Aurelien Jarno [Sat, 18 Mar 2017 21:31:35 +0000 (22:31 +0100)]
buildd: fix lsbmajdistrelease calls
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Sat, 18 Mar 2017 21:05:58 +0000 (21:05 +0000)]
fix template
Peter Palfrader [Sat, 18 Mar 2017 20:39:21 +0000 (20:39 +0000)]
fix two templates
Peter Palfrader [Sat, 18 Mar 2017 20:36:51 +0000 (20:36 +0000)]
fix two templates
Peter Palfrader [Sat, 18 Mar 2017 20:36:43 +0000 (20:36 +0000)]
rename nfs-server to nfs_server
Peter Palfrader [Sat, 18 Mar 2017 19:37:29 +0000 (20:37 +0100)]
remove rng-tools without hwrandom
Peter Palfrader [Sat, 18 Mar 2017 19:33:38 +0000 (20:33 +0100)]
close quote
Peter Palfrader [Sat, 18 Mar 2017 19:31:55 +0000 (20:31 +0100)]
the hook is annoying
Peter Palfrader [Sat, 18 Mar 2017 19:30:57 +0000 (20:30 +0100)]
stringify file modes
Peter Palfrader [Sat, 18 Mar 2017 19:28:21 +0000 (20:28 +0100)]
do check for boolean value of true instead of stringified version
Peter Palfrader [Sat, 18 Mar 2017 19:22:35 +0000 (20:22 +0100)]
make a reverse for hw_can_temp_sensors that removes lm-sensors
Peter Palfrader [Sat, 18 Mar 2017 19:21:27 +0000 (19:21 +0000)]
fix unbound check in resolv.conf template
root [Sat, 18 Mar 2017 19:16:35 +0000 (19:16 +0000)]
Merge branch 'master' of file:///srv/puppet.debian.org/git/dsa-puppet
Peter Palfrader [Sat, 18 Mar 2017 18:48:38 +0000 (19:48 +0100)]
And clean out mptraid things if we do not have mptraid
Peter Palfrader [Sat, 18 Mar 2017 18:46:20 +0000 (19:46 +0100)]
remove postgres things if we do not have postgresql
Peter Palfrader [Sat, 18 Mar 2017 18:42:04 +0000 (19:42 +0100)]
remove portforwarder files if we do not have a portforwarding user
Peter Palfrader [Tue, 14 Mar 2017 11:00:32 +0000 (12:00 +0100)]
set vim modeline
Martin Zobel-Helas [Sat, 18 Mar 2017 19:13:34 +0000 (19:13 +0000)]
Merge branch 'master' of file:///srv/puppet.debian.org/git/dsa-puppet
Martin Zobel-Helas [Sat, 18 Mar 2017 19:13:00 +0000 (20:13 +0100)]
fix syntax
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
root [Sat, 18 Mar 2017 18:46:43 +0000 (18:46 +0000)]
puppet 4 foo
Signed-off-by: root <root@handel.debian.org>
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
root [Sat, 18 Mar 2017 13:30:14 +0000 (13:30 +0000)]
fix munin 1
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
root [Sat, 18 Mar 2017 18:46:43 +0000 (18:46 +0000)]
puppet 4 foo
Signed-off-by: root <root@handel.debian.org>
root [Sat, 18 Mar 2017 13:30:14 +0000 (13:30 +0000)]
fix munin 1
Martin Zobel-Helas [Sat, 18 Mar 2017 12:47:26 +0000 (13:47 +0100)]
fix syntax
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sat, 18 Mar 2017 12:43:09 +0000 (13:43 +0100)]
new function call to find hiera objects
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sat, 18 Mar 2017 11:33:06 +0000 (12:33 +0100)]
no more use of Puppet::Parser::Parser
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 17 Mar 2017 21:49:35 +0000 (22:49 +0100)]
add environmentconf
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Aurelien Jarno [Tue, 14 Mar 2017 21:23:05 +0000 (22:23 +0100)]
buildd.d.o: update archive key
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Sun, 12 Mar 2017 13:13:19 +0000 (14:13 +0100)]
add dpl.d.o static component
Peter Palfrader [Sun, 12 Mar 2017 13:12:41 +0000 (14:12 +0100)]
add dpl.d.o static component
Peter Palfrader [Sat, 11 Mar 2017 20:56:13 +0000 (21:56 +0100)]
