dsa-check-running-kernel: handle -unsigned packages

[mirror/dsa-nagios.git] / dsa-nagios-checks / checks / dsa-check-running-kernel

diff --git a/dsa-nagios-checks/checks/dsa-check-running-kernel b/dsa-nagios-checks/checks/dsa-check-running-kernel
index ccdfd80..467c219 100755 (executable)
--- a/dsa-nagios-checks/checks/dsa-check-running-kernel
+++ b/dsa-nagios-checks/checks/dsa-check-running-kernel
@@ -3,7 +3,7 @@
 # Check if the running kernel has the same version string as the on-disk
 # kernel image.
 
-# Copyright 2008,2009,2011 Peter Palfrader
+# Copyright 2008,2009,2011,2012,2013,2014 Peter Palfrader
 # Copyright 2009 Stephen Gran
 # Copyright 2010,2012,2013 Uli Martens
 # Copyright 2011 Alexander Reichle-Schmehl
@@ -37,13 +37,13 @@ get_offset() {
 
        file="$1"
        needle="$2"
+
        perl -e '
                undef $/;
-               $i = index(<>, "'"$needle"'");
-               if ($i < 0) {
-                       exit 1;
-               };
-               print $i,"\n"' < "$file"
+               $i = 0; $k=<>;
+               while (($i = index($k, "'"$needle"'", $i)) >= 0) {
+                       print $i++,"\n";
+               }; ' < "$file"
 }
 
 get_avail() {
@@ -57,12 +57,14 @@ get_avail() {
 
        # DSA uses kernel versions of the form 2.6.29.3-dsa-dl380-oldxeon, where
        # Debian uses versions of the form 2.6.29-2-amd64
-       if [ "${kervers#3}" != "$kervers" ]; then
-               metavers=$(echo $kervers | sed -r -e 's/^3\.[0-9].[0-9]+-[A-Za-z0-9\.]+-(.*)/\1/')
-       elif [ "${kervers//dsa}" != "$kervers" ]; then
-               metavers=$(echo $kervers | sed -r -e 's/^2\.(4|6)\.[0-9]+([\.0-9]+?)-(.*)/2.\1-\3/')
+       if [ "${kervers#2}" != "$kervers" ]; then
+               if [ "${kervers//dsa}" != "$kervers" ]; then
+                       metavers=$(echo $kervers | sed -r -e 's/^2\.(4|6)\.[0-9]+([\.0-9]+?)-(.*)/2.\1-\3/')
+               else
+                       metavers=$(echo $kervers | sed -r -e 's/^2\.(4|6)\.[0-9]+-[A-Za-z0-9\.]+-(.*)/2.\1-\2/')
+               fi
        else
-               metavers=$(echo $kervers | sed -r -e 's/^2\.(4|6)\.[0-9]+-[A-Za-z0-9\.]+-(.*)/2.\1-\2/')
+               metavers=$(echo $kervers | sed -r -e 's/^[0-9]+\.[0-9]+(\.[0-9])?+-[A-Za-z0-9\.]+-(.*)/\2/')
        fi
 
        # Attempt to track back to a metapackage failed.  bail
@@ -111,11 +113,12 @@ get_avail() {
        fi
 
        local availvrs=$(apt-cache policy ${imagename} 2>/dev/null | grep '^  Candidate' | awk '{print $2}')
-       local kernelversion=$(apt-cache policy ${prefix}-image-${kervers} 2>/dev/null | grep '^  Installed:' | awk '{print $2}')
-
-       if [ "$availvrs" = "$kernelversion" ]; then
-               return 0
-       fi
+       local kernelversion
+       for kernelversion in $(apt-cache policy ${prefix}-image-${kervers} ${prefix}-image-${kervers}-unsigned 2>/dev/null | grep '^  Installed:' | awk '{print $2}' | grep -F -v '(none)' ); do
+               if [ "$availvrs" = "$kernelversion" ]; then
+                       return 0
+               fi
+       done
 
        echo "$kernelversion != $availvrs"
        return 1
@@ -129,18 +132,12 @@ cat_vmlinux() {
        filter="$3"
        hdroff="$4"
 
-       off=`get_offset "$image" $header`
-       local ret="$?"
-       if [ "$ret" != 0 ]; then
-               # not found, exit
-               return 1
-       fi
-
-       (if [ "$off" != 0 ]; then
-          dd ibs="$((off+hdroff))" skip=1 count=0
-        fi &&
-        dd bs=512k) < "$image"  2>/dev/null | $filter 2>/dev/null
-       return 0
+       get_offset "$image" $header | head -n 5 | while read off; do
+               (if [ "$off" != 0 ]; then
+                  dd ibs="$((off+hdroff))" skip=1 count=0
+                fi &&
+                dd bs=512k) < "$image"  2>/dev/null | $filter 2>/dev/null
+       done
 }
 
 get_image_linux() {
@@ -149,13 +146,13 @@ get_image_linux() {
        image="$1"
 
        # gzip compressed image
-       if cat_vmlinux "$image" "\x1f\x8b\x08\x00"      "zcat"   0; then return; fi
-       if cat_vmlinux "$image" "\x1f\x8b\x08\x08"      "zcat"   0; then return; fi
+       cat_vmlinux "$image" "\x1f\x8b\x08\x00"      "zcat"   0
+       cat_vmlinux "$image" "\x1f\x8b\x08\x08"      "zcat"   0
        # lzma compressed image
-       if cat_vmlinux "$image" "\x00\x00\x00\x02\xff"  "xzcat" -1; then return; fi
-       if cat_vmlinux "$image" "\x00\x00\x00\x04\xff"  "xzcat" -1; then return; fi
+       cat_vmlinux "$image" "\x00\x00\x00\x02\xff"  "xzcat" -1
+       cat_vmlinux "$image" "\x00\x00\x00\x04\xff"  "xzcat" -1
        # xz compressed image
-       if cat_vmlinux "$image" "\xfd\x37\x7a\x58\x5a " "xzcat"  0; then return; fi
+       cat_vmlinux "$image" "\xfd\x37\x7a\x58\x5a " "xzcat"  0
 
        echo "ERROR: Unable to extract kernel image." 2>&1
        exit 1
@@ -168,9 +165,9 @@ freebsd_check_running_version() {
        local r="$(uname -r)"
        local v="$(uname -v| sed -e 's/^#[0-9]*/&:/')"
 
-       local q='@\(#\)FreeBSD '"$r $v"
+       local q='@(#)FreeBSD '"$r $v"
 
-       if zcat "$imagefile" | $STRINGS | egrep -q "$q"; then
+       if zcat "$imagefile" | $STRINGS | grep -F -q "$q"; then
                echo "OK"
        else
                echo "not OK"