsSR} > $o_warnSR) {
+        if ($fw_state!=3) {$fw_state=1;}
+          $fw_print .= "Conn/seg : ".$$resultat{$connectionsSR}." > ".$o_warnSR." ";    
+          }
+      }
+      $perf_conn=$$resultat{$connections};
+      $perf_connSR=$$resultat{$connectionsSR};
+      $perf_connPeak=$$resultat{$connectionsPeak};
     }
   } else {
     $fw_print .= "cannot find oids";
@@ -448,17 +489,17 @@ if (defined ($o_ha)) {
       verb("$ha_checks_n{$key} : $ha_checks{$key} / $$resultat{$key}");
       if ( $o_ha eq "standby" ) {
         if ( $$resultat{$key} ne $ha_checks_stand{$key} ) {
-	  $ha_print .= $ha_checks_n{$key} . ":" . $$resultat{$key} . " "; 
-	  $ha_state_n=2;
+    $ha_print .= $ha_checks_n{$key} . ":" . $$resultat{$key} . " "; 
+    $ha_state_n=2;
         }
       } else {
         if ( $$resultat{$key} ne $ha_checks{$key} ) {
-	  $ha_print .= $ha_checks_n{$key} . ":" . $$resultat{$key} . " "; 
-	  $ha_state_n=2;
+    $ha_print .= $ha_checks_n{$key} . ":" . $$resultat{$key} . " "; 
+    $ha_state_n=2;
         }
       }  
     }
-    #my $ha_mode		= "1.3.6.1.4.1.2620.1.5.11.0";  # "Sync only" : ha Working mode
+    #my $ha_mode    = "1.3.6.1.4.1.2620.1.5.11.0";  # "Sync only" : ha Working mode
   } else {
     $ha_print .= "cannot find oids";
     #Critical state if not found because it means soft is not activated
@@ -467,7 +508,7 @@ if (defined ($o_ha)) {
 
   # get ha status table
   $resultat = $session->get_table(
-	  Baseoid => $ha_tables
+    Baseoid => $ha_tables
   ); 
   my %status;
   my (@index,@oid) = (undef,undef);
@@ -477,10 +518,10 @@ if (defined ($o_ha)) {
   if (defined($resultat)) {
     foreach $key ( keys %$resultat) {
       if ( $key =~ /$index_search/) {
-	@oid=split (/\./,$key);
-	pop(@oid);
-	$index[$nindex]=pop(@oid);
-	$nindex++; 
+  @oid=split (/\./,$key);
+  pop(@oid);
+  $index[$nindex]=pop(@oid);
+  $nindex++; 
       }
     }
   } else {
@@ -503,10 +544,10 @@ if (defined ($o_ha)) {
       
       $key=$ha_tables . $ha_tables_state . "." . $index[$i] . ".0";
       if (($status{$ha_soft_name} = $$resultat{$key}) ne "OK") {
-	    $key=$ha_tables . $ha_tables_prbdesc . "." . $index[$i] . ".0";
-	    $status{$ha_soft_name} = $$resultat{$key};
-	    $ha_print .= $ha_soft_name . ":" . $status{$ha_soft_name} . " ";
-	    $ha_state_n=2
+      $key=$ha_tables . $ha_tables_prbdesc . "." . $index[$i] . ".0";
+      $status{$ha_soft_name} = $$resultat{$key};
+      $ha_print .= $ha_soft_name . ":" . $status{$ha_soft_name} . " ";
+      $ha_state_n=2
       }
       verb ("$ha_soft_name : $status{$ha_soft_name}");
     }
@@ -548,6 +589,8 @@ if (($ha_state_n+$svn_state+$fw_state+$mgmt_state) == 0 ) {
 
 if (defined($o_perf) && defined ($perf_conn)) {
   $f_print .= " | fw_connexions=" . $perf_conn;
+  $f_print .= " | fw_connexionsSR=" . $perf_connSR;
+  $f_print .= " | fw_connexionsPeak=" . $perf_connPeak;
 }
 
 print "$f_print\n";

check_snmp/nagios-okplugin-check_snmp.spec

@@ -2,15 +2,15 @@
 
 Summary:	Various nagios plugins to check cpu,memory,interfaces via SNMP
 Name:		nagios-okplugin-check_snmp
-Version:	1.0.1
-Release:	1%{?dist}
+Version:	2
+Release:	2%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.is/trac/wiki/check_snmp
 Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_snmp/releases/nagios-okplugin-check_snmp-%{version}.tar.gz
 Requires:	perl-Net-SNMP
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
-Packager:	Pall Sigurdsson <palli@opensource.is>
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
 
 
 %description
@@ -20,6 +20,8 @@ Various nagios plugins to check cpu,memory,interfaces via SNMP
 %setup -q
 #perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_hpacucli.cfg
 
+%global __requires_exclude %{?__requires_exclude:%__requires_exclude}|}^perl\\(utils\\)
+
 %build
 
 
@@ -45,6 +47,12 @@ rm -rf %{buildroot}
 %{_libdir}/nagios/plugins/*
 
 %changelog
+* Fri May 09 2018 Gardar Thorsteinsson <gardar@ok.is> 2-2
+- Filter out perl-utils dep
+
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 2-1
+- make sure nagios does not run us in embedded perl (palli@opensource.is)
+
 * Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 1.0.1-1
 - new package built with tito
 

check_storwize/README.md

@@ -0,0 +1,77 @@
+check_storwize.py
+=================
+
+Nagios plugin to check the status of a remote Storwize disk array.
+
+This plugin is designed to be syntactically compatible with check_storwize.sh from nagios exchange
+with the following differences:
+
+  - Outputs performance data
+  - GPL License
+  - Written in python
+  - More stable plugin results when disk array is broken
+
+
+USAGE
+=============
+```
+ python check_storwize.py --help
+Usage: check_storwize.py [options]
+
+Options:
+  -h, --help            show this help message and exit
+  -H HOSTNAME, -M HOSTNAME, --hostname=HOSTNAME
+                        Hostname or ip address
+  -U USER, --user=USER  Log in as this user to storwize
+  -Q QUERY, --query=QUERY
+                        Query to send to storwize (see also -L)
+  -L, --list-queries    List of valid queries
+  --test                Run this plugin in test mode
+
+  Generic Options:
+    --timeout=50        Exit plugin with unknown status after x seconds
+    --threshold=range   Thresholds in standard nagios threshold format
+    --th=range          Same as --threshold
+    --extra-opts=@file  Read options from an ini file. See
+                        http://nagiosplugins.org/extra-opts
+    -d, --debug         Print debug info
+
+  Display Options:
+    -v, --verbose       Print more verbose info
+    --no-perfdata       Dont show any performance data
+    --no-longoutput     Hide longoutput from the plugin output (i.e. only
+                        display first line of the output)
+    --no-summary        Hide summary from plugin output
+    --get-metrics       Print all available metrics and exit (can be combined
+                        with --verbose)
+    --legacy            Deprecated, do not use
+```
+
+EXAMPLES
+========
+```
+# List array status
+python check_storwize -H remote_host -U username -Q lsarray
+
+# List vdisk status
+python check_storwize -H remote_host -U username -Q lsarray
+
+```
+
+
+Valid modes
+===========
+The following is a list of valid modes (at the time of this writing). For an up-to-date list consult check_storwize -L
+
+  * lsarray
+  * lsdrive
+  * lsenclosurebattery
+  * lsenclosurecanister
+  * lsenclosurepsu
+  * lsenclosureslot
+  * lsenclosure
+  * lsmdiskgrp
+  * lsmdskgrp
+  * lsmgrp
+  * lsrcrelationship
+  * lsvdisk

