X-Git-Url: http://git.indexdata.com/?a=blobdiff_plain;f=aptcheck%2Faptcheck.pl;h=627eb2ae7d375e403446b3ed05ffff27073b32b5;hb=4c3f7fa3c66c197fb560bb3261fdc8f7a46dda21;hp=3866de92cb83b6e87350accd93fcdfdb2a565bdc;hpb=d055bbb75daddec96238f568e436d0c336dfa76f;p=git-tools-moved-to-github.git

diff --git a/aptcheck/aptcheck.pl b/aptcheck/aptcheck.pl
index 3866de9..627eb2a 100755
--- a/aptcheck/aptcheck.pl
+++ b/aptcheck/aptcheck.pl
@@ -19,21 +19,31 @@
 # 11-Mar-2011 Heikki: Started this
 # 22-Mar-2011 Heikki: Adding manually maintained packages
 # 15-Aug-2011 Heikki: Adding a total in the headline, for nagiosgrapher
+# 21-May-2012 Heikki: Added a date since when a package has been pending
+# 31-May-2012 Heikki: Pointing to the new wiki
+# 01-Jan-2013 Heikki: Get hosts from nagios-us as well.
 #
 # TODO: Assumes that we release our restricted packages for all versions
 # and architectures at the same time. Gets only the highest version from
 # all, and reports anything less than this. Good enough for now.
 #
-# TODO: Get the dates from ls --full-time /var/cache/apt/archives/
-# and display next to the packages, so we can see how long they have
-# been lingering. Boldface them if older than some limit
+# TODO: Check CentOs systems too
+# Need a check_rpm plugin, and nagios checks defined on the CentOs machines,
+# then we can grep for that check in nagios configs, and find rpm machines
+# that way. Or, check all machines listed in nagios, determine what they
+# run, and use proper commands to check for packages.
+# 
+# TODO: Summary section for hosts that have too old updates still pending
+# - those that are marked with (!)
 
 #### Init
 use strict;
 my $debug= $ARGV[0] || 0; # 0=none, 1=some, 2=more, 3=much
 my $year =`date +%Y`;
-my $wikilink = 'http://twiki.indexdata.dk/cgi-bin/twiki/view/ID/';
+#my $wikilink = 'http://twiki.indexdata.dk/cgi-bin/twiki/view/ID/';
+my $wikilink = 'https://twiki.indexdata.com/twiki/bin/view/ID/';
 my $restrictedpackages = "ssh -q kebab cat /home/ftp/pub/debian/dists/*/restricted/*/Packages";
+my $updlink="<i>-u</i>"; # to display after a name, liking to the upd page
 
 #### Host comments
 my %hostcomments = (
@@ -49,10 +59,16 @@ my %hostcomments = (
 # I could use a hard-coded list, but I would forget to maintain it.
 # Nagios knows most of our hosts. It even knows which are worth 
 # checking, they have a command to check apts!
+print "Getting hostlist from nagios\n" if $debug;
+my $hostlist1 = `ssh nagios grep -l \\"define host\\" /etc/nagios3/indexdata-conf.d/*.cfg`
+  or die "Could not get host list from nagios (dk)";
 
-my $hostlist = `ssh nagios grep -l Apt /etc/nagios3/indexdata-conf.d/*.cfg`
-  or die "Could not get host list";
+print "Getting hostlist from nagios-us\n" if $debug;
+#my $hostlist2 = `ssh nagios-us grep -l Apt /etc/nagios3/indexdata-conf.d/*.cfg`
+my $hostlist2 = `ssh nagios-us grep -l \\"define host\\" /etc/nagios3/indexdata-conf.d/*.cfg`
+  or die "Could not get host list from nagios (us)";
 
+my $hostlist = $hostlist1 . $hostlist2;
 print "Got list:\n$hostlist\n" if $debug>2;
 
 ###### Get list of packages that can be manually maintained
@@ -76,7 +92,7 @@ for my $pline ( split("\n",$restplines) ) {
             print "found $pname, first version $pver\n" if $debug>1;
         } else {
             my $bver = $restrpkgs{$pname};
-            `dpkg --compare-versions "$bver" lt "$pver" `;
+            `dpkg --compare-versions "$bver" lt "$pver" 2>/dev/null `;
             if ( ! $? ) {
                 print "found $pname, better version $pver (better than $bver)\n"
                     if $debug>1;
@@ -112,6 +128,7 @@ my $owntot = 0;
 my $mantot = 0;
 my $normtot = 0;
 my %updlinks;
+my %debversions;
 
