# recipe_gentoo Check system configuration for a gentoo machine (VM or PHYSICAL) based on GRIFON's architecture. It's a Gentoo OS configuration recipe. This script normally doesn't modify anything on the system. To use : ./recipe_gentoo.sh [--physical] Not finished, in progress.... TO DO : - Reorganise script to limit text repetitions (make functions for example) - Check if sending a mail works (find a way to check) - Check detailled DNS records (PTR, A, AAAA) - Check if borgbackup is configured (OK, need to be fully tested) - Check if auto-update script is configured - Portage configuration (for VM and Physical) Checked point : - User is root to run the script - Check requirements - Installed packages - Hostname configuration - DNS configuration (resolve external name, configured nameserver and check if all IPs (scope global) are configured in DNS) - Ping external machine for IPv4 and IPv6 - If Admin IPs are configured - Services status - SSH configuration (PasswordAuthentication no, PermitRootLogin no, and ListenAddress only on Admin LAN) - NRPE basic configuration (allowed_hosts, nrpe_user and nrpe_group) - MUNIN basic configuration (allow and port) - SNMP basic config (agentAddress, rocommunity, trap2sink, informsink, sysLocation and sysContact) - Mail alias configuration (root and operator mail alias configured) - Check postfix config (inet_protocols, mail_owner) - Add to check service if they are enabled - Check if IPs (scope global) are recorded in IPAM