1 dsa-nagios-checks (9X) Xnstable; urgency=low
4 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
5 coding /proc in order to match procfs in chroots too.
7 -- Tollef Fog Heen <tfheen@debian.org> Mon, 27 Feb 2012 16:29:57 +0100
9 dsa-nagios-checks (92.1) unstable; urgency=low
11 * Fix dsa-update-unowned-file-status cronjob entry more.
13 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
15 dsa-nagios-checks (92) unstable; urgency=low
17 * Fix dsa-update-unowned-file-status cronjob entry.
19 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
21 dsa-nagios-checks (91) unstable; urgency=low
24 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
26 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
27 properly timeout long checks.
28 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
29 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
31 * dsa-check-soas: support supplying an IP address for additional nameservers
35 * Make the unowned files check skip /proc.
36 * Limit the number of unowned files we register in the state file to 40.
39 * Rewrite unowned files check into something that writes proper
40 nagios status files and behaves in a nice and sane way.
42 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
44 dsa-nagios-checks (90) unstable; urgency=low
48 - document watermark default
49 - fix off-by-one in output
51 - ignore regular files in pg backup's root directory if they are still
55 * dsa-check-log-age-loghost
56 - allow minus (-) in hostnames.
59 * Add event_handler to restart services
60 * Add dsa-check-raid-megactl for awkward PeRC controllers
62 [ Martin Zobel-Helas ]
63 * add rudimentary check for unowned files
65 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
67 dsa-nagios-checks (89) unstable; urgency=low
69 * dsa-check-running-kernel: kFreeBSD support.
70 * Add dsa-check-entropy.
72 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
74 dsa-nagios-checks (88) unstable; urgency=low
77 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
78 to '3.0GBPS, Unknown'.
79 - accept 6.0Gbps for SAS disks.
80 - add --ignore-transfer-speed option.
81 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
83 * Add dsa-check-hpacucli-enclosure.
84 * dsa-check-running-kernel:
85 - check if 'strings' is installed and complain nicely if it isn't instead
86 of falling over. [Uli Martens]
87 - Make the check work with Ubuntu's kernel names (Alexander
89 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
90 * Add dsa-check-port-closed.
91 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
93 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
94 that do not say 'Yes' in the present-line.
95 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
96 in addition to /var/lib/misc/thishost/passwd.tdb.
97 * Add dsa-check-resolver.
99 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
101 dsa-nagios-checks (87) unstable; urgency=low
104 * dsa-check-running-kernel:
105 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
106 - Handle cases where a meta package depends on a list of packages
107 (such as image and module package).
110 * dsa-check-apt-status: it's not an error to exit when we don't need to run
111 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
114 * Add checks/dsa-check-backuppg.
115 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
116 * Add dsa-check-log-age-loghost.
117 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
118 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
120 [ Martin Zobel-Helas ]
121 * Add checks/dsa-checks-file.
123 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
125 dsa-nagios-checks (86) unstable; urgency=low
128 * Add dsa-check-raid-megaraid.
129 * make samhain check go WARN, not CRITICAL.
132 * Add dsa-check-uptime
134 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
136 dsa-nagios-checks (85) unstable; urgency=low
139 * dsa-update-apt-status: Fix bashism by making it a bash script
141 * dsa-check-hpasm: Not all things where a temperature can be measured
142 might be installed (e.g. a second CPU). Don't do numeric computations
143 on a "-" instead of numbers then.
144 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
145 then non-redundant power supply will not be a warning state.
146 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
147 then non-redundant fans will not be a warning state.
148 * Add dsa-check-msa-eventlog.
149 * add dsa-check-zone-rrsig-expiration (therefore recommend
150 libnet-dns-sec-perl).
151 * add dsa-check-zone-rrsig-expiration-many.
152 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
153 controller with a battery: "ZMM Optimal" is the way it says "optimal".
154 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
155 /root/.ssh/authorized_keys.
156 * add dsa-check-dnssec-delegation.
157 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
159 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
160 and /var/lib/misc/userkeys, not just the first. (Also doesn't
161 blow up if a file is empty.)
163 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
165 dsa-nagios-checks (84) unstable; urgency=low
168 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
169 better (do not reference undefined values, properly exit with UNKNOWN).
170 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
171 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
172 wrapper) in the authorized_keys files. Such entries accept all
173 backup-manager entries for their host, but they do not require one.
174 As such we can just put all the hosts in the authkeys file regardless of
175 whether we actually have backups configured for them.
178 * New check: dsa-check-hpasm
179 * Release for new check
181 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
183 dsa-nagios-checks (83) stable; urgency=low
185 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
188 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
190 dsa-nagios-checks (82) stable; urgency=low
192 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
194 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
196 dsa-nagios-checks (81) stable; urgency=low
198 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
199 it found degraded raid arrays. Handle this correctly.
