Инициализация:

VOLPATH=/data/docker/zabbix-proxy
mkdir -p $VOLPATH/enc
openssl rand -hex 32 | tee $VOLPATH/enc/psk.key
touch $VOLPATH/docker-compose.yaml

docker-compose.yaml:

version: '3.5'

volumes:
  db_data: {}

services:
  zabbix-server:
    image: zabbix/zabbix-proxy-sqlite3:5.0-alpine-latest
    environment:
    - ZBX_HOSTNAME=zabbix-proxy.domain.com
    - ZBX_SERVER_HOST=zabbix.domain.com
    - ZBX_PROXYMODE=1 # 1-passive, 0-active
    - ZBX_TLSCONNECT=psk
    - ZBX_TLSACCEPT=psk
    - ZBX_TLSPSKIDENTITY=PSK IDENTITY 001
    - ZBX_TLSPSKFILE=psk.key
    volumes:
    - ${VOLPATH-/data/docker/zabbix-proxy}/enc:/var/lib/zabbix/enc
    - db_data:/var/lib/zabbix/db_data
    ports:
    - mode: host
      protocol: tcp
      published: 10051
      target: 10051
    stop_grace_period: 10s
    deploy:
      resources:
        limits:
          memory: 256m

Запуск:

#swarm
docker stack deploy --compose-file docker-compose.yaml zabbix-proxy

$ZABBIXVERSION="6.0.21"
$ZABBIXSERVER="zabbixproxy.domain.com"
$PSKKEY="0a7393cbe41516b0e3885237ee210a6997c9cce9c3324d0f020aebc26277acf8"
$PSKIDENT="NAME 001"
function zabbix{
  $URL="https://cdn.zabbix.com/zabbix/binaries/stable/6.0/$ZABBIXVERSION/zabbix_agent2-$ZABBIXVERSION-windows-amd64-openssl-static.zip"
  $ZABBIXPATH="$env:PROGRAMFILES\Zabbix Agent 2"
  $ZABBIXCONFIG="$ZABBIXPATH/conf/zabbix_agent2.conf"
  $Filename = [System.IO.Path]::GetFileName($URL)
  if (!(Test-Path "$env:Temp\$Filename")){
    [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
    $dl = New-Object net.webclient
    $dl.Downloadfile($URL, "$env:Temp\$Filename")
  }
  if (!(Test-Path "$env:Temp\$Filename")){exit 1}
  #& msiexec /l*v "$env:Temp\$Filename.log" /i "$env:Temp\$Filename" /qn /norestart LOGFILE=`"$ZABBIXPATH\zabix_agentd2.log`" SERVER=`"$ZABBIXSERVER`" SERVERACTIVE=`"$ZABBIXSERVER`" LISTENPORT=`"$ZABBIXAGENTPORT`" HOSTNAME=`"$env:COMPUTERNAME`" TLSCONNECT=psk TLSACCEPT=psk TLSPSKIDENTITY=`"$PSKIDENT`" TLSPSKVALUE=`"$PSKKEY`"
  if (Get-Service "Zabbix Agent 2" -ErrorAction Ignore){Stop-Service -Name "Zabbix Agent 2"}
  if (Test-Path -Path $ZABBIXPATH/bin/zabbix_agent2.exe.old -ErrorAction Ignore){Remove-Item $ZABBIXPATH/bin/zabbix_agent2.exe.old -Force}
  if (Test-Path -Path $ZABBIXPATH/bin/zabbix_agent2.exe -ErrorAction Ignore){Rename-Item -Path $ZABBIXPATH/bin/zabbix_agent2.exe -NewName zabbix_agent2.exe.old}
  if (Test-Path -Path "$env:Temp\zabbix"){Remove-Item "$env:Temp\zabbix" -Force -Recurse}
  Add-Type -AssemblyName System.IO.Compression.FileSystem
  [IO.Compression.ZipFile]::ExtractToDirectory("$env:Temp\$Filename","$env:Temp\zabbix")
  if (Test-Path -Path $ZABBIXPATH){Remove-Item $ZABBIXPATH -Force -Recurse -ErrorAction Ignore}
  if (!(Test-Path $ZABBIXPATH)){New-Item $ZABBIXPATH -type directory -Force}
  Move-Item -Path "$env:Temp\zabbix\*" -Destination $ZABBIXPATH -Force
  Get-ChildItem -Path $ZABBIXPATH -Directory | Remove-Item -Force -Recurse
  if (!($ZABBIXAGENTPORT)){$ZABBIXAGENTPORT=10050}
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*LogFile=.*' , "LogFile=$ZABBIXPATH\zabix_agentd2.log" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^Server=.*' , "Server=$ZABBIXSERVER" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*ListenPort=.*' , "ListenPort=$ZABBIXAGENTPORT" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^ServerActive=.*' , "ServerActive=$ZABBIXSERVER" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^Hostname=',"Hostname=" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*TLSConnect=.*',"TLSConnect=psk" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*TLSAccept=.*',"TLSAccept=psk" | Set-Content $ZABBIXCONFIG
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*TLSPSKIdentity=.*',"TLSPSKIdentity=$PSKIDENT" | Set-Content $ZABBIXCONFIG
  Write-Output "$PSKKEY" | Set-Content $ZABBIXPATH\bin\psk.key
  (Get-Content $ZABBIXCONFIG) -replace '^[#\s]*TLSPSKFile=.*',"TLSPSKFile=$ZABBIXPATH\bin\psk.key" | Set-Content $ZABBIXCONFIG
  if (Get-NetFirewallRule -DisplayName 'Zabbix Agent' -ErrorAction Ignore){Remove-NetFirewallRule -DisplayName 'Zabbix Agent'}
  New-NetFirewallRule -Name zabbixagent -DisplayName 'Zabbix Agent' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort $ZABBIXAGENTPORT
  if (!(Get-Service "Zabbix Agent 2" -ErrorAction Ignore)){& "$ZABBIXPATH\bin\zabbix_agent2.exe" --install --config "$ZABBIXCONFIG"}
  sc.exe failure "Zabbix Agent 2" actions= restart/180000/restart/180000/restart/180000 reset= 86400;
  Restart-Service -Name "Zabbix Agent 2"
  if (Test-Path -Path $ZABBIXPATH/bin/zabbix_agent2.exe.old -ErrorAction Ignore){Remove-Item $ZABBIXPATH/bin/zabbix_agent2.exe.old -Force}
  Write-Host 'Version:' (Get-Item $ZABBIXPATH/bin/zabbix_agent2.exe).VersionInfo.ProductVersion
}
 
