1 dsa-nagios-checks (9X) Xnstable; urgency=low
4 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
5 coding /proc in order to match procfs in chroots too.
8 * dsa-check-msa-eventlog: Add --verbose switch to show info level
10 * add dsa-check-crl-expire.
12 -- Peter Palfrader <weasel@debian.org> Wed, 07 Mar 2012 15:25:29 +0100
14 dsa-nagios-checks (92.1) unstable; urgency=low
16 * Fix dsa-update-unowned-file-status cronjob entry more.
18 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
20 dsa-nagios-checks (92) unstable; urgency=low
22 * Fix dsa-update-unowned-file-status cronjob entry.
24 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
26 dsa-nagios-checks (91) unstable; urgency=low
29 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
31 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
32 properly timeout long checks.
33 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
34 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
36 * dsa-check-soas: support supplying an IP address for additional nameservers
40 * Make the unowned files check skip /proc.
41 * Limit the number of unowned files we register in the state file to 40.
44 * Rewrite unowned files check into something that writes proper
45 nagios status files and behaves in a nice and sane way.
47 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
49 dsa-nagios-checks (90) unstable; urgency=low
53 - document watermark default
54 - fix off-by-one in output
56 - ignore regular files in pg backup's root directory if they are still
60 * dsa-check-log-age-loghost
61 - allow minus (-) in hostnames.
64 * Add event_handler to restart services
65 * Add dsa-check-raid-megactl for awkward PeRC controllers
67 [ Martin Zobel-Helas ]
68 * add rudimentary check for unowned files
70 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
72 dsa-nagios-checks (89) unstable; urgency=low
74 * dsa-check-running-kernel: kFreeBSD support.
75 * Add dsa-check-entropy.
77 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
79 dsa-nagios-checks (88) unstable; urgency=low
82 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
83 to '3.0GBPS, Unknown'.
84 - accept 6.0Gbps for SAS disks.
85 - add --ignore-transfer-speed option.
86 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
88 * Add dsa-check-hpacucli-enclosure.
89 * dsa-check-running-kernel:
90 - check if 'strings' is installed and complain nicely if it isn't instead
91 of falling over. [Uli Martens]
92 - Make the check work with Ubuntu's kernel names (Alexander
94 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
95 * Add dsa-check-port-closed.
96 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
98 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
99 that do not say 'Yes' in the present-line.
100 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
101 in addition to /var/lib/misc/thishost/passwd.tdb.
102 * Add dsa-check-resolver.
104 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
106 dsa-nagios-checks (87) unstable; urgency=low
109 * dsa-check-running-kernel:
110 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
111 - Handle cases where a meta package depends on a list of packages
112 (such as image and module package).
115 * dsa-check-apt-status: it's not an error to exit when we don't need to run
116 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
119 * Add checks/dsa-check-backuppg.
120 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
121 * Add dsa-check-log-age-loghost.
122 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
123 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
125 [ Martin Zobel-Helas ]
126 * Add checks/dsa-checks-file.
128 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
130 dsa-nagios-checks (86) unstable; urgency=low
133 * Add dsa-check-raid-megaraid.
134 * make samhain check go WARN, not CRITICAL.
137 * Add dsa-check-uptime
139 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
141 dsa-nagios-checks (85) unstable; urgency=low
144 * dsa-update-apt-status: Fix bashism by making it a bash script
146 * dsa-check-hpasm: Not all things where a temperature can be measured
147 might be installed (e.g. a second CPU). Don't do numeric computations
148 on a "-" instead of numbers then.
149 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
150 then non-redundant power supply will not be a warning state.
151 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
152 then non-redundant fans will not be a warning state.
153 * Add dsa-check-msa-eventlog.
154 * add dsa-check-zone-rrsig-expiration (therefore recommend
155 libnet-dns-sec-perl).
156 * add dsa-check-zone-rrsig-expiration-many.
157 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
158 controller with a battery: "ZMM Optimal" is the way it says "optimal".
159 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
160 /root/.ssh/authorized_keys.
161 * add dsa-check-dnssec-delegation.
162 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
164 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
165 and /var/lib/misc/userkeys, not just the first. (Also doesn't
166 blow up if a file is empty.)
168 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
170 dsa-nagios-checks (84) unstable; urgency=low
173 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
174 better (do not reference undefined values, properly exit with UNKNOWN).
175 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
176 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
177 wrapper) in the authorized_keys files. Such entries accept all
178 backup-manager entries for their host, but they do not require one.
179 As such we can just put all the hosts in the authkeys file regardless of
180 whether we actually have backups configured for them.
183 * New check: dsa-check-hpasm
184 * Release for new check
186 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
188 dsa-nagios-checks (83) stable; urgency=low
190 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
193 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
195 dsa-nagios-checks (82) stable; urgency=low
197 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
199 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
201 dsa-nagios-checks (81) stable; urgency=low
203 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
204 it found degraded raid arrays. Handle this correctly.
