1 dsa-nagios-checks (9X) Xnstable; urgency=low
4 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
6 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
7 properly timeout long checks.
8 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
9 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
11 * dsa-check-soas: support supplying an IP address for additional nameservers
15 * Make the unowned files check skip /proc.
16 * Limit the number of unowned files we register in the state file to 40.
18 -- Peter Palfrader <weasel@debian.org> Wed, 22 Feb 2012 13:01:59 +0100
20 dsa-nagios-checks (90) unstable; urgency=low
24 - document watermark default
25 - fix off-by-one in output
27 - ignore regular files in pg backup's root directory if they are still
31 * dsa-check-log-age-loghost
32 - allow minus (-) in hostnames.
35 * Add event_handler to restart services
36 * Add dsa-check-raid-megactl for awkward PeRC controllers
38 [ Martin Zobel-Helas ]
39 * add rudimentary check for unowned files
41 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
43 dsa-nagios-checks (89) unstable; urgency=low
45 * dsa-check-running-kernel: kFreeBSD support.
46 * Add dsa-check-entropy.
48 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
50 dsa-nagios-checks (88) unstable; urgency=low
53 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
54 to '3.0GBPS, Unknown'.
55 - accept 6.0Gbps for SAS disks.
56 - add --ignore-transfer-speed option.
57 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
59 * Add dsa-check-hpacucli-enclosure.
60 * dsa-check-running-kernel:
61 - check if 'strings' is installed and complain nicely if it isn't instead
62 of falling over. [Uli Martens]
63 - Make the check work with Ubuntu's kernel names (Alexander
65 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
66 * Add dsa-check-port-closed.
67 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
69 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
70 that do not say 'Yes' in the present-line.
71 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
72 in addition to /var/lib/misc/thishost/passwd.tdb.
73 * Add dsa-check-resolver.
75 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
77 dsa-nagios-checks (87) unstable; urgency=low
80 * dsa-check-running-kernel:
81 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
82 - Handle cases where a meta package depends on a list of packages
83 (such as image and module package).
86 * dsa-check-apt-status: it's not an error to exit when we don't need to run
87 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
90 * Add checks/dsa-check-backuppg.
91 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
92 * Add dsa-check-log-age-loghost.
93 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
94 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
96 [ Martin Zobel-Helas ]
97 * Add checks/dsa-checks-file.
99 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
101 dsa-nagios-checks (86) unstable; urgency=low
104 * Add dsa-check-raid-megaraid.
105 * make samhain check go WARN, not CRITICAL.
108 * Add dsa-check-uptime
110 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
112 dsa-nagios-checks (85) unstable; urgency=low
115 * dsa-update-apt-status: Fix bashism by making it a bash script
117 * dsa-check-hpasm: Not all things where a temperature can be measured
118 might be installed (e.g. a second CPU). Don't do numeric computations
119 on a "-" instead of numbers then.
120 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
121 then non-redundant power supply will not be a warning state.
122 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
123 then non-redundant fans will not be a warning state.
124 * Add dsa-check-msa-eventlog.
125 * add dsa-check-zone-rrsig-expiration (therefore recommend
126 libnet-dns-sec-perl).
127 * add dsa-check-zone-rrsig-expiration-many.
128 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
129 controller with a battery: "ZMM Optimal" is the way it says "optimal".
130 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
131 /root/.ssh/authorized_keys.
132 * add dsa-check-dnssec-delegation.
133 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
135 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
136 and /var/lib/misc/userkeys, not just the first. (Also doesn't
137 blow up if a file is empty.)
139 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
141 dsa-nagios-checks (84) unstable; urgency=low
144 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
145 better (do not reference undefined values, properly exit with UNKNOWN).
146 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
147 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
148 wrapper) in the authorized_keys files. Such entries accept all
149 backup-manager entries for their host, but they do not require one.
150 As such we can just put all the hosts in the authkeys file regardless of
151 whether we actually have backups configured for them.
154 * New check: dsa-check-hpasm
155 * Release for new check
157 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
159 dsa-nagios-checks (83) stable; urgency=low
161 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
164 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
166 dsa-nagios-checks (82) stable; urgency=low
168 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
170 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
172 dsa-nagios-checks (81) stable; urgency=low
174 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
175 it found degraded raid arrays. Handle this correctly.
177 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
179 dsa-nagios-checks (80) stable; urgency=low
181 * dsa-check-packages: In the short overview say "obs/loc" instead of
182 just "obs" for local or obsolete packages.
183 * dsa-update-apt-status: Introduce -f switch.
