mirror/dsa-puppet.git
8 years agoAdd tate
Peter Palfrader [Sun, 31 Jan 2016 15:56:09 +0000 (16:56 +0100)]
Add tate

8 years agoletsencrypt can trigger zone file update
Peter Palfrader [Sun, 31 Jan 2016 14:02:20 +0000 (15:02 +0100)]
letsencrypt can trigger zone file update

8 years agoretire unused rsync modules on ftp-master
Peter Palfrader [Tue, 26 Jan 2016 14:38:13 +0000 (15:38 +0100)]
retire unused rsync modules on ftp-master

8 years agoRedirects /doc/manuals/ to /doc/
Iain R. Learmonth [Sun, 24 Jan 2016 16:15:34 +0000 (16:15 +0000)]
Redirects /doc/manuals/ to /doc/

The /doc/manuals/ folder contains manuals that are built as part of the
webwml process, but does not contain an index file. /doc/ is the logical
index file for this, so redirect to that to avoid just providing an
Apache index listing. (Fixes: #694927)

Signed-off-by: Peter Palfrader <peter@palfrader.org>
8 years agofix ipv6 netrange for anu
Julien Cristau [Sun, 24 Jan 2016 16:09:01 +0000 (17:09 +0100)]
fix ipv6 netrange for anu

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agolocal mirror for .au servers
Peter Palfrader [Sat, 23 Jan 2016 17:51:53 +0000 (18:51 +0100)]
local mirror for .au servers

8 years agobytemark has debian-debug
Peter Palfrader [Fri, 22 Jan 2016 20:01:44 +0000 (21:01 +0100)]
bytemark has debian-debug

8 years agohttp-redir role with apache config
Peter Palfrader [Sun, 17 Jan 2016 20:58:58 +0000 (21:58 +0100)]
http-redir role with apache config

8 years agop-u for kfreebsd
Peter Palfrader [Sun, 17 Jan 2016 18:54:36 +0000 (19:54 +0100)]
p-u for kfreebsd

8 years agolvm.conf for clementi and czerny
Julien Cristau [Sun, 17 Jan 2016 15:42:23 +0000 (16:42 +0100)]
lvm.conf for clementi and czerny

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agobuildds: force SHA512 signatures
Aurelien Jarno [Sat, 16 Jan 2016 17:25:48 +0000 (18:25 +0100)]
buildds: force SHA512 signatures

Provide a ~/.gnupg/gpg.conf on the buildds to force SHA512 signatures.
Otherwise gpg still uses to SHA1 by default...

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agognt on -14
Peter Palfrader [Sat, 16 Jan 2016 15:43:00 +0000 (16:43 +0100)]
gnt on -14

8 years agoblades update bm
Peter Palfrader [Fri, 15 Jan 2016 20:04:34 +0000 (21:04 +0100)]
blades update bm

8 years agoAdd bmdb1-lvm2 and dillon-lvm2 wwids
Peter Palfrader [Wed, 13 Jan 2016 09:28:47 +0000 (10:28 +0100)]
Add bmdb1-lvm2 and dillon-lvm2 wwids

8 years agoFix path name (etc/rsyncd instead of /etc/rsync)
Peter Palfrader [Tue, 12 Jan 2016 08:23:46 +0000 (09:23 +0100)]
Fix path name (etc/rsyncd instead of /etc/rsync)

8 years agoDo push -anu on static updates
Peter Palfrader [Tue, 12 Jan 2016 08:14:23 +0000 (09:14 +0100)]
Do push -anu on static updates

8 years ago-anu static address
Peter Palfrader [Tue, 12 Jan 2016 08:14:06 +0000 (09:14 +0100)]
-anu static address

8 years agoenable -anu security addresses
Peter Palfrader [Tue, 12 Jan 2016 08:07:18 +0000 (09:07 +0100)]
enable -anu security addresses

8 years agosamhain ignore: /etc/rsyncd/debian.secrets is handled by the mirror team
Peter Palfrader [Mon, 11 Jan 2016 17:28:34 +0000 (18:28 +0100)]
samhain ignore: /etc/rsyncd/debian.secrets is handled by the mirror team

