From 0035b79fd8a2c32b78515e5f125382155ea985ed Mon Sep 17 00:00:00 2001
From: Tunui Franken <tfranken@protonmail.com>
Date: Sun, 16 Mar 2025 12:26:02 +0100
Subject: [PATCH] Add smart check

---
 inventory/host_vars/eumycota                         |  3 +++
 inventory/host_vars/lime2                            |  3 +++
 inventory/host_vars/lime2-test                       |  3 +++
 inventory/host_vars/mailserver-test                  |  4 ++++
 playbooks/icinga2.yml                                | 10 ++++++++++
 .../zones.d/global-templates/commands.conf.j2        |  5 +++++
 .../templates/zones.d/master/hosts.conf.j2           | 12 ++++++++++--
 .../templates/zones.d/master/services/common.conf.j2 |  8 ++++++++
 8 files changed, 46 insertions(+), 2 deletions(-)

diff --git a/inventory/host_vars/eumycota b/inventory/host_vars/eumycota
index 81beaf6..e82f933 100644
--- a/inventory/host_vars/eumycota
+++ b/inventory/host_vars/eumycota
@@ -46,3 +46,6 @@ vault_virtual_user_0_pwd: !vault |
           34656634613036613534353332383033386435376666376130326135346431643263663730643231
           6633343634323237370a613538626630666365303630646330626139353963303337616239626433
           62333539393833353334623564333938663830353635336434363663656336303533
+
+smart_devices:
+  - /dev/sda
diff --git a/inventory/host_vars/lime2 b/inventory/host_vars/lime2
index e621160..fc3f471 100644
--- a/inventory/host_vars/lime2
+++ b/inventory/host_vars/lime2
@@ -183,3 +183,6 @@ forgejo_git_ssh_keys:
           33356161333063383662353236363833336130353934386538623033306530626235303761616364
           62383836353065333731373063393930373365616166666465333535363836366539366330363461
           36333865623039386231
+
+smart_devices:
+  - /dev/mmcblk0
diff --git a/inventory/host_vars/lime2-test b/inventory/host_vars/lime2-test
index 1d944d6..f754506 100644
--- a/inventory/host_vars/lime2-test
+++ b/inventory/host_vars/lime2-test
@@ -1,3 +1,6 @@
 ---
 
 ipv4_addr: 10.1.2.80
+
+smart_devices:
+  - /dev/vda
diff --git a/inventory/host_vars/mailserver-test b/inventory/host_vars/mailserver-test
index b8f4dbb..476dd5e 100644
--- a/inventory/host_vars/mailserver-test
+++ b/inventory/host_vars/mailserver-test
@@ -1,3 +1,7 @@
 ---
 
 ipv4_addr: 10.1.2.25
+
+smart_devices:
+  - /dev/vda
+  - /dev/vdb
diff --git a/playbooks/icinga2.yml b/playbooks/icinga2.yml
index 9c70e73..8ee4e42 100644
--- a/playbooks/icinga2.yml
+++ b/playbooks/icinga2.yml
@@ -3,6 +3,7 @@
 - name: Setup Icinga2 common things
   gather_facts: false
   hosts: all
+  tags: common
   tasks:
     - name: Install required packages
       tags: install
@@ -16,6 +17,15 @@
           - monitoring-plugins-systemd
           - monitoring-plugins-contrib
         state: present
+    - name: Copy sudoers file for nagios as root (for check_smart)
+      become: true
+      ansible.builtin.copy:
+        content: 'nagios ALL=(root) NOPASSWD:/usr/lib/nagios/plugins/check_ide_smart'
+        dest: /etc/sudoers.d/nagios-smart
+        owner: root
+        group: root
+        mode: 0440
+        validate: 'visudo -cf %s'
 
 - name: Setup Icinga2 master
   gather_facts: true
diff --git a/roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2 b/roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2
index 476246a..a333a74 100644
--- a/roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2
+++ b/roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2
@@ -10,6 +10,11 @@ object CheckCommand "sudo_logfiles" {
     command = [ "sudo" ] + command
 }
 
+object CheckCommand "sudo_smart" {
+    import "smart"
+    command = [ "sudo" ] + command
+}
+
 # the original "systemd" CheckCommand uses /check_systemd.py as executable
 object CheckCommand "check_systemd" {
     import "systemd"
diff --git a/roles/icinga2_master/templates/zones.d/master/hosts.conf.j2 b/roles/icinga2_master/templates/zones.d/master/hosts.conf.j2
index a793ed5..83d0b5f 100644
--- a/roles/icinga2_master/templates/zones.d/master/hosts.conf.j2
+++ b/roles/icinga2_master/templates/zones.d/master/hosts.conf.j2
@@ -2,12 +2,20 @@
 
 object Host "{{ icinga2_master }}" {
     import "generic-host"
-
     address = "{{ hostvars[icinga2_master].ipv4_addr }}"
+{% for device in hostvars[icinga2_master].smart_devices %}
+    vars.smart_devices["smart::{{ device }}"] = {
+        smart_device = "{{ device }}"
+    }
+{% endfor %}
 }
 
 object Host "{{ icinga2_agent }}" {
     import "generic-host"
-
     address = "{{ hostvars[icinga2_agent].ipv4_addr }}"
+{% for device in hostvars[icinga2_agent].smart_devices %}
+    vars.smart_devices["smart::{{ device }}"] = {
+        smart_device = "{{ device }}"
+    }
+{% endfor %}
 }
diff --git a/roles/icinga2_master/templates/zones.d/master/services/common.conf.j2 b/roles/icinga2_master/templates/zones.d/master/services/common.conf.j2
index 951552a..56a79df 100644
--- a/roles/icinga2_master/templates/zones.d/master/services/common.conf.j2
+++ b/roles/icinga2_master/templates/zones.d/master/services/common.conf.j2
@@ -105,3 +105,11 @@ apply Service "systemd" {
     command_endpoint = host.name
     assign where true
 }
+
+apply Service for (device => config in host.vars.smart_devices) {
+    import "generic-service"
+    check_command = "sudo_smart"
+    command_endpoint = host.name
+    assign where true
+    vars += config
+}