Ruakij/Ansible-roles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

apt_updates: the role owns the apt metrics (Debian collector off, explicit zero rows, multi-suite security detection)

Browse Source
This commit is contained in:
Ruakij
2026-10-26 15:30:17 +00:00
parent 7604bc4dac
commit 03fc22daf7
2 changed files with 58 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apt_updates/templates/apt-updates-metrics.j2
+19 -9
View File
@@ -9,11 +9,14 @@ out=$textfile_dir/apt_updates.prom
tmp=$(mktemp "$textfile_dir/.apt_updates.XXXXXX")
trap 'rm -f "$tmp"' EXIT
arch=$(dpkg --print-architecture)
# Architectures a pending package can have: the native and foreign ones, plus "all" for architecture-independent
# packages. Each gets a row per kind even at 0, so a resolved backlog reads as 0 and not as a vanished series.
archs="$(dpkg --print-architecture) $(dpkg --print-foreign-architectures | tr '\n' ' ') all"
# The simulated upgrade lists "Inst <package> [<installed>] (<candidate> <origin> [<arch>])" per package.
# An origin containing "security" counts as security, everything else as regular.
pending=$(apt-get -s upgrade | awk -v host="$host" -v arch="$arch" '
# The simulated upgrade lists "Inst <package> [<installed>] (<candidate> <origins> [<arch>])" per package. A version in
# several suites lists them all, comma separated. A package counts as security when any origin contains "security",
# everything else as regular.
pending=$(apt-get -s upgrade | awk -v host="$host" -v archs="$archs" '
/^Inst / {
line = $0
sub(/^[^(]*\(/, "", line)
@@ -21,13 +24,16 @@ pending=$(apt-get -s upgrade | awk -v host="$host" -v arch="$arch" '
n = split(line, f, " ")
pkg_arch = f[n]
gsub(/\[|\]/, "", pkg_arch)
origin = (n >= 3) ? f[2] : ""
kind = (tolower(origin) ~ /security/) ? "security" : "regular"
sub(/^[^ ]+ /, "", line)
kind = (tolower(line) ~ /security/) ? "security" : "regular"
count[kind, pkg_arch]++
}
END {
if (!(("security", arch) in count)) count["security", arch] = 0
if (!(("regular", arch) in count)) count["regular", arch] = 0
split(archs, a, " ")
for (i in a) {
if (!(("security", a[i]) in count)) count["security", a[i]] = 0
if (!(("regular", a[i]) in count)) count["regular", a[i]] = 0
}
for (key in count) {
split(key, k, SUBSEP)
printf "apt_upgrades_pending{host=\"%s\",origin=\"%s\",arch=\"%s\"} %d\n", host, k[1], k[2], count[key]
@@ -41,11 +47,15 @@ if [[ -e /run/reboot-required ]]; then
reboot=1
fi
# Debian writes update-stamp, Ubuntu update-success-stamp; both are touched by a successful update.
# Debian writes update-stamp, Ubuntu update-success-stamp; both are touched by a successful update. Both are missing
# until apt.systemd.daily has run an update, then the package cache stands in.
stamp=/var/lib/apt/periodic/update-success-stamp
if [[ ! -e $stamp ]]; then
stamp=/var/lib/apt/periodic/update-stamp
fi
if [[ ! -e $stamp ]]; then
stamp=/var/cache/apt/pkgcache.bin
fi
cache=$(stat -c %Y "$stamp")
{