Add misc scripts to repoitory

2026-04-23 08:26:38 -04:00
parent b82c9af8c4
commit 1ebf3f1435
13 changed files with 1617 additions and 9 deletions
@@ -0,0 +1,57 @@
+#!/usr/bin/python3
+import argparse
+import configparser
+import os
+import sys
+import urllib3
+import redfish
+
+# Suppress SSL warnings for self-signed iLO certificates
+urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
+
+parser = argparse.ArgumentParser(description="Power off an HPE server via iLO Redfish")
+parser.add_argument("hostname", help="iLO hostname or IP address")
+parser.add_argument("-c", "--credentials", default="/etc/ilo_credentials",
+                    help="Path to credentials file (default: /etc/ilo_credentials)")
+args = parser.parse_args()
+
+# Read credentials from file (chmod 600 recommended: sudo chmod 600 /etc/ilo_credentials)
+# File format:
+#   [ilo]
+#   username = root
+#   password = yourpassword
+cred_path = args.credentials
+if not os.path.exists(cred_path):
+    print(f"Error: credentials file not found: {cred_path}", file=sys.stderr)
+    sys.exit(1)
+
+config = configparser.ConfigParser()
+config.read(cred_path)
+try:
+    LOGIN_ACCOUNT = config.get("ilo", "username", fallback="root")
+    LOGIN_PASSWORD = config.get("ilo", "password")
+except (configparser.NoSectionError, configparser.NoOptionError) as e:
+    print(f"Error reading credentials file: {e}", file=sys.stderr)
+    sys.exit(1)
+
+BASE_URL = f"https://{args.hostname}"
+
+REDFISHOBJ = redfish.RedfishClient(
+    base_url=BASE_URL,
+    username=LOGIN_ACCOUNT,
+    password=LOGIN_PASSWORD,
+)
+REDFISHOBJ.login(auth="session")
+
+# Discover the correct reset action URI from the system resource
+sys_response = REDFISHOBJ.get("/redfish/v1/Systems/1/")
+reset_uri = sys_response.dict["Actions"]["#ComputerSystem.Reset"]["target"]
+
+body = {"ResetType": "PushPowerButton"}  # iLO 4: PushPowerButton = graceful shutdown; use "ForceOff" for hard power cut
+response = REDFISHOBJ.post(reset_uri, body=body)
+
+print(f"Status: {response.status}")
+if response.status >= 400:
+    print(f"Error: {response.read}")
+
+REDFISHOBJ.logout()
@@ -0,0 +1,57 @@
+#!/usr/bin/python3
+import argparse
+import configparser
+import os
+import sys
+import urllib3
+import redfish
+
+# Suppress SSL warnings for self-signed iLO certificates
+urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
+
+parser = argparse.ArgumentParser(description="Power off an HPE server via iLO Redfish")
+parser.add_argument("hostname", help="iLO hostname or IP address")
+parser.add_argument("-c", "--credentials", default="/etc/ilo_credentials",
+                    help="Path to credentials file (default: /etc/ilo_credentials)")
+args = parser.parse_args()
+
+# Read credentials from file (chmod 600 recommended: sudo chmod 600 /etc/ilo_credentials)
+# File format:
+#   [ilo]
+#   username = root
+#   password = yourpassword
+cred_path = args.credentials
+if not os.path.exists(cred_path):
+    print(f"Error: credentials file not found: {cred_path}", file=sys.stderr)
+    sys.exit(1)
+
+config = configparser.ConfigParser()
+config.read(cred_path)
+try:
+    LOGIN_ACCOUNT = config.get("ilo", "username", fallback="root")
+    LOGIN_PASSWORD = config.get("ilo", "password")
+except (configparser.NoSectionError, configparser.NoOptionError) as e:
+    print(f"Error reading credentials file: {e}", file=sys.stderr)
+    sys.exit(1)
+
+BASE_URL = f"https://{args.hostname}"
+
+REDFISHOBJ = redfish.RedfishClient(
+    base_url=BASE_URL,
+    username=LOGIN_ACCOUNT,
+    password=LOGIN_PASSWORD,
+)
+REDFISHOBJ.login(auth="session")
+
+# Discover the correct reset action URI from the system resource
+sys_response = REDFISHOBJ.get("/redfish/v1/Systems/1/")
+reset_uri = sys_response.dict["Actions"]["#ComputerSystem.Reset"]["target"]
+
+body = {"ResetType": "PushPowerButton"}  # iLO 4: PushPowerButton = graceful shutdown; use "ForceOff" for hard power cut
+response = REDFISHOBJ.post(reset_uri, body=body)
+
+print(f"Status: {response.status}")
+if response.status >= 400:
+    print(f"Error: {response.read}")
+
+REDFISHOBJ.logout()
@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+import argparse
+import configparser
+import os
+import subprocess
+import sys
+
+DEFAULT_EK = "0000000000000000000000000000000000000000"
+
+
+def load_credentials(path):
+    if not os.path.exists(path):
+        print(f"Error: credentials file not found: {path}", file=sys.stderr)
+        sys.exit(1)
+
+    config = configparser.ConfigParser()
+    config.read(path)
