1 dsa-nagios-checks (9X) Xnstable; urgency=low
4 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
6 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
7 properly timeout long checks.
8 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
9 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
13 * Make the unowned files check skip /proc.
14 * Limit the number of unowned files we register in the state file to 40.
16 -- Peter Palfrader <weasel@debian.org> Wed, 08 Feb 2012 15:36:05 +0100
18 dsa-nagios-checks (90) unstable; urgency=low
22 - document watermark default
23 - fix off-by-one in output
25 - ignore regular files in pg backup's root directory if they are still
29 * dsa-check-log-age-loghost
30 - allow minus (-) in hostnames.
33 * Add event_handler to restart services
34 * Add dsa-check-raid-megactl for awkward PeRC controllers
36 [ Martin Zobel-Helas ]
37 * add rudimentary check for unowned files
39 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
41 dsa-nagios-checks (89) unstable; urgency=low
43 * dsa-check-running-kernel: kFreeBSD support.
44 * Add dsa-check-entropy.
46 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
48 dsa-nagios-checks (88) unstable; urgency=low
51 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
52 to '3.0GBPS, Unknown'.
53 - accept 6.0Gbps for SAS disks.
54 - add --ignore-transfer-speed option.
55 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
57 * Add dsa-check-hpacucli-enclosure.
58 * dsa-check-running-kernel:
59 - check if 'strings' is installed and complain nicely if it isn't instead
60 of falling over. [Uli Martens]
61 - Make the check work with Ubuntu's kernel names (Alexander
63 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
64 * Add dsa-check-port-closed.
65 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
67 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
68 that do not say 'Yes' in the present-line.
69 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
70 in addition to /var/lib/misc/thishost/passwd.tdb.
71 * Add dsa-check-resolver.
73 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
75 dsa-nagios-checks (87) unstable; urgency=low
78 * dsa-check-running-kernel:
79 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
80 - Handle cases where a meta package depends on a list of packages
81 (such as image and module package).
84 * dsa-check-apt-status: it's not an error to exit when we don't need to run
85 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
88 * Add checks/dsa-check-backuppg.
89 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
90 * Add dsa-check-log-age-loghost.
91 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
92 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
94 [ Martin Zobel-Helas ]
95 * Add checks/dsa-checks-file.
97 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
99 dsa-nagios-checks (86) unstable; urgency=low
102 * Add dsa-check-raid-megaraid.
103 * make samhain check go WARN, not CRITICAL.
106 * Add dsa-check-uptime
108 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
110 dsa-nagios-checks (85) unstable; urgency=low
113 * dsa-update-apt-status: Fix bashism by making it a bash script
115 * dsa-check-hpasm: Not all things where a temperature can be measured
116 might be installed (e.g. a second CPU). Don't do numeric computations
117 on a "-" instead of numbers then.
118 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
119 then non-redundant power supply will not be a warning state.
120 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
121 then non-redundant fans will not be a warning state.
122 * Add dsa-check-msa-eventlog.
123 * add dsa-check-zone-rrsig-expiration (therefore recommend
124 libnet-dns-sec-perl).
125 * add dsa-check-zone-rrsig-expiration-many.
126 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
127 controller with a battery: "ZMM Optimal" is the way it says "optimal".
128 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
129 /root/.ssh/authorized_keys.
130 * add dsa-check-dnssec-delegation.
131 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
133 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
134 and /var/lib/misc/userkeys, not just the first. (Also doesn't
135 blow up if a file is empty.)
137 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
139 dsa-nagios-checks (84) unstable; urgency=low
142 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
143 better (do not reference undefined values, properly exit with UNKNOWN).
144 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
145 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
146 wrapper) in the authorized_keys files. Such entries accept all
147 backup-manager entries for their host, but they do not require one.
148 As such we can just put all the hosts in the authkeys file regardless of
149 whether we actually have backups configured for them.
152 * New check: dsa-check-hpasm
153 * Release for new check
155 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
157 dsa-nagios-checks (83) stable; urgency=low
159 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
162 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
164 dsa-nagios-checks (82) stable; urgency=low
166 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
168 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
170 dsa-nagios-checks (81) stable; urgency=low
172 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
173 it found degraded raid arrays. Handle this correctly.
175 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
177 dsa-nagios-checks (80) stable; urgency=low
179 * dsa-check-packages: In the short overview say "obs/loc" instead of
180 just "obs" for local or obsolete packages.
181 * dsa-update-apt-status: Introduce -f switch.
183 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
185 dsa-nagios-checks (79) stable; urgency=low
187 * dsa-check-running-kernel: Correctly check *candidate* version
188 of kernel metapackage for unsatisfied depends, not the latest
189 metapackage (which might come from a non-default source).
