├── apt.conf.d
    └── 02periodic
├── zabbix_agentd.d
    └── apt.conf
├── README.md
└── templates
    └── apt-updates.xml


/apt.conf.d/02periodic:
--------------------------------------------------------------------------------
1 | APT::Periodic::Enable "1";
2 | APT::Periodic::Update-Package-Lists "1";
3 | 


--------------------------------------------------------------------------------
/zabbix_agentd.d/apt.conf:
--------------------------------------------------------------------------------
1 | # Treat security and regular updates differently
2 | # This is just a simulation, that can be run under zabbix user
3 | # Since updating packages lists (apt-get update) requires root user,
4 | # use APT::Periodic or some other functionality for that
5 | UserParameter=apt.security,apt-get -s upgrade | grep -ci ^inst.*security | tr -d '\n'
6 | UserParameter=apt.updates,apt-get -s upgrade | grep -iPc '^Inst((?!security).)*$' | tr -d '\n'
7 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | Zabbix template for monitoring APT package updates.
 2 | 
 3 | This template uses `-s` simulation option when invoking `apt-get`, so no root access is needed for Zabbix user during polling.
 4 | 
 5 | # Notes
 6 | However, root access is required for updating APT repositories. Since Zabbix runs under a dedicated user, it can be done either by using `sudo` in agent configuration script below, using a dedicated `crontab` entry to invoke `apt-get update` periodically or use `APT::Periodic` functionality bundled inside the APT system itself. Support for the `APT::Periodic` is included in this setup.
 7 | 
 8 | Since `APT::Periodic` is executed via already existing APT maintenace script located in `cron.daily`, the minimum period of updating  repositories is once a day. If shorter period is required, a spearate `cron.hourly` script is needed instead.
 9 | 
10 | 
11 | # Installation
12 | 1. Copy `apt.conf.d/02periodic` script to `/etc/apt/apt.conf.d` directory to configure daily automatic package repository updates using `APT::Periodic`.
13 | 2. Copy `zabbix_agentd.d/apt.conf` to the Zabbix agent's configuration directory (usually located in `/etc/zabbix`).
14 | 3. Import `templates/apt-updates.xml` to Zabbix frontend.


