1 dsa-nagios-checks (9X) Xnstable; urgency=low
5 - document watermark default
6 - fix off-by-one in output
8 - ignore regular files in pg backup's root directory if they are still
12 * dsa-check-log-age-loghost
13 - allow minus (-) in hostnames.
16 * Add event_handler to restart services
17 * Add dsa-check-raid-megactl for awkward PeRC controllers
19 [ Martin Zobel-Helas ]
20 * add rudimentary check for unowned files
22 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
24 dsa-nagios-checks (89) unstable; urgency=low
26 * dsa-check-running-kernel: kFreeBSD support.
27 * Add dsa-check-entropy.
29 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
31 dsa-nagios-checks (88) unstable; urgency=low
34 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
35 to '3.0GBPS, Unknown'.
36 - accept 6.0Gbps for SAS disks.
37 - add --ignore-transfer-speed option.
38 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
40 * Add dsa-check-hpacucli-enclosure.
41 * dsa-check-running-kernel:
42 - check if 'strings' is installed and complain nicely if it isn't instead
43 of falling over. [Uli Martens]
44 - Make the check work with Ubuntu's kernel names (Alexander
46 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
47 * Add dsa-check-port-closed.
48 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
50 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
51 that do not say 'Yes' in the present-line.
52 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
53 in addition to /var/lib/misc/thishost/passwd.tdb.
54 * Add dsa-check-resolver.
56 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
58 dsa-nagios-checks (87) unstable; urgency=low
61 * dsa-check-running-kernel:
62 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
63 - Handle cases where a meta package depends on a list of packages
64 (such as image and module package).
67 * dsa-check-apt-status: it's not an error to exit when we don't need to run
68 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
71 * Add checks/dsa-check-backuppg.
72 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
73 * Add dsa-check-log-age-loghost.
74 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
75 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
77 [ Martin Zobel-Helas ]
78 * Add checks/dsa-checks-file.
80 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
82 dsa-nagios-checks (86) unstable; urgency=low
85 * Add dsa-check-raid-megaraid.
86 * make samhain check go WARN, not CRITICAL.
89 * Add dsa-check-uptime
91 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
93 dsa-nagios-checks (85) unstable; urgency=low
96 * dsa-update-apt-status: Fix bashism by making it a bash script
98 * dsa-check-hpasm: Not all things where a temperature can be measured
99 might be installed (e.g. a second CPU). Don't do numeric computations
100 on a "-" instead of numbers then.
101 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
102 then non-redundant power supply will not be a warning state.
103 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
104 then non-redundant fans will not be a warning state.
105 * Add dsa-check-msa-eventlog.
106 * add dsa-check-zone-rrsig-expiration (therefore recommend
107 libnet-dns-sec-perl).
108 * add dsa-check-zone-rrsig-expiration-many.
109 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
110 controller with a battery: "ZMM Optimal" is the way it says "optimal".
111 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
112 /root/.ssh/authorized_keys.
113 * add dsa-check-dnssec-delegation.
114 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
116 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
117 and /var/lib/misc/userkeys, not just the first. (Also doesn't
118 blow up if a file is empty.)
120 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
122 dsa-nagios-checks (84) unstable; urgency=low
125 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
126 better (do not reference undefined values, properly exit with UNKNOWN).
127 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
128 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
129 wrapper) in the authorized_keys files. Such entries accept all
130 backup-manager entries for their host, but they do not require one.
131 As such we can just put all the hosts in the authkeys file regardless of
132 whether we actually have backups configured for them.
135 * New check: dsa-check-hpasm
136 * Release for new check
138 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
140 dsa-nagios-checks (83) stable; urgency=low
142 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
145 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
147 dsa-nagios-checks (82) stable; urgency=low
149 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
151 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
153 dsa-nagios-checks (81) stable; urgency=low
155 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
156 it found degraded raid arrays. Handle this correctly.
158 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
160 dsa-nagios-checks (80) stable; urgency=low
162 * dsa-check-packages: In the short overview say "obs/loc" instead of
163 just "obs" for local or obsolete packages.
164 * dsa-update-apt-status: Introduce -f switch.
166 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
168 dsa-nagios-checks (79) stable; urgency=low
170 * dsa-check-running-kernel: Correctly check *candidate* version
171 of kernel metapackage for unsatisfied depends, not the latest
172 metapackage (which might come from a non-default source).
174 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
176 dsa-nagios-checks (78) stable; urgency=low
178 * dsa-check-raid-aacraid: tmp directory in /tmp,
179 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
182 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
184 dsa-nagios-checks (77) stable; urgency=low
186 * Add checks/dsa-check-raid-aacraid.
