Stephen Gran [Sat, 14 May 2011 14:16:39 +0000 (15:16 +0100)]
Add event_handler hooks to sudo and nrpe.
We still don't actually call it yet - we need to ship a new version of
dsa-nagios-checks and then add the event_handler stanza to the entropy
check.
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 14 May 2011 07:44:55 +0000 (08:44 +0100)]
rore on squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 13 May 2011 19:39:56 +0000 (20:39 +0100)]
holter to squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 12 May 2011 19:34:33 +0000 (20:34 +0100)]
ball on squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 9 May 2011 18:40:38 +0000 (19:40 +0100)]
Revert "I'm temporarily on borrowed ADSL"
About time.
This reverts commit
05f75b180353ace7dbc4f39111a1151cc959f806.
Peter Palfrader [Wed, 4 May 2011 14:53:45 +0000 (16:53 +0200)]
Set keep_hostname to no
Peter Palfrader [Wed, 4 May 2011 11:55:19 +0000 (13:55 +0200)]
Merge remote branch 'symoon/master'
* symoon/master:
Fix reference rewrite rule
Canonical place for manuals is /doc/manuals/
Handle a Redirect for the New Maintainers' Guide
Handle a RewriteMap for Debian Reference
Offer a link to DSA without knowing year (Closes: #474730)
More Redirect previously handled by symlinks
Handle links to translated 404 pages
All Redirect are actually RedirectPermanent
Signed-off-by: Peter Palfrader <peter@palfrader.org>
Peter Palfrader [Wed, 4 May 2011 10:12:40 +0000 (12:12 +0200)]
chain hostnames: trust peers, but log
Simon Paillard [Tue, 3 May 2011 22:05:49 +0000 (00:05 +0200)]
Fix reference rewrite rule
Simon Paillard [Tue, 3 May 2011 21:13:33 +0000 (23:13 +0200)]
Canonical place for manuals is /doc/manuals/
David Prévot [Wed, 27 Apr 2011 21:13:51 +0000 (17:13 -0400)]
Handle a Redirect for the New Maintainers' Guide
The New Maintainers' Guide has moved from SGML to DocBook.
Signed-off-by: Simon Paillard <spaillard@debian.org>
David Prévot [Fri, 29 Apr 2011 02:24:31 +0000 (22:24 -0400)]
Handle a RewriteMap for Debian Reference
The Debian Reference has been moved from SGML to DocBook.
Signed-off-by: Simon Paillard <spaillard@debian.org>
David Prévot [Wed, 27 Apr 2011 21:08:49 +0000 (17:08 -0400)]
Offer a link to DSA without knowing year (Closes: #474730)
Signed-off-by: Simon Paillard <spaillard@debian.org>
David Prévot [Wed, 27 Apr 2011 21:07:21 +0000 (17:07 -0400)]
More Redirect previously handled by symlinks
Mainly directories.
Thanks to Simon Paillard.
Closes: #612120
Signed-off-by: Simon Paillard <spaillard@debian.org>
Remove http://www.debian.org/ from rewrite rules
Add Chinese too
David Prévot [Wed, 27 Apr 2011 22:40:21 +0000 (18:40 -0400)]
Handle links to translated 404 pages
Signed-off-by: Simon Paillard <spaillard@debian.org>
David Prévot [Wed, 27 Apr 2011 21:05:20 +0000 (17:05 -0400)]
All Redirect are actually RedirectPermanent
Peter Palfrader [Tue, 3 May 2011 14:06:25 +0000 (16:06 +0200)]
Revert "MIT seems to be hammering morricone, making /var fill up."
This reverts commit
b5db5cc3b55641a5d1b1d35be2e48adc08ed1746.
This rule really is not a good fit for systems that serve debian
archives. If we need something like this we need to come up with better
or at least different limits.
