mirror/dsa-puppet.git
9 years agochopin on postgresql 9.4
Julien Cristau [Sun, 24 May 2015 08:30:36 +0000 (10:30 +0200)]
chopin on postgresql 9.4

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoUpdate builddlist apache config for jessie
Julien Cristau [Sun, 24 May 2015 08:16:33 +0000 (10:16 +0200)]
Update builddlist apache config for jessie

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoDisable DH ciphersuites on wheezy
Peter Palfrader [Sun, 24 May 2015 07:45:18 +0000 (09:45 +0200)]
Disable DH ciphersuites on wheezy

9 years agoMake puppet-config a template
Peter Palfrader [Sun, 24 May 2015 07:44:15 +0000 (09:44 +0200)]
Make puppet-config a template

9 years agobabin is hosted at 1und1
Paul Wise [Sun, 24 May 2015 06:14:11 +0000 (14:14 +0800)]
babin is hosted at 1und1

9 years agoAllow buildd2 users to use the chroots
Aurelien Jarno [Wed, 20 May 2015 04:48:03 +0000 (06:48 +0200)]
Allow buildd2 users to use the chroots

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
9 years agopostgres: bmdb1/main is on 9.4
Julien Cristau [Sun, 17 May 2015 20:14:56 +0000 (22:14 +0200)]
postgres: bmdb1/main is on 9.4

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoMake /etc/init.d/unbound stop wait for it to exit
Julien Cristau [Sun, 17 May 2015 14:47:03 +0000 (16:47 +0200)]
Make /etc/init.d/unbound stop wait for it to exit

Will hopefully make restart more reliable under systemd.

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoShip init script for unbound
Julien Cristau [Sun, 17 May 2015 14:43:36 +0000 (16:43 +0200)]
Ship init script for unbound

Taken from the jessie package for now.

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoMake ntp init script correctly stop the service
Julien Cristau [Sun, 17 May 2015 14:30:56 +0000 (16:30 +0200)]
Make ntp init script correctly stop the service

Tell start-stop-daemon to wait for it to exit, and retry with KILL if
TERM isn't enough.

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoship /etc/init.d/ntp
Julien Cristau [Sun, 17 May 2015 14:30:05 +0000 (16:30 +0200)]
ship /etc/init.d/ntp

Will let us patch it to try and fix restart under systemd

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agofix typo
Peter Palfrader [Sun, 17 May 2015 11:14:54 +0000 (13:14 +0200)]
fix typo

9 years agoluchesi -> ubc-bl4
Peter Palfrader [Sun, 17 May 2015 11:14:40 +0000 (13:14 +0200)]
luchesi -> ubc-bl4

9 years agomake bm-bl[26] timeservers
Peter Palfrader [Sun, 17 May 2015 08:27:17 +0000 (10:27 +0200)]
make bm-bl[26] timeservers

9 years agomake bl[268] the ubc recursors
Peter Palfrader [Sun, 17 May 2015 07:46:59 +0000 (09:46 +0200)]
make bl[268] the ubc recursors

9 years agoboito -> ubc-bl6
Peter Palfrader [Sun, 17 May 2015 06:59:48 +0000 (08:59 +0200)]
boito -> ubc-bl6

9 years agopasquini -> ubc-bl7
Peter Palfrader [Sun, 17 May 2015 06:59:26 +0000 (08:59 +0200)]
pasquini -> ubc-bl7

9 years agoubc-bl2 has the ekey
Martin Zobel-Helas [Sat, 16 May 2015 21:55:59 +0000 (21:55 +0000)]
ubc-bl2 has the ekey

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agotristano -> ubc-bl3
Peter Palfrader [Sat, 16 May 2015 20:23:44 +0000 (22:23 +0200)]
tristano -> ubc-bl3

9 years agodisable chown_upload in vsftpd config
Julien Cristau [Sat, 16 May 2015 14:54:34 +0000 (16:54 +0200)]
disable chown_upload in vsftpd config

vsftpd in jessie seems to explode when this is set, and leave 0-byte
files around.