check_storwize/check_storwize.py

@@ -0,0 +1,205 @@
+#!/usr/bin/env python
+
+from pynag.Plugins import PluginHelper, ok, warning, critical, unknown
+from pynag.Utils import runCommand
+from collections import namedtuple
+
+valid_queries = "lsarray lsdrive lsenclosurebattery lsenclosurecanister lsenclosurepsu lsenclosureslot lsenclosure lsmdiskgrp lsmdskgrp lsmgrp lsrcrelationship lsvdisk"
+
+p = PluginHelper()
+p.add_option("-H", "--hostname", '-M', help="Hostname or ip address", dest="hostname")
+p.add_option("-U", "--user", help="Log in as this user to storwize", dest="user", default="nagios")
+p.add_option("-Q", "--query", help="Query to send to storwize (see also -L)", dest="query", default="lsarray")
+p.add_option("-L", "--list-queries", help="List of valid queries", dest="list_queries", action="store_true")
+p.add_option("--test", help="Run this plugin in test mode", dest="test", action="store_true")
+
+p.parse_arguments()
+
+if p.options.list_queries is True:
+    p.parser.error("Valid Queries: %s" % valid_queries)
+if not p.options.hostname:
+    p.parser.error("Required options -H is missing")
+if p.options.query not in valid_queries.split():
+    p.parser.error("%s does not look like a valid query. Use -L for a list of valid queries" % p.options.query)
+
+query = p.options.query
+
+
+# Connect to remote storwize and run a connect
+def run_query():
+    """ Connect to a remote storwize box and run query  """
+    command = "ssh %s@%s %s -delim ':'" % (p.options.user, p.options.hostname, p.options.query)
+    if p.options.test:
+        command = "cat %s.txt" % (p.options.query)
+    return_code, stdout, stderr = runCommand(command)
+
+    if return_code != 0:
+        p.status(unknown)
+        p.add_summary("Got error %s when trying to log into remote storwize box" % return_code)
+        p.add_long_output("\ncommand:\n===============\n%s" % command)
+        p.add_long_output("\nStandard output:\n==============\n%s" % (stdout))
+        p.add_long_output("\nStandard stderr:\n==============\n%s" % (stderr))
+        p.exit()
+    if stderr:
+        p.status(unknown)
+        p.add_summary("Error when connecting to storwize: %s" % stderr)
+        p.exit()
+
+    # Parse the output of run query and return a list of "rows"
+    lines = stdout.splitlines()
+    top_line = lines.pop(0)
+    headers = top_line.split(':')
+    Row = namedtuple('Row', ' '.join(headers))
+    rows = []
+    for i in lines:
+        i = i.strip()
+        columns = i.split(':')
+        row = Row(*columns)
+        rows.append(row)
+    return rows
+
+
+def check_lsmdiskgrp():
+    p.add_summary("%s diskgroups found" % (len(rows)))
+    p.add_metric("number of groups", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("group %s is %s." % (row.name, row.status))
+        p.add_long_output("%s: used: %s out of %s" % (row.name, row.used_capacity, row.capacity))
+        # Add a performance metric
+        metric_name = "%s_capacity" % row.name
+        p.add_metric(metric_name, value=row.used_capacity, max=row.capacity)
+
+
+def check_lsdrive():
+    p.add_summary("%s drives found" % (len(rows)))
+    p.add_metric("number of drives", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("drive %s is %s" % (row.id, row.status))
+
+
+def check_lsmgrp():
+    p.add_summary("%s groups found" % (len(rows)))
+    p.add_metric("number of groups", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("group %s is %s" % (row.name, row.status))
+
+
+def check_lsenclosurebattery():
+    p.add_summary("%s batteries found" % (len(rows)))
+    p.add_metric("number of batteries", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("battery %s:%s is %s" % (row.enclosure_id, row.battery_id, row.status))
+
+
+def check_lsenclosurecanister():
+    p.add_summary("%s canisters found" % (len(rows)))
+    p.add_metric("number of canisters", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("canister %s:%s is %s" % (row.enclosure_id, row.canister_id, row.status))
+
+
+def check_lsenclosurepsu():
+    p.add_summary("%s psu found" % (len(rows)))
+    p.add_metric("number of psu", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("psu %s:%s is %s" % (row.enclosure_id, row.PSU_id, row.status))
+
+
+def check_lsenclosure():
+    p.add_summary("%s enclosures found" % (len(rows)))
+    p.add_metric("number of enclosures", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("enclosure %s is %s" % (row.id, row.status))
+
+
+def check_lsenclosureslot():
+    p.add_summary("%s slots found" % (len(rows)))
+    p.add_metric("number of slots", len(rows))
+    for row in rows:
+        if row.port_1_status != 'online':
+            p.status(critical)
+            p.add_summary("port1 on slot %s:%s is %s" % (row.enclosure_id, row.slot_id, row.port_1_status))
+        if row.port_2_status != 'online':
+            p.status(critical)
+            p.add_summary("port2 on slot %s:%s is %s" % (row.enclosure_id, row.slot_id, row.port_2_status))
+
+
+def check_lsrcrelationship():
+    p.add_summary("%s cluster relationships found" % (len(rows)))
+    p.add_metric("number of relationships", len(rows))
+    for row in rows:
+        if row.state != 'consistent_synchronized':
+            p.status(critical)
+            p.add_summary("%s is %s" % (row.consistency_group_name, row.state))
+
+
+def check_lsvdisk():
+    p.add_summary("%s disks found" % (len(rows)))
+    p.add_metric("number of disks", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.status(critical)
+            p.add_summary("disk %s is %s" % (row.name, row.status))
+
+
+def check_lsarray():
+    p.add_summary("%s arrays found" % (len(rows)))
+    p.add_metric("number of arrays", len(rows))
+    for row in rows:
+        if row.status != 'online':
+            p.add_summary("array %s is %s." % (row.mdisk_name, row.status))
+            p.status(critical)
+        if row.raid_status != 'online':
+            p.add_summary("array %s has raid status %s." % (row.mdisk_name, row.raid_status))
+            p.status(critical)
+        # Add some performance metrics
+        metric_name = row.mdisk_name + "_capacity"
+        p.add_metric(metric_name, value=row.capacity)
+
+# Run our given query, and parse the output
+rows = run_query()
+
+if query == 'lsmdiskgrp':
+    check_lsmdiskgrp()
+elif query == 'lsarray':
+    check_lsarray()
+elif query == 'lsdrive':
+    check_lsdrive()
+elif query == 'lsvdisk':
+    check_lsvdisk()
+elif query == 'lsmgrp':
+    check_lsmgrp()
+elif query == 'lsenclosure':
+    check_lsenclosure()
+elif query == 'lsenclosurebattery':
+    check_lsenclosurebattery()
+elif query == 'lsenclosurecanister':
+    check_lsenclosurecanister()
+elif query == 'lsenclosurepsu':
+    check_lsenclosurepsu()
+elif query == 'lsrcrelationship':
+    check_lsrcrelationship()
+elif query == 'lsenclosureslot':
+    check_lsenclosureslot()
+else:
+    p.status(unknown)
+    p.add_summary("unsupported query: %s. See -L for list of valid queries" % query)
+    p.exit()
+
+# Check metrics and exit
+p.check_all_metrics()
+p.exit()

check_storwize/nagios-okplugin-check_storwize.spec

@@ -0,0 +1,50 @@
+%define debug_package %{nil}
+%define plugin check_storwize
+%define packager Pall Sigurdsson <palli@opensource.is>
+
+Summary:	A Nagios plugin to check status of a storwize disk array
+Name:		nagios-okplugin-%{plugin}
+Version:	1.0.0
+Release:	1%{?dist}
+License:	GPLv3+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}
+Source0:	https://github.com/opinkerfi/nagios-plugins/tree/master/%{plugin}/releases/%{name}-%{version}.tar.gz
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	%{packager}
+BuildArch:	noarch
+Requires:	pynag
+
+
+%description
+Checks updates via PackageKit and can notify on various different situations
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+mkdir -p %{buildroot}%{_sysconfdir}/nrpe.d
+sed "s^/usr/lib64^%{_libdir}^g" nrpe.d/%{plugin}.cfg >  %{buildroot}%{_sysconfdir}/nrpe.d/%{plugin}.cfg
+# Temporary fix for selinux
+chcon system_u:object_r:nagios_unconfined_plugin_exec_t:s0 %{plugin} %{buildroot}%{_libdir}/nagios/plugins/%{plugin}
+
+%clean
+rm -rf %{buildroot}
+
+%post
+/sbin/service nrpe status &> /dev/null && /sbin/service nrpe reload || :
+
+%files
+%defattr(-,root,root,-)
+%doc README.md
+%{_libdir}/nagios/plugins/*
+%config(noreplace) %{_sysconfdir}/nrpe.d/%{plugin}.cfg
+
+%changelog
+* Fri Dec 6 2013 Pall Sigurdsson 1.0.0-1
+- Initial Packaging