retire glinka
Peter Palfrader [Sat, 11 Mar 2017 18:48:01 +0000 (19:48 +0100)]
spacing change (and vim modline) for debtags.d.o vhost config
Peter Palfrader [Sat, 11 Mar 2017 09:45:46 +0000 (10:45 +0100)]
Clean out old watcher pause files automatically
Peter Palfrader [Sat, 11 Mar 2017 09:35:30 +0000 (10:35 +0100)]
retire sompek, stadler
Peter Palfrader [Sat, 11 Mar 2017 09:34:49 +0000 (10:34 +0100)]
ignore local qemu-efi on acker, aagaard
Peter Palfrader [Fri, 10 Mar 2017 10:27:32 +0000 (11:27 +0100)]
add missing sudo entry for debsources
Peter Palfrader [Wed, 8 Mar 2017 18:00:44 +0000 (19:00 +0100)]
firefox considers style in .svg things "unsafe-inline" settings, so we need a different CSP for svg files
Peter Palfrader [Wed, 8 Mar 2017 17:15:59 +0000 (18:15 +0100)]
amended policy
Peter Palfrader [Wed, 8 Mar 2017 17:09:56 +0000 (18:09 +0100)]
Set a CSP for lintian, acked by nthykier
Peter Palfrader [Wed, 8 Mar 2017 12:26:37 +0000 (13:26 +0100)]
Set a bunch of security related headers that might break stuff. We will found out
Peter Palfrader [Wed, 8 Mar 2017 12:24:17 +0000 (13:24 +0100)]
rename pratchett to headers
Peter Palfrader [Mon, 6 Mar 2017 09:21:55 +0000 (10:21 +0100)]
Add anycast mirror to sources.list
Peter Palfrader [Fri, 3 Mar 2017 16:12:39 +0000 (17:12 +0100)]
Set ServerAliveInterval and BatchMode on ssh to backuphost
Peter Palfrader [Wed, 1 Mar 2017 17:36:27 +0000 (18:36 +0100)]
remove sudo access on acker for sledge and kibi
Peter Palfrader [Wed, 1 Mar 2017 17:02:48 +0000 (18:02 +0100)]
vsftp sites need an /srv/ftp, or else anon auth fails
Peter Palfrader [Tue, 28 Feb 2017 07:29:25 +0000 (08:29 +0100)]
Fix cluster name for debbugs cluster
Peter Palfrader [Mon, 27 Feb 2017 20:49:32 +0000 (21:49 +0100)]
backup hosts fetch from buxtehude
Peter Palfrader [Mon, 27 Feb 2017 20:47:08 +0000 (21:47 +0100)]
backup hosts to buxtehude
Peter Palfrader [Mon, 27 Feb 2017 20:39:59 +0000 (21:39 +0100)]
buxtehude needs to pg backup tools
Peter Palfrader [Sun, 26 Feb 2017 21:43:33 +0000 (22:43 +0100)]
bmdb1 ferm syntax fix
Peter Palfrader [Sun, 26 Feb 2017 21:42:55 +0000 (22:42 +0100)]
fetch backups from bmdb1:debsources
Peter Palfrader [Sun, 26 Feb 2017 21:39:21 +0000 (22:39 +0100)]
fetch backups from melartin
Peter Palfrader [Sun, 26 Feb 2017 21:36:17 +0000 (22:36 +0100)]
ssh-keygen on pg servers
Peter Palfrader [Sun, 26 Feb 2017 21:26:44 +0000 (22:26 +0100)]
Put the scripts we need for pg backups into puppet
Peter Palfrader [Sun, 26 Feb 2017 21:12:12 +0000 (22:12 +0100)]
allow pg access to bmdb1 debsources from backup hosts
Peter Palfrader [Sun, 26 Feb 2017 21:11:02 +0000 (22:11 +0100)]
allow pg access to melartin from backup hosts
Peter Palfrader [Sun, 26 Feb 2017 18:36:17 +0000 (19:36 +0100)]
enable module reqtimeout everywhere
Peter Palfrader [Sun, 26 Feb 2017 17:00:38 +0000 (18:00 +0100)]
Merge remote-tracking branch 'waldi/syncproxy-security-buildd-pool'
* waldi/syncproxy-security-buildd-pool:
Export debian-security-buildd-pool on syncproxy
Bastian Blank [Sun, 26 Feb 2017 16:57:01 +0000 (17:57 +0100)]
Export debian-security-buildd-pool on syncproxy
Peter Palfrader [Sun, 26 Feb 2017 08:50:21 +0000 (09:50 +0100)]
Revert "ignore old puppet-common on stretch hosts"
This reverts commit
2c07d5039e8884dfe0d869c5e39dfe2f44dc83c0.
The ignore only works for obsolete packages, not for out of date
packages.
