Peter Palfrader [Sat, 25 Feb 2017 19:53:52 +0000 (20:53 +0100)]
add a piuparts slave role
Peter Palfrader [Sat, 25 Feb 2017 17:43:46 +0000 (18:43 +0100)]
some hosts use mpm_prefork
Peter Palfrader [Sat, 25 Feb 2017 17:28:15 +0000 (18:28 +0100)]
timesyncd at ubc
Peter Palfrader [Sat, 25 Feb 2017 17:10:09 +0000 (18:10 +0100)]
Add piu-slave-ubc-01
Peter Palfrader [Sat, 25 Feb 2017 15:10:06 +0000 (16:10 +0100)]
Add storage for piu-slave-ubc-01
Peter Palfrader [Sat, 25 Feb 2017 14:44:54 +0000 (15:44 +0100)]
Use mpm_worker over mpm_event
Peter Palfrader [Fri, 24 Feb 2017 09:22:08 +0000 (10:22 +0100)]
new apache on mirror-conova
Peter Palfrader [Fri, 24 Feb 2017 09:14:56 +0000 (10:14 +0100)]
backend server aliases for archive, debug, debian, and security
Peter Palfrader [Fri, 24 Feb 2017 09:09:26 +0000 (10:09 +0100)]
Add mirror-conova to historical_mirror
Peter Palfrader [Fri, 24 Feb 2017 09:05:00 +0000 (09:05 +0000)]
fix archive mirror bind magic
Peter Palfrader [Fri, 24 Feb 2017 08:37:43 +0000 (09:37 +0100)]
Add archive rsync to historical_mirror role
Peter Palfrader [Thu, 23 Feb 2017 20:04:57 +0000 (21:04 +0100)]
rename boman to mirror-accumu
Peter Palfrader [Thu, 23 Feb 2017 19:00:54 +0000 (20:00 +0100)]
make bytemark a security mirror (for anycast)
Peter Palfrader [Thu, 23 Feb 2017 18:38:12 +0000 (18:38 +0000)]
listen on anycast address with apache on debian mirrors that are in the bgp group
Peter Palfrader [Thu, 23 Feb 2017 18:31:43 +0000 (19:31 +0100)]
rename bilbao to mirror-bytemark
Peter Palfrader [Thu, 23 Feb 2017 18:12:28 +0000 (19:12 +0100)]
limit ftp to the security address
Peter Palfrader [Thu, 23 Feb 2017 18:05:06 +0000 (19:05 +0100)]
no need for the ynic-special lldp module anymore - we put lldp everywhere
Peter Palfrader [Thu, 23 Feb 2017 17:34:51 +0000 (17:34 +0000)]
fix debian mirror bind addr for ipv6 on klecker
Peter Palfrader [Thu, 23 Feb 2017 17:29:04 +0000 (18:29 +0100)]
debian and security anycast-test addresses
Peter Palfrader [Thu, 23 Feb 2017 17:27:02 +0000 (18:27 +0100)]
add security.anycast-test server alias, do away with having both testing-anycast and anycast-test
Peter Palfrader [Thu, 23 Feb 2017 17:08:17 +0000 (18:08 +0100)]
Retire poulenc: hardware died
Peter Palfrader [Thu, 23 Feb 2017 16:05:34 +0000 (17:05 +0100)]
add klecker to debian_mirror_onion
Peter Palfrader [Thu, 23 Feb 2017 16:00:43 +0000 (17:00 +0100)]
Add klecker to the ftp.d.o mirror group now that the fastly live check no longer requires http 200 on GET / (we redirect into /debian/
Peter Palfrader [Thu, 23 Feb 2017 15:59:54 +0000 (16:59 +0100)]
Add server alias for $location.$archive.backend.mirrors.debian.org
Peter Palfrader [Thu, 23 Feb 2017 15:42:56 +0000 (16:42 +0100)]
touch /srv/ftp.root/.nobackup
Peter Palfrader [Thu, 23 Feb 2017 15:38:20 +0000 (16:38 +0100)]
add a missing ,
Peter Palfrader [Thu, 23 Feb 2017 15:37:18 +0000 (16:37 +0100)]
conova to debug_mirror
Peter Palfrader [Thu, 23 Feb 2017 15:37:01 +0000 (16:37 +0100)]
bind address for security, debug and debian mirror on conova
Peter Palfrader [Thu, 23 Feb 2017 15:32:27 +0000 (16:32 +0100)]
conova to security_mirror
Aurelien Jarno [Thu, 23 Feb 2017 13:46:18 +0000 (14:46 +0100)]
Fix a typo in my previous commit
