Carlo Costanzo
1 month ago
parent
8670d3892e
commit
8e9ea094bf
@ -0,0 +1,8 @@
|
||||
[Unit]
|
||||
Description=Daily APT pending check (Home Assistant webhook)
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
ExecStart=/usr/local/sbin/apt_pending_check.sh "http://YOUR_HOME_ASSISTANT:8123/api/webhook/YOUR_APT_WEBHOOK" "docker_10"
|
||||
@ -0,0 +1,62 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
# Read-only APT pending check for Docker hosts.
|
||||
# Posts current package counts to the same Home Assistant webhook as apt_weekly.sh.
|
||||
|
||||
WEBHOOK_URL="$1"
|
||||
HOST_NAME="${2:-$(hostname -s)}"
|
||||
|
||||
if [[ -z "$WEBHOOK_URL" ]]; then
|
||||
echo "Usage: $0 <webhook_url> [host_name]" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
post_result() {
|
||||
local success="$1"
|
||||
local packages="$2"
|
||||
local security_packages="$3"
|
||||
local reboot_required="$4"
|
||||
local message="${5:-}"
|
||||
|
||||
payload=$(cat <<JSON
|
||||
{
|
||||
"event": "pending_check",
|
||||
"host": "${HOST_NAME}",
|
||||
"success": ${success},
|
||||
"updated": false,
|
||||
"packages": ${packages},
|
||||
"security_packages": ${security_packages},
|
||||
"reboot_required": ${reboot_required},
|
||||
"message": "${message}"
|
||||
}
|
||||
JSON
|
||||
)
|
||||
|
||||
curl -sS -X POST -H 'Content-Type: application/json' -d "$payload" "$WEBHOOK_URL" || true
|
||||
}
|
||||
|
||||
log() { echo "[$(date --iso-8601=seconds)] $*"; }
|
||||
|
||||
APT_OPTS=(-o Acquire::ForceIPv4=true)
|
||||
REBOOT=false
|
||||
if [[ -f /var/run/reboot-required ]]; then
|
||||
REBOOT=true
|
||||
fi
|
||||
|
||||
log "Refreshing package lists"
|
||||
if ! apt-get "${APT_OPTS[@]}" update -qq; then
|
||||
post_result false 0 0 "$REBOOT" "apt-get update failed"
|
||||
exit 0
|
||||
fi
|
||||
|
||||
UPGRADABLE="$(apt list --upgradable 2>/dev/null | tail -n +2 || true)"
|
||||
PACKAGES=0
|
||||
SECURITY_PACKAGES=0
|
||||
if [[ -n "$UPGRADABLE" ]]; then
|
||||
PACKAGES="$(printf '%s\n' "$UPGRADABLE" | sed '/^[[:space:]]*$/d' | wc -l)"
|
||||
SECURITY_PACKAGES="$(printf '%s\n' "$UPGRADABLE" | grep -Ec '(^|,|-)(security|esm-apps-security|esm-infra-security)(,|/|[[:space:]]|$)' || true)"
|
||||
fi
|
||||
|
||||
log "Posting pending package count to Home Assistant"
|
||||
post_result true "$PACKAGES" "$SECURITY_PACKAGES" "$REBOOT" ""
|
||||
@ -0,0 +1,11 @@
|
||||
[Unit]
|
||||
Description=Run APT pending check daily
|
||||
|
||||
[Timer]
|
||||
OnCalendar=*-*-* 07:30:00
|
||||
Persistent=true
|
||||
RandomizedDelaySec=10m
|
||||
Unit=apt_pending_check.service
|
||||
|
||||
[Install]
|
||||
WantedBy=timers.target
|
||||
@ -0,0 +1,10 @@
|
||||
[Unit]
|
||||
Description=Run APT maintenance twice weekly
|
||||
|
||||
[Timer]
|
||||
OnCalendar=Mon,Thu *-*-* 12:00:00
|
||||
Persistent=true
|
||||
Unit=apt_weekly.service
|
||||
|
||||
[Install]
|
||||
WantedBy=timers.target
|
||||
Loading…
Reference in new issue