-dsa-nagios-checks (9X) Xnstable; urgency=low
+dsa-nagios-checks (117) UNRELEASED; urgency=medium
+
+ [ Peter Palfrader ]
+ * dsa-check-hpssacli: add --ignore-cache
+ * add: dsa-check-unbound-anchors
+ * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
+ with unsigned zones.
+ * dsa-check-running-kernel: handle -unsigned packages
+
+ [ Jan Wagner ]
+ * update-apt-statusdir, dsa-update-unowned-file-status:
+ Create status directory if not existing.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:06:13 +0100
+
+dsa-nagios-checks (116) unstable; urgency=medium
+
+ * Add dsa-check-ipv6-default-gw.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:05:39 +0100
+
+dsa-nagios-checks (115) unstable; urgency=medium
+
+ [ Julien Cristau ]
+ * Set a specific User-Agent in dsa-check-mirrorsync
+
+ -- Aurelien Jarno <aurel32@debian.org> Sat, 03 Mar 2018 11:10:51 +0100
+
+dsa-nagios-checks (114) unstable; urgency=medium
+
+ * Add dsa-check-openmanage to monitor Dell hosts.
+
+ -- Julien Cristau <jcristau@debian.org> Sun, 18 Feb 2018 11:03:16 +0100
+
+dsa-nagios-checks (113) unstable; urgency=medium
+
+ * Add dsa-check-systemd-services that also prints failed systemd services
+ when things are degraded.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 11 Feb 2018 11:16:30 +0100
+
+dsa-nagios-checks (112) unstable; urgency=medium
+
+ * maintainer scripts: use dpkg-maintscript-helper to clean out
+ /etc/cron.d/dsa-nagios-checks.
+ * libproc-processtable-perl: allow ignoring young processes.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 04 Feb 2018 12:23:46 +0100
+
+dsa-nagios-checks (111) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
+ * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
+ an is_sep() method. Update.
+ * dsa-update-unowned-file-status: ignore autofs and nfs4
+ * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
+ without -v.
+ * dsa-check-backuppg: Support per host and per cluster retention
+ times.
+ * remove debian/cron.d: moved into puppet
+
+ [ Julien Cristau ]
+ * Set LWP::UserAgent timeout in dsa-check-mirrorsync
+
+ -- Peter Palfrader <weasel@debian.org> Thu, 01 Feb 2018 18:31:17 +0100
+
+dsa-nagios-checks (110) unstable; urgency=medium
+
+ * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
+ * dsa-check-backuppg: warn if backups for a database configured in
+ dsa-check-backuppg.conf are missing entirely.
+ * dsa-check-file_age: support following symlinks and warning on empty files.
+ * dsa-check-file_age: support multiple files.
+ * dsa-check-running-kernel: meta package version check, also work on 4.x
+ kernels and later.
+ * dsa-check_puppet_agent: add from Alexander Swen's github.
+ * dsa-check-memory: move from / to /checks in source (so now it should get
+ installed.)
+ * dsa-wrap-nagios-check: add.
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
+
+dsa-nagios-checks (109) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
+ running.
+ * dsa-check-soas: on soa disagreement, list nameservers.
+
+ [ Aurelien Jarno ]
+ * dsa-check-libs: also ignore files that are open via normal file handles
+ on NFS.
+
+ [ Peter Palfrader ]
+ * dsa-check-libs: accept -v as short for --verbose.
+ * dsa-check-libs: ignore deleted CWDs.
+ * dsa-check-drbd: Add --ok-no-devices option.
+ * dsa-check-backuppg: allow specifying which timeline we expect a database
+ to be on.
+ * dsa-check-cert-expire-dir: add
+ * dsa-check-raid-3ware: modernize
+ * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
+ warnings.
+ * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
+ the last zone checker finished.
+ * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
+ on with --debug.
+ * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
+ domain share nameservers.
+ * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
+ labels for NS responses.
+ * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
+ * dsa-check-mirrorsync: support unix timestamps in tracefile
+ (for staticsync mirrors).
+ * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
+ in zonefiles. This will skip it being checked.
+ * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
+ data) in detail output.
+ * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
+ * dsa-check-zone-signature-all: add.