check_storwize/test.sh

@@ -0,0 +1,33 @@
+CURRENT_PATH=`pwd`
+cd $CURRENT_PATH/tests/ok
+tests=`echo * | sed 's/.txt//g'`
+for i in $tests ; do
+	command="python $CURRENT_PATH/check_storwize.py --test -H testhost -U nagios -Q $i"
+	$command > /dev/null 2>&1
+	RESULT=$?
+	if [ $RESULT -ne 0 ]; then
+		echo "FAIL"
+		echo "cd `pwd`"
+		echo "Command: $command"
+	else
+		echo "$i working as expected"
+	fi 
+done
+
+
+cd $CURRENT_PATH/tests/critical
+tests=`echo * | sed 's/.txt//g'`
+for i in $tests ; do
+	command="python $CURRENT_PATH/check_storwize.py --test -H testhost -U nagios -Q $i"
+	$command > /dev/null 2>&1
+	RESULT=$?
+	if [ $RESULT -ne 2 ]; then
+		echo "FAIL"
+		echo "cd `pwd`"
+		echo "Command: $command"
+	else
+		echo "$i working as expected"
+	fi 
+done
+
+

check_time/nagios-okplugin-check_time.spec

@@ -2,13 +2,14 @@
 
 Summary:	A Nagios plugin to compare time on remote host with localhost
 Name:		nagios-okplugin-check_time
-Version:	1.0.1
+Version:	1.0.3
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.is/trac/wiki/check_time
 Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_time/releases/nagios-okplugin-check_time-%{version}.tar.gz
 Requires:	nagios-nrpe
+Requires:	bc
 BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Packager:	Pall Sigurdsson <palli@opensource.is>
 
@@ -40,6 +41,12 @@ rm -rf %{buildroot}
 /etc/nrpe.d/check_time.cfg
 
 %changelog
+* Fri Apr 04 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.3-1
+- check_time - Added requirement for bc (tommi@tommi.org)
+
+* Tue Mar 25 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.2-1
+- Bump version
+
 * Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 1.0.1-1
 - new package built with tito
 

check_uptime/nagios-okplugin-check_uptime.spec

@@ -2,7 +2,7 @@
 
 Summary:	A Nagios plugin to check uptime of a remote host via NRPE
 Name:		nagios-okplugin-check_uptime
-Version:	1.0.1
+Version:	1.0.3
 Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
@@ -41,6 +41,12 @@ rm -rf %{buildroot}
 /etc/nrpe.d/check_uptime.cfg
 
 %changelog
+* Sun Apr 13 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.3-1
+- Update tag
+
+* Mon Dec 30 2013 Tomas Edwardsson <tommi@tommi.org> 1.0.2-1
+- Updated tag for build with newer tito
+
 * Mon Mar 12 2012 Pall Sigurdsson <palli@opensource.is> 1.0.1-1
 - new package built with tito
 

check_xroad_token/check_xroad_token.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+xroad_list_tokens=$(signer-console list-tokens)
+
+if [[ $xroad_list_tokens == "Token: 0 (OK, writable, available, active)" ]]
+then
+        echo "OK - $xroad_list_tokens"
+        exit 0
+elif [[ $xroad_list_tokens != "Token: 0 (OK, writable, available, active)" ]]
+then
+        echo "Critical - $xroad_list_tokens"
+        exit 2
+else
+        echo "Unknown - $xroad_list_tokens"
+        exit 3
+fi

check_xroad_token/nagios-okplugin-check_xroad_token.spec

@@ -0,0 +1,52 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to check status of XROAD soft-token
+Name:		nagios-okplugin-check_xroad_token
+Version:	1.2
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/issues
+Source0:	http://opensource.ok.is/trac/browser/nagios-plugins/check_xroad_token/releases/nagios-okplugin-check_xroad_token-%{version}.tar.gz
+Requires:	nagios-nrpe
+Requires:	xroad-signer
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Gardar Thorsteinsson <gardar@ok.is>
+
+
+%description
+A Nagios plugin to check status of XROAD soft-token
+
+
+%prep
+%setup -q
+#perl -pi -e "s|/usr/lib64|%{_libdir}|g" nrpe.d/check_xroad_token.cfg
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 check_xroad_token.sh %{buildroot}%{_libdir}/nagios/plugins/check_xroad_token.sh
+install -D -p -m 0755 nrpe.d/check_xroad_token.cfg %{buildroot}/etc/nrpe.d/check_xroad_token.cfg
+install -D -p -m 0644 sudoers.d/check_xroad_token %{buildroot}/etc/sudoers.d/check_xroad_token
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+#%doc README LICENSE
+%{_libdir}/nagios/plugins/*
+/etc/nrpe.d/check_xroad_token.cfg
+/etc/sudoers.d/check_xroad_token
+
+%post
+restorecon -v %{_libdir}/nagios/plugins/check_xroad_token.sh /etc/nrpe.d/check_xroad_token.cfg /etc/sudoers.d/check_xroad_token
+
+%changelog
+* Mon Sep 14 2020 Your Name <you@example.com> 1.2-1
+- new package built with tito
+
+* Fri Sep 11 2020  Gardar Thorsteinsson <gardart@gmail.com> 1.0.1-1
+- Initial packaging

check_xroad_token/nrpe.d/check_xroad_token.cfg

@@ -0,0 +1,2 @@
+# xroad plugin to check for tokens
+command[check_xroad_token]=sudo -u xroad /usr/lib64/nagios/plugins/check_xroad_token.sh

check_xroad_token/readme.md

@@ -0,0 +1,9 @@
+# Required steps to use this check
+
+```shell
+# On RHEL/Centos
+sudo semanage permissive -a nrpe_t
+sudo setsebool -P nagios_run_sudo 1
+sudo yum install nagios-okplugin-check_xroad_token -y
+sudo systemctl restart nrpe
+```

check_xroad_token/sudoers.d/check_xroad_token

@@ -0,0 +1,2 @@
+Defaults:nrpe   !requiretty
+nrpe            ALL = (xroad) NOPASSWD: /usr/bin/signer-console list-tokens, /usr/lib64/nagios/plugins/check_xroad_token.sh

check_yum/check_yum

@@ -1,24 +1,29 @@
-#!/usr/bin/python
-# coding=utf-8
+#!/usr/bin/env python
+#
+#  Author: Hari Sekhon
+#  Date: 2008-04-29 17:21:08 +0100 (Tue, 29 Apr 2008)
+#
+#  https://github.com/harisekhon/nagios-plugins
+#
+#  License: see accompanying LICENSE file
+#
 
-"""Nagios plugin to check the YUM package management system for package updates.
-   Can optionally alert on any available updates as well as just
-   security related updates"""
+"""
+Nagios plugin to test for Yum updates on RedHat / CentOS Linux.
 
-__title__   = "check_yum"
-__version__ = "0.8.0"
+Can optionally alert on any available updates as well as just security related updates
 
-# Standard Nagios return codes
-OK       = 0
-WARNING  = 1
-CRITICAL = 2
-UNKNOWN  = 3
+See also: check_yum.pl (also part of the Advanced Nagios Plugins Collection)
+
+Tested on CentOS 5 / 6 / 7
+"""
 
 import os
 import re
 import sys
 import signal
 OLD_PYTHON = False
+# pylint: disable=wrong-import-position
 try:
     from subprocess import Popen, PIPE, STDOUT
 except ImportError:
@@ -26,28 +31,41 @@ except ImportError:
     import commands
 from optparse import OptionParser
 
+__author__ = "Hari Sekhon"
+__title__ = "Nagios Plugin for Yum updates on RedHat/CentOS systems"
+__version__ = "0.8.9"
+
+# Standard Nagios return codes
+OK = 0
+WARNING = 1
+CRITICAL = 2
+UNKNOWN = 3
+
 DEFAULT_TIMEOUT = 30
 
+support_msg = "Please make sure you have upgraded to the latest version from " + \
+              "https://github.com/harisekhon/nagios-plugins. If the problem persists, " + \
+              "please raise a ticket at https://github.com/harisekhon/nagios-plugins/issues "+ \
+              "with the full -vvv output"
 
