Peter Palfrader [Fri, 11 Dec 2015 11:25:42 +0000 (12:25 +0100)]
move static-master for www to dillon
Peter Palfrader [Fri, 11 Dec 2015 08:55:54 +0000 (09:55 +0100)]
Update several certs
Peter Palfrader [Wed, 9 Dec 2015 22:21:42 +0000 (23:21 +0100)]
munin cleanup cronjob
Peter Palfrader [Mon, 7 Dec 2015 09:32:49 +0000 (10:32 +0100)]
remove comment
Aurelien Jarno [Tue, 8 Dec 2015 14:12:12 +0000 (15:12 +0100)]
cron.d/dsa-buildd: cleanup upload queues
The security upload queue is not cleaned after packages are accepted as
mails are not sent for security reasons. The standard upload queue is not
also not always cleaned as packages can be rejected (new version, out-of
date chroot with Built-Using, etc.)
Automatically cleanup upload queues by removing files older than 60
days. After this time it's probably better to rebuild the package with
an up-to-date chroot.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Mon, 7 Dec 2015 20:14:48 +0000 (21:14 +0100)]
Push to -isc
Peter Palfrader [Mon, 7 Dec 2015 19:56:19 +0000 (19:56 +0000)]
create static-components.conf from a yaml file, re-add -anu, but let it mirror only www
Julien Cristau [Mon, 7 Dec 2015 14:02:39 +0000 (15:02 +0100)]
nagios can run hpssacli via sudo
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Mon, 7 Dec 2015 09:27:52 +0000 (10:27 +0100)]
Not convinced mirror-anu should be a static mirror
Julien Cristau [Mon, 7 Dec 2015 08:46:12 +0000 (09:46 +0100)]
install hpssacli on HP servers
Replaces hpacucli.
Peter Palfrader [Mon, 7 Dec 2015 08:45:20 +0000 (09:45 +0100)]
Also add static_mirror_nopush hosts to static_mirror
Peter Palfrader [Mon, 7 Dec 2015 08:39:46 +0000 (09:39 +0100)]
Add mirror-isc to static_mirror_nopush
Julien Cristau [Sun, 6 Dec 2015 23:31:09 +0000 (00:31 +0100)]
move mirror-csail back to static_mirror
Signed-off-by: Julien Cristau <jcristau@debian.org>
Paul Wise [Sun, 6 Dec 2015 02:21:03 +0000 (10:21 +0800)]
Set the right permissions for Apache logs on weblog_providers
Peter Palfrader [Sat, 5 Dec 2015 18:16:58 +0000 (19:16 +0100)]
we do want backups of mirror-{anu,isc,umn}
Peter Palfrader [Sat, 5 Dec 2015 18:16:47 +0000 (19:16 +0100)]
mirror-anu must not be in apache2_www_mirror if it is in static
Peter Palfrader [Sat, 5 Dec 2015 18:16:29 +0000 (19:16 +0100)]
We do not want to block static syncs on mirror-* yet
Aurelien Jarno [Sat, 5 Dec 2015 13:36:40 +0000 (14:36 +0100)]
update unicamp netrange
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Martin Zobel-Helas [Fri, 4 Dec 2015 16:39:41 +0000 (16:39 +0000)]
remove for now again
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 4 Dec 2015 16:26:27 +0000 (16:26 +0000)]
add mirror-isc and mirror-umn
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 4 Dec 2015 14:14:16 +0000 (14:14 +0000)]
add mirror-anu.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Wed, 2 Dec 2015 21:45:51 +0000 (22:45 +0100)]
Allow rusca to access the main cluster on bmdb1
Peter Palfrader [Wed, 2 Dec 2015 18:25:46 +0000 (19:25 +0100)]
sudo for %debian-r
Aurelien Jarno [Mon, 30 Nov 2015 21:51:27 +0000 (22:51 +0100)]
Regenerate buildds chroots more often
Regenerate buildds chroots on Sundays and Wednesdays, so that we don't
end-up with dak rejecting packages with static binaries built against
an old toolchain (Built-Using).