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 23 Feb 2017 13:38:12 +0000 (14:38 +0100)]
buildd: make sure the buildd service is disabled and not running
This is a leftover init script from the official buildd package, our
setup uses cron to (re)start the build daemon.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Paul Wise [Wed, 22 Feb 2017 01:36:27 +0000 (09:36 +0800)]
Redirect removed official mirror pages
Peter Palfrader [Tue, 21 Feb 2017 18:42:39 +0000 (19:42 +0100)]
Make conova be a debian mirror
Peter Palfrader [Tue, 21 Feb 2017 15:17:22 +0000 (16:17 +0100)]
add mirror-conova to the archvsync_base role
Peter Palfrader [Tue, 21 Feb 2017 15:15:31 +0000 (16:15 +0100)]
Make archvsync_base create the /etc/ssh/userkeys/archvsync symlink
Peter Palfrader [Sun, 19 Feb 2017 08:15:00 +0000 (09:15 +0100)]
restart instead of just start
Peter Palfrader [Fri, 17 Feb 2017 12:31:59 +0000 (13:31 +0100)]
log requested hostname in www-other.debian.org-access.log
Peter Palfrader [Wed, 15 Feb 2017 07:23:31 +0000 (08:23 +0100)]
New inet4 for busoni
Peter Palfrader [Mon, 13 Feb 2017 19:44:34 +0000 (20:44 +0100)]
give syncproxy3.wna a dedicated address
Peter Palfrader [Mon, 13 Feb 2017 19:19:51 +0000 (20:19 +0100)]
Call it syncproxy3.wna instead, our config does not like to re-use the server's hostname for a vhost easily
Peter Palfrader [Mon, 13 Feb 2017 19:10:54 +0000 (20:10 +0100)]
remove no longer needed rsync access ferm role - glinka is history and gretchaninov is in the syncproxy role
Peter Palfrader [Mon, 13 Feb 2017 19:09:36 +0000 (20:09 +0100)]
gretchaninov as a syncproxy
Peter Palfrader [Mon, 13 Feb 2017 18:19:00 +0000 (19:19 +0100)]
Add manpages.d.n -> d.o redirect
Peter Palfrader [Sun, 12 Feb 2017 17:11:54 +0000 (17:11 +0000)]
fix syncproxy http -> https redirect on ipv6
Peter Palfrader [Sun, 12 Feb 2017 17:04:18 +0000 (17:04 +0000)]
fix syncproxy https bind on ipv6 address
Peter Palfrader [Sun, 12 Feb 2017 16:36:50 +0000 (17:36 +0100)]
support limit-mirrors in has_static_component
Peter Palfrader [Sun, 12 Feb 2017 08:39:18 +0000 (09:39 +0100)]
rename archive-master rsyncd.conf
Peter Palfrader [Sat, 11 Feb 2017 16:12:02 +0000 (17:12 +0100)]
Add lldpd via puppet
Peter Palfrader [Sat, 11 Feb 2017 13:38:32 +0000 (14:38 +0100)]
add mirroradm static push sudo
Peter Palfrader [Sat, 11 Feb 2017 13:33:06 +0000 (14:33 +0100)]
mirror-master static component
Peter Palfrader [Fri, 10 Feb 2017 20:54:51 +0000 (21:54 +0100)]
just move roles around to group things by service. should be no real changes
Peter Palfrader [Fri, 10 Feb 2017 20:52:32 +0000 (21:52 +0100)]
rename archive_master to historical_master to match _mirror name
Peter Palfrader [Fri, 10 Feb 2017 20:50:55 +0000 (21:50 +0100)]
Move archvsync_base from FTP to debian_mirror
Peter Palfrader [Fri, 10 Feb 2017 20:47:38 +0000 (21:47 +0100)]
we already set the TLSA up in rsync::site_systemd.pp
Peter Palfrader [Fri, 10 Feb 2017 20:41:07 +0000 (21:41 +0100)]
Merge remote-tracking branch 'waldi/rsync-systemd-master'
* waldi/rsync-systemd-master:
Use rsyncd via system on security_master
Use rsyncd via systemd on ftp_master
Use rsyncd via systemd on archive_master
Peter Palfrader [Fri, 10 Feb 2017 20:36:35 +0000 (21:36 +0100)]