8 years agofix syncproxy manifest site name
Peter Palfrader [Mon, 11 Jan 2016 11:54:31 +0000 (11:54 +0000)]
fix syncproxy manifest site name

8 years agohave security rsync bind to specific address
Peter Palfrader [Mon, 11 Jan 2016 11:51:31 +0000 (12:51 +0100)]
have security rsync bind to specific address

8 years agoAdd IP addresses for mirror-anu in its role as syncproxy.au
Peter Palfrader [Mon, 11 Jan 2016 11:46:02 +0000 (12:46 +0100)]
Add IP addresses for mirror-anu in its role as syncproxy.au

8 years agoGive d-i folks access to rebuild the d-i website
Paul Wise [Sun, 10 Jan 2016 22:15:00 +0000 (06:15 +0800)]
Give d-i folks access to rebuild the d-i website

8 years agorng-tools: yet another try to fix it
Aurelien Jarno [Sat, 9 Jan 2016 15:04:20 +0000 (16:04 +0100)]
rng-tools: yet another try to fix it

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agorng-tools: another try to fix it
Aurelien Jarno [Sat, 9 Jan 2016 14:19:49 +0000 (15:19 +0100)]
rng-tools: another try to fix it

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoEnable rng-tools module on linux
Aurelien Jarno [Sat, 9 Jan 2016 14:02:58 +0000 (15:02 +0100)]
Enable rng-tools module on linux

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoInstall rng-tools if there is a /dev/hwrng device
Aurelien Jarno [Sat, 9 Jan 2016 13:22:08 +0000 (14:22 +0100)]
Install rng-tools if there is a /dev/hwrng device

We can then provide entropy to the guests using virtio-rng.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoMake an apache site for syncproxies
Peter Palfrader [Fri, 8 Jan 2016 21:12:57 +0000 (21:12 +0000)]
Make an apache site for syncproxies

8 years agouse https in our default index page
Peter Palfrader [Fri, 8 Jan 2016 21:12:35 +0000 (21:12 +0000)]
use https in our default index page

8 years agovars need a $
Peter Palfrader [Fri, 8 Jan 2016 20:35:26 +0000 (21:35 +0100)]
vars need a $

8 years agomove bind addresses to vars
Peter Palfrader [Fri, 8 Jan 2016 20:34:01 +0000 (21:34 +0100)]
move bind addresses to vars

8 years agoklecker gets dsa-rsync from being a syncproxy
Peter Palfrader [Fri, 8 Jan 2016 20:30:31 +0000 (21:30 +0100)]
klecker gets dsa-rsync from being a syncproxy

8 years agoAdd klecker to the syncproxy role
Peter Palfrader [Fri, 8 Jan 2016 20:29:17 +0000 (21:29 +0100)]
Add klecker to the syncproxy role

8 years agoremove schein from security-mirror group
Peter Palfrader [Fri, 8 Jan 2016 08:35:54 +0000 (09:35 +0100)]
remove schein from security-mirror group

8 years agodebian.c3sl.ufpr.br is actually ftp.br.debian.org
Aurelien Jarno [Thu, 7 Jan 2016 15:41:12 +0000 (16:41 +0100)]
debian.c3sl.ufpr.br is actually ftp.br.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoupdate unicamp netrange
Aurelien Jarno [Thu, 7 Jan 2016 15:37:15 +0000 (16:37 +0100)]
update unicamp netrange

In addition, use the whole range allocated to unicamp instead of the
debian range to cope with (fortunately unlikely) future IP changes.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoGet rid of buildd-{lenny,squeeze,wheezy} shares on security-master rsync
Peter Palfrader [Wed, 6 Jan 2016 21:32:26 +0000 (22:32 +0100)]
Get rid of buildd-{lenny,squeeze,wheezy} shares on security-master rsync

8 years agolog rsync for syncproxy and security to dedicated logs
Peter Palfrader [Wed, 6 Jan 2016 21:31:36 +0000 (22:31 +0100)]
log rsync for syncproxy and security to dedicated logs

8 years agoNo SRV support in jessie apt
Peter Palfrader [Wed, 6 Jan 2016 12:28:43 +0000 (13:28 +0100)]
No SRV support in jessie apt

