mirror/dsa-puppet.git
5 years agostatic: whitespace changes and turn double quotes into single quotes if they have...
Peter Palfrader [Sat, 7 Sep 2019 22:54:54 +0000 (00:54 +0200)]
static: whitespace changes and turn double quotes into single quotes if they have no variables to expand

5 years agostore ssh auth key snippets for buildd wb and upload access, but do not collect just yet
Peter Palfrader [Sat, 7 Sep 2019 22:39:59 +0000 (00:39 +0200)]
store ssh auth key snippets for buildd wb and upload access, but do not collect just yet

5 years agofix class names
Peter Palfrader [Sat, 7 Sep 2019 22:32:26 +0000 (00:32 +0200)]
fix class names

5 years agoSplit buildd class into small pieces
Peter Palfrader [Sat, 7 Sep 2019 22:30:43 +0000 (00:30 +0200)]
Split buildd class into small pieces

5 years agoremove long dead and commented out code in munin
Peter Palfrader [Sat, 7 Sep 2019 22:16:03 +0000 (00:16 +0200)]
remove long dead and commented out code in munin

5 years agoadd a comment saying which host a key comes from
Peter Palfrader [Sat, 7 Sep 2019 22:12:21 +0000 (00:12 +0200)]
add a comment saying which host a key comes from

5 years agossh setup for weblog sync
Peter Palfrader [Sat, 7 Sep 2019 22:06:34 +0000 (00:06 +0200)]
ssh setup for weblog sync

5 years agoswitch ssh-keygens to ssh::keygen
Peter Palfrader [Sat, 7 Sep 2019 22:01:04 +0000 (00:01 +0200)]
switch ssh-keygens to ssh::keygen

5 years agossh authkeys: Put hostname in exported ferm rule
Peter Palfrader [Sat, 7 Sep 2019 21:54:40 +0000 (23:54 +0200)]
ssh authkeys: Put hostname in exported ferm rule

5 years agoAnd maintain the geodnssync authkeys file on the primary in puppet too
Peter Palfrader [Sat, 7 Sep 2019 21:52:16 +0000 (23:52 +0200)]
And maintain the geodnssync authkeys file on the primary in puppet too

5 years agostop using virtual resources for ferm::rule
Peter Palfrader [Sat, 7 Sep 2019 21:47:46 +0000 (23:47 +0200)]
stop using virtual resources for ferm::rule

They serve no purpose and make it needlessly difficult to properly
deploy exported firewall rules, as they then realize where they
shouldn't.

5 years agoput collect tag into ferm rule name
Peter Palfrader [Sat, 7 Sep 2019 21:29:45 +0000 (23:29 +0200)]
put collect tag into ferm rule name

5 years agodo not hardcode dns primary ssh key for syncing to secondaries
Peter Palfrader [Sat, 7 Sep 2019 21:25:24 +0000 (23:25 +0200)]
do not hardcode dns primary ssh key for syncing to secondaries

5 years agossh::authorized_key_add: warn if the key does not exist
Peter Palfrader [Sat, 7 Sep 2019 21:22:37 +0000 (23:22 +0200)]
ssh::authorized_key_add: warn if the key does not exist

5 years agoMake a roles::dns_geodns
Peter Palfrader [Sat, 7 Sep 2019 21:19:34 +0000 (23:19 +0200)]
Make a roles::dns_geodns

5 years agoAdd sshkey for dnsadm
Peter Palfrader [Sat, 7 Sep 2019 21:11:54 +0000 (23:11 +0200)]
Add sshkey for dnsadm

5 years agoIf we do not have a fact, notify out early
Peter Palfrader [Sat, 7 Sep 2019 21:09:20 +0000 (23:09 +0200)]
If we do not have a fact, notify out early

5 years agofacter for geodnssync
Peter Palfrader [Sat, 7 Sep 2019 21:08:23 +0000 (23:08 +0200)]
facter for geodnssync

5 years agoCreate ssh keys for user geodnssync
Peter Palfrader [Sat, 7 Sep 2019 21:07:42 +0000 (23:07 +0200)]
Create ssh keys for user geodnssync

5 years agoAdd an ssh::keygen to create userkeys
Peter Palfrader [Sat, 7 Sep 2019 21:06:50 +0000 (23:06 +0200)]
Add an ssh::keygen to create userkeys

5 years agoRemove irqbalance on buster
Peter Palfrader [Sat, 7 Sep 2019 20:31:56 +0000 (22:31 +0200)]
Remove irqbalance on buster