 
zabbix

#!/bin/bash
ZABBIXSERVER="zabbixproxy.domain.com"
PSKKEY="0a7393cbe41516b0e3885237ee210a6997c9cce9c3324d0f020aebc26277acf8"
PSKIDENT="NAME 001"
zabbix(){
  if [ "$1" == "buster" ]; then
    URL="https://repo.zabbix.com/zabbix/5.0/debian/pool/main/z/zabbix-release/zabbix-release_5.0-1+buster_all.deb"
  else
    URL="https://repo.zabbix.com/zabbix/5.0/ubuntu/pool/main/z/zabbix-release/zabbix-release_5.0-1+focal_all.deb"
  fi
  wget $URL -O /tmp/zabbix-release.deb
  dpkg -i  /tmp/zabbix-release.deb
  apt-get update
  DEBIAN_FRONTEND=noninteractive apt-get install zabbix-agent2 -y
  sed -i "/^Server/s/=.*/=$ZABBIXSERVER/" /etc/zabbix/zabbix_agent2.conf 
  sed -i "/^Hostname=/s/=.*/=$HOSTNAME/" /etc/zabbix/zabbix_agent2.conf
  if [ $ZABBIXAGENTPORT ]; then
    sed -i "/ListenPort=/s/.*/ListenPort=$ZABBIXAGENTPORT/" /etc/zabbix/zabbix_agent2.conf
  fi
  sed -i "/TLSConnect=/s/.*/TLSConnect=psk/" /etc/zabbix/zabbix_agent2.conf
  sed -i "/TLSAccept=/s/.*/TLSAccept=psk/" /etc/zabbix/zabbix_agent2.conf
  sed -i "/TLSPSKIdentity=/s/.*/TLSPSKIdentity=$PSKIDENT/" /etc/zabbix/zabbix_agent2.conf
  echo "$PSKKEY" > /etc/zabbix/psk.key
  sed -i "/TLSPSKFile=/s/.*/TLSPSKFile=\/etc\/zabbix\/psk.key/" /etc/zabbix/zabbix_agent2.conf
  systemctl enable zabbix-agent2
  systemctl restart zabbix-agent2
}
 
zabbix

#!/bin/bash
#Количество актуальных выданных IP адресов
#или однострочник: d1=`date +%s`; while read d2; do test $d2 -gt $d1 && echo $d2; done < <( sed -rn 's/ends 5 //; T; s/^\s+//; s/;//; p' /var/lib/dhcp/dhcpd.leases | date +%s -f - ) | wc -l
 
# sed '/ends/!d; s/ends 5 //; s/^\s*//; s/;//'
leaseend=( `sed -rn 's/ends . //; T; s/^\s+//; s/;//; p' /var/lib/dhcp/dhcpd.leases | date +%s -f -` )
curdate=`date +%s`
 
leasecount=0
count=${#leaseend[*]}
index=0
while [ "$index" -lt "$count" ]
do
    if (( ${leaseend[$index]} +18000 > $curdate )); then   #В dhcpd.leases часовой пояс UTC поэтому +18000сек
	let "leasecount = $leasecount + 1"
    fi
    let "index = $index + 1"
done
 
echo $leasecount
 
 
exit 0

#!/usr/bin/env bash
# Description:	Script for iostat monitoring
# Author:	Epikhin Mikhail michael@nomanlab.org
# Revision 1:	Lesovsky A.V. lesovsky@gmail.com
 
SECONDS=$2
TOFILE=$1
IOSTAT="/usr/bin/iostat"
 
[[ $# -lt 2 ]] && { echo "FATAL: some parameters not specified"; exit 1; }
 
DISK=$($IOSTAT -x 1 $SECONDS | awk 'BEGIN {check=0;} {if(check==1 && $1=="avg-cpu:"){check=0}if(check==1 && $1!=""){print $0}if($1=="Device:"){check=1}}' | tr '\n' '|')
echo $DISK | sed 's/|/\n/g' > $TOFILE
echo 0

#!/usr/bin/env bash
# Description:	Script for disk monitoring
# Author:	Epikhin Mikhail michael@nomanlab.org
# Revision 1:   Lesovsky A.V. lesovsky@gmail.com
 
