apt_updates: textfile metrics of pending apt updates for the node exporter collector

2026-10-26 14:47:17 +00:00
parent 5318997b73
commit ec64ace8f4
3 changed files with 106 additions and 0 deletions
@@ -0,0 +1,63 @@
+#!/bin/bash
+# Pending upgrades, held packages, reboot flag and age of the package lists as node exporter textfile
+# metrics. apt-daily and apt-daily-upgrade run it after their update and upgrade (drop-ins).
+set -euo pipefail
+
+host={{ inventory_hostname }}
+textfile_dir={{ apt_updates_textfile_dir }}
+out=$textfile_dir/apt_updates.prom
+tmp=$(mktemp "$textfile_dir/.apt_updates.XXXXXX")
+trap 'rm -f "$tmp"' EXIT
+
+arch=$(dpkg --print-architecture)
+
+# The simulated upgrade lists "Inst <package> [<installed>] (<candidate> <origin> [<arch>])" per package.
+# An origin containing "security" counts as security, everything else as regular.
+pending=$(apt-get -s upgrade | awk -v host="$host" -v arch="$arch" '
+  /^Inst / {
+    line = $0
+    sub(/^[^(]*\(/, "", line)
+    sub(/\).*$/, "", line)
+    n = split(line, f, " ")
+    pkg_arch = f[n]
+    gsub(/\[|\]/, "", pkg_arch)
+    origin = (n >= 3) ? f[2] : ""
+    kind = (tolower(origin) ~ /security/) ? "security" : "regular"
+    count[kind, pkg_arch]++
+  }
+  END {
+    if (!(("security", arch) in count)) count["security", arch] = 0
+    if (!(("regular", arch) in count)) count["regular", arch] = 0
+    for (key in count) {
+      split(key, k, SUBSEP)
+      printf "apt_upgrades_pending{host=\"%s\",origin=\"%s\",arch=\"%s\"} %d\n", host, k[1], k[2], count[key]
+    }
+  }')
+
+held=$(apt-mark showhold | wc -l)
+
+reboot=0
+if [[ -e /run/reboot-required ]]; then
+  reboot=1
+fi
+
+# Debian writes update-stamp, Ubuntu update-success-stamp; both are touched by a successful update.
+stamp=/var/lib/apt/periodic/update-success-stamp
+if [[ ! -e $stamp ]]; then
+  stamp=/var/lib/apt/periodic/update-stamp
+fi
+cache=$(stat -c %Y "$stamp")
+
+{
+  echo '# TYPE apt_upgrades_pending gauge'
+  echo "$pending"
+  echo '# TYPE apt_upgrades_held gauge'
+  echo "apt_upgrades_held{host=\"$host\"} $held"
+  echo '# TYPE node_reboot_required gauge'
+  echo "node_reboot_required{host=\"$host\"} $reboot"
+  echo '# TYPE apt_package_cache_timestamp_seconds gauge'
+  echo "apt_package_cache_timestamp_seconds{host=\"$host\"} $cache"
+} > "$tmp"
+
+chmod 0644 "$tmp"
+mv -f "$tmp" "$out"