scrutiny v0.1.0

Observability

Scrutiny — a modern web dashboard for hard-drive S.M.A.R.T. health monitoring, with historical trends and failure prediction. Omnibus image bundles the collector, web UI and InfluxDB.

nomad-pack run scrutiny --registry nomploy

…or one line (add registry + run)

curl -fsSL https://packs.nomploy.com/install.sh | sh -s -- scrutiny

Needs nomad-pack on PATH. The script only adds the nomploy registry and runs this pack.

Source ↗ Project ↗ ★ 8.2k ⚑ Report an issue

1 task http 8080 2 volumes image ghcr.io/analogj/scrutiny:master-omnibus pinned :master-omnibus image bumped today

Variables 11

values.hcl

Save as values.hcl, edit, then run:

nomad-pack run scrutiny -f values.hcl --registry nomploy

# The name of the Nomad job.
job_name = "scrutiny"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The Scrutiny container image. Pin a tag in production.
image = "ghcr.io/analogj/scrutiny:master-omnibus"

# Host port for the Scrutiny web UI.
port = 8080

# Named volume mounted at /opt/scrutiny/config.
data_volume = "scrutiny_data"

# Named volume mounted at /opt/scrutiny/influxdb — the time-series history store (omnibus InfluxDB).
influx_volume = "scrutiny_influxdb"

# Host disk device paths to monitor for S.M.A.R.T. health, e.g. ["/dev/sda", "/dev/nvme0"]. List your real devices (see: lsblk -d). Each is passed through to the collector.
disks = ["/dev/sda"]

# Linux capabilities the collector needs to issue S.M.A.R.T. commands. SYS_RAWIO covers SATA/SAS; SYS_ADMIN is required for many NVMe drives.
cap_add = ["SYS_RAWIO", "SYS_ADMIN"]

# Placement constraints. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# The task resources.
resources = {
    cpu    = 300
    memory = 256
  }

Name	Type	Default	Description
job_name	string	"scrutiny"	The name of the Nomad job.
namespace	string	"default"	The Nomad namespace to deploy into.
datacenters	list	["*"]	The datacenters to deploy to.
image	string	"ghcr.io/analogj/scrutiny:master-omnibus"	The Scrutiny container image. Pin a tag in production.
port	number	8080	Host port for the Scrutiny web UI.
data_volume	string	"scrutiny_data"	Named volume mounted at /opt/scrutiny/config.
influx_volume	string	"scrutiny_influxdb"	Named volume mounted at /opt/scrutiny/influxdb — the time-series history store (omnibus InfluxDB).
disks	list	["/dev/sda"]	Host disk device paths to monitor for S.M.A.R.T. health, e.g. ["/dev/sda", "/dev/nvme0"]. List your real devices (see: lsblk -d). Each is passed through to the collector.
cap_add	list	["SYS_RAWIO", "SYS_ADMIN"]	Linux capabilities the collector needs to issue S.M.A.R.T. commands. SYS_RAWIO covers SATA/SAS; SYS_ADMIN is required for many NVMe drives.
constraints	list	[]	Placement constraints. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
resources	object	{ cpu = 300 memory = 256 }	The task resources.

Back up this pack

This pack stores data in 2 Docker named volumes: scrutiny_datascrutiny_influxdb

restic

# Run on the node hosting this pack. Point restic at your repo first:
#   export RESTIC_REPOSITORY="s3:https://<account>.r2.cloudflarestorage.com/<bucket>"
#   export RESTIC_PASSWORD="<repo-password>"
#   export AWS_ACCESS_KEY_ID=<key>  AWS_SECRET_ACCESS_KEY=<secret>
restic backup \
  /var/lib/docker/volumes/scrutiny_data/_data \
  /var/lib/docker/volumes/scrutiny_influxdb/_data

rclone (sync to S3/R2)

rclone sync /var/lib/docker/volumes/scrutiny_data/_data backup:<bucket>/scrutiny_data
rclone sync /var/lib/docker/volumes/scrutiny_influxdb/_data backup:<bucket>/scrutiny_influxdb

Paths assume the default Docker volume location (/var/lib/docker/volumes). Restore by stopping the job, restoring files into the same volume, and re-running the pack.

Readme

scrutiny

Scrutiny — a modern web dashboard for hard-drive S.M.A.R.T. health monitoring. It goes beyond raw smartctl output: historical trends per attribute, sane thresholds informed by real-world failure data (Backblaze), and clear pass/warn/fail status per disk. This pack uses the omnibus image, which bundles the web UI, the metrics collector, and InfluxDB in one container.

Single host-networked Nomad service with persistent config and time-series volumes.

Deploy

nomad-pack registry add nomploy https://github.com/Nomploy/nomad-packs
nomad-pack run scrutiny --registry=nomploy

Configure

Variable	Default	Description
`port`	`8080`	Web UI port (`SCRUTINY_WEB_LISTEN_PORT`).
`disks`	`["/dev/sda"]`	Set this. Host disk device paths to monitor — run `lsblk -d` and list your real devices.
`cap_add`	`["SYS_RAWIO", "SYS_ADMIN"]`	Capabilities the collector needs for S.M.A.R.T. commands.
`image`	`ghcr.io/analogj/scrutiny:master-omnibus`	Container image. Pin a tag in production.
`data_volume`	`scrutiny_data`	`/opt/scrutiny/config`.
`influx_volume`	`scrutiny_influxdb`	`/opt/scrutiny/influxdb` — the history store.
`resources`	`{ cpu = 300, memory = 256 }`	Task resources.

Disk access: the collector needs the raw block devices passed through (disks) plus SYS_RAWIO (SATA/SAS) and SYS_ADMIN (many NVMe drives). It reads /run/udev (bind, read-only) to resolve model/serial. Because it reads physical disks, pin the job with constraints to the specific node whose drives you want to monitor — one Scrutiny instance per node. The collector runs on a schedule; the dashboard fills in after the first collection.