1 dsa-nagios-checks (9X) Xnstable; urgency=low
5 - document watermark default
6 - fix off-by-one in output
8 - ignore regular files in pg backup's root directory if they are still
12 * dsa-check-log-age-loghost
13 - allow minus (-) in hostnames.
16 * Add event_handler to restart services
17 * Add dsa-check-raid-megactl for awkward PeRC controllers
19 -- Peter Palfrader <weasel@debian.org> Sat, 24 Dec 2011 16:25:32 +0100
21 dsa-nagios-checks (89) unstable; urgency=low
23 * dsa-check-running-kernel: kFreeBSD support.
24 * Add dsa-check-entropy.
26 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
28 dsa-nagios-checks (88) unstable; urgency=low
31 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
32 to '3.0GBPS, Unknown'.
33 - accept 6.0Gbps for SAS disks.
34 - add --ignore-transfer-speed option.
35 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
37 * Add dsa-check-hpacucli-enclosure.
38 * dsa-check-running-kernel:
39 - check if 'strings' is installed and complain nicely if it isn't instead
40 of falling over. [Uli Martens]
41 - Make the check work with Ubuntu's kernel names (Alexander
43 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
44 * Add dsa-check-port-closed.
45 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
47 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
48 that do not say 'Yes' in the present-line.
49 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
50 in addition to /var/lib/misc/thishost/passwd.tdb.
51 * Add dsa-check-resolver.
53 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
55 dsa-nagios-checks (87) unstable; urgency=low
58 * dsa-check-running-kernel:
59 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
60 - Handle cases where a meta package depends on a list of packages
61 (such as image and module package).
64 * dsa-check-apt-status: it's not an error to exit when we don't need to run
65 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
68 * Add checks/dsa-check-backuppg.
69 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
70 * Add dsa-check-log-age-loghost.
71 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
72 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
74 [ Martin Zobel-Helas ]
75 * Add checks/dsa-checks-file.
77 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
79 dsa-nagios-checks (86) unstable; urgency=low
82 * Add dsa-check-raid-megaraid.
83 * make samhain check go WARN, not CRITICAL.
86 * Add dsa-check-uptime
88 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
90 dsa-nagios-checks (85) unstable; urgency=low
93 * dsa-update-apt-status: Fix bashism by making it a bash script
95 * dsa-check-hpasm: Not all things where a temperature can be measured
96 might be installed (e.g. a second CPU). Don't do numeric computations
97 on a "-" instead of numbers then.
98 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
99 then non-redundant power supply will not be a warning state.
100 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
101 then non-redundant fans will not be a warning state.
102 * Add dsa-check-msa-eventlog.
103 * add dsa-check-zone-rrsig-expiration (therefore recommend
104 libnet-dns-sec-perl).
105 * add dsa-check-zone-rrsig-expiration-many.
106 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
107 controller with a battery: "ZMM Optimal" is the way it says "optimal".
108 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
109 /root/.ssh/authorized_keys.
110 * add dsa-check-dnssec-delegation.
111 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
113 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
114 and /var/lib/misc/userkeys, not just the first. (Also doesn't
115 blow up if a file is empty.)
117 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
119 dsa-nagios-checks (84) unstable; urgency=low
122 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
123 better (do not reference undefined values, properly exit with UNKNOWN).
124 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
125 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
126 wrapper) in the authorized_keys files. Such entries accept all
127 backup-manager entries for their host, but they do not require one.
128 As such we can just put all the hosts in the authkeys file regardless of
129 whether we actually have backups configured for them.
132 * New check: dsa-check-hpasm
133 * Release for new check
135 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
137 dsa-nagios-checks (83) stable; urgency=low
139 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
142 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
144 dsa-nagios-checks (82) stable; urgency=low
146 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
148 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
150 dsa-nagios-checks (81) stable; urgency=low
152 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
153 it found degraded raid arrays. Handle this correctly.
155 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
157 dsa-nagios-checks (80) stable; urgency=low
159 * dsa-check-packages: In the short overview say "obs/loc" instead of
160 just "obs" for local or obsolete packages.
161 * dsa-update-apt-status: Introduce -f switch.
163 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
165 dsa-nagios-checks (79) stable; urgency=low
167 * dsa-check-running-kernel: Correctly check *candidate* version
168 of kernel metapackage for unsatisfied depends, not the latest
169 metapackage (which might come from a non-default source).