-def end(status, message, perfdata=''):
+def end(status, message):
     """Exits the plugin with first arg as the return code and the second
     arg as the message to output"""
-    
+
     check = "YUM "
     if status == OK:
-        print "%sOK: %s | %s" % (check, message, perfdata)
+        print "%sOK: %s" % (check, message)
         sys.exit(OK)
     elif status == WARNING:
-        print "%sWARNING: %s | %s" % (check, message, perfdata)
+        print "%sWARNING: %s" % (check, message)
         sys.exit(WARNING)
     elif status == CRITICAL:
-        print "%sCRITICAL: %s | %s" % (check, message, perfdata)
+        print "%sCRITICAL: %s" % (check, message)
         sys.exit(CRITICAL)
     else:
         print "UNKNOWN: %s" % message
         sys.exit(UNKNOWN)
 
-
 YUM = "/usr/bin/yum"
 
 def check_yum_usable():
@@ -62,26 +80,28 @@ def check_yum_usable():
         end(UNKNOWN, "%s is not executable" % YUM)
 
 
-class YumTester:
+class YumTester(object):
     """Class to hold all portage test functions and state"""
 
     def __init__(self):
         """Initialize all object variables"""
 
-        self.all_updates        = False
-        self.no_cache_update    = False
-        self.no_warn_on_lock    = False
-        self.enable_repo        = ""
-        self.disable_repo       = ""
-        self.timeout            = DEFAULT_TIMEOUT
-        self.verbosity          = 0
+        self.all_updates = False
+        self.no_cache_update = False
+        self.no_warn_on_lock = False
+        self.enable_repo = ""
+        self.disable_repo = ""
+        self.disable_plugin = ""
+        self.yum_config = ""
+        self.timeout = DEFAULT_TIMEOUT
+        self.verbosity = 0
         self.warn_on_any_update = False
 
     def validate_all_variables(self):
-        """Validates all object variables to make sure the 
+        """Validates all object variables to make sure the
         environment is sane"""
 
-        if self.timeout == None:
+        if self.timeout is None:
             self.timeout = DEFAULT_TIMEOUT
         try:
             self.timeout = int(self.timeout)
@@ -92,7 +112,7 @@ class YumTester:
         if self.timeout < 1 or self.timeout > 3600:
             end(UNKNOWN, "Timeout must be a number between 1 and 3600 seconds")
 
-        if self.verbosity == None:
+        if self.verbosity is None:
             self.verbosity = 0
         try:
             self.verbosity = int(self.verbosity)
@@ -104,13 +124,13 @@ class YumTester:
 
 
     def run(self, cmd):
-        """runs a system command and returns 
+        """runs a system command and returns
         an array of lines of the output"""
 
-        if cmd == "" or cmd == None:
+        if not cmd:
             end(UNKNOWN, "Internal python error - " \
                        + "no cmd supplied for run function")
-       
+
         if self.no_cache_update:
             cmd += " -C"
 
@@ -121,32 +141,43 @@ class YumTester:
             for repo in self.disable_repo.split(","):
                 cmd += " --disablerepo=%s" % repo
 
+        if self.disable_plugin:
+            # --disableplugin can take a comma separated list directly
+            #for plugin in self.disable_plugin.split(","):
+                #cmd += " --disableplugin=%s" % plugin
+            cmd += " --disableplugin=%s" % self.disable_plugin
+
+        if self.yum_config:
+            for repo in self.yum_config.split(","):
+                cmd += " --config=%s" % repo
+
         self.vprint(3, "running command: %s" % cmd)
 
         if OLD_PYTHON:
             self.vprint(3, "subprocess not available, probably old python " \
                          + "version, using shell instead")
+            os.environ['LANG'] = "en_US"
             returncode, stdout = commands.getstatusoutput(cmd)
             if returncode >= 256:
                 returncode = returncode / 256
         else:
             try:
-                process = Popen( cmd.split(), 
-                                 stdin=PIPE, 
-                                 stdout=PIPE, 
-                                 stderr=STDOUT )
+                env = {'LANG': 'en_US'}
+                process = Popen(cmd.split(), stdin=PIPE, stdout=PIPE, stderr=STDOUT, env=env)
             except OSError, error:
                 error = str(error)
                 if error == "No such file or directory":
                     end(UNKNOWN, "Cannot find utility '%s'" % cmd.split()[0])
                 end(UNKNOWN, "Error trying to run utility '%s' - %s" \
                                                   % (cmd.split()[0], error))
-        
+
             output = process.communicate()
+            # for using debug outputs, either do not comment above line or explicitly set exit code below
+            #output = [open(os.path.dirname(__file__) + '/test_input.txt').read(), '']
             returncode = process.returncode
             stdout = output[0]
-        
-        if stdout == None or stdout == "":
+
+        if not stdout:
             end(UNKNOWN, "No output from utility '%s'" % cmd.split()[0])
 
         self.vprint(3, "Returncode: '%s'\nOutput: '%s'" \
@@ -158,19 +189,21 @@ class YumTester:
 
 
     def check_returncode(self, returncode, output):
-        """Takes the returncode and output (as an array of lines) 
-        of the YUM program execution and tests for failures, exits 
+        """Takes the returncode and output (as an array of lines)
+        of the yum program execution and tests for failures, exits
         with an appropriate message if any are found"""
 
         if returncode == 0:
-            pass
+            for line in output:
+                if "You must run this command as root" in line:
+                    end(UNKNOWN, "You must run this plugin as root")
         elif returncode == 100:
             # Updates Available
             pass
         elif returncode == 200:
             if "lock" in output[-2] or "another copy is running" in output[-2]:
                 msg = "Cannot check for updates, " \
-                    + "another instance of YUM is running"
+                    + "another instance of yum is running"
                 if self.no_warn_on_lock:
                     end(OK, msg)
                 else:
@@ -179,10 +212,15 @@ class YumTester:
                 output = self.strip_output(output)
                 end(UNKNOWN, "%s" % output)
         else:
-            if not 'Loading "security" plugin' in output \
+            if 'No more mirrors to try' in output:
+                end(UNKNOWN, 'connectivity issue to repos: \'No more mirrors to try\'. ' + \
+                             'You could also try running --cache-only and ' + \
+                             'scheduling a separate \'yum makecache\' via cron or similar')
+            elif (not ('Loading "security" plugin' in output or 'Loaded plugins:.*security' in output)) \
                or "Command line error: no such option: --security" in output:
-                end(UNKNOWN, "Security plugin for YUM is required. Try to "    \
-                           + "'yum install yum-security' and then re-run "     \
+                end(UNKNOWN, "Security plugin for yum is required. Try to "    \
+                           + "'yum install yum-security' (RHEL5) or " \
+                           + "'yum install yum-plugin-security' (RHEL6) and then re-run " \
                            + "this plugin. Alternatively, to just alert on "   \
                            + "any update which does not require the security " \
                            + "plugin, try --all-updates")
@@ -192,8 +230,8 @@ class YumTester:
 
 
     def strip_output(self, output):
-        """Cleans up the output from the plugin and returns it. 
-        Takes and returns an array of the lines of output 
+        """Cleans up the output from the plugin and returns it.
+        Takes and returns an array of the lines of output
         and returns a single string"""
 
         self.vprint(3, "stripping output of 'Loading ... plugin' lines")
@@ -243,149 +281,137 @@ class YumTester:
 
         return number_security_updates, number_other_updates
 
-    
+
     def get_all_updates(self):
-        """Gets all updates. Returns a single integer of the 
+        """Gets all updates. Returns a single integer of the
         number of available updates"""
 
         cmd = "%s check-update" % YUM
-        
+
         output = self.run(cmd)
 
