Julien Cristau [Mon, 4 Jul 2016 13:48:48 +0000 (15:48 +0200)]
Add static component for release.debian.org/proposed-updates
Julien Cristau [Mon, 4 Jul 2016 12:42:36 +0000 (14:42 +0200)]
Move and conditionalize release.d.o vhost
Julien Cristau [Mon, 4 Jul 2016 12:15:01 +0000 (14:15 +0200)]
Move release.d.o to static and letsencrypt
Signed-off-by: Julien Cristau <jcristau@debian.org>
Héctor Orón Martínez [Sat, 2 Jul 2016 18:56:14 +0000 (20:56 +0200)]
lucatelli: decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Aurelien Jarno [Fri, 1 Jul 2016 20:56:02 +0000 (22:56 +0200)]
Switch wiki.debian.org to letsencrypt
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 1 Jul 2016 18:14:42 +0000 (20:14 +0200)]
No TLSA for wiki.debian.org for a while
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Wed, 29 Jun 2016 22:13:07 +0000 (00:13 +0200)]
Decommission merulo
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Wed, 29 Jun 2016 21:24:42 +0000 (23:24 +0200)]
Switch bits.d.o and lintian.d.o to letsencrypt
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 19:45:53 +0000 (21:45 +0200)]
No TLSA for bits.d.o and lintian.d.o for a while
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 19:25:47 +0000 (21:25 +0200)]
Switch people.debian.org to letsencrypt
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Wed, 29 Jun 2016 15:51:35 +0000 (17:51 +0200)]
Not TLSA for people.debian.org for a while
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Wed, 29 Jun 2016 14:46:36 +0000 (16:46 +0200)]
Replace self-signed veyepar.d.o cert with LE
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 29 Jun 2016 13:30:18 +0000 (15:30 +0200)]
Helps if I open the right port
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 29 Jun 2016 13:26:46 +0000 (15:26 +0200)]
Allow dc16 hosts to access postgres on vittoria
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Tue, 28 Jun 2016 20:40:59 +0000 (22:40 +0200)]
Add topinambour.cristau.org to DSA_IPS
Peter Palfrader [Tue, 28 Jun 2016 20:08:40 +0000 (22:08 +0200)]
Add people.do to DSA_IPs
Aurelien Jarno [Tue, 28 Jun 2016 19:09:44 +0000 (21:09 +0200)]
Add mips-manda-01 and mipsel-manda-03
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Maximiliano Curia [Fri, 24 Jun 2016 08:35:51 +0000 (10:35 +0200)]
schroot: add the new dbgsym mirrors
This allows the installation of the autogenerated dbgsym packages in the porterbox images.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sun, 26 Jun 2016 15:48:08 +0000 (17:48 +0200)]
sudo: remove smetana and merulo from porterbox list
Aurelien Jarno [Sat, 25 Jun 2016 18:13:37 +0000 (20:13 +0200)]
nielsen has been decommissioned for a lot of time already
Also drop code that was only used by it.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 18:12:49 +0000 (20:12 +0200)]
mundy has been decommissioned for a lot of time already
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 18:05:34 +0000 (20:05 +0200)]
beethoven has been decommissioned for a lot of time already
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 17:57:06 +0000 (19:57 +0200)]
Remove more decommissioned hosts
allegri.debian.org
berlioz.debian.org
escher.debian.org
lamb.debian.org
lafayette.debian.org
locke.debian.org
malo.debian.org
samosa.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 15:13:02 +0000 (17:13 +0200)]
alkman has been decommissioned for a lot of time already
Also drop code that was only used by it.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 25 Jun 2016 09:47:31 +0000 (11:47 +0200)]
Fix a typo in powerpc-osuosl-01 host name
powerpc-ousosl-01 => powerpc-osuosl-01
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 24 Jun 2016 22:26:59 +0000 (00:26 +0200)]
mayr.debian.org has been decommissioned for a lot of time
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 24 Jun 2016 22:26:07 +0000 (00:26 +0200)]
Add mips-sil-01 and mipsel-sil-01
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 24 Jun 2016 16:36:29 +0000 (18:36 +0200)]
do not do anything with the buildd module until we have the buildd user from ldap
Peter Palfrader [Fri, 24 Jun 2016 16:18:38 +0000 (18:18 +0200)]
retire ia64-arm-01
Peter Palfrader [Fri, 24 Jun 2016 16:18:28 +0000 (18:18 +0200)]
no backups of arm-arm-04
Julien Cristau [Mon, 20 Jun 2016 10:58:40 +0000 (12:58 +0200)]
Switch appstream, qa, *.dgit to letsencrypt
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 20 Jun 2016 07:53:50 +0000 (09:53 +0200)]
Also temporarily remove TLSA records for *.dgit and appstream
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 20 Jun 2016 07:51:08 +0000 (09:51 +0200)]
No TLSA for qa.debian.org for a while
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Sun, 19 Jun 2016 22:03:18 +0000 (00:03 +0200)]
Deploy certs for blends, release, security-team and wnpp-by-tags
Peter Palfrader [Sun, 19 Jun 2016 22:02:52 +0000 (00:02 +0200)]
add more space
Peter Palfrader [Sun, 19 Jun 2016 22:02:34 +0000 (00:02 +0200)]
add comments
Peter Palfrader [Sun, 19 Jun 2016 22:38:07 +0000 (00:38 +0200)]
Do ssl for blends, security-team, and wnpp-by-tags
Paul Wise [Sun, 19 Jun 2016 03:04:33 +0000 (11:04 +0800)]
Stop trusting the SPI CA for debian.org services.
