1 dsa-nagios-checks (119) UNRELEASED; urgency=medium
4 * dsa-check-raid-sw: correctly parse resync percentages under 10%.
5 * Add check_puppetdb_nodes.
8 * dsa-check-soas: fix variable scoping
9 * Add check_clamav_signatures.
10 * dsa-check-config: fix typo in log check for "OK" statuses.
13 * port dsa-check-statusfile and dsa-check-memory to python3
14 * dsa-check-zone-signature-all: tell dig not to convert punycode.
16 -- Peter Palfrader <weasel@debian.org> Mon, 20 May 2019 12:52:00 +0200
18 dsa-nagios-checks (118) unstable; urgency=medium
21 * dsa-check-timedatectl:
22 - in buster, timedatectl no longer considers the ntp status of
23 the ntp.service. So we manually do that now.
24 - also switch to parsing the machine readable output in buster.
25 * dsa-check-ucode-intel: add.
27 -- Peter Palfrader <weasel@debian.org> Mon, 20 May 2019 12:50:51 +0200
29 dsa-nagios-checks (117) unstable; urgency=medium
32 * dsa-check-hpssacli: add --ignore-cache
33 * add: dsa-check-unbound-anchors
34 * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
36 * dsa-check-running-kernel: handle -unsigned packages
37 * dsa-check-backuppg: Ignore lost+found directory
40 * update-apt-statusdir, dsa-update-unowned-file-status:
41 Create status directory if not existing.
43 [ Moritz Muehlenhoff ]
44 * dsa-check-timedatectl: Adapt check for buster.
46 -- Aurelien Jarno <aurel32@debian.org> Mon, 01 Apr 2019 09:59:09 +0200
48 dsa-nagios-checks (116) unstable; urgency=medium
50 * Add dsa-check-ipv6-default-gw.
52 -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:05:39 +0100
54 dsa-nagios-checks (115) unstable; urgency=medium
57 * Set a specific User-Agent in dsa-check-mirrorsync
59 -- Aurelien Jarno <aurel32@debian.org> Sat, 03 Mar 2018 11:10:51 +0100
61 dsa-nagios-checks (114) unstable; urgency=medium
63 * Add dsa-check-openmanage to monitor Dell hosts.
65 -- Julien Cristau <jcristau@debian.org> Sun, 18 Feb 2018 11:03:16 +0100
67 dsa-nagios-checks (113) unstable; urgency=medium
69 * Add dsa-check-systemd-services that also prints failed systemd services
70 when things are degraded.
72 -- Peter Palfrader <weasel@debian.org> Sun, 11 Feb 2018 11:16:30 +0100
74 dsa-nagios-checks (112) unstable; urgency=medium
76 * maintainer scripts: use dpkg-maintscript-helper to clean out
77 /etc/cron.d/dsa-nagios-checks.
78 * libproc-processtable-perl: allow ignoring young processes.
80 -- Peter Palfrader <weasel@debian.org> Sun, 04 Feb 2018 12:23:46 +0100
82 dsa-nagios-checks (111) unstable; urgency=medium
85 * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
86 * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
87 an is_sep() method. Update.
88 * dsa-update-unowned-file-status: ignore autofs and nfs4
89 * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
91 * dsa-check-backuppg: Support per host and per cluster retention
93 * remove debian/cron.d: moved into puppet
96 * Set LWP::UserAgent timeout in dsa-check-mirrorsync
98 -- Peter Palfrader <weasel@debian.org> Thu, 01 Feb 2018 18:31:17 +0100
100 dsa-nagios-checks (110) unstable; urgency=medium
102 * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
103 * dsa-check-backuppg: warn if backups for a database configured in
104 dsa-check-backuppg.conf are missing entirely.
105 * dsa-check-file_age: support following symlinks and warning on empty files.
106 * dsa-check-file_age: support multiple files.
107 * dsa-check-running-kernel: meta package version check, also work on 4.x
109 * dsa-check_puppet_agent: add from Alexander Swen's github.
110 * dsa-check-memory: move from / to /checks in source (so now it should get
112 * dsa-wrap-nagios-check: add.
114 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
116 dsa-nagios-checks (109) unstable; urgency=medium
119 * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
121 * dsa-check-soas: on soa disagreement, list nameservers.