+ * dsa-check-timedatectl: add
+ * dsa-check-dabackup-server: replace /org/backup.debian.org with
+ /srv/backups/da-backup.
+
+ [ Tollef Fog Heen ]
+ * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
+ FreeBSD.
+ * dsa-update-unowned-file-status: avoid printing the apex of pruned
+ directory trees.
+
+ [ Julien Cristau ]
+ * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
+ * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
+ * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
+
+dsa-nagios-checks (108) unstable; urgency=medium
+
+ * dsa-check-stunnel-sanity: Fix variable name in output.
+ * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
+ numbers.
+ * dsa-check-config: check for DAD failures.
+ * dsa-check-config: retire ldap.conf check - we ship it with puppet
+ nowadays anyway.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
+
+dsa-nagios-checks (107) unstable; urgency=medium
+
+ * Add dsa-check-stunnel-sanity.
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
+
+dsa-nagios-checks (106) unstable; urgency=medium
+
+ * Depend on libyaml-syck-perl.
+
+ -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
+
+dsa-nagios-checks (105) unstable; urgency=medium
+
+ [ Peter Palfrader ]
+ * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
+ * dsa-check-libs: add.
+
+ [ Paul Wise ]
+ * dsa-check-backuppg: Ignore removed tmp files instead of crashing
+
+ -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
+
+dsa-nagios-checks (104) unstable; urgency=medium
+
+ * Fix iptables-save cronjob.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
+
+dsa-nagios-checks (103) unstable; urgency=medium
+
+ * dsa-update-apt-status: run apt-get update in a flock wrapper.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
+
+dsa-nagios-checks (102) unstable; urgency=medium
+
+ * dsa-check-entropy: unbreak script by removing non-ASCII characters.
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
+
+dsa-nagios-checks (101) unstable; urgency=low
+
+ [ Peter Palfrader ]
+ * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
+ * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
+ ask for SOA with dnssec data. Apparently some nameservers do give you the
+ RRSIG on the DS record instead of a referral (rcode0's for instance).
+ * dsa-check-hpasm: Support supplying a list of things for which failures are
+ ignored.
+ * dsa-check-soas: do some queries without RD set.
+ * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
+ for the magic start sequence. This makes running times bearable on our
+ new octeons.
+ * dsa-check-config: check if existing ed25519 host keys are in ldap.
+
+ [ Hendrik Köhler ]
+ * Extend dsa-check-entropy output so Icinga2 can process performance
+ data (e.g. used by Graphite).
+
+ -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
+
+dsa-nagios-checks (100) unstable; urgency=low
+
+ [ Peter Palfrader ]
+ * dsa-check-running-kernel: Check from all compression tokens.
+ * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
+ it does not get set later.
+ * dsa-check-running-kernel: fix kernel metapackage version regex
+
+ [ Evgeni Golov ]
+ * dsa-check-packages: go critical if there are security updates.
+
+ [ Helmut Grohne ]
+ * dsa-check-cert-expire: Make timers configurable.
+
+ [ George Kargiotakis ]
+ * dsa-check-hpacucli: Add Parity check for logical drives.
+
+ [ Stephen Gran ]
+ * dsa-check-mq-connection: Catch case when host has never connected
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
+
+dsa-nagios-checks (99) unstable; urgency=low
+
+ * dsa-check-hpacucli: SATA drives have different transfer speed.
+ * dsa-check-edac: add.
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
+
+dsa-nagios-checks (98) unstable; urgency=low
+
+ * Add dsa-check-dchroots-current.
+
+ -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
+
+dsa-nagios-checks (97) unstable; urgency=low
+
+ [ Stephen Gran ]
+ * Update dsa-check-mq-connection to actually work
+
+ [ Peter Palfrader ]
+ * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
+ * dsa-check-config: Update for new TLS_CACERT config.
+
+ -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
+
+dsa-nagios-checks (96) unstable; urgency=low
+
+ [ Peter Palfrader ]
+ * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
+ Allow supplying the nameservers to start recursion at (per zone).
+ This is useful for reverse zones of RFC1918 space.
+ * dsa-check-bacula: exit status fix.
