Peter Palfrader [Thu, 13 Nov 2014 17:28:19 +0000 (18:28 +0100)]
New wuiet volumes
Peter Palfrader [Thu, 13 Nov 2014 14:01:08 +0000 (15:01 +0100)]
Add pejacevic-lvm
Peter Palfrader [Thu, 13 Nov 2014 13:51:52 +0000 (14:51 +0100)]
Remove obsolete, commented out volume
Peter Palfrader [Thu, 13 Nov 2014 13:51:35 +0000 (14:51 +0100)]
Update philp volume
Peter Palfrader [Thu, 13 Nov 2014 13:48:03 +0000 (14:48 +0100)]
Remove obsolete volumes
Peter Palfrader [Thu, 13 Nov 2014 12:59:16 +0000 (13:59 +0100)]
Update rapoport volume
Peter Palfrader [Thu, 13 Nov 2014 12:50:39 +0000 (13:50 +0100)]
Update rainier volume
Peter Palfrader [Thu, 13 Nov 2014 09:29:19 +0000 (10:29 +0100)]
Update coccia volumes
Peter Palfrader [Thu, 13 Nov 2014 08:09:20 +0000 (09:09 +0100)]
We have at least wheezy everywhere, drop conditional
Peter Palfrader [Thu, 13 Nov 2014 08:08:30 +0000 (09:08 +0100)]
Stop making squeeze chroots on !i386/amd64
Peter Palfrader [Thu, 13 Nov 2014 07:30:39 +0000 (08:30 +0100)]
New paradis volumes
Peter Palfrader [Wed, 12 Nov 2014 22:13:20 +0000 (23:13 +0100)]
Add wuit-lvm
Peter Palfrader [Wed, 12 Nov 2014 21:46:35 +0000 (22:46 +0100)]
Add paradis-lvm
Peter Palfrader [Wed, 12 Nov 2014 21:41:30 +0000 (22:41 +0100)]
New httpredir-bm-01 volume
Peter Palfrader [Wed, 12 Nov 2014 21:23:25 +0000 (22:23 +0100)]
New oyens volumes
Peter Palfrader [Wed, 12 Nov 2014 21:04:09 +0000 (22:04 +0100)]
New dinis volume
Martin Zobel-Helas [Sat, 1 Nov 2014 10:35:06 +0000 (11:35 +0100)]
also write out ip6tables-save
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 12 Nov 2014 15:56:35 +0000 (15:56 +0000)]
lets try to break our blades
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 12 Nov 2014 17:39:10 +0000 (18:39 +0100)]
Barriere update
Peter Palfrader [Wed, 12 Nov 2014 16:53:32 +0000 (17:53 +0100)]
Add barriere-lvm
Peter Palfrader [Wed, 12 Nov 2014 16:08:41 +0000 (17:08 +0100)]
make an LVM on coccia
Peter Palfrader [Wed, 12 Nov 2014 15:10:57 +0000 (16:10 +0100)]
Add new coccia volumes
Peter Palfrader [Wed, 12 Nov 2014 14:58:01 +0000 (15:58 +0100)]
Add new gideon volumes
Peter Palfrader [Wed, 12 Nov 2014 14:35:20 +0000 (15:35 +0100)]
Add new lindsay volumes
Peter Palfrader [Wed, 12 Nov 2014 09:09:20 +0000 (10:09 +0100)]
Add new milanollo-lvm volume
Peter Palfrader [Wed, 12 Nov 2014 08:58:52 +0000 (09:58 +0100)]
Add new moszumanska-lvm volume
Peter Palfrader [Wed, 12 Nov 2014 08:47:53 +0000 (09:47 +0100)]
Move adayveskaya device to new vdisk
Peter Palfrader [Tue, 11 Nov 2014 23:04:13 +0000 (00:04 +0100)]
remove old coccia-srv
Peter Palfrader [Tue, 11 Nov 2014 20:15:21 +0000 (21:15 +0100)]
Retire backuphost
Peter Palfrader [Tue, 11 Nov 2014 20:14:52 +0000 (21:14 +0100)]
remove backuphost volumes
Peter Palfrader [Tue, 11 Nov 2014 20:01:16 +0000 (21:01 +0100)]
remove old portman-srv volume
Peter Palfrader [Tue, 11 Nov 2014 18:59:54 +0000 (19:59 +0100)]
Add new temporary coccia-srv2, portman-srv2 devices
Peter Palfrader [Mon, 10 Nov 2014 15:00:51 +0000 (16:00 +0100)]
no masquerading on rautavaara
Peter Palfrader [Mon, 10 Nov 2014 15:00:41 +0000 (16:00 +0100)]
No more nfs on rautavaara
Peter Palfrader [Mon, 10 Nov 2014 13:23:27 +0000 (14:23 +0100)]
Raise HSTS time
Paul Wise [Mon, 10 Nov 2014 02:16:49 +0000 (10:16 +0800)]
Print less output when setting up one chroot fails and others succeed.