-        output2 = "\n".join(output).split("\n\n")
-        if self.verbosity >= 4 :
+        output2 = [_ for _ in "\n".join(output).split("\n\n") if  _]
+        if self.verbosity >= 4:
             for section in output2:
                 print "\nSection:\n%s\n" % section
         if len(output2) > 2 or \
-           not ( "Setting up repositories" in output2[0] or \
-                 "Loaded plugins: " in output2[0] or \
-                 re.search('Loading\s+".+"\s+plugin', output2[0]) ):
+           not ("Setting up repositories" in output2[0] or \
+                "Loaded plugins: " in output2[0] or \
+                re.search(r'Loading\s+".+"\s+plugin', output2[0])):
             end(WARNING, "Yum output signature does not match current known "  \
-                       + "format. Please make sure you have upgraded to the "  \
-                       + "latest version of this plugin. If the problem "      \
-                       + "persists, please contact the author for a fix")
+                       + "format. " + support_msg)
+        number_packages = 0
         if len(output2) == 1:
-            # There are no updates but we have passed 
+            # There are no updates but we have passed
             # the loading and setting up of repositories
-            number_packages = 0
+            pass
         else:
-            number_packages = len([x for x in output2[1].split("\n") \
-                                                        if len(x.split()) > 1 ])
-        
+            for line in output2[1].split("\n"):
+                if len(line.split()) > 1 and \
+                   line[0:1] != " " and \
+                   "Obsoleting Packages" not in line:
+                    number_packages += 1
+
         try:
             number_packages = int(number_packages)
             if number_packages < 0:
                 raise ValueError
         except ValueError:
             end(UNKNOWN, "Error parsing package information, invalid package " \
-                       + "number, YUM output may have changed. Please make "   \
-                       + "sure you have upgraded to the latest version of "    \
-                       + "this plugin. If the problem persists, then please "  \
-                       + "contact the author for a fix")
+                       + "number, yum output may have changed. " + support_msg)
 
-        # Extra layer of checks. This is a security plugin so it's preferable 
-        # to fail on error rather than pass silently leaving you with an 
+        # Extra layer of checks. This is a security plugin so it's preferable
+        # to fail on error rather than pass silently leaving you with an
         # insecure system
         count = 0
+        re_kernel_security_update = re.compile('^Security: kernel-.+ is an installed security update')
+        re_kernel_update = re.compile('^Security: kernel-.+ is the currently running version')
         re_package_format = \
-                re.compile("^.+\.(i[3456]86|x86_64|noarch)\s+.+\s+.+$")
-        # This is to work around a YUM truncation issue effectively changing
+                re.compile(r'^.+\.(i[3456]86|x86_64|noarch)\s+.+\s+.+$')
+        # This is to work around a yum truncation issue effectively changing
         # the package output format. Currently only very long kmod lines
         # are seen to have caused this so we stick to what we know for safety
         # and raise an unknown error on anything else for maximum security
         #re_package_format_truncated = \
         #        re.compile("^[\w-]+-kmod-\d[\d\.-]+.*\s+.+\s+.+$")
+        obsoleting_packages = False
         for line in output:
+            if ' excluded ' in line:
+                continue
+            elif obsoleting_packages and line[0:1] == " ":
+                continue
+            elif "Obsoleting Packages" in line:
+                obsoleting_packages = True
+                continue
+            elif re_kernel_security_update.match(line):
+                end(WARNING, 'Kernel security update is installed but requires a reboot')
+            elif re_kernel_update.match(line):
+                continue
             if re_package_format.match(line):
                 count += 1
         if count != number_packages:
             end(UNKNOWN, "Error parsing package information, inconsistent "    \
-                       + "package count, yum output may have changed. Please " \
-                       + "make sure you have upgraded to the latest version "  \
-                       + "of this plugin. If the problem persists, then "      \
-                       + "please contact the author for a fix")
+                       + "package count (%d count vs %s num packages)" % (count, number_packages) \
+                       + ", yum output may have changed. " + support_msg)
 
-        return number_packages, "'updates'=%s" % (number_packages)
+        return number_packages
 
-    def get_security_updateinfo(self):
-        """Fetches errata numbers and package names"""
-
-        cmd = "%s list-security" % YUM
-
-        output = self.run(cmd)
-
-        errata = []
-
-        for line in output:
-	    try:
-                if line.split()[1] != "security" and line.split()[1][-4:] != "Sec.":
-                    continue
-            except:
-                continue
-	    (advisoryid, etype, package) = line.split()
-            errata.append( { "name": package, "advisory": advisoryid } )
-    
-        return errata
 
     def get_security_updates(self):
         """Gets all updates, but differentiates between
-        security and normal updates. Returns a tuple of the number 
+        security and normal updates. Returns a tuple of the number
         of security and normal updates"""
 
         cmd = "%s --security check-update" % YUM
 
         output = self.run(cmd)
-        
-        re_security_summary_rhel5 = re.compile("Needed \d+ of \d+ packages, for security")
-        re_security_summary_rhel6 = re.compile("\d+ package\(s\) needed for security, out of \d+ available")
-        re_no_security_updates_available_rhel5 = re.compile("No packages needed, for security, \d+ available")
-        re_no_security_updates_available_rhel6 = re.compile("No packages needed for security; \d+ packages available")
+
+        re_security_summary = \
+                re.compile(r'Needed (\d+) of (\d+) packages, for security')
+        re_summary_rhel6 = re.compile(r'(\d+) package\(s\) needed for security, out of (\d+) available')
+        re_no_sec_updates = \
+                re.compile(r'No packages needed,? for security[;,] (\d+) (?:packages )?available')
+        re_kernel_update = re.compile(r'^Security: kernel-.+ is an installed security update')
         summary_line_found = False
         for line in output:
-            if re_no_security_updates_available_rhel5.match(line):
+            _ = re_summary_rhel6.match(line)
+            if _:
+                summary_line_found = True
+                number_security_updates = _.group(1)
+                number_total_updates = _.group(2)
+                break
+            _ = re_no_sec_updates.match(line)
+            if _:
                 summary_line_found = True
                 number_security_updates = 0
-                number_total_updates    = line.split()[5]
+                number_total_updates = _.group(1)
                 break
-            if re_no_security_updates_available_rhel6.match(line):
+            _ = re_security_summary.match(line)
+            if _:
                 summary_line_found = True
-                number_security_updates = 0
-                number_total_updates    = line.split()[5]
-                break
-            if re_security_summary_rhel5.match(line):
-                summary_line_found = True
-                number_security_updates = line.split()[1]
-                number_total_updates    = line.split()[3]
-                break
-            if re_security_summary_rhel6.match(line):
-                summary_line_found = True
-                number_security_updates = line.split()[0]
-                number_total_updates    = line.split()[7]
+                number_security_updates = _.group(1)
+                number_total_updates = _.group(2)
                 break
+            _ = re_kernel_update.match(line)
+            if _:
+                end(CRITICAL, "Kernel security update is installed but requires a reboot")
 
         if not summary_line_found:
-            end(WARNING, "Cannot find summary line in YUM output. Please "     \
-                       + "make sure you have upgraded to the latest version "  \
-                       + "of this plugin. If the problem persists, please "    \
-                       + "contact the author for a fix")
+            end(WARNING, "Cannot find summary line in yum output. " + support_msg)
 
         try:
             number_security_updates = int(number_security_updates)
             number_total_updates = int(number_total_updates)
         except ValueError:
-            end(WARNING, "Error parsing package information, YUM output " \
-                       + "may have changed. Please make sure you have "     \
-                       + "upgraded to the latest version of this plugin. "  \
-                       + "If the problem persists, the please contact the " \
-                       + "author for a fix")
+            end(WARNING, "Error parsing package information, yum output " \
+                       + "may have changed. " + support_msg)
 
         number_other_updates = number_total_updates - number_security_updates
-         
-        if len(output) > number_total_updates + 25:
+
+        from_excluded_regex = re.compile(' from .+ excluded ')
+        if len([_ for _ in output if not from_excluded_regex.search(_)]) > number_total_updates + 25:
             end(WARNING, "Yum output signature is larger than current known "  \
-                       + "format, please make sure you have upgraded to the "  \
-                       + "latest version of this plugin. If the problem "      \
-                       + "persists, please contact the author for a fix")
+                       + "format. " + support_msg)
 
         return number_security_updates, number_other_updates
 
@@ -394,26 +420,25 @@ class YumTester:
         """Starts tests and controls logic flow"""
 
         check_yum_usable()
-        self.vprint(3, "%s - Version %s\n" \
-            % (__title__, __version__))
-        
+        self.vprint(3, "%s - Version %s\nAuthor: %s\n" \
+            % (__title__, __version__, __author__))
+
         self.validate_all_variables()
         self.set_timeout()
-  
+
         if self.all_updates:
             return self.test_all_updates()
-        else:
-            return self.test_security_updates()
+        return self.test_security_updates()
 
 
     def test_all_updates(self):
-        """Tests for all updates, and returns a tuple 
+        """Tests for all updates, and returns a tuple
         of the status code and output"""
 
