evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 33 Wiki Activity

* nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Ludovic Poujol 2021-02-12 15:22:57 +01:00
parent 2b328dc764
commit b0cb14eb5b
3 changed files with 132 additions and 92 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -19,9 +19,10 @@ The **patch** part changes incrementally at each release.
### Changed ### Changed
* certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto") * certbot: use a fixed 1.9.0 version of the certbot-auto script (renamed "letsencrypt-auto")
* cerbot: use the legacy script on Debian 8 and 9
* evoacme: upstream release 21.01 * evoacme: upstream release 21.01
* minifirewall: change some defaults * minifirewall: change some defaults
* cerbot: use the legacy script on Debian 8 and 9 * nagios-nrpe: update check_phpfpm_status.pl & install perl dependencies
### Fixed ### Fixed

210
nagios-nrpe/files/plugins/check_phpfpm_status.pl
View file

@ -1,18 +1,19 @@
#!/usr/bin/env perl #!/usr/bin/env perl
# check_phpfpm_status.pl # check_phpfpm_status.pl
# Version : 1.0 # Version : 1.1
# Author : regis.leroy at makina-corpus.com # Author : regis.leroy at makina-corpus.com
# based on previous apache status work by Dennis D. Spreen (dennis at spreendigital.de) # based on previous apache status work by Dennis D. Spreen (dennis at spreendigital.de)
# Based on check_apachestatus.pl v1.4 by # Based on check_apachestatus.pl v1.4 by
# De Bodt Lieven (Lieven.DeBodt at gmail.com) # De Bodt Lieven (Lieven.DeBodt at gmail.com)
# Karsten Behrens (karsten at behrens dot in) # Karsten Behrens (karsten at behrens dot in)
# Geoff McQueen (geoff.mcqueen at hiivesystems dot com ) # Geoff McQueen (geoff.mcqueen at hiivesystems dot com )
# Dave Steinberg (dave at redterror dot net) # Dave Steinberg (dave at redterror dot net)
# Licence : GNU GPL v3 - http://www.fsf.org/licenses/gpl.txt # Licence : GNU GPL v3 - http://www.fsf.org/licenses/gpl.txt
# #
# help : ./check_phpfpm_status.pl -h # help : ./check_phpfpm_status.pl -h
# #
# issues & updates: http://github.com/regilero/check_phpfpm_status # issues & updates: http://github.com/regilero/check_phpfpm_status
# Unix socket support from https://github.com/magenbrot/check_phpfpm_status/tree/unix-socket-support
use strict; use strict;
use warnings; use warnings;
use Getopt::Long; use Getopt::Long;
@ -26,52 +27,53 @@ package main;
binmode(STDOUT, ":utf8"); binmode(STDOUT, ":utf8");
# Globals # Globals
my $Version='1.0'; my $Version= '1.1';
my $Name=$0; my $Name= $0;
my $o_host = undef; # hostname my $o_host= undef; # hostname
my $o_help= undef; # want some help ? my $o_help= undef; # want some help ?
