ansible-roles/nagios-nrpe/files/alerts_wrapper

#!/bin/bash

# https://forge.evolix.org/projects/evolix-private/repository
#
# You should not alter this file.
# If you need to, create and customize a copy.

VERSION="21.04"
readonly VERSION

# base functions

show_version() {
    cat <<END
alerts_wrapper version ${VERSION}

Copyright 2018-2021 Evolix <info@evolix.fr>,
                    Jérémy Lecour <jlecour@evolix.fr>
                    and others.

alerts_wrapper comes with ABSOLUTELY NO WARRANTY.This is free software,
and you are welcome to redistribute it under certain conditions.
See the GNU General Public License v3.0 for details.
END
}
show_help() {
    cat <<END
alerts_wrapper wraps an NRPE command and overrides the return code.

Usage: alerts_wrapper [--limit 1d] --names check_name[,other_disable_names,...] <check command with optional arguments>
Usage: alerts_wrapper disable_name <check command with optional arguments>

Options
 --limit            max age of the "check file" ;
                    can be "1d" for 1 day, "5m" for 5 minutes…
                    or more complex expressions like "1w2d10m42s"
 --names            disable name (shoud contain at least the check name)
 --name             (deprecated) disable name (kept for backward compatibility)
 -h, --help         print this message and exit
 -V, --version      print version and exit
END
}

time_in_seconds() {
    if echo "${1}" | grep -E -q '^([0-9]+[wdhms])+$'; then
        echo "${1}" | sed 's/w/ * 604800 + /g; s/d/ * 86400 + /g; s/h/ * 3600 + /g; s/m/ * 60 + /g; s/s/ + /g; s/+ $//' | xargs expr
    elif echo "${1}" | grep -E -q '^([0-9]+$)'; then
        echo "${1} * 3600" | xargs expr
    else
        return 1
    fi
}

delay_from_alerts_disabled_file() {
    # $1: disabled file
    last_change=$(stat -c %Z "$1")
    limit_seconds=$(time_in_seconds "${wrapper_limit}" || time_in_seconds "${wrapper_limit_default}")
    limit_date=$(date --date "${limit_seconds} seconds ago" +"%s")

    echo $(( last_change - limit_date ))
}

enable_checks() {
    # $1: disable name
    if [ "$(id -u)" -eq "0" ] ; then
        /usr/local/bin/alerts_switch enable "$1"
    else
        sudo /usr/local/bin/alerts_switch enable "$1"
    fi
}

main() {
    ${check_command} > "${check_stdout}"
    check_rc=$?
    readonly check_rc

    delay=0

    for disable_name in ${disable_names}; do
        alerts_disabled_file="/var/lib/misc/${disable_name}_alerts_disabled"
        if [ -e "${alerts_disabled_file}" ]; then
            delay=$(delay_from_alerts_disabled_file "${alerts_disabled_file}")

            if [ "${delay}" -le "0" ]; then
                enable_checks "${disable_name}"
            fi
        fi

        if [ -e "${alerts_disabled_file}" ]; then
            formatted_last_change=$(date --date "@$(stat -c %Z "${alerts_disabled_file}")" +'%c')
            readonly formatted_last_change

            echo "ALERTS DISABLED for ${disable_names} (since ${formatted_last_change}, delay: ${delay} sec) - $(cat "${check_stdout}")"
        fi
    done

        if [ ${check_rc} = 0 ]; then
            # Nagios OK
            exit 0
        else
            # Nagios WARNING
            exit 1
        fi
    else
        cat "${check_stdout}"
        exit ${check_rc}
    fi
}

# Default: 1 day before re-enabling the check
wrapper_limit_default="1d"
readonly wrapper_limit_default

if [[ "${1}" =~ -.* ]]; then
    # parse options
    # based on https://gist.github.com/deshion/10d3cb5f88a21671e17a
    while :; do
        case $1 in
            -h|-\?|--help)
                show_help
                exit 0
                ;;
            -V|--version)
                show_version
                exit 0
                ;;

            --limit)
                # with value separated by space
                if [ -n "$2" ]; then
                    wrapper_limit=$2
                    shift
                else
                    printf 'ERROR: "--limit" requires a non-empty option argument.\n' >&2
                    exit 1
                fi
                ;;
            --limit=?*)
                # with value speparated by =
                wrapper_limit=${1#*=}
                ;;
            --limit=)
                # without value
                printf 'ERROR: "--limit" requires a non-empty option argument.\n' >&2
                exit 1
                ;;

            --name|--names)
                # with value separated by space
                if [ -n "$2" ]; then
                    disable_names=$2
                    shift
                else
                    printf 'ERROR: "--name" requires a non-empty option argument.\n' >&2
                    exit 1
                fi
                ;;
            --name=?*|--names=?*)
                # with value speparated by =
                disable_names=${1#*=}
                ;;
            --name=|--names=)
                # without value
                printf 'ERROR: "--name" requires a non-empty option argument.\n' >&2
                exit 1
                ;;

            --)
                # End of all options.
                shift
                break
                ;;
            -?*)
                # ignore unknown options
                printf 'WARN: Unknown option : %s\n' "$1" >&2
                exit 1
                ;;
            *)
                # Default case: If no more options then break out of the loop.
                break
                ;;
        esac

        shift
    done
    # The rest is the command
    check_command="$*"
else
    # no option is passed (backward compatibility with previous version)
    # treat the first argument as disable_names and the rest as the command
    disable_names="${1}"
    shift
    check_command="$*"
fi

# Default values or errors
if [ -z "${wrapper_limit}" ]; then
    wrapper_limit="${wrapper_limit_default}"
fi
if [ -z "${disable_names}" ]; then
    printf 'ERROR: You must specify a check name, with --names.\n' >&2
    exit 1
fi
if [ -z "${check_command}" ]; then
    printf 'ERROR: You must specify a command to execute.\n' >&2
    exit 1
fi

disable_names="all $(echo "${disable_names}" | tr ',' ' ')"
readonly disable_names
readonly check_command
readonly wrapper_limit

check_stdout=$(mktemp --tmpdir=/tmp "${disable_names}_stdout.XXXX")
readonly check_stdout

# shellcheck disable=SC2064
trap "rm ${check_stdout}" EXIT

main