aboutsummaryrefslogblamecommitdiffstats
path: root/check-routeros-update
blob: caafe3fe8a72d95569543e5368c6958271522052 (plain) (tree)
1
2
3
4
5
6
7
8
9
10
     




                                                         
                          
                                            
                         
                                                                                      
                                                           


                                                         

                                                                          
 
                                              


                                                                 
                                                                    
                                                                              
                                                                                 

                                                                               




                                                                  
                                                                            
   
                                                                          




                                                      
                                                          
 
#!rsc
# RouterOS script: check-routeros-update
# Copyright (c) 2013-2018 Christian Hesse <mail@eworm.de>
#
# check for RouterOS update, send notification e-mails

:global "identity";
:global "safe-update-url";
:global "sent-routeros-update-notification";

:global SendNotification;

:if ([ / system package print count-only where name="wireless" disabled=no ] > 0) do={
  :if ([ / interface wireless cap get enabled ] = true && \
      [ / caps-man manager get enabled ] = false) do={
    :error "System is managed by CAPsMAN, not checking.";
  }
}

/ system package update check-for-updates without-paging;
:local installedversion [ / system package update get installed-version ];
:local latestversion [ / system package update get latest-version ];

:if ($installedversion != $latestversion) do={
  :local channel [ / system package update get channel ];
  :local model [ / system routerboard get model ];
  :local serialnumber [ / system routerboard get serial-number ];

  :if ([ :len $"safe-update-url" ] > 0) do={
    :local result [ / tool fetch check-certificate=yes-without-crl \
        ($"safe-update-url" . $channel . "?installed=" . $installedversion . \
        "&latest=" . $latestversion) output=user as-value ];
    :if ($result->"status" = "finished" && $result->"data" = $latestversion) do={
      :log info ("Version " . $latestversion . " is assumed safe, updating...");
       $SendNotification ("[" . $identity . "] RouterOS update notification") \
         ("Version " . $latestversion . " is assumed safe for " . $channel . \
         ", updating on " . $identity . "...");
      / system package update install;
      :error "Waiting for system to reboot.";
    }
  }

  :if ($"sent-routeros-update-notification" = $latestversion) do={
    :error ("Already sent the RouterOS update notification for version " . \
        $latestversion . ".");
  }

  $SendNotification ("[" . $identity . "] RouterOS update notification") \
    ("There is a RouterOS update available\n\n" . \
      "Routerboard:   " . $model . "\n" . \
      "Serial number: " . $serialnumber . "\n" . \
      "Hostname:      " . $identity . "\n" . \
      "Channel:       " . $channel . "\n" . \
      "Installed:     " . $installedversion . "\n" . \
      "Available:     " . $latestversion);
  :set "sent-routeros-update-notification" $latestversion;
}