{"id":2460,"date":"2015-07-17T19:58:56","date_gmt":"2015-07-17T19:58:56","guid":{"rendered":"http:\/\/www.garysieling.com\/blog\/?p=2460"},"modified":"2015-07-17T19:58:56","modified_gmt":"2015-07-17T19:58:56","slug":"using-hubot-for-home-server-monitoring","status":"publish","type":"post","link":"https:\/\/www.garysieling.com\/blog\/using-hubot-for-home-server-monitoring\/","title":{"rendered":"Using Hubot for Home Server Monitoring"},"content":{"rendered":"

I set up\u00a0Hubot to do some simple server administration – this allows me to do a few common operations tasks while I’m travelling. I’ve previously tried SSH on my phone, but that seems unsafe in general, and it’s hard to use – this fixes a big frustration for me, if this site goes down and I’m not able to do anything.<\/p>\n

Installation<\/b>
\nHubot responds to chat messages and calls into custom Javascript classes, so you first need to install Node \/ npm:<\/p>\n

sudo apt-get update\nsudo apt-get install nodejs npm\n<\/pre>\n
Then follow the hubot install instructions:<\/p>\n
npm install -g yo generator-hubot\nuseradd hubot\nsudo su - hubot\n<\/pre>\n
Chat<\/b><\/p>\n
Since I want this for travelling, I need a chat integration that works on my phone, that is also relatively secure.<\/p>\n
The\u00a0Hubot documentation recommends several options. \u00a0One caution from what I learned doing this,”Let’s chat” doesn’t seem to allow you to lock down who can create accounts, and SSL between my Linode Server and Heroku is completely broken (it seems to be a defect in Socket.io). For the time being I landed on Campfire, which works on a phone (barely). It looks like a lot of people use Hipchat, but for now I’m trying to run this on the cheap.<\/p>\n
Plugins<\/b><\/p>\n
I like the reminder plugin – this has a semi-natural language interface to remind yourself of things later. To add this, add “hubot-remind-her”: “^0.4.1” to package.json, and do npm.install. Even though it matches a lot of date formats, it’s still pretty flaky and you have to get used to what it wants.<\/p>\n
For simple administration, I added a memory check plugin that I wrote:<\/p>\n
module.exports = (robot) ->\n robot.respond \/memory( (.+))?\/i, (msg) ->\n    q = msg.match[1]\n    @exec = require('child_process').exec\n    command = \"top -b -n 1 \"\n    if (!!q && q.length > 0)\n      command = command + ' | grep \"' + q.match(\/[^_\\W]+\/g).join(' ') + '\"\n\n    msg.send \"Memory usage:\"\n\n    @exec command, (error, stdout, stderr) ->\n      msg.send error\n      msg.send stdout\n      msg.send stderr\n<\/pre>\n
As well as a disk space checker:<\/p>\n
module.exports = (robot) ->\n robot.respond \/disk (usage|use|space)\/i, (msg) ->\n    q = msg.match[1]\n    @exec = require('child_process').exec\n    command = \"df -h \"\n\n    msg.send \"Disk free space:\"\n\n    @exec command, (error, stdout, stderr) ->\n      msg.send error\n      msg.send stdout\n      msg.send stderr\n<\/pre>\n
To be able to effect change, I made it so I can\u00a0restart mysql:<\/p>\n
module.exports = (robot) ->\n robot.respond \/restart mysql\/i, (msg) ->\n    hostname = msg.match[1]\n    @exec = require('child_process').exec\n    command = \"sudo \/etc\/init.d\/mysql restart\"\n\n    msg.send \"Restarting mysql service on linode\"\n\n    @exec command, (error, stdout, stderr) ->\n      msg.send error\n      msg.send stdout\n      msg.send stderr\n<\/pre>\n
You can do some entertaining things to make Hubot feel more like interacting with a person:<\/p>\n
 robot.respond \/thanks(.*)\/i, (msg) ->\n    msg.send \"you're welcome!\"\n\n robot.respond \/sorry(.*)\/i, (msg) ->\n    msg.send \"no problem!\"\n\n robot.respond \/(status|how are you)(.*)\/i, (msg) ->\n    msg.send \"outstanding!\"\n<\/pre>\n
To show how this looks, this is a conversation I had with hubot:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Gary:<\/strong><\/td>\n\n
@linode: status<\/div>\n<\/td>\n<\/tr>\n
Linode:<\/span><\/strong><\/td>\n\n