124 * dsa-check-libs: also ignore files that are open via normal file handles
128 * dsa-check-libs: accept -v as short for --verbose.
129 * dsa-check-libs: ignore deleted CWDs.
130 * dsa-check-drbd: Add --ok-no-devices option.
131 * dsa-check-backuppg: allow specifying which timeline we expect a database
133 * dsa-check-cert-expire-dir: add
134 * dsa-check-raid-3ware: modernize
135 * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
137 * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
138 the last zone checker finished.
139 * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
141 * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
142 domain share nameservers.
143 * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
144 labels for NS responses.
145 * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
146 * dsa-check-mirrorsync: support unix timestamps in tracefile
147 (for staticsync mirrors).
148 * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
149 in zonefiles. This will skip it being checked.
150 * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
151 data) in detail output.
152 * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
153 * dsa-check-zone-signature-all: add.
154 * dsa-check-timedatectl: add
155 * dsa-check-dabackup-server: replace /org/backup.debian.org with
156 /srv/backups/da-backup.
159 * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
161 * dsa-update-unowned-file-status: avoid printing the apex of pruned
165 * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
166 * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
167 * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
169 -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
171 dsa-nagios-checks (108) unstable; urgency=medium
173 * dsa-check-stunnel-sanity: Fix variable name in output.
174 * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
176 * dsa-check-config: check for DAD failures.
177 * dsa-check-config: retire ldap.conf check - we ship it with puppet
180 -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
182 dsa-nagios-checks (107) unstable; urgency=medium
184 * Add dsa-check-stunnel-sanity.
186 -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
188 dsa-nagios-checks (106) unstable; urgency=medium
190 * Depend on libyaml-syck-perl.
192 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
194 dsa-nagios-checks (105) unstable; urgency=medium
197 * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
198 * dsa-check-libs: add.
201 * dsa-check-backuppg: Ignore removed tmp files instead of crashing
203 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
205 dsa-nagios-checks (104) unstable; urgency=medium
207 * Fix iptables-save cronjob.
209 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
211 dsa-nagios-checks (103) unstable; urgency=medium
213 * dsa-update-apt-status: run apt-get update in a flock wrapper.
215 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
217 dsa-nagios-checks (102) unstable; urgency=medium
219 * dsa-check-entropy: unbreak script by removing non-ASCII characters.
221 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
223 dsa-nagios-checks (101) unstable; urgency=low
226 * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
227 * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
228 ask for SOA with dnssec data. Apparently some nameservers do give you the
229 RRSIG on the DS record instead of a referral (rcode0's for instance).
230 * dsa-check-hpasm: Support supplying a list of things for which failures are
232 * dsa-check-soas: do some queries without RD set.
233 * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
234 for the magic start sequence. This makes running times bearable on our
236 * dsa-check-config: check if existing ed25519 host keys are in ldap.
239 * Extend dsa-check-entropy output so Icinga2 can process performance
240 data (e.g. used by Graphite).
242 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
244 dsa-nagios-checks (100) unstable; urgency=low
247 * dsa-check-running-kernel: Check from all compression tokens.
248 * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
249 it does not get set later.
250 * dsa-check-running-kernel: fix kernel metapackage version regex
253 * dsa-check-packages: go critical if there are security updates.
256 * dsa-check-cert-expire: Make timers configurable.
258 [ George Kargiotakis ]
259 * dsa-check-hpacucli: Add Parity check for logical drives.
262 * dsa-check-mq-connection: Catch case when host has never connected
264 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
266 dsa-nagios-checks (99) unstable; urgency=low
268 * dsa-check-hpacucli: SATA drives have different transfer speed.
269 * dsa-check-edac: add.
271 -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
273 dsa-nagios-checks (98) unstable; urgency=low
275 * Add dsa-check-dchroots-current.
277 -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
279 dsa-nagios-checks (97) unstable; urgency=low
282 * Update dsa-check-mq-connection to actually work
285 * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
286 * dsa-check-config: Update for new TLS_CACERT config.
288 -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
290 dsa-nagios-checks (96) unstable; urgency=low
293 * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
294 Allow supplying the nameservers to start recursion at (per zone).
295 This is useful for reverse zones of RFC1918 space.
296 * dsa-check-bacula: exit status fix.
