Julien Cristau [Wed, 29 Jun 2016 22:13:07 +0000 (00:13 +0200)]
Decommission merulo
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Wed, 29 Jun 2016 21:24:42 +0000 (23:24 +0200)]
Switch bits.d.o and lintian.d.o to letsencrypt
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 19:45:53 +0000 (21:45 +0200)]
No TLSA for bits.d.o and lintian.d.o for a while
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 19:25:47 +0000 (21:25 +0200)]
Switch people.debian.org to letsencrypt
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 15:51:35 +0000 (17:51 +0200)]
Not TLSA for people.debian.org for a while
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Wed, 29 Jun 2016 14:46:36 +0000 (16:46 +0200)]
Replace self-signed veyepar.d.o cert with LE
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 29 Jun 2016 13:30:18 +0000 (15:30 +0200)]
Helps if I open the right port
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 29 Jun 2016 13:26:46 +0000 (15:26 +0200)]
Allow dc16 hosts to access postgres on vittoria
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Tue, 28 Jun 2016 20:40:59 +0000 (22:40 +0200)]
Add topinambour.cristau.org to DSA_IPS
Peter Palfrader [Tue, 28 Jun 2016 20:08:40 +0000 (22:08 +0200)]
Add people.do to DSA_IPs
Aurelien Jarno [Tue, 28 Jun 2016 19:09:44 +0000 (21:09 +0200)]
Add mips-manda-01 and mipsel-manda-03
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Maximiliano Curia [Fri, 24 Jun 2016 08:35:51 +0000 (10:35 +0200)]
schroot: add the new dbgsym mirrors
This allows the installation of the autogenerated dbgsym packages in the porterbox images.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sun, 26 Jun 2016 15:48:08 +0000 (17:48 +0200)]
sudo: remove smetana and merulo from porterbox list
Aurelien Jarno [Sat, 25 Jun 2016 18:13:37 +0000 (20:13 +0200)]
nielsen has been decommissioned for a lot of time already
Also drop code that was only used by it.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 18:12:49 +0000 (20:12 +0200)]
mundy has been decommissioned for a lot of time already
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 18:05:34 +0000 (20:05 +0200)]
beethoven has been decommissioned for a lot of time already
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 17:57:06 +0000 (19:57 +0200)]
Remove more decommissioned hosts
allegri.debian.org
berlioz.debian.org
escher.debian.org
lamb.debian.org
lafayette.debian.org
locke.debian.org
malo.debian.org
samosa.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 15:13:02 +0000 (17:13 +0200)]
alkman has been decommissioned for a lot of time already
Also drop code that was only used by it.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 09:47:31 +0000 (11:47 +0200)]
Fix a typo in powerpc-osuosl-01 host name
powerpc-ousosl-01 => powerpc-osuosl-01
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 24 Jun 2016 22:26:59 +0000 (00:26 +0200)]
mayr.debian.org has been decommissioned for a lot of time
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 24 Jun 2016 22:26:07 +0000 (00:26 +0200)]
Add mips-sil-01 and mipsel-sil-01
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 24 Jun 2016 16:36:29 +0000 (18:36 +0200)]
do not do anything with the buildd module until we have the buildd user from ldap
Peter Palfrader [Fri, 24 Jun 2016 16:18:38 +0000 (18:18 +0200)]
retire ia64-arm-01
Peter Palfrader [Fri, 24 Jun 2016 16:18:28 +0000 (18:18 +0200)]
no backups of arm-arm-04
Julien Cristau [Mon, 20 Jun 2016 10:58:40 +0000 (12:58 +0200)]
Switch appstream, qa, *.dgit to letsencrypt
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 20 Jun 2016 07:53:50 +0000 (09:53 +0200)]
Also temporarily remove TLSA records for *.dgit and appstream
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 20 Jun 2016 07:51:08 +0000 (09:51 +0200)]
No TLSA for qa.debian.org for a while
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Sun, 19 Jun 2016 22:03:18 +0000 (00:03 +0200)]
Deploy certs for blends, release, security-team and wnpp-by-tags
Peter Palfrader [Sun, 19 Jun 2016 22:02:52 +0000 (00:02 +0200)]
add more space
Peter Palfrader [Sun, 19 Jun 2016 22:02:34 +0000 (00:02 +0200)]
add comments
Peter Palfrader [Sun, 19 Jun 2016 22:38:07 +0000 (00:38 +0200)]
Do ssl for blends, security-team, and wnpp-by-tags
Paul Wise [Sun, 19 Jun 2016 03:04:33 +0000 (11:04 +0800)]
Stop trusting the SPI CA for debian.org services.
The SPI CA certificate is no longer used by debian.org services.
