test(*-version): add --test hook and EOL-aware fixtures for 11 more version checkers

Convert the remaining shell-driven version-checker plugins to the
fixture-based pattern established by redis-version, postgresql-version
and mysql-version. Each plugin now has a `--test` hook that bypasses
the live shell call and loads the version-string output from a stdout
fixture, then runs the existing parser regex against it. The
downstream `lib.version.check_eol()` HTTP call to endoflife.date still
runs live, so the test result reflects today's actual EOL data.

Plugin coverage and image sources (Red Hat family preferred where
available, upstream/Debian fall-back when there is no RHEL-family
equivalent that ships the version we want to exercise):

- apache-httpd-version: 5 fixtures from
  registry.access.redhat.com/ubi{8,9,10}/httpd-24, fedora 43, debian
  13. 6 testcases, 0 WARN (Apache 2.4 is still non-EOL).
- apache-solr-version: 5 fixtures from docker.io/library/solr:{7,8,
  9.4,9} - no Red Hat Solr container exists. Covers the EOL 7.x and
  8.x cycles. 5 testcases, 2 WARN.
- composer-version: 5 fixtures from docker.io/library/composer:{2.2,
  2.7,2.8,2.9}. Composer ships as a single PHP file and the upstream
  image is canonical. 5 testcases, 2 WARN.
- grafana-version: 5 fixtures from docker.io/grafana/grafana-oss
  10.4 .. 12.4. No RHEL-family grafana container. 5 testcases, 3 WARN.
- graylog-version: yum and dpkg listings captured from
  quay.io/rockylinux/rockylinux:9 and docker.io/library/debian:12
  after fresh installs of graylog 5.2 / 6.3 / 7.0 repositories. 5
  testcases, 1 WARN.
- icinga-version: 6 fixtures from debian:{11,12,13} and
  ubuntu:{22.04,24.04}. The upstream `docker.io/icinga/icinga2`
  image's `(version: vX.Y.Z)` shape is intentionally rejected by the
  plugin, so debian-style `r<X>.<Y>.<Z>-1` outputs are needed. 6
  testcases, 3 WARN.
- mydumper-version: 3 fixtures from debian:11 and ubuntu:{22.04,
  24.04}. This plugin uses the GitHub releases API instead of
  endoflife.date, so the test mode pins both the installed version
  and the upstream "latest" tag via the stdout/stderr slots of
  `lib.lftest.test()`. 3 testcases, 1 WARN.
- openjdk-redhat-version: 4 stderr fixtures from
  registry.access.redhat.com/ubi8/openjdk-{8,11,17,21} (java prints
  to stderr) plus a stdout garbage edge case. Java 8 is pinned as
  UNKNOWN: the plugin transforms `1.8.0_482` to `1.8.0.482` and
  endoflife.date cannot map that to the upstream `8` cycle, that
  asymmetry is documented in the test docstring. 5 testcases, 1
  WARN, 1 UNKNOWN.
- openvpn-version: 5 fixtures from quay.io/rockylinux/rockylinux:
  {8,9,10} and fedora:43 after dnf install (with EPEL where
  required). 5 testcases, 2 WARN.
- postfix-version: 5 fixtures from
  registry.access.redhat.com/ubi{8,9,10}/ubi and fedora:43 after
  fresh `dnf install postfix`. 5 testcases, 2 WARN.
- valkey-version: 5 fixtures from docker.io/valkey/valkey:{7.2,8.0,
  8.1,9.0}. No RHEL-family valkey container yet. 5 testcases, 0 WARN.

Each plugin bumps `__version__` to `2026041301`, gains an
`import lib.lftest`, and wires its existing version-extraction
function through the `--test` argument the same way the three pilots
already do. Every test docstring explicitly warns that the
`assert-retc` and `assert-in` strings will need to be re-pinned every
few months as the endoflife.date data drifts.

The full unit-test suite is now at 132 plugins, all green under
`tools/run-unit-tests --no-container`.

