1 dsa-nagios-checks (9X) Xnstable; urgency=low
4 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
7 -- Peter Palfrader <weasel@debian.org> Wed, 18 Jan 2012 13:23:16 +0100
9 dsa-nagios-checks (90) unstable; urgency=low
13 - document watermark default
14 - fix off-by-one in output
16 - ignore regular files in pg backup's root directory if they are still
20 * dsa-check-log-age-loghost
21 - allow minus (-) in hostnames.
24 * Add event_handler to restart services
25 * Add dsa-check-raid-megactl for awkward PeRC controllers
27 [ Martin Zobel-Helas ]
28 * add rudimentary check for unowned files
30 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
32 dsa-nagios-checks (89) unstable; urgency=low
34 * dsa-check-running-kernel: kFreeBSD support.
35 * Add dsa-check-entropy.
37 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
39 dsa-nagios-checks (88) unstable; urgency=low
42 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
43 to '3.0GBPS, Unknown'.
44 - accept 6.0Gbps for SAS disks.
45 - add --ignore-transfer-speed option.
46 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
48 * Add dsa-check-hpacucli-enclosure.
49 * dsa-check-running-kernel:
50 - check if 'strings' is installed and complain nicely if it isn't instead
51 of falling over. [Uli Martens]
52 - Make the check work with Ubuntu's kernel names (Alexander
54 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
55 * Add dsa-check-port-closed.
56 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
58 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
59 that do not say 'Yes' in the present-line.
60 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
61 in addition to /var/lib/misc/thishost/passwd.tdb.
62 * Add dsa-check-resolver.
64 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
66 dsa-nagios-checks (87) unstable; urgency=low
69 * dsa-check-running-kernel:
70 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
71 - Handle cases where a meta package depends on a list of packages
72 (such as image and module package).
75 * dsa-check-apt-status: it's not an error to exit when we don't need to run
76 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
79 * Add checks/dsa-check-backuppg.
80 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
81 * Add dsa-check-log-age-loghost.
82 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
83 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
85 [ Martin Zobel-Helas ]
86 * Add checks/dsa-checks-file.
88 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
90 dsa-nagios-checks (86) unstable; urgency=low
93 * Add dsa-check-raid-megaraid.
94 * make samhain check go WARN, not CRITICAL.
97 * Add dsa-check-uptime
99 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
101 dsa-nagios-checks (85) unstable; urgency=low
104 * dsa-update-apt-status: Fix bashism by making it a bash script
106 * dsa-check-hpasm: Not all things where a temperature can be measured
107 might be installed (e.g. a second CPU). Don't do numeric computations
108 on a "-" instead of numbers then.
109 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
110 then non-redundant power supply will not be a warning state.
111 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
112 then non-redundant fans will not be a warning state.
113 * Add dsa-check-msa-eventlog.
114 * add dsa-check-zone-rrsig-expiration (therefore recommend
115 libnet-dns-sec-perl).
116 * add dsa-check-zone-rrsig-expiration-many.
117 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
118 controller with a battery: "ZMM Optimal" is the way it says "optimal".
119 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
120 /root/.ssh/authorized_keys.
121 * add dsa-check-dnssec-delegation.
122 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
124 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
125 and /var/lib/misc/userkeys, not just the first. (Also doesn't
126 blow up if a file is empty.)
128 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
130 dsa-nagios-checks (84) unstable; urgency=low
133 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
134 better (do not reference undefined values, properly exit with UNKNOWN).
135 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
136 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
137 wrapper) in the authorized_keys files. Such entries accept all
138 backup-manager entries for their host, but they do not require one.
139 As such we can just put all the hosts in the authkeys file regardless of
140 whether we actually have backups configured for them.
143 * New check: dsa-check-hpasm
144 * Release for new check
146 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
148 dsa-nagios-checks (83) stable; urgency=low
150 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
153 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
155 dsa-nagios-checks (82) stable; urgency=low
157 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
159 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
161 dsa-nagios-checks (81) stable; urgency=low
163 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
164 it found degraded raid arrays. Handle this correctly.
166 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
168 dsa-nagios-checks (80) stable; urgency=low
170 * dsa-check-packages: In the short overview say "obs/loc" instead of
171 just "obs" for local or obsolete packages.
172 * dsa-update-apt-status: Introduce -f switch.
174 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
176 dsa-nagios-checks (79) stable; urgency=low
178 * dsa-check-running-kernel: Correctly check *candidate* version
179 of kernel metapackage for unsatisfied depends, not the latest
180 metapackage (which might come from a non-default source).