 # Pending modification dates
 my %olddates;  # Read in from the file
@@ -119,6 +136,8 @@ my %newdates;  # To be written in the new version of the file
 my $datefilename = "aptcheck.data";
 my $dateoldfilename = "aptcheck.old";
 my $thisdate = "*"; # indicates really old stuff
+my $warndate; # Older than this will be boldfaced
+
 if ( -f $datefilename ) {
   print "Reading dates from $datefilename\n" if $debug;
   open F, $datefilename or die "Could not open date file $datefilename: $!";
@@ -132,6 +151,9 @@ if ( -f $datefilename ) {
   close F;
   $thisdate = `date +%F`;
   chomp($thisdate);
+  $warndate = `date +%F -d "30 days ago"` ; ;
+  chomp($warndate);
+  print "Dates: now: '$thisdate' warn: '$warndate'\n" if $debug;
 } else {
   print "No datefile $datefilename found, starting from scratch\n";
 }
@@ -139,23 +161,42 @@ if ( -f $datefilename ) {
 
 my $table = "<table>\n";
 
-for my $hline ( split("\n",$hostlist) ) {
+HOSTLOOP:
+for my $hline ( sort( split("\n",$hostlist) ) ) {
     next unless ( $hline =~ /\/([a-z0-9-]+)\.cfg$/ );
     my $H = $1;
+    print "Checking $H\n" if $debug;
+    next if ($H =~ /^xdummy/ );
     next if ($H =~ /^commands/ );
+    next if ($H =~ /^contacts/ );
     next if ($H =~ /^servicegroups/ );
-    print "Checking $H\n" if $debug;
+    next if ($H =~ /^hostgroups/ );
+    next if ($H =~ /^host-/ );
+    last if ($H =~/cookie/) && $debug;
     $allhosts{$H}=1;
+    my $cmd = 
+        "if test -f /etc/debian_version; " .
+        "then " .
+            " cat /etc/debian_version; " .
+            " apt-cache -q policy " . join(" ",sort(keys(%restrpkgs))) .";" .
+            " apt-get upgrade -s -o 'Debug::NoLocking=true'; " .
+        "else " .
+            " cat /etc/redhat-release; " .
+            # " yum check-update -q; ".
+            " echo done ;".  # to be sure we have one "real" line
+        "fi " ;
+
+    my $cmd0 = "cat /etc/debian_version";
     my $cmd1 = "apt-cache -q policy " . join(" ",sort(keys(%restrpkgs)));
     my $cmd2 = "apt-get upgrade -s -o 'Debug::NoLocking=true' ";
     # Note, do not append -qq, we want some output even when nothing to do
-    print "ssh -q $H \"$cmd1 ; $cmd2 \" 2>/dev/null" if ($debug>1);
-    my $apt = `ssh -q $H "$cmd1 ; $cmd2 " 2>/dev/null`;
+    print "ssh -q $H \"$cmd\" 2>/dev/null \n" if ($debug>1);
+    my $apt = `ssh -q $H "$cmd" 2>/dev/null`;
     if ( !$apt ) {
         $table .= "<tr><td colspan='3'>&nbsp;</td></tr>\n";
-        $table .= "<tr><td colspan='3'><b><u>$H</u></b> (skipped)\n";
+        $table .= "<tr><td colspan='3'><b><u>$H</u></b> (skipped)</td></tr>\n";
         $skiphosts{$H}=1;
-        next;
+        next HOSTLOOP;
     }
     print "Got apts for $H: \n$apt\n" if $debug>2;
     my $det = ""; # detail lines
@@ -166,7 +207,33 @@ for my $hline ( split("\n",$hostlist) ) {
     my $restrname = "";
     my $restrinst = "";
     my $restrcand = "";
+    my $versionseen = 0;
+    my $is_debian = 0;
     for my $p ( split("\n",$apt) ) {
+        if ( !$versionseen ) {  # first line
+            $versionseen = 1;
+            if ( $p =~ /Centos/i ) {
+                print "CentOs version for $H is $p\n" if ($debug>1);
+                $debversions{$H} = $p;
+            } else { # must be Debian
+                $p =~ s/(5[0-9.]+)/$1 LENNY !!!/;
+                $p =~ s/(6[0-9.]+)/$1 squeeze/;
+                $p =~ s/(7[0-9.]+)/$1 wheezy/;
+                $p = "&nbsp;Debian $p";
+                $debversions{$H} = $p;
+                $is_debian = 1;
+                print "Deb version for $H is $p\n" if ($debug>1);
+            }
+            next;
+        }
+        if ( ! $is_debian ) {
+            $table .= "<tr><td colspan='3'>&nbsp;</td></tr>\n";
+            $table .= "<tr><td colspan='3'><b><u>$H</u></b> (skipped)</td></tr>\n";
+            $table .= "<tr><td colspan='3'>Looks like Centos, " .
+                      "not yet implemented </td></tr>\n";
+            $skiphosts{$H}=1;
+            next HOSTLOOP;
+        }
         # parse apt-cache output
         $restrname = $1 if $p =~ /^(\S+):$/;
         $restrinst = $1 if $p =~ /^\s+Installed:\s+(\S+)$/;
@@ -177,7 +244,7 @@ for my $hline ( split("\n",$hostlist) ) {
                  ( $restrinst ne $bver ) ) { 
                 # if different, it is a regular apt upgrade, and will be seen
                 # later. AND we want to have a different version in our repo
-                `dpkg --compare-versions "$bver" lt "$restrinst" `;
+                `dpkg --compare-versions "$bver" lt "$restrinst"  2>/dev/null`;
                 if ( $? ) { # It was not a downgrade 
                             # manual packages may be ahead of the repo!
                     $mantot++;
@@ -195,7 +262,12 @@ for my $hline ( split("\n",$hostlist) ) {
                     } else {
                         $newdates{$datekey} = $thisdate;
                     }
-                    $det .= "<td>" . $newdates{$datekey} . "</td>";
+                    my $dispdate = $newdates{$datekey};
+                    # if ( $dispdate lt $warndate ) {
+                    if ( 0 ) { # manual packages don't need to be highlighted
+                        $dispdate = "<b>$dispdate !</b>";
+                    }
+                    $det .= "<td>" . $dispdate . "</td>";
                     $det .= "</tr>\n";
                     my $key = "$restrname";
                     if ( !$summary{$key} ) {
@@ -248,12 +320,16 @@ for my $hline ( split("\n",$hostlist) ) {
         } else {
             $newdates{$datekey} = $thisdate;
         }
-        $det .= "<td>" . $newdates{$datekey} . "</td>";
+        my $dispdate = $newdates{$datekey};
+        if ( ( $dispdate lt $warndate ) && ( $src =~ /Security/) ) {
+            $dispdate = "<b>$dispdate !</b>";
+        }
+        $det .= "<td>" . $dispdate . "</td>";
         $det .= "</tr>\n";
 
