address: 193.201.200.129
parents: gw-ubcece
hostgroups: layer3-infrastructure
+ gw-sakura:
+ address: 133.242.99.65
+ parents: gw-ubcece
+ hostgroups: layer3-infrastructure
gw-sanger:
address: 193.62.202.20
parents: gw-ubcece
address: 195.20.242.124
parents: schumann
hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
- geo3:
- address: 195.20.242.125
- parents: schumann
- hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
soler:
address: 195.20.242.126
parents: schumann
pettersson:
address: 130.239.18.123
parents: gw-accumu
- hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
+ hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs, sw-raid
praetorius:
address: 130.239.18.121
parents: gw-accumu
mips-aql-01:
address: 141.170.6.149
parents: gw-aql
- hostgroups: computers, buildd, wheezy
+ hostgroups: computers, buildd, wheezy, nfs-client
mips-aql-02:
address: 141.170.6.150
parents: gw-aql
- hostgroups: computers, buildd, wheezy
+ hostgroups: computers, buildd, wheezy, nfs-client
+ minkus:
+ address: 141.170.6.151
+ parents: gw-aql
+ hostgroups: computers, porterbox, jessie, nfs-client
mipsel-aql-01:
address: 141.170.6.152
parents: gw-aql
arm-arm-01:
address: 217.140.96.58
parents: gw-arm
- hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
+ hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
arm-arm-02:
address: 217.140.96.59
parents: gw-arm
- hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
+ hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
harris:
address: 217.140.96.66
parents: gw-arm
oyens:
address: 5.153.231.26
parents: ganeti-bytemark
- hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
+ hostgroups: computers, kvmdomains, jessie, apache2-hosts, openstack-controller, apache-https, broken_mq
barriere:
address: 5.153.231.27
parents: ganeti-bytemark
address: 5.153.231.36
parents: ganeti-bytemark
hostgroups: computers, service, kvmdomains, jessie
+ fede:
+ address: 5.153.231.37
+ hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
+ sor:
+ address: 5.153.231.38
+ parents: ganeti-bytemark
+ hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, autofs, nfs-client
# }}}
# {{{ gw-c3sl
santoro:
loghost-grnet-01:
address: 194.177.211.200
parents: gw-grnet
- hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
+ hostgroups: computers, service, kvmdomains, jessie, hassrvfs
+ geo3:
+ address: 194.177.211.201
+ parents: gw-grnet
+ hostgroups: computers, service, bind9-hosts, kvmdomains, jessie
+ cgi-grnet-01:
+ address: 194.177.211.202
+ parents: gw-grnet
+ hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts
# }}}
# {{{ gw-isc
schein:
ball:
address: 82.195.75.70
parents: gw-man-da
- hostgroups: computers, buildd, hasbootfs, wheezy
+ hostgroups: computers, buildd, hasbootfs, wheezy, sw-raid
# bartok TODO
czerny:
address: 82.195.75.109
stockhausen:
address: 82.195.75.108
parents: ganeti3
- hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
+ hostgroups: computers, service, kvmdomains, jessie, acpid-hosts
ganeti3:
address: 82.195.75.111
parents: gw-man-da
parry:
address: 140.211.15.153
parents: gw-osuosl
- hostgroups: computers, wheezy, buildd, hassrvfs
+ hostgroups: computers, wheezy, buildd, hassrvfs, sw-raid
partch:
address: 140.211.15.152
parents: gw-osuosl
- hostgroups: computers, wheezy, hassrvfs, porterbox
+ hostgroups: computers, wheezy, hassrvfs, porterbox, sw-raid
rietz:
address: 140.211.166.43
parents: gw-osuosl
villa:
address: 212.211.132.32
parents: gw-scanplus-villa
- hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, xinetd-hosts, jessie, security_mirror, acpid-hosts
# }}}
# {{{ gw-sil
eder:
eberlin:
address: 86.59.118.155
parents: gw-sil
- hostgroups: computers, buildd, wheezy
+ hostgroups: computers, buildd, wheezy, sw-raid
# }}}
# {{{ gw-ubcece
sw-ubcece:
prokofiev:
address: 143.106.167.147
parents: gw-unicamp
- hostgroups: computers, jessie, acpid-hosts, service
+ hostgroups: computers, jessie, service
powerpc-unicamp-01:
address: 143.106.167.149
parents: prokofiev
hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
+ ppc64el-unicamp-01:
+ address: 143.106.167.135
+ parents: prokofiev
+ hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie
# }}}
# {{{ gw-utwente
klecker:
parents: gw-zivit
hostgroups: computers, porterbox, hassrvfs, wheezy
# }}}
+ # {{{ gw-sakura
+ setoguchi:
+ address: 133.242.99.74
+ parents: gw-sakura
