dsa-check-running-kernel: sort kernel versions better

[mirror/dsa-nagios.git] / dsa-nagios-checks / debian / changelog

dsa-nagios-checks (119) UNRELEASED; urgency=medium

  [ Peter Palfrader ]
  * dsa-check-raid-sw: correctly parse resync percentages under 10%.
  * Add check_puppetdb_nodes.

  [ Adam D. Barratt ]
  * dsa-check-soas: fix variable scoping
  * Add check_clamav_signatures.

  [ Julien Cristau ]
  * port dsa-check-statusfile and dsa-check-memory to python3
  * dsa-check-zone-signature-all: tell dig not to convert punycode.

  [ Peter Palfrader ]
  * dsa-check-running-kernel: When we ask apt-cache for information on
    the metapackage to extract the actual kernel image it depends on, we
    sort that output.  It's not clear why we do that, since we pass the
    option --no-all-versions to apt-cache so we should only get one answer
    anyhow.  Nevertheless, since we sort we might just as well use -V
    to version sort that output.  dpkg-version sort would be even better,
    but hey.  This is based on Erik Auerswald's patch in #884328.

 -- Peter Palfrader <weasel@debian.org>  Mon, 20 May 2019 12:52:00 +0200

dsa-nagios-checks (118) unstable; urgency=medium

  [ Peter Palfrader ]
  * dsa-check-timedatectl:
    - in buster, timedatectl no longer considers the ntp status of
      the ntp.service.  So we manually do that now.
    - also switch to parsing the machine readable output in buster.
  * dsa-check-ucode-intel: add.

 -- Peter Palfrader <weasel@debian.org>  Mon, 20 May 2019 12:50:51 +0200

dsa-nagios-checks (117) unstable; urgency=medium

  [ Peter Palfrader ]
  * dsa-check-hpssacli: add --ignore-cache
  * add: dsa-check-unbound-anchors
  * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
    with unsigned zones.
  * dsa-check-running-kernel: handle -unsigned packages
  * dsa-check-backuppg: Ignore lost+found directory

  [ Jan Wagner ]
  * update-apt-statusdir, dsa-update-unowned-file-status:
    Create status directory if not existing.

  [ Moritz Muehlenhoff ]
  * dsa-check-timedatectl: Adapt check for buster.

 -- Aurelien Jarno <aurel32@debian.org>  Mon, 01 Apr 2019 09:59:09 +0200

dsa-nagios-checks (116) unstable; urgency=medium

  * Add dsa-check-ipv6-default-gw.

 -- Peter Palfrader <weasel@debian.org>  Sun, 11 Mar 2018 09:05:39 +0100

dsa-nagios-checks (115) unstable; urgency=medium

  [ Julien Cristau ]
  * Set a specific User-Agent in dsa-check-mirrorsync

 -- Aurelien Jarno <aurel32@debian.org>  Sat, 03 Mar 2018 11:10:51 +0100

dsa-nagios-checks (114) unstable; urgency=medium

  * Add dsa-check-openmanage to monitor Dell hosts.

 -- Julien Cristau <jcristau@debian.org>  Sun, 18 Feb 2018 11:03:16 +0100

dsa-nagios-checks (113) unstable; urgency=medium

  * Add dsa-check-systemd-services that also prints failed systemd services
    when things are degraded.

 -- Peter Palfrader <weasel@debian.org>  Sun, 11 Feb 2018 11:16:30 +0100

dsa-nagios-checks (112) unstable; urgency=medium

  * maintainer scripts: use dpkg-maintscript-helper to clean out
    /etc/cron.d/dsa-nagios-checks.
  * libproc-processtable-perl: allow ignoring young processes.