191 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
193 dsa-nagios-checks (78) stable; urgency=low
195 * dsa-check-raid-aacraid: tmp directory in /tmp,
196 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
199 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
201 dsa-nagios-checks (77) stable; urgency=low
203 * Add checks/dsa-check-raid-aacraid.
205 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
207 dsa-nagios-checks (76) stable; urgency=low
209 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
211 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
213 dsa-nagios-checks (75) stable; urgency=low
215 * dsa-check-packages: Support ignore directories.
216 * debian/control: Fix dup word in description.
218 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
220 dsa-nagios-checks (74) stable; urgency=low
224 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
226 dsa-nagios-checks (73) stable; urgency=low
228 * Er, new test needs to be executable
230 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
232 dsa-nagios-checks (72) stable; urgency=low
234 * Generalize puppet file age check and remove old one
236 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
238 dsa-nagios-checks (71) stable; urgency=low
240 * Update the kernel check to not complain when we can't trace back to a meta
241 package name - this generally indicates a custom kernel that we're running
244 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
246 dsa-nagios-checks (70) XXstable; urgency=low
248 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
249 * Only run weak keys check if there is no prior weak key status.
250 * dsa-check-hpacucli: Slots need not be all numeric.
251 * dsa-check-hpacucli: Spares can be active.
252 * dsa-check-hpacucli: And SAS can be E too.
254 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
256 dsa-nagios-checks (69) unstable; urgency=low
258 * Rename to dsa-nagios-checks.
259 * Replaces/Conflicts dsa-nagios-nrpe-config.
260 * Update description.
261 * No longer install nrpe_dsa.cfg.
262 * Move files into specific directories in source.
264 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
266 dsa-nagios-nrpe-config (68) unstable; urgency=low
268 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
271 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
273 dsa-nagios-nrpe-config (67) unstable; urgency=low
275 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
276 long text for obs(ign).
278 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
280 dsa-nagios-nrpe-config (66) unstable; urgency=low
282 * Add dsa-check-packages
283 * Make apt-status-check use dsa-check-packages.
284 * And install obsolete-packages-ignore into etc/nagios.
286 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
288 dsa-nagios-nrpe-config (65) unstable; urgency=low
292 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
294 dsa-nagios-nrpe-config (64) unstable; urgency=low
296 * dsa-check-mirrorsync: make it work in embedded perl again.
298 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
300 dsa-nagios-nrpe-config (63) unstable; urgency=low
302 * dsa-check-mirrorsync: print help if additional args are given (we don't
305 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
307 dsa-nagios-nrpe-config (62) unstable; urgency=low
309 * Add check_securitymirror by formorer.
311 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
313 dsa-nagios-nrpe-config (61) unstable; urgency=low
315 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
316 entry is in there. If it doesn't exist that's also good.
318 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
320 dsa-nagios-nrpe-config (60) unstable; urgency=low
322 * Add dsa-check-raid-areca.
324 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
326 dsa-nagios-nrpe-config (59) unstable; urgency=low
328 * apt-status-check: Ignore stderr during apt-get update.
330 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
332 dsa-nagios-nrpe-config (58) unstable; urgency=low
334 * Rename dsa-check-da-in-aliases to dsa-check-config.
335 * dsa-check-config: check if ldap.conf is configured correctly.
337 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
339 dsa-nagios-nrpe-config (57) unstable; urgency=low
341 * dsa-check-hpacucli: Do not inspect drives in detail when they are
342 listed as Failed in the overview already.
344 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
346 dsa-nagios-nrpe-config (56) unstable; urgency=low
348 * fix dsa-check-samhain.
349 sudo is not in $PATH.
351 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
353 dsa-nagios-nrpe-config (55) unstable; urgency=low
355 * And another one, weasel should sleep.
357 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
359 dsa-nagios-nrpe-config (54) unstable; urgency=low
361 * dsa-check-dabackup-server fixes.
363 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
365 dsa-nagios-nrpe-config (53) unstable; urgency=low
367 * Add dsa-check-dabackup-server.
369 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
371 dsa-nagios-nrpe-config (52) unstable; urgency=low
373 * The nagios _check_ package should probably not be the one that
374 depends on the stuff we want on most or all hosts, thus removing
375 dependency on samhain, which should probably get pulled in via
378 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
380 dsa-nagios-nrpe-config (51) unstable; urgency=low
382 * Add check for samhain.