Peter Palfrader [Tue, 3 May 2011 09:31:51 +0000 (11:31 +0200)]
update obsolete-packages-ignore.d-hostspecific
Peter Palfrader [Tue, 3 May 2011 09:23:22 +0000 (11:23 +0200)]
ignore linux-base on corelli
Peter Palfrader [Mon, 2 May 2011 19:26:12 +0000 (21:26 +0200)]
do not do the www-mirror thing on www-master
Stephen Gran [Mon, 2 May 2011 15:39:19 +0000 (16:39 +0100)]
MIT seems to be hammering morricone, making /var fill up.
morricone:/var/log/apache2# grep ^128.30 backports-master.debian.org-access.log-
20110502 | wc -l
2160933
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 2 May 2011 15:34:14 +0000 (15:34 +0000)]
I'm temporarily on borrowed ADSL
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Mon, 2 May 2011 12:58:27 +0000 (14:58 +0200)]
05/02/11 [14:53:03] < carlos_c3sl> BTW, one of the dns servers changed. 200.17.202.1 is now 200.236.31.1
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Sat, 30 Apr 2011 18:58:58 +0000 (20:58 +0200)]
grieg on squeeze
Peter Palfrader [Sat, 30 Apr 2011 17:17:40 +0000 (19:17 +0200)]
remove kibi, add christoph for freebsd whitelist
Peter Palfrader [Sat, 30 Apr 2011 17:16:53 +0000 (19:16 +0200)]
remove kibi from carnet ssh whitelist
Peter Palfrader [Sat, 30 Apr 2011 16:24:31 +0000 (18:24 +0200)]
Make bind listen only on !localhost
Peter Palfrader [Sat, 30 Apr 2011 15:39:33 +0000 (17:39 +0200)]
diamond does dns
Peter Palfrader [Sat, 30 Apr 2011 15:38:12 +0000 (17:38 +0200)]
Add diamond
Peter Palfrader [Wed, 27 Apr 2011 16:30:12 +0000 (18:30 +0200)]
mujeres can sudo to women
Stephen Gran [Mon, 25 Apr 2011 07:49:01 +0000 (08:49 +0100)]
franck also has a newer python-apt
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sun, 24 Apr 2011 10:02:17 +0000 (11:02 +0100)]
rietz is in puppet now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 16 Apr 2011 19:02:19 +0000 (20:02 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Sat, 16 Apr 2011 19:02:07 +0000 (20:02 +0100)]
oh, boy, I'm going to regret that, but it seems like a silly omission
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 13 Apr 2011 18:38:02 +0000 (20:38 +0200)]
Duarte is now an nfs server
Peter Palfrader [Tue, 12 Apr 2011 09:38:47 +0000 (11:38 +0200)]
ignore /etc/dsa/cron.ignore.dsa-puppet-stuff
Peter Palfrader [Tue, 12 Apr 2011 09:36:45 +0000 (11:36 +0200)]
Also ignore puppet noise on s390
Peter Palfrader [Mon, 11 Apr 2011 17:50:05 +0000 (19:50 +0200)]
Add glinka
Stephen Gran [Thu, 7 Apr 2011 18:49:05 +0000 (19:49 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Thu, 7 Apr 2011 18:48:54 +0000 (19:48 +0100)]
make is now silent for nagios repo
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 6 Apr 2011 16:51:09 +0000 (18:51 +0200)]
Add new 1&1 rev range to authorities
Stephen Gran [Wed, 6 Apr 2011 12:00:36 +0000 (13:00 +0100)]
some new sonames
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 5 Apr 2011 21:19:29 +0000 (22:19 +0100)]
new spammer
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 5 Apr 2011 18:43:48 +0000 (19:43 +0100)]
doh. Needs the argument as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Tue, 5 Apr 2011 18:41:18 +0000 (19:41 +0100)]
new sudo line for dsa-nagios
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Mon, 4 Apr 2011 07:06:41 +0000 (08:06 +0100)]
we handle unbound.conf with puppet - please to ignore
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sun, 3 Apr 2011 15:35:06 +0000 (17:35 +0200)]
edmonds recommended against using draft dns-0x20 for resolves
Peter Palfrader [Sun, 3 Apr 2011 15:32:20 +0000 (17:32 +0200)]
umn forwarders break dnssec
They don't give us NSEC records for missing DS records,
e.g:
| weasel@saens:~$ dig @128.101.101.101 debian.com -t ds +dnssec
|
| ; <<>> DiG 9.7.3 <<>> @128.101.101.101 debian.com -t ds +dnssec
| ; (1 server found)
| ;; global options: +cmd
| ;; Got answer:
| ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13955
| ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1
|
| ;; OPT PSEUDOSECTION:
| ; EDNS: version: 0, flags: do; udp: 4096
| ;; QUESTION SECTION:
| ;debian.com. IN DS
|
| ;; AUTHORITY SECTION:
| com. 527 IN SOA a.gtld-servers.net. nstld.verisign-grs.com.