5 years agomake wuiet be buildd_master via a hiera class include
Peter Palfrader [Sat, 7 Sep 2019 18:06:43 +0000 (20:06 +0200)]
make wuiet be buildd_master via a hiera class include

5 years agoRemove unused buildd_master from local.yaml
Peter Palfrader [Sat, 7 Sep 2019 18:06:27 +0000 (20:06 +0200)]
Remove unused buildd_master from local.yaml

5 years agoMove broken-rtc from a localinfo "role" defined in local.yaml to a class included...
Peter Palfrader [Sat, 7 Sep 2019 18:00:48 +0000 (20:00 +0200)]
Move broken-rtc from a localinfo "role" defined in local.yaml to a class included via hiera

5 years agoremove arm-arm-02 from broken-rtc in local.yaml -- the host no longer exists
Peter Palfrader [Sat, 7 Sep 2019 17:58:48 +0000 (19:58 +0200)]
remove arm-arm-02 from broken-rtc in local.yaml -- the host no longer exists

5 years agoTry to retire the site module: move site::aptrepo to base
Peter Palfrader [Sat, 7 Sep 2019 17:23:03 +0000 (19:23 +0200)]
Try to retire the site module: move site::aptrepo to base

5 years agoTry to retire the site module: move site::alternative to base
Peter Palfrader [Sat, 7 Sep 2019 17:21:10 +0000 (19:21 +0200)]
Try to retire the site module: move site::alternative to base

5 years agoremove unused site::limit
Peter Palfrader [Sat, 7 Sep 2019 17:20:16 +0000 (19:20 +0200)]
remove unused site::limit

5 years agoTry to retire the site module: move sysctl to base
Peter Palfrader [Sat, 7 Sep 2019 17:15:46 +0000 (19:15 +0200)]
Try to retire the site module: move sysctl to base

5 years agoTry to retire the site module: move linux_module to base
Peter Palfrader [Sat, 7 Sep 2019 17:04:39 +0000 (19:04 +0200)]
Try to retire the site module: move linux_module to base

5 years agoremove barriere volumes at bytemark, the VM has been moved away
Peter Palfrader [Sat, 7 Sep 2019 16:57:30 +0000 (18:57 +0200)]
remove barriere volumes at bytemark, the VM has been moved away

5 years agossh restrict dns geo and dns primary hosts
Peter Palfrader [Sat, 7 Sep 2019 16:20:46 +0000 (18:20 +0200)]
ssh restrict dns geo and dns primary hosts

5 years agono longer need to manually whitelist adayevskaya on denis
Peter Palfrader [Sat, 7 Sep 2019 16:18:52 +0000 (18:18 +0200)]
no longer need to manually whitelist adayevskaya on denis

5 years agocorrectly spell username
Peter Palfrader [Sat, 7 Sep 2019 16:17:35 +0000 (18:17 +0200)]
correctly spell username

5 years agoand gitolite ssh triggers to the dns host
Peter Palfrader [Sat, 7 Sep 2019 16:15:42 +0000 (18:15 +0200)]
and gitolite ssh triggers to the dns host

5 years agogitolite pushes puppetmaster
Peter Palfrader [Sat, 7 Sep 2019 15:57:36 +0000 (17:57 +0200)]
gitolite pushes puppetmaster

5 years agosplit includes out of base class so things are included a bit later and things like...
Peter Palfrader [Sat, 7 Sep 2019 15:52:54 +0000 (17:52 +0200)]
split includes out of base class so things are included a bit later and things like classes.include?("puppetmaster") work

5 years agomake puppetmaster a role included via hiera
Peter Palfrader [Sat, 7 Sep 2019 15:45:03 +0000 (17:45 +0200)]
make puppetmaster a role included via hiera

5 years agoNothing cares about the $dbpassword variable we set on handel. Remove it
Peter Palfrader [Sat, 7 Sep 2019 15:40:35 +0000 (17:40 +0200)]
Nothing cares about the $dbpassword variable we set on handel.  Remove it

5 years agounify roleaccount facter for staticsync, weblogsync, buildd, portforwarder
Peter Palfrader [Sat, 7 Sep 2019 15:28:44 +0000 (17:28 +0200)]
unify roleaccount facter for staticsync, weblogsync, buildd, portforwarder

5 years agopostgresql_key -> postgres_key
Peter Palfrader [Sat, 7 Sep 2019 15:23:56 +0000 (17:23 +0200)]
postgresql_key -> postgres_key

5 years agoprepare unifying roleaccount facter
Peter Palfrader [Sat, 7 Sep 2019 15:21:39 +0000 (17:21 +0200)]
prepare unifying roleaccount facter

5 years agoadayevskaya is the dsa_gitolite host, dillon the dsa_wiki buildhost
Peter Palfrader [Sat, 7 Sep 2019 15:07:18 +0000 (17:07 +0200)]
adayevskaya is the dsa_gitolite host, dillon the dsa_wiki buildhost

5 years agoAdd roles for the dsa gitolite host and the dsa wiki buildhost
Peter Palfrader [Sat, 7 Sep 2019 15:06:09 +0000 (17:06 +0200)]
Add roles for the dsa gitolite host and the dsa wiki buildhost

The gitolite host ssh triggers the buildhost.

