check_pakfire is a Nagios / Icinga plugin for checking IPFire Pakfire updates and required reboots.

I successfully tested the plugin with IPFire 2.x. I'm not sure whether IPFire 3.x comes with a new Pakfire architecture - so, use this on newer versions at your own risk. ;-)

No additional Python packages are required - just deploy the script and use it.

Note: Beginning with plugin version 1.4, Python 3 is the only supported version. If you're using an older IPFire release, you will need to use plugin version 1.3.

By default, the script checks for core updates and also packages upgrades - it is also possible to only check core updates (-e / --exclude-packages parameters). Gathering performance data (outdated packages) can be useful when monitoring a big amount of IPFire systems.

The following parameters can be specified:

The following example checks for core updates only:

$ ./check_pakfire.py -e
OK: Core update (124) up2date

A IPFire host with some outdated packages:

$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux)

An updated IPFire host with performance data:

$ ./check_pakfire.py
WARNING: Core update (124) up2date, packages outdated (linue-pae, lcd4linux) | 'system_updates'=0;;;; 'outdated_packages'=2.0;1.0;5.0;;

An outdated host with a pending reboot:

$ ./check_pakfire.py
CRITICAL: Core update (128) outdated (130), packages up2date, system reboot required

To install the plugin, move the Python script into the appropriate directory and create a configuration.

Within Nagios / Icinga you will need to configure a remote check command, e.g. for NRPE:

# check_nrpe_pakfire
define command{
    command_name        check_nrpe_pakfire
    command_line        $USER1$/check_nrpe -H $HOSTADDRESS$ -c check_pakfire -a $ARG1$
}

Configure the check for a particular host, e.g.:

# DIAG: Updates
define service{
        use                             generic-service
        host_name                       st-ipfire03
        service_description             DIAG: Updates
        check_command                   check_nrpe_pakfire!-P
}

Define a service like this:

apply Service "DIAG: Updates" {
  import "generic-service"
  check_command = "by_ssh"
  vars.by_ssh_command = [ "/opt/check_pakfire.py", "-P" ]
  vars.by_ssh_port = host.vars.ssh_port
  vars.by_ssh_logname = "icinga"
  assign where host.vars.os == "Linux" && host.vars.app == "router"
}

Define SSH port and application for your IPFire host:

object Host "st-ipfire03.stankowic.loc" {
  import "generic-host"

  address = "xxx"

  vars.os = "Linux"
  vars.app = "router"

  vars.ssh_port = 222
}

Validate the configuration and reload the Icinga2 daemon:

# icinga2 daemon -C
# service icinga2 reload