Some thought about nagios-plugins and mysql dependency

Andrea Venturoli ml at netfence.it
Thu Jan 28 09:00:39 UTC 2021


Hello.

Currently nagios-plugins has an option to depend on mysql-client (in 
order to provide the check_mysql and check_mysql_query commands).

I build my packages with Poudriere and I need this MySQL support where I 
have a Nagios instance. However, this brings mysql-client in on each and 
everyone of my hosts, where I don't need it as I just have NRPE running 
and no MySQL server; besides I do MySQL checks from remote.
The recent (but not first) vulnerability in mysql*-client prompted me to 
think wheter there is a better solution.

AFAICT, building the port with and without that option would require 
some work with Poudriere (keeping two port trees and two set of 
packages, with appropriate configuration to instruct clients to use one 
or the ohter). Please correct me if I'm wrong.



So I thought a possible solution would be either to flavorize the port 
or split the mysql part into a slave one.
Have there been any thought/discussion already about this? Would it work 
in principle?

Of course I'm prepared to do this myself.
I'm already using a local port tree (with some modification against the 
official one), so it's fine if this changes will never be accepted by 
the FreeBSD project.
Of course I'll share if, instead, you are interested.

  bye & Thanks
	av.


More information about the freebsd-ports mailing list