+
+    try:
+        username = config.get("credentials", "username", fallback="root")
+        password = config.get("credentials", "password")
+        encryption_key = config.get("credentials", "encryption_key", fallback=DEFAULT_EK)
+    except (configparser.NoSectionError, configparser.NoOptionError) as e:
+        print(f"Error reading credentials file: {e}", file=sys.stderr)
+        sys.exit(1)
+
+    return username, password, encryption_key
+
+
+def main():
+    p = argparse.ArgumentParser(description="Send IPMI power off")
+    p.add_argument("-H", "--host", required=True, help="IPMI host address")
+    p.add_argument(
+        "-c",
+        "--credentials",
+        default="credentials",
+        help="Path to credentials file (default: credentials)",
+    )
+    args = p.parse_args()
+
+    ipmi_user, ipmi_pw, ipmi_ek = load_credentials(args.credentials)
+
+    cmd = [
+        "ipmitool",
+        "-I", "lanplus",
+        "-H", args.host,
+        "-U", ipmi_user,
+        "-P", ipmi_pw,
+        "-y", ipmi_ek,
+        "power", "off",
+    ]
+
+    proc = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
+    if proc.returncode != 0:
+        print("ipmitool failed:", proc.stderr.strip(), file=sys.stderr)
+        sys.exit(proc.returncode)
+
+    print(proc.stdout.strip())
+
+if __name__ == "__main__":
+    main()
@@ -0,0 +1,65 @@
+#!/usr/bin/env python3
+import argparse
+import configparser
+import os
+import subprocess
+import sys
+import datetime
+
+def ts_print(msg):
+    """ts_print message prefixed with a timestamp (YYYY-MM-DD HH:MM:SS)."""
+    now = datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S")
+    print(f"{now} {msg}")
+
+DEFAULT_EK = "0000000000000000000000000000000000000000"
+
+
+def load_credentials(path):
+    if not os.path.exists(path):
+        print(f"Error: credentials file not found: {path}", file=sys.stderr)
+        sys.exit(1)
+
+    config = configparser.ConfigParser()
+    config.read(path)
+
+    try:
+        username = config.get("ilo", "username", fallback="root")
+        password = config.get("ilo", "password")
+        encryption_key = config.get("ilo", "encryption_key", fallback=DEFAULT_EK)
+    except (configparser.NoSectionError, configparser.NoOptionError) as e:
+        print(f"Error reading credentials file: {e}", file=sys.stderr)
+        sys.exit(1)
+
+    return username, password, encryption_key
+
+def main():
+    p = argparse.ArgumentParser(description="Send IPMI power on")
+    p.add_argument("-H", "--host", required=True, help="IPMI host address")
+    p.add_argument(
+        "-c",
+        "--credentials",
+        default="credentials",
+        help="Path to credentials file (default: credentials)",
+    )
+    args = p.parse_args()
+
+    ipmi_user, ipmi_pw, ipmi_ek = load_credentials(args.credentials)
+
+    cmd = [
+        "ipmitool",
+        "-I", "lanplus",
+        "-H", args.host,
+        "-U", ipmi_user,
+        "-P", ipmi_pw,
+        "-y", ipmi_ek,
+        "power", "on",
+    ]
+    print(f"Sending power on to {args.host}")
+    proc = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
+    if proc.returncode != 0:
+        print("ipmitool failed:", proc.stderr.strip(), file=sys.stderr)
+        sys.exit(proc.returncode)
+    print(proc.stdout.strip())
+
+if __name__ == "__main__":
+    main()
@@ -0,0 +1,17 @@
+#!/bin/bash
+# Configuration
+BACKUP_DIR="/var/lib/postgresql_archive/pg_dumpfiles"
+TIMESTAMP=$(date +%Y%m%d_%H%M%S)
+RETENTION_DAYS=7
+
+# Ensure directory exists
+mkdir -p "$BACKUP_DIR"
+
+# Get all non-system databases and back each one up.
+psql -U postgres -d postgres -Atc "SELECT datname FROM pg_database WHERE datistemplate = false AND datname <> 'postgres' ORDER BY datname" | while IFS= read -r DB_NAME; do
+	pg_dump -U postgres -d "$DB_NAME" | gzip > "$BACKUP_DIR/${DB_NAME}_$TIMESTAMP.sql.gz"
+	echo "Backup completed: ${DB_NAME}_$TIMESTAMP.sql.gz"
+done
+
+# Delete backups older than retention period
+find "$BACKUP_DIR" -type f -mtime +$RETENTION_DAYS -delete
@@ -0,0 +1,10 @@
+#!/bin/bash
+BACKUP_DIR="/var/lib/postgresql_archive/pgbackups/$(date +%Y%m%d)"
+mkdir -p $BACKUP_DIR
+# Perform base backup with WAL streaming
+pg_basebackup -h localhost -U wjones -D $BACKUP_DIR -Fp -Xs -P
+# Optional: Compress
+tar -czf ${BACKUP_DIR}_$(date +%Y%m%d_%H%M%S).tar.gz $BACKUP_DIR
+rm -rf $BACKUP_DIR
+# Retention: Delete backups older than 7 days
+find /var/lib/postgresql_archive/pgbackups/ -type f -mtime +7 -name "*.tar.gz" -delete