201 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
203 dsa-nagios-checks (80) stable; urgency=low
205 * dsa-check-packages: In the short overview say "obs/loc" instead of
206 just "obs" for local or obsolete packages.
207 * dsa-update-apt-status: Introduce -f switch.
209 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
211 dsa-nagios-checks (79) stable; urgency=low
213 * dsa-check-running-kernel: Correctly check *candidate* version
214 of kernel metapackage for unsatisfied depends, not the latest
215 metapackage (which might come from a non-default source).
217 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
219 dsa-nagios-checks (78) stable; urgency=low
221 * dsa-check-raid-aacraid: tmp directory in /tmp,
222 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
225 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
227 dsa-nagios-checks (77) stable; urgency=low
229 * Add checks/dsa-check-raid-aacraid.
231 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
233 dsa-nagios-checks (76) stable; urgency=low
235 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
237 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
239 dsa-nagios-checks (75) stable; urgency=low
241 * dsa-check-packages: Support ignore directories.
242 * debian/control: Fix dup word in description.
244 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
246 dsa-nagios-checks (74) stable; urgency=low
250 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
252 dsa-nagios-checks (73) stable; urgency=low
254 * Er, new test needs to be executable
256 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
258 dsa-nagios-checks (72) stable; urgency=low
260 * Generalize puppet file age check and remove old one
262 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
264 dsa-nagios-checks (71) stable; urgency=low
266 * Update the kernel check to not complain when we can't trace back to a meta
267 package name - this generally indicates a custom kernel that we're running
270 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
272 dsa-nagios-checks (70) XXstable; urgency=low
274 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
275 * Only run weak keys check if there is no prior weak key status.
276 * dsa-check-hpacucli: Slots need not be all numeric.
277 * dsa-check-hpacucli: Spares can be active.
278 * dsa-check-hpacucli: And SAS can be E too.
280 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
282 dsa-nagios-checks (69) unstable; urgency=low
284 * Rename to dsa-nagios-checks.
285 * Replaces/Conflicts dsa-nagios-nrpe-config.
286 * Update description.
287 * No longer install nrpe_dsa.cfg.
288 * Move files into specific directories in source.
290 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
292 dsa-nagios-nrpe-config (68) unstable; urgency=low
294 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
297 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
299 dsa-nagios-nrpe-config (67) unstable; urgency=low
301 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
302 long text for obs(ign).
304 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
306 dsa-nagios-nrpe-config (66) unstable; urgency=low
308 * Add dsa-check-packages
309 * Make apt-status-check use dsa-check-packages.
310 * And install obsolete-packages-ignore into etc/nagios.
312 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
314 dsa-nagios-nrpe-config (65) unstable; urgency=low
318 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
320 dsa-nagios-nrpe-config (64) unstable; urgency=low
322 * dsa-check-mirrorsync: make it work in embedded perl again.
324 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
326 dsa-nagios-nrpe-config (63) unstable; urgency=low
328 * dsa-check-mirrorsync: print help if additional args are given (we don't
331 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
333 dsa-nagios-nrpe-config (62) unstable; urgency=low
335 * Add check_securitymirror by formorer.
337 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
339 dsa-nagios-nrpe-config (61) unstable; urgency=low
341 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
342 entry is in there. If it doesn't exist that's also good.
344 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
346 dsa-nagios-nrpe-config (60) unstable; urgency=low
348 * Add dsa-check-raid-areca.
350 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
352 dsa-nagios-nrpe-config (59) unstable; urgency=low
354 * apt-status-check: Ignore stderr during apt-get update.
356 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
358 dsa-nagios-nrpe-config (58) unstable; urgency=low
360 * Rename dsa-check-da-in-aliases to dsa-check-config.
361 * dsa-check-config: check if ldap.conf is configured correctly.
363 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
365 dsa-nagios-nrpe-config (57) unstable; urgency=low
367 * dsa-check-hpacucli: Do not inspect drives in detail when they are
368 listed as Failed in the overview already.
370 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
372 dsa-nagios-nrpe-config (56) unstable; urgency=low
374 * fix dsa-check-samhain.
375 sudo is not in $PATH.
377 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
379 dsa-nagios-nrpe-config (55) unstable; urgency=low
381 * And another one, weasel should sleep.
383 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
385 dsa-nagios-nrpe-config (54) unstable; urgency=low
387 * dsa-check-dabackup-server fixes.
389 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
391 dsa-nagios-nrpe-config (53) unstable; urgency=low
393 * Add dsa-check-dabackup-server.
395 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
397 dsa-nagios-nrpe-config (52) unstable; urgency=low
399 * The nagios _check_ package should probably not be the one that
400 depends on the stuff we want on most or all hosts, thus removing
401 dependency on samhain, which should probably get pulled in via
404 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
406 dsa-nagios-nrpe-config (51) unstable; urgency=low
408 * Add check for samhain.