 -- Peter Palfrader <weasel@debian.org>  Sun, 04 Feb 2018 12:23:46 +0100

dsa-nagios-checks (111) unstable; urgency=medium

  [ Peter Palfrader ]
  * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
  * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
    an is_sep() method.  Update.
  * dsa-update-unowned-file-status: ignore autofs and nfs4
  * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
    without -v.
  * dsa-check-backuppg: Support per host and per cluster retention
    times.
  * remove debian/cron.d: moved into puppet

  [ Julien Cristau ]
  * Set LWP::UserAgent timeout in dsa-check-mirrorsync

 -- Peter Palfrader <weasel@debian.org>  Thu, 01 Feb 2018 18:31:17 +0100

dsa-nagios-checks (110) unstable; urgency=medium

  * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
  * dsa-check-backuppg: warn if backups for a database configured in
    dsa-check-backuppg.conf are missing entirely.
  * dsa-check-file_age: support following symlinks and warning on empty files.
  * dsa-check-file_age: support multiple files.
  * dsa-check-running-kernel: meta package version check, also work on 4.x
    kernels and later.
  * dsa-check_puppet_agent: add from Alexander Swen's github.
  * dsa-check-memory: move from / to /checks in source (so now it should get
    installed.)
  * dsa-wrap-nagios-check: add.

 -- Peter Palfrader <weasel@debian.org>  Mon, 20 Mar 2017 09:45:53 +0100

dsa-nagios-checks (109) unstable; urgency=medium

  [ Peter Palfrader ]
  * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
    running.
  * dsa-check-soas: on soa disagreement, list nameservers.

  [ Aurelien Jarno ]
  * dsa-check-libs: also ignore files that are open via normal file handles
    on NFS.

  [ Peter Palfrader ]
  * dsa-check-libs: accept -v as short for --verbose.
  * dsa-check-libs: ignore deleted CWDs.
  * dsa-check-drbd: Add --ok-no-devices option.
  * dsa-check-backuppg: allow specifying which timeline we expect a database
    to be on.
  * dsa-check-cert-expire-dir: add
  * dsa-check-raid-3ware: modernize
  * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
    warnings.
  * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
    the last zone checker finished.
  * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
    on with --debug.
  * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
    domain share nameservers.
  * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
    labels for NS responses.
  * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
  * dsa-check-mirrorsync: support unix timestamps in tracefile
    (for staticsync mirrors).
  * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
    in zonefiles.  This will skip it being checked.
  * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
    data) in detail output.
  * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
  * dsa-check-zone-signature-all: add.
  * dsa-check-timedatectl: add
  * dsa-check-dabackup-server: replace /org/backup.debian.org with
    /srv/backups/da-backup.

  [ Tollef Fog Heen ]
  * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
    FreeBSD.
  * dsa-update-unowned-file-status: avoid printing the apex of pruned
    directory trees.

  [ Julien Cristau ]
  * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
  * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
  * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS

 -- Peter Palfrader <weasel@debian.org>  Mon, 23 Jan 2017 13:48:29 +0100

dsa-nagios-checks (108) unstable; urgency=medium

  * dsa-check-stunnel-sanity: Fix variable name in output.
  * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
      numbers.
  * dsa-check-config: check for DAD failures.
  * dsa-check-config: retire ldap.conf check - we ship it with puppet
      nowadays anyway.

 -- Peter Palfrader <weasel@debian.org>  Sun, 31 May 2015 19:16:43 +0200

dsa-nagios-checks (107) unstable; urgency=medium

  * Add dsa-check-stunnel-sanity.

 -- Peter Palfrader <weasel@debian.org>  Mon, 23 Mar 2015 13:32:18 +0100

dsa-nagios-checks (106) unstable; urgency=medium

  * Depend on libyaml-syck-perl.

 -- Peter Palfrader <weasel@debian.org>  Wed, 28 Jan 2015 14:17:39 +0100

dsa-nagios-checks (105) unstable; urgency=medium

  [ Peter Palfrader ]
  * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
  * dsa-check-libs: add.

  [ Paul Wise ]
  * dsa-check-backuppg: Ignore removed tmp files instead of crashing

 -- Peter Palfrader <weasel@debian.org>  Wed, 28 Jan 2015 00:10:25 +0100

dsa-nagios-checks (104) unstable; urgency=medium

  * Fix iptables-save cronjob.

 -- Peter Palfrader <weasel@debian.org>  Sun, 07 Dec 2014 14:29:31 +0100

dsa-nagios-checks (103) unstable; urgency=medium

  * dsa-update-apt-status: run apt-get update in a flock wrapper.

