host_exporters: IPMI exporter with sudo-pinned FreeIPMI tools for hosts with a BMC

host_exporters/defaults/main.yml

@@ -2,3 +2,28 @@
 # Adds prometheus-smartctl-exporter (trixie-backports) next to the node exporter
 # on hosts with physical disks.
 host_exporters_smart: false
+
+# Adds ipmitool and prometheus-ipmi-exporter (port 9290) on hosts with a BMC reachable through /dev/ipmi0.
+host_exporters_ipmi: false
+host_exporters_ipmi_collectors:
+  - ipmi
+  - bmc
+  - sel
+  - chassis
+# FreeIPMI tool behind each collector and the fixed arguments the exporter (1.10) passes before
+# --config-file <temporary file>. sudo admits exactly these, so a compromised exporter cannot
+# run chassis control or clear the SEL. A different exporter version needs matching arguments
+# (ipmi_up stays 0 until then). dcmi is not listed: the S1200RP BMC has no power monitoring.
+host_exporters_ipmi_tools:
+  ipmi:
+    tool: ipmimonitoring
+    args: --quiet-cache --ignore-unrecognized-events --comma-separated-output --no-header-output --sdr-cache-recreate --output-event-bitmask --output-sensor-state
+  bmc:
+    tool: bmc-info
+    args: ""
+  sel:
+    tool: ipmi-sel
+    args: --info
+  chassis:
+    tool: ipmi-chassis
+    args: --get-chassis-status