my $o_port= undef; # port my $o_port= undef; # port
my $o_url = undef; # url to use, if not the default my $o_url= undef; # url to use, if not the default
my $o_user= undef; # user for auth my $o_user= undef; # user for auth
my $o_pass= ''; # password for auth my $o_pass= ''; # password for auth
my $o_realm= ''; # password for auth my $o_realm= ''; # password for auth
my $o_version= undef; # print version my $o_version= undef; # print version
my $o_warn_p_level= -1; # Min number of idle workers that will cause a warning my $o_warn_p_level= -1; # Min number of idle workers that will cause a warning
my $o_crit_p_level= -1; # Min number of idle workersthat will cause an error my $o_crit_p_level= -1; # Min number of idle workersthat will cause an error
my $o_warn_q_level= -1; # Number of Max Queue Reached that will cause a warning my $o_warn_q_level= -1; # Number of Max Queue Reached that will cause a warning
my $o_crit_q_level= -1; # Number of Max Queue Reached that will cause an error my $o_crit_q_level= -1; # Number of Max Queue Reached that will cause an error
my $o_warn_m_level= -1; # Number of Max Processes Reached that will cause a warning my $o_warn_m_level= -1; # Number of Max Processes Reached that will cause a warning
my $o_crit_m_level= -1; # Number of Max Processes Reached that will cause an error my $o_crit_m_level= -1; # Number of Max Processes Reached that will cause an error
my $o_timeout= 15; # Default 15s Timeout my $o_timeout= 15; # Default 15s Timeout
my $o_warn_thresold=undef; # warning thresolds entry my $o_warn_threshold= undef; # warning thresholds entry
my $o_crit_thresold=undef; # critical thresolds entry my $o_crit_threshold= undef; # critical thresholds entry
my $o_debug= undef; # debug mode my $o_debug= undef; # debug mode
my $o_fastcgi= undef; # direct fastcgi mode (without an http->fastcgi proxy) my $o_fastcgi= undef; # direct fastcgi mode (without an http->fastcgi proxy)
my $o_servername= undef; # ServerName (host header in http request) my $o_unixsocket= undef; # use a UNIX socket (in direct fastcgi mode)
my $o_https= undef; # SSL (HTTPS) mode my $o_servername= undef; # ServerName (host header in http request)
my $o_verify_ssl= 0; # SSL verification, False by default my $o_https= undef; # SSL (HTTPS) mode
my $o_cacert_file= undef; # Path to cacert.pem file my $o_verify_ssl= 0; # SSL verification, False by default
my $o_cacert_file= undef; # Path to cacert.pem file
my $TempPath = '/tmp/'; # temp path my $TempPath= '/tmp/'; # temp path
my $MaxUptimeDif = 60*30; # Maximum uptime difference (seconds), default 30 minutes my $MaxUptimeDif= 60*30; # Maximum uptime difference (seconds), default 30 minutes
my $phpfpm = 'PHP-FPM'; # Could be used to store version also my $phpfpm= 'PHP-FPM'; # Could be used to store version also
# functions # functions
sub show_versioninfo { print "$Name version : $Version\n"; } sub show_versioninfo { print "$Name version : $Version\n"; }
sub print_usage { sub print_usage {
print "Usage: $Name -H <host ip> [-p <port>] [-s servername] [-t <timeout>] [-w <WARN_THRESOLD> -c <CRIT_THRESOLD>] [-V] [-d] [-f] [-u <url>] [-U user -P pass -r realm]\n"; print "Usage: $Name -H <host ip> [-p <port>] [-s servername] [-t <timeout>] [-w <WARN_THRESHOLD> -c <CRIT_THRESHOLD>] [-V] [-d] [-f] [-u <url>] [-U user -P pass -r realm]\n";
} }
sub nagios_exit { sub nagios_exit {
my ( $nickname, $status, $message, $perfdata , $silent) = @_; my ( $nickname, $status, $message, $perfdata , $silent) = @_;
my %STATUSCODE = ( my %STATUSCODE = (
'OK' => 0 'OK' => 0,
, 'WARNING' => 1 'WARNING' => 1,
, 'CRITICAL' => 2 'CRITICAL' => 2,
, 'UNKNOWN' => 3 'UNKNOWN' => 3,
, 'PENDING' => 4 'PENDING' => 4,
); );
if(!defined($silent)) { if(!defined($silent)) {
my $output = undef; my $output = undef;
@ -100,13 +102,15 @@ sub help {
-H, --hostname=HOST -H, --hostname=HOST
name or IP address of host to check name or IP address of host to check
-p, --port=PORT -p, --port=PORT
Http port, or Fastcgi port when using --fastcgi HTTP port, or Fastcgi port when using --fastcgi
-u, --url=URL -u, --url=URL
Specific URL (only the path part of it in fact) to use, instead of the default "/fpm-status" Specific URL (only the path part of it in fact) to use, instead of the default "/fpm-status"
-s, --servername=SERVERNAME -s, --servername=SERVERNAME
ServerName, (host header of HTTP request) use it if you specified an IP in -H to match the good Virtualhost in your target ServerName, (host header of HTTP request) use it if you specified an IP in -H to match the good Virtualhost in your target
-f, --fastcgi -f, --fastcgi
Connect directly to php-fpm via network or local socket, using fastcgi protocol instead of HTTP. Connect directly to php-fpm via network or local socket, using fastcgi protocol instead of HTTP.
