mirror/dsa-puppet.git
9 years agoand make more things consistent
Peter Palfrader [Sat, 16 May 2015 09:21:23 +0000 (11:21 +0200)]
and make more things consistent

9 years agoremove obsolete entries
Peter Palfrader [Sat, 16 May 2015 09:21:16 +0000 (11:21 +0200)]
remove obsolete entries

9 years agothe wanna-build cluster was renamed
Peter Palfrader [Sat, 16 May 2015 09:21:05 +0000 (11:21 +0200)]
the wanna-build cluster was renamed

9 years agoMerge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa...
Martin Zobel-Helas [Sat, 16 May 2015 07:26:49 +0000 (07:26 +0000)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet

* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
  replace a few dijkstra occurrences with ubc-bl8

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Conflicts:
modules/lvm/manifests/init.pp

9 years agorename dijkstra
Martin Zobel-Helas [Sat, 16 May 2015 07:25:20 +0000 (07:25 +0000)]
rename dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoreplace a few dijkstra occurrences with ubc-bl8
Peter Palfrader [Sat, 16 May 2015 00:05:27 +0000 (02:05 +0200)]
replace a few dijkstra occurrences with ubc-bl8

9 years agorename dijkstra
Martin Zobel-Helas [Fri, 15 May 2015 23:38:42 +0000 (23:38 +0000)]
rename dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremote dijkstra
Martin Zobel-Helas [Fri, 15 May 2015 23:34:43 +0000 (23:34 +0000)]
remote dijkstra

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoMore MaxConnectionsPerChild
Peter Palfrader [Fri, 15 May 2015 09:03:27 +0000 (11:03 +0200)]
More MaxConnectionsPerChild

9 years agoHandle multiple keys in ldap correctly
Peter Palfrader [Thu, 14 May 2015 16:04:39 +0000 (18:04 +0200)]
Handle multiple keys in ldap correctly

9 years agoremove blavet (RT#5813)
Peter Palfrader [Thu, 14 May 2015 15:18:46 +0000 (17:18 +0200)]
remove blavet (RT#5813)

9 years agoremove blavet (RT#5813)
Peter Palfrader [Thu, 14 May 2015 15:17:46 +0000 (17:17 +0200)]
remove blavet (RT#5813)

9 years agoretire ravel
Peter Palfrader [Thu, 14 May 2015 10:17:33 +0000 (12:17 +0200)]
retire ravel

9 years agoremove ,bind from schroot fstab on freebsd
Peter Palfrader [Thu, 14 May 2015 09:36:55 +0000 (11:36 +0200)]
remove ,bind from schroot fstab on freebsd

9 years agomaybe staging wants a 3rdparty module path as well...
Martin Zobel-Helas [Wed, 13 May 2015 17:40:54 +0000 (17:40 +0000)]
maybe staging wants a 3rdparty module path as well...

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:42:33 +0000 (16:42 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:37:38 +0000 (16:37 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove include on it as well
Martin Zobel-Helas [Wed, 13 May 2015 16:24:07 +0000 (16:24 +0000)]
remove include on it as well

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoremove private class use of concat::setup
Martin Zobel-Helas [Wed, 13 May 2015 16:21:17 +0000 (16:21 +0000)]
remove private class use of concat::setup

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agothere is a volatile for freebsd after all
Peter Palfrader [Wed, 13 May 2015 09:07:59 +0000 (11:07 +0200)]
there is a volatile for freebsd after all

9 years agokfreebsd jessie apt sources
Peter Palfrader [Wed, 13 May 2015 08:16:42 +0000 (08:16 +0000)]
kfreebsd jessie apt sources

9 years agoUpgrade to 3rdparty version 0.9.5 of elasticsearch/elasticsearch
Martin Zobel-Helas [Tue, 12 May 2015 17:18:04 +0000 (17:18 +0000)]
Upgrade to 3rdparty version 0.9.5 of elasticsearch/elasticsearch

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoUpgrade to 3rdparty version 0.9.4 of elasticsearch/elasticsearch
Martin Zobel-Helas [Tue, 12 May 2015 17:16:21 +0000 (17:16 +0000)]
Upgrade to 3rdparty version 0.9.4 of elasticsearch/elasticsearch

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoAdd mirror for linaro hoster
Aurelien Jarno [Mon, 11 May 2015 16:46:53 +0000 (18:46 +0200)]
Add mirror for linaro hoster

The machines are in USA, defaulting to a mirror in Europe is suboptimal.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agoremove buildd-proposed apt repo on porpora
Julien Cristau [Sun, 10 May 2015 13:27:55 +0000 (15:27 +0200)]
remove buildd-proposed apt repo on porpora

There's no jessie-proposed.