See-also:
5125ae620e16738e841813dd2f4135cb1eadb00e
Paul Wise [Sun, 19 Jun 2016 03:02:58 +0000 (11:02 +0800)]
Sync update-ca-certificates-dsa with stretch update-ca-certificates
Julien Cristau [Sat, 18 Jun 2016 16:55:41 +0000 (18:55 +0200)]
Delete openstack.bm.d.o ssl cert
It's not in use, and about to expire. And since this was the last user
of DEBIAN-CA, delete that too.
Peter Palfrader [Fri, 17 Jun 2016 19:40:37 +0000 (21:40 +0200)]
update (unused, commented-out) man-da upstream nameservers, re: RT#6279
Julien Cristau [Wed, 15 Jun 2016 14:25:00 +0000 (16:25 +0200)]
Decommission lebrun and schroeder
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 13 Jun 2016 09:18:41 +0000 (11:18 +0200)]
Stop trying to setup chroots on ia64
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Mon, 13 Jun 2016 06:50:04 +0000 (08:50 +0200)]
setup-all-dchroots: stop creating s390 chroots on s390x
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Fri, 10 Jun 2016 22:05:39 +0000 (00:05 +0200)]
Change debian mirror at brown to help with fasolo setup
Julien Cristau [Fri, 10 Jun 2016 21:34:21 +0000 (23:34 +0200)]
Fix fasolo dedication to be ascii
Julien Cristau [Fri, 10 Jun 2016 21:32:34 +0000 (23:32 +0200)]
Add fasolo
Julien Cristau [Wed, 8 Jun 2016 21:58:01 +0000 (23:58 +0200)]
mail-big-homedirs: add sanity check for lastlog parsing
If we find a negative timestamp, something's gone wrong, abort.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 8 Jun 2016 21:41:32 +0000 (23:41 +0200)]
mail-big-homedirs: turns out 32 vs 64bit time_t is not the right criterion
Some 64bit archs define __WORDSIZE_TIME64_COMPAT32 in glibc to get the
same struct lastlog layout as their 32bit brethren. As far as I can
tell, of the Debian architectures only ia64, arm64 and s390x don't do
that.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Mon, 6 Jun 2016 21:29:10 +0000 (23:29 +0200)]
Stop creating wheezy chroots except on amd64, armel, armhf and i386
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Fri, 3 Jun 2016 12:30:37 +0000 (14:30 +0200)]
Use LE certs for tracker and packages.qa
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Fri, 3 Jun 2016 06:44:06 +0000 (08:44 +0200)]
Temporarily remove TLSA record for packages.qa and tracker
Tollef Fog Heen [Wed, 1 Jun 2016 18:29:20 +0000 (20:29 +0200)]
Remove paravoid from @admin.debian.org aliases too
Peter Palfrader [Wed, 1 Jun 2016 12:15:49 +0000 (14:15 +0200)]
Fix description of debian-ports
Peter Palfrader [Wed, 1 Jun 2016 07:49:43 +0000 (09:49 +0200)]
remove milanollo-lvm-old
Peter Palfrader [Wed, 1 Jun 2016 07:45:17 +0000 (09:45 +0200)]
debian-ports mirror at bm
Aurelien Jarno [Sat, 28 May 2016 20:16:49 +0000 (22:16 +0200)]
Retire traetta (rt#6247)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Sat, 28 May 2016 14:11:56 +0000 (16:11 +0200)]
dsa -= paravoid (rt#6248)
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 14:00:28 +0000 (16:00 +0200)]
incoming.debian.org nfs mount at bytemark
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 13:25:28 +0000 (15:25 +0200)]
Set nfs client ip range for senfter
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 13:20:39 +0000 (15:20 +0200)]
nfs server on senfter
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Sat, 28 May 2016 12:22:39 +0000 (14:22 +0200)]
Improve ftp.debian-ports.org redirections (a bit more)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 22:46:13 +0000 (00:46 +0200)]
Add buildd.debian-ports.org and debian-ports.org virtual domains
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 20:42:35 +0000 (22:42 +0200)]
One more ftp.debian-ports.org redirection
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 17:18:12 +0000 (19:18 +0200)]
Improve ftp.debian-ports.org redirections (second try)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 16:56:28 +0000 (18:56 +0200)]
Improve ftp.debian-ports.org redirections
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 16:17:09 +0000 (18:17 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports-cd
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 13:55:01 +0000 (15:55 +0200)]
Add redirections from old debian-ports.org URLs to the new ones
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 27 May 2016 12:43:16 +0000 (14:43 +0200)]
Add /debian-ports-cd alias to ftp.ports.debian.org
Aurelien Jarno [Fri, 27 May 2016 10:07:09 +0000 (12:07 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 27 May 2016 08:58:34 +0000 (10:58 +0200)]
ignore nonreadable for debian-ports
Aurelien Jarno [Thu, 26 May 2016 23:55:29 +0000 (01:55 +0200)]