182 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
184 dsa-nagios-checks (78) stable; urgency=low
186 * dsa-check-raid-aacraid: tmp directory in /tmp,
187 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
190 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
192 dsa-nagios-checks (77) stable; urgency=low
194 * Add checks/dsa-check-raid-aacraid.
196 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
198 dsa-nagios-checks (76) stable; urgency=low
200 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
202 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
204 dsa-nagios-checks (75) stable; urgency=low
206 * dsa-check-packages: Support ignore directories.
207 * debian/control: Fix dup word in description.
209 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
211 dsa-nagios-checks (74) stable; urgency=low
215 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
217 dsa-nagios-checks (73) stable; urgency=low
219 * Er, new test needs to be executable
221 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
223 dsa-nagios-checks (72) stable; urgency=low
225 * Generalize puppet file age check and remove old one
227 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
229 dsa-nagios-checks (71) stable; urgency=low
231 * Update the kernel check to not complain when we can't trace back to a meta
232 package name - this generally indicates a custom kernel that we're running
235 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
237 dsa-nagios-checks (70) XXstable; urgency=low
239 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
240 * Only run weak keys check if there is no prior weak key status.
241 * dsa-check-hpacucli: Slots need not be all numeric.
242 * dsa-check-hpacucli: Spares can be active.
243 * dsa-check-hpacucli: And SAS can be E too.
245 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
247 dsa-nagios-checks (69) unstable; urgency=low
249 * Rename to dsa-nagios-checks.
250 * Replaces/Conflicts dsa-nagios-nrpe-config.
251 * Update description.
252 * No longer install nrpe_dsa.cfg.
253 * Move files into specific directories in source.
255 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
257 dsa-nagios-nrpe-config (68) unstable; urgency=low
259 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
262 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
264 dsa-nagios-nrpe-config (67) unstable; urgency=low
266 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
267 long text for obs(ign).
269 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
271 dsa-nagios-nrpe-config (66) unstable; urgency=low
273 * Add dsa-check-packages
274 * Make apt-status-check use dsa-check-packages.
275 * And install obsolete-packages-ignore into etc/nagios.
277 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
279 dsa-nagios-nrpe-config (65) unstable; urgency=low
283 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
285 dsa-nagios-nrpe-config (64) unstable; urgency=low
287 * dsa-check-mirrorsync: make it work in embedded perl again.
289 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
291 dsa-nagios-nrpe-config (63) unstable; urgency=low
293 * dsa-check-mirrorsync: print help if additional args are given (we don't
296 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
298 dsa-nagios-nrpe-config (62) unstable; urgency=low
300 * Add check_securitymirror by formorer.
302 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
304 dsa-nagios-nrpe-config (61) unstable; urgency=low
306 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
307 entry is in there. If it doesn't exist that's also good.
309 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
311 dsa-nagios-nrpe-config (60) unstable; urgency=low
313 * Add dsa-check-raid-areca.
315 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
317 dsa-nagios-nrpe-config (59) unstable; urgency=low
319 * apt-status-check: Ignore stderr during apt-get update.
321 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
323 dsa-nagios-nrpe-config (58) unstable; urgency=low
325 * Rename dsa-check-da-in-aliases to dsa-check-config.
326 * dsa-check-config: check if ldap.conf is configured correctly.
328 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
330 dsa-nagios-nrpe-config (57) unstable; urgency=low
332 * dsa-check-hpacucli: Do not inspect drives in detail when they are
333 listed as Failed in the overview already.
335 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
337 dsa-nagios-nrpe-config (56) unstable; urgency=low
339 * fix dsa-check-samhain.
340 sudo is not in $PATH.
342 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
344 dsa-nagios-nrpe-config (55) unstable; urgency=low
346 * And another one, weasel should sleep.
348 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
350 dsa-nagios-nrpe-config (54) unstable; urgency=low
352 * dsa-check-dabackup-server fixes.
354 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
356 dsa-nagios-nrpe-config (53) unstable; urgency=low
358 * Add dsa-check-dabackup-server.
360 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
362 dsa-nagios-nrpe-config (52) unstable; urgency=low
364 * The nagios _check_ package should probably not be the one that
365 depends on the stuff we want on most or all hosts, thus removing
366 dependency on samhain, which should probably get pulled in via
369 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
371 dsa-nagios-nrpe-config (51) unstable; urgency=low
373 * Add check for samhain.