Peter Palfrader [Sun, 26 Feb 2017 08:39:40 +0000 (09:39 +0100)]
ignore old puppet-common on stretch hosts
Peter Palfrader [Sat, 25 Feb 2017 19:54:28 +0000 (20:54 +0100)]
fix class name
Peter Palfrader [Sat, 25 Feb 2017 19:53:52 +0000 (20:53 +0100)]
add a piuparts slave role
Peter Palfrader [Sat, 25 Feb 2017 17:43:46 +0000 (18:43 +0100)]
some hosts use mpm_prefork
Peter Palfrader [Sat, 25 Feb 2017 17:28:15 +0000 (18:28 +0100)]
timesyncd at ubc
Peter Palfrader [Sat, 25 Feb 2017 17:10:09 +0000 (18:10 +0100)]
Add piu-slave-ubc-01
Peter Palfrader [Sat, 25 Feb 2017 15:10:06 +0000 (16:10 +0100)]
Add storage for piu-slave-ubc-01
Peter Palfrader [Sat, 25 Feb 2017 14:44:54 +0000 (15:44 +0100)]
Use mpm_worker over mpm_event
Peter Palfrader [Fri, 24 Feb 2017 09:22:08 +0000 (10:22 +0100)]
new apache on mirror-conova
Peter Palfrader [Fri, 24 Feb 2017 09:14:56 +0000 (10:14 +0100)]
backend server aliases for archive, debug, debian, and security
Peter Palfrader [Fri, 24 Feb 2017 09:09:26 +0000 (10:09 +0100)]
Add mirror-conova to historical_mirror
Peter Palfrader [Fri, 24 Feb 2017 09:05:00 +0000 (09:05 +0000)]
fix archive mirror bind magic
Peter Palfrader [Fri, 24 Feb 2017 08:37:43 +0000 (09:37 +0100)]
Add archive rsync to historical_mirror role
Peter Palfrader [Thu, 23 Feb 2017 20:04:57 +0000 (21:04 +0100)]
rename boman to mirror-accumu
Peter Palfrader [Thu, 23 Feb 2017 19:00:54 +0000 (20:00 +0100)]
make bytemark a security mirror (for anycast)
Peter Palfrader [Thu, 23 Feb 2017 18:38:12 +0000 (18:38 +0000)]
listen on anycast address with apache on debian mirrors that are in the bgp group
Peter Palfrader [Thu, 23 Feb 2017 18:31:43 +0000 (19:31 +0100)]
rename bilbao to mirror-bytemark
Peter Palfrader [Thu, 23 Feb 2017 18:12:28 +0000 (19:12 +0100)]
limit ftp to the security address
Peter Palfrader [Thu, 23 Feb 2017 18:05:06 +0000 (19:05 +0100)]
no need for the ynic-special lldp module anymore - we put lldp everywhere
Peter Palfrader [Thu, 23 Feb 2017 17:34:51 +0000 (17:34 +0000)]
fix debian mirror bind addr for ipv6 on klecker
Peter Palfrader [Thu, 23 Feb 2017 17:29:04 +0000 (18:29 +0100)]
debian and security anycast-test addresses
Peter Palfrader [Thu, 23 Feb 2017 17:27:02 +0000 (18:27 +0100)]
add security.anycast-test server alias, do away with having both testing-anycast and anycast-test
Peter Palfrader [Thu, 23 Feb 2017 17:08:17 +0000 (18:08 +0100)]
Retire poulenc: hardware died
Peter Palfrader [Thu, 23 Feb 2017 16:05:34 +0000 (17:05 +0100)]
add klecker to debian_mirror_onion
Peter Palfrader [Thu, 23 Feb 2017 16:00:43 +0000 (17:00 +0100)]
Add klecker to the ftp.d.o mirror group now that the fastly live check no longer requires http 200 on GET / (we redirect into /debian/
Peter Palfrader [Thu, 23 Feb 2017 15:59:54 +0000 (16:59 +0100)]
Add server alias for $location.$archive.backend.mirrors.debian.org
Peter Palfrader [Thu, 23 Feb 2017 15:42:56 +0000 (16:42 +0100)]
touch /srv/ftp.root/.nobackup
Peter Palfrader [Thu, 23 Feb 2017 15:38:20 +0000 (16:38 +0100)]
add a missing ,
Peter Palfrader [Thu, 23 Feb 2017 15:37:18 +0000 (16:37 +0100)]
conova to debug_mirror
Peter Palfrader [Thu, 23 Feb 2017 15:37:01 +0000 (16:37 +0100)]
bind address for security, debug and debian mirror on conova
Peter Palfrader [Thu, 23 Feb 2017 15:32:27 +0000 (16:32 +0100)]
conova to security_mirror
Aurelien Jarno [Thu, 23 Feb 2017 13:46:18 +0000 (14:46 +0100)]
Fix a typo in my previous commit
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 23 Feb 2017 13:38:12 +0000 (14:38 +0100)]
buildd: make sure the buildd service is disabled and not running
This is a leftover init script from the official buildd package, our
setup uses cron to (re)start the build daemon.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Paul Wise [Wed, 22 Feb 2017 01:36:27 +0000 (09:36 +0800)]
Redirect removed official mirror pages
Peter Palfrader [Tue, 21 Feb 2017 18:42:39 +0000 (19:42 +0100)]
Make conova be a debian mirror
Peter Palfrader [Tue, 21 Feb 2017 15:17:22 +0000 (16:17 +0100)]
add mirror-conova to the archvsync_base role
Peter Palfrader [Tue, 21 Feb 2017 15:15:31 +0000 (16:15 +0100)]
Make archvsync_base create the /etc/ssh/userkeys/archvsync symlink
Peter Palfrader [Sun, 19 Feb 2017 08:15:00 +0000 (09:15 +0100)]
restart instead of just start
Peter Palfrader [Fri, 17 Feb 2017 12:31:59 +0000 (13:31 +0100)]
log requested hostname in www-other.debian.org-access.log
Peter Palfrader [Wed, 15 Feb 2017 07:23:31 +0000 (08:23 +0100)]
New inet4 for busoni