sensu-plugins-edgelab 1.0.1 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1bad7c4a61eb380e72961d4b65286755233621f5
-  data.tar.gz: 766ab2d239282b66a7d0ce1ccb5a2351ca2fc8c5
+  metadata.gz: 82239604e6dd622edcfb47f6f612dcb825700e41
+  data.tar.gz: 65f687f3ee8a645cb07d767e34f4446f94b02b0a
 SHA512:
-  metadata.gz: 2b6bf8d1481ce10393f7d22c706d4f50a6065cf353a41c99dd7810e2f92f297619887b9287116259a85f7e5bfb57c323af260137591d6f5a6613915ac8e3dd8e
-  data.tar.gz: 37c1588951fce243bd29d3c4d51b490adc47efa35824601406f824e00a59d3ac1c150da9e19082b723181c136e3d596dcfbc54607f1e3faeafdfa5bfaa0220b0
+  metadata.gz: d1f693e3d1a564698ee290cbec139fdb74e0ca46ecf1994c1fbc6e9720832eb8b9aa73e02bcd8d0c11d0cb24dda03cc9ad7cad34cae18877655e976c075bbecd
+  data.tar.gz: 3c486951f0a28fdc5dcf59abe8f1dd777a21d71b190c49f8098aa32510351a37d26cb2ce632d640ed2e2c50d37aaeed8355f4da8b0a37026cec8a013fcfb164b

data/bin/check-apt-expired-keys.rb

@@ -0,0 +1,93 @@
+#! /usr/bin/env ruby
+#
+#   check-apt-expired-keys
+#
+# DESCRIPTION:
+#   This plugin reports expired GPG key used for APT signing.
+#
+# OUTPUT:
+#   plain text
+#
+# PLATFORMS:
+#   Debian
+#
+# DEPENDENCIES:
+#   gem: sensu-plugin
+#
+# USAGE:
+#   example commands
+#
+# NOTES:
+#   Does it behave differently on specific platforms, specific use cases, etc
+#
+# LICENSE:
+#   Copyright 2015 EdgeLaboratories.
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+#
+
+require 'rubygems' if RUBY_VERSION < '1.9.0'
+require 'sensu-plugin/check/cli'
+
+class APTKey < Sensu::Plugin::Check::CLI
+  def run
+    # Must be executed as root in order to access APT keys list
+    if Process.uid != 0
+      return unknown 'Must be executed as root user'
+    end
+
+    expired = expired_keys
+
+    if expired.count > 0
+      if expired.count == 1
+        verb = 'is'
+        noun = 'key'
+      else
+        verb = 'are'
+        noun = 'keys'
+      end
+      warning "There #{verb} #{expired.count} expired APT #{noun}: #{expired.join('; ')}"
+    else
+      ok 'No APT expired keys'
+    end
+  end
+
+  def expired_keys
+    expired = []
+    IO.popen('apt-key list') do |cmd|
+      current_key_id = nil
+      current_key_name = nil
+
+      # We try to parse output like this:
+      # pub   2048R/B999A372 2010-08-12 [expired: 2015-08-13]
+      # uid          Riptano Package Repository <paul@riptano.com>
+
+      cmd.each do |line|
+        # Parse and extract the expired public key ID
+        match = /^pub[ ]+[^\/]+\/(.*) .* \[expired: /.match(line)
+        unless match.nil?
+          current_key_id = match.captures[0]
+        end
+
+        # Try to get the more user-friendly name. Sometimes, it doesn't
+        # contain enough information to be useful, but it still
+        # slightly better than the key ID.
+        match = /^uid[ ]+(.*)$/.match(line)
+        unless match.nil?
+          current_key_name = match.captures[0]
+        end
+
+        # If we reach an empty line and we parsed expired key, save
+        # them and reset everything for the next keys after.
+        if line =~ /^$/
+          if current_key_id
+            expired.push "#{current_key_name || 'unknown key uid'} (#{current_key_id})"
+          end
+          current_key_id = nil
+          current_key_name = nil
+        end
+      end
+    end
+    expired
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sensu-plugins-edgelab
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.1.0
 platform: ruby
 authors:
 - Edgelab
@@ -83,10 +83,12 @@ dependencies:
 description: Sensu plugins developed by Edgelab
 email: 
 executables:
+- check-apt-expired-keys.rb
 - check-nomad-jobs.rb
 extensions: []
 extra_rdoc_files: []
 files:
+- bin/check-apt-expired-keys.rb
 - bin/check-nomad-jobs.rb
 homepage: 
 licenses: []