Martin Zobel-Helas [Thu, 20 Aug 2009 11:43:42 +0000 (13:43 +0200)]
more hosts use default buildd software
Martin Zobel-Helas [Wed, 19 Aug 2009 15:50:00 +0000 (17:50 +0200)]
lebrun becomes standard buildd
Peter Palfrader [Tue, 18 Aug 2009 21:25:11 +0000 (23:25 +0200)]
a dir and a file to ignore
Faidon Liambotis [Fri, 14 Aug 2009 01:24:39 +0000 (04:24 +0300)]
set /proc/sys/vm/mmap_min_addr to 4096
This prohibits userland to mmap() page 0 and therefore mitigates
exploits that use NULL-pointer dereference vulnerabilities in the
kernel.
Introduce a sysctl puppet definition for this that can be used to set
other sysctl knobs as well.
Signed-off-by: Peter Palfrader <peter@palfrader.org>
Peter Palfrader [Sun, 16 Aug 2009 09:43:04 +0000 (11:43 +0200)]
Also do not ignore this
Peter Palfrader [Sun, 16 Aug 2009 01:04:44 +0000 (03:04 +0200)]
Revert "samhain ignore /etc/ssh/userkeys since we now ship a file under it. Sigh"
Let's not do this.
This reverts commit
7f521b2d1ef66a10c884e46613c8dacc40235640.
Stephen Gran [Sun, 16 Aug 2009 00:26:17 +0000 (01:26 +0100)]
samhain ignore /etc/ssh/userkeys since we now ship a file under it. Sigh
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 16 Aug 2009 00:14:48 +0000 (01:14 +0100)]
um, we probably want all those extra keys on bartok
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 15 Aug 2009 19:24:22 +0000 (20:24 +0100)]
syntax error
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 15 Aug 2009 10:30:35 +0000 (11:30 +0100)]
what can possibly go wrong
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 12 Aug 2009 13:59:12 +0000 (15:59 +0200)]
I suspect this wants an end
Peter Palfrader [Wed, 12 Aug 2009 10:02:24 +0000 (12:02 +0200)]
And deploy default apache config to widor
Peter Palfrader [Wed, 12 Aug 2009 08:30:00 +0000 (10:30 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
ignore /etc/bind as well
Make bind write to a subdirectory of /var/log
Peter Palfrader [Wed, 12 Aug 2009 08:29:47 +0000 (10:29 +0200)]
And deploy default apache config to liszt
Stephen Gran [Tue, 11 Aug 2009 09:15:20 +0000 (10:15 +0100)]
ignore /etc/bind as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 11 Aug 2009 08:08:21 +0000 (09:08 +0100)]
Make bind write to a subdirectory of /var/log
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 5 Aug 2009 21:51:33 +0000 (22:51 +0100)]
(over?)simplify the test for a smartarray controller
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 5 Aug 2009 07:54:20 +0000 (08:54 +0100)]
We know where lspci wil be
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 4 Aug 2009 20:40:18 +0000 (21:40 +0100)]
oops: /usr/lib/ruby/1.8/facter/util/loader.rb:72:in `load': /var/lib/puppet/facts/raidarray.rb:11: syntax error, unexpected kEND, expecting ')' (SyntaxError)
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 4 Aug 2009 19:02:13 +0000 (20:02 +0100)]
Oh what the hell, one more try to make it shut up
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 22:02:01 +0000 (23:02 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 2 Aug 2009 22:01:53 +0000 (23:01 +0100)]
we probably don't need to ignore /etc/ssh twice, samhain probably understood the first time
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 2 Aug 2009 13:32:11 +0000 (15:32 +0200)]
I think keys for root's auth keys should not be our every-day ssh key. they should be specially protected keys, not usually loaded into an agent. Start by removing my daily use keys
Stephen Gran [Sun, 2 Aug 2009 13:21:07 +0000 (14:21 +0100)]
mode and whitespace for /etc/ssh/userkeys/root
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 13:19:39 +0000 (14:19 +0100)]
ignore /etc/ssh/userkeys/root
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 13:13:33 +0000 (14:13 +0100)]
First check in of authoized_keys - no functional difference yet, just
replacing existing manual method. let's clean this up a bit.