 -- Peter Palfrader <weasel@debian.org>  Sun, 07 Dec 2014 12:29:20 +0100

dsa-nagios-checks (102) unstable; urgency=medium

  * dsa-check-entropy: unbreak script by removing non-ASCII characters.

 -- Peter Palfrader <weasel@debian.org>  Sun, 07 Dec 2014 12:04:38 +0100

dsa-nagios-checks (101) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
  * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
    ask for SOA with dnssec data.  Apparently some nameservers do give you the
    RRSIG on the DS record instead of a referral (rcode0's for instance).
  * dsa-check-hpasm: Support supplying a list of things for which failures are
    ignored.
  * dsa-check-soas: do some queries without RD set.
  * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
    for the magic start sequence.  This makes running times bearable on our
    new octeons.
  * dsa-check-config: check if existing ed25519 host keys are in ldap.

  [ Hendrik Köhler ]
  * Extend dsa-check-entropy output so Icinga2 can process performance
    data (e.g. used by Graphite).

 -- Peter Palfrader <weasel@debian.org>  Sun, 07 Dec 2014 10:58:47 +0100

dsa-nagios-checks (100) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-running-kernel: Check from all compression tokens.
  * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
    it does not get set later.
  * dsa-check-running-kernel: fix kernel metapackage version regex

  [ Evgeni Golov ]
  * dsa-check-packages: go critical if there are security updates.

  [ Helmut Grohne ]
  * dsa-check-cert-expire: Make timers configurable.

  [ George Kargiotakis ]
  * dsa-check-hpacucli: Add Parity check for logical drives.

  [ Stephen Gran ]
  * dsa-check-mq-connection: Catch case when host has never connected

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2014 12:33:55 +0200

dsa-nagios-checks (99) unstable; urgency=low

  * dsa-check-hpacucli: SATA drives have different transfer speed.
  * dsa-check-edac: add.

 -- Peter Palfrader <weasel@debian.org>  Mon, 31 Mar 2014 10:45:57 +0200

dsa-nagios-checks (98) unstable; urgency=low

  * Add dsa-check-dchroots-current.

 -- Peter Palfrader <weasel@debian.org>  Fri, 28 Feb 2014 19:40:16 +0100

dsa-nagios-checks (97) unstable; urgency=low

  [ Stephen Gran ]
  * Update dsa-check-mq-connection to actually work

  [ Peter Palfrader ]
  * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
  * dsa-check-config: Update for new TLS_CACERT config.

 -- Peter Palfrader <weasel@debian.org>  Mon, 27 Jan 2014 22:29:15 +0100

dsa-nagios-checks (96) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
    Allow supplying the nameservers to start recursion at (per zone).
    This is useful for reverse zones of RFC1918 space.
  * dsa-check-bacula: exit status fix.
  * dsa-check-hpacucli:
    - support filtering controllers.
    - add an option to accept no-controllers as an OK state.
  * remove weak keys check
  * dsa-check-dnssec-delegation
    - handle zones with no keys that have the SEP bit.
    - warn on all domains where parent has a non-empty DS bit that does
      not match ours, even if we did not expect it to have one at all.
  * dsa-check-zone-rrsig-expiration-many:
    - expect dnssec by default now.
  * dsa-check-zone-rrsig-expiration:
    - in the OK message, clarify we only check sigs at the zone apex.
  * dsa-check-dnssec-delegation:
    - accept any ds/dnskey combination whose intersection is not empty.
      (previously we required them to match exactly.)

  [ Stephen Gran ]
  * dsa-check-mq-connection:
    Check that all messages have been consumed and that there is an active
    consumer.
  * kill some lintian warnings

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Apr 2013 20:12:09 +0200

dsa-nagios-checks (95) unstable; urgency=low

  * dsa-check-running-kernel: Try to fix zcat kernel case.