297 * dsa-check-hpacucli:
298 - support filtering controllers.
299 - add an option to accept no-controllers as an OK state.
300 * remove weak keys check
301 * dsa-check-dnssec-delegation
302 - handle zones with no keys that have the SEP bit.
303 - warn on all domains where parent has a non-empty DS bit that does
304 not match ours, even if we did not expect it to have one at all.
305 * dsa-check-zone-rrsig-expiration-many:
306 - expect dnssec by default now.
307 * dsa-check-zone-rrsig-expiration:
308 - in the OK message, clarify we only check sigs at the zone apex.
309 * dsa-check-dnssec-delegation:
310 - accept any ds/dnskey combination whose intersection is not empty.
311 (previously we required them to match exactly.)
314 * dsa-check-mq-connection:
315 Check that all messages have been consumed and that there is an active
317 * kill some lintian warnings
319 -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
321 dsa-nagios-checks (95) unstable; urgency=low
323 * dsa-check-running-kernel: Try to fix zcat kernel case.
325 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
327 dsa-nagios-checks (94) unstable; urgency=low
330 * Start new changelog
333 * dsa-check-packages: work better with weird multi-arch cases.
334 * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
335 * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
336 all before comparing.
339 * Changed according to gitlog without corresponding debian/changelog entry:
341 - dsa-check-filesystems
342 - dsa-check-running-kernel
344 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
346 dsa-nagios-checks (93) unstable; urgency=low
349 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
350 coding /proc in order to match procfs in chroots too.
351 * dsa-update-apt-status: send the cron output to syslog rather than email
354 * dsa-check-msa-eventlog: Add --verbose switch to show info level
356 * add dsa-check-crl-expire.
357 * rename checks/dsa-check-backuppg.conf.sample ->
358 etc/dsa-check-backuppg.conf.sample.
359 * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
360 * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
361 at least for the "primary" arch. Does not really handle multi-arch
362 packages, but it makes things work again for now.
363 * dsa-check-packages: A better multi-arch capable version.
364 * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
365 * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
367 * dsa-check-hpasm: Typo fix.
370 * dsa-check-udldap-freshness: check new last_update.trace if it
371 exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
372 * dsa-check-statusfile: Complain if there is no extended information
373 * add dsa-check-filesystems (only checks ext at the moment)
376 * dsa-check-soas: Add --no-soa-ns flag.
378 [ Martin Zobel-Helas ]
379 * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
381 -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
383 dsa-nagios-checks (92.1) unstable; urgency=low
385 * Fix dsa-update-unowned-file-status cronjob entry more.
387 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
389 dsa-nagios-checks (92) unstable; urgency=low
391 * Fix dsa-update-unowned-file-status cronjob entry.
393 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
395 dsa-nagios-checks (91) unstable; urgency=low
398 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
400 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
401 properly timeout long checks.
402 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
403 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
405 * dsa-check-soas: support supplying an IP address for additional nameservers
409 * Make the unowned files check skip /proc.
410 * Limit the number of unowned files we register in the state file to 40.
413 * Rewrite unowned files check into something that writes proper
414 nagios status files and behaves in a nice and sane way.
416 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
418 dsa-nagios-checks (90) unstable; urgency=low
422 - document watermark default
423 - fix off-by-one in output
424 * dsa-check-backuppg:
425 - ignore regular files in pg backup's root directory if they are still
429 * dsa-check-log-age-loghost
430 - allow minus (-) in hostnames.
433 * Add event_handler to restart services
434 * Add dsa-check-raid-megactl for awkward PeRC controllers
436 [ Martin Zobel-Helas ]
437 * add rudimentary check for unowned files
439 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
441 dsa-nagios-checks (89) unstable; urgency=low
443 * dsa-check-running-kernel: kFreeBSD support.
444 * Add dsa-check-entropy.
446 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
448 dsa-nagios-checks (88) unstable; urgency=low
451 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
452 to '3.0GBPS, Unknown'.
453 - accept 6.0Gbps for SAS disks.
454 - add --ignore-transfer-speed option.
455 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
457 * Add dsa-check-hpacucli-enclosure.