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoremove lobos
Martin Zobel-Helas [Wed, 6 May 2015 21:49:04 +0000 (21:49 +0000)]
remove lobos

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoapache2: configure mpm_worker module on jessie hosts
Julien Cristau [Tue, 28 Apr 2015 15:37:56 +0000 (17:37 +0200)]
apache2: configure mpm_worker module on jessie hosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoFix comment in HSTS macro
Julien Cristau [Wed, 6 May 2015 18:51:48 +0000 (20:51 +0200)]
Fix comment in HSTS macro

9 years agoarmhf anf s390x now have the default set of suites
Peter Palfrader [Wed, 6 May 2015 06:21:16 +0000 (08:21 +0200)]
armhf anf s390x now have the default set of suites

9 years agono stretch for kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:20:52 +0000 (08:20 +0200)]
no stretch for kfreebsd

9 years agoUse -kfreebsd suite name on jessie/kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:09:25 +0000 (08:09 +0200)]
Use -kfreebsd suite name on jessie/kfreebsd

9 years agoUse -kfreebsd suite name on jessie/kfreebsd
Peter Palfrader [Wed, 6 May 2015 06:08:26 +0000 (08:08 +0200)]
Use -kfreebsd suite name on jessie/kfreebsd

9 years agoAlso extract arch info from schroot name
Peter Palfrader [Wed, 6 May 2015 06:02:56 +0000 (08:02 +0200)]
Also extract arch info from schroot name

9 years agoThe needed tzdata is also in jessie-updates
Paul Wise [Sat, 2 May 2015 14:16:15 +0000 (22:16 +0800)]
The needed tzdata is also in jessie-updates

9 years agoUse the leap-seconds.list file from tzdata on stretch (see #775166)
Paul Wise [Sun, 26 Apr 2015 23:53:18 +0000 (07:53 +0800)]
Use the leap-seconds.list file from tzdata on stretch (see #775166)

Allows us to get rid of the leap-seconds.list embedded data copy.

9 years agoRemove some dpkg cruft for removed ulogd package
Paul Wise [Sat, 2 May 2015 12:11:54 +0000 (20:11 +0800)]
Remove some dpkg cruft for removed ulogd package

9 years agoAdd -x to allowed rsync parameteres due to jessie
Peter Palfrader [Sat, 2 May 2015 10:16:09 +0000 (12:16 +0200)]
Add -x to allowed rsync parameteres due to jessie

9 years agoAdd -x to allowed rsync parameteres due to jessie
Peter Palfrader [Sat, 2 May 2015 10:10:54 +0000 (12:10 +0200)]
Add -x to allowed rsync parameteres due to jessie

9 years agoRe-enable symlinks on static vhosts
Julien Cristau [Fri, 1 May 2015 17:53:34 +0000 (19:53 +0200)]
Re-enable symlinks on static vhosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoEnable Indexes option for static vhosts
Julien Cristau [Fri, 1 May 2015 17:38:54 +0000 (19:38 +0200)]
Enable Indexes option for static vhosts

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agobrahms: drop jessie-proposed buildd updates (as it does not exist yet)
Héctor Orón Martínez [Fri, 1 May 2015 14:22:54 +0000 (16:22 +0200)]
brahms: drop jessie-proposed buildd updates (as it does not exist yet)

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
9 years agolintian.d.o: Relocate comment
Niels Thykier [Fri, 1 May 2015 12:27:29 +0000 (14:27 +0200)]
lintian.d.o: Relocate comment

Signed-off-by: Niels Thykier <niels@thykier.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agolintian.d.o: Remove graph directory - no longer used
Niels Thykier [Fri, 1 May 2015 12:25:25 +0000 (14:25 +0200)]
lintian.d.o: Remove graph directory - no longer used

Lintian now puts the graphs in the resource directory - like other
resources, their name will now change as their content do.