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 01:21:30 +0000 (02:21 +0100)]
let's see if we can make the lspci test quiet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 00:36:04 +0000 (01:36 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 2 Aug 2009 00:35:45 +0000 (01:35 +0100)]
Grumble grumble - erb strikes again
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 2 Aug 2009 00:35:29 +0000 (02:35 +0200)]
gluck does not need to listen on 443 anymore - that was just for when it was people.do
Stephen Gran [Sun, 2 Aug 2009 00:30:25 +0000 (01:30 +0100)]
samhain ignore the new files as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 00:18:08 +0000 (01:18 +0100)]
Restart ssh when config file changes
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 2 Aug 2009 00:08:15 +0000 (01:08 +0100)]
https://rt.debian.org/Ticket/Display.html?id=1606
block mail from bp06.net, who carries Cdiscount.co.uk mail
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 1 Aug 2009 14:03:21 +0000 (15:03 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Thu, 30 Jul 2009 12:17:56 +0000 (14:17 +0200)]
adding kassia, saens schein and steffani
Martin Zobel-Helas [Thu, 30 Jul 2009 12:09:48 +0000 (14:09 +0200)]
add villa and lobos
Martin Zobel-Helas [Thu, 30 Jul 2009 12:05:08 +0000 (14:05 +0200)]
add wieck.debian.org
Martin Zobel-Helas [Thu, 30 Jul 2009 11:56:44 +0000 (13:56 +0200)]
rename file
Martin Zobel-Helas [Thu, 30 Jul 2009 11:38:36 +0000 (13:38 +0200)]
next try
Martin Zobel-Helas [Thu, 30 Jul 2009 11:36:20 +0000 (13:36 +0200)]
fix class name
Martin Zobel-Helas [Thu, 30 Jul 2009 11:33:39 +0000 (13:33 +0200)]
default puppet disclaimer
Martin Zobel-Helas [Thu, 30 Jul 2009 11:32:30 +0000 (13:32 +0200)]
new security.d.o apache2 class
Stephen Gran [Thu, 30 Jul 2009 09:55:51 +0000 (10:55 +0100)]
Add ssh module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 29 Jul 2009 17:34:08 +0000 (19:34 +0200)]
nagios arcconf on morricone
Peter Palfrader [Wed, 29 Jul 2009 14:38:34 +0000 (16:38 +0200)]
backports
Peter Palfrader [Wed, 29 Jul 2009 14:07:10 +0000 (16:07 +0200)]
Add morricone
Peter Palfrader [Tue, 28 Jul 2009 08:51:26 +0000 (10:51 +0200)]
make sure puppet does not start
Stephen Gran [Sun, 26 Jul 2009 21:46:29 +0000 (22:46 +0100)]
Add some rbl stuff for press@ and events@, remove one rbl for somebody
else
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 24 Jul 2009 18:09:31 +0000 (20:09 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
Add host based blacklist
Will this fix it? Who knows? Who understands the mystery of the puppet?
Peter Palfrader [Fri, 24 Jul 2009 18:09:24 +0000 (20:09 +0200)]
samhain ignore exim4/host_blacklist
Stephen Gran [Fri, 24 Jul 2009 14:31:40 +0000 (15:31 +0100)]
Add host based blacklist
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 24 Jul 2009 13:25:44 +0000 (14:25 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Fri, 24 Jul 2009 13:25:02 +0000 (14:25 +0100)]
Will this fix it? Who knows? Who understands the mystery of the puppet?
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Fri, 24 Jul 2009 09:25:29 +0000 (11:25 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
Hi, my name is Steve, and I can read
Peter Palfrader [Fri, 24 Jul 2009 09:25:20 +0000 (11:25 +0200)]
new kvm on unger
Stephen Gran [Thu, 23 Jul 2009 21:02:52 +0000 (22:02 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Thu, 23 Jul 2009 21:02:38 +0000 (22:02 +0100)]
Hi, my name is Steve, and I can read
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Thu, 23 Jul 2009 20:59:39 +0000 (22:59 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet:
some printf debugging
add log message
Make postmasterish mails go to d-a.
Allow blacklists
Discard mails when asked to
please to be quiet, zelenka
Peter Palfrader [Thu, 23 Jul 2009 20:59:34 +0000 (22:59 +0200)]
Ignore userdir-ldap on draghi
Stephen Gran [Thu, 23 Jul 2009 20:57:09 +0000 (21:57 +0100)]
some printf debugging
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 23 Jul 2009 20:52:21 +0000 (21:52 +0100)]
add log message
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 23 Jul 2009 20:31:36 +0000 (21:31 +0100)]
Make postmasterish mails go to d-a.