 -- Peter Palfrader <weasel@debian.org>  Tue, 16 Apr 2013 17:40:49 +0200

dsa-nagios-checks (94) unstable; urgency=low

  [ Stephen Gran ]
  * Start new changelog

  [ Peter Palfrader ]
  * dsa-check-packages: work better with weird multi-arch cases.
  * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
  * dsa-check-hpacucli: new hpacucli changed case of transfer speed.  Upcase
    all before comparing.
  * New bacula check:
    - dsa-check-bacula
  * Changed according to gitlog without corresponding debian/changelog entry:
    - dsa-check-drbd
    - dsa-check-filesystems
    - dsa-check-running-kernel

 -- Peter Palfrader <weasel@debian.org>  Tue, 16 Apr 2013 11:32:23 +0200

dsa-nagios-checks (93) unstable; urgency=low

  [ Tollef Fog Heen ]
  * dsa-update-unowned-file-status: Use -fstype proc rather than hard
    coding /proc in order to match procfs in chroots too.
  * dsa-update-apt-status: send the cron output to syslog rather than email

  [ Peter Palfrader ]
  * dsa-check-msa-eventlog: Add --verbose switch to show info level
    event log entries.
  * add dsa-check-crl-expire.
  * rename checks/dsa-check-backuppg.conf.sample ->
    etc/dsa-check-backuppg.conf.sample.
  * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
  * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
    at least for the "primary" arch.  Does not really handle multi-arch
    packages, but it makes things work again for now.
  * dsa-check-packages: A better multi-arch capable version.
  * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
  * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
    and disabled caches.
  * dsa-check-hpasm: Typo fix.

  [ Stephen Gran ]
  * dsa-check-udldap-freshness: check new last_update.trace if it
    exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
  * dsa-check-statusfile: Complain if there is no extended information
  * add dsa-check-filesystems (only checks ext at the moment)

  [ Uli Martens ]
  * dsa-check-soas: Add --no-soa-ns flag.

  [ Martin Zobel-Helas ]
  * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring

 -- Stephen Gran <sgran@debian.org>  Sat, 29 Dec 2012 12:05:57 +0000

dsa-nagios-checks (92.1) unstable; urgency=low

  * Fix dsa-update-unowned-file-status cronjob entry more.

 -- Peter Palfrader <weasel@debian.org>  Sat, 25 Feb 2012 13:30:08 +0100

dsa-nagios-checks (92) unstable; urgency=low

  * Fix dsa-update-unowned-file-status cronjob entry.

 -- Peter Palfrader <weasel@debian.org>  Sat, 25 Feb 2012 12:40:00 +0100

dsa-nagios-checks (91) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-zone-rrsig-expiration: configurable packet size, and change
    default size.
  * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
    properly timeout long checks.
  * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
  * dsa-check-statusfile: change shebang from ruby to python and fix syntax
    errors.
  * dsa-check-soas: support supplying an IP address for additional nameservers
    to check on with -a.

  [ Tollef Fog Heen ]
  * Make the unowned files check skip /proc.
  * Limit the number of unowned files we register in the state file to 40.

  [ Peter Palfrader ]
  * Rewrite unowned files check into something that writes proper
    nagios status files and behaves in a nice and sane way.

 -- Peter Palfrader <weasel@debian.org>  Fri, 24 Feb 2012 18:12:36 +0100

dsa-nagios-checks (90) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-entropy:
    - document watermark default
    - fix off-by-one in output
  * dsa-check-backuppg:
    - ignore regular files in pg backup's root directory if they are still
      fresh.
  * dsa-check-config:
    - fix a bashism.
  * dsa-check-log-age-loghost
    - allow minus (-) in hostnames.

  [ Stephen Gran ]
  * Add event_handler to restart services
  * Add dsa-check-raid-megactl for awkward PeRC controllers

  [ Martin Zobel-Helas ]
  * add rudimentary check for unowned files

 -- Martin Zobel-Helas <zobel@debian.org>  Mon, 02 Jan 2012 16:46:33 +0100

dsa-nagios-checks (89) unstable; urgency=low

  * dsa-check-running-kernel: kFreeBSD support.
  * Add dsa-check-entropy.

