Worklet Script Running Even It Should Need To Exit 0

OmerAbr

August 27, 2023 at 3:10 am UTC

#Worklets

Hey,

I’ve made this worklet condition script but it seems the Remediation Code even that there is no Docker0 interface and non of the IPs start with 172.x.x.x

Evaluation Code

#!/bin/bash

# Check if the docker0 interface exists
if ip addr show docker0 &> /dev/null; then
# Get the IP address of the docker0 interface
docker0_ip=$(ip addr show docker0 | awk '/inet / {split($2, a, "/"); print a[1]}')

# Check if the IP address starts with 172.x.x.x
if [[ $docker0_ip =~ ^172\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$ ]]; then
echo "The docker0 interface has an IP address starting with 172.x.x.x."
exit 1
else
echo "The docker0 interface does not have an IP address starting with 172.x.x.x."
exit 0
fi
else
echo "The docker0 interface does not exist."
exit 0
fi

I would expect it to not run the script (Remediation Code) since non of the conditions are met but the activity log says: Created a new Docker default file at /etc/default/docker and checking the device the file was created.

Any chance to figure why?

This discussion is archived and closed to replies. Continue it in the Automox Community Slack.

Discuss on Slack

Replies (3)

OmerAbrAugust 27, 2023

Same for another worklet I’ve created that suppose to update Ubuntu client DNS in AD :

Evaluation Code

#!/bin/bash

# Check if update_dns.sh file exists in /etc/cron.d/
if [[ -f /etc/cron.d/update_dns.sh ]]; then
echo "The update_dns.sh file exists in /etc/cron.d/."
exit 0
else
echo "The update_dns.sh file does not exist in /etc/cron.d/."
exit 1
fi

It seems that even if the file update_dns.sh is in place it move to process the Remediation Code but should not and exit with 0.

AnonymousAugust 27, 2023

Hey! Thank you for posting!

Can I ask how you’re running/testing these worklets?
there’s a footnote in our worklets documentation that manually executed worklets will always trigger the remediation block.

“Note that manually executing the worklet triggers the Remediation code regardless of the flagged exit code.”

I’m gonna take a second to think why this is.. my instinct is that if we’re manually executing. That shouldn’t be different than a real world execution via API or schedule.

I’ll let you know if our product team can explain why it was built this way.

OmerAbrAugust 28, 2023

Hey David!

Thank you for your feedback, this is correct, I’m testing the worklet policies by running them manually before adding the scheduling to them.

Any feedback from the team will be much appreciated.

Thanks!

Back to all discussions