1301844372 1800 900 604800 86400
| com. 527 IN RRSIG SOA 8 1 900
20110410152612 20110403141612 1793 com. JFEZa5Kb5xJyibTSX4YySdz8fY53Vftd1VswlmEMJSkMyUIqq2zYWJm6 zvpK1y4RjE9Abv7vo5X8GcMuOg4TO31Pf6rAdloqYvcqZyFtu7DBoxYF A1lpz0w5Ru9stynHe4sNTk2xnbODzbZlW5DmUpPV4b1MjbxLgXkCyuLs H6o=
|
| ;; Query time: 1 msec
| ;; SERVER: 128.101.101.101#53(128.101.101.101)
| ;; WHEN: Sun Apr 3 15:32:58 2011
| ;; MSG SIZE rcvd: 275
(no NSEC3 records)
Peter Palfrader [Sun, 3 Apr 2011 08:48:08 +0000 (10:48 +0200)]
No need to special case spohr
Peter Palfrader [Sun, 3 Apr 2011 08:45:59 +0000 (10:45 +0200)]
bind should not listen on * if there is unbound installed
Stephen Gran [Sat, 2 Apr 2011 08:19:10 +0000 (09:19 +0100)]
orff to squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Fri, 1 Apr 2011 19:57:28 +0000 (21:57 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
start replacing removed package references with references to debian.org package
oops, need this one. Put it back as well
oops, need this one. Put it back as well
oops, need this one. Put it back as well
oops, need this one. Put it back in the right module
add debian.org to manifest and remove a bunch of stuff it depends on
directory wants package installed first
pescetti to squeeze
Martin Zobel-Helas [Fri, 1 Apr 2011 19:56:23 +0000 (21:56 +0200)]
Fix internationalization (Closes: #620404)
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Fri, 1 Apr 2011 13:37:42 +0000 (14:37 +0100)]
start replacing removed package references with references to debian.org package
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 1 Apr 2011 13:33:32 +0000 (14:33 +0100)]
oops, need this one. Put it back as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 1 Apr 2011 13:32:12 +0000 (14:32 +0100)]
oops, need this one. Put it back as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 1 Apr 2011 13:30:33 +0000 (14:30 +0100)]
oops, need this one. Put it back as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 1 Apr 2011 13:28:33 +0000 (14:28 +0100)]
oops, need this one. Put it back in the right module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 1 Apr 2011 05:28:00 +0000 (06:28 +0100)]
add debian.org to manifest and remove a bunch of stuff it depends on
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 31 Mar 2011 19:28:15 +0000 (20:28 +0100)]
directory wants package installed first
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 31 Mar 2011 19:25:00 +0000 (20:25 +0100)]
pescetti to squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Thu, 31 Mar 2011 18:57:35 +0000 (20:57 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
added "don't edit me" banner
added spontini to squeeze set
steffani on squeeze
Simon Paillard [Fri, 18 Mar 2011 21:28:53 +0000 (22:28 +0100)]
www: fix ETag config across mirrors
Ignore inode, just use mtime and size
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Simon Paillard [Fri, 18 Mar 2011 21:28:51 +0000 (22:28 +0100)]
www: add png and icon to long expiring files
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Gerfried Fuchs [Tue, 29 Mar 2011 16:33:02 +0000 (18:33 +0200)]
allow for quick maintenance page in case of problems
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Luca Filipozzi [Wed, 30 Mar 2011 18:41:21 +0000 (18:41 +0000)]
added "don't edit me" banner
Luca Filipozzi [Wed, 30 Mar 2011 15:28:05 +0000 (15:28 +0000)]
added spontini to squeeze set
Peter Palfrader [Tue, 29 Mar 2011 21:26:19 +0000 (23:26 +0200)]
steffani on squeeze
Martin Zobel-Helas [Tue, 29 Mar 2011 20:31:09 +0000 (22:31 +0200)]
respighi -> squeeze
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Tue, 29 Mar 2011 19:12:11 +0000 (20:12 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 29 Mar 2011 19:10:22 +0000 (20:10 +0100)]
pergolesi to squeeze
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Tue, 29 Mar 2011 17:07:55 +0000 (19:07 +0200)]
include with a ?