188 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
190 dsa-nagios-checks (76) stable; urgency=low
192 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
194 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
196 dsa-nagios-checks (75) stable; urgency=low
198 * dsa-check-packages: Support ignore directories.
199 * debian/control: Fix dup word in description.
201 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
203 dsa-nagios-checks (74) stable; urgency=low
207 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
209 dsa-nagios-checks (73) stable; urgency=low
211 * Er, new test needs to be executable
213 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
215 dsa-nagios-checks (72) stable; urgency=low
217 * Generalize puppet file age check and remove old one
219 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
221 dsa-nagios-checks (71) stable; urgency=low
223 * Update the kernel check to not complain when we can't trace back to a meta
224 package name - this generally indicates a custom kernel that we're running
227 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
229 dsa-nagios-checks (70) XXstable; urgency=low
231 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
232 * Only run weak keys check if there is no prior weak key status.
233 * dsa-check-hpacucli: Slots need not be all numeric.
234 * dsa-check-hpacucli: Spares can be active.
235 * dsa-check-hpacucli: And SAS can be E too.
237 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
239 dsa-nagios-checks (69) unstable; urgency=low
241 * Rename to dsa-nagios-checks.
242 * Replaces/Conflicts dsa-nagios-nrpe-config.
243 * Update description.
244 * No longer install nrpe_dsa.cfg.
245 * Move files into specific directories in source.
247 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
249 dsa-nagios-nrpe-config (68) unstable; urgency=low
251 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
254 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
256 dsa-nagios-nrpe-config (67) unstable; urgency=low
258 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
259 long text for obs(ign).
261 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
263 dsa-nagios-nrpe-config (66) unstable; urgency=low
265 * Add dsa-check-packages
266 * Make apt-status-check use dsa-check-packages.
267 * And install obsolete-packages-ignore into etc/nagios.
269 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
271 dsa-nagios-nrpe-config (65) unstable; urgency=low
275 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
277 dsa-nagios-nrpe-config (64) unstable; urgency=low
279 * dsa-check-mirrorsync: make it work in embedded perl again.
281 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
283 dsa-nagios-nrpe-config (63) unstable; urgency=low
285 * dsa-check-mirrorsync: print help if additional args are given (we don't
288 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
290 dsa-nagios-nrpe-config (62) unstable; urgency=low
292 * Add check_securitymirror by formorer.
294 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
296 dsa-nagios-nrpe-config (61) unstable; urgency=low
298 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
299 entry is in there. If it doesn't exist that's also good.
301 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
303 dsa-nagios-nrpe-config (60) unstable; urgency=low
305 * Add dsa-check-raid-areca.
307 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
309 dsa-nagios-nrpe-config (59) unstable; urgency=low
311 * apt-status-check: Ignore stderr during apt-get update.
313 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
315 dsa-nagios-nrpe-config (58) unstable; urgency=low
317 * Rename dsa-check-da-in-aliases to dsa-check-config.
318 * dsa-check-config: check if ldap.conf is configured correctly.
320 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
322 dsa-nagios-nrpe-config (57) unstable; urgency=low
324 * dsa-check-hpacucli: Do not inspect drives in detail when they are
325 listed as Failed in the overview already.
327 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
329 dsa-nagios-nrpe-config (56) unstable; urgency=low
331 * fix dsa-check-samhain.
332 sudo is not in $PATH.
334 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
336 dsa-nagios-nrpe-config (55) unstable; urgency=low
338 * And another one, weasel should sleep.
340 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
342 dsa-nagios-nrpe-config (54) unstable; urgency=low
344 * dsa-check-dabackup-server fixes.
346 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
348 dsa-nagios-nrpe-config (53) unstable; urgency=low
350 * Add dsa-check-dabackup-server.
352 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
354 dsa-nagios-nrpe-config (52) unstable; urgency=low
356 * The nagios _check_ package should probably not be the one that
357 depends on the stuff we want on most or all hosts, thus removing
358 dependency on samhain, which should probably get pulled in via
361 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
363 dsa-nagios-nrpe-config (51) unstable; urgency=low
365 * Add check for samhain.
367 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
369 dsa-nagios-nrpe-config (50) unstable; urgency=low
371 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
373 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
375 dsa-nagios-nrpe-config (49) unstable; urgency=low
377 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
379 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
381 dsa-nagios-nrpe-config (48) unstable; urgency=low
383 * Don't just print the sudoers lines to stdout, tell the admin to add them
386 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
388 dsa-nagios-nrpe-config (47) unstable; urgency=low
390 * dsa-check-hpacucli: Check transfer speed of disks.