Signed-off-by: Niels Thykier <niels@thykier.net>
Signed-off-by: Peter Palfrader <peter@palfrader.org>
9 years agomore apache migrations
Peter Palfrader [Fri, 1 May 2015 10:39:55 +0000 (12:39 +0200)]
more apache migrations

9 years agomove bizet to msa
Peter Palfrader [Fri, 1 May 2015 07:57:57 +0000 (09:57 +0200)]
move bizet to msa

9 years agoMove bizet iscsi handling to kvm hosts
Peter Palfrader [Fri, 1 May 2015 07:51:37 +0000 (09:51 +0200)]
Move bizet iscsi handling to kvm hosts

9 years agoFix static hosts on jessie
Peter Palfrader [Fri, 1 May 2015 06:53:31 +0000 (08:53 +0200)]
Fix static hosts on jessie

9 years agoFix chain for new gobby cert
Julien Cristau [Thu, 30 Apr 2015 09:03:52 +0000 (11:03 +0200)]
Fix chain for new gobby cert

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agonew ssl certificate for gobby.debian.org
Julien Cristau [Thu, 30 Apr 2015 08:55:01 +0000 (10:55 +0200)]
new ssl certificate for gobby.debian.org

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoRevert "Use the leap-seconds.list file from tzdata on jessie (see #775166)"
Paul Wise [Thu, 30 Apr 2015 00:35:51 +0000 (08:35 +0800)]
Revert "Use the leap-seconds.list file from tzdata on jessie (see #775166)"

This reverts commit d2e73a9e90b6d671c545ba2c552239bf55e1f20f.

Too early!

9 years agoRedirect arm64 to the general ARM ports page
Paul Wise [Thu, 30 Apr 2015 00:34:47 +0000 (08:34 +0800)]
Redirect arm64 to the general ARM ports page

9 years agoUse the leap-seconds.list file from tzdata on jessie (see #775166)
Paul Wise [Sun, 26 Apr 2015 23:53:18 +0000 (07:53 +0800)]
Use the leap-seconds.list file from tzdata on jessie (see #775166)

Allows us to get rid of the leap-seconds.list embedded data copy.

9 years agoferm: office ip renumbering
Julien Cristau [Tue, 28 Apr 2015 15:33:59 +0000 (17:33 +0200)]
ferm: office ip renumbering

Signed-off-by: Julien Cristau <jcristau@debian.org>
9 years agoForward port nfs-common.default
Peter Palfrader [Tue, 28 Apr 2015 11:14:32 +0000 (13:14 +0200)]
Forward port nfs-common.default

9 years agorename milanollo volumes
Peter Palfrader [Tue, 28 Apr 2015 10:03:13 +0000 (12:03 +0200)]
rename milanollo volumes

9 years agoHandle apache 2.4 authz_host config in www.debian.org template
Julien Cristau [Mon, 27 Apr 2015 20:17:20 +0000 (22:17 +0200)]
Handle apache 2.4 authz_host config in debian.org template

9 years agoComment out RewriteLog{,Level} from www.debian.org vhost config
Julien Cristau [Mon, 27 Apr 2015 19:33:43 +0000 (21:33 +0200)]
Comment out RewriteLog{,Level} from debian.org vhost config

Those options are gone in apache 2.4.

9 years agoapache2.logrotate: rebase onto jessie
Peter Palfrader [Mon, 27 Apr 2015 14:36:38 +0000 (16:36 +0200)]
apache2.logrotate: rebase onto jessie

9 years agoAdd milanollo-lvm2
Peter Palfrader [Mon, 27 Apr 2015 09:06:40 +0000 (11:06 +0200)]
Add milanollo-lvm2

9 years agoRe-enable ekey on grnet-node01
Peter Palfrader [Mon, 27 Apr 2015 07:47:20 +0000 (09:47 +0200)]
Re-enable ekey on grnet-node01

9 years agoRevert "stretch does not debootstrap right now"
Peter Palfrader [Sun, 26 Apr 2015 15:32:54 +0000 (17:32 +0200)]
Revert "stretch does not debootstrap right now"

This reverts commit 4868551bb3d417a37199a1f88e19ca77f1786a5d.