 -- Peter Palfrader <weasel@debian.org>  Mon, 28 Mar 2011 14:47:11 +0200

dsa-nagios-checks (88) unstable; urgency=low

  * dsa-check-hpacucli
    - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
      to '3.0GBPS, Unknown'.
    - accept 6.0Gbps for SAS disks.
    - add --ignore-transfer-speed option.
    - ignore the line for unassigned disks (patch by Emmanuel Lacour).
  * Add dsa-check-ups.
  * Add dsa-check-hpacucli-enclosure.
  * dsa-check-running-kernel:
    - check if 'strings' is installed and complain nicely if it isn't instead
      of falling over. [Uli Martens]
    - Make the check work with Ubuntu's kernel names (Alexander
      Reichle-Schmehl).
  * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
  * Add dsa-check-port-closed.
  * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
    status.
  * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
    that do not say 'Yes' in the present-line.
  * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
    in addition to /var/lib/misc/thishost/passwd.tdb.
  * Add dsa-check-resolver.

 -- Peter Palfrader <weasel@debian.org>  Tue, 01 Mar 2011 18:10:25 +0100

dsa-nagios-checks (87) unstable; urgency=low

  [ Uli Martens ]
  * dsa-check-running-kernel:
    - Teach dsa-check-running-kernel about LZMA compressed kernel images.
    - Handle cases where a meta package depends on a list of packages
      (such as image and module package).

  [ Stephen Gran ]
  * dsa-check-apt-status: it's not an error to exit when we don't need to run
  * Update check-hpacucli to deal with dual domain and 6GBPS SAS

  [ Peter Palfrader ]
  * Add checks/dsa-check-backuppg.
  * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
  * Add dsa-check-log-age-loghost.
  * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
  * dsa-check-dnssec-delegation: allow multiple dirs to be checked.

  [ Martin Zobel-Helas ]
  * Add checks/dsa-checks-file.

 -- Martin Zobel-Helas <zobel@debian.org>  Fri, 23 Jul 2010 19:26:00 +0200

dsa-nagios-checks (86) unstable; urgency=low

  [ Peter Palfrader ]
  * Add dsa-check-raid-megaraid.
  * make samhain check go WARN, not CRITICAL.

  [ Stephen Gran ]
  * Add dsa-check-uptime

 -- Stephen Gran <sgran@debian.org>  Fri, 02 Apr 2010 16:55:51 +0100

dsa-nagios-checks (85) unstable; urgency=low

  [ Stephen Gran ]
  * dsa-update-apt-status: Fix bashism by making it a bash script
  [ Peter Palfrader ]
  * dsa-check-hpasm: Not all things where a temperature can be measured
    might be installed (e.g. a second CPU).  Don't do numeric computations
    on a "-" instead of numbers then.
  * dsa-check-hpasm: Support a --ps-no-redundant option.  If supplied
    then non-redundant power supply will not be a warning state.
  * dsa-check-hpasm: Support a --fan-no-redundant option.  If supplied
    then non-redundant fans will not be a warning state.
  * Add dsa-check-msa-eventlog.
  * add dsa-check-zone-rrsig-expiration (therefore recommend
    libnet-dns-sec-perl).
  * add dsa-check-zone-rrsig-expiration-many.
  * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
    controller with a battery: "ZMM Optimal" is the way it says "optimal".
  * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
    /root/.ssh/authorized_keys.
  * add dsa-check-dnssec-delegation.
  * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
    warning condition.
  * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
    and /var/lib/misc/userkeys, not just the first.  (Also doesn't
    blow up if a file is empty.)

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Feb 2010 10:32:51 +0100

dsa-nagios-checks (84) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
    better (do not reference undefined values, properly exit with UNKNOWN).
  * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
  * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
    wrapper) in the authorized_keys files.  Such entries accept all
    backup-manager entries for their host, but they do not require one.
    As such we can just put all the hosts in the authkeys file regardless of
    whether we actually have backups configured for them.

  [ Stephen Gran ]
  * New check: dsa-check-hpasm
  * Release for new check

 -- Stephen Gran <sgran@debian.org>  Mon, 30 Nov 2009 22:10:46 +0000

dsa-nagios-checks (83) stable; urgency=low

  * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
    soon.

 -- Peter Palfrader <weasel@debian.org>  Fri, 02 Oct 2009 20:22:42 +0200

dsa-nagios-checks (82) stable; urgency=low

  * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.