-        status  = UNKNOWN
-        message = "code error - please contact author for a fix"
+        status = UNKNOWN
+        message = "code error. " + support_msg
 
-        number_updates, perfdata = self.get_all_updates()
+        number_updates = self.get_all_updates()
         if number_updates == 0:
             status = OK
             message = "0 Updates Available"
@@ -424,20 +449,20 @@ class YumTester:
             else:
                 message = "%s Updates Available" % number_updates
 
-        return status, message, perfdata
+        message += " | total_updates_available=%s" % number_updates
+
+        return status, message
 
 
     def test_security_updates(self):
         """Tests for security updates and returns a tuple
         of the status code and output"""
 
-        status  = UNKNOWN
-        message = "code error - please contact author for a fix"
-        
+        status = UNKNOWN
+        message = "code error. " + support_msg
+
         number_security_updates, number_other_updates = \
                                                     self.get_security_updates()
-
-	perfdata = "'security_updates'=%s 'other_updates'=%s" % (number_security_updates, number_other_updates)
         if number_security_updates == 0:
             status = OK
             message = "0 Security Updates Available"
@@ -448,6 +473,7 @@ class YumTester:
             elif number_security_updates > 1:
                 message = "%s Security Updates Available" \
                                                     % number_security_updates
+
         if number_other_updates != 0:
             if self.warn_on_any_update and status != CRITICAL:
                 status = WARNING
@@ -456,13 +482,10 @@ class YumTester:
             else:
                 message += ". %s Non-Security Updates Available" \
                                                         % number_other_updates
-                                
-        if number_security_updates and self.long_output:
-            errata = self.get_security_updateinfo()
-            for e in errata:
-                message += "\n%s - %s" % (e['advisory'], e['name'])
-    
-        return status, message, perfdata
+        message += " | security_updates_available=%s non_security_updates_available=%s total_updates_available=%s" \
+                   % (number_security_updates, number_other_updates, number_security_updates + number_other_updates)
+
+        return status, message
 
 
     def vprint(self, threshold, message):
@@ -479,88 +502,97 @@ def main():
     tester = YumTester()
     parser = OptionParser()
 
-    parser.add_option( "--all-updates",
-                       action="store_true",
-                       dest="all_updates",
-                       help="Does not distinguish between security and "      \
-                          + "non-security updates, but returns critical for " \
-                          + "any available update. This may be used if the "  \
-                          + "YUM security plugin is absent or you want to "   \
-                          + "maintain every single package at the latest "    \
-                          + "version. You may want to use "                   \
-                          + "--warn-on-any-update instead of this option")
+    parser.add_option("-A",
+                      "--all-updates",
+                      action="store_true",
+                      dest="all_updates",
+                      help="Does not distinguish between security and "      \
+                         + "non-security updates, but returns critical for " \
+                         + "any available update. This may be used if the "  \
+                         + "yum security plugin is absent or you want to "   \
+                         + "maintain every single package at the latest "    \
+                         + "version. You may want to use "                   \
+                         + "--warn-on-any-update instead of this option")
 
-    parser.add_option( "--warn-on-any-update",
-                       action="store_true",
-                       dest="warn_on_any_update",
-                       help="Warns if there are any (non-security) package "   \
-                          + "updates available. By default only warns when "   \
-                          + "security related updates are available. If "      \
-                          + "--all-updates is used, then this option is "      \
-                          + "redundant as --all-updates will return a "        \
-                          + "critical result on any available update, "        \
-                          + "whereas using this switch still allows you to "   \
-                          + "differentiate between the severity of updates ")
+    parser.add_option("-W",
+                      "--warn-on-any-update",
+                      action="store_true",
+                      dest="warn_on_any_update",
+                      help="Warns if there are any (non-security) package "   \
+                         + "updates available. By default only warns when "   \
+                         + "security related updates are available. If "      \
+                         + "--all-updates is used, then this option is "      \
+                         + "redundant as --all-updates will return a "        \
+                         + "critical result on any available update, "        \
+                         + "whereas using this switch still allows you to "   \
+                         + "differentiate between the severity of updates ")
 
-    parser.add_option( "-C",
-                       "--cache-only",
-                       action="store_true",
-                       dest="no_cache_update",
-                       help="Run entirely from cache and do not update the " \
-                          + "cache when running YUM. Useful if you have "    \
-                          + "'yum makecache' cronned so that the nagios "    \
-                          + "check itself doesn't have to do it, possibly "  \
-                          + "speeding up execution (by 1-2 seconds in tests)")
+    parser.add_option("-C",
+                      "--cache-only",
+                      action="store_true",
+                      dest="no_cache_update",
+                      help="Run entirely from cache and do not update the " \
+                         + "cache when running yum. Useful if you have "    \
+                         + "'yum makecache' cronned so that the nagios "    \
+                         + "check itself doesn't have to do it, possibly "  \
+                         + "speeding up execution (by 1-2 seconds in tests)")
 
-    parser.add_option( "--no-warn-on-lock",
-                       action="store_true",
-                       dest="no_warn_on_lock",
-                       help="Return OK instead of WARNING when YUM is locked " \
-                          + "and fails to check for updates due to another "   \
-                          + "instance running. This is not recommended from "  \
-                          + "the security standpoint, but may be wanted to "   \
-                          + "reduce the number of alerts that may "            \
-                          + "intermittently pop up when someone is running "   \
-                          + "YUM interactively for package management")
+    parser.add_option("-c",
+                      "--config",
+                      dest="yum_config",
+                      help="Run with custom repository config in order to use " \
+                         + "custom repositories in case of special setup for")
 
-    parser.add_option( "--enablerepo",
-                       dest="repository_to_enable",
-                       help="Explicitly enables a reposity when calling YUM. "
-                          + "Can take a comma separated list of repositories")
+    parser.add_option("-N",
+                      "--no-warn-on-lock",
+                      action="store_true",
+                      dest="no_warn_on_lock",
+                      help="Return OK instead of WARNING when yum is locked " \
+                         + "and fails to check for updates due to another "   \
+                         + "instance running. This is not recommended from "  \
+                         + "the security standpoint, but may be wanted to "   \
+                         + "reduce the number of alerts that may "            \
+                         + "intermittently pop up when someone is running "   \
+                         + "yum for package management")
 
-    parser.add_option( "--disablerepo",
-                       dest="repository_to_disable",
-                       help="Explicitly disables a repository when calling YUM "
-                          + "Can take a comma separated list of repositories")
+    parser.add_option("-e",
+                      "--enablerepo",
+                      dest="repository_to_enable",
+                      help="Explicitly enables a reposity when calling yum. " +
+                      "Can take a comma separated list of repositories")
 
-    parser.add_option( "-l",
-                       "--long-output",
-                       action="store_true",
-                       dest="long_output",
-                       help="Shows more detailed output including the errata "
-                          + "ID.")
+    parser.add_option("-d",
+                      "--disablerepo",
+                      dest="repository_to_disable",
+                      help="Explicitly disables a repository when calling yum. " \
+                         + "Can take a comma separated list of repositories")
 
-    parser.add_option( "-t",
-                       "--timeout",
-                       dest="timeout",
-                       help="Sets a timeout in seconds after which the "  \
-                           +"plugin will exit (defaults to %s seconds). " \
+    parser.add_option("--disableplugin",
+                      dest="plugin_to_disable",
+                      help="Explicitly disables a plugin when calling yum. " \
+                         + "Can take a comma separated list of plugins")
+
+    parser.add_option("-t",
+                      "--timeout",
+                      dest="timeout",
+                      help="Sets a timeout in seconds after which the "  \
+                          +"plugin will exit (defaults to %s seconds). " \
                                                       % DEFAULT_TIMEOUT)
 
-    parser.add_option( "-v", 
-                       "--verbose", 
-                       action="count", 
-                       dest="verbosity",
-                       help="Verbose mode. Can be used multiple times to "     \
-                          + "increase output. Use -vvv for debugging output. " \
-                          + "By default only one result line is printed as "   \
-                          + "per Nagios standards")
+    parser.add_option("-v",
+                      "--verbose",
+                      action="count",
+                      dest="verbosity",
+                      help="Verbose mode. Can be used multiple times to "     \
+                         + "increase output. Use -vvv for debugging output. " \
+                         + "By default only one result line is printed as "   \
+                         + "per Nagios standards")
 