9 years agoand now use the real bl8
Peter Palfrader [Sat, 16 May 2015 12:47:49 +0000 (14:47 +0200)]
and now use the real bl8

9 years agosalieri is no longer around - replace it as a nameserver with ubc-bl8
Peter Palfrader [Sat, 16 May 2015 12:45:17 +0000 (14:45 +0200)]
salieri is no longer around - replace it as a nameserver with ubc-bl8

9 years agoreplace a few bertali occurrences with ubc-bl2
Peter Palfrader [Sat, 16 May 2015 12:20:10 +0000 (14:20 +0200)]
replace a few bertali occurrences with ubc-bl2

9 years agodak is on postgresql 9.4
Julien Cristau [Sat, 16 May 2015 11:19:16 +0000 (13:19 +0200)]
dak is on postgresql 9.4

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoand 9.4 too
Peter Palfrader [Sat, 16 May 2015 09:54:06 +0000 (11:54 +0200)]
and 9.4 too

9 years agoRevert "Ensure postgresql-client is installed on backup server"
Peter Palfrader [Sat, 16 May 2015 09:53:34 +0000 (11:53 +0200)]
Revert "Ensure postgresql-client is installed on backup server"

This reverts commit 2da31c9188a4e27bf7089a075fb04d93b9c7288f.

We want the exact version.

9 years agowannabuild is on 9.4
Peter Palfrader [Sat, 16 May 2015 09:50:18 +0000 (11:50 +0200)]
wannabuild is on 9.4

9 years agoEnsure postgresql-client is installed on backup server
Peter Palfrader [Sat, 16 May 2015 09:46:06 +0000 (11:46 +0200)]
Ensure postgresql-client is installed on backup server

9 years agoand make more things consistent
Peter Palfrader [Sat, 16 May 2015 09:21:23 +0000 (11:21 +0200)]
and make more things consistent

9 years agoremove obsolete entries
Peter Palfrader [Sat, 16 May 2015 09:21:16 +0000 (11:21 +0200)]
remove obsolete entries

9 years agothe wanna-build cluster was renamed
Peter Palfrader [Sat, 16 May 2015 09:21:05 +0000 (11:21 +0200)]
the wanna-build cluster was renamed

9 years agoMerge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa...
Martin Zobel-Helas [Sat, 16 May 2015 07:26:49 +0000 (07:26 +0000)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  replace a few dijkstra occurrences with ubc-bl8

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Conflicts:
modules/lvm/manifests/init.pp

9 years agorename dijkstra
Martin Zobel-Helas [Sat, 16 May 2015 07:25:20 +0000 (07:25 +0000)]
rename dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoreplace a few dijkstra occurrences with ubc-bl8
Peter Palfrader [Sat, 16 May 2015 00:05:27 +0000 (02:05 +0200)]
replace a few dijkstra occurrences with ubc-bl8

9 years agorename dijkstra
Martin Zobel-Helas [Fri, 15 May 2015 23:38:42 +0000 (23:38 +0000)]
rename dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremote dijkstra
Martin Zobel-Helas [Fri, 15 May 2015 23:34:43 +0000 (23:34 +0000)]
remote dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoMore MaxConnectionsPerChild
Peter Palfrader [Fri, 15 May 2015 09:03:27 +0000 (11:03 +0200)]
More MaxConnectionsPerChild

9 years agoHandle multiple keys in ldap correctly
Peter Palfrader [Thu, 14 May 2015 16:04:39 +0000 (18:04 +0200)]
Handle multiple keys in ldap correctly

9 years agoremove blavet (RT#5813)
Peter Palfrader [Thu, 14 May 2015 15:18:46 +0000 (17:18 +0200)]
remove blavet (RT#5813)

9 years agoremove blavet (RT#5813)
Peter Palfrader [Thu, 14 May 2015 15:17:46 +0000 (17:17 +0200)]
remove blavet (RT#5813)

9 years agoretire ravel
Peter Palfrader [Thu, 14 May 2015 10:17:33 +0000 (12:17 +0200)]
retire ravel

9 years agoremove ,bind from schroot fstab on freebsd
Peter Palfrader [Thu, 14 May 2015 09:36:55 +0000 (11:36 +0200)]
remove ,bind from schroot fstab on freebsd

9 years agomaybe staging wants a 3rdparty module path as well...
Martin Zobel-Helas [Wed, 13 May 2015 17:40:54 +0000 (17:40 +0000)]
maybe staging wants a 3rdparty module path as well...