Author: markuslf

check-plugins/apache-httpd-version/apache-httpd-version

@@ -16,12 +16,13 @@ import sys
 
 import lib.args
 import lib.base
+import lib.lftest
 import lib.shell
 import lib.version
 from lib.globals import STATE_UNKNOWN
 
 __author__ = 'Linuxfabrik GmbH, Zurich/Switzerland'
-__version__ = '2026040801'
+__version__ = '2026041301'
 
 DESCRIPTION = """Checks the installed Apache httpd version against the endoflife.date API and alerts if
 the version is end-of-life or if newer major, minor, or patch releases are available.
@@ -103,6 +104,13 @@ def parse_args():
         default=DEFAULT_OFFSET_EOL,
     )
 
+    parser.add_argument(
+        '--test',
+        help=lib.args.help('--test'),
+        dest='TEST',
+        type=lib.args.csv,
+    )
+
     parser.add_argument(
         '--timeout',
         help=lib.args.help('--timeout') + ' Default: %(default)s (seconds)',
@@ -115,13 +123,17 @@ def parse_args():
     return args
 
 
-def get_installed_version():
-    success, result = lib.shell.shell_exec('httpd -v')  # on RHEL
-    if not success:
-        success, result = lib.shell.shell_exec('apache2 -v')  # on other systems
+def get_installed_version(test_arg=None):
+    if test_arg is None:
+        success, result = lib.shell.shell_exec('httpd -v')  # on RHEL
         if not success:
-            return ''
-    stdout = result[0].strip()
+            success, result = lib.shell.shell_exec('apache2 -v')  # on other systems
+            if not success:
+                return ''
+        stdout = result[0].strip()
+    else:
+        stdout, _, _ = lib.lftest.test(test_arg)
+        stdout = stdout.strip()
     # where to find the version number in output?
     version_regex = r'/(\d+\.\d+\.\d+)'
     try:
@@ -141,7 +153,7 @@ def main():
         sys.exit(STATE_UNKNOWN)
 
     # fetch data
-    installed_version = get_installed_version()
+    installed_version = get_installed_version(args.TEST)
     if not installed_version:
         lib.base.cu('Apache httpd not found.')
     state, msg = lib.version.check_eol(

check-plugins/apache-httpd-version/unit-test/run

@@ -0,0 +1,87 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8; py-indent-offset: 4 -*-
+#
+# Author:  Linuxfabrik GmbH, Zurich, Switzerland
+# Contact: info (at) linuxfabrik (dot) ch
+#          https://www.linuxfabrik.ch/
+# License: The Unlicense, see LICENSE file.
+
+# https://github.com/Linuxfabrik/monitoring-plugins/blob/main/CONTRIBUTING.md
+
+"""Unit tests for the apache-httpd-version check plugin.
+
+The fixtures in `stdout/` are the raw `httpd -v` / `apache2 -v`
+outputs captured from official Red Hat family httpd images
+(`registry.access.redhat.com/ubi{8,9,10}` plus
+`registry.fedoraproject.org/fedora:43`) and one Debian image
+(`docker.io/library/debian:13`) for the apache2 binary path. The
+plugin runs its `r'/(\\d+\\.\\d+\\.\\d+)'` regex against each one.
+
+The endoflife.date `apache.json` feed currently lists 2.4 as the
+only non-EOL cycle, so all real captures resolve to STATE_OK with
+"EOL unknown" or a "patch ... available" hint. The
+`assert-retc` and `assert-in` strings will need to be re-pinned
+the day Apache 2.4 hits EOL or a 2.6 cycle appears.
+"""
+
+import sys
+sys.path.insert(0, '..')
+
+import unittest
+
+from lib.globals import STATE_OK, STATE_UNKNOWN
+import lib.lftest
+
+
+TESTS = [
+    {
+        'id': 'ok-rhel8-httpd-2-4-37',
+        'test': 'stdout/httpd-v-rhel8,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache httpd v2.4.37', 'EOL unknown'],
+    },
+    {
+        'id': 'ok-rhel9-httpd-2-4-62',
+        'test': 'stdout/httpd-v-rhel9,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache httpd v2.4.62', 'EOL unknown'],
+    },
+    {
+        'id': 'ok-rhel10-httpd-2-4-63',
+        'test': 'stdout/httpd-v-rhel10,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache httpd v2.4.63', 'EOL unknown'],
+    },
+    {
+        'id': 'ok-fedora43-httpd-2-4-66',
+        'test': 'stdout/httpd-v-fedora43,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache httpd v2.4.66', 'EOL unknown'],
+    },
+    {
+        'id': 'ok-debian13-apache2-2-4-66',
+        'test': 'stdout/apache2-v-debian13,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache httpd v2.4.66', 'EOL unknown'],
+    },
+    {
+        'id': 'unknown-garbage-output',
+        'test': 'stdout/garbage-output,,0',
+        'assert-retc': STATE_UNKNOWN,
+        'assert-in': ['Apache httpd not found.'],
+    },
+]
+
+
+class TestCheck(unittest.TestCase):
+
+    check = '../apache-httpd-version'
+
+    def test(self):
+        for t in TESTS:
+            with self.subTest(id=t['id']):
+                lib.lftest.run(self, self.check, t)
+
+
+if __name__ == '__main__':
+    unittest.main()