little /srv/mirrors changes
Peter Palfrader [Fri, 10 Feb 2017 20:35:31 +0000 (21:35 +0100)]
Merge remote-tracking branch 'waldi/srv-mirrors'
* waldi/srv-mirrors:
Setup /srv/mirrors/debian-security on security_mirror
Setup /srv/mirrors on all (archvsync-based) mirrors
Conflicts:
modules/roles/manifests/ftp.pp
Peter Palfrader [Fri, 10 Feb 2017 20:31:35 +0000 (21:31 +0100)]
Add a note to ftp.d.o role to point to debian_mirror
Peter Palfrader [Fri, 10 Feb 2017 20:30:56 +0000 (21:30 +0100)]
Add a note to roles::ftp
Bastian Blank [Fri, 10 Feb 2017 20:10:11 +0000 (21:10 +0100)]
Setup /srv/mirrors/debian-security on security_mirror
Bastian Blank [Fri, 10 Feb 2017 20:06:37 +0000 (21:06 +0100)]
Setup /srv/mirrors on all (archvsync-based) mirrors
Bastian Blank [Fri, 10 Feb 2017 20:00:58 +0000 (21:00 +0100)]
Use rsyncd via system on security_master
Bastian Blank [Fri, 10 Feb 2017 20:00:01 +0000 (21:00 +0100)]
Use rsyncd via systemd on ftp_master
Bastian Blank [Fri, 10 Feb 2017 19:59:32 +0000 (20:59 +0100)]
Use rsyncd via systemd on archive_master
Peter Palfrader [Fri, 10 Feb 2017 12:57:11 +0000 (13:57 +0100)]
Add cdn.debian.net server alias to deb.do
Peter Palfrader [Thu, 9 Feb 2017 19:17:05 +0000 (20:17 +0100)]
Do not add + for IndexOption in global context. It should still add to the existing options
Peter Palfrader [Thu, 9 Feb 2017 08:44:18 +0000 (09:44 +0100)]
Remove redundant IndexOptions from all vhosts
Peter Palfrader [Thu, 9 Feb 2017 08:43:17 +0000 (09:43 +0100)]
Disable file descriptions in all apache indexes
Peter Palfrader [Thu, 9 Feb 2017 08:18:49 +0000 (09:18 +0100)]
Get rid of incorrectly-specified (and therefore unused SuppressDescription IndexOptions
Julien Cristau [Thu, 9 Feb 2017 08:09:40 +0000 (09:09 +0100)]
Add a couple aliases to the deb.d.o vhost
Part of deprecating httpredir.
Martin Zobel-Helas [Wed, 8 Feb 2017 15:14:43 +0000 (16:14 +0100)]
Merge branch 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet
* 'master' of git+ssh://puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet:
add sallinen
Enable authentication for buildd-keyrings rsync module
Use archvsync managed secrets files for rsyncd on syncproxy
Cannot depend on Package[xinetd] without it being defined
only pull in xinetd if we do not try to remove files
Enable rsync-ssl on keyring.debian.org
Unify rsyncd module comments
Extract default rsyncd module parameter
De-list all rsync shares on ftp/ports/security-master
Enable rsync-ssl on keyring.debian.org
setup-all-dchroots: use the 2017 key for debian-ports
Martin Zobel-Helas [Wed, 8 Feb 2017 15:14:19 +0000 (16:14 +0100)]
add conova as bgp peer
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Julien Cristau [Wed, 8 Feb 2017 08:59:49 +0000 (09:59 +0100)]
add sallinen
Peter Palfrader [Tue, 7 Feb 2017 21:27:55 +0000 (22:27 +0100)]
Merge remote-tracking branch 'waldi/rsyncd-buildd-keyrings-auth'
* waldi/rsyncd-buildd-keyrings-auth:
Enable authentication for buildd-keyrings rsync module
Bastian Blank [Tue, 7 Feb 2017 21:20:27 +0000 (22:20 +0100)]
Enable authentication for buildd-keyrings rsync module
Peter Palfrader [Tue, 7 Feb 2017 21:13:11 +0000 (22:13 +0100)]
Merge remote-tracking branch 'waldi/managed-rsyncd-syncproxy'
* waldi/managed-rsyncd-syncproxy:
Use archvsync managed secrets files for rsyncd on syncproxy
Bastian Blank [Tue, 7 Feb 2017 21:11:03 +0000 (22:11 +0100)]
Use archvsync managed secrets files for rsyncd on syncproxy
Peter Palfrader [Tue, 7 Feb 2017 20:58:38 +0000 (21:58 +0100)]
Merge remote-tracking branch 'waldi/rsyncd-unify'
* waldi/rsyncd-unify:
Unify rsyncd module comments
Extract default rsyncd module parameter
De-list all rsync shares on ftp/ports/security-master
Peter Palfrader [Tue, 7 Feb 2017 20:47:16 +0000 (21:47 +0100)]
Cannot depend on Package[xinetd] without it being defined
Peter Palfrader [Tue, 7 Feb 2017 20:45:30 +0000 (21:45 +0100)]
only pull in xinetd if we do not try to remove files
Peter Palfrader [Tue, 7 Feb 2017 20:41:49 +0000 (21:41 +0100)]
Merge remote-tracking branch 'waldi/keyring-ssl'
* waldi/keyring-ssl:
Enable rsync-ssl on keyring.debian.org
Conflicts:
modules/roles/manifests/keyring.pp
Bastian Blank [Fri, 3 Feb 2017 17:34:28 +0000 (18:34 +0100)]
Enable rsync-ssl on keyring.debian.org
Peter Palfrader [Tue, 7 Feb 2017 20:37:19 +0000 (21:37 +0100)]
Merge remote-tracking branch 'waldi/keyring-ssl'
* waldi/keyring-ssl:
Enable rsync-ssl on keyring.debian.org
Bastian Blank [Fri, 3 Feb 2017 17:55:55 +0000 (18:55 +0100)]
Unify rsyncd module comments
Bastian Blank [Fri, 3 Feb 2017 17:52:29 +0000 (18:52 +0100)]
Extract default rsyncd module parameter
Bastian Blank [Fri, 3 Feb 2017 17:48:14 +0000 (18:48 +0100)]
De-list all rsync shares on ftp/ports/security-master
Remove all comments at the same time
Bastian Blank [Fri, 3 Feb 2017 17:34:28 +0000 (18:34 +0100)]
Enable rsync-ssl on keyring.debian.org
Aurelien Jarno [Tue, 7 Feb 2017 15:29:38 +0000 (16:29 +0100)]
setup-all-dchroots: use the 2017 key for debian-ports
Martin Zobel-Helas [Tue, 7 Feb 2017 10:42:33 +0000 (11:42 +0100)]
add ServerAlias for debian.testing-anycast.mirrors.debian.org
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 6 Feb 2017 22:04:41 +0000 (23:04 +0100)]
Add CAP_DAC_READ_SEARCH to CapabilityBoundingSet for rsync
Martin Zobel-Helas [Mon, 6 Feb 2017 20:03:15 +0000 (21:03 +0100)]
ubc-bl2 is powered off
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 6 Feb 2017 11:52:42 +0000 (12:52 +0100)]
Merge remote-tracking branch 'waldi/rsyncd-protect'
* waldi/rsyncd-protect:
Allow rsyncd to access /home read-only
Bastian Blank [Fri, 3 Feb 2017 17:24:42 +0000 (18:24 +0100)]
Allow rsyncd to access /home read-only
Peter Palfrader [Fri, 3 Feb 2017 09:07:50 +0000 (10:07 +0100)]
Merge remote-tracking branch 'waldi/rsyncd-systemd'
* waldi/rsyncd-systemd:
Use rsync::site_systemd on ports_master
Add systemd backed rsync service
Bastian Blank [Sun, 29 Jan 2017 10:56:11 +0000 (11:56 +0100)]
Use rsync::site_systemd on ports_master
Bastian Blank [Sun, 29 Jan 2017 10:26:15 +0000 (11:26 +0100)]
Add systemd backed rsync service
Peter Palfrader [Fri, 3 Feb 2017 08:44:26 +0000 (09:44 +0100)]
remove nfs/autofs from bilbao
Peter Palfrader [Thu, 2 Feb 2017 14:28:46 +0000 (15:28 +0100)]
add bilbao-lvm
Peter Palfrader [Thu, 2 Feb 2017 13:57:09 +0000 (14:57 +0100)]
retire debprivate-darmstadt.debian.org
Peter Palfrader [Thu, 2 Feb 2017 10:27:14 +0000 (11:27 +0100)]
fix ports-master rename
projects / mirror / dsa-puppet.git / log