dynmotd/templates/dynmotd_bin.erb

#! /usr/bin/env sh

#############################################################################
#
# Usage:
# * Run it as user: <%= scope.lookupvar('dynmotd::dynmotd_bin_path') %>
# * Run it at user login:
# <file bash /etc/profile>
#   <%= scope.lookupvar('dynmotd::dynmotd_bin_path') %>
# </file>
# * Or set a cron job with a privileged user (access log files, ...)
# <file bash /etc/cron.d/dynmotd>
#   */30 * * * * root rm -f /etc/motd && <%= scope.lookupvar('dynmotd::dynmotd_bin_path') %> > /etc/motd
# </file>
#############################################################################

#### Colors definition
BLACK='\033[30;40m'
RED='\033[0;31m'
REDB='\033[1;31m'
GREEN='\033[1;32m'
YELLOW='\033[1;33m'
BLUE='\033[34;40m'
MAGENTA='\033[0;35m'
CYAN='\033[36;40m'
WHITE='\033[0;37m'
WHITEB='\033[1;37m'
RESET='\033[0m'

## Return the state of processes passed in parameters
# process_info $PROCESS_LIST_TO_MONITOR $MESSAGE
process_info() {
  local PROCESS_LIST="${1}"
  local MSG="${2}"

  for PROCESS in ${PROCESS_LIST}; do
    MSG="${MSG}${MAGENTA}+ "
    if (ps ax | grep -v grep | grep ${PROCESS} > /dev/null); then
      MSG="${MSG}${WHITEB}${PROCESS}${RESET} [ ${GREEN}RUNNING${RESET} ] "
    else
      MSG="${MSG}${WHITEB}${PROCESS}${RESET} [ ${REDB}NOT RUNNING${RESET} ] "
    fi
  done

  printf '%b' "${MSG}"
}

## Return the listening socket
# service_info $PORT_LIST_TO_MONITOR $MESSAGE
service_info() {
  local PORT_LIST="${1}"
  local MSG="${2}"

  for PORT in ${PORT_LIST}; do
    MSG="${MSG}${MAGENTA}+ "
    # If a port listen
    if (ss -lutn|grep -m1 ":${PORT}" > /dev/null); then
      # Example: "tcp/127.0.0.1:25"
      #MSG="${MSG}${GREEN}$(ss -lutn|grep -m1 ":${PORT}"|awk '{print $1"/"$5}')${RESET} "
      MSG="${MSG}${GREEN}$(ss -lutn|grep ${PORT}|sort|head -n1|awk '{print $1"/"$5}')${RESET} "
    else
      # Example: "22: NOT LISTENING"
      MSG="${MSG}${REDB}${PORT}: NOT LISTENING${RESET} "
    fi
  done

  printf '%b' "${MSG}"
}

## Return the number of occurrence a pattern is present in a file
# and a color (red:>0, green:=0)
get_pattern_count() {
  local GREP_PAT="${1}"
  local FILE="${2}"
  local EXP_VAL="${3}"

  # Count the pattern in the file
  NUM=$(grep -E "${GREP_PAT}" "${FILE}" | wc -l)

  # If $EXP_VAL exist ++ the $NUM and $EXP_VAL are equal
  if [ "${EXP_VAL}" ] && [ "${NUM}" = "${EXP_VAL}" ]; then
    MSG="${GREEN}${NUM}"
  else
    MSG="${REDB}${NUM}"
  fi

  printf '%b' "${MSG}"
}


#+++++++++++++++++++: System Data :+++++++++++++++++++
HOSTNAME=$(hostname)
NET_ADDR=$(hostname -I)
KERNEL_VER=$(uname -r)
UPTIME=$(uptime | sed 's/.*up ([^,]*), .*/1/')
CORE_NUMBER=$(grep "model name" /proc/cpuinfo | wc -l)
CPU_MODEL=$(grep -m1 "model name" /proc/cpuinfo | awk -F: '{print $2}')
MEM_FREE=$(grep MemFree /proc/meminfo | awk '{print $2}')
MEM_TOTAL=$(grep MemTotal /proc/meminfo | awk '{print $2}')
SWAP_FREE=$(grep SwapFree /proc/meminfo | awk '{print $2}')
SWAP_TOTAL=$(grep SwapTotal /proc/meminfo | awk '{print $2}')

#++++++++++++++++++++: User Data :++++++++++++++++++++++
USERNAME=$(whoami)
USER_SESSION=$(who | grep $USER | wc -l)
PROC_COUNT=$(ps -Afl | wc -l)
PROC_COUNT=$(expr $PROC_COUNT - 5)
# The "ulimit" from sh don't support the -u option
PROC_LIMIT=$(ulimit)