Evgeni Golov [Sun, 9 Nov 2014 14:56:10 +0000 (15:56 +0100)]
fix typo: it's secretfile, not seccretfile
Signed-off-by: Peter Palfrader <peter@palfrader.org>
Peter Palfrader [Fri, 7 Nov 2014 19:53:11 +0000 (20:53 +0100)]
update-alternatives is now in usr/bin
Peter Palfrader [Fri, 7 Nov 2014 19:50:28 +0000 (20:50 +0100)]
want ruby-filesystem on jessie
Peter Palfrader [Fri, 7 Nov 2014 19:49:13 +0000 (20:49 +0100)]
Revert "Make it work with jessie, II"
This reverts commit
2d2d25eb5b5c376c5f73551fa11f5acaf866a60d.
Peter Palfrader [Fri, 7 Nov 2014 19:49:07 +0000 (20:49 +0100)]
Revert "Make it work with jessie, III"
This reverts commit
41c40c4a9c30480d08813b55fded8e147718f44f.
Peter Palfrader [Fri, 7 Nov 2014 15:52:12 +0000 (16:52 +0100)]
Add a second intermediate for gandi
Peter Palfrader [Fri, 7 Nov 2014 15:44:47 +0000 (16:44 +0100)]
Add text for GANDI-2-CA
Peter Palfrader [Fri, 7 Nov 2014 15:44:17 +0000 (16:44 +0100)]
Add text for api.ftp-master.debian.org.crt
Helmut Grohne [Fri, 7 Nov 2014 14:38:28 +0000 (15:38 +0100)]
reload bind9 from geodnssync using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:38:01 +0000 (15:38 +0100)]
restart puppetmaster using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:37:42 +0000 (15:37 +0100)]
start rc.local using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:36:23 +0000 (15:36 +0100)]
stop monit using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:30:30 +0000 (15:30 +0100)]
reload xinetd using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:29:10 +0000 (15:29 +0100)]
restart cron from monit using service
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:27:32 +0000 (15:27 +0100)]
reload samhain using invoke-rc.d
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Helmut Grohne [Fri, 7 Nov 2014 14:26:45 +0000 (15:26 +0100)]
reload ulogd using invoke-rc.d
Getting rid of explicit /etc/init.d/ invocations as those may disappear.
Signed-off-by: Helmut Grohne <helmut@subdivi.de>
Peter Palfrader [Fri, 7 Nov 2014 15:36:52 +0000 (16:36 +0100)]
Add api.ftp-master role
Peter Palfrader [Fri, 7 Nov 2014 15:35:45 +0000 (16:35 +0100)]
Add api.ftp-debian.org cert, and new gandi intermediate for it
Peter Palfrader [Thu, 6 Nov 2014 18:51:36 +0000 (18:51 +0000)]
Make it work with jessie, III
Peter Palfrader [Thu, 6 Nov 2014 18:43:19 +0000 (18:43 +0000)]
Make it work with jessie, II
Peter Palfrader [Thu, 6 Nov 2014 17:53:39 +0000 (17:53 +0000)]
Make it work with jessie, I
Peter Palfrader [Thu, 6 Nov 2014 17:00:21 +0000 (18:00 +0100)]
fix function name
Peter Palfrader [Thu, 6 Nov 2014 16:59:33 +0000 (17:59 +0100)]
Handle hosts that are not in ldap yet
Peter Palfrader [Thu, 6 Nov 2014 16:39:04 +0000 (17:39 +0100)]
Add lindsay
Peter Palfrader [Tue, 4 Nov 2014 19:25:05 +0000 (20:25 +0100)]
Add mips-aql-01
Peter Palfrader [Tue, 4 Nov 2014 18:30:56 +0000 (19:30 +0100)]
No backups of ia64-arm-01
Peter Palfrader [Tue, 4 Nov 2014 16:48:06 +0000 (17:48 +0100)]
Decommission rem
Peter Palfrader [Tue, 4 Nov 2014 06:08:58 +0000 (07:08 +0100)]
No backups for mips-aql-02, please
Peter Palfrader [Mon, 3 Nov 2014 19:55:01 +0000 (20:55 +0100)]
Add aql
Peter Palfrader [Mon, 3 Nov 2014 19:23:47 +0000 (20:23 +0100)]
sort broken rtc entries
Peter Palfrader [Mon, 3 Nov 2014 19:23:31 +0000 (20:23 +0100)]
mips-aql-02: no/broken RTC
Peter Palfrader [Mon, 3 Nov 2014 07:26:26 +0000 (08:26 +0100)]
Make sure we do not have apt-listchanges
Héctor Orón Martínez [Thu, 30 Oct 2014 23:53:15 +0000 (00:53 +0100)]
howells/hummels: ynic armhf buildd decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Paul Wise [Tue, 28 Oct 2014 23:21:12 +0000 (07:21 +0800)]
Exclude some FreeBSD-specific filesystems for munin df* plugins
Fixes all kFreeBSD hosts showing problems for the munin df* plugins
Workaround: https://bugs.debian.org/767102
Signed-off-by: Paul Wise <pabs@debian.org>