8 years agoUse deb.debian.org as the default mirror to test it
Peter Palfrader [Wed, 6 Jan 2016 12:27:30 +0000 (13:27 +0100)]
Use deb.debian.org as the default mirror to test it

8 years agomirror.nl.leaseweb.nl is out of date
Peter Palfrader [Wed, 6 Jan 2016 12:26:46 +0000 (13:26 +0100)]
mirror.nl.leaseweb.nl is out of date

8 years agoAdd mirror-umn to syncproxy
Peter Palfrader [Mon, 4 Jan 2016 20:40:37 +0000 (21:40 +0100)]
Add mirror-umn to syncproxy

8 years agoset security IP address for mirror-umn
Peter Palfrader [Mon, 4 Jan 2016 20:40:22 +0000 (21:40 +0100)]
set security IP address for mirror-umn

8 years agoBetter if the static mirrors get the d-i.d.o cert
Julien Cristau [Sat, 2 Jan 2016 22:40:38 +0000 (23:40 +0100)]
Better if the static mirrors get the d-i.d.o cert

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoHTTPS for d-i.debian.org (rt#6049)
Julien Cristau [Sat, 2 Jan 2016 22:36:19 +0000 (23:36 +0100)]
HTTPS for d-i.debian.org (rt#6049)

Drop the ServerAlias, we're not using it and the ssl macro doesn't mix
with extra.

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoRevert "static-mirroring: add common-static-vhost-ssl-with-extra macro"
Julien Cristau [Sat, 2 Jan 2016 22:28:21 +0000 (23:28 +0100)]
Revert "static-mirroring: add common-static-vhost-ssl-with-extra macro"

This reverts commit 8f4f534e4d36f406477077c09d113982014e49e9.

That's not going to work out.

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agostatic-mirroring: add common-static-vhost-ssl-with-extra macro
Julien Cristau [Sat, 2 Jan 2016 22:22:20 +0000 (23:22 +0100)]
static-mirroring: add common-static-vhost-ssl-with-extra macro

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoadd d-i.debian.org ssl cert
Julien Cristau [Sat, 2 Jan 2016 22:00:54 +0000 (23:00 +0100)]
add d-i.debian.org ssl cert

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoAttempt to configure an apache vhost for a static component only if it exists on...
Peter Palfrader [Sat, 2 Jan 2016 20:21:21 +0000 (20:21 +0000)]
Attempt to configure an apache vhost for a static component only if it exists on this host, part 2

8 years agoswitch my root ssh key to one stored on a yubikey
Julien Cristau [Sat, 2 Jan 2016 20:12:13 +0000 (21:12 +0100)]
switch my root ssh key to one stored on a yubikey

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoAttempt to configure an apache vhost for a static component only if it exists on...
Peter Palfrader [Sat, 2 Jan 2016 19:58:00 +0000 (19:58 +0000)]
Attempt to configure an apache vhost for a static component only if it exists on this host, part 1

8 years agoRevert "cron.d/dsa-buildd: only look for .upload files"
Aurelien Jarno [Sat, 2 Jan 2016 16:55:19 +0000 (17:55 +0100)]
Revert "cron.d/dsa-buildd: only look for .upload files"

This reverts commit df6c4329e9b0395d76d7170581907c70116ecebf.

Instead change buildd to avoid the condition to happen.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agocron.d/dsa-buildd: only look for .upload files
Aurelien Jarno [Sat, 2 Jan 2016 15:37:08 +0000 (16:37 +0100)]
cron.d/dsa-buildd: only look for .upload files

Only look for .upload files, and use their contents to determine which
files to delete. This avoid triggering reuploads when the package has
been built before midnight, but uploaded after midnight.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoallow gitdoadm to sudo to git
Peter Palfrader [Wed, 30 Dec 2015 20:04:28 +0000 (21:04 +0100)]
allow gitdoadm to sudo to git

8 years agoretire delfin-srv
Peter Palfrader [Tue, 29 Dec 2015 22:02:46 +0000 (23:02 +0100)]
retire delfin-srv

8 years agoAdd delfin-lvm
Peter Palfrader [Tue, 29 Dec 2015 21:51:52 +0000 (22:51 +0100)]
Add delfin-lvm

