FR: TrueNAS Scale Integration

I was trying out Patchmon, which looks awesome, and ran into this limitation (unable to install in TrueNAS Scale). It would be great to see some sort of support for TrueNAS. I could envision three levels of support:

1. Read-only - At least display OS version and other data you collect from Debian hosts, but don't do any updating / patching.
2. Full support with updating, as you would for any Debian host. As others mention, this would have to be TrueNAS specific since they disabled apt usage from the command line.
3. Something like your Proxmox Auto-Enrollment but for containers on TrueNAS.

Even having #1 would be a great benefit, as right now my TrueNAS hosts are invisible on my "single pane of glass" view in Patchmon. Maybe this first level could be done as a container on the TrueNAS host with selected directory mappings from the host to the container.

I was wondering if an agent-only option that would run in docker and then report back to the main server to make the connection? I think that might be an easy way to get around things, at least for docker monitoring using /var/run/docker.sock:var/run/docker.sock. Any shared stores could be mounted to the agent for watching.

Pulse does a great job of monitoring TrueNAS with their agent, so you might want to check them out and see how they do it?

https://github.com/rcourtman/Pulse

<img width="2053" height="772" alt="Image" src="https://github.com/user-attachments/assets/542a8385-bf27-4418-bd82-2303e91282fb" />

I think PatchMon is a fantastic piece of software that gives us that "single pane of glass" concept for viewing all hosts that require patches, be it bug-fix ones or security-related ones. The more products and platforms it can support, the better that visibility can be so I definitely support the idea of adding more platforms to PatchMon so that it can truly be an holistic patch monitoring (and eventually applying) software.

I'm not sure how easy it would be, but when the sort of problems discussed in this issue arise, would it be possible to engage with the platform provider in case they are open to the idea of integrating but haven't yet considered it? It strikes me that when organisations are proud of providing a free tier to their product line that they may be open to collaboration with providers of such great software as PatchMon? I'd really like to think so anyway. I imagine in the cases where a company is not open to collaboration they might consider it if they knew how many people would appreciate it and in that case, I'm sure the community would be happy to send messages of support to the providers of the software with which we'd like PatchMon to be able to integrate.

I setup a TrueNAS VM and tried to install the agent but it fails to copy the agent binary because /usr/local/bin is read-only. Also, apt is blocked:

INFO: Detected apt-get (Debian/Ubuntu)

INFO: Updating package lists...
Package management tools are disabled on TrueNAS appliances.

Attempting to update TrueNAS with apt or methods other than the TrueNAS web
interface can result in a nonfunctional system.

so unless there are other means of getting installed and available packages without undoing parts of the installed setup, TrueNAS may not be doable with PatchMon .

On further investigation, TrueNAS have setup a link to a simple script that displays the above message. The real apt binary exists but does not have execute permission. I copied it to /root and did a chmod +x and it's the real thing. When I've fixed a routing problem on my VM preventing an apt update from working, I should be able to see if apt list commands are ok.

I am not sure monitoring for available TrueNAS patches would make a lot of sense, but having the option to monitor LXC containers running on the TrueNAS host would be a game changer. As well as its Docker environment.

The Docker environment should be easy enough (we could simply run the Patchmon agent in a Docker container itself and bind-mount the Docker socket). Not so sure about the LXC containers, though. It uses Incus to manage them and it absolutely hates changes made outside of the TrueNAS management interface (the abstraction middleware tracks configs and frequently overrides them - think of it more like an appliance than a Linux distro, although it does run Debian under the hood)

Okay. This has come about a few times and it's a valid request.

So in TrueNAS Scale we want the ability to have an auto-enrolment script for ease right and other TrueNAS scale monitoring of patches (like seeing if newer version of TrueNAS Scale is available)

Thanks
iby