9 years agostretch does not debootstrap right now
Peter Palfrader [Sun, 26 Apr 2015 08:17:30 +0000 (10:17 +0200)]
stretch does not debootstrap right now

9 years agouse the schroot-unpack tmpfs when available
Peter Palfrader [Sun, 26 Apr 2015 07:54:25 +0000 (09:54 +0200)]
use the schroot-unpack tmpfs when available

9 years agodebian+=1
Peter Palfrader [Sun, 26 Apr 2015 07:30:58 +0000 (09:30 +0200)]
debian+=1

9 years agocruft cleanup
Peter Palfrader [Sun, 26 Apr 2015 07:30:41 +0000 (09:30 +0200)]
cruft cleanup

9 years agoAdding !DSS to our CipherSuite does not make an effective difference, but it cuts...
Peter Palfrader [Wed, 22 Apr 2015 05:44:24 +0000 (07:44 +0200)]
Adding !DSS to our CipherSuite does not make an effective difference, but it cuts down on noise in openssl ciphers -v

9 years agocheck-libs: Ignore agetty processes
Peter Palfrader [Tue, 21 Apr 2015 08:26:26 +0000 (10:26 +0200)]
check-libs: Ignore agetty processes

9 years agoAdd redirects for Debian 9 (stretch) and 10 (buster)
Paul Wise [Tue, 21 Apr 2015 01:34:19 +0000 (09:34 +0800)]
Add redirects for Debian 9 (stretch) and 10 (buster)

9 years agoAdd jerea
Peter Palfrader [Sun, 19 Apr 2015 09:56:02 +0000 (11:56 +0200)]
Add jerea

9 years agoAdd jerea
Peter Palfrader [Sun, 19 Apr 2015 09:52:52 +0000 (11:52 +0200)]
Add jerea

9 years agoservice is in usr/sbin, which isn't in PATH
Peter Palfrader [Sat, 11 Apr 2015 09:37:08 +0000 (11:37 +0200)]
service is in usr/sbin, which isn't in PATH

9 years agoanchor string
Peter Palfrader [Sat, 11 Apr 2015 08:57:37 +0000 (10:57 +0200)]
anchor string

9 years agoonly on stunnel clients
Peter Palfrader [Sat, 11 Apr 2015 08:56:04 +0000 (10:56 +0200)]
only on stunnel clients

9 years agoredirect output to /dev/null
Peter Palfrader [Sat, 11 Apr 2015 08:27:10 +0000 (10:27 +0200)]
redirect output to /dev/null

9 years agoauto-restart broken stunnels
Peter Palfrader [Sat, 11 Apr 2015 08:26:25 +0000 (10:26 +0200)]
auto-restart broken stunnels

9 years agoTry to make stunnel4 init script work on wheezy
Peter Palfrader [Fri, 10 Apr 2015 07:28:35 +0000 (09:28 +0200)]
Try to make stunnel4 init script work on wheezy

start-stop-daemon in wheezy does not have a --pid yet.
Instead, it interprets it as --pidfile and things become sad.

9 years agounbound: update debian.org DS
Peter Palfrader [Thu, 9 Apr 2015 07:28:58 +0000 (09:28 +0200)]
unbound: update debian.org DS

9 years agogrnet-node01 is currently not available - remove as entropy provider
Peter Palfrader [Wed, 8 Apr 2015 12:16:07 +0000 (14:16 +0200)]
grnet-node01 is currently not available - remove as entropy provider

9 years agoReload systemd defs if the stunnel4 init script changes
Tollef Fog Heen [Mon, 6 Apr 2015 17:47:33 +0000 (19:47 +0200)]
Reload systemd defs if the stunnel4 init script changes

9 years agoFix syntax
Tollef Fog Heen [Mon, 6 Apr 2015 17:30:26 +0000 (19:30 +0200)]
Fix syntax

9 years agoUse start-stop-daemon for stopping/restarting stunnel4
Tollef Fog Heen [Mon, 6 Apr 2015 17:28:03 +0000 (19:28 +0200)]
Use start-stop-daemon for stopping/restarting stunnel4

9 years agorenew certs
Martin Zobel-Helas [Fri, 3 Apr 2015 20:46:22 +0000 (20:46 +0000)]
renew certs

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoRevert "try without that first"
Martin Zobel-Helas [Fri, 3 Apr 2015 11:52:44 +0000 (11:52 +0000)]
Revert "try without that first"

This reverts commit bfc022db0e9eca3c0916e2f1abea84bbc61026a6.

