hostgroups: layer3-infrastructure
gw-ynic:
# really janet, because ynic is stupid about firewalling
- address: 146.97.71.46
+ address: 144.32.255.227
parents: gw-ubcece
hostgroups: layer3-infrastructure
gw-zivit:
mipsel-aql-01:
address: 141.170.6.152
parents: gw-aql
- hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
+ hostgroups: computers, buildd, buster, hassrvfs, hasbootfs, sw-raid
mipsel-aql-02:
address: 141.170.6.153
parents: gw-aql
arnold:
address: 217.140.96.57
parents: gw-arm
- hostgroups: computers, hasbootfs, hassrvfs, buildd, stretch, broken_mq
+ hostgroups: computers, hasbootfs, hassrvfs, buildd, buster, broken_mq
arm-arm-01:
address: 217.140.96.58
parents: gw-arm
arm-arm-04:
address: 217.140.96.61
parents: gw-arm
- hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
+ hostgroups: computers, hassrvfs, buildd, buster, broken_mq, sw-raid
harris:
address: 217.140.96.66
parents: gw-arm
hartmann:
address: 217.140.96.67
parents: gw-arm
- hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, buildd, broken_mq
+ hostgroups: computers, hasbootfs, hassrvfs, buster, armhf, buildd, broken_mq
hoiby:
address: 217.140.96.71
parents: gw-arm
lindsay:
address: 5.153.231.36
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, buster, autofs, nfs-client, systemd-timesyncd
sor:
address: 5.153.231.38
parents: ganeti-bytemark
address: 217.196.149.235
parents: gw-conova
hostgroups: notacomputer
- mirror-conova:
- address: 217.196.149.229
- parents: gw-conova
- hostgroups: computers, stretch, service, apache2-hosts
- mirror-conova-debian:
- address: 217.196.149.232
- hostgroups: secondary-IPs
- parents: mirror-conova
- mirror-conova-security:
- address: 217.196.149.233
- hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
- parents: mirror-conova
- mirror-conova-archive:
- address: 217.196.149.234
- hostgroups: secondary-IPs, rsyncd-hosts
- parents: mirror-conova
- mirror-conova-syncproxy4-eu:
- address: 217.196.149.237
- hostgroups: secondary-IPs, rsyncd-hosts, https-service
- parents: mirror-conova
arm-conova-01:
address: 217.196.149.230
address: 217.196.149.236
parents: ganeti-conova
hostgroups: computers, hassrvfs, porterbox, stretch
+
+ schmelzer:
+ address: 185.69.161.161
+ parents: gw-conova
+ hostgroups: computers, service, stretch, r540, manyprocesses, apache2-hosts, apache-https, systemd-timesyncd
+ schmelzer-debian:
+ address: 217.196.149.232
+ hostgroups: secondary-IPs
+ parents: schmelzer
+ schmelzer-security:
+ address: 217.196.149.233
+ hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
+ parents: schmelzer
+ schmelzer-archive:
+ address: 217.196.149.234
+ hostgroups: secondary-IPs, rsyncd-hosts
+ parents: schmelzer
+ schmelzer-syncproxy4-eu:
+ address: 217.196.149.237
+ hostgroups: secondary-IPs, rsyncd-hosts, https-service
+ parents: schmelzer
# }}}
# {{{ gw-csail
csail-node01:
x86-csail-01:
address: 128.31.0.50
parents: ganeti-csail
- hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
+ hostgroups: computers, buildd, hassrvfs, kvmdomains, buster, systemd-timesyncd
x86-csail-02:
address: 128.31.0.68
parents: ganeti-csail
czerny:
address: 82.195.75.109
parents: gw-manda
- hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
+ hostgroups: computers, service, dl380, acpid-hosts, stretch, manyprocesses
clementi:
address: 82.195.75.103
parents: gw-manda
- hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
+ hostgroups: computers, service, dl380, acpid-hosts, stretch, manyprocesses
manda-node03:
address: 82.195.75.69
parents: gw-manda
hostgroups: computers, service, stretch, r540, drbd-hosts, manyprocesses
bendel:
address: 82.195.75.100
- parents: ganeti3
- hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
+ parents: ganeti-manda
+ hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs, systemd-timesyncd
master:
address: 82.195.75.110
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload, systemd-timesyncd
vento:
address: 82.195.75.98
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim
- lully:
- address: 82.195.75.99
- parents: ganeti3
- hostgroups: computers, service, hasbootfs, kvmdomains, stretch, hasvarlogfs
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
draghi:
address: 82.195.75.106
- parents: ganeti3
- hostgroups: computers, service, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch
+ parents: ganeti-manda
+ hostgroups: computers, service, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch, systemd-timesyncd
geo1:
address: 82.195.75.105
- parents: ganeti3
- hostgroups: computers, service, bind9-hosts, kvmdomains, stretch
+ parents: ganeti-manda
+ hostgroups: computers, service, bind9-hosts, kvmdomains, buster, systemd-timesyncd
handel:
address: 82.195.75.104
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts, hassrvfs
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts, hassrvfs, systemd-timesyncd
kaufmann:
address: 82.195.75.107
- parents: ganeti3
- hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https
- ganeti3:
- address: 82.195.75.111
+ parents: ganeti-manda
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https, systemd-timesyncd
+ ganeti-manda:
+ address: 82.195.75.71
parents: gw-manda
hostgroups: notacomputer
wilder:
address: 82.195.75.112
- parents: ganeti3
- hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
+ parents: ganeti-manda
+ hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts, systemd-timesyncd
mailly:
address: 82.195.75.114
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
denis:
address: 82.195.75.91
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, stretch, bind9-hosts
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, stretch, bind9-hosts, systemd-timesyncd
vogler:
address: 82.195.75.92
- parents: ganeti3
- hostgroups: computers, service, kvmdomains, stretch
+ parents: ganeti-manda
+ hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
wolkenstein:
address: 82.195.75.65
- parents: ganeti3
- hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https
+ parents: ganeti-manda
+ hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https, systemd-timesyncd
mips-manda-01:
address: 82.195.75.66
parents: gw-manda
hostgroups: computers, buildd, stretch, hassrvfs
seger:
address: 82.195.75.93
- parents: ganeti3
- hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
+ parents: ganeti-manda
+ hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch, systemd-timesyncd
suchon:
address: 82.195.75.68
- parents: ganeti3
+ parents: ganeti-manda
hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
# }}}
# {{{ gw-marist
zani:
address: 148.100.88.22
parents: gw-marist
- hostgroups: computers, pybuildd, hassrvfs, stretch, incomingmailrelayed
+ hostgroups: computers, pybuildd, hassrvfs, buster, incomingmailrelayed
# }}}
# {{{ gw-osuosl
byrd:
address: 140.211.166.194
parents: gw-osuosl
hostgroups: computers, stretch, service, manyprocesses
+ loghost-osuosl-01:
+ address: 140.211.166.202
+ parents: pijper
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
+
pieta:
address: 140.211.166.195
parents: gw-osuosl
hostgroups: computers, stretch, service, manyprocesses
ppc64el-osuosl-01:
address: 140.211.166.196
- parents: pieta
- hostgroups: computers, hassrvfs, buildd, stretch
+ parents: pijper
+ hostgroups: computers, hassrvfs, buildd, buster
# }}}
# {{{ gw-sanger
sallinen:
mips-sil-01:
address: 86.59.118.146
parents: gw-sil
- hostgroups: computers, buildd, stretch, hassrvfs
+ hostgroups: computers, buildd, buster, hassrvfs
mipsel-sil-01:
address: 86.59.118.147
parents: gw-sil
address: 209.87.16.44
parents: ubc-gateway
hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, crazymanyprocesses
+ godard-pages:
+ address: 209.87.16.45
+ parents: godard
+ hostgroups: notacomputer
debussy:
address: 209.87.16.46
parents: ubc-gateway
hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
- kantuser:
- address: 209.87.16.47
- parents: ubc-gateway
- hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts
grabbe:
address: 209.87.16.48
parents: ubc-gateway
hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https
+ trabaci:
+ address: 209.87.16.49
+ parents: ubc-gateway
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
# }}}
# {{{ gw-umn
#saens:
address: 130.89.148.14
parents: klecker
hostgroups: secondary-IPs
+ smit:
+ address: 130.89.148.78
+ parents: gw-utwente
+ hostgroups: computers, service, stretch, r540, manyprocesses, incomingmailrelayed2025
# }}}
# {{{ gw-ynic
henze:
alias: Hosts running jessie
stretch:
alias: Hosts running stretch
+ buster:
+ alias: Hosts running buster
kvmdomains:
alias: Hosts that are KVM domains
-
name: process - bacula-dir
servicegroups: backup
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -f -c /etc/bacula/bacula-dir.conf'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -fP -c /etc/bacula/bacula-dir.conf'"
hosts: dinis
-
name: process - bacula-fd
runfrom: lotti
hostgroups: computers
-
- name: remote logging on lully
+ name: remote logging on loghost-grnet-01
remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
- runfrom: lully
+ runfrom: loghost-grnet-01
hostgroups: computers
-
- name: remote logging on loghost-grnet-01
+ name: remote logging on loghost-osuosl-01
remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
- runfrom: loghost-grnet-01
+ runfrom: loghost-osuosl-01
hostgroups: computers
# }}}
# {{{ base service
name: process - nrpe
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
hostgroups: computers
- excludehostgroups: stretch
+ excludehostgroups: stretch, buster
max_check_attempts: -1
depends: network service - nrpe
-
name: process - nrpe
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
- hostgroups: stretch
+ hostgroups: stretch, buster
max_check_attempts: -1
depends: network service - nrpe
###
-
name: unwanted process - rpc.statd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
- hostgroups: stretch
+ hostgroups: stretch, buster
excludehosts: storace
-
name: unwanted process - inetd
name: "host SSL cert - debian client"
nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
hostgroups: computers
+ -
+ name: "host SSL cert - CA"
+ nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt"
+ hosts: handel
-
name: "sso CRL"
nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
name: process - statd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
hostgroups: nfs-client, nfs-server
- excludehostgroups: stretch
+ excludehostgroups: stretch, buster
-
name: process - nfsd
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"