Return to CHECKRPMS CVS log

Up to [LON-CAPA] / loncom / build

- &check_with_apt() added to report if installed .deb packages need updating for
Debian/Ubuntu.
- &check_with_zypper() used for SuSE 11.1.

    1: #!/usr/bin/perl
    2: #
    3: # The LearningOnline Network with CAPA
    4: # Checks status of RPM packages on system.
    5: #
    6: # Copyright Michigan State University Board of Trustees
    7: #
    8: # This file is part of the LearningOnline Network with CAPA (LON-CAPA).
    9: #
   10: # LON-CAPA is free software; you can redistribute it and/or modify
   11: # it under the terms of the GNU General Public License as published by
   12: # the Free Software Foundation; either version 2 of the License, or
   13: # (at your option) any later version.
   14: #
   15: # LON-CAPA is distributed in the hope that it will be useful,
   16: # but WITHOUT ANY WARRANTY; without even the implied warranty of
   17: # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   18: # GNU General Public License for more details.
   19: #
   20: # You should have received a copy of the GNU General Public License
   21: # along with LON-CAPA; if not, write to the Free Software
   22: # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
   23: #
   24: # /home/httpd/html/adm/gpl.txt
   25: #
   26: # http://www.lon-capa.org/
   27: #
   28: 
   29: =pod
   30: 
   31: =head1 NAME
   32: 
   33: B<CHECKRPMS> - automated status report about RPMs (RHEL/Fedora/CentOS/SuSE) 
   34:                or debs (Debian/Ubuntu) on a system. 
   35: 
   36: =head1 DESCRIPTION
   37: 
   38: This file automates the process of checking for available updates
   39: to LON-CAPA systems. distprobe is used to determine the Linux distribution.
   40: 
   41: The utility which is used to complete the check depends on the distro:
   42: 
   43: fedora, rhel 5/5+, centos, scientific - yum
   44: suse 9.X and sles9 - you
   45: suse 10.2,10.3,11.1 - zypper 
   46: sles10,suse10.1 - rug
   47: rhel 4 - up2date
   48: debian, ubuntu - apt-get
   49: others - check-rpms
   50: 
   51: Created by amalgamating previous distribution-specific CHECKRPMS.dist files (where dist was one of: fedora, rhel, suse, sles10, default).
   52: 
   53: Must be run as root or www.
   54: 
   55: =cut
   56: 
   57: use strict;
   58: use lib '/home/httpd/lib/perl/';
   59: use LONCAPA::Configuration;
   60: use Apache::loncommon();
   61: 
   62: my $tmpfile = '/tmp/CHECKRPMS.'.$$;
   63: my $perlvar= LONCAPA::Configuration::read_conf('loncapa.conf');
   64: 
   65: # Determine who we email
   66: my $defdom = $perlvar->{'lonDefDomain'};
   67: my $origmail = $perlvar->{'lonAdmEMail'};
   68: my $emailto = &Apache::loncommon::build_recipient_list(undef,
   69:                                    'packagesmail',$defdom,$origmail);
   70: my $subj = $perlvar->{'lonHostID'};
   71: 
   72: # Get Linux distro
   73: open(PIPE, "$perlvar->{'lonDaemons'}/distprobe |");
   74: my $distro = <PIPE>;