The SPI CA certificate is no longer used by debian.org services.
See-also:
5125ae620e16738e841813dd2f4135cb1eadb00e
Paul Wise [Sun, 19 Jun 2016 03:02:58 +0000 (11:02 +0800)]
Sync update-ca-certificates-dsa with stretch update-ca-certificates
Julien Cristau [Sat, 18 Jun 2016 16:55:41 +0000 (18:55 +0200)]
Delete openstack.bm.d.o ssl cert
It's not in use, and about to expire. And since this was the last user
of DEBIAN-CA, delete that too.
Peter Palfrader [Fri, 17 Jun 2016 19:40:37 +0000 (21:40 +0200)]
update (unused, commented-out) man-da upstream nameservers, re: RT#6279
Julien Cristau [Wed, 15 Jun 2016 14:25:00 +0000 (16:25 +0200)]
Decommission lebrun and schroeder
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Mon, 13 Jun 2016 09:18:41 +0000 (11:18 +0200)]
Stop trying to setup chroots on ia64
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Mon, 13 Jun 2016 06:50:04 +0000 (08:50 +0200)]
setup-all-dchroots: stop creating s390 chroots on s390x
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Fri, 10 Jun 2016 22:05:39 +0000 (00:05 +0200)]
Change debian mirror at brown to help with fasolo setup
Julien Cristau [Fri, 10 Jun 2016 21:34:21 +0000 (23:34 +0200)]
Fix fasolo dedication to be ascii
Julien Cristau [Fri, 10 Jun 2016 21:32:34 +0000 (23:32 +0200)]
Add fasolo
Julien Cristau [Wed, 8 Jun 2016 21:58:01 +0000 (23:58 +0200)]
mail-big-homedirs: add sanity check for lastlog parsing
If we find a negative timestamp, something's gone wrong, abort.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 8 Jun 2016 21:41:32 +0000 (23:41 +0200)]
mail-big-homedirs: turns out 32 vs 64bit time_t is not the right criterion
Some 64bit archs define __WORDSIZE_TIME64_COMPAT32 in glibc to get the
same struct lastlog layout as their 32bit brethren. As far as I can
tell, of the Debian architectures only ia64, arm64 and s390x don't do
that.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Mon, 6 Jun 2016 21:29:10 +0000 (23:29 +0200)]
Stop creating wheezy chroots except on amd64, armel, armhf and i386
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Fri, 3 Jun 2016 12:30:37 +0000 (14:30 +0200)]
Use LE certs for tracker and packages.qa
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Fri, 3 Jun 2016 06:44:06 +0000 (08:44 +0200)]
Temporarily remove TLSA record for packages.qa and tracker
Tollef Fog Heen [Wed, 1 Jun 2016 18:29:20 +0000 (20:29 +0200)]
Remove paravoid from @admin.debian.org aliases too
Peter Palfrader [Wed, 1 Jun 2016 12:15:49 +0000 (14:15 +0200)]
Fix description of debian-ports
Peter Palfrader [Wed, 1 Jun 2016 07:49:43 +0000 (09:49 +0200)]
remove milanollo-lvm-old
Peter Palfrader [Wed, 1 Jun 2016 07:45:17 +0000 (09:45 +0200)]
debian-ports mirror at bm
Aurelien Jarno [Sat, 28 May 2016 20:16:49 +0000 (22:16 +0200)]
Retire traetta (rt#6247)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Sat, 28 May 2016 14:11:56 +0000 (16:11 +0200)]
dsa -= paravoid (rt#6248)
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 14:00:28 +0000 (16:00 +0200)]
incoming.debian.org nfs mount at bytemark
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 13:25:28 +0000 (15:25 +0200)]
Set nfs client ip range for senfter
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sat, 28 May 2016 13:20:39 +0000 (15:20 +0200)]
nfs server on senfter
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Sat, 28 May 2016 12:22:39 +0000 (14:22 +0200)]
Improve ftp.debian-ports.org redirections (a bit more)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 22:46:13 +0000 (00:46 +0200)]
Add buildd.debian-ports.org and debian-ports.org virtual domains
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 20:42:35 +0000 (22:42 +0200)]
One more ftp.debian-ports.org redirection
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 17:18:12 +0000 (19:18 +0200)]
Improve ftp.debian-ports.org redirections (second try)
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 16:56:28 +0000 (18:56 +0200)]
Improve ftp.debian-ports.org redirections
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 16:17:09 +0000 (18:17 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports-cd