Peter Palfrader [Tue, 29 Mar 2011 17:04:10 +0000 (19:04 +0200)]
saens on squeeze
Peter Palfrader [Tue, 29 Mar 2011 17:01:42 +0000 (19:01 +0200)]
And when we say saens, we mean senfl
Peter Palfrader [Tue, 29 Mar 2011 16:59:11 +0000 (18:59 +0200)]
but let sense not be resursive
Peter Palfrader [Tue, 29 Mar 2011 16:42:24 +0000 (18:42 +0200)]
named: Do no listen on localhost on saens
Peter Palfrader [Tue, 29 Mar 2011 16:35:21 +0000 (18:35 +0200)]
senfl on squeeze
Stephen Gran [Tue, 29 Mar 2011 06:35:13 +0000 (07:35 +0100)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Stephen Gran [Tue, 29 Mar 2011 06:35:07 +0000 (07:35 +0100)]
accept for v6 lo as well
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 28 Mar 2011 11:39:45 +0000 (13:39 +0200)]
gluck on squeeze
Peter Palfrader [Mon, 28 Mar 2011 10:45:08 +0000 (12:45 +0200)]
lobos on squeeze
Martin Zobel-Helas [Mon, 28 Mar 2011 09:03:27 +0000 (11:03 +0200)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
give the debbugs people access to the debbugs-mirror user too
busoni on squeeze
pettersson on squeeze
stabile on squeeze
soler on squeeze
schumann on squeeze
villa on squeeze
mpt raid gets confined to linux for now
Exim should also accept v6 connections over lo
Martin Zobel-Helas [Mon, 28 Mar 2011 09:02:58 +0000 (11:02 +0200)]
projectb is now on ries
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Sun, 27 Mar 2011 20:43:05 +0000 (22:43 +0200)]
give the debbugs people access to the debbugs-mirror user too
Peter Palfrader [Sun, 27 Mar 2011 19:40:16 +0000 (21:40 +0200)]
busoni on squeeze
Peter Palfrader [Sun, 27 Mar 2011 11:54:29 +0000 (13:54 +0200)]
pettersson on squeeze
Peter Palfrader [Sat, 26 Mar 2011 21:15:50 +0000 (22:15 +0100)]
stabile on squeeze
Peter Palfrader [Sat, 26 Mar 2011 20:19:51 +0000 (21:19 +0100)]
soler on squeeze
Peter Palfrader [Sat, 26 Mar 2011 19:43:25 +0000 (20:43 +0100)]
schumann on squeeze
Peter Palfrader [Sat, 26 Mar 2011 19:33:39 +0000 (20:33 +0100)]
villa on squeeze
Stephen Gran [Sat, 26 Mar 2011 09:38:50 +0000 (09:38 +0000)]
mpt raid gets confined to linux for now
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 26 Mar 2011 09:26:51 +0000 (09:26 +0000)]
Exim should also accept v6 connections over lo
Let's see how this does with erb
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Fri, 25 Mar 2011 21:33:23 +0000 (22:33 +0100)]
this file is under puppet control
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 25 Mar 2011 21:31:18 +0000 (22:31 +0100)]
widor -> squeeze
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Stephen Gran [Fri, 25 Mar 2011 07:19:01 +0000 (07:19 +0000)]
Merge branch 'master' of ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
Peter Palfrader [Thu, 24 Mar 2011 22:02:58 +0000 (23:02 +0100)]
Revert "squeeze uses --manage-gids to rpc.mountd by default - that seems to make sense"
This reverts commit
ebd78b64af71817821e84291b3c426c8d9ba1f2d.
Peter Palfrader [Thu, 24 Mar 2011 17:39:31 +0000 (18:39 +0100)]
samosa on squeeze
Stephen Gran [Thu, 24 Mar 2011 07:03:18 +0000 (07:03 +0000)]
this should work better
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Wed, 23 Mar 2011 22:35:59 +0000 (23:35 +0100)]
Merge remote branch 'pkern/master'
* pkern/master:
debian-org: drop malo as a buildd
Peter Palfrader [Wed, 23 Mar 2011 22:34:25 +0000 (23:34 +0100)]
Merge remote branch 'pkern/master'
* pkern/master:
debian-org: drop lafayette as a buildd