From 00999434c27c423f39ac16823053c54fb98b57d6 Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Wed, 12 Feb 2025 11:36:53 +0100
Subject: [PATCH] Add fox IPMI monitoring
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Use agenix to store the credentials safely.

Reviewed-by: Aleix Boné <abonerib@bsc.es>
---
 m/hut/ipmi.yml       |  13 -------------
 m/hut/monitoring.nix |  17 +++++++++++++++--
 secrets/ipmi.yml.age | Bin 0 -> 1184 bytes
 secrets/secrets.nix  |   1 +
 4 files changed, 16 insertions(+), 15 deletions(-)
 delete mode 100644 m/hut/ipmi.yml
 create mode 100644 secrets/ipmi.yml.age

diff --git a/m/hut/ipmi.yml b/m/hut/ipmi.yml
deleted file mode 100644
index 0d68a532..00000000
--- a/m/hut/ipmi.yml
+++ /dev/null
@@ -1,13 +0,0 @@
-modules:
-        default:
-                collectors:
-                - bmc
-                - ipmi
-                - chassis
-
-        lan:
-                collectors:
-                - ipmi
-                - chassis
-                user: ""
-                pass: ""
diff --git a/m/hut/monitoring.nix b/m/hut/monitoring.nix
index f7c7421e..ccfb575b 100644
--- a/m/hut/monitoring.nix
+++ b/m/hut/monitoring.nix
@@ -12,6 +12,8 @@
     mode = "400";
   };
 
+  age.secrets.ipmiYml.file = ../../secrets/ipmi.yml.age;
+
   services.grafana = {
     enable = true;
     settings = {
@@ -73,8 +75,8 @@
         enable = true;
         group = "root";
         user = "root";
-        configFile = ./ipmi.yml;
-        #extraFlags = [ "--log.level=debug" ];
+        configFile = config.age.secrets.ipmiYml.path;
+        # extraFlags = [ "--log.level=debug" ];
         listenAddress = "127.0.0.1";
       };
       node = {
@@ -248,6 +250,17 @@
           module = [ "raccoon" ];
         };
       }
+      {
+        job_name = "ipmi-fox";
+        metrics_path = "/ipmi";
+        static_configs = [
+          { targets = [ "127.0.0.1:9290" ]; }
+        ];
+        params = {
+          target = [ "10.0.40.126" ];
+          module = [ "fox" ];
+        };
+      }
     ];
   };
 }
diff --git a/secrets/ipmi.yml.age b/secrets/ipmi.yml.age
new file mode 100644
index 0000000000000000000000000000000000000000..ec99e58f0e378b4bc7c7cdf61e3e3f668d1aa412
GIT binary patch
literal 1184
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUlh%~AUN>@nFFb?p{
zDJw5C*H14m^mGjOst7f53eq>NFbq#|3h>e|HI59(jL6I~EatLs4oEeyG!F4~OEF7I
z4+~6obS`lUvdr_yC=2w?4=u3F2=y~DboM9+OGmfO*)iPRBv2tYB(cQV!^qn**C(Ph
zx5P3qDbg^a$}p+IFW<t^)YvFH(#s^R)G*!9xSY$`IVH$BDLKa@EW*t!z{JZuAjCH?
z&A{7BKR??j%`(E#$<w$jq_i-_tQ_4o-(WZ6lyn8B(Bf2!C|8510M`st3l|q-{h$mV
zANPuI%Pe2hD0lPBC})evvUI}=7e_AFB$qPBAnk~t+zS7Q99NezbN4WdyfAYYZ=aG#
z<BTK&?V=?2z@V@IFAFYRU0sF1)Uq(`s*0j=&qA}H3hy!lM@z%Vh_K3}R8ND_@W2#<
zs<2Xz@Txrh%w#S%r?t-&?#Lg?;cjF9rgQk<c54&qjDH_}zI7H$)aU)}d#bVU7enus
z={uI6UTQMO_L_<Gq=`j}0q(N$J4*t8|GHp&Y3Zjx=|<ZVb+WQgOb)y+KkdGNPh#p!
zDd(i?js>3<oPKWj^NZ8Vw3*-e3#6I7ro5b&<P!Ygx<*yKj>A@aM<ZvK(jV&6W0#*@
zaMr7=)%fG%RUco8NFR_sC7FC^Tg(i-ZIR_?WBUY7WGnDwF89;3l2%oS(H82xx_Q#E
z7s89mvTToBZL*8_v3Z+el*oi{6Xkmrc1$}wb6<e}m)6IHrU~s0Pb64Ava8g+dcDq#
z*K<R|qc7`jWSj~XUwf;@*V`%CcgeS1b!W499SRm4Hn2%w>-leWRsRhQ##ih~m9=N>
zA2ogNllsEwvcsxcc;S!5Yx$QybW}1@Q?A}xd|}E_!*bsMr-YwHAFZp7*Cfn$`cWM5
zc8Tq@t`~-fCJ3A9?_Kjq=K41URjUqGm-n^F&ZY7<(y#8;T;3_a=XbW_{A026zMhi5
z8Oqu(Y_a}ut^0$|6Hoo`H{Ouv8KJ#0^iFp3>NvM;+0zTA{#Cyza=WtVsrmco`}1E2
za?QDR|73Of^;@4N)QT*#`LtEktVh1M;^l$0e2;eMmh~ly-J8gHTIHQUWUFl}OUh%%
zvv(@Csz2|$^jX#9x!wMCr&zr+EK-tL=Uwh)4RkqqyDom;%48+`f_LllCkK5$R_V8M
zceZNlE4hhm=C=J&jIToNIWFCt!&U8{(O-L%H(sd2i+6hPeI7~97e|t%k7bo+WXP3G
zX80?0$?nrv?U1Euhxc2%>Zu>^nfi2fh}%gK`Fre=2}uktC6iWncP!OYd=^?eU8{(J
z@q>ps|Fx&-Gu|(Xu1H?>{>h4<6GzUR+xkKCXZ7a!?|2{AA7c04JNJ!@<d@q5$~k|#
zPU<~TbDv#mapD-u%&wmgF1Y42u9&m+TD0^8!DqWe|6lvP?Db=(|8<u|X815}dw9Tk
ziD>@O_scz&OuW3~C;RK}&Hv(Zt<D>lcy=^?Gl^yWB)`h>%j3h#dK`i;PdxO%faR^Y
KxWVL#@=gF=iv}wI

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 747b4aaf..ac3eac35 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -11,6 +11,7 @@ in
   "gitlab-runner-shell-token.age".publicKeys = hut;
   "nix-serve.age".publicKeys = hut;
   "jungle-robot-password.age".publicKeys = hut;
+  "ipmi.yml.age".publicKeys = hut;
 
   "ceph-user.age".publicKeys = safe;
   "munge-key.age".publicKeys = safe;