--unixsocket
Connect to php-fpm via UNIX socket, implies --fastcgi
-U, --user=user -U, --user=user
Username for basic auth Username for basic auth
-P, --pass=PASS -P, --pass=PASS
@ -114,7 +118,7 @@ sub help {
-r, --realm=REALM -r, --realm=REALM
Realm for basic auth Realm for basic auth
-d, --debug -d, --debug
Debug mode (show http request response) Debug mode (show request response)
-t, --timeout=INTEGER -t, --timeout=INTEGER
timeout in seconds (Default: $o_timeout) timeout in seconds (Default: $o_timeout)
-S, --ssl -S, --ssl
@ -136,50 +140,56 @@ sub help {
prints version number prints version number
Note : Note :
3 items can be managed on this check, this is why -w and -c parameters are using 3 values thresolds 3 items can be managed on this check, this is why -w and -c parameters are using 3 values thresholds
- MIN_AVAILABLE_PROCESSES: Working with the number of available (Idle) and working process (Busy). - MIN_AVAILABLE_PROCESSES: Working with the number of available (Idle) and working processes (Busy).
Generating WARNING and CRITICAL if you do not have enough Idle processes. Generating WARNING and CRITICAL if you do not have enough Idle processes.
- PROC_MAX_REACHED: the fpm-status report will show us how many times the max processes were reached sinc start, - PROC_MAX_REACHED: the fpm-status report will show us how many times the max processes were reached since start,
this script will record how many time this happended since last check, letting you fix thresolds for alerts this script will record how many times this happened since last check, letting you fix thresholds for alerts
- QUEUE_MAX_REACHED: the php-fpm report will show us how many times the max queue was reached since start, - QUEUE_MAX_REACHED: the php-fpm report will show us how many times the max queue was reached since start,
this script will record how many time this happended since last check, letting you fix thresolds for alerts this script will record how many times this happened since last check, letting you fix thresholds for alerts
Examples: Examples:
This will lead to CRITICAL if you have 0 Idle process, or you have reached the max processes 2 times between last check, This will lead to CRITICAL if you have 0 idle processes or you reached the max processes 2 times between last check,
or you have reached the max queue len 5 times. A Warning will be reached for 1 Idle process only: or you reached the max queue len 5 times. A warning will be generated for 1 idle process only:
check_phpfpm_status.pl -H 10.0.0.10 -u /foo/my-fpm-status -s mydomain.example.com -t 8 -w 1,-1,-1 -c 0,2,5 check_phpfpm_status.pl -H 10.0.0.10 -u /foo/my-fpm-status -s mydomain.example.com -t 8 -w 1,-1,-1 -c 0,2,5
this will generate WARNING and CRITICAL alerts only on the number of times you have reached the max process: This will generate WARNING and CRITICAL alerts only on the number of times you have reached the max processes:
check_phpfpm_status.pl -H 10.0.0.10 -u /foo/my-fpm-status -s mydomain.example.com -t 8 -w -1,10,-1 -c -1,20,-1 check_phpfpm_status.pl -H 10.0.0.10 -u /foo/my-fpm-status -s mydomain.example.com -t 8 -w -1,10,-1 -c -1,20,-1