   75: close(PIPE);
   76: 
   77: undef($perlvar);
   78: 
   79: my $hostname = `hostname`;
   80: chomp($hostname);
   81: open(TMPFILE,">$tmpfile");
   82: print TMPFILE localtime(time).'    '.$hostname."\n";
   83: close(TMPFILE);
   84: 
   85: my ($cmd,$send,$addsubj);
   86: if ($distro =~ /^fedora\d+$/) {
   87:     $cmd = 'yum update';
   88:     &prepare_msg($tmpfile,$cmd);
   89:     ($send,$addsubj) = &check_with_yum($tmpfile);
   90: } elsif ($distro =~ /^(suse|sles)9\.?\d?$/) {
   91:     $cmd = 'you';
   92:     &prepare_msg($tmpfile,$cmd);
   93:     ($send,$addsubj) = &check_with_you($tmpfile);
   94: } elsif ($distro =~ /^suse(\d{2,})\.(\d+)$/) {
   95:     my $version =$1;
   96:     my $subversion = $2;
   97:     if (($version > 10) || (($version == 10) && ($subversion > 1))) { 
   98:         $cmd = 'zypper up';
   99:         &prepare_msg($tmpfile,$cmd);
  100:         ($send,$addsubj) = &check_with_zypper($tmpfile);
  101:     } else {
  102:         $cmd = 'rug up';
  103:         &prepare_msg($tmpfile,$cmd);
  104:         ($send,$addsubj) = &check_with_rug($tmpfile);
  105:     }
  106: } elsif ($distro =~ /^sles10$/) {
  107:     $cmd = 'rug up';
  108:     &prepare_msg($tmpfile,$cmd);
  109:     ($send,$addsubj) = &check_with_rug($tmpfile);
  110: } elsif ($distro =~ /^rhes(\d+)$/) {
  111:     my $version = $1;
  112:     if ($version == 4) {
  113:         $cmd ='up2date -u --nox';
  114:         &prepare_msg($tmpfile,$cmd);
  115:         ($send,$addsubj) = &check_with_up2date($tmpfile);
  116:     } elsif ($version > 4) {
  117:         $cmd = 'yum update';
  118:         &prepare_msg($tmpfile,$cmd);
  119:         ($send,$addsubj) = &check_with_yum($tmpfile);
  120:     }
  121: } elsif ($distro =~ /^centos\d+$/) {
  122:     $cmd = 'yum update';
  123:     &prepare_msg($tmpfile,$cmd);
  124:     ($send,$addsubj) = &check_with_yum($tmpfile);
  125: } elsif ($distro =~ /^scientific\d+\.\d$/) {
  126:     $cmd = 'yum update';
  127:     &prepare_msg($tmpfile,$cmd);
  128:     ($send,$addsubj) = &check_with_yum($tmpfile);
  129: } elsif ($distro =~ /^(debian|ubuntu)\d+/) {
  130:     $cmd = 'apt-get upgrade';
  131:     &prepare_msg($tmpfile,$cmd);
  132:     ($send,$addsubj) = &check_with_apt($tmpfile);
  133: } else {
  134:     $cmd = '/usr/local/bin/check-rpms --update';
  135:     ($send,$addsubj) = &check_with_checkrpms($tmpfile);
  136: }
  137: if ($send) {
  138:     $subj .= $addsubj;
  139:     system(qq{mail -s '$subj' "$emailto" < $tmpfile});
  140: }
  141: 
  142: sub prepare_msg {
  143:     my ($tmpfile,$cmd) = @_;
  144:     #
  145:     # Put some nice text in $tmpfile
  146:     open(TMPFILE,">>$tmpfile");
  147:     print TMPFILE <<ENDHEADER;
  148: Your system needs to be updated.  Please execute (as root)
  149: 
  150: $cmd
  151: 
  152: to bring it up to date.
  153: 
  154: This is very important for the security of your server.  The packages which need to be updated are listed below.