-    parser.add_option( "-V",
-                       "--version",
-                       action="store_true",
-                       dest="version",
-                       help="Print version number and exit")
+    parser.add_option("-V",
+                      "--version",
+                      action="store_true",
+                      dest="version",
+                      help="Print version number and exit")
 
     (options, args) = parser.parse_args()
 
@@ -568,23 +600,24 @@ def main():
         parser.print_help()
         sys.exit(UNKNOWN)
 
-    tester.all_updates                 = options.all_updates
-    tester.no_cache_update             = options.no_cache_update
-    tester.no_warn_on_lock             = options.no_warn_on_lock
-    tester.enable_repo                 = options.repository_to_enable
-    tester.disable_repo                = options.repository_to_disable
-    tester.timeout                     = options.timeout
-    tester.verbosity                   = options.verbosity
-    tester.warn_on_any_update          = options.warn_on_any_update
-    tester.long_output                 = options.long_output
+    tester.all_updates = options.all_updates
+    tester.no_cache_update = options.no_cache_update
+    tester.no_warn_on_lock = options.no_warn_on_lock
+    tester.enable_repo = options.repository_to_enable
+    tester.disable_repo = options.repository_to_disable
+    tester.disable_plugin = options.plugin_to_disable
+    tester.yum_config = options.yum_config
+    tester.timeout = options.timeout
+    tester.verbosity = options.verbosity
+    tester.warn_on_any_update = options.warn_on_any_update
 
     if options.version:
-        print "%s - Version %s\n" \
-            % (__title__, __version__)
+        print "%s - Version %s\nAuthor: %s\n" \
+            % (__title__, __version__, __author__)
         sys.exit(OK)
-    
-    result, output, perfdata = tester.test_yum_updates()
-    end(result, output, perfdata)
+
+    result, output = tester.test_yum_updates()
+    end(result, output)
 
 
 if __name__ == "__main__":
@@ -593,37 +626,3 @@ if __name__ == "__main__":
     except KeyboardInterrupt:
         print "Caught Control-C..."
         sys.exit(CRITICAL)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-#Copyright © ?–?, Hari Sekhon <harisekhon@gmail.com>.
-#Copyright © 2012, Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>.
-#All rights reserved.
-#
-#
-#This program is free software; you can redistribute it and/or
-#modify it under the terms of the GNU General Public License
-#as published by the Free Software Foundation; version 2
-#of the License.
-#
-#This program is distributed in the hope that it will be useful,
-#but WITHOUT ANY WARRANTY; without even the implied warranty of
-#MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-#GNU General Public License for more details.
-#
-#You should have received a copy of the GNU General Public License
-#along with this program; if not, write to the Free Software
-#Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

check_yum/nagios-okplugin-check_yum.spec

@@ -2,8 +2,8 @@
 
 Summary:	A Nagios plugin to check yum updates via NRPE
 Name:		nagios-okplugin-check_yum
-Version:	0.8.0
-Release:	2%{?dist}
+Version:	1
+Release:	1%{?dist}
 License:	GPLv2+
 Group:		Applications/System
 URL:		http://opensource.is/trac/wiki/check_yum
@@ -24,11 +24,13 @@ A Nagios plugin to check for updates using yum via NRPE
 
 %build
 perl -pi -e "s|/usr/lib|%{_libdir}|g" sudoers.d/check_yum
+perl -pi -e "s|/usr/lib|%{_libdir}|g" nrpe.d/check_yum.cfg
 
 %install
 rm -rf %{buildroot}
 install -D -p -m 0755 check_yum %{buildroot}%{_libdir}/nagios/plugins/check_yum
 install -D -p -m 0440 sudoers.d/check_yum %{buildroot}/etc/sudoers.d/check_yum
+install -D -p -m 0644 nrpe.d/check_yum.cfg %{buildroot}/etc/nrpe.d/check_yum.cfg
 
 
 %clean
@@ -40,7 +42,24 @@ rm -rf %{buildroot}
 #%{_libdir}/nagios/plugins/*
 %{_libdir}/nagios/plugins/check_yum
 /etc/sudoers.d/check_yum
+/etc/nrpe.d/check_yum.cfg
 
 %changelog
+* Thu Feb 20 2014 Pall Sigurdsson <palli@opensource.is> 1-1
+- Merge branch 'master' of github.com:opinkerfi/nagios-plugins
+  (palli@opensource.is)
+
+* Mon May 27 2013 Tomas Edwardsson <tommi@tommi.org> 0.8.2-1
+- Fixed nrpe with invalid libdir (tommi@tommi.org)
+
+* Mon May 27 2013 Tomas Edwardsson <tommi@tommi.org> 0.8.1-1
+- Added missing nrpe config (tommi@tommi.org)
+- Initial rpm packaging (tommi@tommi.org)
+- fix for changed output in list-security query (pall.valmundsson@gmail.com)
+- Merge branch 'master' of github.com:opinkerfi/misc (palli@opensource.is)
+- Added perfdata and longoutput with ERRATA IDs (tommi@tommi.org)
+- Added perfdata and longoutput with ERRATA IDs (tommi@tommi.org)
+- Updated to new upstream release (tommi@tommi.org)
+
 * Tue Apr 16 2013 Tomas Edwardsson <tommi@opensource.is> 0.8.0-2
 - Initial packaging

misc/check_mssql_query.py

@@ -0,0 +1,72 @@
+#!/usr/bin/python
+
+import pynag.Plugins
+import pymssql
+
+helper = pynag.Plugins.PluginHelper()
+
+
+helper.parser.add_option('--host', help="MSSQL Server to connect to", dest="host")
+helper.parser.add_option('--username', help="MSSQL Username to connect with", dest="username")
+helper.parser.add_option('--password', help="MSSQL Server to connect to", dest="password")
+helper.parser.add_option('--database', help="MSSQL Database", dest="database")
+helper.parser.add_option('--query', help="MSSQL Query to execute", dest="query")
+
+# When parse_arguments is called some default options like --threshold and --no-longoutput are automatically added
+helper.parse_arguments()
+
+
+host = helper.options.host
+username = helper.options.username
+password = helper.options.password
+database = helper.options.database
+query = helper.options.query
+#enable_debugging = helper.options.debug
+enable_debugging = helper.options.verbose
+
+def debug(message):
+  if enable_debugging:
+    print "debug: %s" % str(message)
+
+  
+if not host:
+  helper.parser.error('--host is required')
+if not username:
+  helper.parser.error('--username is required')
+if not password:
+  helper.parser.error('--password is required')
+if not database:
+  helper.parser.error('--database is required')
+
+
+
+# Actual coding logic starts
+
+conn = pymssql.connect(host=host, user=username, password=password, database=database)
+debug("connecting to host")
+cur = conn.cursor()
+debug("Executing sql query: %s" % query)
+cur.execute(query)
+
+status,text = None,None
+for row in cur:
+  debug(row)
+  status, text = row[0], row[1]
+  if text == '':
+    text = "No text in this field"
+  if status not in pynag.Plugins.state_text:
+    helper.add_summary("Invalid status: %s" % status)
+    status = pynag.Plugins.unknown
+
+  helper.status(status)
+  helper.add_long_output("%s: %s" % (pynag.Plugins.state_text.get(status,'unknown'), text) )
+  
+
+if not helper.get_summary():
+  if not text:
+    helper.add_summary("Hey! Af hverju er enginn texti?")
+  else: 
+    helper.add_summary(text)
+
+helper.check_all_metrics()
+helper.exit()