171 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
173 dsa-nagios-checks (78) stable; urgency=low
175 * dsa-check-raid-aacraid: tmp directory in /tmp,
176 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
179 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
181 dsa-nagios-checks (77) stable; urgency=low
183 * Add checks/dsa-check-raid-aacraid.
185 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
187 dsa-nagios-checks (76) stable; urgency=low
189 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
191 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
193 dsa-nagios-checks (75) stable; urgency=low
195 * dsa-check-packages: Support ignore directories.
196 * debian/control: Fix dup word in description.
198 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
200 dsa-nagios-checks (74) stable; urgency=low
204 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
206 dsa-nagios-checks (73) stable; urgency=low
208 * Er, new test needs to be executable
210 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
212 dsa-nagios-checks (72) stable; urgency=low
214 * Generalize puppet file age check and remove old one
216 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
218 dsa-nagios-checks (71) stable; urgency=low
220 * Update the kernel check to not complain when we can't trace back to a meta
221 package name - this generally indicates a custom kernel that we're running
224 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
226 dsa-nagios-checks (70) XXstable; urgency=low
228 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
229 * Only run weak keys check if there is no prior weak key status.
230 * dsa-check-hpacucli: Slots need not be all numeric.
231 * dsa-check-hpacucli: Spares can be active.
232 * dsa-check-hpacucli: And SAS can be E too.
234 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
236 dsa-nagios-checks (69) unstable; urgency=low
238 * Rename to dsa-nagios-checks.
239 * Replaces/Conflicts dsa-nagios-nrpe-config.
240 * Update description.
241 * No longer install nrpe_dsa.cfg.
242 * Move files into specific directories in source.
244 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
246 dsa-nagios-nrpe-config (68) unstable; urgency=low
248 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
251 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
253 dsa-nagios-nrpe-config (67) unstable; urgency=low
255 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
256 long text for obs(ign).
258 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
260 dsa-nagios-nrpe-config (66) unstable; urgency=low
262 * Add dsa-check-packages
263 * Make apt-status-check use dsa-check-packages.
264 * And install obsolete-packages-ignore into etc/nagios.
266 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
268 dsa-nagios-nrpe-config (65) unstable; urgency=low
272 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
274 dsa-nagios-nrpe-config (64) unstable; urgency=low
276 * dsa-check-mirrorsync: make it work in embedded perl again.
278 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
280 dsa-nagios-nrpe-config (63) unstable; urgency=low
282 * dsa-check-mirrorsync: print help if additional args are given (we don't
285 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
287 dsa-nagios-nrpe-config (62) unstable; urgency=low
289 * Add check_securitymirror by formorer.
291 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
293 dsa-nagios-nrpe-config (61) unstable; urgency=low
295 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
296 entry is in there. If it doesn't exist that's also good.
298 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
300 dsa-nagios-nrpe-config (60) unstable; urgency=low
302 * Add dsa-check-raid-areca.
304 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
306 dsa-nagios-nrpe-config (59) unstable; urgency=low
308 * apt-status-check: Ignore stderr during apt-get update.
310 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
312 dsa-nagios-nrpe-config (58) unstable; urgency=low
314 * Rename dsa-check-da-in-aliases to dsa-check-config.
315 * dsa-check-config: check if ldap.conf is configured correctly.
317 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
319 dsa-nagios-nrpe-config (57) unstable; urgency=low
321 * dsa-check-hpacucli: Do not inspect drives in detail when they are
322 listed as Failed in the overview already.
324 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
326 dsa-nagios-nrpe-config (56) unstable; urgency=low
328 * fix dsa-check-samhain.
329 sudo is not in $PATH.
331 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
333 dsa-nagios-nrpe-config (55) unstable; urgency=low
335 * And another one, weasel should sleep.
337 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
339 dsa-nagios-nrpe-config (54) unstable; urgency=low
341 * dsa-check-dabackup-server fixes.
343 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
345 dsa-nagios-nrpe-config (53) unstable; urgency=low
347 * Add dsa-check-dabackup-server.
349 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
351 dsa-nagios-nrpe-config (52) unstable; urgency=low
353 * The nagios _check_ package should probably not be the one that
354 depends on the stuff we want on most or all hosts, thus removing
355 dependency on samhain, which should probably get pulled in via
358 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
360 dsa-nagios-nrpe-config (51) unstable; urgency=low
362 * Add check for samhain.
364 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
366 dsa-nagios-nrpe-config (50) unstable; urgency=low
368 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
370 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
372 dsa-nagios-nrpe-config (49) unstable; urgency=low
374 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
376 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
378 dsa-nagios-nrpe-config (48) unstable; urgency=low
380 * Don't just print the sudoers lines to stdout, tell the admin to add them
383 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
385 dsa-nagios-nrpe-config (47) unstable; urgency=low
387 * dsa-check-hpacucli: Check transfer speed of disks.