375 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
377 dsa-nagios-nrpe-config (50) unstable; urgency=low
379 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
381 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
383 dsa-nagios-nrpe-config (49) unstable; urgency=low
385 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
387 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
389 dsa-nagios-nrpe-config (48) unstable; urgency=low
391 * Don't just print the sudoers lines to stdout, tell the admin to add them
394 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
396 dsa-nagios-nrpe-config (47) unstable; urgency=low
398 * dsa-check-hpacucli: Check transfer speed of disks.
400 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
402 dsa-nagios-nrpe-config (46) unstable; urgency=low
404 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
405 * Move script calls from cron.daily to cron.d @daily and @reboot.
406 * Introduce hourly runs for dsa-update-apt-status that happen if the system
407 changed in the meantime, that is if /var/lib/dpkg/status or
408 /var/cache/apt/pkgcache.bin are newer than the status file.
409 Also run if the status file does not exist, or if the last apt-get update
410 call failed, or if the last run was more than a day ago.
411 * No longer do @daily runs of dsa-update-apt-status
413 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
415 dsa-nagios-nrpe-config (45) unstable; urgency=low
417 * Add apt upgrades check.
419 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
421 dsa-nagios-nrpe-config (44) unstable; urgency=low
423 * Fix ssh-dss detection. It need not be at the start of a line
424 (think >from="1.2.3.4" ssh-dss< ...).
426 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
428 dsa-nagios-nrpe-config (43) unstable; urgency=low
432 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
434 dsa-nagios-nrpe-config (42) unstable; urgency=low
436 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
437 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
438 * Run weak-ssh-keys-check on install.
440 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
442 dsa-nagios-nrpe-config (41) unstable; urgency=low
444 * Add dsa-check-statusfile.
445 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
446 libberkeleydb-perl and dsa-ssh-weak-keys now.
447 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
449 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
451 dsa-nagios-nrpe-config (40) unstable; urgency=low
453 * Teach dsa-check-hpacucli about rebuilding.
455 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
457 dsa-nagios-nrpe-config (39) unstable; urgency=low
459 * Add dsa-check-hpacucli.
462 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
464 dsa-nagios-nrpe-config (38) unstable; urgency=low
466 * Try harder to find version string.
468 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
470 dsa-nagios-nrpe-config (37) unstable; urgency=low
472 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
473 * Depend on binutils for string(1).
475 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
477 dsa-nagios-nrpe-config (36) unstable; urgency=low
479 * Add dsa-check-running-kernel
481 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
483 dsa-nagios-nrpe-config (35) unstable; urgency=low
487 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
489 dsa-nagios-nrpe-config (34) unstable; urgency=low
491 * dsa-check-raid-3ware
493 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
495 dsa-nagios-nrpe-config (33) unstable; urgency=low
497 * Add dsa-check-raid-dac960
499 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
501 dsa-nagios-nrpe-config (32) unstable; urgency=low
503 * Add dsa-check-udldap-freshness.
505 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
507 dsa-nagios-nrpe-config (31) unstable; urgency=low
509 * dsa-check-dabackup: Use last time's log file if backup is currently running.
511 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
513 dsa-nagios-nrpe-config (30) unstable; urgency=low
515 * dsa-check-raid-sw: cleaner output.
517 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
519 dsa-nagios-nrpe-config (29) unstable; urgency=low
521 * dsa-check-dabackup: terser output.
523 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
525 dsa-nagios-nrpe-config (28) unstable; urgency=low
527 * dsa-check-dabackup: ignore .bak files in confdir.
529 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
531 dsa-nagios-nrpe-config (27) unstable; urgency=low
533 * Change OK text when da-backup not installed.
535 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
537 dsa-nagios-nrpe-config (26) unstable; urgency=low
539 * dsa-check-dabackup: Warn if installed but no backups configured.
541 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
543 dsa-nagios-nrpe-config (25) unstable; urgency=low
545 * Install dsa-check-dabackup
547 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
549 dsa-nagios-nrpe-config (24) unstable; urgency=low
551 * Check for dsa-check-backup sudoers entry
553 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
555 dsa-nagios-nrpe-config (23) unstable; urgency=low
557 * Add dsa-check-dabackup
559 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
561 dsa-nagios-nrpe-config (22) unstable; urgency=low
563 * Add a very easy dsa-check-da-in-aliases.
565 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
567 dsa-nagios-nrpe-config (21) unstable; urgency=low
569 * Add dsa-check-raid-sw.
571 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
573 dsa-nagios-nrpe-config (20) unstable; urgency=low
575 * Do away with a new changelog entry and version for every build of the
576 package - it floods us with useless commit mails - and just
577 increase the version to $TIMESTAMP in the build area.
579 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
581 dsa-nagios-nrpe-config (1) unstable; urgency=low
585 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200