NUMBER=0
FROMFILE=$1
DISK=$2
METRIC=$3
 
[[ $# -lt 3 ]] && { echo "FATAL: some parameters not specified"; exit 1; }
[[ -f "$FROMFILE" ]] || { echo "FATAL: datafile not found"; exit 1; }
 
case "$3" in
"rrqm/s")
	NUMBER=2
;;
"wrqm/s")
	NUMBER=3
;;
"r/s")
	NUMBER=4
;;
"w/s")
	NUMBER=5
;;
"rkb/s")
	NUMBER=6
;;
"wkb/s")
	NUMBER=7
;;
"avgrq-sz")
	NUMBER=8
;;
"avgqu-sz")
	NUMBER=9
;;
"await")
	NUMBER=10
;;
"r_await")
	NUMBER=11
;;
"w_await")
	NUMBER=12
;;
"svctm")
	NUMBER=13
;;
"util")
	NUMBER=14
;;
*) echo ZBX_NOTSUPPORTED; exit 1 ;;
esac
 
grep -w $DISK $FROMFILE | tail -n +2 | tr -s ' ' |awk -v N=$NUMBER 'BEGIN {sum=0.0;count=0;} {sum=sum+$N;count=count+1;} END {printf("%.2f\n", sum/count);}'

#!/usr/bin/perl
 
use warnings;
use strict;
 
my $reply;
 
my @raid = split('\n',`sudo cciss_vol_status -s /dev/sda 2>&1`);
my $i=0;
foreach my $str (@raid) {
    $str =~s/.*\)\s+//;
    if ($str !~ /ok/i){
	$reply.=", " if $i>0;
	$str =~s/\s+/ /g;
	$reply.=$str;
	$i++;
    }
}
if ($i==0) {$reply="OK"}
print $reply."\n";

#!/usr/bin/perl
 
use warnings;
use strict;
 
my $str = `sudo mdadm --detail /dev/md0 | grep 'State :' 2>&1`;
chomp $str;
$str =~ s/^.*State :\s+(.*)\s+/$1/;
if ($str eq "clean") {print "OK"."\n"}
elsif ($str eq "active") {print "OK"."\n"}
else {print $str}

#!/bin/bash
#v.0.8
#Adaptec RAID Controller Monitoring
 
#Full path of arcconf
ARCCONF=$(which arcconf)
#Full path of smartctl
SMARTCTL=$(which smartctl)
 
if [ ! $ARCCONF ] || [ ! -x $ARCCONF ]; then
 echo "Command arcconf not exist"
 exit 1
fi
 
getinformation(){
ARRAY=$($ARCCONF GETCONFIG 1 $1 | sed 's/ \{1,\}/_/g')
#If connection fail
ERR=$(echo "$ARRAY" | grep -ci "Invalid_controller_number")
if [ $ERR -gt 0 ]; then
  echo "Invalid controller number"
  exit 1
fi
}
 
getinfobynumber(){
  echo "$ARRAY" | awk 'BEGIN {IGNORECASE=1; FS="_:_"} /^_'$1'/ {print $2; exit 0}'
}
 
getPDchannelbynumber(){
  echo "$ARRAY" | awk 'BEGIN {IGNORECASE=1; FS="_:_"; count=0} /^_Reported_Channel/ {if(count++=='$1'){print $2; exit 0}}' | sed 's/(.*//'
}
 
getinfobyPDchannel(){
 ARRAYPD=$(echo "$ARRAY" | awk 'BEGIN{RS="_Device_#|_-|\n\n"} /Reported_Channel.+_'$1'\(/')
 echo "$ARRAYPD" | awk 'BEGIN {IGNORECASE=1; FS="_:_"} /^_'$2'/ {print $2; exit 0}'
}
 
getdiscovery(){
 echo "{"
 echo " \"data\":["
 DEVICESUM=0
 #Controller device information (AD)
 if [ $1 == "AD" ]; then
  echo "         {"
  echo "           \"{#$1NUM}\":\"0\""
  BATTERY=$(echo "$ARRAY" | awk 'BEGIN {count=0; IGNORECASE=1} /Controller_(Battery|ZMM)_Information/ {count=1; exit 0}; END {print count}')
  echo "           ,\"{#BATTERY}\":\"$BATTERY\""
  echo "         }"
 fi
 #Logical device information (LD)
 if [ $1 == "LD" ]; then
  DEVICESUM=$(echo "$ARRAY" | grep -ci "Logical_device_number")
 fi
 #Physical Device information (PD)
 if [ $1 == "PD" ]; then
  DEVICESUM=$(echo "$ARRAY" | grep -ci "Reported_Channel")
 fi
 #Create json for LD and PD
 DEVICENUMLAST=$(($DEVICESUM - 1))
 for ((i=0; i < $DEVICESUM; i++))
  do
  echo "         {"
  if [ $1 == "PD" ]; then
   REPORTEDCHANNEL=$(getPDchannelbynumber $i)
   echo "           \"{#$1NUM}\":\"$REPORTEDCHANNEL\""
   if [ $SMARTCTL ] && [ -x $SMARTCTL ]; then
    #Adding aacraid device support to smartctl in version 6.3
    SUPPORTAACRAID=$($SMARTCTL -h | grep -c aacraid)
    if [ $SUPPORTAACRAID -gt 0 ]; then
     INTERFACE=$(getinfobyPDchannel $REPORTEDCHANNEL "transfer_speed" | awk -F_ '{ print $1 }')
     echo "           ,\"{#INTERFACE}\":\"$INTERFACE\""
     if [ $INTERFACE == "SATA" ]; then
      echo "           ,\"{#SMARTCMD}\":\"-d sat+aacraid,0,$REPORTEDCHANNEL\""
     else
      if [ $INTERFACE == "SAS" ]; then
       echo "           ,\"{#SMARTCMD}\":\"-d aacraid,0,$REPORTEDCHANNEL\""
      fi
     fi
    fi
   fi
  else
   echo "           \"{#$1NUM}\":\"$i\""
  fi
  if [ $i -lt $DEVICENUMLAST ]; then
   echo "         },"
  else
   echo "         }"
  fi
 done
 echo "  ]"
 echo "}"
}
 
