Metadata-Version: 2.4
Name: monit-docker
Version: 0.0.54
Summary: monit-docker
Home-page: https://github.com/decryptus/monit-docker
Author: Adrien Delle Cave
Author-email: pypi@doowan.net
License: License GPL-3
Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
Classifier: Natural Language :: English
Classifier: Operating System :: Unix
Classifier: Programming Language :: Python
Classifier: Programming Language :: Python :: 2
Classifier: Programming Language :: Python :: 2.7
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.5
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.7
Classifier: Topic :: System :: Monitoring
Classifier: Topic :: Terminals
Classifier: Topic :: Utilities
Requires-Python: >=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: cryptography>=3.2.1
Requires-Dist: bitmath>=1.3.3.1
Requires-Dist: docker>=2.7.0
Requires-Dist: Mako
Requires-Dist: pyOpenSSL>=20.0.0
Requires-Dist: PyYAML>=3.10
Requires-Dist: six>=1.13.0
Requires-Dist: sonicprobe>=0.3.51
Dynamic: author
Dynamic: author-email
Dynamic: classifier
Dynamic: description
Dynamic: description-content-type
Dynamic: home-page
Dynamic: license
Dynamic: license-file
Dynamic: requires-dist
Dynamic: requires-python
Dynamic: summary

# monit-docker project

[![PyPI pyversions](https://img.shields.io/pypi/pyversions/monit-docker.svg)](https://pypi.org/project/monit-docker/)
[![PyPI version shields.io](https://img.shields.io/pypi/v/monit-docker.svg)](https://pypi.org/project/monit-docker/)
[![Docker Cloud Build Status](https://img.shields.io/docker/cloud/build/decryptus/monit-docker)](https://hub.docker.com/r/decryptus/monit-docker)
[![Documentation Status](https://readthedocs.org/projects/monit-docker/badge/?version=latest)](https://monit-docker.readthedocs.io/)

monit-docker is a free and open-source, we develop it to monitor container status or resources
and execute some commands inside containers or manage containers with dockerd, for example:
 - reload php-fpm if memory usage is too high
 - reload php-fpm if no free space in /dev/shm
 - restart container if status is not running
 - remove all containers

## Table of contents
1. [Quickstart](#quickstart)
2. [Installation](#installation)
3. [Environment variables](#environment_variables)
4. [Sub-command: monit](#sub-command_monit)
    1. [Basic commands](#monit_basic_commands)
    2. [Advanced commands](#monit_advanced_commands)
    3. [Container informations with exit codes](#monit_container_informations)
    4. [monit-docker with M/Monit](#monit_with_mmonit)
5. [Sub-command: stats](#sub-command_stats)
    1. [Basic commands](#stats_basic_commands)
    2. [Advanced commands](#stats_advanced_commands)

## <a name="quickstart"></a>Quickstart

Using monit-docker in Docker with crond

`docker-compose up -d`

See [docker-compose.yml](docker-compose.yml) and MONIT\_DOCKER\_CRONS environment variable to configure commands.

## <a name="installation"></a>Installation

`pip install monit-docker`

## <a name="environment_variables"></a>Environment variables

| Variable                   | Description                 | Default |
|:---------------------------|:----------------------------|:--------|
| `MONIT_DOCKER_CONFIG`      | Configuration file contents<br />(e.g. `export MONIT_DOCKER_CONFIG="$(cat monit-docker.yml)"`) |  |
| `MONIT_DOCKER_CONFFILE`    | Configuration file path     | /etc/monit-docker/monit-docker.yml |
| `MONIT_DOCKER_LOGFILE`     | Log file path               | /var/log/monit-docker/monit-docker.log |
| `MONIT_DOCKER_RUNTIMEDIR`  | Runtime directory path      | /run/monit-docker |

## <a name="sub-command_monit"></a>Sub-command: monit

### <a name="monit_basic_commands"></a>Basic commands

Restart containers with name starts with foo if memory usage percentage > 60% or cpu usage percentage > 90%:

`monit-docker --name 'foo*' monit --cmd-if 'mem_percent > 60 ? restart' --cmd-if 'cpu_percent > 90 ? restart'`

Stop containers with name starts with bar or foo and if cpu usage percentage greater than 60% and less than 70%:

`monit-docker --name 'bar*' --name 'foo*' monit --cmd-if '60 > cpu_percent < 70 ? stop'`

Kill containers with name starts with bar and status equal to paused or running:

`monit-docker --name 'bar*' monit --cmd-if 'status in (paused,running) ? kill'`

You can also use status argument, for example, restart containers with status paused or exited:

`monit-docker -s paused -s exited monit --cmd 'restart'`

Generate containers pidfile:

`monit-docker monit --rsc pid`

#### PHP-FPM graceful reload

The PHP-FPM examples below (including the Monit configuration) use
`kill -USR2 1` **inside the container**. They require the PHP-FPM master process
to be PID 1. According to the [PHP-FPM manual](https://github.com/php/php-src/blob/master/sapi/fpm/php-fpm.8.in),
`SIGUSR2` gracefully reloads the workers and reloads the FPM configuration and binary.

If PID 1 is a supervisor or a wrapper script, target the actual PHP-FPM master
PID inside the container instead. Obtain it from the PID file configured for
your PHP-FPM installation, or use your supervisor's documented reload command.
Do not target an arbitrary worker PID.

For a PHP-FPM master running as PID 1:

```sh
monit-docker --name foo_php_fpm monit --cmd '(kill -USR2 1)'
```

The Docker SDK `reload` action only refreshes container metadata; it does not
send `SIGUSR2` or reload PHP-FPM.

Reload php-fpm in container with image name contains /php-fpm/ if memory usage greater than 100 MiB:

`monit-docker --image '*/php-fpm/*' monit --cmd-if 'mem_usage > 100 MiB ? (kill -USR2 1)'`

Reload php-fpm in container with image name contains /php-fpm/ if /dev/shm percentage usage greater than 80%:

`monit-docker --image '*/php-fpm/*' monit --cmd '(bash -c "[ $(df /dev/shm | sed \"s/\%//;\$!d\" | awk \"{print \$5}\") -gt 80 ] && kill -USR2 1")'`

### <a name="monit_advanced_commands"></a>Advanced commands with configuration file or environment variable MONIT\_DOCKER\_CONFIG

##### Run commands with aliases declared in configuration file (e.g.: [monit-docker.yml.example](etc/monit-docker/monit-docker.yml.example)):

Restart container id 4c01db0b339c if condition alias @status\_not\_running is true:

`monit-docker --id 4c01db0b339c monit --cmd-if '@status_not_running ? restart'`

Execute commands alias @start\_pause containers with name starts with foo if condition alias @status\_not\_running is true:

`monit-docker --name 'foo*' monit --cmd-if '@status_not_running ? @start_pause'`

Remove force container group php if status is equal to running:

`monit-docker --ctn-group php monit --cmd-if 'status == running ? @remove_force'`

Restart containers group nodejs if memory usage percentage > 10% and cpu usage percentage > 60%:

`monit-docker --ctn-group nodejs monit --cmd-if '@mem_gt_10pct_and_cpu_gt_60pct ? restart'`

Remove force all containers:

`monit-docker monit --cmd '@remove_force'`

### <a name="monit_container_informations"></a>Container informations with exit codes

##### Container status

Run command below to get status with exit code for container named foo\_php\_fpm:

`monit-docker --name foo_php_fpm monit --rsc status`

An error occurred if exit code is greater than 100.

| Exit code | Description |
|:----------|:------------|
| 0         | Running     |
| 10        | Created     |
| 20        | Paused      |
| 30        | Restarting  |
| 40        | Removing    |
| 50        | Exited      |
| 60        | Dead        |
| 114       | Not found   |

##### Container CPU usage percentage

Run command below to get CPU usage percentage with exit code for container named foo\_php\_fpm:

`monit-docker --name foo_php_fpm monit --rsc cpu_percent`

An error occurred if exit code is greater than 100.