8 years agoretire bmdb1-srv
Peter Palfrader [Tue, 29 Dec 2015 21:39:30 +0000 (22:39 +0100)]
retire bmdb1-srv

8 years agoAdd bmdb1-lvm
Peter Palfrader [Tue, 29 Dec 2015 20:31:14 +0000 (21:31 +0100)]
Add bmdb1-lvm

8 years agoadd vittoria to ferm rules
Martin Zobel-Helas [Sat, 26 Dec 2015 12:39:13 +0000 (12:39 +0000)]
add vittoria to ferm rules

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
8 years agoadd vittoria to postgres hosts
Martin Zobel-Helas [Sat, 26 Dec 2015 12:34:41 +0000 (12:34 +0000)]
add vittoria to postgres hosts

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
8 years agoset different path for lintian, to avoid backup of autogenerated material every day.
Martin Zobel-Helas [Fri, 25 Dec 2015 10:32:22 +0000 (10:32 +0000)]
set different path for lintian, to avoid backup of autogenerated material every day.

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
8 years agoftpmaster changed archive layout on franck
Julien Cristau [Fri, 25 Dec 2015 00:48:56 +0000 (01:48 +0100)]
ftpmaster changed archive layout on franck

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agorsyncd-dakmaster.conf update from Joerg
Julien Cristau [Thu, 24 Dec 2015 12:19:01 +0000 (13:19 +0100)]
rsyncd-dakmaster.conf update from Joerg

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoPoint to https://www.debian.org/mirror/size for size
Peter Palfrader [Tue, 22 Dec 2015 05:57:03 +0000 (06:57 +0100)]
Point to https://debian.org/mirror/size for size

8 years agochange order
Peter Palfrader [Mon, 21 Dec 2015 19:26:28 +0000 (20:26 +0100)]
change order

8 years agoalso replace dashes
Peter Palfrader [Mon, 21 Dec 2015 19:25:55 +0000 (20:25 +0100)]
also replace dashes

8 years agochange order
Peter Palfrader [Mon, 21 Dec 2015 19:25:47 +0000 (20:25 +0100)]
change order

8 years agofix syntax
Peter Palfrader [Mon, 21 Dec 2015 19:22:01 +0000 (20:22 +0100)]
fix syntax

8 years agomake syncproxy rsync.conf a template
Peter Palfrader [Mon, 21 Dec 2015 19:21:18 +0000 (20:21 +0100)]
make syncproxy rsync.conf a template

8 years agoAdd more paths
Peter Palfrader [Mon, 21 Dec 2015 19:18:14 +0000 (20:18 +0100)]
Add more paths

8 years agorefactor debian-org/lib/facter/paths.rb facter
Peter Palfrader [Mon, 21 Dec 2015 19:18:07 +0000 (20:18 +0100)]
refactor debian-org/lib/facter/paths.rb facter

8 years agoAdd mirror-isc to syncproxy role, update rsync.conf
Peter Palfrader [Mon, 21 Dec 2015 19:09:10 +0000 (20:09 +0100)]
Add mirror-isc to syncproxy role, update conf

8 years agoAdd deb.d.o vhost
Peter Palfrader [Mon, 21 Dec 2015 18:44:58 +0000 (19:44 +0100)]
Add deb.d.o vhost

8 years agoAdd a deb.debian.org static component
Peter Palfrader [Mon, 21 Dec 2015 18:36:00 +0000 (19:36 +0100)]
Add a deb.debian.org static component

8 years agosyntax fix
Peter Palfrader [Mon, 21 Dec 2015 18:15:51 +0000 (19:15 +0100)]
syntax fix

8 years agoSet bind address for security rsync
Peter Palfrader [Mon, 21 Dec 2015 18:12:54 +0000 (19:12 +0100)]
Set bind address for security rsync

8 years agoSet IP address for static mirror and debug for mirror-isc
Peter Palfrader [Mon, 21 Dec 2015 18:08:59 +0000 (19:08 +0100)]
Set IP address for static mirror and debug for mirror-isc

8 years agodebian.inode.at dropped sparc
Peter Palfrader [Mon, 21 Dec 2015 09:27:34 +0000 (10:27 +0100)]
debian.inode.at dropped sparc

8 years agodecommission bizet
Julien Cristau [Sun, 20 Dec 2015 15:28:34 +0000 (16:28 +0100)]
decommission bizet