 
if [ $1 ] && [ $2 ] && [ $1 == "discovery" ]; then
 getinformation $2
 getdiscovery $2
else
 if [ $1 ] && [ $2 ] && [ $3 ]; then
  if [ $1 == "LD" ]; then
   getinformation "$1 $2"
  else
   getinformation $1
  fi
  if [ $1 == "PD" ]; then
   echo -n $(getinfobyPDchannel $2 $3 | sed 's/_/ /g')
  else
   echo -n $(getinfobynumber $3 | sed 's/_/ /g')
  fi
 fi
fi
 
exit 0

#powershell
#v.0.8
#Adaptec RAID Controller Monitoring
 
#Full path of arcconf.exe
$ARCCONF='C:\Program Files\Adaptec\Adaptec Storage Manager\arcconf.exe'
#Full path of smartctl.exe
$SMARTCTL='C:\Program Files\smartmontools\bin\smartctl.exe'
 
if (! $ARCCONF -Or !(Test-Path $ARCCONF)){
 echo "Command arcconf not exist"
 exit 1
}
 
function getinformation($OPTION){
 $OPTION
 $ARRAY=Invoke-Expression -Command "& `$ARCCONF` GETCONFIG 1 $OPTION" | %{$_ -replace "\s+","_"}
 #If connection fail
 $ERR=($ARRAY | Select-String "Invalid_controller_number").count
 if ( $ERR -gt 0 ){
  "Invalid controller number"
  exit 1
 }
 return $ARRAY
}
 
function getinfobynumber($ARGS0){
 if (($ARRAY | Select-String "^_$ARGS0").count -gt 0) {
  ($ARRAY | Select-String "^_$ARGS0")[0] | %{($_ -split '_:_')[1]}
 }
}
 
function getPDchannelbynumber($ARGS0){
  ($ARRAY | Select-String "^_Reported_Channel")[$ARGS0] | %{($_ -split '_:_')[1]} | %{$_ -replace "[(].*",""}
}
 
function getinfobyPDchannel($ARGS0,$ARGS1){
$ARRAYPD="$ARRAY" -split "_Device_#|_-" | Select-String "Reported_Channel.+_$ARGS0\(" | %{$_ -replace " _"," __"} | %{$_ -split " _"}
 if (($ARRAYPD | Select-String "^_$ARGS1").count -gt 0) {
  $ARRAYPD | Select-String "^_$ARGS1" | %{($_ -split '_:_')[1]}
 }
}
 
function getdiscovery($ARGS1){
 "{"
 " `"data`":["
 $DEVICESUM=0
 #Controller device information (AD)
 if ($ARGS1 -eq "AD"){
  "         {"
  "           `"{#$ARGS1`NUM}`":`"0`""
  $BATTERY=($ARRAY | Select-String "Controller_(Battery|ZMM)_Information").count
  if ($BATTERY -gt 1) {
   $BATTERY=1
  }
  "           ,`"{#BATTERY}`":`"$BATTERY`""
  "         }"
 }
 #Logical device information (LD)
 if ($ARGS1 -eq "LD"){
  $DEVICESUM=($ARRAY | Select-String "Logical_device_number").count
 }
 #Physical Device information (PD)
 if ($ARGS1 -eq "PD"){
  $DEVICESUM=($ARRAY | Select-String "Reported_Channel").count
 }
 #Create json for LD and PD
 $DEVICENUMLAST=$DEVICESUM - 1
 for ($i=0; $i -lt $DEVICESUM; $i++){
  "         {"
  if ($ARGS1 -eq "PD"){
   $REPORTEDCHANNEL=getPDchannelbynumber $i
   "           `"{#$ARGS1`NUM}`":`"$REPORTEDCHANNEL`""
   if ($SMARTCTL -And (Test-Path $SMARTCTL)) {
    #Adding aacraid device support to smartctl in version 6.3
    $SUPPORTAACRAID=(Invoke-Expression -Command "& `$SMARTCTL` -h" | Select-String "aacraid").count
    if ($SUPPORTAACRAID -gt 0){
     $INTERFACE=getinfobyPDchannel $REPORTEDCHANNEL transfer_speed | %{($_ -split "_")[0]}
     "           ,`"{#INTERFACE}`":`"$INTERFACE`""
     if ($INTERFACE -eq "SATA"){
      "           ,`"{#SMARTCMD}`":`"-d sat+aacraid,0,$REPORTEDCHANNEL`""
     } elseif ($INTERFACE -eq "SAS"){
      "           ,`"{#SMARTCMD}`":`"-d aacraid,0,$REPORTEDCHANNEL`""
     }
    }
   }
  } else {
   "           `"{#$ARGS1`NUM}`":`"$i`""
  }
  if ($i -lt $DEVICENUMLAST){
   "         },"
  } else {
   "         }"
  }
 }
 "  ]"
 "}"
}
 
if ($args[0] -And $args[1] -And ($args[0] -eq "discovery")){
 $ARRAY=getinformation $args[1]
 getdiscovery $args[1]
} else {
 if ($args[0] -And $args[1] -And $args[2]){
  if ($args[0] -eq "LD") {
   $ARRAY=getinformation $($args[0]+" "+$args[1])
  } else {
   $ARRAY=getinformation $args[0]
  }
  if ($args[0] -eq "PD"){
   getinfobyPDchannel $args[1] $args[2] | %{$_ -replace "_"," "}
  } else {
   getinfobynumber $args[2] | %{$_ -replace "_"," "}
  }
 }
}
 
exit 0

#!/bin/bash
 
# Указываем месторасположение файлов сертификатов
KEYS=/etc/openvpn/easy-rsa/keys
# Указываем имя и местораположение индекса используемых сервером сертификатов
INDEX=/etc/openvpn/easy-rsa/keys/index.txt
# Местоположение каталога конфигураций клиентов (client-config-dir)
CCD=/etc/openvpn/ccd
 
