summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJan Dittberner <jan@dittberner.info>2016-05-04 21:05:33 +0200
committerJan Dittberner <jan@dittberner.info>2016-05-04 22:14:08 +0200
commiteac9849ea85f179c68b1dcdfe205f1ac53717121 (patch)
tree7f8a908c0bacb0aaa8494d8961e175882a0173cc
parent4c63f35f036991c5ac4839feb230b3e293dae737 (diff)
downloadcacert-infradocs-eac9849ea85f179c68b1dcdfe205f1ac53717121.tar.gz
cacert-infradocs-eac9849ea85f179c68b1dcdfe205f1ac53717121.tar.xz
cacert-infradocs-eac9849ea85f179c68b1dcdfe205f1ac53717121.zip
Add description how to setup apt update monitoring
This commit adds the description how to setup package update monitoring on containers. The description was taken from https://wiki.cacert.org/SystemAdministration/Systems/Monitor and has been adapted to Sphinx markup.
-rw-r--r--docs/systems.rst39
1 files changed, 38 insertions, 1 deletions
diff --git a/docs/systems.rst b/docs/systems.rst
index e2bd588..52be239 100644
--- a/docs/systems.rst
+++ b/docs/systems.rst
@@ -26,6 +26,44 @@ General
setup a central syslog service and install syslog clients in each container
+.. topic:: Setup package update monitoring for a new container
+
+ For Icinga to be able to check the update status of packages on you server
+ you need to install NRPE, a helper service. Install the necessary packages::
+
+ sudo aptitude install nagios-plugins-basic nagios-nrpe-server
+
+ Put :doc:`systems/monitor` on the list of allowed hosts to access the NRPE
+ service by adding the following line to :file:`/etc/nagios/nrpe_local.cfg`::
+
+ allowed_hosts=172.16.2.18
+
+ Tell the NRPE service that there is such a thing as the check_apt command by
+ creating the file :file:`/etc/nagios/nrpe.d/apt.cfg` with the following
+ contents::
+
+ # 'check_apt' command definition
+ command[check_apt]=/usr/lib/nagios/plugins/check_apt
+
+ # 'check_apt_distupgrade' command definition
+ command[check_apt_distupgrade]=/usr/lib/nagios/plugins/check_apt -d
+
+ Restart the NRPE service::
+
+ sudo service nagios-nrpe-server restart
+
+ Check that everything went well by going to https://monitor.cacert.org/,
+ going to the APT service on the host and clicking :guilabel:`"Re-schedule
+ the next check of this service"`. Make sure that :guilabel:`"Force Check"`
+ is checked and click :guilabel:`"Commit"`. Now you should see a page with a
+ green background. If not something went wrong, please contact the
+ :doc:`systems/monitor` administrators with the details.
+
+ That's it, now the package update status should be properly displayed in
+ Icinga.
+
+.. todo:: think about replacing nrpe with Icinga2 satellites
+
Checklist
---------
@@ -48,5 +86,4 @@ Checklist
Pin: release a=stable
Pin-Priority: -1
-.. todo:: think about replacing nrpe with Icinga2 satellites
.. todo:: document how to setup the system-admin alias on the email system