+ hostgroups: computers, service, wheezy, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, security_mirror, acpid-hosts
# }}}
# {{{ ############################# host groups #############################
computers:
alias: computers
private: 1
+ extinfo-icon_image: base/debian.png
+ extinfo-icon_image_alt: Debian GNU/Linux
+ extinfo-notes_url: https://db.debian.org/machines.cgi?host=%s
layer2-infrastructure:
alias: Layer 2 Devices
extinfo-icon_image: base/switch40.png
freebsd:
alias: freebsd
private: 1
+ extinfo-icon_image_alt: Debian GNU/kFreeBSD
armhf:
alias: armhf
private: 1
porterbox:
alias: developer accessible porter machines
- extinfo-icon_image: base/debian.png
- extinfo-icon_image_alt: Debian GNU/Linux
- extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
service:
alias: machines running services
- extinfo-icon_image: base/debian.png
- extinfo-icon_image_alt: Debian GNU/Linux
- extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
buildd:
alias: buildd systems
- extinfo-icon_image: base/debian.png
- extinfo-icon_image_alt: Debian GNU/Linux
- extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
general:
alias: general purpose developer accessible machines
- extinfo-icon_image: base/debian.png
- extinfo-icon_image_alt: Debian GNU/Linux
- extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
dl380:
alias: HP DL380 hosts
apache2-hosts:
alias: hosts running apache2
private: 1
- jetty-hosts:
- alias: hosts running jetty
- private: 1
bind9-hosts:
alias: hosts running bind9
private: 1
name: processes - total
nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
hostgroups: computers
+ excludehosts: prokofiev
+ -
+ name: processes - total
+ nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
+ hosts: prokofiev
-
name: swap usage - percent
nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
hostgroups: computers
normal_check_interval: 60
retry_check_interval: 15
+ -
+ name: upgraded libraries
+ servicegroups: security
+ nrpe: "sudo /usr/local/sbin/dsa-check-libs"
+ #nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs"
+ hostgroups: computers
+ excludehostgroups: freebsd
+ normal_check_interval: 60
+ retry_check_interval: 15
+ notification_interval: 10080
-
name: installed firewall
nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
name: process - syslog-ng
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
hostgroups: computers
- excludehostgroups: freebsd
+ excludehostgroups: freebsd, jessie
-
name: process - syslog-ng
nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
hostgroups: freebsd
+ -
+ name: process - syslog-ng
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
+ hostgroups: jessie
-
name: remote logging on lotti
###
-
name: process - xinetd
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
hostgroups: xinetd-hosts
-
name: unwanted process - xinetd
servicegroups: raid
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
hostgroups: sw-raid
- hostgroups: jessie
+ excludehostgroups: wheezy
-
name: RAID - sw raid
servicegroups: raid
nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
hostgroups: sw-raid
+ -
+ name: RAID - unexpected sw raid
+ servicegroups: raid
+ nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
+ hostgroups: computers
+ excludehostgroups: sw-raid
###
-
name: HW - hpacucli status
# {{{ DNS
-
name: process - named
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
hostgroups: bind9-hosts
-
name: network service - dns
hostgroups: openstack-controller
# }}}
# {{{ misc
+# -
+# Disable this check until logind and binfmt_misc issues are fixed
+# something unknown is triggering mount of binfmt_misc
+# https://bugs.debian.org/772700
+# name: system - all services running
+# nrpe: "/usr/bin/sudo /bin/systemctl is-system-running"
+# hostgroups: jessie
+ ###
-
name: process - rngd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'"
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
hosts: tchaikovsky
###
- -
- name: process - jetty - master
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
- hostgroups: jetty-hosts
- -
- name: process - jetty - worker
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
- hostgroups: jetty-hosts
- depends: process - jetty - master
- ###
-
name: process - debianqueued
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
projects / mirror / dsa-nagios.git / blobdiff