Files
Ansible-roles/apt_updates/templates/apt-updates-metrics.j2
T

64 lines
2.0 KiB
Django/Jinja

#!/bin/bash
# Pending upgrades, held packages, reboot flag and age of the package lists as node exporter textfile
# metrics. apt-daily and apt-daily-upgrade run it after their update and upgrade (drop-ins).
set -euo pipefail
host={{ inventory_hostname }}
textfile_dir={{ apt_updates_textfile_dir }}
out=$textfile_dir/apt_updates.prom
tmp=$(mktemp "$textfile_dir/.apt_updates.XXXXXX")
trap 'rm -f "$tmp"' EXIT
arch=$(dpkg --print-architecture)
# The simulated upgrade lists "Inst <package> [<installed>] (<candidate> <origin> [<arch>])" per package.
# An origin containing "security" counts as security, everything else as regular.
pending=$(apt-get -s upgrade | awk -v host="$host" -v arch="$arch" '
/^Inst / {
line = $0
sub(/^[^(]*\(/, "", line)
sub(/\).*$/, "", line)
n = split(line, f, " ")
pkg_arch = f[n]
gsub(/\[|\]/, "", pkg_arch)
origin = (n >= 3) ? f[2] : ""
kind = (tolower(origin) ~ /security/) ? "security" : "regular"
count[kind, pkg_arch]++
}
END {
if (!(("security", arch) in count)) count["security", arch] = 0
if (!(("regular", arch) in count)) count["regular", arch] = 0
for (key in count) {
split(key, k, SUBSEP)
printf "apt_upgrades_pending{host=\"%s\",origin=\"%s\",arch=\"%s\"} %d\n", host, k[1], k[2], count[key]
}
}')
held=$(apt-mark showhold | wc -l)
reboot=0
if [[ -e /run/reboot-required ]]; then
reboot=1
fi
# Debian writes update-stamp, Ubuntu update-success-stamp; both are touched by a successful update.
stamp=/var/lib/apt/periodic/update-success-stamp
if [[ ! -e $stamp ]]; then
stamp=/var/lib/apt/periodic/update-stamp
fi
cache=$(stat -c %Y "$stamp")
{
echo '# TYPE apt_upgrades_pending gauge'
echo "$pending"
echo '# TYPE apt_upgrades_held gauge'
echo "apt_upgrades_held{host=\"$host\"} $held"
echo '# TYPE node_reboot_required gauge'
echo "node_reboot_required{host=\"$host\"} $reboot"
echo '# TYPE apt_package_cache_timestamp_seconds gauge'
echo "apt_package_cache_timestamp_seconds{host=\"$host\"} $cache"
} > "$tmp"
chmod 0644 "$tmp"
mv -f "$tmp" "$out"