DCURR=`date +%s`
#echo $DCURR
 
TWOWEEKS=1209600
export BADCERTCOUNT=0
 
while read CN
do
	count=-1
	cat ${INDEX} | grep '^V' | grep $CN | cut -f4 |  while read CERTNUM
	do
		NOTAFTER=`cat ${KEYS}/${CERTNUM}.pem 2>/dev/null | grep  "Not After" |  sed 's/^.*After : //'`
		NOTAFTER2=`date --date="${NOTAFTER}" +%s`
		# Вычисляем, сколько секунд осталось до окончания действия сертификата
		DEXP=$[${NOTAFTER2} - ${DCURR}]
		if [[ ${DEXP} -gt ${TWOWEEKS}  ]]
		then
			count=$((count+1))
		fi
	done
	if [[ ${count} -gt 0  ]]
	then
		BADCERTCOUNT=$(($BADCERTCOUNT + $count))
	fi
done < <(cat $INDEX | grep '^V' | sed -e 's/^.*\/CN=//' | sed -e 's/\/.*//' | sort | uniq -d);
 
while read CN
do
	NOTAFTER=""
	if [ -f "${KEYS}/${CN}.crt" ]
	then
		# Получаем дату окончания действия сертификата
		NOTAFTER=`cat ${KEYS}/${CN}.crt  2>/dev/null | grep  "Not After" |  sed 's/^.*After : //'`
		 # Приводим значения полученных дат к единому образцу - времени, прошедшему от начала "эпохи" UNIX (seconds since 1970-01-01 00:00:00 UTC)
		if [ "$NOTAFTER" !=  "" ]
		then
			NOTAFTER2=`date --date="${NOTAFTER}" +%s`
	        # Вычисляем, сколько секунд осталось до окончания действия сертификата
			DEXP=$[${NOTAFTER2} - ${DCURR}]
			if [[ ${DEXP} -gt 0  ]]
			then
		        if [[ ${DEXP} -lt ${TWOWEEKS} ]]
		        then
					BADCERTCOUNT=$(($BADCERTCOUNT + 1))
		        fi
			fi
		else
			BADCERTCOUNT=$($BADCERTCOUNT + 1)
		fi
	else
		BADCERTCOUNT=$($BADCERTCOUNT + 1)
	fi
done < <(cat $INDEX | grep '^V' | sed -e 's/^.*\/CN=//' | sed -e 's/\/.*//' | sort | uniq -u );
 
# Для каждого файла конфигурации клиента проверяем наличие действующего сертификата
while read CERT
do
	if [  -f ${KEYS}/${CERT}.crt ]  
	then
		# Получаем дату окончания действия сертификата
		NOTAFTER=`cat ${KEYS}/${CN}.crt  2>/dev/null | grep  "Not After" |  sed 's/^.*After : //'`
		# Приводим значения полученных дат к единому образцу - времени, прошедшему от начала "эпохи" UNIX (seconds since 1970-01-01 00:00:00 UTC)
		if [ "$NOTAFTER" !=  "" ]
		then
			NOTAFTER2=`date --date="${NOTAFTER}" +%s`
	        # Вычисляем, сколько секунд осталось до окончания действия сертификата
			DEXP=$[${NOTAFTER2} - ${DCURR}]
			if [[ ${DEXP} -gt 0  ]]
			then
				BADCERTCOUNT=$($BADCERTCOUNT + 1)
			fi
		fi
	else
		BADCERTCOUNT=$((BADCERTCOUNT+1))
	fi
done < <(ls ${CCD} | grep "");
 
echo $BADCERTCOUNT

#!/bin/bash
 
 
if [ ! $# == 4 ]; then
        echo "Usage: $0 samba_share path_to_file username password"
        echo "Example: $0 \"//fs/msi\" \"/check\" guest guest"
        exit
fi
 
SMBFOLDER=$1
SMBFILE=$2
USERNAME=$3
PASSWORD=$4
RESULT="0"
 
RESULT=`timeout 1s smbclient ${SMBFOLDER} -d 0  -U ${USERNAME}%${PASSWORD} -c "get ${SMBFILE} /dev/stdout" -E 2>/dev/null | wc -l`
	if [ "${RESULT}" ]
        then
		if [ "${RESULT}" -eq "0" ]
		then
			echo 0
			#zabbix_sender -s fs -z 127.0.0.1 -k smb.file.check -o 1
		else
			echo 1
			#zabbix_sender -s fs -z 127.0.0.1 -k smb.file.check -o 0
		fi
	else
		echo 0
	fi

#!/bin/bash
### Автор скрипта - lioncub
 
### DESCRIPTION
# $1 - измеряемая метрика
 
### OPTIONS VERIFICATION
 
if [ -z $1 ]; then
	exit 1
 fi
 
### PARAMETERS
METRIC="$1"
 
SQUIDCLIENT=`which squidclient`
SQUIDPORT="3128"
CACHEFILE="/tmp/squiudstat.cache"
CACHETTL="55"	# Время действия кеша в секундах (чуть меньше чем период опроса элементов)
 