     }
-    $table .= "<tr><td colspan='3'>&nbsp;</td></tr>\n";
-    $table .= "<tr><td colspan='3'><a name='$H'><b><u>$H</u></b></a> &nbsp;\n";
+    $table .= "<tr><td colspan='4'>&nbsp;</td></tr>\n";
+    $table .= "<tr><td colspan='4'><a name='$H'><b><u>$H</u></b></a> &nbsp;\n";
     if ( $pkgs ) {
         $table .= "<b>$pkgs</b> packages to upgrade. ";
         $table .= "<b>$secs security</b>. " if $secs;
@@ -270,24 +346,28 @@ for my $hline ( split("\n",$hostlist) ) {
     $updlink =~ s/Opencontent-solrUpdates/OpenContentSolrUpdates/; 
     $updlinks{$H} = $updlink;
     $table .= "&nbsp;<a href='$updlink' >Upd</a>";
+    $table .= "&nbsp;" . $debversions{$H};
     $table .= "</td></tr>\n";
     $table .= "<tr><td>$hostcomments{$H}</td></tr>\n"
         if ( $hostcomments{$H} );
     $table .= $det if $pkgs;
     print "\n$table\n" if $debug>2;
-    last if $H =~/diane/ && $debug;
 }
 $table .= "</table>\n";
 