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:42:33 +0000 (16:42 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:37:38 +0000 (16:37 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove include on it as well
Martin Zobel-Helas [Wed, 13 May 2015 16:24:07 +0000 (16:24 +0000)]
remove include on it as well

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:21:17 +0000 (16:21 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agothere is a volatile for freebsd after all
Peter Palfrader [Wed, 13 May 2015 09:07:59 +0000 (11:07 +0200)]
there is a volatile for freebsd after all

9 years agokfreebsd jessie apt sources
Peter Palfrader [Wed, 13 May 2015 08:16:42 +0000 (08:16 +0000)]
kfreebsd jessie apt sources

9 years agoUpgrade to 3rdparty version 0.9.5 of elasticsearch/elasticsearch
Martin Zobel-Helas [Tue, 12 May 2015 17:18:04 +0000 (17:18 +0000)]
Upgrade to 3rdparty version 0.9.5 of elasticsearch/elasticsearch

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoUpgrade to 3rdparty version 0.9.4 of elasticsearch/elasticsearch
Martin Zobel-Helas [Tue, 12 May 2015 17:16:21 +0000 (17:16 +0000)]
Upgrade to 3rdparty version 0.9.4 of elasticsearch/elasticsearch

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoAdd mirror for linaro hoster
Aurelien Jarno [Mon, 11 May 2015 16:46:53 +0000 (18:46 +0200)]
Add mirror for linaro hoster

The machines are in USA, defaulting to a mirror in Europe is suboptimal.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agoremove buildd-proposed apt repo on porpora
Julien Cristau [Sun, 10 May 2015 13:27:55 +0000 (15:27 +0200)]
remove buildd-proposed apt repo on porpora

There's no jessie-proposed.

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoremove lobos
Martin Zobel-Helas [Wed, 6 May 2015 21:49:04 +0000 (21:49 +0000)]
remove lobos

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoapache2: configure mpm_worker module on jessie hosts
Julien Cristau [Tue, 28 Apr 2015 15:37:56 +0000 (17:37 +0200)]
apache2: configure mpm_worker module on jessie hosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoFix comment in HSTS macro
Julien Cristau [Wed, 6 May 2015 18:51:48 +0000 (20:51 +0200)]
Fix comment in HSTS macro

9 years agoarmhf anf s390x now have the default set of suites
Peter Palfrader [Wed, 6 May 2015 06:21:16 +0000 (08:21 +0200)]
armhf anf s390x now have the default set of suites

9 years agono stretch for kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:20:52 +0000 (08:20 +0200)]
no stretch for kfreebsd

9 years agoUse -kfreebsd suite name on jessie/kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:09:25 +0000 (08:09 +0200)]
Use -kfreebsd suite name on jessie/kfreebsd

9 years agoUse -kfreebsd suite name on jessie/kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:08:26 +0000 (08:08 +0200)]
Use -kfreebsd suite name on jessie/kfreebsd

9 years agoAlso extract arch info from schroot name
Peter Palfrader [Wed, 6 May 2015 06:02:56 +0000 (08:02 +0200)]
Also extract arch info from schroot name

9 years agoThe needed tzdata is also in jessie-updates
Paul Wise [Sat, 2 May 2015 14:16:15 +0000 (22:16 +0800)]
The needed tzdata is also in jessie-updates

9 years agoUse the leap-seconds.list file from tzdata on stretch (see #775166)
Paul Wise [Sun, 26 Apr 2015 23:53:18 +0000 (07:53 +0800)]
Use the leap-seconds.list file from tzdata on stretch (see #775166)

Allows us to get rid of the leap-seconds.list embedded data copy.