theses two equivalents will not generate any alert (if the php-fpm page is reachable) but could be used for graphics: These two equivalents will not generate any alert (if the php-fpm page is reachable) but could be used for graphing:
check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com -w -1,-1,-1 -c -1,-1,-1 check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com -w -1,-1,-1 -c -1,-1,-1
check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com
And this one is a basic starting example : And this one is a basic starting example:
check_phpfpm_status.pl -H 127.0.0.1 -s nagios.example.com -w 1,1,1 -c 0,2,2 check_phpfpm_status.pl -H 127.0.0.1 -s nagios.example.com -w 1,1,1 -c 0,2,2
All these examples used an HTTP proxy (like Nginx or Apache) in front of php-fpm. If php-fpm is listening on a tcp/ip socket All these examples used an HTTP proxy (like Nginx or Apache) in front of php-fpm. If php-fpm is listening on a tcp/ip socket
you can also make a direct request on this port (9000 by default) using the fastcgi protocol. You'll need the FastCGI client you can also make a direct request on this port (9000 by default) or to an UNIX socket by using the fastcgi protocol. You'll
tools enabled in Perl (check the README) and the command would use the -f or --fastcgi option (note that SSL or servername need the FastCGI client tools enabled in Perl (check the README) and the command would use the -f or --fastcgi and eventually
options are useless in this mode). the --unixsocket option (note that SSL or servername options are useless in this mode).
This can be especially usefull if you use php-fpm in an isolated env, without the HTTP proxy support (like in a docker container): This can be especially usefull if you use php-fpm in an isolated env, without the HTTP proxy support (like in a docker container).
Connect to an INET socket on port 9002:
check_phpfpm_status.pl -H 127.0.0.1 --fastcgi -p 9002 -w 1,1,1 -c 0,2,2 check_phpfpm_status.pl -H 127.0.0.1 --fastcgi -p 9002 -w 1,1,1 -c 0,2,2
Connect to the UNIX socket listening in /run/php/php-fpm.sock with a non-standard URL:
check_phpfpm_status.pl -H 127.0.0.1 --fastcgi --unixsocket /run/php/php-fpm.sock -u /secret-status -w 1,1,1 -c 0,2,2
HTTPS/SSL: HTTPS/SSL:
Adding --ssl you can reach an https host: Adding --ssl you can reach an https host:
check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com --ssl check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com --ssl
Check --verify-ssl (false by defaut) --cacert and --sl for more options, like below Check --verify-ssl (false by default) --cacert and --sl for more options, like below
(note that certificate checks never wortked on my side, add -d for full debug and (note that certificate checks never worked on my side, add -d for full debug and
tell me if it worked for you, you may need up to date CPAN adn openSSL libs) tell me if it worked for you, you may need up to date CPAN adn openSSL libs)
check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com --ssl TLSv1_2 --verify-ssl 1 --cacert /etc/ssl/cacert.pem check_phpfpm_status.pl -H 10.0.0.10 -s mydomain.example.com --ssl TLSv1_2 --verify-ssl 1 --cacert /etc/ssl/cacert.pem
@ -193,6 +203,7 @@ sub check_options {
'h' => \$o_help, 'help' => \$o_help, 'h' => \$o_help, 'help' => \$o_help,
