From 441b3e9be16cf0862dec2ae13207055e0da6cea5 Mon Sep 17 00:00:00 2001
From: "Karl O. Pinc kop@karlpinc.com" <kop@karlpinc.com>
Date: Wed, 24 Jan 2024 23:02:39 +0000
Subject: [PATCH] Add needrestart_report to repo

---
 Makefile                |  7 +++--
 sbin/needrestart_report | 64 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 69 insertions(+), 2 deletions(-)
 create mode 100755 sbin/needrestart_report

diff --git a/Makefile b/Makefile
index 1f0b8f4..c0d1d19 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,4 @@
-# Copyright (C) 2023 The Meme Factory, Inc.  www.karlpinc.com
+# Copyright (C) 2023, 2024 The Meme Factory, Inc.  www.karlpinc.com
 #
 #   This program is free software: you can redistribute it and/or modify
 #   it under the terms of the GNU Affero General Public License as
@@ -142,7 +142,8 @@ destroy:
 
 CMD_TARGETS := /usr/local/lib/git_email_hook.sh \
                /usr/local/bin/sokwedb-venv-report \
-               /usr/local/bin/sokwedb-vpn-wait
+               /usr/local/bin/sokwedb-vpn-wait \
+               /usr/local/sbin/needrestart_report
 
 # Developers need permissions to install into the local directories
 DEV_GROUP := wwwdev
@@ -191,6 +192,8 @@ set-install-permissions:
 ##                      Tells user the VPN is up and does nothing
 ##   /usr/local/lib/git_email_hook.sh
 ##                      A git post-receive hook which emails push summaries
+##   /usr/local/sbin/needrestart_report
+##                      Emails a report when system services need restarting
 # Install the actual files
 $(CMD_TARGETS): /usr/local/% : % $(CMD_DEPENDS)
 	cp $< $@
diff --git a/sbin/needrestart_report b/sbin/needrestart_report
new file mode 100755
index 0000000..3f4d333
--- /dev/null
+++ b/sbin/needrestart_report
@@ -0,0 +1,64 @@
+#!/bin/bash
+# Send an email to root when needrestart reports something needing restart
+#
+# Copyright (C) 2023 The Meme Factory, Inc.
+# This program is distributed under the GNU GPL Version 3 or later.
+#
+# Karl O. Pinc <kop@karlpinc.com>
+
+export tfile=/tmp/$(basename $0).$$
+
+cleanup() {
+  rm -rf $tfile
+}
+
+trap cleanup EXIT
+
+# Run needrestart
+/usr/sbin/needrestart -b > $tfile
+
+# Parse needrestart output
+export kernel_status=$(grep '^NEEDRESTART-KSTA: ' < $tfile | cut -d ' ' -f 2)
+export services=$(grep '^NEEDRESTART-SVC: ' < $tfile | cut -d ' ' -f 2)
+export containers=$(grep '^NEEDRESTART-CONT: ' < $tfile | cut -d ' ' -f 2)
+
+# Report on kernel status
+export kernel_report=''
+if [ $kernel_status -eq 0 ] ; then
+  kernel_report=$'WARNING: Failed to detect kernel reboot status.\n'
+elif [ $kernel_status -gt 1 ] ; then
+  kernel_report=$'A reboot is needed to complete a kernel upgrade.\n'
+fi
+
+# Report on services status
+export services_report=''
+if [ -n "$services" ] ; then
+  services_report=$'Services needing restart with `systemctl restart $SERVICENAME`:\n'
+  services_report+="$services"
+  services_report+=$'\n'
+fi
+
+# Report on container status
+if [ -n "$containers" ] ; then
+  containers_report=$'Containers needing restart:\n'
+  containers_report+="$containers"
+  containers_report+=$'\n'
+fi
+
+# Combined report
+export report="$kernel_report"
+if [ -n "$services_report" ] ; then
+  [ -n "$report" ] && report+=$'\n'
+  report+="$services_report"
+fi
+if [ -n "$containers_report" ] ; then
+  [ -n "$report" ] && report+=$'\n'
+  report+="$containers_report"
+fi
+
+# Send email
+if [ -n "$report" ] ; then
+  printf '%s' "$report" \
+    | /usr/bin/mail -s "needrestart report from $(hostname)" root
+fi
+
-- 
2.34.1