 -- Peter Palfrader <weasel@debian.org>  Thu, 20 Aug 2009 13:48:43 +0200

dsa-nagios-checks (81) stable; urgency=low

  * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
    it found degraded raid arrays.  Handle this correctly.

 -- Peter Palfrader <weasel@debian.org>  Fri, 07 Aug 2009 12:17:22 +0200

dsa-nagios-checks (80) stable; urgency=low

  * dsa-check-packages: In the short overview say "obs/loc" instead of
    just "obs" for local or obsolete packages.
  * dsa-update-apt-status: Introduce -f switch.

 -- Peter Palfrader <weasel@debian.org>  Wed, 22 Jul 2009 11:34:15 +0200

dsa-nagios-checks (79) stable; urgency=low

  * dsa-check-running-kernel: Correctly check *candidate* version
    of kernel metapackage for unsatisfied depends, not the latest
    metapackage (which might come from a non-default source).

 -- Peter Palfrader <weasel@debian.org>  Fri, 03 Jul 2009 20:07:13 +0200

dsa-nagios-checks (78) stable; urgency=low

  * dsa-check-raid-aacraid: tmp directory in /tmp,
  * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
    doesn't fail.

 -- Peter Palfrader <weasel@debian.org>  Sun, 28 Jun 2009 16:36:39 +0200

dsa-nagios-checks (77) stable; urgency=low

  * Add checks/dsa-check-raid-aacraid.

 -- Peter Palfrader <weasel@debian.org>  Sun, 28 Jun 2009 16:31:13 +0200

dsa-nagios-checks (76) stable; urgency=low

  * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.

 -- Peter Palfrader <weasel@debian.org>  Sun, 14 Jun 2009 12:09:54 +0200

dsa-nagios-checks (75) stable; urgency=low

  * dsa-check-packages: Support ignore directories.
  * debian/control: Fix dup word in description.

 -- Peter Palfrader <weasel@debian.org>  Sun, 14 Jun 2009 12:01:00 +0200

dsa-nagios-checks (74) stable; urgency=low

  * -e is sufficient

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 22:12:34 +0100

dsa-nagios-checks (73) stable; urgency=low

  * Er, new test needs to be executable

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 21:17:27 +0100

dsa-nagios-checks (72) stable; urgency=low

  * Generalize puppet file age check and remove old one

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 20:52:12 +0100

dsa-nagios-checks (71) stable; urgency=low

  * Update the kernel check to not complain when we can't trace back to a meta
    package name - this generally indicates a custom kernel that we're running
    on purpose.

 -- Stephen Gran <sgran@debian.org>  Tue, 19 May 2009 22:20:44 +0100

dsa-nagios-checks (70) XXstable; urgency=low

  * No longer check nrpe config in postinst - puppet fixes it for us anyway.
  * Only run weak keys check if there is no prior weak key status.
  * dsa-check-hpacucli: Slots need not be all numeric.
  * dsa-check-hpacucli: Spares can be active.
  * dsa-check-hpacucli: And SAS can be E too.

 -- Peter Palfrader <weasel@debian.org>  Sat, 18 Apr 2009 01:41:32 +0200

dsa-nagios-checks (69) unstable; urgency=low

  * Rename to dsa-nagios-checks.
  * Replaces/Conflicts dsa-nagios-nrpe-config.
  * Update description.
  * No longer install nrpe_dsa.cfg.
  * Move files into specific directories in source.

 -- Peter Palfrader <weasel@debian.org>  Tue, 31 Mar 2009 19:19:14 +0200

dsa-nagios-nrpe-config (68) unstable; urgency=low

  * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
    goes wrong.

 -- Peter Palfrader <weasel@debian.org>  Wed, 11 Feb 2009 21:59:55 +0100

dsa-nagios-nrpe-config (67) unstable; urgency=low

  * Minor tweak to dsa-check-packages:  reorder ok and obs(ign), change
    long text for obs(ign).

 -- Peter Palfrader <weasel@debian.org>  Wed,  4 Feb 2009 09:40:26 +0000

dsa-nagios-nrpe-config (66) unstable; urgency=low

  * Add dsa-check-packages
  * Make apt-status-check use dsa-check-packages.
  * And install obsolete-packages-ignore into etc/nagios.