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Martin Zobel-Helas [Thu, 26 Nov 2015 17:55:13 +0000 (17:55 +0000)]
dsa_lvm module - lint cleanup (as suggested by Martin Alfke)
- case uses strings
- always set ensure on file resource types
- variables in strings need curly brackets
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Thu, 26 Nov 2015 17:43:59 +0000 (17:43 +0000)]
rename modules/lvm to modules/dsa_lvm
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 17 Nov 2015 12:21:15 +0000 (13:21 +0100)]
fix path
Peter Palfrader [Tue, 17 Nov 2015 11:41:13 +0000 (12:41 +0100)]
Switch postgres-make-base-backups to be a template, and do not backup moszumanska from backuphost
Aurelien Jarno [Mon, 16 Nov 2015 22:49:54 +0000 (23:49 +0100)]
schroot-dsa/config: fix mirror without default-mirror file
RT#6050
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Mon, 16 Nov 2015 10:31:46 +0000 (11:31 +0100)]
Move seger to the top of the queue
Paul Wise [Sat, 14 Nov 2015 14:25:33 +0000 (22:25 +0800)]
eder.d.o: more decomission cleanup
Julien Cristau [Sun, 15 Nov 2015 10:56:01 +0000 (11:56 +0100)]
decommission chopin
Signed-off-by: Julien Cristau <jcristau@debian.org>
Aurelien Jarno [Sat, 14 Nov 2015 14:06:07 +0000 (15:06 +0100)]
eder.d.o: decomission
Julien Cristau [Thu, 12 Nov 2015 10:33:19 +0000 (11:33 +0100)]
Drop securiteinfo.hdb from clamav-unofficial-sigs config
It doesn't seem to work anymore as of last week.
Signed-off-by: Julien Cristau <jcristau@debian.org>
Paul Wise [Tue, 10 Nov 2015 02:39:53 +0000 (10:39 +0800)]
Always remove acpi packages from jessie hosts
Paul Wise [Mon, 9 Nov 2015 10:36:25 +0000 (18:36 +0800)]
Typo
Paul Wise [Mon, 9 Nov 2015 09:47:57 +0000 (17:47 +0800)]
Remove acpid and acpi-support base on jessie machines.
ACPI support is handled by systemd-logind in jessie and later:
https://www.debian.org/releases/jessie/amd64/release-notes/ch-information.en.html#idp39488784
Suggested-by: ansgar on #debian-admin
Julien Cristau [Sun, 8 Nov 2015 17:00:48 +0000 (18:00 +0100)]
Add seger to postgres-make-base-backups
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Sun, 8 Nov 2015 09:48:28 +0000 (09:48 +0000)]
Add veyepar role
Peter Palfrader [Sat, 7 Nov 2015 14:24:12 +0000 (14:24 +0000)]
Add /http-auth-jenkins/ for jenkins
Peter Palfrader [Sat, 7 Nov 2015 11:39:42 +0000 (11:39 +0000)]
Add rusca storace (RT#6019)
Peter Palfrader [Sat, 7 Nov 2015 10:34:48 +0000 (10:34 +0000)]
Allow gid videoteam to sudo to local user veyepar on vittoria
Aurelien Jarno [Thu, 5 Nov 2015 21:51:02 +0000 (22:51 +0100)]
Add jessie-proposed-update repo for all Loongson 3 machines
So that we can install a fixed kernel wrt FPU.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Peter Palfrader [Thu, 5 Nov 2015 19:29:30 +0000 (20:29 +0100)]
variable assignment does not clone string...