CPU percentages returned as exit codes are capped at 100 to avoid collisions with error codes and Unix exit-code overflow. The `stats` sub-command and conditional rules retain the raw CPU percentage, which may exceed 100 on multi-core hosts.

##### Container memory usage percentage

Run command below to get memory usage percentage with exit code for container named foo\_php\_fpm:

`monit-docker --name foo_php_fpm monit --rsc mem_percent`

An error occurred if exit code is greater than 100.

### <a name="monit_with_mmonit"></a>monit-docker with M/Monit

We can also monitoring containers cpu\_percent and mem\_percent resources with [M/Monit](https://mmonit.com).

##### Configuration examples

```
check program docker.foo_php_fpm.status with path "/usr/bin/monit-docker --name foo_php_fpm monit --rsc status"
    group monit-docker
    if status = 114 for 2 cycles then alert # container not found
    if status != 0 for 2 cycles then exec "/usr/bin/monit-docker --name foo_php_fpm monit --cmd restart" # container not running

check program docker.foo_php_fpm.cpu with path "/usr/bin/monit-docker -s running --name foo_php_fpm monit --rsc cpu_percent"
    group monit-docker
    if status > 100 for 2 cycles then alert
    if status > 70 for 2 cycles then alert
    if status > 80 for 4 cycles then exec "/usr/bin/monit-docker --name foo_php_fpm monit --cmd '(kill -USR2 1)'"

check program docker.foo_php_fpm.mem with path "/usr/bin/monit-docker -s running --name foo_php_fpm monit --rsc mem_percent"
    group monit-docker
    if status > 100 for 2 cycles then alert
    if status > 70 for 2 cycles then alert
    if status > 80 for 4 cycles then exec "/usr/bin/monit-docker --name foo_php_fpm monit --cmd '(kill -USR2 1)'"

check process docker.foo_php_fpm.pid with pidfile /run/monit-docker/foo_php_fpm.pid
    group monit-docker
    if changed pid then alert

```

## <a name="sub-command_stats"></a>Sub-command: stats

### <a name="stats_basic_commands"></a>Basic commands

Get all resources statistics for all containers in json format:

`monit-docker stats --output json`

```json
{
  "flamboyant_chaplygin": {
    "status": "running",
    "mem_percent": 0.03,
    "net_tx": "0.0 B",
    "cpu_percent": 0,
    "mem_usage": "2.52 MiB",
    "io_read": "3.5 MB",
    "io_write": "0.0 B",
    "net_rx": "25.2 kB",
    "mem_limit": "7.27 GiB",
    "pid": "3943"
  }
}
{
  "practical_proskuriakova": {
    "status": "running",
    "mem_percent": 0.04,
    "net_tx": "0.0 B",
    "cpu_percent": 0,
    "mem_usage": "2.61 MiB",
    "io_read": "24.6 kB",
    "io_write": "0.0 B",
    "net_rx": "25.0 kB",
    "mem_limit": "7.27 GiB",
    "pid": "3990"
  }
}
```

Get all resources statistics for all containers in text format:

`monit-docker stats --output text`

```
flamboyant_chaplygin|mem_usage:2.52 MiB|mem_limit:7.27 GiB|mem_percent:0.03|cpu_percent:0.0|io_read:3.5 MB|io_write:0.0 B|net_tx:0.0 B|net_rx:43.5 kB|status:running
practical_proskuriakova|mem_usage:2.61 MiB|mem_limit:7.27 GiB|mem_percent:0.04|cpu_percent:0.0|io_read:24.6 kB|io_write:0.0 B|net_tx:0.0 B|net_rx:43.3 kB|status:running
```

### <a name="stats_advanced_commands"></a>Advanced commands with configuration file or environment variable MONIT\_DOCKER\_CONFIG

Get status and memory usage for group nodejs:

`monit-docker --ctn-group nodejs stats --rsc status --rsc mem_usage`

## Action failures and command behavior

If a command fails, `monit-docker` exits with code **116** and stops the current invocation; later commands and containers are not processed. Commands inside containers must complete successfully (exit code 0). Detached or streaming exec aliases do not supply a completion status and are not supported as successful monitored actions.