  155: 
  156: ENDHEADER
  157:     close(TMPFILE);
  158:     return;
  159: }
  160: 
  161: sub check_with_you {
  162:     my ($tmpfile) =@_;
  163:     my $you = '/usr/bin/online_update';
  164:     my $sendflag = 0;
  165:     my $append_to_subj;
  166: 
  167:     if (open (PIPE, "$you -k -len 2>&1 |")) {
  168:         my $output=<PIPE>;
  169:         close(PIPE);
  170:         chomp $output;
  171:         unless ($output eq 'No updates available.') {
  172:             if (open (PIPE, "$you -s -d -len |grep ^INSTALL |")) {
  173:                 my @updates = <PIPE>;
  174:                 close(PIPE);
  175:                 my $allpackages;
  176:                 foreach my $line (@updates) {
  177:                     my $package = substr($line,rindex($line,'/')+1);
  178:                     if ($package ne '') {
  179:                         $allpackages .= $package;
  180:                     }
  181:                 }
  182:                 if ($allpackages ne '') {
  183:                     open(TMPFILE,">>$tmpfile");
  184:                     print TMPFILE $allpackages;
  185:                     close(TMPFILE);
  186:                     $sendflag = 1;
  187:                     $append_to_subj = ' RPMS to upgrade';
  188:                 }
  189:             } else {
  190:                 $sendflag = 1;
  191:                 $append_to_subj = ' Error running RPM update script';
  192:             }
  193:         }
  194:     } else {
  195:         $sendflag = 1;
  196:         $append_to_subj = ' Error running RPM update script';
  197:     }
  198:     return ($sendflag,$append_to_subj);
  199: }
  200: 
  201: sub check_with_yum {
  202:     my ($tmpfile) = @_;
  203:     my $yum = '/usr/bin/yum';
  204:     my $sendflag = 0;
  205:     my $append_to_subj;
  206: 
  207:     #
  208:     # Execute yum command
  209:     my $command = $yum.' check-update '.'>>'.$tmpfile;
  210:     system($command);
  211: 
  212:     my $returnvalue = $?>>8;
  213: 
  214:     #
  215:     # Determine status of yum run
  216:     if (100 == $returnvalue) {
  217:         $sendflag = 1;
  218:         $append_to_subj = ' RPMS to upgrade';
  219:     } elsif (0 != $returnvalue) {
  220:         $sendflag = 1;
  221:         $append_to_subj = ' Error running RPM update script';
  222:     } else {
  223:         # yum returned 0, so everything is up to date.
  224:     }
  225:     return ($sendflag,$append_to_subj);
  226: }
  227: 
  228: sub check_with_up2date {
  229:     my ($tmpfile) = @_;
  230:     my $up2date = '/usr/bin/up2date-nox';
  231:     my $sendflag = 0;
  232:     my $append_to_subj;
  233:     #
  234:     # Execute online_update command to check for updates
  235:     my $up2date_error = 1;
  236:     if (open (PIPE, "$up2date -l 2>&1 |")) {
  237:         my @result=<PIPE>;
  238:         close(PIPE);
  239:         my $output; 
  240:         foreach my $line (@result) {
  241:             if ($line =~ /^The following Packages were marked to be skipped by your configuration:/) {
  242:                 last;
  243:             } else {
  244:                 $output .= $line;
  245:             }
  246:         } 
  247:         if (@result > 0) {
  248:             if ($output =~ /Fetching Obsoletes list/) {
  249:                 $up2date_error = 0;
  250:                 if ($output =~ /Name\s+Version\s+Rel\s+[\n\r\f]+\-+[\n\r\f]+(.+)/s) {
  251:                     my $packagelist = $1;
  252:                     if ($packagelist ne '' && $packagelist !~ /^[\s\n\r\f]+$/) {
  253:                         open(TMPFILE,">>$tmpfile");
  254:                         print TMPFILE $packagelist;
  255:                         close(TMPFILE);
  256:                         $append_to_subj = ' RPMS to upgrade';
  257:                         $sendflag = 1;
  258:                     }
  259:                 }
  260:             }
  261:         }
  262:     }
  263:     if ($up2date_error) {
  264:         $append_to_subj = ' Error running RPM update script';
  265:         $sendflag = 1;
  266:     }
  267:     return ($sendflag,$append_to_subj);
  268: }
  269: 
  270: sub check_with_rug {
  271:     my ($tmpfile) = @_;
  272:     my $rug = '/usr/bin/rug';
  273:     my $sendflag = 0;
  274:     my $append_to_subj;
  275:     #
  276:     # Execute rug command to check for updates
  277:     if (open (PIPE, "$rug up -N 2>&1 |")) {
  278:         my @output=<PIPE>;
  279:         close(PIPE);