 # Save the date file
-`mv -f $datefilename $dateoldfilename`;
-open F, ">$datefilename" or die "Could not open date file $datefilename for writing";
-for  my $k (keys(%newdates) ) {
-    print F "$k " . $newdates{$k}. "\n";
-    print "date for '$k' '" . $newdates{$k}. "'\n" if $debug;
+if ( ! $debug ) {
+    `mv -f $datefilename $dateoldfilename`;
+    open F, ">$datefilename" or die "Could not open date file $datefilename for writing";
+    for  my $k (sort(keys(%newdates)) ) {
+        print F "$k " . $newdates{$k}. "\n";
+        print "date for '$k' '" . $newdates{$k}. "'\n" if $debug;
+    }
+    close F
+      or die "Could not close date file $datefilename: $!";
+} else {
+    print "Not updating the date file, this is a debug run\n";
 }
-close F
-  or die "Could not close date file $datefilename: $!";
 
 # Page header
 my $outfile = "/tmp/aptcheck.html";
@@ -296,7 +376,7 @@ open F, ">$outfile"
 print F "<html>\n";
 print F "<head><title>Apt upgrade status</title></head>\n";
 print F "<body>\n";
-print F "<H1>Apt package status</H1>\n";
+print F "<H1>Package status</H1>\n";
 print F "<b>" .  ( $sectot + $owntot + $mantot + $normtot ) . 
         "</b> packages pending (<b>$sectot</b> critical) \n";
 
@@ -317,7 +397,7 @@ if ( $sectot ) {
     print F "<td>";
     for my $HH ( sort(keys(%sechosts)) ) {
         my $upd = $updlinks{$HH} || "#" ;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
     }
     print F "</td>";
     print F "<td>";
@@ -333,7 +413,7 @@ if ( $owntot ) {
     print F "<td>";
     for my $HH ( sort(keys(%ownhosts)) ) {
         my $upd = $updlinks{$HH} || "#" ;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
         #print F "<a href='#$HH'><b>$HH</b></a> ";
     }
     print F "</td>";
@@ -350,7 +430,7 @@ if ( $mantot ) {
     print F "<td>";
     for my $HH ( sort(keys(%manhosts)) ) {
         my $upd = $updlinks{$HH} || "#" ;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
         #print F "<a href='#$HH'><b>$HH</b></a> ";
     }
     print F "</td>";
@@ -367,7 +447,7 @@ if ( $normtot ) {
     print F "<td>";
     for my $HH ( sort(keys(%normhosts)) ) {
         my $upd = $updlinks{$HH} || "#" ;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
         #print F "<a href='#$HH'><b>$HH</b></a> ";
     }
     print F "</td>";
@@ -384,18 +464,18 @@ if ( %skiphosts ) {
     for my $HH ( sort(keys(%skiphosts)) ) {
         my $upd = $updlinks{$HH} ||
                   $wikilink . ucfirst($HH) . "Updates" . $year;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
         #print F "<a href='#$HH'><b>$HH</b></a> ";
     }
     print F "</td></tr>\n";
 }
-#if ( %okhosts ) {
 if ( 1 ) {
-    print F "<tr><td>Ok " . scalar(keys(%okhosts)) . "</td>\n";
+    print F "<tr><td>Ok <br/>" . scalar(keys(%okhosts)) .
+           " of " . scalar(keys(%allhosts)) . "</td>\n";
     print F "<td colspan='2'>";
     for my $HH ( sort(keys(%okhosts)) ) {
         my $upd = $updlinks{$HH} || "#" ;
-        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>,</a> ";
+        print F "<a href='#$HH'><b>$HH</b></a><a href='$upd'>$updlink</a> ";
         #print F "<a href='#$HH'><b>$HH</b></a> ";
     }
     if ( !%okhosts ) {
@@ -405,6 +485,9 @@ if ( 1 ) {
 }
 print F "</table>\n";
 
+print F "<p/><b>" .  ( $sectot + $owntot + $mantot + $normtot ) . 
+        "</b> packages pending (<b>$sectot</b> critical) \n";
+
 # Graph 
 #my $secs = 60*60*24 * 7 * 2; # 2 weeks in secods
 #my $secs = "1m"; # one month, let nagios do the math
@@ -441,8 +524,6 @@ for my $P ( sort(keys(%summary)) ) {
 }
 print F "</table>\n";
 
-print F "<p/>Packages marked with * are from the time before started to " .
-        "track package dates \n";
 print F "<p/>Produced " . `date`.
         " on " . `hostname` . " by " . `whoami` .
         "<br/>\n";