outstanding!<\/div>\n<\/td>\n<\/tr>\n
Gary:<\/span><\/strong><\/td>\n\n
@linode: memory mysql<\/div>\n<\/td>\n<\/tr>\n
Linode:<\/span><\/strong><\/td>\n\n
Memory usage:<\/div>\n<\/td>\n<\/tr>\n
<\/td>\n\n
\n
 2973 mysql     20   0  306m 123m 9.9m <\/code><\/pre>\n<\/div>\n<\/td>\n<\/tr>\n
Gary:<\/span><\/strong><\/td>\n\n
@linode: restart mysql<\/div>\n<\/td>\n<\/tr>\n
Linode:<\/span><\/strong><\/td>\n\n
Restarting mysql service on linode<\/div>\n<\/td>\n<\/tr>\n
<\/td>\n\n
\n
mysql stop\/waiting\nmysql start\/running, process 14261<\/code><\/pre>\n<\/div>\n<\/td>\n<\/tr>\n
Gary:<\/span><\/strong><\/td>\n\n
@linode: remind me on monday to fix mysql<\/div>\n<\/td>\n<\/tr>\n
Linode:<\/span><\/strong><\/td>\n\n
I’ll remind you to fix mysql Monday at 12:00 PM<\/div>\n<\/td>\n<\/tr>\n
Gary:<\/span><\/strong><\/td>\n\n
thanks!<\/div>\n<\/td>\n<\/tr>\n
Linode:<\/span><\/strong><\/td>\n\n
you’re welcome!<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Security<\/b><\/p>\n
The code for the\u00a0above commands shows some of the risks of this – you don’t want Hubot to be able to do everything, even though it should only be getting commands through the chat, because you’re constantly a step away from giving someone full control of the box that runs hubot, and anything it can access.<\/p>\n
To make this safer, I escaped the grep input in the memory command, and require hubot to sudo to restart mysql. This specific command is granted to the hubot user in sudoers, so at least it limits it’s ability to cause damage:<\/p>\n
hubot        ALL = NOPASSWD: \/etc\/init.d\/mysql restart\n<\/pre>\n
Generally I would audit any code you install for Hubot, because the script-writing community seems more interested in meme-generation than secure code. Even though the default meme\/image generation plugins are cute, I would remove them.<\/p>\n
Daemonizing Hubot<\/strong><\/p>\n
Follow these instructions:
\nhttps:\/\/gist.github.com\/1394520\/ed2c32663ae61038d85b1cae1e2f10c105f07576<\/a><\/p>\n
All of the chat settings should go in a configuration file – the trick to this is getting the paths all correct.<\/p>\n
Once you get it to work, make it start on boot:<\/p>\n
update-rc.d Hubot defaults\n<\/pre>\n
Future Ideas<\/b><\/p>\n
In the future, I’m planning to extend this setup so that each of my machines (laptop, desktop) has a Hubot as well. This will for instance allow me to search for vacation photos or specific files while travelling, or to see if the power is on at home \/ in the office.<\/p>\n
I’m also looking to add some database commands (tell me the status of a user, extend an account, etc) to see how the experience works. I suspect that if you use a Google docs integration for Hubot, you could get access to a lot of applications that have Zapier APIs, but this will require some investigation.<\/p>\n
I also need to find a more suitable chat client (hopefully installable on a server), but security is challenging.<\/p>\n","protected":false},"excerpt":{"rendered":"
I set up\u00a0Hubot to do some simple server administration – this allows me to do a few common operations tasks while I’m travelling. I’ve previously tried SSH on my phone, but that seems unsafe in general, and it’s hard to use – this fixes a big frustration for me, if this site goes down and … <\/p>\n
Continue reading “Using Hubot for Home Server Monitoring”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[24],"tags":[280,302,410],"aioseo_notices":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts\/2460"}],"collection":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/comments?post=2460"}],"version-history":[{"count":0,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/posts\/2460\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/media?parent=2460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/categories?post=2460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.garysieling.com\/blog\/wp-json\/wp\/v2\/tags?post=2460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}