fix(podman-info,podman-stats): add sudoers entries and run via sudo

Author: markuslf

assets/sudoers/Debian.sudoers

@@ -25,6 +25,8 @@ Cmnd_Alias LF_NAGIOS = /usr/lib64/nagios/plugins/about-me,\
                     /usr/lib64/nagios/plugins/openvpn-client-list,\
                     /usr/lib64/nagios/plugins/path-rw-test,\
                     /usr/lib64/nagios/plugins/php-status,\
+                    /usr/lib64/nagios/plugins/podman-info,\
+                    /usr/lib64/nagios/plugins/podman-stats,\
                     /usr/lib64/nagios/plugins/restic-check,\
                     /usr/lib64/nagios/plugins/restic-snapshots,\
                     /usr/lib64/nagios/plugins/restic-stats,\

assets/sudoers/RedHat.sudoers

@@ -25,6 +25,8 @@ Cmnd_Alias LF_NAGIOS = /usr/lib64/nagios/plugins/about-me,\
                     /usr/lib64/nagios/plugins/openvpn-client-list,\
                     /usr/lib64/nagios/plugins/path-rw-test,\
                     /usr/lib64/nagios/plugins/php-status,\
+                    /usr/lib64/nagios/plugins/podman-info,\
+                    /usr/lib64/nagios/plugins/podman-stats,\
                     /usr/lib64/nagios/plugins/restic-check,\
                     /usr/lib64/nagios/plugins/restic-snapshots,\
                     /usr/lib64/nagios/plugins/restic-stats,\

check-plugins/podman-info/README.md

@@ -4,6 +4,10 @@
 
 Displays system-wide Podman information. For Docker, use the [docker-info](https://github.com/Linuxfabrik/monitoring-plugins/tree/main/check-plugins/docker-info) check instead.
 
+Hints:
+
+* Podman runs rootless by default. Without `sudo`, the check only sees containers of the executing user. To monitor containers across all users, run the check via `sudo` (the Icinga Director basket and sudoers file are pre-configured for this).
+
 
 ## Fact Sheet
 

check-plugins/podman-info/icingaweb2-module-director/podman-info.json

@@ -6,7 +6,7 @@
                     "set_if": "$podman_info_always_ok$"
                 }
             },
-            "command": "/usr/lib64/nagios/plugins/podman-info",
+            "command": "/usr/bin/sudo /usr/lib64/nagios/plugins/podman-info",
             "disabled": false,
             "fields": [
                 {

check-plugins/podman-info/icingaweb2-module-director/podman-info.yml

@@ -1,6 +1,6 @@
 ---
 overwrites:
-  '["Command"]["cmd-check-podman-info"]["command"]': '/usr/lib64/nagios/plugins/podman-info'
+  '["Command"]["cmd-check-podman-info"]["command"]': '/usr/bin/sudo /usr/lib64/nagios/plugins/podman-info'
   '["ServiceTemplate"]["tpl-service-podman-info"]["check_interval"]': 86400
   '["ServiceTemplate"]["tpl-service-podman-info"]["enable_perfdata"]': true
   '["ServiceTemplate"]["tpl-service-podman-info"]["retry_interval"]': 60

check-plugins/podman-stats/README.md

@@ -6,8 +6,9 @@ This check prints cpu and memory statistics for all running Podman containers, u
 
 Hints:
 
+* Podman runs rootless by default. Without `sudo`, the check only sees containers of the executing user. To monitor containers across all users, run the check via `sudo` (the Icinga Director basket and sudoers file are pre-configured for this).
 * Plugin execution may take up to 10 seconds.
-* Since `podman stats` only returns byte-level data in a human-readable format (e.g. *4.82GB*), calculating network I/O (`RX bps`, `TX bps`) and block I/O (`BlockIn/s`, `BlockOut/s`) is imprecise. Therefore, these values are not used at all.
+* Since `podman stats` only returns byte-level data in a human-readable format (e.g. *221.2kB*), calculating network I/O and block I/O is imprecise. Therefore, these values are not used.
 
 
 ## Fact Sheet

check-plugins/podman-stats/icingaweb2-module-director/podman-stats.json

@@ -24,7 +24,7 @@
                     "value": "$podman_stats_warning_mem$"
                 }
             },
-            "command": "/usr/lib64/nagios/plugins/podman-stats",
+            "command": "/usr/bin/sudo /usr/lib64/nagios/plugins/podman-stats",
             "disabled": false,
             "fields": [
                 {

check-plugins/podman-stats/icingaweb2-module-director/podman-stats.yml

@@ -1,5 +1,5 @@
 ---
 overwrites:
-  '["Command"]["cmd-check-podman-stats"]["command"]': '/usr/lib64/nagios/plugins/podman-stats'
+  '["Command"]["cmd-check-podman-stats"]["command"]': '/usr/bin/sudo /usr/lib64/nagios/plugins/podman-stats'
   '["Command"]["cmd-check-podman-stats"]["timeout"]': 20
   '["ServiceTemplate"]["tpl-service-podman-stats"]["enable_perfdata"]': true