 -- Peter Palfrader <weasel@debian.org>  Tue, 03 Feb 2009 20:39:01 +0100

dsa-nagios-nrpe-config (65) unstable; urgency=low

  * Add dsa-check-soas

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 23:11:19 +0000

dsa-nagios-nrpe-config (64) unstable; urgency=low

  * dsa-check-mirrorsync: make it work in embedded perl again.

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 22:59:06 +0000

dsa-nagios-nrpe-config (63) unstable; urgency=low

  * dsa-check-mirrorsync: print help if additional args are given (we don't
    support any)

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 22:14:44 +0000

dsa-nagios-nrpe-config (62) unstable; urgency=low

  * Add check_securitymirror by formorer.

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 21:59:47 +0000

dsa-nagios-nrpe-config (61) unstable; urgency=low

  * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
    entry is in there.  If it doesn't exist that's also good.

 -- Peter Palfrader <weasel@debian.org>  Mon, 06 Oct 2008 14:08:30 +0200

dsa-nagios-nrpe-config (60) unstable; urgency=low

  * Add dsa-check-raid-areca.

 -- Peter Palfrader <weasel@debian.org>  Wed, 01 Oct 2008 16:23:33 +0200

dsa-nagios-nrpe-config (59) unstable; urgency=low

  * apt-status-check: Ignore stderr during apt-get update.

 -- Peter Palfrader <weasel@debian.org>  Tue, 30 Sep 2008 19:58:36 +0200

dsa-nagios-nrpe-config (58) unstable; urgency=low

  * Rename dsa-check-da-in-aliases to dsa-check-config.
  * dsa-check-config: check if ldap.conf is configured correctly.

 -- Peter Palfrader <weasel@debian.org>  Fri, 26 Sep 2008 15:02:53 +0200

dsa-nagios-nrpe-config (57) unstable; urgency=low

  * dsa-check-hpacucli: Do not inspect drives in detail when they are
    listed as Failed in the overview already.

 -- Peter Palfrader <weasel@debian.org>  Wed, 24 Sep 2008 16:02:31 +0200

dsa-nagios-nrpe-config (56) unstable; urgency=low

  * fix dsa-check-samhain.
    sudo is not in $PATH.

 -- Martin Zobel-Helas <zobel@debian.org>  Mon, 22 Sep 2008 06:45:19 +0000

dsa-nagios-nrpe-config (55) unstable; urgency=low

  * And another one, weasel should sleep.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:29:15 +0000

dsa-nagios-nrpe-config (54) unstable; urgency=low

  * dsa-check-dabackup-server fixes.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:27:41 +0000

dsa-nagios-nrpe-config (53) unstable; urgency=low

  * Add dsa-check-dabackup-server.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:19:28 +0000

dsa-nagios-nrpe-config (52) unstable; urgency=low

  * The nagios _check_ package should probably not be the one that
    depends on the stuff we want on most or all hosts, thus removing
    dependency on samhain, which should probably get pulled in via
    debian.org.

 -- Peter Palfrader <weasel@debian.org>  Sun, 21 Sep 2008 23:41:01 +0000

dsa-nagios-nrpe-config (51) unstable; urgency=low

  * Add check for samhain.

 -- Martin Zobel-Helas <zobel@samosa.debian.org>  Sat, 20 Sep 2008 07:29:23 +0000

dsa-nagios-nrpe-config (50) unstable; urgency=low

  * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.

 -- Peter Palfrader <weasel@debian.org>  Sat, 09 Aug 2008 11:39:55 +0200

dsa-nagios-nrpe-config (49) unstable; urgency=low

  * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)

 -- Peter Palfrader <weasel@debian.org>  Wed, 23 Jul 2008 00:56:54 +0200

dsa-nagios-nrpe-config (48) unstable; urgency=low

  * Don't just print the sudoers lines to stdout, tell the admin to add them
    also.

 -- Peter Palfrader <weasel@debian.org>  Tue, 22 Jul 2008 21:25:56 +0000

dsa-nagios-nrpe-config (47) unstable; urgency=low

  * dsa-check-hpacucli: Check transfer speed of disks.