185 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
187 dsa-nagios-checks (79) stable; urgency=low
189 * dsa-check-running-kernel: Correctly check *candidate* version
190 of kernel metapackage for unsatisfied depends, not the latest
191 metapackage (which might come from a non-default source).
193 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
195 dsa-nagios-checks (78) stable; urgency=low
197 * dsa-check-raid-aacraid: tmp directory in /tmp,
198 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
201 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
203 dsa-nagios-checks (77) stable; urgency=low
205 * Add checks/dsa-check-raid-aacraid.
207 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
209 dsa-nagios-checks (76) stable; urgency=low
211 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
213 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
215 dsa-nagios-checks (75) stable; urgency=low
217 * dsa-check-packages: Support ignore directories.
218 * debian/control: Fix dup word in description.
220 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
222 dsa-nagios-checks (74) stable; urgency=low
226 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
228 dsa-nagios-checks (73) stable; urgency=low
230 * Er, new test needs to be executable
232 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
234 dsa-nagios-checks (72) stable; urgency=low
236 * Generalize puppet file age check and remove old one
238 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
240 dsa-nagios-checks (71) stable; urgency=low
242 * Update the kernel check to not complain when we can't trace back to a meta
243 package name - this generally indicates a custom kernel that we're running
246 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
248 dsa-nagios-checks (70) XXstable; urgency=low
250 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
251 * Only run weak keys check if there is no prior weak key status.
252 * dsa-check-hpacucli: Slots need not be all numeric.
253 * dsa-check-hpacucli: Spares can be active.
254 * dsa-check-hpacucli: And SAS can be E too.
256 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
258 dsa-nagios-checks (69) unstable; urgency=low
260 * Rename to dsa-nagios-checks.
261 * Replaces/Conflicts dsa-nagios-nrpe-config.
262 * Update description.
263 * No longer install nrpe_dsa.cfg.
264 * Move files into specific directories in source.
266 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
268 dsa-nagios-nrpe-config (68) unstable; urgency=low
270 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
273 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
275 dsa-nagios-nrpe-config (67) unstable; urgency=low
277 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
278 long text for obs(ign).
280 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
282 dsa-nagios-nrpe-config (66) unstable; urgency=low
284 * Add dsa-check-packages
285 * Make apt-status-check use dsa-check-packages.
286 * And install obsolete-packages-ignore into etc/nagios.
288 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
290 dsa-nagios-nrpe-config (65) unstable; urgency=low
294 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
296 dsa-nagios-nrpe-config (64) unstable; urgency=low
298 * dsa-check-mirrorsync: make it work in embedded perl again.
300 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
302 dsa-nagios-nrpe-config (63) unstable; urgency=low
304 * dsa-check-mirrorsync: print help if additional args are given (we don't
307 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
309 dsa-nagios-nrpe-config (62) unstable; urgency=low
311 * Add check_securitymirror by formorer.
313 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
315 dsa-nagios-nrpe-config (61) unstable; urgency=low
317 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
318 entry is in there. If it doesn't exist that's also good.
320 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
322 dsa-nagios-nrpe-config (60) unstable; urgency=low
324 * Add dsa-check-raid-areca.
326 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
328 dsa-nagios-nrpe-config (59) unstable; urgency=low
330 * apt-status-check: Ignore stderr during apt-get update.
332 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
334 dsa-nagios-nrpe-config (58) unstable; urgency=low
336 * Rename dsa-check-da-in-aliases to dsa-check-config.
337 * dsa-check-config: check if ldap.conf is configured correctly.
339 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
341 dsa-nagios-nrpe-config (57) unstable; urgency=low
343 * dsa-check-hpacucli: Do not inspect drives in detail when they are
344 listed as Failed in the overview already.
346 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
348 dsa-nagios-nrpe-config (56) unstable; urgency=low
350 * fix dsa-check-samhain.
351 sudo is not in $PATH.
353 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
355 dsa-nagios-nrpe-config (55) unstable; urgency=low
357 * And another one, weasel should sleep.
359 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
361 dsa-nagios-nrpe-config (54) unstable; urgency=low
363 * dsa-check-dabackup-server fixes.
365 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
367 dsa-nagios-nrpe-config (53) unstable; urgency=low
369 * Add dsa-check-dabackup-server.
371 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
373 dsa-nagios-nrpe-config (52) unstable; urgency=low
375 * The nagios _check_ package should probably not be the one that
376 depends on the stuff we want on most or all hosts, thus removing
377 dependency on samhain, which should probably get pulled in via
380 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
382 dsa-nagios-nrpe-config (51) unstable; urgency=low
384 * Add check for samhain.