5 years agoAdd puppet classes to store and collect ssh authkeys information
Peter Palfrader [Sat, 7 Sep 2019 15:05:24 +0000 (17:05 +0200)]
Add puppet classes to store and collect ssh authkeys information

5 years agoDefine public IP addresses in base since we cannot trust facter
Peter Palfrader [Sat, 7 Sep 2019 15:08:24 +0000 (17:08 +0200)]
Define public IP addresses in base since we cannot trust facter

5 years agofacter for git key
Peter Palfrader [Sat, 7 Sep 2019 14:19:33 +0000 (16:19 +0200)]
facter for git key

5 years agoremove adayevskaya volume from bm multipath config
Peter Palfrader [Sat, 7 Sep 2019 11:55:19 +0000 (13:55 +0200)]
remove adayevskaya volume from bm multipath config

5 years agoMove adayevskaya from bm to manda
Peter Palfrader [Sat, 7 Sep 2019 11:35:44 +0000 (13:35 +0200)]
Move adayevskaya from bm to manda

5 years agoOnly install intel microcode on amd64
Julien Cristau [Sat, 7 Sep 2019 07:59:17 +0000 (09:59 +0200)]
Only install intel microcode on amd64

Some other-arch hosts don't seem to have a "processor0" fact, so bypass
that.

5 years agoAlso install intel-microcode
Julien Cristau [Fri, 6 Sep 2019 16:58:25 +0000 (18:58 +0200)]
Also install intel-microcode

5 years agoInstall iucode-tool on physical machines with Intel CPUs
Julien Cristau [Fri, 6 Sep 2019 16:52:54 +0000 (18:52 +0200)]
Install iucode-tool on physical machines with Intel CPUs

5 years agoUse mail port 2025 for new-klecker
Julien Cristau [Fri, 6 Sep 2019 13:38:03 +0000 (15:38 +0200)]
Use mail port 2025 for new-klecker

5 years agosudo: add new-klecker to dell hosts list
Julien Cristau [Fri, 6 Sep 2019 13:35:34 +0000 (15:35 +0200)]
sudo: add new-klecker to dell hosts list

5 years agoSet up serial console on new-klecker
Julien Cristau [Fri, 6 Sep 2019 13:21:32 +0000 (15:21 +0200)]
Set up serial console on new-klecker

5 years agoInstall libxslt1.1 on dell hosts
Julien Cristau [Fri, 6 Sep 2019 13:03:43 +0000 (15:03 +0200)]
Install libxslt1.1 on dell hosts

omreport: error while loading shared libraries: libxslt.so.1: cannot open shared object file: No such file or directory

5 years agonagios-plugins-standard was renamed to monitoring-plugins-standard in 2014
Julien Cristau [Thu, 5 Sep 2019 12:47:41 +0000 (14:47 +0200)]
nagios-plugins-standard was renamed to monitoring-plugins-standard in 2014

And in buster the transitional package is gone.

5 years agoKeep postgresql-client-9.6 on storace
Julien Cristau [Thu, 5 Sep 2019 08:28:35 +0000 (10:28 +0200)]
Keep postgresql-client-9.6 on storace

5 years agoFix postgres-make-one-base-backup for pg 11
Julien Cristau [Wed, 4 Sep 2019 14:39:38 +0000 (16:39 +0200)]
Fix postgres-make-one-base-backup for pg 11

The default was changed to -X stream, which doesn't work when sending to
stdout.  There's no way to disable WAL that works with both 9.6 and 11,
so instead backup redundant WAL files with -X fetch.