'd' => \$o_debug, 'debug' => \$o_debug, 'd' => \$o_debug, 'debug' => \$o_debug,
'f' => \$o_fastcgi, 'fastcgi' => \$o_fastcgi, 'f' => \$o_fastcgi, 'fastcgi' => \$o_fastcgi,
'unixsocket:s' => \$o_unixsocket,
'H:s' => \$o_host, 'hostname:s' => \$o_host, 'H:s' => \$o_host, 'hostname:s' => \$o_host,
's:s' => \$o_servername, 'servername:s' => \$o_servername, 's:s' => \$o_servername, 'servername:s' => \$o_servername,
'S:s' => \$o_https, 'ssl:s' => \$o_https, 'S:s' => \$o_https, 'ssl:s' => \$o_https,
@ -202,12 +213,12 @@ sub check_options {
'r:s' => \$o_realm, 'realm:s' => \$o_realm, 'r:s' => \$o_realm, 'realm:s' => \$o_realm,
'p:i' => \$o_port, 'port:i' => \$o_port, 'p:i' => \$o_port, 'port:i' => \$o_port,
'V' => \$o_version, 'version' => \$o_version, 'V' => \$o_version, 'version' => \$o_version,
'w=s' => \$o_warn_thresold, 'warn=s' => \$o_warn_thresold, 'w=s' => \$o_warn_threshold, 'warn=s' => \$o_warn_threshold,
'c=s' => \$o_crit_thresold, 'critical=s' => \$o_crit_thresold, 'c=s' => \$o_crit_threshold, 'critical=s' => \$o_crit_threshold,
't:i' => \$o_timeout, 'timeout:i' => \$o_timeout, 't:i' => \$o_timeout, 'timeout:i' => \$o_timeout,
'x:i' => \$o_verify_ssl, 'verifyhostname:i' => \$o_verify_ssl, 'x:i' => \$o_verify_ssl, 'verifyhostname:i' => \$o_verify_ssl,
'verifyssl:i' => \$o_verify_ssl, 'verifyssl:i' => \$o_verify_ssl,
'X:s' => \$o_cacert_file, 'cacert:s' => \$o_cacert_file, 'X:s' => \$o_cacert_file, 'cacert:s' => \$o_cacert_file,
); );
if (defined ($o_help)) { if (defined ($o_help)) {
@ -219,34 +230,37 @@ sub check_options {
nagios_exit($phpfpm,"UNKNOWN","leaving","",1); nagios_exit($phpfpm,"UNKNOWN","leaving","",1);
}; };
if (defined($o_warn_thresold)) { if (defined($o_warn_threshold)) {
($o_warn_p_level,$o_warn_m_level,$o_warn_q_level) = split(',', $o_warn_thresold); ($o_warn_p_level,$o_warn_m_level,$o_warn_q_level) = split(',', $o_warn_threshold);
} else { } else {
$o_warn_thresold = 'undefined' $o_warn_threshold = 'undefined'
} }
if (defined($o_crit_thresold)) { if (defined($o_crit_threshold)) {
($o_crit_p_level,$o_crit_m_level,$o_crit_q_level) = split(',', $o_crit_thresold); ($o_crit_p_level,$o_crit_m_level,$o_crit_q_level) = split(',', $o_crit_threshold);
} else { } else {
$o_crit_thresold = 'undefined' $o_crit_threshold = 'undefined'
} }
if (defined($o_fastcgi) && defined($o_https)) { if (defined($o_fastcgi) && defined($o_https)) {
nagios_exit($phpfpm,"UNKNOWN","You cannot use both --fastcgi and --ssl options, we do not use http (nor https) when we use direct fastcgi access!"); nagios_exit($phpfpm,"UNKNOWN","You cannot use both --fastcgi and --ssl options, we do not use http (nor https) when we use direct fastcgi access!");
} }
if (defined($o_unixsocket) && not defined($o_fastcgi)) {
$o_fastcgi = 1;
}
if (defined($o_debug)) { if (defined($o_debug)) {
print("\nDebug thresolds: \nWarning: ($o_warn_thresold) => Min Idle: $o_warn_p_level Max Reached :$o_warn_m_level MaxQueue: $o_warn_q_level"); print("\nDEBUG thresholds: \nWarning: ($o_warn_threshold) => Min Idle: $o_warn_p_level Max Reached :$o_warn_m_level MaxQueue: $o_warn_q_level");
print("\nCritical ($o_crit_thresold) => : Min Idle: $o_crit_p_level Max Reached: $o_crit_m_level MaxQueue : $o_crit_q_level\n"); print("\nCritical ($o_crit_threshold) => : Min Idle: $o_crit_p_level Max Reached: $o_crit_m_level MaxQueue : $o_crit_q_level\n");