+ * dsa-check-hpacucli:
+ - support filtering controllers.
+ - add an option to accept no-controllers as an OK state.
+ * remove weak keys check
+ * dsa-check-dnssec-delegation
+ - handle zones with no keys that have the SEP bit.
+ - warn on all domains where parent has a non-empty DS bit that does
+ not match ours, even if we did not expect it to have one at all.
+ * dsa-check-zone-rrsig-expiration-many:
+ - expect dnssec by default now.
+ * dsa-check-zone-rrsig-expiration:
+ - in the OK message, clarify we only check sigs at the zone apex.
+ * dsa-check-dnssec-delegation:
+ - accept any ds/dnskey combination whose intersection is not empty.
+ (previously we required them to match exactly.)
+
+ [ Stephen Gran ]
+ * dsa-check-mq-connection:
+ Check that all messages have been consumed and that there is an active
+ consumer.
+ * kill some lintian warnings
+
+ -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
+
+dsa-nagios-checks (95) unstable; urgency=low
+
+ * dsa-check-running-kernel: Try to fix zcat kernel case.
+
+ -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
+
+dsa-nagios-checks (94) unstable; urgency=low
+
+ [ Stephen Gran ]
+ * Start new changelog
+
+ [ Peter Palfrader ]
+ * dsa-check-packages: work better with weird multi-arch cases.
+ * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
+ * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
+ all before comparing.
+ * New bacula check:
+ - dsa-check-bacula
+ * Changed according to gitlog without corresponding debian/changelog entry:
+ - dsa-check-drbd
+ - dsa-check-filesystems
+ - dsa-check-running-kernel
+
+ -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
+
+dsa-nagios-checks (93) unstable; urgency=low
+
+ [ Tollef Fog Heen ]
+ * dsa-update-unowned-file-status: Use -fstype proc rather than hard
+ coding /proc in order to match procfs in chroots too.
+ * dsa-update-apt-status: send the cron output to syslog rather than email
+
+ [ Peter Palfrader ]
+ * dsa-check-msa-eventlog: Add --verbose switch to show info level
+ event log entries.
+ * add dsa-check-crl-expire.
+ * rename checks/dsa-check-backuppg.conf.sample ->
+ etc/dsa-check-backuppg.conf.sample.
+ * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
+ * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
+ at least for the "primary" arch. Does not really handle multi-arch
+ packages, but it makes things work again for now.
+ * dsa-check-packages: A better multi-arch capable version.
+ * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
+ * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
+ and disabled caches.
+ * dsa-check-hpasm: Typo fix.
+
+ [ Stephen Gran ]
+ * dsa-check-udldap-freshness: check new last_update.trace if it
+ exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
+ * dsa-check-statusfile: Complain if there is no extended information
+ * add dsa-check-filesystems (only checks ext at the moment)
+
+ [ Uli Martens ]
+ * dsa-check-soas: Add --no-soa-ns flag.
+
+ [ Martin Zobel-Helas ]
+ * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
+
+ -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
+
+dsa-nagios-checks (92.1) unstable; urgency=low
+
+ * Fix dsa-update-unowned-file-status cronjob entry more.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
+
+dsa-nagios-checks (92) unstable; urgency=low
+
+ * Fix dsa-update-unowned-file-status cronjob entry.
+
+ -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
+
+dsa-nagios-checks (91) unstable; urgency=low
[ Peter Palfrader ]
* dsa-check-zone-rrsig-expiration: configurable packet size, and change
* dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
* dsa-check-statusfile: change shebang from ruby to python and fix syntax
errors.
+ * dsa-check-soas: support supplying an IP address for additional nameservers
+ to check on with -a.
+
+ [ Tollef Fog Heen ]
+ * Make the unowned files check skip /proc.
+ * Limit the number of unowned files we register in the state file to 40.
+
+ [ Peter Palfrader ]
+ * Rewrite unowned files check into something that writes proper
+ nagios status files and behaves in a nice and sane way.
- -- Peter Palfrader <weasel@debian.org> Wed, 08 Feb 2012 15:36:05 +0100
+ -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
dsa-nagios-checks (90) unstable; urgency=low