## Проверка кеша
# время создание кеша (или 0 есть файл кеша отсутствует или имеет нулевой размер)
if [ -s "$CACHEFILE" ]; then
	TIMECACHE=`stat -c"%Z" "$CACHEFILE"`
else
	TIMECACHE=0
fi
 
if [ "$SQUIDPORT" ]; then
	SQUIDPORT="-p $SQUIDPORT"
fi
# текущее время
TIMENOW=`date '+%s'`
# Если кеш неактуален, то обновить его (выход при ошибке)
if [ "$(($TIMENOW - $TIMECACHE))" -gt "$CACHETTL" ]; then
	$SQUIDCLIENT $SQUIDPORT mgr:info> $CACHEFILE || exit 1
#extended-status
fi
 
# Получение значения указанной метрики
if [ "$METRIC" = "http_requests" ]; then
        cat $CACHEFILE | grep 'Number of HTTP requests received:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "clients" ]; then
        cat $CACHEFILE | grep 'Number of clients accessing cache:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "icp_received" ]; then
	cat $CACHEFILE | grep 'Number of ICP messages received:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "icp_sent" ]; then
	cat $CACHEFILE | grep 'Number of ICP messages sent:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "icp_queued" ]; then
        cat $CACHEFILE | grep 'Number of queued ICP replies:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "htcp_received" ]; then
        cat $CACHEFILE | grep 'Number of HTCP messages received:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "htcp_sent" ]; then
        cat $CACHEFILE | grep 'Number of HTCP messages sent:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "req_fail_ratio" ]; then
        cat $CACHEFILE | grep 'Request failure ratio:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "avg_http_req_per_min" ]; then
        cat $CACHEFILE | grep 'Average HTTP requests per minute since start:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "avg_icp_msg_per_min" ]; then
        cat $CACHEFILE | grep 'Average ICP messages per minute since start:'|cut -d':' -f2| tr -d ' \t'
elif [ "$METRIC" = "request_hit_ratio" ]; then
        cat $CACHEFILE | grep 'Request Hit Ratios:'|cut -d':' -f3|cut -d',' -f1|tr -d ' %'
elif [ "$METRIC" = "byte_hit_ratio" ]; then
        cat $CACHEFILE | grep 'Byte Hit Ratios:'|cut -d':' -f3|cut -d',' -f1|tr -d ' %'
elif [ "$METRIC" = "request_mem_hit_ratio" ]; then
        cat $CACHEFILE | grep 'Request Memory Hit Ratios:'|cut -d':' -f3|cut -d',' -f1|tr -d ' %'
elif [ "$METRIC" = "request_disk_hit_ratio" ]; then
        cat $CACHEFILE | grep 'Request Disk Hit Ratios:'|cut -d':' -f3|cut -d',' -f1|tr -d ' %'
elif [ "$METRIC" = "servicetime_httpreq" ]; then
        cat $CACHEFILE | grep 'HTTP Requests (All):'|cut -d':' -f2|tr -s ' '|awk '{print $1}'
elif [ "$METRIC" = "process_mem" ]; then
        cat $CACHEFILE | grep 'Process Data Segment Size via sbrk'|cut -d':' -f2|awk '{print $1}'
elif [ "$METRIC" = "cpu_usage" ]; then
        cat $CACHEFILE | grep 'CPU Usage:'|cut -d':' -f2|tr -d '%'|tr -d ' \t'
elif [ "$METRIC" = "cache_size_disk" ]; then
        cat $CACHEFILE | grep 'Storage Swap size:'|cut -d':' -f2|awk '{print $1}'
elif [ "$METRIC" = "cache_size_mem" ]; then
        cat $CACHEFILE | grep 'Storage Mem size:'|cut -d':' -f2|awk '{print $1}'
elif [ "$METRIC" = "mean_obj_size" ]; then
        cat $CACHEFILE | grep 'Mean Object Size:'|cut -d':' -f2|awk '{print $1}'
elif [ "$METRIC" = "filedescr_max" ]; then
        cat $CACHEFILE | grep 'Maximum number of file descriptors:'|cut -d':' -f2|awk '{print $1}'
elif [ "$METRIC" = "filedescr_avail" ]; then
        cat $CACHEFILE | grep 'Available number of file descriptors:'|cut -d':' -f2|awk '{print $1}'
fi
 
exit 0

#!/bin/bash
 
# Zabbix script to check Zimbra services and perform service discovery.
# Supports Zimbra 8.6 and "two-worded" service names
# Author: Lorenzo Milesi <maxxer@yetopen.it>
# Copytight: YetOpen S.r.l. 2015
# License: GPLv3
 
# uncomment for debug
#set -x
 
COMMAND="sudo -u zimbra /opt/zimbra/bin/zmcontrol"
 
case "$1" in
    version) 
    # Return zimbra version
    VERS=$($COMMAND -v)
    if [ $? -eq 0 ] ; then
        echo $VERS
        exit 0;
    fi
    # error
    exit 1;
    ;;
    discover) 
    # Return a list of running services in JSON
    echo "{"
    echo -e "\t\"data\":[\n"
	SRVCS=$($COMMAND status | grep Running | awk '{$(NF--)=""; print}' | sed 's/^/\t{ \"{#ZIMBRASERVICE}\":\"/' | sed 's/\ $/\" },/')
    # Remove last comma from the sting, to make a good JSON
    echo $(echo $SRVCS | sed 's/,\+$//')
    echo -e "\n\t]\n"
    echo "}"
    exit 0;
    ;;
    *)
    # move on...
    check=$1
 
    if [ "$check" = "" ]; then
      echo "No Zimbra service specified..."
      exit 1
    fi
 
    maxage=120
    file='/var/run/zabbix/zimbra_status'
 