} }
if ((defined($o_warn_p_level) && defined($o_crit_p_level)) && if ((defined($o_warn_p_level) && defined($o_crit_p_level)) &&
(($o_warn_p_level != -1) && ($o_crit_p_level != -1) && ($o_warn_p_level <= $o_crit_p_level)) ) { (($o_warn_p_level != -1) && ($o_crit_p_level != -1) && ($o_warn_p_level <= $o_crit_p_level)) ) {
nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for IdleProcesses (1st part of thresold), warning level must be > crit level!"); nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for IdleProcesses (1st part of threshold), warning level must be > crit level!");
} }
if ((defined($o_warn_m_level) && defined($o_crit_m_level)) && if ((defined($o_warn_m_level) && defined($o_crit_m_level)) &&
(($o_warn_m_level != -1) && ($o_crit_m_level != -1) && ($o_warn_m_level >= $o_crit_m_level)) ) { (($o_warn_m_level != -1) && ($o_crit_m_level != -1) && ($o_warn_m_level >= $o_crit_m_level)) ) {
nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for MaxProcesses (2nd part of thresold), warning level must be < crit level!"); nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for MaxProcesses (2nd part of threshold), warning level must be < crit level!");
} }
if ((defined($o_warn_q_level) && defined($o_crit_q_level)) && if ((defined($o_warn_q_level) && defined($o_crit_q_level)) &&
(($o_warn_q_level != -1) && ($o_crit_q_level != -1) && ($o_warn_q_level >= $o_crit_q_level)) ) { (($o_warn_q_level != -1) && ($o_crit_q_level != -1) && ($o_warn_q_level >= $o_crit_q_level)) ) {
nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for MaxQueue (3rd part of thresold), warning level must be < crit level!"); nagios_exit($phpfpm,"UNKNOWN","Check warning and critical values for MaxQueue (3rd part of threshold), warning level must be < crit level!");
} }
# Check compulsory attributes # Check compulsory attributes
if (!defined($o_host)) { if (!defined($o_host)) {
@ -280,21 +294,37 @@ if (!defined($o_url)) {
} }
if (defined($o_fastcgi)) { if (defined($o_fastcgi)) {
# -- FASTCGI # -- FASTCGI
eval "use FCGI::Client::Connection;"; eval "use FCGI::Client::Connection;";
nagios_exit($phpfpm,"UNKNOWN","You need to activate FCGI::Client::Connection CPAN module for this feature: " . $@) if $@; nagios_exit($phpfpm,"UNKNOWN","You need to activate FCGI::Client::Connection CPAN module for this feature: " . $@) if $@;
eval "use IO::Socket::INET";
nagios_exit($phpfpm,"UNKNOWN","You need to activate IO::Socket::INET CPAN module for this feature: " . $@) if $@;
if (!defined($o_port)) { my $sock;
$o_port = 9000; if (defined($o_unixsocket)) {
} eval "use IO::Socket::UNIX;";
my $sock = IO::Socket::INET->new( nagios_exit($phpfpm,"UNKNOWN","You need to activate IO::Socket::UNIX CPAN module for this feature: " . $@) if $@;
PeerAddr => $override_ip, if (!-S $o_unixsocket) {
PeerPort => $o_port, nagios_exit($phpfpm,"UNKNOWN","$o_unixsocket is not an UNIX socket");
); }
if (!$sock) { $sock = IO::Socket::UNIX->new(
nagios_exit($phpfpm,"CRITICAL", "Cannot connect to $override_ip : $o_port !"); Type => SOCK_STREAM(),
Peer => $o_unixsocket,
);
if (!$sock) {
