pi-farm
e208f30559
All checks were successful
Docker Build Smart Logic / Build amd64 & arm64 (push) Successful in 16s
115 lines
4.4 KiB
Bash
115 lines
4.4 KiB
Bash
#!/bin/bash
|
|
|
|
CONFIG_DIR="/config"
|
|
CONFIG_FILE="$CONFIG_DIR/watchdog.conf"
|
|
STATE_FILE="$CONFIG_DIR/watch_state.json"
|
|
|
|
# Initialisierung: Existiert die Datei UND ist sie valides JSON?
|
|
# Falls nein (oder leer/korrupt), schreiben wir {} hinein.
|
|
if [ ! -f "$STATE_FILE" ] || ! jq -e . "$STATE_FILE" >/dev/null 2>&1; then
|
|
echo "⚠️ State-Datei war ungültig oder leer. Setze Reset auf {}."
|
|
echo "{}" > "$STATE_FILE"
|
|
fi
|
|
|
|
while true; do
|
|
|
|
if [ -f "$CONFIG_FILE" ]; then
|
|
source "$CONFIG_FILE"
|
|
else
|
|
echo "❌ Fehler: $CONFIG_FILE nicht gefunden!"
|
|
sleep 60; continue
|
|
fi
|
|
|
|
INTERVAL=${CHECK_INTERVAL:-3600}
|
|
UPDATES_FOUND=""
|
|
echo "--- Starte Check: $(date) ---"
|
|
|
|
for entry in "${TARGETS[@]}"; do
|
|
IFS="|" read -r TYPE REPO EXTRA <<< "$entry"
|
|
KEY="${TYPE}_${REPO//[\/\.]/_}_${EXTRA}"
|
|
|
|
# Aktuellen Wert aus Datei lesen
|
|
OLD_VAL=$(jq -r ".[\"$KEY\"] // empty" "$STATE_FILE")
|
|
NEW_VAL=""
|
|
|
|
echo "Prüfe $TYPE: $REPO:$EXTRA..."
|
|
|
|
if [ "$TYPE" == "DOCKER" ]; then
|
|
if [[ "$REPO" != *"."* ]] || [[ "$REPO" == *"docker.io"* ]]; then
|
|
CLEAN_REPO=${REPO#docker.io/}
|
|
[[ "$CLEAN_REPO" != *"/"* ]] && CLEAN_REPO="library/$CLEAN_REPO"
|
|
NEW_VAL=$(curl -s "https://hub.docker.com/v2/repositories/${CLEAN_REPO}/tags/${EXTRA}" | jq -r '.last_updated // empty')
|
|
else
|
|
REG_HOST=$(echo $REPO | cut -d/ -f1)
|
|
IMG_NAME=$(echo $REPO | cut -d/ -f2-)
|
|
TOKEN=$(curl -s "https://${REG_HOST}/v2/token?service=${REG_HOST}&scope=repository:${IMG_NAME}:pull" | jq -r '.token // empty')
|
|
|
|
[[ -n "$TOKEN" && "$TOKEN" != "null" ]] && AUTH_H="Authorization: Bearer $TOKEN" || AUTH_H="X-No-Auth: true"
|
|
|
|
RESPONSE=$(curl -s -i -L -H "$AUTH_H" -H "Accept: application/vnd.docker.distribution.manifest.v2+json" "https://${REG_HOST}/v2/${IMG_NAME}/manifests/${EXTRA}")
|
|
NEW_VAL=$(echo "$RESPONSE" | grep -i "docker-content-digest" | awk '{print $2}' | tr -d '\r')
|
|
[[ -z "$NEW_VAL" ]] && NEW_VAL=$(echo "$RESPONSE" | grep -i "etag" | awk '{print $2}' | tr -d '\r' | tr -d '"')
|
|
fi
|
|
elif [ "$TYPE" == "GITHUB" ]; then
|
|
NEW_VAL=$(curl -s "https://api.github.com/repos/${REPO}/branches/${EXTRA}" | jq -r '.commit.sha // empty')
|
|
fi
|
|
|
|
if [ -z "$NEW_VAL" ] || [ "$NEW_VAL" == "null" ]; then
|
|
echo " ⚠️ Fehler: Keine Daten empfangen."
|
|
continue
|
|
fi
|
|
|
|
# Logik: Wenn kein alter Wert da ist ODER der neue Wert anders ist
|
|
if [ -z "$OLD_VAL" ] || [ "$OLD_VAL" != "$NEW_VAL" ]; then
|
|
if [ -z "$OLD_VAL" ]; then
|
|
echo " 🆕 Erstaufnahme in Datenbank."
|
|
else
|
|
echo " 🔔 Update gefunden!"
|
|
UPDATES_FOUND="${UPDATES_FOUND}Update für $REPO ($EXTRA)\n"
|
|
fi
|
|
|
|
# Wir generieren das neue JSON
|
|
NEW_JSON_CONTENT=$(jq ".[\"$KEY\"] = \"$NEW_VAL\"" "$STATE_FILE" 2>&1)
|
|
JQ_EXIT_CODE=$?
|
|
|
|
if [ $JQ_EXIT_CODE -eq 0 ] && [ -n "$NEW_JSON_CONTENT" ]; then
|
|
# Nur schreiben, wenn jq Erfolg hatte UND Inhalt da ist
|
|
echo "$NEW_JSON_CONTENT" > "${STATE_FILE}.tmp" && mv "${STATE_FILE}.tmp" "$STATE_FILE"
|
|
echo " 💾 gespeichert."
|
|
else
|
|
echo " ❌ FEHLER BEIM SPEICHERN!"
|
|
echo " jq Exit Code: $JQ_EXIT_CODE"
|
|
echo " jq Output: $NEW_JSON_CONTENT"
|
|
# Notfall-Reset, falls die Datei korrupt ist, damit es beim nächsten Mal wieder geht
|
|
if ! jq -e . "$STATE_FILE" >/dev/null 2>&1; then
|
|
echo "{}" > "$STATE_FILE"
|
|
fi
|
|
fi
|
|
else
|
|
echo " ✅ Aktuell."
|
|
fi
|
|
done
|
|
|
|
# E-Mail Versand
|
|
if [ -n "$UPDATES_FOUND" ]; then
|
|
# Dynamische msmtp config (wie vorher)
|
|
cat <<EOF > /etc/msmtprc
|
|
defaults
|
|
auth on
|
|
tls on
|
|
tls_trust_file /etc/ssl/certs/ca-certificates.crt
|
|
account default
|
|
host $SMTP_HOST
|
|
port $SMTP_PORT
|
|
from $EMAIL_FROM
|
|
user $SMTP_USER
|
|
password $SMTP_PASS
|
|
EOF
|
|
chmod 600 /etc/msmtprc
|
|
echo -e "Subject: Watchdog Alert\n\n$UPDATES_FOUND" | msmtp "$EMAIL_TO"
|
|
echo " 📧 E-Mail gesendet."
|
|
fi
|
|
|
|
echo "Nächster Scan in $INTERVAL s."
|
|
sleep "$INTERVAL"
|
|
done |