    # Very basic concurrency check
    x=0
    while [ -f "$file.tmp" ]; do
	sleep 5;
	x=$((x+1))
	# don't wait too long anyway, remove an eventually stale lock. Anyway we have 15s zabbix agent timeout
	if [ $x -ge 3 ]; then
	    rm "$file.tmp";
	fi
    done
    #check if cached status file size > 0
    if [ -s ${file} ]; then 
      OLD=`stat -c %Z $file`
      NOW=`date +%s`
 
      # if older then maxage, update file
      if [ `expr $NOW - $OLD` -gt $maxage ]; then
        $COMMAND status > $file.tmp
        mv $file.tmp $file
      fi
    else
        rm -f ${file}
        $COMMAND status > $file.tmp
        mv $file.tmp $file
    fi
 
    STATUS="$(cat $file | grep "$check" | awk '{print $NF}')"
 
    if [ "$STATUS" != "Running" ]; then
      echo 0
    else
      echo 1
    fi
    ;;
esac
 
exit 0;

#!/bin/bash
 
 
SSID[1]="dkbasu"
SSID[2]="dkbcloud"
SSID[3]="dkbfree"
 
 
PSK[1]="gfhjkm45"
PSK[2]="kosmonaft65"
PSK[3]=""
 
KEY_MGMT[1]="WPA-PSK"
KEY_MGMT[2]="WPA-PSK"
KEY_MGMT[3]="NONE"
 
ROUTER[1]="192.168.69.1"
ROUTER[2]="192.168.69.17"
ROUTER[3]="192.168.68.1"
 
for INDEX in 1 2 3
do
	SSID2[$INDEX]=`echo ${SSID[$INDEX]} | sed 's/^/\"/' | sed 's/$/\"/'`
	PSK2[$INDEX]=`echo ${PSK[$INDEX]} | sed 's/^/\"/' | sed 's/$/\"/'`
done
 
for INDEX in 1 2 3
do
	ps -A | grep wpa_supplicant | sed "s/ ?.*$//" | xargs -I {} kill -s SIGKILL {}
	RESULT=`/sbin/iwlist scan 2>/dev/null | grep -c ${SSID[$INDEX]}`
	echo "RESULT = $RESULT"
	if [ "${RESULT}" ]
	then
		if [ "${RESULT}" -gt "0" ]
		then
			SSID_SCAN[$INDEX]=1
	     else
			SSID_SCAN[$INDEX]=0
	     fi
	else
			SSID_SCAN[$INDEX]=0
	fi
done
 
for INDEX in 1 2 3
do
	if [ "${SSID_SCAN[$INDEX]}" -eq "1" ]
	then
		for INDEX in 1 2 3
		do
			/sbin/dhclient wlan0 -r
			/sbin/wpa_supplicant -B -iwlan0 -c /etc/zabbix/externalscripts/wpa_supplicant_${SSID[$INDEX]}.conf
			/sbin/wpa_cli -iwlan0 disconnect
			/sbin/ip link set wlan0 down
			/sbin/ip link set wlan0 up
			for i in `/sbin/wpa_cli list_networks | grep ^[0-9] | cut -f1`; do /sbin/wpa_cli -iwlan0 remove_network $i; done
			/sbin/wpa_cli -iwlan0 add_network
			/sbin/wpa_cli -iwlan0 set_network 0 auth_alg OPEN
			/sbin/wpa_cli -iwlan0 set_network 0 key_mgmt ${KEY_MGMT[$INDEX]}
			/sbin/wpa_cli -iwlan0 set_network 0 psk ${PSK2[$INDEX]}
			/sbin/wpa_cli -iwlan0 set_network 0 mode 0
			/sbin/wpa_cli -iwlan0 set_network 0 ssid ${SSID2[$INDEX]}
			/sbin/wpa_cli -iwlan0 select_network 0
			/sbin/wpa_cli -iwlan0 enable_network 0
			/sbin/wpa_cli -iwlan0 reassociate
 
			/sbin/dhclient wlan0 -r
 
			/usr/bin/timeout 9s /sbin/dhclient -v wlan0
			/bin/sleep 2s
			/sbin/ip address show dev wlan0 
			RESULT=`/sbin/ip address show dev wlan0 | grep -c inet`
			if [ "${RESULT}" -eq "1" ]
			then
				#/sbin/ip address show dev wlan0 | grep -c inet
				SSID_DHCP[$INDEX]=1			
			else
				SSID_DHCP[$INDEX]=0
			fi
 
			if [ "${SSID_DHCP[$INDEX]}" -eq "1" ]
			then
				echo "/sbin/ip route:"
				/sbin/ip route
				/usr/bin/nslookup www.google.com | grep answer -A 20 | grep Address | sed 's/^.*:\ //' | while read line
				do
					echo /sbin/route del -host $line
					/sbin/route del -host $line
					echo /sbin/route add -host $line gw ${ROUTER[$INDEX]}
					/sbin/route add -host $line gw ${ROUTER[$INDEX]}
				done
 
				RESULT=0
				RESULT=`/usr/bin/nmap -p 80 www.google.com | grep -c "(1 host up)"`
 
				if [ "${RESULT}" -eq "1" ]
				then
					SSID_HTTP[$INDEX]=1
				else
					SSID_HTTP[$INDEX]=0
				fi
 