  280:         chomp(@output);
  281:         my @clean_output;
  282:         foreach my $line (@output) {
  283:             if ($line =~ /^Waking\sup\sZMD\.\.\./) {
  284:                 next;
  285:             } elsif ($line eq 'Done') {
  286:                 next;
  287:             } elsif ($line eq '') {
  288:                 next;
  289:             } elsif ($line eq 'The following packages will be installed:') {
  290:                 next;
  291:             } elsif ($line eq 'Resolving Dependencies...') {
  292:                 next;
  293:             } elsif ($line eq 'Transaction...') {
  294:                 last;
  295:             } elsif ($line eq 'No updates are available.') {
  296:                 last;
  297:             } elsif ($line eq 'Downloading Packages...') {
  298:                 last;
  299:             } else {
  300:                 push(@clean_output,$line);
  301:             }
  302:         }
  303:         if (@clean_output > 0) {
  304:             open(TMPFILE,">>$tmpfile");
  305:             print TMPFILE join("\n",@clean_output);
  306:             close(TMPFILE);
  307:             $append_to_subj= ' RPMS to upgrade';
  308:             $sendflag = 1;
  309:          }
  310:     } else {
  311:         $append_to_subj = ' Error running RPM update check';
  312:         $sendflag = 1;
  313:     }
  314:     return ($sendflag,$append_to_subj);
  315: }
  316: 
  317: sub check_with_zypper {
  318:     my ($tmpfile) = @_;
  319:     my $zypper = '/usr/bin/zypper';
  320:     my $sendflag = 0;
  321:     my $append_to_subj;
  322:     my $header;
  323:     #
  324:     # Execute zypper command to check for updates
  325:     if (open (PIPE, "$zypper lu 2>&1 |")) {
  326:         my @output=<PIPE>;
  327:         close(PIPE);
  328:         chomp(@output);
  329:         my @clean_output;
  330:         foreach my $line (@output) {
  331:             if ($line eq 'Restoring system sources...') {
  332:                 next;
  333:             } elsif ($line =~ /^Parsing\smetadata\sfor\s/) {
  334:                 next;
  335:             } elsif ($line eq 'Parsing RPM database...') {
  336:                 next;
  337:             } elsif ($line  =~ /^Catalog\s+\|\s+Name\s+\|\s+Version\s+\|\s+Category\s+\|\s+Status$/) {
  338:                 $header = $line."\n";
  339:                 next;
  340:             } elsif ($line =~ /^[-+]+$/) {
  341:                 $header .= $line."\n";
  342:                 next;
  343:             } elsif ($line eq 'WARNING: These are only the updates affecting the updater itself.') {
  344:                 next;
  345:             } elsif ($line eq 'There are others available too.') {
  346:                 next;
  347:             } else {
  348:                 push(@clean_output,$line);
  349:             }
  350:         }
  351:         if (@clean_output > 0) {
  352:             open(TMPFILE,">>$tmpfile");
  353:             my $message = join("\n",@clean_output);
  354:             print TMPFILE $header.$message;
  355:             close(TMPFILE);
  356:             $append_to_subj= ' RPMS to upgrade';
  357:             $sendflag = 1;
  358:         }
  359:     } else {
  360:         $append_to_subj = ' Error running RPM update check';
  361:         $sendflag = 1;
  362:     }
  363:     return ($sendflag,$append_to_subj);
  364: }
  365: 
  366: sub check_with_apt {
  367:     my ($tmpfile) = @_;
  368:     my $apt = '/usr/bin/apt-get';
  369:     my $sendflag = 0;
  370:     my $append_to_subj;
  371:     my $header;
  372:     my @chg_package;
  373:     #
  374:     # Execute apt-get command to update distributions
  375:     system ("$apt update > /dev/null");
  376:     my $returnvalue = $?>>8;
  377:     if ($returnvalue == 0) {
  378:         # Execute apt-get commands to check for upgrades
  379:         if (open (PIPE, "$apt -y --dry-run upgrade  2>&1 |")) {
  380:             my @output=<PIPE>;
  381:             close(PIPE);
  382:             chomp(@output);
  383:             foreach my $line (@output) {
  384:                 $line =~ s/^\s+//;
  385:                 my @items = split(/\s+/,$line);
  386:                 if ($items[0] eq "Inst") {
  387:                     push(@chg_package,$items[1]);
  388:                 }
  389:             }
  390:             if (@chg_package > 0) {
  391:                 $header = 'apt-get upgrade found the following packages need updating:'.