--------------------------------------------------------------------------------
/templates/apt-updates.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <zabbix_export>
  3 |     <version>3.2</version>
  4 |     <date>2017-01-29T14:52:23Z</date>
  5 |     <groups>
  6 |         <group>
  7 |             <name>Templates</name>
  8 |         </group>
  9 |     </groups>
 10 |     <templates>
 11 |         <template>
 12 |             <template>Template App APT Updates</template>
 13 |             <name>Template App APT Updates</name>
 14 |             <description/>
 15 |             <groups>
 16 |                 <group>
 17 |                     <name>Templates</name>
 18 |                 </group>
 19 |             </groups>
 20 |             <applications>
 21 |                 <application>
 22 |                     <name>APT</name>
 23 |                 </application>
 24 |             </applications>
 25 |             <items>
 26 |                 <item>
 27 |                     <name>Security Updates</name>
 28 |                     <type>0</type>
 29 |                     <snmp_community/>
 30 |                     <multiplier>0</multiplier>
 31 |                     <snmp_oid/>
 32 |                     <key>apt.security</key>
 33 |                     <delay>900</delay>
 34 |                     <history>90</history>
 35 |                     <trends>365</trends>
 36 |                     <status>0</status>
 37 |                     <value_type>3</value_type>
 38 |                     <allowed_hosts/>
 39 |                     <units/>
 40 |                     <delta>0</delta>
 41 |                     <snmpv3_contextname/>
 42 |                     <snmpv3_securityname/>
 43 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 44 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 45 |                     <snmpv3_authpassphrase/>
 46 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 47 |                     <snmpv3_privpassphrase/>
 48 |                     <formula>1</formula>
 49 |                     <delay_flex/>
 50 |                     <params/>
 51 |                     <ipmi_sensor/>
 52 |                     <data_type>0</data_type>
 53 |                     <authtype>0</authtype>
 54 |                     <username/>
 55 |                     <password/>
 56 |                     <publickey/>
 57 |                     <privatekey/>
 58 |                     <port/>
 59 |                     <description/>
 60 |                     <inventory_link>0</inventory_link>
 61 |                     <applications>
 62 |                         <application>
 63 |                             <name>APT</name>
 64 |                         </application>
 65 |                     </applications>
 66 |                     <valuemap/>
 67 |                     <logtimefmt/>
 68 |                 </item>
 69 |                 <item>
 70 |                     <name>Non-Critical Updates</name>
 71 |                     <type>0</type>
 72 |                     <snmp_community/>
 73 |                     <multiplier>0</multiplier>
 74 |                     <snmp_oid/>
 75 |                     <key>apt.updates</key>
 76 |                     <delay>900</delay>
 77 |                     <history>90</history>
 78 |                     <trends>365</trends>
 79 |                     <status>0</status>
 80 |                     <value_type>3</value_type>
 81 |                     <allowed_hosts/>
 82 |                     <units/>
 83 |                     <delta>0</delta>
 84 |                     <snmpv3_contextname/>
 85 |                     <snmpv3_securityname/>
 86 |                     <snmpv3_securitylevel>0</snmpv3_securitylevel>
 87 |                     <snmpv3_authprotocol>0</snmpv3_authprotocol>
 88 |                     <snmpv3_authpassphrase/>
 89 |                     <snmpv3_privprotocol>0</snmpv3_privprotocol>
 90 |                     <snmpv3_privpassphrase/>
 91 |                     <formula>1</formula>
 92 |                     <delay_flex/>
 93 |                     <params/>
 94 |                     <ipmi_sensor/>
 95 |                     <data_type>0</data_type>
 96 |                     <authtype>0</authtype>
 97 |                     <username/>
 98 |                     <password/>
 99 |                     <publickey/>
100 |                     <privatekey/>
101 |                     <port/>
102 |                     <description/>
103 |                     <inventory_link>0</inventory_link>
104 |                     <applications>
105 |                         <application>
106 |                             <name>APT</name>
107 |                         </application>
108 |                     </applications>
109 |                     <valuemap/>
110 |                     <logtimefmt/>
111 |                 </item>
112 |             </items>
113 |             <discovery_rules/>
114 |             <httptests/>
115 |             <macros/>
116 |             <templates/>
117 |             <screens/>
118 |         </template>
119 |     </templates>
120 |     <triggers>
121 |         <trigger>
122 |             <expression>{Template App APT Updates:apt.security.last()}&gt;0 and {Template App APT Updates:apt.updates.last()}&gt;0</expression>
123 |             <recovery_mode>0</recovery_mode>
124 |             <recovery_expression/>
125 |             <name>{ITEM.LASTVALUE1} security and {ITEM.LASTVALUE2} regular updates on {HOST.NAME}</name>
126 |             <correlation_mode>0</correlation_mode>
127 |             <correlation_tag/>
128 |             <url/>
129 |             <status>0</status>
130 |             <priority>2</priority>
131 |             <description/>
132 |             <type>0</type>
133 |             <manual_close>1</manual_close>
134 |             <dependencies/>
135 |             <tags/>
136 |         </trigger>
137 |         <trigger>
138 |             <expression>{Template App APT Updates:apt.updates.last()}&gt;0 and {Template App APT Updates:apt.security.last()}=0</expression>
139 |             <recovery_mode>0</recovery_mode>
140 |             <recovery_expression/>
141 |             <name>{ITEM.LASTVALUE} regular updates on {HOST.NAME}</name>
142 |             <correlation_mode>0</correlation_mode>
143 |             <correlation_tag/>
144 |             <url/>
145 |             <status>0</status>
146 |             <priority>1</priority>
147 |             <description/>
148 |             <type>0</type>
149 |             <manual_close>1</manual_close>
150 |             <dependencies/>
151 |             <tags/>
152 |         </trigger>
153 |         <trigger>
154 |             <expression>{Template App APT Updates:apt.security.last()}&gt;0 and {Template App APT Updates:apt.updates.last()}=0</expression>
155 |             <recovery_mode>0</recovery_mode>
156 |             <recovery_expression/>
157 |             <name>{ITEM.LASTVALUE} security updates on {HOST.NAME}</name>
158 |             <correlation_mode>0</correlation_mode>
159 |             <correlation_tag/>
160 |             <url/>
161 |             <status>0</status>
162 |             <priority>2</priority>
163 |             <description/>
164 |             <type>0</type>
165 |             <manual_close>1</manual_close>
166 |             <dependencies/>
167 |             <tags/>
168 |         </trigger>
169 |     </triggers>
170 | </zabbix_export>
171 | 


--------------------------------------------------------------------------------