local/check-mk-agent-configure

   1 #!/bin/sh -eu
   2 tool=$(readlink -e "${0%/*}/..")
   3 . "$tool"/local/lib.sh
   4
   5 "$tool"/local/apt-get-install check-mk-agent xinetd
   6 sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF
   7         service check_mk
   8         {
   9                 type            = UNLISTED
  10                 port            = 6556
  11                 socket_type     = stream
  12                 protocol        = tcp
  13                 wait            = no
  14                 user            = root
  15                 server          = /usr/bin/check_mk_agent
  16                 only_from       = 127.0.0.1 91.216.110.7 91.224.149.11
  17                 #log_on_success =
  18                 disable         = yes
  19                 }
  20         EOF
  21
  22 sudo adduser --system --home /var/lib/check_mk_agent --group check_mk_agent --shell /bin/sh
  23 sudo install -m 440 -o root -g root /dev/stdin /etc/sudoers.d/check_mk_agent <<-EOF
  24         check_mk_agent        ALL=NOPASSWD: /usr/bin/check_mk_agent
  25         EOF
  26 sudo install -m 700 -o check_mk_agent -g check_mk_agent -d /var/lib/check_mk_agent/.ssh
  27 sudo install -m 600 -o check_mk_agent -g check_mk_agent /dev/stdin /var/lib/check_mk_agent/etc/ssh/authorized_keys <<-EOF
  28         command="sudo /usr/bin/check_mk_agent",no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa 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 nagios@gaffe.grenode.net
  29         EOF
  30
  31 sudo install -m 640 -o root -g root /dev/stdin /etc/check_mk/mrpe.cfg <<-EOF
  32         check_gre_apt /usr/lib/nagios/plugins/check_apt -t 20
  33         check_gre_swap /usr/lib/nagios/plugins/check_swap -w 90% -c 25%
  34         check_gre_disk /usr/lib/nagios/plugins/check_disk -w 20% -c 10%
  35         check_gre_load /usr/lib/nagios/plugins/check_load -w 15,10,5 -c 30,25,20
  36         EOF