Peter Palfrader [Thu, 5 Nov 2015 19:27:06 +0000 (20:27 +0100)]
Give arrays another try
Peter Palfrader [Thu, 5 Nov 2015 19:23:57 +0000 (20:23 +0100)]
try this
Peter Palfrader [Thu, 5 Nov 2015 19:21:40 +0000 (20:21 +0100)]
use ports in debug output
Peter Palfrader [Thu, 5 Nov 2015 19:18:06 +0000 (20:18 +0100)]
Arrays do not seem to work, use strings for now
Peter Palfrader [Thu, 5 Nov 2015 19:09:25 +0000 (20:09 +0100)]
We do not want vogler to create a 443 TLSA for www
Peter Palfrader [Thu, 5 Nov 2015 19:04:35 +0000 (20:04 +0100)]
Fix stomping of certfile
Peter Palfrader [Thu, 5 Nov 2015 18:59:36 +0000 (19:59 +0100)]
some extra output
Peter Palfrader [Thu, 5 Nov 2015 18:55:40 +0000 (19:55 +0100)]
maybe TLSA records for XMPP stuff
Peter Palfrader [Thu, 5 Nov 2015 18:54:43 +0000 (19:54 +0100)]
support multiple ports in gen tlsa
Peter Palfrader [Thu, 5 Nov 2015 18:45:46 +0000 (19:45 +0100)]
No need to make /etc/repro/debian.org-chained.crt and /etc/repro/sip-ws.debian.org-chained.crt when they exist in /etc/ssl/debian/certs
Peter Palfrader [Thu, 5 Nov 2015 18:22:36 +0000 (19:22 +0100)]
give debvoip sudo to service prosody
Peter Palfrader [Wed, 4 Nov 2015 14:55:25 +0000 (15:55 +0100)]
Fix cgit root title for dgit (RT#6034)
Aurelien Jarno [Tue, 3 Nov 2015 14:55:52 +0000 (15:55 +0100)]
Add etler
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Christoph Egger [Sun, 1 Nov 2015 12:47:15 +0000 (13:47 +0100)]
shorten chroot name for kFreeBSD
Signed-off-by: Christoph Egger <christoph@debian.org>
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Paul Wise [Wed, 28 Oct 2015 15:43:20 +0000 (23:43 +0800)]
Redirect d.o/support/ to /support since base-files used the wrong one.
See-also: #800791 #781809
Peter Palfrader [Tue, 27 Oct 2015 21:04:51 +0000 (22:04 +0100)]
Add debian.fi
Paul Wise [Fri, 23 Oct 2015 06:32:52 +0000 (14:32 +0800)]
Ensure that rtc's monit configuration file is absent
Signed-off-by: Paul Wise <pabs@debian.org>
Luca Filipozzi [Wed, 21 Oct 2015 08:28:00 +0000 (08:28 +0000)]
remove rtc's monit configuration file
Peter Palfrader [Mon, 19 Oct 2015 17:23:17 +0000 (19:23 +0200)]
Revert "mirror.bytemark is quite slow at sanger. Use ukdebian.mirror.anlx.net instead"
This reverts commit
1aa04dffe7db9a40570c81fe996b3e93c42c5272.
Jakub Wilk [Sun, 18 Oct 2015 16:27:47 +0000 (18:27 +0200)]
Use HTTPS in /etc/motd
Signed-off-by: Peter Palfrader <peter@palfrader.org>
Paul Wise [Sun, 18 Oct 2015 15:52:54 +0000 (23:52 +0800)]
Only sync logs once per day since we are only transferring rotated logs
Signed-off-by: Paul Wise <pabs@debian.org>
Paul Wise [Sun, 18 Oct 2015 15:35:48 +0000 (23:35 +0800)]
Just sync existing debian.org access logs instead of duplicating logs
Signed-off-by: Paul Wise <pabs@debian.org>
Paul Wise [Sun, 18 Oct 2015 15:14:30 +0000 (23:14 +0800)]
Also log to a public access log for debian.org mirrors
Signed-off-by: Paul Wise <pabs@debian.org>
Paul Wise [Sun, 18 Oct 2015 14:47:04 +0000 (22:47 +0800)]
Set the correct weblogs destination in the weblog provider cron job
Paul Wise [Sun, 26 Jul 2015 05:18:34 +0000 (13:18 +0800)]
Enable shipping debian.org logs to www-master.debian.org [RT#5872]
This is for prioritising pages in order of popularity for translators.