386 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
388 dsa-nagios-nrpe-config (50) unstable; urgency=low
390 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
392 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
394 dsa-nagios-nrpe-config (49) unstable; urgency=low
396 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
398 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
400 dsa-nagios-nrpe-config (48) unstable; urgency=low
402 * Don't just print the sudoers lines to stdout, tell the admin to add them
405 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
407 dsa-nagios-nrpe-config (47) unstable; urgency=low
409 * dsa-check-hpacucli: Check transfer speed of disks.
411 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
413 dsa-nagios-nrpe-config (46) unstable; urgency=low
415 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
416 * Move script calls from cron.daily to cron.d @daily and @reboot.
417 * Introduce hourly runs for dsa-update-apt-status that happen if the system
418 changed in the meantime, that is if /var/lib/dpkg/status or
419 /var/cache/apt/pkgcache.bin are newer than the status file.
420 Also run if the status file does not exist, or if the last apt-get update
421 call failed, or if the last run was more than a day ago.
422 * No longer do @daily runs of dsa-update-apt-status
424 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
426 dsa-nagios-nrpe-config (45) unstable; urgency=low
428 * Add apt upgrades check.
430 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
432 dsa-nagios-nrpe-config (44) unstable; urgency=low
434 * Fix ssh-dss detection. It need not be at the start of a line
435 (think >from="1.2.3.4" ssh-dss< ...).
437 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
439 dsa-nagios-nrpe-config (43) unstable; urgency=low
443 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
445 dsa-nagios-nrpe-config (42) unstable; urgency=low
447 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
448 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
449 * Run weak-ssh-keys-check on install.
451 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
453 dsa-nagios-nrpe-config (41) unstable; urgency=low
455 * Add dsa-check-statusfile.
456 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
457 libberkeleydb-perl and dsa-ssh-weak-keys now.
458 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
460 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
462 dsa-nagios-nrpe-config (40) unstable; urgency=low
464 * Teach dsa-check-hpacucli about rebuilding.
466 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
468 dsa-nagios-nrpe-config (39) unstable; urgency=low
470 * Add dsa-check-hpacucli.
473 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
475 dsa-nagios-nrpe-config (38) unstable; urgency=low
477 * Try harder to find version string.
479 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
481 dsa-nagios-nrpe-config (37) unstable; urgency=low
483 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
484 * Depend on binutils for string(1).
486 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
488 dsa-nagios-nrpe-config (36) unstable; urgency=low
490 * Add dsa-check-running-kernel
492 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
494 dsa-nagios-nrpe-config (35) unstable; urgency=low
498 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
500 dsa-nagios-nrpe-config (34) unstable; urgency=low
502 * dsa-check-raid-3ware
504 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
506 dsa-nagios-nrpe-config (33) unstable; urgency=low
508 * Add dsa-check-raid-dac960
510 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
512 dsa-nagios-nrpe-config (32) unstable; urgency=low
514 * Add dsa-check-udldap-freshness.
516 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
518 dsa-nagios-nrpe-config (31) unstable; urgency=low
520 * dsa-check-dabackup: Use last time's log file if backup is currently running.
522 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
524 dsa-nagios-nrpe-config (30) unstable; urgency=low
526 * dsa-check-raid-sw: cleaner output.
528 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
530 dsa-nagios-nrpe-config (29) unstable; urgency=low
532 * dsa-check-dabackup: terser output.
534 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
536 dsa-nagios-nrpe-config (28) unstable; urgency=low
538 * dsa-check-dabackup: ignore .bak files in confdir.
540 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
542 dsa-nagios-nrpe-config (27) unstable; urgency=low
544 * Change OK text when da-backup not installed.
546 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
548 dsa-nagios-nrpe-config (26) unstable; urgency=low
550 * dsa-check-dabackup: Warn if installed but no backups configured.
552 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
554 dsa-nagios-nrpe-config (25) unstable; urgency=low
556 * Install dsa-check-dabackup
558 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
560 dsa-nagios-nrpe-config (24) unstable; urgency=low
562 * Check for dsa-check-backup sudoers entry
564 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
566 dsa-nagios-nrpe-config (23) unstable; urgency=low
568 * Add dsa-check-dabackup
570 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
572 dsa-nagios-nrpe-config (22) unstable; urgency=low
574 * Add a very easy dsa-check-da-in-aliases.
576 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
578 dsa-nagios-nrpe-config (21) unstable; urgency=low
580 * Add dsa-check-raid-sw.
582 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
584 dsa-nagios-nrpe-config (20) unstable; urgency=low
586 * Do away with a new changelog entry and version for every build of the
587 package - it floods us with useless commit mails - and just
588 increase the version to $TIMESTAMP in the build area.
590 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
592 dsa-nagios-nrpe-config (1) unstable; urgency=low
596 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200