339 lines
12 KiB
Bash
Executable File
339 lines
12 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
trap "exit" INT TERM
|
|
trap "kill 0" EXIT
|
|
PARENT_PID=$$
|
|
|
|
# Prepare
|
|
BACKGROUND_TASKS=()
|
|
|
|
if [[ "${USE_WATCHDOG}" =~ ^([nN][oO]|[nN])+$ ]]; then
|
|
echo -e "$(date) - USE_WATCHDOG=n, skipping watchdog..."
|
|
sleep 365d
|
|
exec $(readlink -f "$0")
|
|
fi
|
|
|
|
# Checks pipe their corresponding container name in this pipe
|
|
if [[ ! -p /tmp/com_pipe ]]; then
|
|
mkfifo /tmp/com_pipe
|
|
fi
|
|
|
|
# Common functions
|
|
progress() {
|
|
SERVICE=${1}
|
|
TOTAL=${2}
|
|
CURRENT=${3}
|
|
DIFF=${4}
|
|
[[ -z ${DIFF} ]] && DIFF=0
|
|
[[ -z ${TOTAL} || -z ${CURRENT} ]] && return
|
|
[[ ${CURRENT} -gt ${TOTAL} ]] && return
|
|
[[ ${CURRENT} -lt 0 ]] && CURRENT=0
|
|
PERCENT=$(( 200 * ${CURRENT} / ${TOTAL} % 2 + 100 * ${CURRENT} / ${TOTAL} ))
|
|
echo -ne "$(date) - ${SERVICE} health level: \e[7m${PERCENT}%\e[0m (${CURRENT}/${TOTAL}), health trend: "
|
|
[[ ${DIFF} =~ ^-[1-9] ]] && echo -en '[\e[41m \e[0m] ' || echo -en '[\e[42m \e[0m] '
|
|
echo "(${DIFF})"
|
|
}
|
|
|
|
get_container_ip() {
|
|
# ${1} is container
|
|
CONTAINER_ID=
|
|
CONTAINER_IP=
|
|
LOOP_C=1
|
|
until [[ ${CONTAINER_IP} =~ ^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]] || [[ ${LOOP_C} -gt 5 ]]; do
|
|
sleep 1
|
|
CONTAINER_ID=$(curl --silent --unix-socket /var/run/docker.sock http/containers/json?all=1 | jq -rc "map(select(.Names[] | contains (\"${1}\"))) | .[] .Id")
|
|
CONTAINER_IP=$(curl --silent --unix-socket /var/run/docker.sock http/containers/${CONTAINER_ID}/json | jq -r '.NetworkSettings.Networks[].IPAddress')
|
|
LOOP_C=$((LOOP_C + 1))
|
|
done
|
|
[[ ${LOOP_C} -gt 5 ]] && echo 240.0.0.0 || echo ${CONTAINER_IP}
|
|
}
|
|
|
|
# Check functions
|
|
nginx_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=16
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip nginx-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_ping -4 -H ${host_ip} -w 2000,10% -c 4000,100% -p2 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_http -4 -H ${host_ip} -u / -p 8081 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "Nginx" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
mysql_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=12
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip mysql-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_mysql -H ${host_ip} -P 3306 -u ${DBUSER} -p ${DBPASS} -d ${DBNAME} 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_mysql_query -H ${host_ip} -P 3306 -u ${DBUSER} -p ${DBPASS} -d ${DBNAME} -q "SELECT COUNT(*) FROM information_schema.tables" 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "MySQL/MariaDB" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
sogo_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=20
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip sogo-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_http -4 -H ${host_ip} -u /WebServerResources/css/theme-default.css -p 9192 -R md-default-theme 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_http -4 -H ${host_ip} -u /SOGo.index/ -p 20000 -R "SOGo\sGroupware" 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "SOGo" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
postfix_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=16
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip postfix-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_smtp -4 -H ${host_ip} -p 589 -f watchdog -C "RCPT TO:null@localhost" -C DATA -C . -R 250 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_smtp -4 -H ${host_ip} -p 589 -S 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "Postfix" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
dovecot_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=24
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip dovecot-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_smtp -4 -H ${host_ip} -p 24 -f "watchdog" -C "RCPT TO:<watchdog@invalid>" -L -R "User doesn't exist" 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_imap -4 -H ${host_ip} -p 993 -S -e "OK " 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_imap -4 -H ${host_ip} -p 143 -e "OK " 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_tcp -4 -H ${host_ip} -p 10001 -e "VERSION" 1>&2; err_count=$(( ${err_count} + $? ))
|
|
/usr/lib/nagios/plugins/check_tcp -4 -H ${host_ip} -p 4190 -e "Dovecot ready" 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "Dovecot" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
phpfpm_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=10