nagios_exit($phpfpm,"CRITICAL", "Cannot connect to UNIX socket $o_unixsocket !");
}
} else {
eval "use IO::Socket::INET;";
nagios_exit($phpfpm,"UNKNOWN","You need to activate IO::Socket::INET CPAN module for this feature: " . $@) if $@;
if (!defined($o_port)) {
$o_port = 9000;
}
$sock = IO::Socket::INET->new(
PeerAddr => $override_ip,
PeerPort => $o_port,
);
if (!$sock) {
nagios_exit($phpfpm,"CRITICAL", "Cannot connect to $override_ip : $o_port !");
}
} }
my $fastcgiClient = FCGI::Client::Connection->new(sock => $sock); my $fastcgiClient = FCGI::Client::Connection->new(sock => $sock);
$url = $o_url; $url = $o_url;
@ -315,16 +345,16 @@ if (defined($o_fastcgi)) {
'' ''
); );
if (defined ($o_debug)) { if (defined ($o_debug)) {
print "\nDEBUG: FASCGI requested url\n"; print "\nDEBUG: FASTCGI requested url\n";
print $url; print $url;
print "\nDEBUG: FASCGI response: STDERR\n"; print "\nDEBUG: FASTCGI response: STDERR\n";
print $stderr; print $stderr;
} }
$response = fcgi_response->new($stdout, $o_debug); $response = fcgi_response->new($stdout, $o_debug);
} else { } else {
# -- HTTP # -- HTTP
eval "use LWP::UserAgent;"; eval "use LWP::UserAgent;";
nagios_exit($phpfpm,"UNKNOWN","You need to activate LWP::UserAgent CPAN module for this feature: " . $@) if $@; nagios_exit($phpfpm,"UNKNOWN","You need to install LWP::UserAgent CPAN module for this feature: " . $@) if $@;
#use LWP::UserAgent; #use LWP::UserAgent;
my $proto='http://'; my $proto='http://';
@ -397,7 +427,7 @@ if (defined($o_fastcgi)) {
if (!defined($o_cacert_file)) { if (!defined($o_cacert_file)) {
eval "use Mozilla::CA;"; eval "use Mozilla::CA;";
nagios_exit($phpfpm,"UNKNOWN","You need to activate Mozilla::CA CPAN module for this feature, or use --cacert option: " . $@) if $@; nagios_exit($phpfpm,"UNKNOWN","You need to install Mozilla::CA CPAN module for this feature, or use --cacert option: " . $@) if $@;
$o_cacert_file = Mozilla::CA::SSL_ca_file(); $o_cacert_file = Mozilla::CA::SSL_ca_file();
} }
#$ssl_opts{"SSL_ca_path"} = '/usr/share/ca-certificates/mozilla/'; #$ssl_opts{"SSL_ca_path"} = '/usr/share/ca-certificates/mozilla/';
@ -572,7 +602,7 @@ if ($response->is_success) {
$LastMaxListenQueue = <$FH>; $LastMaxListenQueue = <$FH>;
close ($FH); close ($FH);
if (defined ($o_debug)) { if (defined ($o_debug)) {
print ("\nDebug: data from temporary file:\n"); print ("\nDEBUG: data from temporary file:\n");
print ("LastUptime: $LastUptime LastAcceptedConn: $LastAcceptedConn LastMaxChildrenReached: $LastMaxChildrenReached LastMaxListenQueue: $LastMaxListenQueue \n"); print ("LastUptime: $LastUptime LastAcceptedConn: $LastAcceptedConn LastMaxChildrenReached: $LastMaxChildrenReached LastMaxListenQueue: $LastMaxListenQueue \n");
} }
} }

11
nagios-nrpe/tasks/main.yml
View file

@ -1,5 +1,5 @@
--- ---
- name: packages are installed - name: base nrpe & plugins packages are installed
apt: apt:
name: name:
- nagios-nrpe-server - nagios-nrpe-server
@ -12,6 +12,15 @@
tags: tags:
- nagios-nrpe - nagios-nrpe
- name: custom plugin dependencies packages are installed
apt:
name:
- libfcgi-client-perl
state: present
tags:
- nagios-plugins
- name: custom configuration is present - name: custom configuration is present
template: template:
src: evolix.cfg.j2 src: evolix.cfg.j2