458 * dsa-check-running-kernel:
459 - check if 'strings' is installed and complain nicely if it isn't instead
460 of falling over. [Uli Martens]
461 - Make the check work with Ubuntu's kernel names (Alexander
463 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
464 * Add dsa-check-port-closed.
465 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
467 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
468 that do not say 'Yes' in the present-line.
469 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
470 in addition to /var/lib/misc/thishost/passwd.tdb.
471 * Add dsa-check-resolver.
473 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
475 dsa-nagios-checks (87) unstable; urgency=low
478 * dsa-check-running-kernel:
479 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
480 - Handle cases where a meta package depends on a list of packages
481 (such as image and module package).
484 * dsa-check-apt-status: it's not an error to exit when we don't need to run
485 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
488 * Add checks/dsa-check-backuppg.
489 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
490 * Add dsa-check-log-age-loghost.
491 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
492 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
494 [ Martin Zobel-Helas ]
495 * Add checks/dsa-checks-file.
497 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
499 dsa-nagios-checks (86) unstable; urgency=low
502 * Add dsa-check-raid-megaraid.
503 * make samhain check go WARN, not CRITICAL.
506 * Add dsa-check-uptime
508 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
510 dsa-nagios-checks (85) unstable; urgency=low
513 * dsa-update-apt-status: Fix bashism by making it a bash script
515 * dsa-check-hpasm: Not all things where a temperature can be measured
516 might be installed (e.g. a second CPU). Don't do numeric computations
517 on a "-" instead of numbers then.
518 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
519 then non-redundant power supply will not be a warning state.
520 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
521 then non-redundant fans will not be a warning state.
522 * Add dsa-check-msa-eventlog.
523 * add dsa-check-zone-rrsig-expiration (therefore recommend
524 libnet-dns-sec-perl).
525 * add dsa-check-zone-rrsig-expiration-many.
526 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
527 controller with a battery: "ZMM Optimal" is the way it says "optimal".
528 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
529 /root/.ssh/authorized_keys.
530 * add dsa-check-dnssec-delegation.
531 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
533 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
534 and /var/lib/misc/userkeys, not just the first. (Also doesn't
535 blow up if a file is empty.)
537 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
539 dsa-nagios-checks (84) unstable; urgency=low
542 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
543 better (do not reference undefined values, properly exit with UNKNOWN).
544 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
545 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
546 wrapper) in the authorized_keys files. Such entries accept all
547 backup-manager entries for their host, but they do not require one.
548 As such we can just put all the hosts in the authkeys file regardless of
549 whether we actually have backups configured for them.
552 * New check: dsa-check-hpasm
553 * Release for new check
555 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
557 dsa-nagios-checks (83) stable; urgency=low
559 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
562 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
564 dsa-nagios-checks (82) stable; urgency=low
566 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
568 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
570 dsa-nagios-checks (81) stable; urgency=low
572 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
573 it found degraded raid arrays. Handle this correctly.
575 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
577 dsa-nagios-checks (80) stable; urgency=low
579 * dsa-check-packages: In the short overview say "obs/loc" instead of
580 just "obs" for local or obsolete packages.
581 * dsa-update-apt-status: Introduce -f switch.
583 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
585 dsa-nagios-checks (79) stable; urgency=low
587 * dsa-check-running-kernel: Correctly check *candidate* version
588 of kernel metapackage for unsatisfied depends, not the latest
589 metapackage (which might come from a non-default source).
591 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
593 dsa-nagios-checks (78) stable; urgency=low
595 * dsa-check-raid-aacraid: tmp directory in /tmp,
596 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
599 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
601 dsa-nagios-checks (77) stable; urgency=low
603 * Add checks/dsa-check-raid-aacraid.
605 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
607 dsa-nagios-checks (76) stable; urgency=low
609 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
611 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
613 dsa-nagios-checks (75) stable; urgency=low
615 * dsa-check-packages: Support ignore directories.
616 * debian/control: Fix dup word in description.