9 years agotry without that first
Martin Zobel-Helas [Fri, 3 Apr 2015 11:51:02 +0000 (11:51 +0000)]
try without that first

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoRevert "no class elasticsearch"
Martin Zobel-Helas [Fri, 3 Apr 2015 11:38:09 +0000 (11:38 +0000)]
Revert "no class elasticsearch"

This reverts commit 1a4fc6d887319680dc9504c96a931cf0c0284ecc.

9 years agono class elasticsearch
Martin Zobel-Helas [Fri, 3 Apr 2015 11:37:23 +0000 (11:37 +0000)]
no class elasticsearch

9 years agocorrect modulepath
Martin Zobel-Helas [Fri, 3 Apr 2015 11:33:40 +0000 (11:33 +0000)]
correct modulepath

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoAdd new module elasticsearch for listsearch
Martin Zobel-Helas [Thu, 2 Apr 2015 14:02:20 +0000 (14:02 +0000)]
Add new module elasticsearch for listsearch

We do not want write our own puppet module for elasticsearch. Therefor
we use the one from puppetforge.

This commit invents the use of r10k in an extra 3rdparty module
subdirectory. This way we can pull in new modules from puppetforge
without deleting the old ones. Puppetfile allows us to define which
module in which version is pulled in from puppetforge by running:

r10k puppetfile install

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agowe now use elasticsearch, so adjust ports
Martin Zobel-Helas [Thu, 2 Apr 2015 08:05:16 +0000 (08:05 +0000)]
we now use elasticsearch, so adjust ports

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agonew $vcs SSL cert
Martin Zobel-Helas [Wed, 1 Apr 2015 11:47:53 +0000 (11:47 +0000)]
new $vcs SSL cert

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
9 years agoUpdate the alioth wildcard certificate
Paul Wise [Tue, 31 Mar 2015 01:52:53 +0000 (09:52 +0800)]
Update the alioth wildcard certificate

9 years agoMove ca-certificates configs to puppet files for maintainability.
Paul Wise [Tue, 31 Mar 2015 01:51:51 +0000 (09:51 +0800)]
Move ca-certificates configs to puppet files for maintainability.

9 years agoretire lilburn
Peter Palfrader [Sat, 28 Mar 2015 18:05:22 +0000 (19:05 +0100)]
retire lilburn

9 years agoarm-arm-03: new host
Héctor Orón Martínez [Tue, 24 Mar 2015 10:10:06 +0000 (11:10 +0100)]
arm-arm-03: new host

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
9 years agoAdd dinis-lvm
Peter Palfrader [Tue, 24 Mar 2015 08:04:35 +0000 (09:04 +0100)]
Add dinis-lvm

9 years agoAdd plummer to PORTERBOXES
Peter Palfrader [Mon, 23 Mar 2015 17:58:22 +0000 (18:58 +0100)]
Add plummer to PORTERBOXES

9 years agoAdd plummer
Peter Palfrader [Mon, 23 Mar 2015 17:32:25 +0000 (18:32 +0100)]
Add plummer

9 years agoAllow running dsa-check-stunnel-sanity as root from nagios
Peter Palfrader [Mon, 23 Mar 2015 12:38:19 +0000 (13:38 +0100)]
Allow running dsa-check-stunnel-sanity as root from nagios

9 years agoSet SO_KEEPALIVE, maybe it helps
Peter Palfrader [Mon, 23 Mar 2015 10:38:34 +0000 (11:38 +0100)]
Set SO_KEEPALIVE, maybe it helps

9 years agoNew 29.172.in-addr.arpa trust anchor
Peter Palfrader [Mon, 23 Mar 2015 09:53:06 +0000 (10:53 +0100)]
New 29.172.in-addr.arpa trust anchor