Carlo Costanzo
1 month ago
parent
8670d3892e
commit
8e9ea094bf
@ -0,0 +1,8 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Daily APT pending check (Home Assistant webhook)
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=oneshot
|
||||||
|
ExecStart=/usr/local/sbin/apt_pending_check.sh "http://YOUR_HOME_ASSISTANT:8123/api/webhook/YOUR_APT_WEBHOOK" "docker_10"
|
||||||
@ -0,0 +1,62 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
# Read-only APT pending check for Docker hosts.
|
||||||
|
# Posts current package counts to the same Home Assistant webhook as apt_weekly.sh.
|
||||||
|
|
||||||
|
WEBHOOK_URL="$1"
|
||||||
|
HOST_NAME="${2:-$(hostname -s)}"
|
||||||
|
|
||||||
|
if [[ -z "$WEBHOOK_URL" ]]; then
|
||||||
|
echo "Usage: $0 <webhook_url> [host_name]" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
post_result() {
|
||||||
|
local success="$1"
|
||||||
|
local packages="$2"
|
||||||
|
local security_packages="$3"
|
||||||
|
local reboot_required="$4"
|
||||||
|
local message="${5:-}"
|
||||||
|
|
||||||
|
payload=$(cat <<JSON
|
||||||
|
{
|
||||||
|
"event": "pending_check",
|
||||||
|
"host": "${HOST_NAME}",
|
||||||
|
"success": ${success},
|
||||||
|
"updated": false,
|
||||||
|
"packages": ${packages},
|
||||||
|
"security_packages": ${security_packages},
|
||||||
|
"reboot_required": ${reboot_required},
|
||||||
|
"message": "${message}"
|
||||||
|
}
|
||||||
|
JSON
|
||||||
|
)
|
||||||
|
|
||||||
|
curl -sS -X POST -H 'Content-Type: application/json' -d "$payload" "$WEBHOOK_URL" || true
|
||||||
|
}
|
||||||
|
|
||||||
|
log() { echo "[$(date --iso-8601=seconds)] $*"; }
|
||||||
|
|
||||||
|
APT_OPTS=(-o Acquire::ForceIPv4=true)
|
||||||
|
REBOOT=false
|
||||||
|
if [[ -f /var/run/reboot-required ]]; then
|
||||||
|
REBOOT=true
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Refreshing package lists"
|
||||||
|
if ! apt-get "${APT_OPTS[@]}" update -qq; then
|
||||||
|
post_result false 0 0 "$REBOOT" "apt-get update failed"
|
||||||
|
exit 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
UPGRADABLE="$(apt list --upgradable 2>/dev/null | tail -n +2 || true)"
|
||||||
|
PACKAGES=0
|
||||||
|
SECURITY_PACKAGES=0
|
||||||
|
if [[ -n "$UPGRADABLE" ]]; then
|
||||||
|
PACKAGES="$(printf '%s\n' "$UPGRADABLE" | sed '/^[[:space:]]*$/d' | wc -l)"
|
||||||
|
SECURITY_PACKAGES="$(printf '%s\n' "$UPGRADABLE" | grep -Ec '(^|,|-)(security|esm-apps-security|esm-infra-security)(,|/|[[:space:]]|$)' || true)"
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Posting pending package count to Home Assistant"
|
||||||
|
post_result true "$PACKAGES" "$SECURITY_PACKAGES" "$REBOOT" ""
|
||||||
@ -0,0 +1,11 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Run APT pending check daily
|
||||||
|
|
||||||
|
[Timer]
|
||||||
|
OnCalendar=*-*-* 07:30:00
|
||||||
|
Persistent=true
|
||||||
|
RandomizedDelaySec=10m
|
||||||
|
Unit=apt_pending_check.service
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=timers.target
|
||||||
@ -0,0 +1,10 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Run APT maintenance twice weekly
|
||||||
|
|
||||||
|
[Timer]
|
||||||
|
OnCalendar=Mon,Thu *-*-* 12:00:00
|
||||||
|
Persistent=true
|
||||||
|
Unit=apt_weekly.service
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=timers.target
|
||||||
Loading…
Reference in new issue