5 years agoKeep postgresql-client-9.6 on backuphost
Julien Cristau [Wed, 4 Sep 2019 13:59:37 +0000 (15:59 +0200)]
Keep postgresql-client-9.6 on backuphost

5 years agobuxtehude is on postgresql 11
Julien Cristau [Wed, 4 Sep 2019 13:47:34 +0000 (15:47 +0200)]
buxtehude is on postgresql 11

5 years agoconsolidate and expand ensure_packages on backup server
Peter Palfrader [Wed, 4 Sep 2019 12:49:15 +0000 (14:49 +0200)]
consolidate and expand ensure_packages on backup server

5 years agowhitespace change only -- replace tabs with 2 spaces
Peter Palfrader [Wed, 4 Sep 2019 12:48:36 +0000 (14:48 +0200)]
whitespace change only -- replace tabs with 2 spaces

5 years agoMove backup_server:: globals, register_backup_cluster, register_backup_clienthost...
Peter Palfrader [Wed, 4 Sep 2019 12:46:32 +0000 (14:46 +0200)]
Move backup_server:: globals, register_backup_cluster, register_backup_clienthost into their own files

5 years agoInstall ncurses-term everywhere for terminal infos like rxvt-unicode-256color which...
Peter Palfrader [Wed, 4 Sep 2019 10:13:51 +0000 (12:13 +0200)]
Install ncurses-term everywhere for terminal infos like rxvt-unicode-256color which is in -term on stretch (it is in -base on buster)

5 years agoAdd syncproxy name for smit
Julien Cristau [Tue, 3 Sep 2019 20:44:37 +0000 (22:44 +0200)]
Add syncproxy name for smit

5 years agoadd spam filters for community alias RT#7924
Héctor Orón Martínez [Tue, 3 Sep 2019 10:40:07 +0000 (12:40 +0200)]
add spam filters for community alias RT#7924

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
5 years agosmit as syncproxy
Julien Cristau [Sat, 31 Aug 2019 11:29:45 +0000 (13:29 +0200)]
smit as syncproxy

5 years agoDelete stray .orig file
Julien Cristau [Sat, 31 Aug 2019 11:29:27 +0000 (13:29 +0200)]
Delete stray .orig file

5 years agoNow that we have site included before hiera things, we can do this again
Peter Palfrader [Fri, 30 Aug 2019 10:20:18 +0000 (12:20 +0200)]
Now that we have site included before hiera things, we can do this again

5 years agohaving a module named site is really annoying
Peter Palfrader [Fri, 30 Aug 2019 10:15:44 +0000 (12:15 +0200)]
having a module named site is really annoying

5 years agoMove the single ipsec tunnel we have to my new system.
Peter Palfrader [Fri, 30 Aug 2019 10:10:15 +0000 (12:10 +0200)]
Move the single ipsec tunnel we have to my new system.

There are named ipsec "networks".  And any host that is in a named
network will set up ipsec to all the other hosts on that network.

A host can be on more than one network at a time.

Currently we only have the fasolo-storace tunnel, though.  It is
configured in modules/profile/manifests/ipsec/fasolo_storace.pp.

5 years agoremove olin from bmdb1 access
Peter Palfrader [Fri, 30 Aug 2019 06:58:35 +0000 (08:58 +0200)]
remove olin from bmdb1 access

olin does not need access to a postgres cluster.  It was in the list
since its old IP address was in the list.  That IP address was
previously used by oyens.debian.org, which was the openstack keystone
host before it was retired.  It seems the IP address was not removed
from the access list, and then olin inherited it.

5 years agomultipath: remove olin (moved to csail)
Aurelien Jarno [Thu, 29 Aug 2019 21:47:10 +0000 (23:47 +0200)]
multipath: remove olin (moved to csail)

5 years agomove loghost from a "role" in hieradata/common.yaml to a role that is included via...
Peter Palfrader [Thu, 29 Aug 2019 18:32:36 +0000 (20:32 +0200)]
move loghost from a "role" in hieradata/common.yaml to a role that is included via hiera

5 years agodsa_lvm is empty. remove it
Peter Palfrader [Thu, 29 Aug 2019 18:22:57 +0000 (20:22 +0200)]
dsa_lvm is empty.  remove it

5 years agoThe previos LVM config for the ppc cluster did not have issue_discards. Let's keep...
Peter Palfrader [Thu, 29 Aug 2019 18:22:19 +0000 (20:22 +0200)]
The previos LVM config for the ppc cluster did not have issue_discards.  Let's keep it that way.