389 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
391 dsa-nagios-nrpe-config (46) unstable; urgency=low
393 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
394 * Move script calls from cron.daily to cron.d @daily and @reboot.
395 * Introduce hourly runs for dsa-update-apt-status that happen if the system
396 changed in the meantime, that is if /var/lib/dpkg/status or
397 /var/cache/apt/pkgcache.bin are newer than the status file.
398 Also run if the status file does not exist, or if the last apt-get update
399 call failed, or if the last run was more than a day ago.
400 * No longer do @daily runs of dsa-update-apt-status
402 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
404 dsa-nagios-nrpe-config (45) unstable; urgency=low
406 * Add apt upgrades check.
408 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
410 dsa-nagios-nrpe-config (44) unstable; urgency=low
412 * Fix ssh-dss detection. It need not be at the start of a line
413 (think >from="1.2.3.4" ssh-dss< ...).
415 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
417 dsa-nagios-nrpe-config (43) unstable; urgency=low
421 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
423 dsa-nagios-nrpe-config (42) unstable; urgency=low
425 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
426 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
427 * Run weak-ssh-keys-check on install.
429 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
431 dsa-nagios-nrpe-config (41) unstable; urgency=low
433 * Add dsa-check-statusfile.
434 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
435 libberkeleydb-perl and dsa-ssh-weak-keys now.
436 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
438 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
440 dsa-nagios-nrpe-config (40) unstable; urgency=low
442 * Teach dsa-check-hpacucli about rebuilding.
444 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
446 dsa-nagios-nrpe-config (39) unstable; urgency=low
448 * Add dsa-check-hpacucli.
451 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
453 dsa-nagios-nrpe-config (38) unstable; urgency=low
455 * Try harder to find version string.
457 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
459 dsa-nagios-nrpe-config (37) unstable; urgency=low
461 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
462 * Depend on binutils for string(1).
464 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
466 dsa-nagios-nrpe-config (36) unstable; urgency=low
468 * Add dsa-check-running-kernel
470 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
472 dsa-nagios-nrpe-config (35) unstable; urgency=low
476 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
478 dsa-nagios-nrpe-config (34) unstable; urgency=low
480 * dsa-check-raid-3ware
482 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
484 dsa-nagios-nrpe-config (33) unstable; urgency=low
486 * Add dsa-check-raid-dac960
488 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
490 dsa-nagios-nrpe-config (32) unstable; urgency=low
492 * Add dsa-check-udldap-freshness.
494 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
496 dsa-nagios-nrpe-config (31) unstable; urgency=low
498 * dsa-check-dabackup: Use last time's log file if backup is currently running.
500 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
502 dsa-nagios-nrpe-config (30) unstable; urgency=low
504 * dsa-check-raid-sw: cleaner output.
506 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
508 dsa-nagios-nrpe-config (29) unstable; urgency=low
510 * dsa-check-dabackup: terser output.
512 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
514 dsa-nagios-nrpe-config (28) unstable; urgency=low
516 * dsa-check-dabackup: ignore .bak files in confdir.
518 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
520 dsa-nagios-nrpe-config (27) unstable; urgency=low
522 * Change OK text when da-backup not installed.
524 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
526 dsa-nagios-nrpe-config (26) unstable; urgency=low
528 * dsa-check-dabackup: Warn if installed but no backups configured.
530 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
532 dsa-nagios-nrpe-config (25) unstable; urgency=low
534 * Install dsa-check-dabackup
536 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
538 dsa-nagios-nrpe-config (24) unstable; urgency=low
540 * Check for dsa-check-backup sudoers entry
542 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
544 dsa-nagios-nrpe-config (23) unstable; urgency=low
546 * Add dsa-check-dabackup
548 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
550 dsa-nagios-nrpe-config (22) unstable; urgency=low
552 * Add a very easy dsa-check-da-in-aliases.
554 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
556 dsa-nagios-nrpe-config (21) unstable; urgency=low
558 * Add dsa-check-raid-sw.
560 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
562 dsa-nagios-nrpe-config (20) unstable; urgency=low
564 * Do away with a new changelog entry and version for every build of the
565 package - it floods us with useless commit mails - and just
566 increase the version to $TIMESTAMP in the build area.
568 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
570 dsa-nagios-nrpe-config (1) unstable; urgency=low
574 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200