needrestart: check if a restart is required

Performing upgrades doesn't help if the outdated version is still
running.

Use needrestart to determine if an application is running with an
outdated version if itself or a library or the system is running without
an outdated kernel.

Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>

1 files changed, 23 insertions, 0 deletions

diff --git a/zones.d/global-templates/commands.conf b/zones.d/global-templates/commands.conf
index 1fe8b56..22d7c8b 100644
--- a/zones.d/global-templates/commands.conf
+++ b/zones.d/global-templates/commands.conf
@@ -1,3 +1,26 @@
 object CheckCommand "systemd" {
 	command = [ PluginDir + "/check_systemd" ]
 }
+
+object CheckCommand "needrestart" {
+	command = [ "/usr/bin/sudo", "/usr/sbin/needrestart", "-p" ]
+
+	arguments = {
+		"-v" = {
+			set_if = "$needrestart_verbose$"
+			description = "Show details for debugging"
+		}
+		"-k" = {
+			set_if = "$needrestart_limit_kernel$"
+			description = "Limit to checking for obsolete kernel"
+		}
+		"-l" = {
+			set_if = "$needrestart_limit_libraries$"
+			description = "Limit to checking for obsolete libraries"
+		}
+	}
+
+	vars.needrestart_verbose = false
+	vars.needrestart_limit_kernel = false
+	vars.needrestart_limit_libraries = false
+}