check-plugins/apache-httpd-version/unit-test/stdout/apache2-v-debian13

@@ -0,0 +1,2 @@
+Server version: Apache/2.4.66 (Debian)
+Server built:   2026-03-01T13:26:45

check-plugins/apache-httpd-version/unit-test/stdout/garbage-output

@@ -0,0 +1 @@
+bash: httpd: command not found

check-plugins/apache-httpd-version/unit-test/stdout/httpd-v-fedora43

@@ -0,0 +1,2 @@
+Server version: Apache/2.4.66 (Fedora Linux)
+Server built:   Dec  9 2025 00:00:00

check-plugins/apache-httpd-version/unit-test/stdout/httpd-v-rhel10

@@ -0,0 +1,2 @@
+Server version: Apache/2.4.63 (Red Hat Enterprise Linux)
+Server built:   Dec 10 2025 00:00:00

check-plugins/apache-httpd-version/unit-test/stdout/httpd-v-rhel8

@@ -0,0 +1,2 @@
+Server version: Apache/2.4.37 (Red Hat Enterprise Linux)
+Server built:   Dec 12 2025 13:16:37

check-plugins/apache-httpd-version/unit-test/stdout/httpd-v-rhel9

@@ -0,0 +1,2 @@
+Server version: Apache/2.4.62 (Red Hat Enterprise Linux)
+Server built:   Dec 12 2025 00:00:00

check-plugins/apache-solr-version/apache-solr-version

@@ -16,12 +16,13 @@ import sys
 
 import lib.args
 import lib.base
+import lib.lftest
 import lib.shell
 import lib.version
 from lib.globals import STATE_UNKNOWN
 
 __author__ = 'Linuxfabrik GmbH, Zurich/Switzerland'
-__version__ = '2026040801'
+__version__ = '2026041301'
 
 DESCRIPTION = """Checks the installed Apache Solr version against the endoflife.date API and alerts
 if the version is end-of-life or if newer major, minor, or patch releases are available.
@@ -111,6 +112,13 @@ def parse_args():
         default=DEFAULT_PATH,
     )
 
+    parser.add_argument(
+        '--test',
+        help=lib.args.help('--test'),
+        dest='TEST',
+        type=lib.args.csv,
+    )
+
     parser.add_argument(
         '--timeout',
         help=lib.args.help('--timeout') + ' Default: %(default)s (seconds)',
@@ -123,11 +131,15 @@ def parse_args():
     return args
 