Move ports upload directory to a different directory
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:41:20 +0000 (01:41 +0200)]
Avoid double redirection for www.ports.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:37:33 +0000 (01:37 +0200)]
Fix stupid copy&paste in previous commit
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:32:44 +0000 (01:32 +0200)]
HTTPS for www.ports.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:28:05 +0000 (01:28 +0200)]
Drop wheezy compatibility code in static-vhosts-simple
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 22:52:29 +0000 (00:52 +0200)]
Add ftp on ports-master for incoming
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Thu, 26 May 2016 20:34:32 +0000 (22:34 +0200)]
Add more -ports stuff
Peter Palfrader [Thu, 26 May 2016 15:53:01 +0000 (17:53 +0200)]
ports mirrors
Aurelien Jarno [Thu, 26 May 2016 13:00:14 +0000 (15:00 +0200)]
Add incoming.port.d.o static vhost
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 12:42:36 +0000 (14:42 +0200)]
Fix incoming.ports.d.o sudo entry
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 11:23:26 +0000 (13:23 +0200)]
add incoming.ports.d.o static component
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Thu, 26 May 2016 11:01:29 +0000 (13:01 +0200)]
use a different secrets file
Peter Palfrader [Thu, 26 May 2016 10:49:36 +0000 (12:49 +0200)]
Add a ports-master role
Aurelien Jarno [Thu, 26 May 2016 10:36:04 +0000 (12:36 +0200)]
Redirect ports.d.o to www.ports.d.o
Currently we have no vhost entry for ports.d.o, so it redirects to
www.d.o.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Thu, 26 May 2016 10:14:58 +0000 (12:14 +0200)]
respighi is a static source
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Thu, 26 May 2016 10:09:00 +0000 (12:09 +0200)]
Add ports-master.debian.org virtual domain
Julien Cristau [Thu, 26 May 2016 09:47:50 +0000 (11:47 +0200)]
debian-release group can update release.d.o static component
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Thu, 26 May 2016 09:45:08 +0000 (11:45 +0200)]
add release.d.o static component
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Thu, 26 May 2016 09:17:57 +0000 (11:17 +0200)]
respighi needs access to projectb on bmdb1
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Thu, 26 May 2016 09:07:15 +0000 (11:07 +0200)]
Drop redirects to a host we never created
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Wed, 25 May 2016 22:50:01 +0000 (00:50 +0200)]
respighi autofs/nfs
Julien Cristau [Wed, 25 May 2016 21:56:36 +0000 (23:56 +0200)]
Add respighi
Julien Cristau [Wed, 25 May 2016 12:02:53 +0000 (14:02 +0200)]
HTTPS for backports.d.o
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 25 May 2016 11:08:43 +0000 (13:08 +0200)]
backports.d.o ssl cert for static mirrors
Signed-off-by: Julien Cristau <jcristau@debian.org>
Tollef Fog Heen [Sun, 15 May 2016 08:01:39 +0000 (10:01 +0200)]
Fix syntax error
Tollef Fog Heen [Thu, 12 May 2016 14:00:18 +0000 (16:00 +0200)]
Use sysconfig.get_config_var(SIZEOF_TIME_T) since that is what we actually care about
Peter Palfrader [Thu, 12 May 2016 13:51:37 +0000 (15:51 +0200)]
mail-big-homedirs: Work even when we cannot read /etc/dsa/pubsub.conf
Peter Palfrader [Thu, 12 May 2016 13:44:47 +0000 (15:44 +0200)]
mail-big-homedirs: Fix architecture guessing (re: RT#6221)
Peter Palfrader [Wed, 11 May 2016 20:34:08 +0000 (22:34 +0200)]
keyring.d.o cert on keyring service
Aurelien Jarno [Thu, 5 May 2016 23:02:24 +0000 (01:02 +0200)]
Always create mips64el chroot on mipsel buildds
All our mipsel build daemons are now capable of running mips64el
binaries. In addition we have mips64el capables build daemons which
are not using a Loongson 3 CPU.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 5 May 2016 22:40:09 +0000 (00:40 +0200)]
Add mipsel-aql-03.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Héctor Orón Martínez [Mon, 2 May 2016 19:19:12 +0000 (21:19 +0200)]
update zumbi email address
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Julien Cristau [Fri, 29 Apr 2016 15:08:05 +0000 (17:08 +0200)]
Disable security.d.o repo for wheezy hosts
It's been repurposed for LTS, which doesn't carry ia64/sparc.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Thu, 28 Apr 2016 00:13:18 +0000 (02:13 +0200)]
add httpredir-bm-01-srv wwid
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 27 Apr 2016 23:20:26 +0000 (01:20 +0200)]
nagios: add tivsm-apicit and tivsm-bacit to sibelius package ignore list
Signed-off-by: Julien Cristau <jcristau@debian.org>
projects / mirror / dsa-puppet.git / log