Checks¶

pydebuprep runs 37 checks, in eight categories, in the order below. Each check's page explains what it looks at, what it can report and what to do about it, which commands it runs, how it uses a snapshot, its options, and its limits.

Root means the check needs root to read what it inspects; without it the check is reported as skipped. Snapshot means it records state when you take a snapshot and reports what changed since.

Release¶

Check	What it looks at	Root	Snapshot
`apt-lists-age`	Age of downloaded package lists	no	no
`apt-sources`	APT sources	no	yes
`os-release`	Operating system release	no	yes

Packages¶

Check	What it looks at	Root	Snapshot
`apt-autoremove`	Packages no longer needed	no	no
`apt-held`	Held packages	no	yes
`apt-upgradable`	Pending package upgrades	no	no
`config-conflicts`	Unmerged configuration files	no	no
`debsums`	Package file checksums	yes	no
`dpkg-audit`	Broken or half-configured packages	no	no
`dpkg-rc`	Leftover configuration of removed packages	no	no
`obsolete-packages`	Packages not available from any repository	no	yes

Boot¶

Check	What it looks at	Root	Snapshot
`boot-space`	Free space on /boot and the EFI partition	no	no
`bootloader`	Bootloader configuration	no	no
`dkms`	Out-of-tree kernel modules (DKMS)	no	yes
`kernel-running`	Running kernel	no	yes

Services¶

Check	What it looks at	Root	Snapshot
`boot-time`	Boot time	no	no
`cron`	cron jobs	no	yes
`dmesg-errors`	Kernel errors and warnings	yes	no
`journal-errors`	Errors in the journal (current boot)	no	no
`needrestart`	Services using outdated libraries	yes	no
`systemd-critical-services`	Critical systemd units	no	yes
`systemd-failed`	Failed systemd units	no	yes
`systemd-timers`	systemd timers	no	yes
`time-sync`	Time synchronisation	no	yes

Applications¶

Check	What it looks at	Root	Snapshot
`bind`	BIND configuration	yes	no
`docker`	Docker containers	yes	yes
`mariadb`	MariaDB data directory	yes	no
`postfix`	postfix configuration	no	no
`postgresql`	PostgreSQL clusters	no	yes
`python-venvs`	Python virtualenvs	no	no

Network¶

Check	What it looks at	Root	Snapshot
`firewall`	Firewall rules	yes	yes
`network`	Network interfaces, routes and DNS	no	yes

Security¶

Check	What it looks at	Root	Snapshot
`apparmor`	AppArmor	yes	yes
`ssh-server`	SSH server configuration	yes	no
`unattended-upgrades`	Automatic security updates	no	yes

Storage¶

Check	What it looks at	Root	Snapshot
`disk-space`	Free disk space and inodes	no	no
`fstab`	/etc/fstab and mounts	no	yes

Choosing checks¶

For one run: --checks ID,... or --skip ID,....
Permanently: enabled: false under the check in the configuration file.
pydebuprep list-checks --verbose lists every check with its options.