misc/check_oracle_query.py

@@ -0,0 +1,82 @@
+#!/usr/bin/python
+
+import pynag.Plugins
+import cx_Oracle
+
+helper = pynag.Plugins.PluginHelper()
+
+
+helper.parser.add_option('--username', help="Username to the database", dest="username")
+helper.parser.add_option('--password', help="Log in with this password", dest="password")
+helper.parser.add_option('--tns', help="TNS name to use", dest="tns")
+helper.parser.add_option('--query', help="MSSQL Query to execute", dest="query")
+helper.parser.add_option('--oracle_home', help="Set $ORACLE_HOME to this", dest="oracle_home")
+
+# When parse_arguments is called some default options like --threshold and --no-longoutput are automatically added
+helper.parse_arguments()
+
+
+username = helper.options.username
+password = helper.options.password
+tns = helper.options.tns
+query = helper.options.query
+
+enable_debugging = helper.options.verbose
+
+def debug(message):
+  if enable_debugging:
+    print "debug: %s" % str(message)
+
+  
+if not username:
+  helper.parser.error('--username is required')
+if not password:
+  helper.parser.error('--password is required')
+if not tns:
+  helper.parser.error('--tns is required')
+#if not oracle_home is None:
+
+
+
+
+
+# Actual coding logic starts
+
+conn = cx_Oracle.connect(username, password, tns)
+debug("connecting to host")
+cur = conn.cursor()
+debug("Executing sql query: %s" % query)
+cur.execute(query)
+
+status,text = None,None
+problem_items = 0
+total_items = 0
+for row in cur:
+  total_items += 1
+  debug(row)
+  if len(row) > 0:
+    status = row[0]
+  if len(row) > 1:
+    text = row[1]
+  else:
+    text = ""
+  if text == '':
+    text = "No text in this field"
+  if status not in pynag.Plugins.state_text:
+    helper.add_summary("Invalid status: %s" % status)
+    status = pynag.Plugins.unknown
+  if status > 0:
+    problem_items += 1
+    helper.add_summary(text)
+
+  helper.status(status)
+  helper.add_long_output("%s: %s" % (pynag.Plugins.state_text.get(status,'unknown'), text) )
+  
+if total_items == 0:
+  helper.add_summary("SQL Query returned 0 rows")
+  helper.status(pynag.Plugins.unknown)
+if not helper.get_summary():
+  helper.add_summary("%s items checked. %s problems" % (total_items, problem_items))
+
+helper.check_all_metrics()
+helper.exit()

nagios-okplugin-common/nagios-okplugin-common.spec

@@ -0,0 +1,46 @@
+%define debug_package %{nil}
+
+Summary:	A common package for the okplugin suite
+Name:		nagios-okplugin-common
+Version:	1.2
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/
+Source0:	https://github.com/opinkerfi/nagios-plugins/archive/%{name}-%{version}-%{release}.tar.gz
+Requires:	nrpe
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@ok.is>
+BuildArch:	noarch
+
+%description
+Common utilities for okplugins
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+mkdir -m 0770 -p %{buildroot}%{_sharedstatedir}/nagios-okplugin
+
+%clean
+rm -rf %{buildroot}
+
+%post
+
+%files
+%defattr(-,root,root,-)
+%dir %attr(0770, nrpe, nrpe) %{_sharedstatedir}/nagios-okplugin
+
+%changelog
+* Mon Jan 20 2014 Tomas Edwardsson <tommi@tommi.org> 1.2-1
+- 
+
+* Mon Jan 20 2014 Tomas Edwardsson <tommi@tommi.org> 1.1-1
+- new package built with tito
+
+* Mon Jan 20 2014 Tomas Edwardsson <tommi@tommi.org> 1.0-1
+- Initial build

okc-get_network_stat/nagios-okplugin-get_network_stat.spec

@@ -0,0 +1,46 @@
+%define debug_package %{nil}
+
+Summary:	A Nagios plugin to get network statistics over NRPE
+Name:		nagios-okplugin-get_network_stat
+Version:	1.0.1
+Release:	1%{?dist}
+License:	GPLv2+
+Group:		Applications/System
+URL:		https://github.com/opinkerfi/nagios-plugins/okc-get_network_stat
+Source0:	https://github.com/opinkerfi/nagios-plugins/okc-get_network_stat/%{name}-%{version}.tar.gz
+Requires:	nagios-plugins-nrpe
+BuildRoot:	%{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
+Packager:	Tomas Edwardsson <tommi@tommi.org>
+BuildArch:	noarch
+
+
+
+%description
+A Nagios plugin to get network statistics over NRPE
+
+
+%prep
+%setup -q
+
+%build
+
+
+%install
+rm -rf %{buildroot}
+install -D -p -m 0755 okc-get_network_stat %{buildroot}%{_libdir}/nagios/plugins/okc-get_network_stat
+
+%clean
+rm -rf %{buildroot}
+
+%files
+%defattr(-,root,root,-)
+#%doc README LICENSE
+#%{_libdir}/nagios/plugins/*
+%{_libdir}/nagios/plugins/okc-get_network_stat
+
+%changelog
+* Wed Apr 02 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.1-1
+- new package built with tito
+
+* Wed Apr  2 2014 Tomas Edwardsson <tommi@tommi.org> 1.0.0-1
+- Initial release

okc-get_network_stat/okc-get_network_stat

@@ -0,0 +1,65 @@
+#!/usr/bin/python
+
+from pynag.Plugins import PluginHelper, ok, warning, critical, unknown
+from pynag.Utils import runCommand
+import re
+
+helper = PluginHelper()
+
+helper.parser.add_option("-H", help="Host to connect to", dest="host", default='localhost')
+
+helper.parse_arguments()
+
+if helper.options.host == "localhost":
+    command="cat /proc/net/dev|sed 's/  */ /g'"
+else:
+    command="/usr/lib64/nagios/plugins/check_nrpe -H '%s' -c get_network_interfaces_stat" % helper.options.host
+
+return_code, stdout, stderr = runCommand(command)
+
+try:
+    receive, transmit = stdout.split("\n")[1].split("|")[1:]
+    receive = receive.split()
+    transmit = transmit.split()
+
+    interfaces = []
+
+    for int_line in stdout.split("\n")[2:]:
+        int_line = int_line.strip()
+        if not int_line:
+            continue
+
+        int_arr = re.split("[: ]+", int_line.strip())
+
+        interface = int_arr.pop(0)
+
+        if interface == "lo" or interface.startswith('sit'):
+            continue
+
+        interfaces.append(interface)
+        for i in range(0, len(receive)):
+            helper.add_metric(
+                label="%s_rx_%s" % (interface, receive[i]),
+                value=int_arr.pop(0),
+                uom="c")
+        for i in range(0, len(transmit)):
+            helper.add_metric(
+                label="%s_tx_%s" % (interface, transmit[i]),
+                value=int_arr.pop(0),
+                uom="c")
+
+    helper.add_summary("Network interfaces %s" % ", ".join(interfaces))
+
+    # Here all metrics will be checked against thresholds that are either
+    # built-in or added via --threshold from the command-line
+    helper.check_all_metrics()
+
+    # Print out plugin information and exit nagios-style
+    helper.exit(ok)
+except Exception, error:
+    helper.status(unknown)
+    helper.add_summary(stdout + stderr)
+    helper.exit(unknown)
+
+# vim: sts=4 expandtab autoindent
+

rel-eng/packages/.readme

@@ -0,0 +1,3 @@
+the rel-eng/packages directory contains metadata files
+named after their packages. Each file has the latest tagged
+version and the project's relative directory.

rel-eng/packages/nagios-okplugin-apc

@@ -0,0 +1 @@
+2.1.2-1 check_apcext.pl/

rel-eng/packages/nagios-okplugin-bond

@@ -0,0 +1 @@
+0.0.4-1 check_bond/

rel-eng/packages/nagios-okplugin-brocade

@@ -0,0 +1 @@
+0.0.5-1 check_brocade/

rel-eng/packages/nagios-okplugin-check_dataprotector

@@ -0,0 +1 @@
+2-1 check_dataprotector/

rel-eng/packages/nagios-okplugin-check_disks

@@ -0,0 +1 @@
+1.0.7-1 check_disks.pl/

rel-eng/packages/nagios-okplugin-check_drbd

@@ -0,0 +1 @@
+0.0.4-1 check_drbd/

rel-eng/packages/nagios-okplugin-check_eva

@@ -0,0 +1 @@
+2-1 check_eva/

rel-eng/packages/nagios-okplugin-check_hpacucli

@@ -0,0 +1 @@
+2-1 check_hpacucli/

rel-eng/packages/nagios-okplugin-check_hpasm

@@ -0,0 +1 @@
+4.1.4-1 check_hpasm/