54 lines
2.2 KiB
Bash
Executable File
54 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# check_pollen - verify the pollen server on localhost is operating correctly
|
|
#
|
|
# Copyright (C) 2013-2025 Dustin Kirkland <dustin.kirkland@gmail.com>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, version 3 of the License.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
TMPDIR=$(mktemp -d -t "pollen.XXXXXXXXXXXX")
|
|
trap "rm -rf ${TMPDIR} 2>/dev/null || true" EXIT HUP INT QUIT TERM
|
|
|
|
md5sum1=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
|
|
pollinate -t -i -s localhost -b -d - >"$TMPDIR/out" 2>"$TMPDIR/err" && RC=0 || RC=$?
|
|
md5sum2=$(grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true | md5sum)
|
|
bytes=$(wc -c "$TMPDIR/out" | awk '{print $1}')
|
|
bpb=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $3}' | awk -F. '{print $1}')
|
|
mean=$(ent -t "$TMPDIR/out" | tail -n1 | awk -F, '{print $5}' | awk -F. '{print $1}')
|
|
|
|
if [ "$RC" != "0" ]; then
|
|
echo "CRITICAL - pollen server did not properly respond to the test request [$RC]"
|
|
cat "$TMPDIR/err" 1>&2
|
|
exit 2
|
|
fi
|
|
if [ "$md5sum1" = "$md5sum2" ]; then
|
|
echo "CRITICAL - pollen server did not properly log the test request [$RC]"
|
|
grep pollen /var/log/syslog /var/log/pollen/pollen.log 2>/dev/null || true
|
|
exit 2
|
|
fi
|
|
if [ -z "$bytes" ] || [ "$bytes" -lt 64 ]; then
|
|
echo "WARNING - pollen server did not respond with at least 64 bytes [$bytes]"
|
|
exit 1
|
|
fi
|
|
if [ -z "$bpb" ] || [ "$bpb" -lt 5 ]; then
|
|
echo "WARNING - pollen server did not respond with sufficient entropy bits per byte [$bpb]"
|
|
exit 1
|
|
fi
|
|
if [ -z "$mean" ] || [ "$mean" -lt 95 ] || [ "$mean" -gt 160 ]; then
|
|
echo "WARNING - pollen server responded with poor entropy (bad arithmetic mean [$mean])"
|
|
exit 1
|
|
fi
|
|
|
|
echo "OK - pollen server is online and responded correctly to the test request"
|
|
exit 0
|