From 049ad4d062c3986a8f5b0c79cfb4f75414e70bd5 Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Wed, 12 Feb 2025 11:36:53 +0100
Subject: [PATCH] Add fox IPMI monitoring

Use agenix to store the credentials safely.
---
 m/hut/ipmi.yml       |  13 -------------
 m/hut/monitoring.nix |  17 +++++++++++++++--
 secrets/ipmi.yml.age | Bin 0 -> 1184 bytes
 secrets/secrets.nix  |   1 +
 4 files changed, 16 insertions(+), 15 deletions(-)
 delete mode 100644 m/hut/ipmi.yml
 create mode 100644 secrets/ipmi.yml.age

diff --git a/m/hut/ipmi.yml b/m/hut/ipmi.yml
deleted file mode 100644
index 0d68a53..0000000
--- a/m/hut/ipmi.yml
+++ /dev/null
@@ -1,13 +0,0 @@
-modules:
-        default:
-                collectors:
-                - bmc
-                - ipmi
-                - chassis
-
-        lan:
-                collectors:
-                - ipmi
-                - chassis
-                user: ""
-                pass: ""
diff --git a/m/hut/monitoring.nix b/m/hut/monitoring.nix
index f7c7421..5c60260 100644
--- a/m/hut/monitoring.nix
+++ b/m/hut/monitoring.nix
@@ -12,6 +12,8 @@
     mode = "400";
   };
 
+  age.secrets.ipmiYml.file = ../../secrets/ipmi.yml.age;
+
   services.grafana = {
     enable = true;
     settings = {
@@ -73,8 +75,8 @@
         enable = true;
         group = "root";
         user = "root";
-        configFile = ./ipmi.yml;
-        #extraFlags = [ "--log.level=debug" ];
+        configFile = config.age.secrets.ipmiYml.path;
+        extraFlags = [ "--log.level=debug" ];
         listenAddress = "127.0.0.1";
       };
       node = {
@@ -248,6 +250,17 @@
           module = [ "raccoon" ];
         };
       }
+      {
+        job_name = "ipmi-fox";
+        metrics_path = "/ipmi";
+        static_configs = [
+          { targets = [ "127.0.0.1:9290" ]; }
+        ];
+        params = {
+          target = [ "10.0.40.126" ];
+          module = [ "fox" ];
+        };
+      }
     ];
   };
 }
diff --git a/secrets/ipmi.yml.age b/secrets/ipmi.yml.age
new file mode 100644
index 0000000000000000000000000000000000000000..ec99e58f0e378b4bc7c7cdf61e3e3f668d1aa412
GIT binary patch
literal 1184
zcmV;R1Yi4MXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LNLey@QfDA%
zXfserY<72cH!o**aY;c}N_bT=LQ*d^crjOGLQqOCbu(E|X;^7$F>?wyLr`TfIWtsE
zMr1Z(XI4>TK|^#xQaNr&Xm(LcZ&h$PXjM)$F+)gjR%Z$=J|J^*Xf0)AGBq_ZIUqwp
zS4T8aAZ=7(bVEooOF3;!Saof5IZ<L+F<5#rVt7t(I6*ZtGHY2%G-h=%XE8H(3PVF=
zQbS^6Y)DpEMmA71N;gncO;KhrOG+<qYcggzSV2NbGj>#Uabz}k3N1b$b8~1dWn?ln
zH8D9LO;biQWM?2kRdZ!HT17BgP(^4pI7CD<FH&esOh<TEIciNcT1Pi&T0=Nlc4sko
zL_rEgVnlX9QY%<eZFo;uY(+$NH%C@DZdNx$OH6cGGiYKkD{^8-QBqb=N;nEFEiE8X
zWp-98dU$eoNpUt(cuRILK{+v5SXOyrWl1n~S5agzdRBEvS9)$QX=4gTLapZ@+#kYh
z3x)^wEW^RKJ2V?;{_#xqiE|i#ZvBqsD53fQjkK4zr^}@@oITbw8<LT7Ay7vhAGvf<
z`})u`(xviI8-YE@ejOd;G{En7%SWIN7?qhCLt@uKaPpwb=P~*8Lg{9i_YZIz14@+X
zo?=8(;MXX6e=I<?KS44>M0NNlmtCjLpv_8lg){Nvs`2U+8^9aN8Dqk>T$nDlS$EA{
zju6OeAPi}zPA)ndB_LcY5{=cflE&y0qIPOM#MOd6SopKHF<KOm_K_cqp@^2lnZ8g@
z^o8SbHDHH;<QN3;2PA&#>#jx(Nw9$8^sd-w%2OAu+I&q*LSs#&_PTz}Y7Ibepu;dc
zXRS&8t9p;vC;{pRVtIYdKjMP-jvDj<M7TP86QTH{tq-T+K_W6HBYU-T(3Hh7cTG@2
zVEJ<KJ9@`_V4p(xb6D-9J(h~-F~X1&HZQ%b;vCoZASF781w`+CV?%Wx*k{$dDW{1a
zy!&fGpT=FD^~xXFRRxa|IIqKfN8t03%Kwiuux?3ME2&l7YlEv^Mz(90aFzWh*%aG(
za^*Mg=f7|05el5v-^qJ-*V^)seH5lV^0gH<j30A&>A<ZH;<zn#j$szwkqOHr?hsjp
zJ%t2h<3Y{bc(o_zj?(ibH0M6QuF3^VXgFkJ1)kH51yMxF+kRiZsbeBPaPF^flT!D_
zc}}^zYbAy19+3t&J&#%e>Qz4o(%GB}drxSOeZ>u55{OC-ms8&i842jbV;jb5b!ccF
zc9Q`88qz-U^($1RX2ZWbMJ^}DjFsi9R7S}ZAKnKUU}6A7bdsx!h@~ze=2d-{Dslh;
z@JKfg*5zlI@1k3HW2*1us8Yzp%+9s&DfxS|pY9Fgf5Hb(y`AhF8T8u_BW(SO$u8t3
zN1Jsx$i@VjiuvHsMQnknoVC_l8;}v^yH)?z`=;yTLjQi#6qrl_w&B1-q!n+)@25zl
yk<+;O2kVQo{$6c5&ogvMh=KMrT?O(VszLPQ!={WtQ`3>c;4lR37Z)&-cz20jiv}wI

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 68c746b..58ec2d6 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -12,6 +12,7 @@ in
   "gitlab-bsc-docker-token.age".publicKeys = hut;
   "nix-serve.age".publicKeys = hut;
   "jungle-robot-password.age".publicKeys = hut;
+  "ipmi.yml.age".publicKeys = hut;
 
   "ceph-user.age".publicKeys = safe;
   "munge-key.age".publicKeys = safe;