410 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
412 dsa-nagios-nrpe-config (50) unstable; urgency=low
414 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
416 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
418 dsa-nagios-nrpe-config (49) unstable; urgency=low
420 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
422 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
424 dsa-nagios-nrpe-config (48) unstable; urgency=low
426 * Don't just print the sudoers lines to stdout, tell the admin to add them
429 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
431 dsa-nagios-nrpe-config (47) unstable; urgency=low
433 * dsa-check-hpacucli: Check transfer speed of disks.
435 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
437 dsa-nagios-nrpe-config (46) unstable; urgency=low
439 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
440 * Move script calls from cron.daily to cron.d @daily and @reboot.
441 * Introduce hourly runs for dsa-update-apt-status that happen if the system
442 changed in the meantime, that is if /var/lib/dpkg/status or
443 /var/cache/apt/pkgcache.bin are newer than the status file.
444 Also run if the status file does not exist, or if the last apt-get update
445 call failed, or if the last run was more than a day ago.
446 * No longer do @daily runs of dsa-update-apt-status
448 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
450 dsa-nagios-nrpe-config (45) unstable; urgency=low
452 * Add apt upgrades check.
454 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
456 dsa-nagios-nrpe-config (44) unstable; urgency=low
458 * Fix ssh-dss detection. It need not be at the start of a line
459 (think >from="1.2.3.4" ssh-dss< ...).
461 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
463 dsa-nagios-nrpe-config (43) unstable; urgency=low
467 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
469 dsa-nagios-nrpe-config (42) unstable; urgency=low
471 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
472 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
473 * Run weak-ssh-keys-check on install.
475 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
477 dsa-nagios-nrpe-config (41) unstable; urgency=low
479 * Add dsa-check-statusfile.
480 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
481 libberkeleydb-perl and dsa-ssh-weak-keys now.
482 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
484 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
486 dsa-nagios-nrpe-config (40) unstable; urgency=low
488 * Teach dsa-check-hpacucli about rebuilding.
490 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
492 dsa-nagios-nrpe-config (39) unstable; urgency=low
494 * Add dsa-check-hpacucli.
497 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
499 dsa-nagios-nrpe-config (38) unstable; urgency=low
501 * Try harder to find version string.
503 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
505 dsa-nagios-nrpe-config (37) unstable; urgency=low
507 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
508 * Depend on binutils for string(1).
510 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
512 dsa-nagios-nrpe-config (36) unstable; urgency=low
514 * Add dsa-check-running-kernel
516 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
518 dsa-nagios-nrpe-config (35) unstable; urgency=low
522 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
524 dsa-nagios-nrpe-config (34) unstable; urgency=low
526 * dsa-check-raid-3ware
528 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
530 dsa-nagios-nrpe-config (33) unstable; urgency=low
532 * Add dsa-check-raid-dac960
534 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
536 dsa-nagios-nrpe-config (32) unstable; urgency=low
538 * Add dsa-check-udldap-freshness.
540 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
542 dsa-nagios-nrpe-config (31) unstable; urgency=low
544 * dsa-check-dabackup: Use last time's log file if backup is currently running.
546 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
548 dsa-nagios-nrpe-config (30) unstable; urgency=low
550 * dsa-check-raid-sw: cleaner output.
552 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
554 dsa-nagios-nrpe-config (29) unstable; urgency=low
556 * dsa-check-dabackup: terser output.
558 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
560 dsa-nagios-nrpe-config (28) unstable; urgency=low
562 * dsa-check-dabackup: ignore .bak files in confdir.
564 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
566 dsa-nagios-nrpe-config (27) unstable; urgency=low
568 * Change OK text when da-backup not installed.
570 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
572 dsa-nagios-nrpe-config (26) unstable; urgency=low
574 * dsa-check-dabackup: Warn if installed but no backups configured.
576 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
578 dsa-nagios-nrpe-config (25) unstable; urgency=low
580 * Install dsa-check-dabackup
582 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
584 dsa-nagios-nrpe-config (24) unstable; urgency=low
586 * Check for dsa-check-backup sudoers entry
588 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
590 dsa-nagios-nrpe-config (23) unstable; urgency=low
592 * Add dsa-check-dabackup
594 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
596 dsa-nagios-nrpe-config (22) unstable; urgency=low
598 * Add a very easy dsa-check-da-in-aliases.
600 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
602 dsa-nagios-nrpe-config (21) unstable; urgency=low
604 * Add dsa-check-raid-sw.
606 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
608 dsa-nagios-nrpe-config (20) unstable; urgency=low
610 * Do away with a new changelog entry and version for every build of the
611 package - it floods us with useless commit mails - and just
612 increase the version to $TIMESTAMP in the build area.
614 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
616 dsa-nagios-nrpe-config (1) unstable; urgency=low
620 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200