#++++++++++++: Authentication Information :+++++++++++++
# Get only one "auth.log" file path, the most recent
# Simpliest way to get it?
AUTH_LOG_FILE=$(find /var/log -iname 'auth.log' -type f -printf '%TY-%Tm-%Td_%TT %p\n' | sort -r | tail -n1 | cut -d' ' -f2)
SSH_USER_LOGIN=$(grep 'session opened' "${AUTH_LOG_FILE}" | awk '/sshd/' | awk "/${USERNAME}/" | wc -l)


MOTD_ORIG='/etc/motd.orig'
# If an original Motd exist, print it
if [ -f ${MOTD_ORIG} ]; then
  printf '%b' "${RESET}${MAGENTA}+++++++++++++++++++++++: ${WHITE}MoTD${MAGENTA} :++++++++++++++++++++++++${RESET}"
  while read -r line; do
    printf '\n%s' "${line}"
  done < ${MOTD_ORIG}
fi


printf '%b' "\n${RESET}${MAGENTA}+++++++++++++++++++: ${WHITE}System Data${MAGENTA} :+++++++++++++++++++++${RESET}
${MAGENTA}+ ${WHITE}Hostname\t${MAGENTA}= ${GREEN}${HOSTNAME}
${MAGENTA}+ ${WHITE}Addresses\t${MAGENTA}= ${GREEN}${NET_ADDR}
${MAGENTA}+ ${WHITE}Kernel\t${MAGENTA}= ${GREEN}${KERNEL_VER}
${MAGENTA}+ ${WHITE}Uptime\t${MAGENTA}=${GREEN}${UPTIME}
${MAGENTA}+ ${WHITE}CPU\t\t${MAGENTA}= ${GREEN}${CORE_NUMBER}x${CPU_MODEL}
${MAGENTA}+ ${WHITE}Memory\t${MAGENTA}= ${GREEN}${MEM_FREE}(free)/${MEM_TOTAL}(total) kB
${MAGENTA}+ ${WHITE}Swap\t\t${MAGENTA}= ${GREEN}${SWAP_FREE}(free)/${SWAP_TOTAL}(total) kB"


printf '%b' "\n${RESET}${MAGENTA}++++++++++++++++++++: ${WHITE}User Data${MAGENTA} :++++++++++++++++++++++${RESET}
${MAGENTA}+ ${WHITE}Username\t${MAGENTA}= ${GREEN}${USERNAME}
${MAGENTA}+ ${WHITE}Sessions\t${MAGENTA}= ${GREEN}${USER_SESSION}
${MAGENTA}+ ${WHITE}Processes\t${MAGENTA}= ${GREEN}$PROC_COUNT of ${PROC_LIMIT} MAX"


printf '%b' "\n${MAGENTA}++++++++++++: ${WHITE}Authentication Information${MAGENTA} :+++++++++++++${RESET}"
## Count the number of session for all standard's user (with a home/)
#for SSH_USER in `ls -1 /home/`; do
#echo -e "${MAGENTA}+    ${WHITE}SSH login ${MAGENTA}= ${GREEN}`grep 'session opened' "${AUTH_LOG_FILE}" | awk '/sshd/' | awk "/${SSH_USER}/" | wc -l` times this week ("${SSH_USER}")"
##echo -e "${MAGENTA}+    ${WHITE}SSH login ${MAGENTA}= ${GREEN}`grep 'session opened' "${AUTH_LOG_FILE}".1 | awk '/login/' | awk "/${SSH_USER}/" | wc -l` times this week ("${SSH_USER}")"
#done

# Count the number of failed ssh authentication
SSH_FAIL_LOGIN=$(get_pattern_count 'sshd.*Failed' "${AUTH_LOG_FILE}" '0')
printf '%b' "\n${MAGENTA}+ ${WHITE}SSH fail\t${MAGENTA}= ${SSH_FAIL_LOGIN} fail(s) this week"
# Count the number of failed sudo authentication
SUDO_FAIL=$(get_pattern_count 'sudo.*authentication failure' "${AUTH_LOG_FILE}" '0')
SUDO_3_FAIL=$(get_pattern_count 'sudo.*3 incorrect password' "${AUTH_LOG_FILE}" '0')
printf '%b' "\n${MAGENTA}+ ${WHITE}Sudo fail\t${MAGENTA}= ${GREEN}${SUDO_FAIL} fail(s) this week
${MAGENTA}+ ${WHITE}Sudo 3 fails\t${MAGENTA}= ${GREEN}${SUDO_3_FAIL} fail(s) this week"


printf '%b' "\n${MAGENTA}++++++++++++++++++++: ${WHITE}Disk Usage${MAGENTA} :+++++++++++++++++++++${RESET}"
# Root partition
# Replace by rootfs in few kernel version
DISK_USAGE=$(df | grep -m1 "/$" | awk '{print $5}')
printf '%b' "\n${MAGENTA}+ ${WHITEB}/${RESET}\t[ ${DISK_USAGE} ] "