Signed-off-by: Paul Wise <pabs@debian.org>
Peter Palfrader [Tue, 13 Oct 2015 16:05:55 +0000 (18:05 +0200)]
Enable pam_systemd.so in common-session
Julien Cristau [Sun, 11 Oct 2015 15:17:25 +0000 (17:17 +0200)]
use full path to /usr/bin/service in monit config
/etc/monit/monit.d/01puppet:9: Warning: Program does not exist: 'service'
Signed-off-by: Julien Cristau <jcristau@debian.org>
Julien Cristau [Sun, 11 Oct 2015 14:46:27 +0000 (16:46 +0200)]
renew ssl cert for api.ftp-master.d.o
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Sun, 11 Oct 2015 11:01:22 +0000 (13:01 +0200)]
Use SSO certs on jenkins
Peter Palfrader [Sun, 11 Oct 2015 08:24:20 +0000 (10:24 +0200)]
And ssl module
Peter Palfrader [Sun, 11 Oct 2015 08:23:42 +0000 (10:23 +0200)]
Add jenkins role
Peter Palfrader [Thu, 8 Oct 2015 12:27:09 +0000 (14:27 +0200)]
backuphost also has postgresql-client-9.1
Peter Palfrader [Thu, 8 Oct 2015 12:05:29 +0000 (14:05 +0200)]
encode backuphost in label for basebackups
Aurelien Jarno [Sat, 3 Oct 2015 15:15:48 +0000 (17:15 +0200)]
Fix another typo...
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 3 Oct 2015 15:14:31 +0000 (17:14 +0200)]
Fix a typo in previous commit
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Sat, 3 Oct 2015 15:12:05 +0000 (17:12 +0200)]
Add jessie-proposed-update repo for mips-aql-05 and mipsel-aql-02
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 2 Oct 2015 11:15:31 +0000 (13:15 +0200)]
Only create kfreebsd chroot aliases on kfreebsd-*
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Christoph Egger [Fri, 2 Oct 2015 10:51:45 +0000 (12:51 +0200)]
Create kfreebsd-security chroots
Signed-off-by: Christoph Egger <christoph@christoph-egger.org>
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Héctor Orón Martínez [Mon, 28 Sep 2015 09:44:42 +0000 (11:44 +0200)]
soler: decomission rt#5890
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Sun, 27 Sep 2015 22:20:20 +0000 (00:20 +0200)]
sudo: repkace press by publicity
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Sun, 27 Sep 2015 21:30:06 +0000 (23:30 +0200)]
sudo: allow pabs to push timeline rt#5979
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Sun, 27 Sep 2015 21:26:16 +0000 (23:26 +0200)]
sudo: replace debbits by publicity
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Iain R. Learmonth [Sun, 27 Sep 2015 15:16:30 +0000 (17:16 +0200)]
hamradio blends relocation on www.d.o
Héctor Orón Martínez [Sat, 26 Sep 2015 19:12:36 +0000 (21:12 +0200)]
corelli: decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Sat, 26 Sep 2015 11:22:22 +0000 (13:22 +0200)]
make base backups on backuphost at a different time
Peter Palfrader [Sat, 26 Sep 2015 11:13:40 +0000 (13:13 +0200)]
backuphost will have pg backups also
Héctor Orón Martínez [Thu, 24 Sep 2015 08:30:29 +0000 (10:30 +0200)]
multipath: drop brahms, decomissioned
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Thu, 24 Sep 2015 07:59:30 +0000 (09:59 +0200)]
brahms: decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Thu, 24 Sep 2015 07:45:13 +0000 (09:45 +0200)]
arcadelt: drop, decomissioned time ago
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Tue, 22 Sep 2015 22:36:45 +0000 (00:36 +0200)]
gabrielli: decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Héctor Orón Martínez [Fri, 18 Sep 2015 19:02:43 +0000 (21:02 +0200)]
eysler.d.o: decomission
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Fri, 18 Sep 2015 06:01:48 +0000 (08:01 +0200)]
disable proposed repo on zandonai
Peter Palfrader [Thu, 17 Sep 2015 15:54:51 +0000 (17:54 +0200)]
Install libpam-systemd on systemd hosts
Peter Palfrader [Thu, 17 Sep 2015 15:46:58 +0000 (17:46 +0200)]
and spell hostname right
Peter Palfrader [Thu, 17 Sep 2015 15:45:07 +0000 (17:45 +0200)]
remove duplicate entry
Peter Palfrader [Thu, 17 Sep 2015 15:42:37 +0000 (17:42 +0200)]
Add backuphost