X-Git-Url: https://git.cyclocoop.org/?p=lhc%2Fateliers.git;a=blobdiff_plain;f=local%2Fcheck-mk-agent-configure;h=bfc3a79befc9f972260f9e5c9ac8ebea4f7dd29c;hp=35b333f8809d9e9d6c552ad8f0d7ccad0bcb9301;hb=9888f935d3e24e909be772429e94046f7b5a8656;hpb=67a701dc951bc3a175e3a12900457db5b03a07ce diff --git a/local/check-mk-agent-configure b/local/check-mk-agent-configure index 35b333f..bfc3a79 100755 --- a/local/check-mk-agent-configure +++ b/local/check-mk-agent-configure @@ -2,14 +2,14 @@ tool=$(readlink -e "${0%/*}/..") . "$tool"/local/lib.sh -"$tool"/local/apt-get-install check-mk-agent +"$tool"/local/apt-get-install check-mk-agent xinetd sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF service check_mk { - #disable = yes - #server = /usr/bin/check_mk_caching_agent + disable = yes + server = /usr/bin/check_mk_agent log_on_success = - only_from = 127.0.0.1 91.216.110.7 + only_from = 127.0.0.1 91.216.110.7 91.224.149.11 port = 6556 protocol = tcp server = /usr/bin/check_mk_agent @@ -17,4 +17,19 @@ sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF type = UNLISTED user = root wait = no + } + EOF + +sudo adduser --system --home /var/lib/check_mk_agent --group check_mk_agent --shell /bin/sh +sudo install -m 440 -o root -g root /dev/stdin /etc/sudoers.d/check_mk_agent <<-EOF + check_mk_agent ALL=NOPASSWD: /usr/bin/check_mk_agent + EOF +sudo install -m 700 -o check_mk_agent -g check_mk_agent -d /var/lib/check_mk_agent/.ssh +sudo install -m 600 -o check_mk_agent -g check_mk_agent /dev/stdin /var/lib/check_mk_agent/etc/ssh/authorized_keys <<-EOF + command="sudo /usr/bin/check_mk_agent",no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa 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 nagios@gaffe.grenode.net + EOF + +sudo install -m 640 -o root -g root /dev/stdin /etc/check_mk/mrpe.cfg <<-EOF + check_gre_apt /usr/lib/nagios/plugins/check_apt -t 20 + check_gre_apt /usr/lib/nagios/plugins/check_swap -w 90% -c 25% EOF