384 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
386 dsa-nagios-nrpe-config (50) unstable; urgency=low
388 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
390 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
392 dsa-nagios-nrpe-config (49) unstable; urgency=low
394 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
396 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
398 dsa-nagios-nrpe-config (48) unstable; urgency=low
400 * Don't just print the sudoers lines to stdout, tell the admin to add them
403 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
405 dsa-nagios-nrpe-config (47) unstable; urgency=low
407 * dsa-check-hpacucli: Check transfer speed of disks.
409 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
411 dsa-nagios-nrpe-config (46) unstable; urgency=low
413 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
414 * Move script calls from cron.daily to cron.d @daily and @reboot.
415 * Introduce hourly runs for dsa-update-apt-status that happen if the system
416 changed in the meantime, that is if /var/lib/dpkg/status or
417 /var/cache/apt/pkgcache.bin are newer than the status file.
418 Also run if the status file does not exist, or if the last apt-get update
419 call failed, or if the last run was more than a day ago.
420 * No longer do @daily runs of dsa-update-apt-status
422 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
424 dsa-nagios-nrpe-config (45) unstable; urgency=low
426 * Add apt upgrades check.
428 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
430 dsa-nagios-nrpe-config (44) unstable; urgency=low
432 * Fix ssh-dss detection. It need not be at the start of a line
433 (think >from="1.2.3.4" ssh-dss< ...).
435 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
437 dsa-nagios-nrpe-config (43) unstable; urgency=low
441 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
443 dsa-nagios-nrpe-config (42) unstable; urgency=low
445 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
446 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
447 * Run weak-ssh-keys-check on install.
449 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
451 dsa-nagios-nrpe-config (41) unstable; urgency=low
453 * Add dsa-check-statusfile.
454 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
455 libberkeleydb-perl and dsa-ssh-weak-keys now.
456 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
458 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
460 dsa-nagios-nrpe-config (40) unstable; urgency=low
462 * Teach dsa-check-hpacucli about rebuilding.
464 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
466 dsa-nagios-nrpe-config (39) unstable; urgency=low
468 * Add dsa-check-hpacucli.
471 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
473 dsa-nagios-nrpe-config (38) unstable; urgency=low
475 * Try harder to find version string.
477 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
479 dsa-nagios-nrpe-config (37) unstable; urgency=low
481 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
482 * Depend on binutils for string(1).
484 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
486 dsa-nagios-nrpe-config (36) unstable; urgency=low
488 * Add dsa-check-running-kernel
490 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
492 dsa-nagios-nrpe-config (35) unstable; urgency=low
496 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
498 dsa-nagios-nrpe-config (34) unstable; urgency=low
500 * dsa-check-raid-3ware
502 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
504 dsa-nagios-nrpe-config (33) unstable; urgency=low
506 * Add dsa-check-raid-dac960
508 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
510 dsa-nagios-nrpe-config (32) unstable; urgency=low
512 * Add dsa-check-udldap-freshness.
514 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
516 dsa-nagios-nrpe-config (31) unstable; urgency=low
518 * dsa-check-dabackup: Use last time's log file if backup is currently running.
520 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
522 dsa-nagios-nrpe-config (30) unstable; urgency=low
524 * dsa-check-raid-sw: cleaner output.
526 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
528 dsa-nagios-nrpe-config (29) unstable; urgency=low
530 * dsa-check-dabackup: terser output.
532 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
534 dsa-nagios-nrpe-config (28) unstable; urgency=low
536 * dsa-check-dabackup: ignore .bak files in confdir.
538 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
540 dsa-nagios-nrpe-config (27) unstable; urgency=low
542 * Change OK text when da-backup not installed.
544 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
546 dsa-nagios-nrpe-config (26) unstable; urgency=low
548 * dsa-check-dabackup: Warn if installed but no backups configured.
550 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
552 dsa-nagios-nrpe-config (25) unstable; urgency=low
554 * Install dsa-check-dabackup
556 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
558 dsa-nagios-nrpe-config (24) unstable; urgency=low
560 * Check for dsa-check-backup sudoers entry
562 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
564 dsa-nagios-nrpe-config (23) unstable; urgency=low
566 * Add dsa-check-dabackup
568 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
570 dsa-nagios-nrpe-config (22) unstable; urgency=low
572 * Add a very easy dsa-check-da-in-aliases.
574 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
576 dsa-nagios-nrpe-config (21) unstable; urgency=low
578 * Add dsa-check-raid-sw.
580 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
582 dsa-nagios-nrpe-config (20) unstable; urgency=low
584 * Do away with a new changelog entry and version for every build of the
585 package - it floods us with useless commit mails - and just
586 increase the version to $TIMESTAMP in the build area.
588 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
590 dsa-nagios-nrpe-config (1) unstable; urgency=low
594 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200