618 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
620 dsa-nagios-checks (74) stable; urgency=low
624 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
626 dsa-nagios-checks (73) stable; urgency=low
628 * Er, new test needs to be executable
630 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
632 dsa-nagios-checks (72) stable; urgency=low
634 * Generalize puppet file age check and remove old one
636 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
638 dsa-nagios-checks (71) stable; urgency=low
640 * Update the kernel check to not complain when we can't trace back to a meta
641 package name - this generally indicates a custom kernel that we're running
644 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
646 dsa-nagios-checks (70) XXstable; urgency=low
648 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
649 * Only run weak keys check if there is no prior weak key status.
650 * dsa-check-hpacucli: Slots need not be all numeric.
651 * dsa-check-hpacucli: Spares can be active.
652 * dsa-check-hpacucli: And SAS can be E too.
654 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
656 dsa-nagios-checks (69) unstable; urgency=low
658 * Rename to dsa-nagios-checks.
659 * Replaces/Conflicts dsa-nagios-nrpe-config.
660 * Update description.
661 * No longer install nrpe_dsa.cfg.
662 * Move files into specific directories in source.
664 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
666 dsa-nagios-nrpe-config (68) unstable; urgency=low
668 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
671 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
673 dsa-nagios-nrpe-config (67) unstable; urgency=low
675 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
676 long text for obs(ign).
678 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
680 dsa-nagios-nrpe-config (66) unstable; urgency=low
682 * Add dsa-check-packages
683 * Make apt-status-check use dsa-check-packages.
684 * And install obsolete-packages-ignore into etc/nagios.
686 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
688 dsa-nagios-nrpe-config (65) unstable; urgency=low
692 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
694 dsa-nagios-nrpe-config (64) unstable; urgency=low
696 * dsa-check-mirrorsync: make it work in embedded perl again.
698 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
700 dsa-nagios-nrpe-config (63) unstable; urgency=low
702 * dsa-check-mirrorsync: print help if additional args are given (we don't
705 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
707 dsa-nagios-nrpe-config (62) unstable; urgency=low
709 * Add check_securitymirror by formorer.
711 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
713 dsa-nagios-nrpe-config (61) unstable; urgency=low
715 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
716 entry is in there. If it doesn't exist that's also good.
718 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
720 dsa-nagios-nrpe-config (60) unstable; urgency=low
722 * Add dsa-check-raid-areca.
724 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
726 dsa-nagios-nrpe-config (59) unstable; urgency=low
728 * apt-status-check: Ignore stderr during apt-get update.
730 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
732 dsa-nagios-nrpe-config (58) unstable; urgency=low
734 * Rename dsa-check-da-in-aliases to dsa-check-config.
735 * dsa-check-config: check if ldap.conf is configured correctly.
737 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
739 dsa-nagios-nrpe-config (57) unstable; urgency=low
741 * dsa-check-hpacucli: Do not inspect drives in detail when they are
742 listed as Failed in the overview already.
744 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
746 dsa-nagios-nrpe-config (56) unstable; urgency=low
748 * fix dsa-check-samhain.
749 sudo is not in $PATH.
751 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
753 dsa-nagios-nrpe-config (55) unstable; urgency=low
755 * And another one, weasel should sleep.
757 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
759 dsa-nagios-nrpe-config (54) unstable; urgency=low
761 * dsa-check-dabackup-server fixes.
763 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
765 dsa-nagios-nrpe-config (53) unstable; urgency=low
767 * Add dsa-check-dabackup-server.
769 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
771 dsa-nagios-nrpe-config (52) unstable; urgency=low
773 * The nagios _check_ package should probably not be the one that
774 depends on the stuff we want on most or all hosts, thus removing
775 dependency on samhain, which should probably get pulled in via
778 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
780 dsa-nagios-nrpe-config (51) unstable; urgency=low
782 * Add check for samhain.
784 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
786 dsa-nagios-nrpe-config (50) unstable; urgency=low
788 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
790 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
792 dsa-nagios-nrpe-config (49) unstable; urgency=low
794 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
796 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
798 dsa-nagios-nrpe-config (48) unstable; urgency=low
800 * Don't just print the sudoers lines to stdout, tell the admin to add them
803 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
805 dsa-nagios-nrpe-config (47) unstable; urgency=low
807 * dsa-check-hpacucli: Check transfer speed of disks.
809 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
811 dsa-nagios-nrpe-config (46) unstable; urgency=low
813 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
814 * Move script calls from cron.daily to cron.d @daily and @reboot.
