recipe_gentoo/README.md

1.5 KiB

recipe_gentoo

Check system configuration for a gentoo machine (VM or PHYSICAL) based on GRIFON's architecture. It's a Gentoo OS configuration recipe. This script normally doesn't modify anything on the system.

To use : ./recipe_gentoo.sh [--physical]

Not finished, in progress....

TO DO :

  • Reorganise script to limit text repetitions (make functions for example)
  • Check if sending a mail works (find a way to check)
  • Check detailled DNS records (PTR, A, AAAA)
  • Check if borgbackup is configured (+ connexion to backup server)
  • Check if auto-update script is configured
  • Portage configuration (for VM and Physical)

Checked point :

  • User is root to run the script
  • Check requirements
  • Installed packages
  • Hostname configuration
  • DNS configuration (resolve external name, configured nameserver and check if all IPs (scope global) are configured in DNS)
  • Ping external machine for IPv4 and IPv6
  • If Admin IPs are configured
  • Services status
  • SSH configuration (PasswordAuthentication no, PermitRootLogin no, and ListenAddress only on Admin LAN)
  • NRPE basic configuration (allowed_hosts, nrpe_user and nrpe_group)
  • MUNIN basic configuration (allow and port)
  • SNMP basic config (agentAddress, rocommunity, trap2sink, informsink, sysLocation and sysContact)
  • Mail alias configuration (root and operator mail alias configured)
  • Check postfix config (inet_protocols, mail_owner)
  • Add to check service if they are enabled
  • Check if IPs (scope global) are recorded in IPAM