206 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
208 dsa-nagios-checks (80) stable; urgency=low
210 * dsa-check-packages: In the short overview say "obs/loc" instead of
211 just "obs" for local or obsolete packages.
212 * dsa-update-apt-status: Introduce -f switch.
214 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
216 dsa-nagios-checks (79) stable; urgency=low
218 * dsa-check-running-kernel: Correctly check *candidate* version
219 of kernel metapackage for unsatisfied depends, not the latest
220 metapackage (which might come from a non-default source).
222 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
224 dsa-nagios-checks (78) stable; urgency=low
226 * dsa-check-raid-aacraid: tmp directory in /tmp,
227 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
230 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
232 dsa-nagios-checks (77) stable; urgency=low
234 * Add checks/dsa-check-raid-aacraid.
236 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
238 dsa-nagios-checks (76) stable; urgency=low
240 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
242 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
244 dsa-nagios-checks (75) stable; urgency=low
246 * dsa-check-packages: Support ignore directories.
247 * debian/control: Fix dup word in description.
249 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
251 dsa-nagios-checks (74) stable; urgency=low
255 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
257 dsa-nagios-checks (73) stable; urgency=low
259 * Er, new test needs to be executable
261 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
263 dsa-nagios-checks (72) stable; urgency=low
265 * Generalize puppet file age check and remove old one
267 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
269 dsa-nagios-checks (71) stable; urgency=low
271 * Update the kernel check to not complain when we can't trace back to a meta
272 package name - this generally indicates a custom kernel that we're running
275 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
277 dsa-nagios-checks (70) XXstable; urgency=low
279 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
280 * Only run weak keys check if there is no prior weak key status.
281 * dsa-check-hpacucli: Slots need not be all numeric.
282 * dsa-check-hpacucli: Spares can be active.
283 * dsa-check-hpacucli: And SAS can be E too.
285 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
287 dsa-nagios-checks (69) unstable; urgency=low
289 * Rename to dsa-nagios-checks.
290 * Replaces/Conflicts dsa-nagios-nrpe-config.
291 * Update description.
292 * No longer install nrpe_dsa.cfg.
293 * Move files into specific directories in source.
295 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
297 dsa-nagios-nrpe-config (68) unstable; urgency=low
299 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
302 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
304 dsa-nagios-nrpe-config (67) unstable; urgency=low
306 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
307 long text for obs(ign).
309 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
311 dsa-nagios-nrpe-config (66) unstable; urgency=low
313 * Add dsa-check-packages
314 * Make apt-status-check use dsa-check-packages.
315 * And install obsolete-packages-ignore into etc/nagios.
317 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
319 dsa-nagios-nrpe-config (65) unstable; urgency=low
323 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
325 dsa-nagios-nrpe-config (64) unstable; urgency=low
327 * dsa-check-mirrorsync: make it work in embedded perl again.
329 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
331 dsa-nagios-nrpe-config (63) unstable; urgency=low
333 * dsa-check-mirrorsync: print help if additional args are given (we don't
336 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
338 dsa-nagios-nrpe-config (62) unstable; urgency=low
340 * Add check_securitymirror by formorer.
342 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
344 dsa-nagios-nrpe-config (61) unstable; urgency=low
346 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
347 entry is in there. If it doesn't exist that's also good.
349 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
351 dsa-nagios-nrpe-config (60) unstable; urgency=low
353 * Add dsa-check-raid-areca.
355 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
357 dsa-nagios-nrpe-config (59) unstable; urgency=low
359 * apt-status-check: Ignore stderr during apt-get update.
361 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
363 dsa-nagios-nrpe-config (58) unstable; urgency=low
365 * Rename dsa-check-da-in-aliases to dsa-check-config.
366 * dsa-check-config: check if ldap.conf is configured correctly.
368 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
370 dsa-nagios-nrpe-config (57) unstable; urgency=low
372 * dsa-check-hpacucli: Do not inspect drives in detail when they are
373 listed as Failed in the overview already.
375 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
377 dsa-nagios-nrpe-config (56) unstable; urgency=low
379 * fix dsa-check-samhain.
380 sudo is not in $PATH.
382 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
384 dsa-nagios-nrpe-config (55) unstable; urgency=low
386 * And another one, weasel should sleep.
388 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
390 dsa-nagios-nrpe-config (54) unstable; urgency=low
392 * dsa-check-dabackup-server fixes.
394 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
396 dsa-nagios-nrpe-config (53) unstable; urgency=low
398 * Add dsa-check-dabackup-server.
400 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
402 dsa-nagios-nrpe-config (52) unstable; urgency=low
404 * The nagios _check_ package should probably not be the one that
405 depends on the stuff we want on most or all hosts, thus removing
406 dependency on samhain, which should probably get pulled in via
409 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
411 dsa-nagios-nrpe-config (51) unstable; urgency=low
413 * Add check for samhain.