9 years agoRemove some dpkg cruft for removed ulogd package
Paul Wise [Sat, 2 May 2015 12:11:54 +0000 (20:11 +0800)]
Remove some dpkg cruft for removed ulogd package

9 years agoAdd -x to allowed rsync parameteres due to jessie
Peter Palfrader [Sat, 2 May 2015 10:16:09 +0000 (12:16 +0200)]
Add -x to allowed rsync parameteres due to jessie

9 years agoAdd -x to allowed rsync parameteres due to jessie
Peter Palfrader [Sat, 2 May 2015 10:10:54 +0000 (12:10 +0200)]
Add -x to allowed rsync parameteres due to jessie

9 years agoRe-enable symlinks on static vhosts
Julien Cristau [Fri, 1 May 2015 17:53:34 +0000 (19:53 +0200)]
Re-enable symlinks on static vhosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoEnable Indexes option for static vhosts
Julien Cristau [Fri, 1 May 2015 17:38:54 +0000 (19:38 +0200)]
Enable Indexes option for static vhosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agobrahms: drop jessie-proposed buildd updates (as it does not exist yet)
Héctor Orón Martínez [Fri, 1 May 2015 14:22:54 +0000 (16:22 +0200)]
brahms: drop jessie-proposed buildd updates (as it does not exist yet)

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
9 years agolintian.d.o: Relocate comment
Niels Thykier [Fri, 1 May 2015 12:27:29 +0000 (14:27 +0200)]
lintian.d.o: Relocate comment

Signed-off-by: Niels Thykier <niels@thykier.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agolintian.d.o: Remove graph directory - no longer used
Niels Thykier [Fri, 1 May 2015 12:25:25 +0000 (14:25 +0200)]
lintian.d.o: Remove graph directory - no longer used

Lintian now puts the graphs in the resource directory - like other
resources, their name will now change as their content do.

Signed-off-by: Niels Thykier <niels@thykier.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agomore apache migrations
Peter Palfrader [Fri, 1 May 2015 10:39:55 +0000 (12:39 +0200)]
more apache migrations

9 years agomove bizet to msa
Peter Palfrader [Fri, 1 May 2015 07:57:57 +0000 (09:57 +0200)]
move bizet to msa

9 years agoMove bizet iscsi handling to kvm hosts
Peter Palfrader [Fri, 1 May 2015 07:51:37 +0000 (09:51 +0200)]
Move bizet iscsi handling to kvm hosts

9 years agoFix static hosts on jessie
Peter Palfrader [Fri, 1 May 2015 06:53:31 +0000 (08:53 +0200)]
Fix static hosts on jessie

9 years agoFix chain for new gobby cert
Julien Cristau [Thu, 30 Apr 2015 09:03:52 +0000 (11:03 +0200)]
Fix chain for new gobby cert

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agonew ssl certificate for gobby.debian.org
Julien Cristau [Thu, 30 Apr 2015 08:55:01 +0000 (10:55 +0200)]
new ssl certificate for gobby.debian.org

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoRevert "Use the leap-seconds.list file from tzdata on jessie (see #775166)"
Paul Wise [Thu, 30 Apr 2015 00:35:51 +0000 (08:35 +0800)]
Revert "Use the leap-seconds.list file from tzdata on jessie (see #775166)"

This reverts commit d2e73a9e90b6d671c545ba2c552239bf55e1f20f.

Too early!

9 years agoRedirect arm64 to the general ARM ports page
Paul Wise [Thu, 30 Apr 2015 00:34:47 +0000 (08:34 +0800)]
Redirect arm64 to the general ARM ports page

9 years agoUse the leap-seconds.list file from tzdata on jessie (see #775166)
Paul Wise [Sun, 26 Apr 2015 23:53:18 +0000 (07:53 +0800)]
Use the leap-seconds.list file from tzdata on jessie (see #775166)

Allows us to get rid of the leap-seconds.list embedded data copy.