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 27 May 2016 13:55:01 +0000 (15:55 +0200)]
Add redirections from old debian-ports.org URLs to the new ones
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 27 May 2016 12:43:16 +0000 (14:43 +0200)]
Add /debian-ports-cd alias to ftp.ports.debian.org
Aurelien Jarno [Fri, 27 May 2016 10:07:09 +0000 (12:07 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Fri, 27 May 2016 08:58:34 +0000 (10:58 +0200)]
ignore nonreadable for debian-ports
Aurelien Jarno [Thu, 26 May 2016 23:55:29 +0000 (01:55 +0200)]
Move ports upload directory to a different directory
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:41:20 +0000 (01:41 +0200)]
Avoid double redirection for www.ports.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:37:33 +0000 (01:37 +0200)]
Fix stupid copy&paste in previous commit
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:32:44 +0000 (01:32 +0200)]
HTTPS for www.ports.debian.org
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 23:28:05 +0000 (01:28 +0200)]
Drop wheezy compatibility code in static-vhosts-simple
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 22:52:29 +0000 (00:52 +0200)]
Add ftp on ports-master for incoming
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Thu, 26 May 2016 20:34:32 +0000 (22:34 +0200)]
Add more -ports stuff
Peter Palfrader [Thu, 26 May 2016 15:53:01 +0000 (17:53 +0200)]
ports mirrors
Aurelien Jarno [Thu, 26 May 2016 13:00:14 +0000 (15:00 +0200)]
Add incoming.port.d.o static vhost
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 12:42:36 +0000 (14:42 +0200)]
Fix incoming.ports.d.o sudo entry
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 26 May 2016 11:23:26 +0000 (13:23 +0200)]
add incoming.ports.d.o static component
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Thu, 26 May 2016 11:01:29 +0000 (13:01 +0200)]
use a different secrets file
Peter Palfrader [Thu, 26 May 2016 10:49:36 +0000 (12:49 +0200)]
Add a ports-master role
Aurelien Jarno [Thu, 26 May 2016 10:36:04 +0000 (12:36 +0200)]
Redirect ports.d.o to www.ports.d.o
Currently we have no vhost entry for ports.d.o, so it redirects to
www.d.o.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Julien Cristau [Thu, 26 May 2016 10:14:58 +0000 (12:14 +0200)]
respighi is a static source
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Thu, 26 May 2016 10:09:00 +0000 (12:09 +0200)]
Add ports-master.debian.org virtual domain
Julien Cristau [Thu, 26 May 2016 09:47:50 +0000 (11:47 +0200)]
debian-release group can update release.d.o static component
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Thu, 26 May 2016 09:45:08 +0000 (11:45 +0200)]
add release.d.o static component
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Thu, 26 May 2016 09:17:57 +0000 (11:17 +0200)]
respighi needs access to projectb on bmdb1
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Thu, 26 May 2016 09:07:15 +0000 (11:07 +0200)]
Drop redirects to a host we never created
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Wed, 25 May 2016 22:50:01 +0000 (00:50 +0200)]
respighi autofs/nfs
Julien Cristau [Wed, 25 May 2016 21:56:36 +0000 (23:56 +0200)]
Add respighi
Julien Cristau [Wed, 25 May 2016 12:02:53 +0000 (14:02 +0200)]
HTTPS for backports.d.o
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Wed, 25 May 2016 11:08:43 +0000 (13:08 +0200)]
backports.d.o ssl cert for static mirrors
Signed-off-by: Julien Cristau <jcristau@debian.org>
Tollef Fog Heen [Sun, 15 May 2016 08:01:39 +0000 (10:01 +0200)]
Fix syntax error
Tollef Fog Heen [Thu, 12 May 2016 14:00:18 +0000 (16:00 +0200)]
Use sysconfig.get_config_var(SIZEOF_TIME_T) since that is what we actually care about
Peter Palfrader [Thu, 12 May 2016 13:51:37 +0000 (15:51 +0200)]
mail-big-homedirs: Work even when we cannot read /etc/dsa/pubsub.conf
Peter Palfrader [Thu, 12 May 2016 13:44:47 +0000 (15:44 +0200)]
mail-big-homedirs: Fix architecture guessing (re: RT#6221)
Peter Palfrader [Wed, 11 May 2016 20:34:08 +0000 (22:34 +0200)]
keyring.d.o cert on keyring service
projects / mirror / dsa-puppet.git / log