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip php-fpm-mailcow)
|
|
err_c_cur=${err_count}
|
|
cgi-fcgi -bind -connect ${host_ip}:9000 | grep PHP 1>&2; err_count=$(( ${err_count} + ($? * 2)))
|
|
/usr/lib/nagios/plugins/check_ping -4 -H ${host_ip} -w 2000,10% -c 4000,100% -p2 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "PHP-FPM" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
rspamd_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=10
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip rspamd-mailcow)
|
|
err_c_cur=${err_count}
|
|
SCORE=$(curl --silent ${host_ip}:11333/scan -d '
|
|
To: null@localhost
|
|
From: watchdog@localhost
|
|
|
|
Empty
|
|
' | jq -rc .required_score)
|
|
if [[ ${SCORE} != "9999" ]]; then
|
|
echo "Rspamd settings check failed" 1>&2
|
|
err_count=$(( ${err_count} + 1))
|
|
else
|
|
echo "Rspamd settings check succeeded" 1>&2
|
|
fi
|
|
/usr/lib/nagios/plugins/check_ping -4 -H ${host_ip} -w 2000,10% -c 4000,100% -p2 1>&2; err_count=$(( ${err_count} + $? ))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "Rspamd" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
dns_checks() {
|
|
err_count=0
|
|
diff_c=0
|
|
THRESHOLD=28
|
|
# Reduce error count by 2 after restarting an unhealthy container
|
|
trap "[ ${err_count} -gt 1 ] && err_count=$(( ${err_count} - 2 ))" USR1
|
|
while [ ${err_count} -lt ${THRESHOLD} ]; do
|
|
host_ip=$(get_container_ip unbound-mailcow)
|
|
err_c_cur=${err_count}
|
|
/usr/lib/nagios/plugins/check_dns -H google.com 1>&2; err_count=$(( ${err_count} + ($? * 2)))
|
|
/usr/lib/nagios/plugins/check_dns -s ${host_ip} -H google.com 1>&2; err_count=$(( ${err_count} + ($? * 2)))
|
|
dig +dnssec org. @${host_ip} | grep -E 'flags:.+ad' 1>&2; err_count=$(( ${err_count} + ($? * 2)))
|
|
[ ${err_c_cur} -eq ${err_count} ] && [ ! $((${err_count} - 1)) -lt 0 ] && err_count=$((${err_count} - 1)) diff_c=1
|
|
[ ${err_c_cur} -ne ${err_count} ] && diff_c=$(( ${err_c_cur} - ${err_count} ))
|
|
progress "Unbound" ${THRESHOLD} $(( ${THRESHOLD} - ${err_count} )) ${diff_c}
|
|
diff_c=0
|
|
sleep $(( ( RANDOM % 30 ) + 10 ))
|
|
done
|
|
return 1
|
|
}
|
|
|
|
# Create watchdog agents
|
|
(
|
|
while true; do
|
|
if ! nginx_checks; then
|
|
echo -e "\e[31m$(date) - Nginx hit error limit\e[0m"
|
|
echo nginx-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! mysql_checks; then
|
|
echo -e "\e[31m$(date) - MySQL hit error limit\e[0m"
|
|
echo mysql-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! phpfpm_checks; then
|
|
echo -e "\e[31m$(date) - PHP-FPM hit error limit\e[0m"
|
|
echo php-fpm-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! sogo_checks; then
|
|
echo -e "\e[31m$(date) - SOGo hit error limit\e[0m"
|
|
echo sogo-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! postfix_checks; then
|
|
echo -e "\e[31m$(date) - Postfix hit error limit\e[0m"
|
|
echo postfix-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! dovecot_checks; then
|
|
echo -e "\e[31m$(date) - Dovecot hit error limit\e[0m"
|
|
echo dovecot-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! dns_checks; then
|
|
echo -e "\e[31m$(date) - Unbound hit error limit\e[0m"
|
|
#echo unbound-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
(
|
|
while true; do
|
|
if ! rspamd_checks; then
|
|
echo -e "\e[31m$(date) - Rspamd hit error limit\e[0m"
|
|
echo rspamd-mailcow > /tmp/com_pipe
|
|
fi
|
|
done
|
|
) &
|
|
BACKGROUND_TASKS+=($!)
|
|
|
|
# Monitor watchdog agents, stop script when agents fails and wait for respawn by Docker (restart:always:n)
|
|
(
|
|
while true; do
|
|
for bg_task in ${BACKGROUND_TASKS[*]}; do
|
|
if ! kill -0 ${bg_task} 21>&2; then
|
|
echo "Worker ${bg_task} died, stopping watchdog and waiting for respawn..."
|
|
kill -TERM ${PARENT_PID}
|
|
fi
|
|
sleep 1
|
|
done
|
|
done
|
|
) &
|
|
|
|
# Restart container when threshold limit reached
|
|
while true; do
|
|
CONTAINER_ID=
|
|
read com_pipe_answer </tmp/com_pipe
|
|
if [[ ${com_pipe_answer} =~ .+-mailcow ]]; then
|
|
kill -STOP ${BACKGROUND_TASKS[*]}
|
|
sleep 3
|
|
CONTAINER_ID=$(curl --silent --unix-socket /var/run/docker.sock http/containers/json?all=1 | jq -rc "map(select(.Names[] | contains (\"${com_pipe_answer}\"))) | .[] .Id")
|
|
if [[ ! -z ${CONTAINER_ID} ]]; then
|
|
echo "Sending restart command to ${CONTAINER_ID}..."
|
|
curl --silent --unix-socket /var/run/docker.sock -XPOST http/containers/${CONTAINER_ID}/restart
|
|
fi
|
|
echo "Wait for restarted container to settle and continue watching..."
|
|
sleep 30s
|
|
kill -CONT ${BACKGROUND_TASKS[*]}
|
|
kill -USR1 ${BACKGROUND_TASKS[*]}
|
|
fi
|
|
done
|