9 years agoferm: office ip renumbering
Julien Cristau [Tue, 28 Apr 2015 15:33:59 +0000 (17:33 +0200)]
ferm: office ip renumbering

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoForward port nfs-common.default
Peter Palfrader [Tue, 28 Apr 2015 11:14:32 +0000 (13:14 +0200)]
Forward port nfs-common.default

9 years agorename milanollo volumes
Peter Palfrader [Tue, 28 Apr 2015 10:03:13 +0000 (12:03 +0200)]
rename milanollo volumes

9 years agoHandle apache 2.4 authz_host config in www.debian.org template
Julien Cristau [Mon, 27 Apr 2015 20:17:20 +0000 (22:17 +0200)]
Handle apache 2.4 authz_host config in debian.org template

9 years agoComment out RewriteLog{,Level} from www.debian.org vhost config
Julien Cristau [Mon, 27 Apr 2015 19:33:43 +0000 (21:33 +0200)]
Comment out RewriteLog{,Level} from debian.org vhost config

Those options are gone in apache 2.4.

9 years agoapache2.logrotate: rebase onto jessie
Peter Palfrader [Mon, 27 Apr 2015 14:36:38 +0000 (16:36 +0200)]
apache2.logrotate: rebase onto jessie

9 years agoAdd milanollo-lvm2
Peter Palfrader [Mon, 27 Apr 2015 09:06:40 +0000 (11:06 +0200)]
Add milanollo-lvm2

9 years agoRe-enable ekey on grnet-node01
Peter Palfrader [Mon, 27 Apr 2015 07:47:20 +0000 (09:47 +0200)]
Re-enable ekey on grnet-node01

9 years agoRevert "stretch does not debootstrap right now"
Peter Palfrader [Sun, 26 Apr 2015 15:32:54 +0000 (17:32 +0200)]
Revert "stretch does not debootstrap right now"

This reverts commit 4868551bb3d417a37199a1f88e19ca77f1786a5d.

9 years agostretch does not debootstrap right now
Peter Palfrader [Sun, 26 Apr 2015 08:17:30 +0000 (10:17 +0200)]
stretch does not debootstrap right now

9 years agouse the schroot-unpack tmpfs when available
Peter Palfrader [Sun, 26 Apr 2015 07:54:25 +0000 (09:54 +0200)]
use the schroot-unpack tmpfs when available

9 years agodebian+=1
Peter Palfrader [Sun, 26 Apr 2015 07:30:58 +0000 (09:30 +0200)]
debian+=1

9 years agocruft cleanup
Peter Palfrader [Sun, 26 Apr 2015 07:30:41 +0000 (09:30 +0200)]
cruft cleanup

9 years agoAdding !DSS to our CipherSuite does not make an effective difference, but it cuts...
Peter Palfrader [Wed, 22 Apr 2015 05:44:24 +0000 (07:44 +0200)]
Adding !DSS to our CipherSuite does not make an effective difference, but it cuts down on noise in openssl ciphers -v

9 years agocheck-libs: Ignore agetty processes
Peter Palfrader [Tue, 21 Apr 2015 08:26:26 +0000 (10:26 +0200)]
check-libs: Ignore agetty processes

9 years agoAdd redirects for Debian 9 (stretch) and 10 (buster)
Paul Wise [Tue, 21 Apr 2015 01:34:19 +0000 (09:34 +0800)]
Add redirects for Debian 9 (stretch) and 10 (buster)

9 years agoAdd jerea
Peter Palfrader [Sun, 19 Apr 2015 09:56:02 +0000 (11:56 +0200)]
Add jerea

9 years agoAdd jerea
Peter Palfrader [Sun, 19 Apr 2015 09:52:52 +0000 (11:52 +0200)]
Add jerea

9 years agoservice is in usr/sbin, which isn't in PATH
Peter Palfrader [Sat, 11 Apr 2015 09:37:08 +0000 (11:37 +0200)]
service is in usr/sbin, which isn't in PATH

9 years agoanchor string
Peter Palfrader [Sat, 11 Apr 2015 08:57:37 +0000 (10:57 +0200)]
anchor string