415 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
417 dsa-nagios-nrpe-config (50) unstable; urgency=low
419 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
421 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
423 dsa-nagios-nrpe-config (49) unstable; urgency=low
425 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
427 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
429 dsa-nagios-nrpe-config (48) unstable; urgency=low
431 * Don't just print the sudoers lines to stdout, tell the admin to add them
434 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
436 dsa-nagios-nrpe-config (47) unstable; urgency=low
438 * dsa-check-hpacucli: Check transfer speed of disks.
440 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
442 dsa-nagios-nrpe-config (46) unstable; urgency=low
444 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
445 * Move script calls from cron.daily to cron.d @daily and @reboot.
446 * Introduce hourly runs for dsa-update-apt-status that happen if the system
447 changed in the meantime, that is if /var/lib/dpkg/status or
448 /var/cache/apt/pkgcache.bin are newer than the status file.
449 Also run if the status file does not exist, or if the last apt-get update
450 call failed, or if the last run was more than a day ago.
451 * No longer do @daily runs of dsa-update-apt-status
453 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
455 dsa-nagios-nrpe-config (45) unstable; urgency=low
457 * Add apt upgrades check.
459 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
461 dsa-nagios-nrpe-config (44) unstable; urgency=low
463 * Fix ssh-dss detection. It need not be at the start of a line
464 (think >from="1.2.3.4" ssh-dss< ...).
466 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
468 dsa-nagios-nrpe-config (43) unstable; urgency=low
472 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
474 dsa-nagios-nrpe-config (42) unstable; urgency=low
476 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
477 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
478 * Run weak-ssh-keys-check on install.
480 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
482 dsa-nagios-nrpe-config (41) unstable; urgency=low
484 * Add dsa-check-statusfile.
485 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
486 libberkeleydb-perl and dsa-ssh-weak-keys now.
487 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
489 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
491 dsa-nagios-nrpe-config (40) unstable; urgency=low
493 * Teach dsa-check-hpacucli about rebuilding.
495 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
497 dsa-nagios-nrpe-config (39) unstable; urgency=low
499 * Add dsa-check-hpacucli.
502 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
504 dsa-nagios-nrpe-config (38) unstable; urgency=low
506 * Try harder to find version string.
508 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
510 dsa-nagios-nrpe-config (37) unstable; urgency=low
512 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
513 * Depend on binutils for string(1).
515 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
517 dsa-nagios-nrpe-config (36) unstable; urgency=low
519 * Add dsa-check-running-kernel
521 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
523 dsa-nagios-nrpe-config (35) unstable; urgency=low
527 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
529 dsa-nagios-nrpe-config (34) unstable; urgency=low
531 * dsa-check-raid-3ware
533 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
535 dsa-nagios-nrpe-config (33) unstable; urgency=low
537 * Add dsa-check-raid-dac960
539 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
541 dsa-nagios-nrpe-config (32) unstable; urgency=low
543 * Add dsa-check-udldap-freshness.
545 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
547 dsa-nagios-nrpe-config (31) unstable; urgency=low
549 * dsa-check-dabackup: Use last time's log file if backup is currently running.
551 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
553 dsa-nagios-nrpe-config (30) unstable; urgency=low
555 * dsa-check-raid-sw: cleaner output.
557 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
559 dsa-nagios-nrpe-config (29) unstable; urgency=low
561 * dsa-check-dabackup: terser output.
563 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
565 dsa-nagios-nrpe-config (28) unstable; urgency=low
567 * dsa-check-dabackup: ignore .bak files in confdir.
569 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
571 dsa-nagios-nrpe-config (27) unstable; urgency=low
573 * Change OK text when da-backup not installed.
575 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
577 dsa-nagios-nrpe-config (26) unstable; urgency=low
579 * dsa-check-dabackup: Warn if installed but no backups configured.
581 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
583 dsa-nagios-nrpe-config (25) unstable; urgency=low
585 * Install dsa-check-dabackup
587 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
589 dsa-nagios-nrpe-config (24) unstable; urgency=low
591 * Check for dsa-check-backup sudoers entry
593 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
595 dsa-nagios-nrpe-config (23) unstable; urgency=low
597 * Add dsa-check-dabackup
599 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
601 dsa-nagios-nrpe-config (22) unstable; urgency=low
603 * Add a very easy dsa-check-da-in-aliases.
605 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
607 dsa-nagios-nrpe-config (21) unstable; urgency=low
609 * Add dsa-check-raid-sw.
611 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
613 dsa-nagios-nrpe-config (20) unstable; urgency=low
615 * Do away with a new changelog entry and version for every build of the
616 package - it floods us with useless commit mails - and just
617 increase the version to $TIMESTAMP in the build area.
619 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
621 dsa-nagios-nrpe-config (1) unstable; urgency=low
625 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200