buildd: fix sbuild.conf on wheezy harder

Add porta

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

buildd: ship a different sbuild.conf for wheezy hosts

Otherwise the wheezy sbuild version chokes on the aspcud_criteria
configuration variable.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

Fix a typo in previous commit

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

buildd: provide sbuild.conf with ASPCUD criteria

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

buildds: don't add dm_snapshot to /etc/modules

build daemons do not use LVM for the chroots anymore, therefore we don't
need to add dm_snapshot to /etc/modules.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

Add debian.nl

tlsa record for gobby (port 6523)

Switch gobby.debian.org ssl cert to letsencrypt

Remove tlsa record for gobby

New *.alioth.debian.org ssl cert

ferm: remove my office addresses

Signed-off-by: Julien Cristau <jcristau@debian.org>

Use ftp.at at conova

add new office networks

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

Add manpages, II

Add manpages

sudo for manpages

rename debian-cdn to debian2 so it sorts after debian.list

Add manziarly

Add manziarly

re-order entries

Redirect /debian* on deb.d.o to cdn-fastly

SRV support in apt only helps when there is no http proxy (transparent
or directly configured).  If there is a proxy, and it doesn't support
SRV records as well, requests end up directly on the deb.d.o vhost.

Do something smart in that case, namely redirect to cdn-fastly.

syntax

Add a secondary source for main debian packages

Add mips-aql-06 to broken-rtc

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

Add mips-aql-06.debian.org to buildd

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

Remove wbadm-ports ports from sudoers

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

Also refresh ca-global when Debian certs change

Fix broken symlinks in /etc/ssl/ca-global (RT#6182)

Fix some issues with the previous change.

Redirect https URLs for www-other sites to debian.org too.

Suggested-in: <CAKiQC487c4kZiTvxUYtM+nmWS9Bh3b7s3tY6jb2=eA69k0-9Ww@mail.gmail.com>
Suggested-by: Adam Cadman <adam.cadman@gmail.com>

remove gluck and rietz from puppet config

remove alioth's expiring git et al. cert

renumber mirror-isc3

99builddsourceslist: get rid of backports.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

99builddsourceslist: drop support for -edu

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

puppetmaster: don't look for puppet-dashboard.d.o cert

Signed-off-by: Julien Cristau <jcristau@debian.org>

Remove puppet-dashboard.d.o cert

It seems unused, and expires soon.

Signed-off-by: Julien Cristau <jcristau@debian.org>

Retire portman and pittar (RT#6121, RT#6135)

Re-enable surbl checks, and set {keep,add}_environment to empty values

Use letsencrypt cert for packages.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>

Temporarily disable TLSA for packages.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>

The debian-backports repository is obsolete: stop redirecting backports.org /debian, /backports.org and /debian-backports to the old archive location

The debian-backports repository is obsolete.  Remove from autofs and rsync/syncproxy config

Switch piuparts.d.o SSL cert to letsencrypt

Signed-off-by: Julien Cristau <jcristau@debian.org>

remove TLSA record for piuparts.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>

Do not run both puppet clientbucket cleanup job concurrently.  sequentially should work better

sso-rp for quantz

Disable surbl/perl check for now

stop using broken dns forwarders

include archive_master role too

push sibelius archive rsync via puppet, make it ssl

retire schein

Clean out puppet clientbucket

Delete more munin-async files sooner

Add boott

we want backups of busoni and senfter

ftcollins and spohr are history

We want backups of wieck

rmdir the dir

And clean out /etc/ssl/debian/keys

install ssl hostkey into /etc/ssl/private instead of /etc/ssl/debian/keys

saens is history

security-master ssl with key, and ssl for rsync

add luca's home and work IPv4 since they are fixed (effectively)

keep volumes for full backups only 3 months instead of 4

also remove chain for bugs-master ssl cert

The cert is no longer a gandi-issued, so we should use the letsencrypt
chain.

Signed-off-by: Julien Cristau <jcristau@debian.org>

replace bugs-master.d.o SSL certificate

Signed-off-by: Julien Cristau <jcristau@debian.org>

munin-node: partially revert 199cc183

df_abs does not support exclusion based on regex, we still need the
wrapper for it.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

munin-node: also filter /dev /run/* /sys/*

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

munin-node: filter piuparts/schroot mounts for df*

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

munin-node: remove df-wrap

Remove df-wrap as it is not compatible with the jessie scripts. Replace
df, df_abs and df_inode by symlinks to the original scripts.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

unbound: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

motd: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

debian-org: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

dacs: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

ssh: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

schroot: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

munin: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

monit: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

ferm: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

buildd: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

bacula: squeeze cleanup

Signed-off-by: Julien Cristau <jcristau@debian.org>

setup-all-dchroots: goodbye squeeze

Signed-off-by: Julien Cristau <jcristau@debian.org>

Fix race condition cleaning up munin CGI graphs

Avoids mails like these:

From:    Cron Daemon <root@menotti.debian.org>
To:      root@menotti.debian.org
Subject: Cron <www-data@menotti> find /var/lib/munin/cgi-tmp -mindepth 2 -type d -empty -delete

find: `/var/lib/munin/cgi-tmp/munin-cgi-graph/debian.org/bm-bl9.debian.org/iostat-month.png': No such file or directory
find: `/var/lib/munin/cgi-tmp/munin-cgi-graph/debian.org/bm-bl9.debian.org/df_inode-day.png': No such file or directory
find: `/var/lib/munin/cgi-tmp/munin-cgi-graph/debian.org/bm-bl9.debian.org/ps_exim4-month.png': No such file or directory
find: `/var/lib/munin/cgi-tmp/munin-cgi-graph/debian.org/bm-bl9.debian.org/exim_mailstats-month.png': No such file or directory
...

Update for 29.172.in-addr.arpa DS

New DS for debian.org

remove linode.emyr.net from ACL for luca

A better root prompt

prep for transition away from linode

Do not backup /var/lib/munin-async

Revert "temporarily cut retention times"

This reverts commit 8d6317345a753cb58144a5744829790abe2804cf.

Do not backup /var/lib/apt and /var/log/samhain

remove trailing /

sort entries

Revert "Try to update Exclude list"

This reverts commit 2b213a07466209440b7d628a63a28ab489728889.

Try to update Exclude list

temporarily cut retention times

update for new debian-ports archive signing key

Signed-off-by: Julien Cristau <jcristau@debian.org>

Add {pet,pet-devel} cert for petrova