# Other partition
for PART in /boot /home /opt /tmp /usr /var /var/lib/vz; do
  # "/...$" : $ to grep only the mount point and not sub-directories (/var: OK; /mnt/temp: nOK)
  if (df | grep "${PART}$" > /dev/null); then
    DISK_USAGE=$(df | grep "${PART}$" | awk '{print $5}')
    printf '%b' "\n${MAGENTA}+ ${WHITEB}${PART}${RESET}\t[ ${DISK_USAGE} ] "
  fi
done


printf '%b' "\n${MAGENTA}+++++++++++++++++++: ${WHITE}Service Info${MAGENTA} :++++++++++++++++++++${RESET}"

## IF POSTFIX
if [ $(which postfix) ]; then
  MSG=$(process_info "postfix" '')
  MSG=$(service_info "25" "${MSG}")
  printf '%b' "\n${MSG}"
fi
## FI POSTFIX

### IF APACHE2
if [ $(which apache2) ]; then
  MSG=$(process_info "apache2" '')
  MSG=$(service_info "80 443" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI APACHE2

### IF NGINX
if [ $(which nginx) ]; then
  MSG=$(process_info "nginx" '')
  MSG=$(service_info "80 443" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI NGINX

### IF MYSQLD
if [ $(which mysqld) ]; then
  MSG=$(process_info "mysqld" '')
  MSG=$(service_info "3306" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF MYSQLD

### IF SLAPD
if [ $(which slapd) ]; then
  MSG=$(process_info "slapd" '')
  MSG=$(service_info "389 636" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF SLAPD

### IF ZFS
if [ $(which zfs) ]; then
  MSG=$(process_info "zfs" '')
  printf '%b' "\n${MSG}"
fi
### FI ZFS

### IF PUPPETMASTER
if [ $(which puppetmaster) ]; then
  MSG=$(process_info "puppetmaster" '')
  MSG=$(service_info "8140" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF SLAPD

### IF NFS Server
if [ $(which nfsd) ]; then
  MSG=$(process_info "nfsd" '')
  MSG=$(service_info "111 2049" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF SLAPD

### IF TFTPD
if [ $(which in.tftpd) ]; then
  MSG=$(process_info "in.tftpd" '')
  #MSG=$(service_info "69" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI TFTPD

### IF SQUID3
if [ $(which squid3) ]; then
  MSG=$(process_info "squid3" '')
  MSG=$(service_info "3128" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI SQUID3

### IF APT-CACHER-NG
if [ $(which apt-cacher-ng) ]; then
  MSG=$(process_info "apt-cacher-ng" '')
  MSG=$(service_info "3142" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI APT-CACHER-NG

### IF SSHD
if [ $(which sshd) ]; then
  MSG=$(process_info "sshd" '')
  MSG=$(service_info "22" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### FI SSH

### IF DHCPD
if [ $(which dhcpd) ]; then
  MSG=$(process_info "dhcpd" '')
  printf '%b' "\n${MSG}"
fi
### IF DHCPD

### IF FAIL2BAN
if [ $(which fail2ban-server) ]; then
  MSG=$(process_info "fail2ban" '')
  printf '%b' "\n${MSG}"
fi
### IF FAIL2BAN

### IF ETHERPAD
if [ $(which etherpad) ]; then
  MSG=$(process_info "etherpad" '')
  MSG=$(service_info "9001" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF ETHERPAD

### IF ETHERCALC
if [ $(which ethercalc) ]; then
  MSG=$(process_info "ethercalc" '')
  MSG=$(service_info "8000" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF ETHERCALC

### IF GITLAB
if [ $(which gitlab-ctl) ]; then
  MSG=$(process_info "nginx" '')
  MSG=$(service_info "80 443" "${MSG}")
  printf '%b' "\n${MSG}"
  MSG=$(process_info "gitlab" '')
  printf '%b' "\n${MSG}"
fi
### IF GITLAB

### IF XYMONSERVER
if [ $(which xymond) ]; then
  MSG=$(process_info "xymond" '')
  MSG=$(service_info "1984" "${MSG}")
  printf '%b' "\n${MSG}"
fi
### IF XYMONSERVER

### IF XYMONCLIENT
if [ $(which xymon) ]; then
  MSG=$(process_info "xymonlaunch" '')
  printf '%b' "\n${MSG}"
fi
### IF XYMONCLIENT


## Service need a warning if running
YELLOW_SERVICE='tmux screen glances htop automysqlbackup vzdump puppet aptitude'
for SERVICE in ${YELLOW_SERVICE}; do
  if (ps ax | grep -v grep | grep ${SERVICE} > /dev/null); then
    printf '%b' "\n${MAGENTA}+ ${WHITEB}${SERVICE}${RESET} [ ${YELLOW}RUNNING${RESET} ]"
  fi
done


#echo -e "${MAGENTA}+++++++++++++: ${RED}Maintenance Information${MAGENTA} :+++++++++++++++${RESET}
#${MAGENTA}+${RED}""
#echo -e "${MAGENTA}+++++++++++++++++++++++++++++++++++++++++++++++++++++++${RESET}"