392 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
394 dsa-nagios-nrpe-config (46) unstable; urgency=low
396 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
397 * Move script calls from cron.daily to cron.d @daily and @reboot.
398 * Introduce hourly runs for dsa-update-apt-status that happen if the system
399 changed in the meantime, that is if /var/lib/dpkg/status or
400 /var/cache/apt/pkgcache.bin are newer than the status file.
401 Also run if the status file does not exist, or if the last apt-get update
402 call failed, or if the last run was more than a day ago.
403 * No longer do @daily runs of dsa-update-apt-status
405 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
407 dsa-nagios-nrpe-config (45) unstable; urgency=low
409 * Add apt upgrades check.
411 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
413 dsa-nagios-nrpe-config (44) unstable; urgency=low
415 * Fix ssh-dss detection. It need not be at the start of a line
416 (think >from="1.2.3.4" ssh-dss< ...).
418 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
420 dsa-nagios-nrpe-config (43) unstable; urgency=low
424 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
426 dsa-nagios-nrpe-config (42) unstable; urgency=low
428 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
429 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
430 * Run weak-ssh-keys-check on install.
432 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
434 dsa-nagios-nrpe-config (41) unstable; urgency=low
436 * Add dsa-check-statusfile.
437 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
438 libberkeleydb-perl and dsa-ssh-weak-keys now.
439 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
441 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
443 dsa-nagios-nrpe-config (40) unstable; urgency=low
445 * Teach dsa-check-hpacucli about rebuilding.
447 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
449 dsa-nagios-nrpe-config (39) unstable; urgency=low
451 * Add dsa-check-hpacucli.
454 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
456 dsa-nagios-nrpe-config (38) unstable; urgency=low
458 * Try harder to find version string.
460 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
462 dsa-nagios-nrpe-config (37) unstable; urgency=low
464 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
465 * Depend on binutils for string(1).
467 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
469 dsa-nagios-nrpe-config (36) unstable; urgency=low
471 * Add dsa-check-running-kernel
473 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
475 dsa-nagios-nrpe-config (35) unstable; urgency=low
479 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
481 dsa-nagios-nrpe-config (34) unstable; urgency=low
483 * dsa-check-raid-3ware
485 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
487 dsa-nagios-nrpe-config (33) unstable; urgency=low
489 * Add dsa-check-raid-dac960
491 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
493 dsa-nagios-nrpe-config (32) unstable; urgency=low
495 * Add dsa-check-udldap-freshness.
497 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
499 dsa-nagios-nrpe-config (31) unstable; urgency=low
501 * dsa-check-dabackup: Use last time's log file if backup is currently running.
503 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
505 dsa-nagios-nrpe-config (30) unstable; urgency=low
507 * dsa-check-raid-sw: cleaner output.
509 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
511 dsa-nagios-nrpe-config (29) unstable; urgency=low
513 * dsa-check-dabackup: terser output.
515 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
517 dsa-nagios-nrpe-config (28) unstable; urgency=low
519 * dsa-check-dabackup: ignore .bak files in confdir.
521 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
523 dsa-nagios-nrpe-config (27) unstable; urgency=low
525 * Change OK text when da-backup not installed.
527 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
529 dsa-nagios-nrpe-config (26) unstable; urgency=low
531 * dsa-check-dabackup: Warn if installed but no backups configured.
533 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
535 dsa-nagios-nrpe-config (25) unstable; urgency=low
537 * Install dsa-check-dabackup
539 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
541 dsa-nagios-nrpe-config (24) unstable; urgency=low
543 * Check for dsa-check-backup sudoers entry
545 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
547 dsa-nagios-nrpe-config (23) unstable; urgency=low
549 * Add dsa-check-dabackup
551 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
553 dsa-nagios-nrpe-config (22) unstable; urgency=low
555 * Add a very easy dsa-check-da-in-aliases.
557 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
559 dsa-nagios-nrpe-config (21) unstable; urgency=low
561 * Add dsa-check-raid-sw.
563 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
565 dsa-nagios-nrpe-config (20) unstable; urgency=low
567 * Do away with a new changelog entry and version for every build of the
568 package - it floods us with useless commit mails - and just
569 increase the version to $TIMESTAMP in the build area.
571 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
573 dsa-nagios-nrpe-config (1) unstable; urgency=low
577 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200