 
-def get_installed_version(path):
-    success, result = lib.shell.shell_exec(f'{path} version')
-    if not success:
-        return ''
-    stdout = result[0].strip()
+def get_installed_version(path, test_arg=None):
+    if test_arg is None:
+        success, result = lib.shell.shell_exec(f'{path} version')
+        if not success:
+            return ''
+        stdout = result[0].strip()
+    else:
+        stdout, _, _ = lib.lftest.test(test_arg)
+        stdout = stdout.strip()
     # where to find the version number in output?
     # Solr version is: 9.4.0
     # 9.3.0
@@ -149,7 +161,7 @@ def main():
         sys.exit(STATE_UNKNOWN)
 
     # fetch data
-    installed_version = get_installed_version(args.PATH)
+    installed_version = get_installed_version(args.PATH, args.TEST)
     if not installed_version:
         lib.base.cu(f'Apache Solr `{args.PATH}` not found.')
     state, msg = lib.version.check_eol(

check-plugins/apache-solr-version/unit-test/run

@@ -0,0 +1,85 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8; py-indent-offset: 4 -*-
+#
+# Author:  Linuxfabrik GmbH, Zurich, Switzerland
+# Contact: info (at) linuxfabrik (dot) ch
+#          https://www.linuxfabrik.ch/
+# License: The Unlicense, see LICENSE file.
+
+# https://github.com/Linuxfabrik/monitoring-plugins/blob/main/CONTRIBUTING.md
+
+"""Unit tests for the apache-solr-version check plugin.
+
+The fixtures in `stdout/` are the raw `/opt/solr/bin/solr version`
+outputs captured from the official `docker.io/library/solr:<tag>`
+images on Docker Hub. There is no Red Hat family Solr container,
+so the upstream image is the right source. We deliberately
+include the EOL 7.x and 8.x cycles because production customers
+still run them. The plugin runs its `r'(\\d+\\.\\d+\\.\\d+)'`
+regex against each one. Note that 7.x and 8.x emit just the bare
+version string, while 9.x emits "Solr version is: X.Y.Z"
+preceded by a deprecation banner from 9.8 onwards.
+
+Each testcase pins the expected Nagios state to whatever
+`lib.version.check_eol()` returned when these fixtures were saved
+against the live https://endoflife.date/api/solr.json data. The
+EOL table drifts over time (releases hit EOL, new majors appear),
+so the `assert-retc` and `assert-in` strings will need to be
+re-pinned every few months.
+"""
+
+import sys
+sys.path.insert(0, '..')
+
+import unittest
+
+from lib.globals import STATE_OK, STATE_UNKNOWN, STATE_WARN
+import lib.lftest
+
+
+TESTS = [
+    {
+        'id': 'warn-solr-7-7-eol',
+        'test': 'stdout/solr-version-7,,0',
+        'assert-retc': STATE_WARN,
+        'assert-in': ['Apache Solr v7.7.3', 'EOL 2022-05-11', '[WARNING]'],
+    },
+    {
+        'id': 'warn-solr-8-11-eol',
+        'test': 'stdout/solr-version-8,,0',
+        'assert-retc': STATE_WARN,
+        'assert-in': ['Apache Solr v8.11.4', 'EOL 2024-10-25', '[WARNING]'],
+    },
+    {
+        'id': 'ok-solr-9-4',
+        'test': 'stdout/solr-version-9.4,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache Solr v9.4.1', 'EOL unknown'],
+    },
+    {
+        'id': 'ok-solr-9-10',
+        'test': 'stdout/solr-version-9.10,,0',
+        'assert-retc': STATE_OK,
+        'assert-in': ['Apache Solr v9.10.1', 'EOL unknown'],
+    },
+    {
+        'id': 'unknown-garbage-output',
+        'test': 'stdout/garbage-output,,0',
+        'assert-retc': STATE_UNKNOWN,
+        'assert-in': ['Apache Solr', 'not found.'],
+    },
+]
+
+
+class TestCheck(unittest.TestCase):
+
+    check = '../apache-solr-version'
+
+    def test(self):
+        for t in TESTS:
+            with self.subTest(id=t['id']):
+                lib.lftest.run(self, self.check, t)
+
+
+if __name__ == '__main__':
+    unittest.main()