123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354 |
- #!/bin/sh
- #
- # check_pollen - verify the pollen server on localhost is operating correctly
- #
- # Copyright (C) 2013 Dustin Kirkland <dustin.kirkland@gmail.com>
- #
- # This program is free software: you can redistribute it and/or modify
- # it under the terms of the GNU Affero General Public License as published by
- # the Free Software Foundation, version 3 of the License.
- #
- # This program is distributed in the hope that it will be useful,
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- # GNU Affero General Public License for more details.
- #
- # You should have received a copy of the GNU Affero General Public License
- # along with this program. If not, see <http://www.gnu.org/licenses/>.
- TMPDIR=$(mktemp -d -t "pollen.XXXXXXXXXXXX")
- trap "rm -rf ${TMPDIR} 2>/dev/null || true" EXIT HUP INT QUIT TERM
- md5sum1=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
- pollinate -t -i -s localhost -b -d - >"$TMPDIR/out" 2>"$TMPDIR/err" && RC=0 || RC=$?
- md5sum2=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
- bytes=$(wc -c "$TMPDIR/out" | awk '{print $1}')
- bpb=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $3}' | awk -F. '{print $1}')
- mean=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $5}' | awk -F. '{print $1}')
- if [ "$RC" != "0" ]; then
- echo "CRITICAL - pollen server did not properly respond to the test request [$RC]"
- cat "$TMPDIR/err" 1>&2
- exit 2
- fi
- if [ "$md5sum1" = "$md5sum2" ]; then
- echo "CRITICAL - pollen server did not properly log the test request [$RC]"
- grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true
- exit 2
- fi
- if [ -z "$bytes" ] || [ "$bytes" -lt 64 ]; then
- echo "WARNING - pollen server did not respond with at least 64 bytes [$bytes]"
- exit 1
- fi
- if [ -z "$bpb" ] || [ "$bpb" -lt 5 ]; then
- echo "WARNING - pollen server did not respond with sufficient entropy bits per byte [$bpb]"
- exit 1
- fi
- if [ -z "$mean" ] || [ "$mean" -lt 95 ] || [ "$mean" -gt 160 ]; then
- echo "WARNING - pollen server responded with poor entropy (bad arithmetic mean [$mean])"
- exit 1
- fi
- echo "OK - pollen server is online and responded correctly to the test request"
- exit 0
|