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agofix template
Peter Palfrader [Sun, 20 Dec 2015 11:57:37 +0000 (12:57 +0100)]
fix template

8 years agorename file
Peter Palfrader [Sun, 20 Dec 2015 11:56:09 +0000 (12:56 +0100)]
rename file

8 years agoAdd debug mirror
Peter Palfrader [Sun, 20 Dec 2015 11:55:01 +0000 (12:55 +0100)]
Add debug mirror

8 years agomore debconf static stuff
Peter Palfrader [Sat, 19 Dec 2015 11:45:27 +0000 (12:45 +0100)]
more debconf static stuff

8 years agoAdd static debconf pages
Peter Palfrader [Sat, 19 Dec 2015 11:43:00 +0000 (12:43 +0100)]
Add static debconf pages

8 years agoDisable jessie-proposed-update repo for mips machines
Aurelien Jarno [Thu, 17 Dec 2015 23:04:28 +0000 (00:04 +0100)]
Disable jessie-proposed-update repo for mips machines

The fix we need for the build daemons is now in the jessie-security
kernel.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agorepro needs a restart to reload the cert
Peter Palfrader [Thu, 17 Dec 2015 15:53:27 +0000 (16:53 +0100)]
repro needs a restart to reload the cert

8 years agoreload repro when www.debian.org cert changes
Peter Palfrader [Thu, 17 Dec 2015 15:49:18 +0000 (16:49 +0100)]
reload repro when www.debian.org cert changes

8 years agoremove beach from nfs, add buxtehude instead
Peter Palfrader [Wed, 16 Dec 2015 20:19:30 +0000 (21:19 +0100)]
remove beach from nfs, add buxtehude instead

8 years agolw04 is now a ProLiant ML150 G5, and hp-health does not support that
Peter Palfrader [Wed, 16 Dec 2015 07:27:33 +0000 (08:27 +0100)]
lw04 is now a ProLiant ML150 G5, and hp-health does not support that

8 years agoRevert "Temporarily do not use mirror-ubc"
Peter Palfrader [Sun, 13 Dec 2015 15:36:47 +0000 (16:36 +0100)]
Revert "Temporarily do not use mirror-ubc"

This reverts commit 7207fb5b8c2d19d5ee7f80c6e66e63c3351ed339.

8 years agoRemove multipath defaults section
Peter Palfrader [Sun, 13 Dec 2015 14:00:50 +0000 (15:00 +0100)]
Remove multipath defaults section

8 years agoTemporarily do not use mirror-ubc
Peter Palfrader [Sun, 13 Dec 2015 12:05:08 +0000 (13:05 +0100)]
Temporarily do not use mirror-ubc

8 years agoUse security-cdn.d.o instead of security.d.o
Tollef Fog Heen [Sat, 12 Dec 2015 12:17:40 +0000 (13:17 +0100)]
Use security-cdn.d.o instead of security.d.o

8 years agobunch of updated certs
Peter Palfrader [Fri, 11 Dec 2015 18:46:09 +0000 (19:46 +0100)]
bunch of updated certs

8 years agomove network-test master to dillon
Peter Palfrader [Fri, 11 Dec 2015 11:54:18 +0000 (12:54 +0100)]
move network-test master to dillon

8 years agoMove planet, bits and network-test also from bizet since the sources are all in europe
Peter Palfrader [Fri, 11 Dec 2015 11:49:07 +0000 (12:49 +0100)]
Move planet, bits and network-test also from bizet since the sources are all in europe

8 years agomove static-master for www to dillon
Peter Palfrader [Fri, 11 Dec 2015 11:25:42 +0000 (12:25 +0100)]
move static-master for www to dillon

8 years agoUpdate several certs
Peter Palfrader [Fri, 11 Dec 2015 08:55:54 +0000 (09:55 +0100)]
Update several certs

8 years agomunin cleanup cronjob
Peter Palfrader [Wed, 9 Dec 2015 22:21:42 +0000 (23:21 +0100)]
munin cleanup cronjob

8 years agoremove comment
Peter Palfrader [Mon, 7 Dec 2015 09:32:49 +0000 (10:32 +0100)]
remove comment