5 years agospell OSUOSL better
Peter Palfrader [Thu, 29 Aug 2019 18:20:51 +0000 (20:20 +0200)]
spell OSUOSL better

5 years agotransition osuosl ppc cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 18:18:55 +0000 (20:18 +0200)]
transition osuosl ppc cluster to new lvm config

5 years agothe arm ganeti cluster also wants issue_discards in its lvm config
Peter Palfrader [Thu, 29 Aug 2019 18:12:46 +0000 (20:12 +0200)]
the arm ganeti cluster also wants issue_discards in its lvm config

5 years agotransition ubc arm cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 18:08:45 +0000 (20:08 +0200)]
transition ubc arm cluster to new lvm config

Similar to the cluster at conova, this effectively replaces filter
with global_filter, and re-enables monitoring.  Also, explicitly set
preferred_names to the empty list.

5 years agofix filter setting for conova lvm
Peter Palfrader [Thu, 29 Aug 2019 17:47:58 +0000 (19:47 +0200)]
fix filter setting for conova lvm

5 years agotransition conova cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 17:43:51 +0000 (19:43 +0200)]
transition conova cluster to new lvm config

This re-enables use_lvmetad and monitoring which were disabled two years
ago.  We will find out if this breaks anything.  Maybe with the use
of global_filter instead of just filter it'll be fine.

5 years agoalso remove obsolete lvm-grnet-nodeX-ganeti.conf file
Peter Palfrader [Thu, 29 Aug 2019 17:39:35 +0000 (19:39 +0200)]
also remove obsolete lvm-grnet-nodeX-ganeti.conf file

5 years agotransition prokofiev to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 17:35:18 +0000 (19:35 +0200)]
transition prokofiev to new lvm config

5 years agotransition grnet cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 17:20:51 +0000 (19:20 +0200)]
transition grnet cluster to new lvm config

5 years agotransition csail cluster to new lvm config, 2
Peter Palfrader [Thu, 29 Aug 2019 17:12:38 +0000 (19:12 +0200)]
transition csail cluster to new lvm config, 2

5 years agotransition csail cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 17:11:21 +0000 (19:11 +0200)]
transition csail cluster to new lvm config

5 years agotransition bm cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 16:47:41 +0000 (18:47 +0200)]
transition bm cluster to new lvm config

5 years agotransition manda cluster to new lvm config, 4
Peter Palfrader [Thu, 29 Aug 2019 16:26:39 +0000 (18:26 +0200)]
transition manda cluster to new lvm config, 4

5 years agotransition manda cluster to new lvm config, 3
Peter Palfrader [Thu, 29 Aug 2019 16:25:31 +0000 (18:25 +0200)]
transition manda cluster to new lvm config, 3

5 years agotransition manda cluster to new lvm config, 2
Peter Palfrader [Thu, 29 Aug 2019 16:25:09 +0000 (18:25 +0200)]
transition manda cluster to new lvm config, 2

5 years agotransition manda cluster to new lvm config
Peter Palfrader [Thu, 29 Aug 2019 16:24:15 +0000 (18:24 +0200)]
transition manda cluster to new lvm config

5 years agomove ubc-enc2bl02, ubc-enc2bl09 and ubc-enc2bl10 to the new LVM config module
Peter Palfrader [Thu, 29 Aug 2019 16:11:37 +0000 (18:11 +0200)]
move ubc-enc2bl02, ubc-enc2bl09 and ubc-enc2bl10 to the new LVM config module

5 years agodefine the update-initramfs exec
Peter Palfrader [Thu, 29 Aug 2019 15:58:14 +0000 (17:58 +0200)]
define the update-initramfs exec

5 years agomove the ubc-enc2bl01 LVM config to a profile included via hiera using the new LVM...
Peter Palfrader [Thu, 29 Aug 2019 15:56:31 +0000 (17:56 +0200)]
move the ubc-enc2bl01 LVM config to a profile included via hiera using the new LVM module

5 years agoAn lvm module that can set issue_discards and global_filter
Peter Palfrader [Thu, 29 Aug 2019 15:08:40 +0000 (17:08 +0200)]
An lvm module that can set issue_discards and global_filter

5 years agoAdd a pristine stretch and buster lvm.conf as a template for some lvm reconciliation...
Peter Palfrader [Thu, 29 Aug 2019 15:07:08 +0000 (17:07 +0200)]
Add a pristine stretch and buster lvm.conf as a template for some lvm reconciliation work

5 years agoThe syntax check won't let me include our site module, probably due to its name....
Peter Palfrader [Thu, 29 Aug 2019 15:50:09 +0000 (17:50 +0200)]
The syntax check won't let me include our site module, probably due to its name.  Try via hiera, but merge it into base eventually

5 years agoThe syntax check won't let me include our site module, probably due to its name
Peter Palfrader [Thu, 29 Aug 2019 15:49:40 +0000 (17:49 +0200)]
The syntax check won't let me include our site module, probably due to its name