  392:                           "\n\n";
  393:                 open(TMPFILE,">>$tmpfile");
  394:                 my $message = join("\n",@output);
  395:                 print TMPFILE $header.$message;
  396:                 close(TMPFILE);
  397:                 $append_to_subj= ' deb packages to upgrade';
  398:                 $sendflag = 1;
  399:             }
  400:         } else {
  401:             $append_to_subj = ' Error running deb upgrade check';
  402:             $sendflag = 1;
  403:         }
  404:     } else {
  405:         $append_to_subj = ' Error running deb update check';
  406:         $sendflag = 1;
  407:     }
  408:     return ($sendflag,$append_to_subj);
  409: }
  410: 
  411: sub check_with_checkrpms {
  412:     my ($tmpfile,$perlvar) = @_;
  413:     my $checkrpms = '/usr/local/bin/check-rpms';
  414:     my $sendflag = 0;
  415:     my $append_to_subj;
  416: 
  417:     # Run Martin Seigert's checkrpms script.  See
  418:     # See http://www.sfu.ca/acs/security/linux/check-rpms.html 
  419:     # for more information.
  420: 
  421:     #
  422:     # Check that checkrpms is installed and is the proper version...
  423:     if (! -e $checkrpms) {
  424:        open(TMPFILE,">>$tmpfile");
  425:        print TMPFILE <<END;
  426: 
  427: Unable to locate check-rpms on your system.  Please go to
  428: http://www.sfu.ca/acs/security/linux/check-rpms.html, download and
  429: install check-rpms on this system.
  430: 
  431: END
  432:         $append_to_subj = ' Error running RPM update check';
  433:         $sendflag = 1; 
  434:     } else {
  435:         #
  436:         # Run check-rpms and capture its output
  437:         if (open (PIPE, "$checkrpms 2>&1 |")) {
  438:             my $output=<PIPE>;
  439:             close(PIPE);
  440:             if ($output ne '') {
  441:                 $output = <<"END";
  442: 
  443: checkrpms checked the status of the packages on your system and
  444: produced the following output:
  445: -------------------------------------------------------
  446: $output
  447: -------------------------------------------------------
  448: If there are rpms which need to be installed, please log into
  449: $perlvar->{'lonHostID'} and run the following command
  450: 
  451: $checkrpms --update
  452: 
  453: If there are kernel packages to be installed, use
  454: 
  455: $checkrpms --update --install-kernel
  456: 
  457: Keeping your system up to date is very important.
  458: Ensuring you are using up to date software is a prerequisite for a
  459: secure system.
  460: 
  461: END
  462:                 open(TMPFILE,">>$tmpfile");
  463:                 print TMPFILE $output;
  464:                 close(TMPFILE);
  465:                 $append_to_subj = ' RPMS to upgrade';
  466:                 $sendflag = 1; 
  467:             }
  468:         }
  469:     }
  470:     return ($sendflag,$append_to_subj);
  471: }