Feature Request: Native PatchMon Agent for Unraid OS with Docker Container Monitoring

Feature Request: Native PatchMon Agent for Unraid OS with Docker Container Monitoring

Problem Statement:

Unraid is a popular network-attached storage (NAS) operating system that extensively utilizes Docker containers for application deployment. While PatchMon offers excellent patch monitoring for various Linux distributions, there is currently no officially supported or optimized method to install a PatchMon agent directly on the Unraid OS (which is Slackware-based) or to effectively monitor the patch status of Docker containers running within Unraid.

Unraid users manage a significant number of applications via Docker. Keeping these Docker images and their underlying components updated is crucial for security and stability. Manually tracking updates for numerous Docker containers across an Unraid system is time-consuming and prone to error. Integrating PatchMon would provide a centralized solution for Unraid users to gain real-time visibility into the patch status of their Unraid host and its Dockerized applications.

Proposed Solution/Feature:

We request the development of a native PatchMon agent specifically designed for Unraid OS, with robust capabilities for monitoring Docker containers running on Unraid. This feature should include:

1. Unraid-Optimized Agent: A PatchMon agent that can be easily installed and managed directly on the Unraid OS. This could potentially be delivered as an Unraid plugin or a pre-configured Docker container that has the necessary privileges to inspect the host system. This agent should account for Unraid's Slackware base and its unique architecture (e.g., booting from USB, in-memory operation).

2. Comprehensive Docker Container Monitoring: The agent should be capable of:

   • Detecting Docker containers: Automatically discover all active Docker containers managed by Unraid.
   • Monitoring Docker image updates: Track the availability of new versions for the base images of installed Docker containers.
   • Reporting internal package status (if feasible): Ideally, provide insights into the patch status of packages within the Docker containers, if the container's base image allows for such inspection (e.g., apt, apk, yum within the container). This would go beyond just image versioning to actual vulnerability patching.
   • Integration with Unraid's Docker management: Leverage Unraid's existing Docker APIs or tools to gather information efficiently and with minimal overhead.
3. Unraid WebGUI Integration (Optional but highly beneficial): Display gathered patch information directly within the Unraid WebGUI, possibly through a dedicated tab or widget, offering a seamless user experience.

Benefits:

• Expanded User Base: Attract a large community of Unraid users seeking centralized patch management.
• Enhanced Security: Provide Unraid users with critical insights into outdated Docker images and host OS components, enabling proactive patching and reducing security risks.
• Reduced Manual Effort: Automate the process of identifying available updates for both the Unraid host and its Docker applications.
• Centralized Visibility: Offer a single pane of glass within PatchMon to view the patch compliance of the entire Unraid infrastructure.
• Community Applications (CA) Support: Facilitating installation via Unraid's popular Community Applications plugin would significantly increase adoption.

Technical Considerations:

• Unraid OS specifics: The agent would need to be compatible with Unraid's modified Slackware environment.
• Docker Daemon Access: The agent will require appropriate permissions to interact with the Docker daemon on the Unraid host to inspect container images and running processes.
• Resource Usage: Ensure the agent is lightweight and does not significantly impact Unraid's performance or memory footprint.
• Update Mechanism: Define a clear update mechanism for the Unraid agent itself.