Add Firewall check
This commit is contained in:
parent
adcea4296f
commit
6dfffd9f0f
@ -20,17 +20,43 @@ HEADER1
|
|||||||
################################################################################
|
################################################################################
|
||||||
# Main Main Main
|
# Main Main Main
|
||||||
################################################################################
|
################################################################################
|
||||||
|
header1 "Check Firewall
|
||||||
|
# Our zones used are external and nterconnecti and client and the bond devices
|
||||||
|
# have to be attached to one of these"
|
||||||
|
${ANSIBLE_CMD} -b all -m shell \
|
||||||
|
-a 'for zone in external interconnect client; do
|
||||||
|
echo "### ${zone} ###"
|
||||||
|
echo -n "running: "
|
||||||
|
firewall-cmd --zone=external --list-interfaces
|
||||||
|
echo -n "permanent: "
|
||||||
|
firewall-cmd --permanent --zone=external --list-interfaces
|
||||||
|
echo ""
|
||||||
|
done'
|
||||||
|
|
||||||
|
|
||||||
header1 "Check NTP/Chrony
|
header1 "Check NTP/Chrony
|
||||||
# - correct address/name
|
# - correct address/name
|
||||||
# - Reach is > 0"
|
# - Reach is > 0"
|
||||||
|
${ANSIBLE_CMD} -b all -m shell -a "timedatectl"
|
||||||
${ANSIBLE_CMD} -b all -m shell -a "chronyc sources"
|
${ANSIBLE_CMD} -b all -m shell -a "chronyc sources"
|
||||||
|
|
||||||
|
|
||||||
header1 "Check Mailing
|
header1 "Check Mailing
|
||||||
# - correct relay address/name
|
# - correct relay address/name
|
||||||
# - correct sender address
|
# - correct sender address
|
||||||
# - correct recipient address"
|
# - correct recipient address"
|
||||||
${ANSIBLE_CMD} -b all -m shell -a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
|
${ANSIBLE_CMD} -b all -m shell \
|
||||||
|
-a "grep -H ^relayhost /etc/postfix/main.cf; grep -H '^\ *from' /etc/kapacitor/kapacitor.conf"
|
||||||
|
|
||||||
|
|
||||||
|
header1 "Check Bonding"
|
||||||
|
${ANSIBLE_CMD} -b all -m shell \
|
||||||
|
-a 'for bond in /proc/net/bonding/bond*; do
|
||||||
|
echo "### ${bond##*/} ###"
|
||||||
|
egrep "Bonding Mode|MII Status|Slave Interface|Permanent HW addr|port state|Churn State|Aggregator ID" ${bond}
|
||||||
|
echo ""
|
||||||
|
done'
|
||||||
|
|
||||||
|
|
||||||
header1 "Do some generic tests with
|
header1 "Do some generic tests with
|
||||||
# fs-manager check all"
|
# fs-manager check all"
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user