				RESULT=0
				RESULT=`/usr/bin/nmap -p 443 www.google.com | grep -c "(1 host up)"`
 
				if [ "${RESULT}" -eq "1" ]
				then
						SSID_HTTPS[$INDEX]=1
				else
						SSID_HTTPS[$INDEX]=0
				fi
			else
				SSID_HTTP[$INDEX]=0
				SSID_HTTPS[$INDEX]=0
			fi
			/sbin/wpa_cli -iwlan0 disconnect
			/sbin/dhclient wlan0 -r
		done
	else
		SSID_DHCP[$INDEX]=0
		SSID_HTTP[$INDEX]=0
		SSID_HTTPS[$INDEX]=0
	fi
done
echo "SSID;scan;dhcp;http;https"
echo "SSID;scan;dhcp;http;https" > /tmp/wifi-test
for INDEX in 1 2 3
do
	echo "${SSID[$INDEX]};${SSID_SCAN[$INDEX]};${SSID_DHCP[$INDEX]};${SSID_HTTP[$INDEX]};${SSID_HTTPS[$INDEX]}"
	echo "${SSID[$INDEX]};${SSID_SCAN[$INDEX]};${SSID_DHCP[$INDEX]};${SSID_HTTP[$INDEX]};${SSID_HTTPS[$INDEX]}" >> /tmp/wifi-test
done

#!/bin/bash
 
SSID=$1
TYPE=$2
 
case "$TYPE" in
	"scan"   )
		cat /tmp/wifi-test | grep $SSID | cut -d ';' -f 2
	;;
	"dhcp"   )
		cat /tmp/wifi-test | grep $SSID | cut -d ';' -f 3
	;;
	"http"   )
		cat /tmp/wifi-test | grep $SSID | cut -d ';' -f 4
	;;
	"https"   )
		cat /tmp/wifi-test | grep $SSID | cut -d ';' -f 5
	;;
esac

#!/bin/bash
 
/usr/bin/flow-export -f2 -mDPKTS,DOCTETS,SRCADDR,DSTADDR,SRCPORT,DSTPORT,PROT < $1 > /tmp/flow.txt
 
ZABBIX_SERVER="192.168.10.161";
ZABBIX_PORT="10051";
ZABBIX_SENDER="/usr/bin/zabbix_sender";
HOST="medikprod";
 
KEY1=medikprod.web.count
VALUE1=`flow-cat $1 | flow-nfilter -f /etc/flow-tools/cfg/dkb.cfg -F prod-web | flow-stat -f10 -s3 | grep -v "#" | wc -l`
KEY2=medikprod.web.max
VALUE2=`flow-cat $1 | flow-nfilter -f /etc/flow-tools/cfg/dkb.cfg -F prod-web | flow-stat -f10 -s3 | tail -1 | sed 's/ \+/ /g' | cut -d' ' -f4`
KEY3=medikprod.web.sum
VALUE3=`flow-cat $1 | flow-nfilter -f /etc/flow-tools/cfg/dkb.cfg -F prod-web | flow-stat -f15 | grep -v "#" | sed 's/ \+/ /g' | cut -d' ' -f1`
KEY4=medikprod.web.avg
if [ $VALUE1 -eq 0 ]; then
    VALUE4=0
else
    VALUE4=`echo "$VALUE3/$VALUE1" | bc`
fi
 
$ZABBIX_SENDER -z $ZABBIX_SERVER -p $ZABBIX_PORT -s "$HOST" -k $KEY1 -o "$VALUE1"
$ZABBIX_SENDER -z $ZABBIX_SERVER -p $ZABBIX_PORT -s "$HOST" -k $KEY2 -o "$VALUE2"
$ZABBIX_SENDER -z $ZABBIX_SERVER -p $ZABBIX_PORT -s "$HOST" -k $KEY3 -o "$VALUE3"
$ZABBIX_SENDER -z $ZABBIX_SERVER -p $ZABBIX_PORT -s "$HOST" -k $KEY4 -o "$VALUE4"
 
 
GR=( OMS ASU UPRV HIR NEVR FTO DST STOM OFD OFTA RENT KONS OTO KDL REG OPP KVEN UZD INFK JEK PRFL PRVK PSI REA TOP1 TOP2 TOP3 UTUPR UTDCUP UTLDP UTCHRZ vcasu )
 
for element in $(seq 0 $((${#GR[@]} - 1)))
  do
  KEY=medikprod.web.${GR[$element]}
  VALUE=`flow-cat $1 | flow-nfilter -f /etc/flow-tools/cfg/dkb.cfg -F ${GR[$element]}_M+ | flow-stat -f15 | grep -v "#" | sed 's/ \+/ /g' | cut -d' ' -f1`
  $ZABBIX_SENDER -z $ZABBIX_SERVER -p $ZABBIX_PORT -s "$HOST" -k $KEY -o "$VALUE"
done

Имя: Access Link TTK to Hospital
Ключ: connection[192.168.7.2]
Группы элементов данных: Network

Имя: Connection TTK to Hospital is DOWN
Выражение: {gateway:connection[78.29.17.37].last()}<1
Важность: Средняя

#!/bin/bash
 
paid_till=`whois $1 | grep -m1 -P "Expir|paid" | sed -r "s/.*:\s+//g" | sed "s/\./\-/g"`
paid_till=`date --date=$paid_till +%s`
now=`date +%s`
let "tDiff=$paid_till-$now"
let "tDiff=$tDiff/86400"
echo $tDiff