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 23 Jul 2009 20:20:24 +0000 (21:20 +0100)]
Allow blacklists
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 23 Jul 2009 20:09:42 +0000 (21:09 +0100)]
Discard mails when asked to
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 22 Jul 2009 22:20:21 +0000 (23:20 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Wed, 22 Jul 2009 22:20:08 +0000 (23:20 +0100)]
please to be quiet, zelenka
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 22 Jul 2009 22:16:08 +0000 (00:16 +0200)]
Add byrd
Peter Palfrader [Wed, 22 Jul 2009 10:48:57 +0000 (12:48 +0200)]
the whitespace nazi strikes again
Peter Palfrader [Wed, 22 Jul 2009 10:48:41 +0000 (12:48 +0200)]
do buildd related mail on cimarosa
Peter Palfrader [Wed, 22 Jul 2009 09:47:05 +0000 (11:47 +0200)]
Re-add puppetmaster restart
Peter Palfrader [Wed, 22 Jul 2009 09:21:48 +0000 (11:21 +0200)]
rename dijkstra dijkstra.debian.org
Peter Palfrader [Wed, 22 Jul 2009 08:39:12 +0000 (10:39 +0200)]
samhain Ignore parts of /etc/spamassassin/sa-update-keys
Peter Palfrader [Wed, 22 Jul 2009 08:28:13 +0000 (10:28 +0200)]
buildd update ssh keys on cimarosa
Peter Palfrader [Tue, 21 Jul 2009 20:24:08 +0000 (22:24 +0200)]
cimarosa apache
Stephen Gran [Tue, 21 Jul 2009 16:52:05 +0000 (17:52 +0100)]
Better (quieter) puppet options
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 15:04:13 +0000 (16:04 +0100)]
syntax is my friend
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 14:59:22 +0000 (15:59 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 21 Jul 2009 14:59:13 +0000 (15:59 +0100)]
stop trying to start/reload/stop/etc puppet
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Tue, 21 Jul 2009 14:44:12 +0000 (16:44 +0200)]
Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Tue, 21 Jul 2009 14:43:58 +0000 (16:43 +0200)]
planet archive on rore
Stephen Gran [Tue, 21 Jul 2009 13:58:51 +0000 (14:58 +0100)]
Again, dammit
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 13:30:33 +0000 (14:30 +0100)]
oopsie
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 08:49:27 +0000 (09:49 +0100)]
sleep $(( $RANDOM % 3600 ))
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 08:43:45 +0000 (09:43 +0100)]
I have a cunning plan
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 08:40:52 +0000 (09:40 +0100)]
Puppet is getting run from cron - don't run it anymore
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 08:39:57 +0000 (09:39 +0100)]
Run puppet from cron now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 21 Jul 2009 08:37:40 +0000 (09:37 +0100)]
monit will now leave puppet alone
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 19 Jul 2009 20:43:08 +0000 (21:43 +0100)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sun, 19 Jul 2009 20:43:02 +0000 (21:43 +0100)]
samhain ignore new geodns files
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Sun, 19 Jul 2009 18:37:15 +0000 (20:37 +0200)]
* new host alias webhosts
* make webmirror sudo job for host alias webhosts
Martin Zobel-Helas [Sun, 19 Jul 2009 11:44:49 +0000 (13:44 +0200)]
fix broken file path
Martin Zobel-Helas [Sun, 19 Jul 2009 11:16:25 +0000 (13:16 +0200)]
Merge branch 'master' of git+ssh://zobel@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sun, 19 Jul 2009 11:14:03 +0000 (13:14 +0200)]
add zone video.debconf.debian.org to named.conf.geo
Martin Zobel-Helas [Sun, 19 Jul 2009 11:08:51 +0000 (13:08 +0200)]
add video.debconf.debian.org
Martin Zobel-Helas [Sun, 19 Jul 2009 11:07:12 +0000 (13:07 +0200)]
make file more readable
Peter Palfrader [Sat, 18 Jul 2009 09:00:49 +0000 (11:00 +0200)]
ignore backported kvm on dijkstra
Peter Palfrader [Thu, 16 Jul 2009 13:24:37 +0000 (15:24 +0200)]
Merge branch 'master' of ssh://handel.debian.org/srv/puppet.debian.org/git/dsa-puppet
Peter Palfrader [Thu, 16 Jul 2009 13:24:32 +0000 (15:24 +0200)]
do not replace /var/log/apache2 symlinks with directories
Stephen Gran [Thu, 16 Jul 2009 08:08:41 +0000 (09:08 +0100)]
Just alphabetization - no changes
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Wed, 15 Jul 2009 14:00:00 +0000 (15:00 +0100)]
14:58 < weasel> mail- is redundant
Signed-off-by: Stephen Gran <steve@lobefin.net>
projects / mirror / dsa-puppet.git / log