Martin Zobel-Helas [Tue, 28 Oct 2014 16:14:36 +0000 (16:14 +0000)]
add more packages to local ignore
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Héctor Orón Martínez [Mon, 27 Oct 2014 16:05:57 +0000 (17:05 +0100)]
Revert porterbox fiddlings
Héctor Orón Martínez [Mon, 27 Oct 2014 15:50:43 +0000 (16:50 +0100)]
motd: do not check porterbox class, always included now
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Mon, 27 Oct 2014 13:13:50 +0000 (14:13 +0100)]
porterbox: only include schroot when module is present
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Mon, 27 Oct 2014 12:35:48 +0000 (13:35 +0100)]
roles: drop redundant configuration
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Mon, 27 Oct 2014 12:03:01 +0000 (13:03 +0100)]
roles: make use of porterbox uninstall features
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Mon, 27 Oct 2014 09:44:10 +0000 (10:44 +0100)]
porterbox: allow uninstallation
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Paul Wise [Sun, 26 Oct 2014 05:28:03 +0000 (13:28 +0800)]
Set the correct syslog-ng version number on hosts with syslog-ng 3.5
Peter Palfrader [Sat, 25 Oct 2014 21:54:31 +0000 (23:54 +0200)]
Put da-backup authkeys onto storace
Peter Palfrader [Sat, 25 Oct 2014 21:14:26 +0000 (23:14 +0200)]
Allow pg connections from pgbackuphost
Peter Palfrader [Sat, 25 Oct 2014 21:09:18 +0000 (23:09 +0200)]
Remove backuphost.d.o as pg backuphost
Peter Palfrader [Sat, 25 Oct 2014 21:05:42 +0000 (23:05 +0200)]
Use storace as pg backuphost
Peter Palfrader [Sat, 25 Oct 2014 20:55:35 +0000 (22:55 +0200)]
make storace a pg backup server
Peter Palfrader [Sat, 25 Oct 2014 14:33:59 +0000 (14:33 +0000)]
Make portforward fact not break due to no config
Peter Palfrader [Sat, 25 Oct 2014 14:31:39 +0000 (16:31 +0200)]
Disable port forward between danzi and sibelius
Martin Zobel-Helas [Wed, 22 Oct 2014 12:13:30 +0000 (12:13 +0000)]
RT#5423 - give secretary group right to run partly update on vote/
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Paul Wise [Wed, 22 Oct 2014 04:15:19 +0000 (12:15 +0800)]
Reduce munin-html fork count to the minimum
Héctor Orón Martínez [Tue, 21 Oct 2014 12:06:36 +0000 (14:06 +0200)]
arm64: ignore flash-kernel at gw-linaro
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Sat, 18 Oct 2014 11:10:38 +0000 (13:10 +0200)]
arm64: porterbox is asachi now
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Martin Zobel-Helas [Sat, 18 Oct 2014 09:41:06 +0000 (09:41 +0000)]
no more stabile
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Héctor Orón Martínez [Fri, 17 Oct 2014 18:07:26 +0000 (20:07 +0200)]
arm64: buildd and porterbox disable backups
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Fri, 17 Oct 2014 17:07:57 +0000 (19:07 +0200)]
porterbox: support arm64 setup
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Thu, 16 Oct 2014 13:31:29 +0000 (15:31 +0200)]
sudo: add arm64 porterbox
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Wed, 15 Oct 2014 23:25:20 +0000 (01:25 +0200)]
porterbox: add arm-linaro-01.debian.org to not do backups
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Tue, 14 Oct 2014 20:58:02 +0000 (22:58 +0200)]
Set ciphersuites
Peter Palfrader [Tue, 14 Oct 2014 19:47:13 +0000 (21:47 +0200)]
apache: disable SSLv3 support
Paul Wise [Tue, 14 Oct 2014 02:31:23 +0000 (10:31 +0800)]
Use a more future-proof hostname in git clone dsa-puppet.git.
Paul Wise [Tue, 14 Oct 2014 02:30:13 +0000 (10:30 +0800)]
Show full error messages when there is a problem restarting stunnel.
Julien Cristau [Sun, 12 Oct 2014 16:29:04 +0000 (18:29 +0200)]
Include ftp_conntrack on security_mirror
Signed-off-by: Julien Cristau <jcristau@debian.org>
Martin Zobel-Helas [Sun, 12 Oct 2014 08:31:34 +0000 (08:31 +0000)]
allow traffic to syslog port
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>