### Propagate a container command's exit code

With `monit --propagate-exit-code`, a failed synchronous command executed inside
a container returns its own exit code instead of 116:

```bash
monit-docker --name my-container monit --propagate-exit-code \
  --cmd '(sh -c "exit 42")'
echo $? # 42
```

The option is available with `monit --cmd` and `monit --cmd-if`, including command
aliases. It cannot be used with `stats` or resource-only checks.

| Outcome | Default | With `--propagate-exit-code` |
| --- | --- | --- |
| All executed commands succeed | 0 | 0 |
| A completed container command exits with code 1–255 | 116 | The command's code |
| An action fails without a valid completed exit code | 116 | 116 |
| Configuration, selection or Docker connection error | Existing error code | Existing error code |

Execution stops at the first failure. With several commands or containers, the
first failing command's code is returned; later actions are not attempted.
The existing execution order is preserved: rules using only PID/status run
before rules requiring measurements, for each container in Docker's listing
order. Use an exact `--name` or `--id` selector when checking one service.

If selected containers exist but no condition matches, the result is 0 because
no action failed. No matching container still returns 114. Detached/streaming
commands and invalid or unavailable exit codes remain errors (116); their
statuses are not propagated or wrapped. Docker lifecycle actions such as
`restart` retain their existing failure behavior.

For a Monit program check, the default nonzero code already supports a generic
`if status != 0` alert. Enable propagation when different command statuses need
different handling, for example a script using 2 for a critical result:

```monit
check program docker.my_container.health with path "/usr/bin/monit-docker --name my-container monit --propagate-exit-code --cmd '(/usr/local/bin/check-health)'"
    if status = 2 then alert
```

Propagated codes may overlap with monit-docker's own error codes. Consult the
logs to distinguish a command status from an agent error when the numbers match.
The flag is opt-in, so existing integrations keep returning 116 for failed actions.

An unknown `--ctn-group` is a configuration error (110), including when no groups are configured. Commands already evaluated before resource collection are not evaluated again after collection.

`reload` refreshes the Docker SDK object's metadata only; it does not reload application workers or configuration. For PHP-FPM, use `(kill -USR2 1)` only when its master is PID 1 inside the container, as explained in [PHP-FPM graceful reload](#php-fpm-graceful-reload). Otherwise, send `SIGUSR2` to the actual PHP-FPM master PID.

Commands inside parentheses use Docker exec, without an implicit shell. For redirections, pipes or shell expansion, explicitly use a shell, for example `(sh -c "echo foo > /tmp/bar")`.

## Development

The codebase is being separated into a transport-neutral monitoring core and
thin delivery interfaces. See [Architecture](docs/architecture.md) for the
dependency rules, compatibility guarantees, and Community/control-plane
boundary.

Install the dependencies and run the regression tests with Python 3:

```sh
python -m pip install -r requirements.txt
python -m unittest discover -s tests -v
```

Build the checked-out source with `docker build -t monit-docker:local .`. The Dockerfile installs this checkout in a virtual environment instead of fetching the published `monit-docker` package.

## Docker Hub and PyPI releases

Merging a new stable version into `master` builds and tests the Docker image and
Python distributions, creates the `vX.Y.Z` tag, then publishes
`decryptus/monit-docker:X.Y.Z`, `decryptus/monit-docker:vX.Y.Z` and the Python
package on PyPI. Manual stable tag pushes are also supported.
Pull requests validate without publishing; Docker Hub's `latest` is not updated.
See the [Docker Hub setup](docs/dockerhub.md) for `DOCKERHUB_TOKEN` and the
[PyPI setup](docs/pypi.md) for password-free Trusted Publishing.