815 * Introduce hourly runs for dsa-update-apt-status that happen if the system
816 changed in the meantime, that is if /var/lib/dpkg/status or
817 /var/cache/apt/pkgcache.bin are newer than the status file.
818 Also run if the status file does not exist, or if the last apt-get update
819 call failed, or if the last run was more than a day ago.
820 * No longer do @daily runs of dsa-update-apt-status
822 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
824 dsa-nagios-nrpe-config (45) unstable; urgency=low
826 * Add apt upgrades check.
828 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
830 dsa-nagios-nrpe-config (44) unstable; urgency=low
832 * Fix ssh-dss detection. It need not be at the start of a line
833 (think >from="1.2.3.4" ssh-dss< ...).
835 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
837 dsa-nagios-nrpe-config (43) unstable; urgency=low
841 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
843 dsa-nagios-nrpe-config (42) unstable; urgency=low
845 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
846 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
847 * Run weak-ssh-keys-check on install.
849 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
851 dsa-nagios-nrpe-config (41) unstable; urgency=low
853 * Add dsa-check-statusfile.
854 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
855 libberkeleydb-perl and dsa-ssh-weak-keys now.
856 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
858 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
860 dsa-nagios-nrpe-config (40) unstable; urgency=low
862 * Teach dsa-check-hpacucli about rebuilding.
864 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
866 dsa-nagios-nrpe-config (39) unstable; urgency=low
868 * Add dsa-check-hpacucli.
871 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
873 dsa-nagios-nrpe-config (38) unstable; urgency=low
875 * Try harder to find version string.
877 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
879 dsa-nagios-nrpe-config (37) unstable; urgency=low
881 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
882 * Depend on binutils for string(1).
884 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
886 dsa-nagios-nrpe-config (36) unstable; urgency=low
888 * Add dsa-check-running-kernel
890 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
892 dsa-nagios-nrpe-config (35) unstable; urgency=low
896 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
898 dsa-nagios-nrpe-config (34) unstable; urgency=low
900 * dsa-check-raid-3ware
902 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
904 dsa-nagios-nrpe-config (33) unstable; urgency=low
906 * Add dsa-check-raid-dac960
908 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
910 dsa-nagios-nrpe-config (32) unstable; urgency=low
912 * Add dsa-check-udldap-freshness.
914 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
916 dsa-nagios-nrpe-config (31) unstable; urgency=low
918 * dsa-check-dabackup: Use last time's log file if backup is currently running.
920 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
922 dsa-nagios-nrpe-config (30) unstable; urgency=low
924 * dsa-check-raid-sw: cleaner output.
926 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
928 dsa-nagios-nrpe-config (29) unstable; urgency=low
930 * dsa-check-dabackup: terser output.
932 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
934 dsa-nagios-nrpe-config (28) unstable; urgency=low
936 * dsa-check-dabackup: ignore .bak files in confdir.
938 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
940 dsa-nagios-nrpe-config (27) unstable; urgency=low
942 * Change OK text when da-backup not installed.
944 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
946 dsa-nagios-nrpe-config (26) unstable; urgency=low
948 * dsa-check-dabackup: Warn if installed but no backups configured.
950 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
952 dsa-nagios-nrpe-config (25) unstable; urgency=low
954 * Install dsa-check-dabackup
956 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
958 dsa-nagios-nrpe-config (24) unstable; urgency=low
960 * Check for dsa-check-backup sudoers entry
962 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
964 dsa-nagios-nrpe-config (23) unstable; urgency=low
966 * Add dsa-check-dabackup
968 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
970 dsa-nagios-nrpe-config (22) unstable; urgency=low
972 * Add a very easy dsa-check-da-in-aliases.
974 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
976 dsa-nagios-nrpe-config (21) unstable; urgency=low
978 * Add dsa-check-raid-sw.
980 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
982 dsa-nagios-nrpe-config (20) unstable; urgency=low
984 * Do away with a new changelog entry and version for every build of the
985 package - it floods us with useless commit mails - and just
986 increase the version to $TIMESTAMP in the build area.
988 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
990 dsa-nagios-nrpe-config (1) unstable; urgency=low
994 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200