 -- Peter Palfrader <weasel@debian.org>  Tue, 22 Jul 2008 23:14:50 +0200

dsa-nagios-nrpe-config (46) unstable; urgency=low

  * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
  * Move script calls from cron.daily to cron.d @daily and @reboot.
  * Introduce hourly runs for dsa-update-apt-status that happen if the system
    changed in the meantime, that is if /var/lib/dpkg/status or
    /var/cache/apt/pkgcache.bin are newer than the status file.
    Also run if the status file does not exist, or if the last apt-get update
    call failed, or if the last run was more than a day ago.
  * No longer do @daily runs of dsa-update-apt-status

 -- Peter Palfrader <weasel@debian.org>  Sun, 06 Jul 2008 11:51:27 +0200

dsa-nagios-nrpe-config (45) unstable; urgency=low

  * Add apt upgrades check.

 -- Peter Palfrader <weasel@debian.org>  Tue, 20 May 2008 22:01:07 +0000

dsa-nagios-nrpe-config (44) unstable; urgency=low

  * Fix ssh-dss detection.  It need not be at the start of a line
    (think >from="1.2.3.4" ssh-dss< ...).

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:34:23 +0000

dsa-nagios-nrpe-config (43) unstable; urgency=low

  * Depend on ruby.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:19:10 +0000

dsa-nagios-nrpe-config (42) unstable; urgency=low

  * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
  * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
  * Run weak-ssh-keys-check on install.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:05:10 +0000

dsa-nagios-nrpe-config (41) unstable; urgency=low

  * Add dsa-check-statusfile.
  * Add weak-ssh-keys-check to be run from cron.daily.  Depend on
    libberkeleydb-perl and dsa-ssh-weak-keys now.
  * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 15:55:43 +0200

dsa-nagios-nrpe-config (40) unstable; urgency=low

  * Teach dsa-check-hpacucli about rebuilding.

 -- Peter Palfrader <weasel@debian.org>  Fri,  9 May 2008 12:55:07 +0000

dsa-nagios-nrpe-config (39) unstable; urgency=low

  * Add dsa-check-hpacucli.
  * Suggest hpacucli.

 -- Peter Palfrader <weasel@debian.org>  Wed,  7 May 2008 19:54:55 +0000

dsa-nagios-nrpe-config (38) unstable; urgency=low

  * Try harder to find version string.

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:48:42 +0000

dsa-nagios-nrpe-config (37) unstable; urgency=low

  * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
  * Depend on binutils for string(1).

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:41:13 +0000

dsa-nagios-nrpe-config (36) unstable; urgency=low

  * Add dsa-check-running-kernel

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:11:54 +0000

dsa-nagios-nrpe-config (35) unstable; urgency=low

  * dsa-check-raid-mpt

 -- Peter Palfrader <weasel@debian.org>  Tue, 29 Apr 2008 12:57:50 +0000

dsa-nagios-nrpe-config (34) unstable; urgency=low

  * dsa-check-raid-3ware

 -- Peter Palfrader <weasel@debian.org>  Thu, 24 Apr 2008 19:37:47 +0000

dsa-nagios-nrpe-config (33) unstable; urgency=low

  * Add dsa-check-raid-dac960

 -- Peter Palfrader <weasel@debian.org>  Thu, 24 Apr 2008 19:20:57 +0000

dsa-nagios-nrpe-config (32) unstable; urgency=low

  * Add dsa-check-udldap-freshness.

 -- Peter Palfrader <weasel@debian.org>  Wed, 16 Apr 2008 07:39:21 -0400

dsa-nagios-nrpe-config (31) unstable; urgency=low

  * dsa-check-dabackup: Use last time's log file if backup is currently running.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 17:37:54 -0400

dsa-nagios-nrpe-config (30) unstable; urgency=low

  * dsa-check-raid-sw: cleaner output.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 17:05:17 -0400

dsa-nagios-nrpe-config (29) unstable; urgency=low

  * dsa-check-dabackup: terser output.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 13:09:07 -0400

dsa-nagios-nrpe-config (28) unstable; urgency=low

  * dsa-check-dabackup: ignore .bak files in confdir.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:23:25 -0400

dsa-nagios-nrpe-config (27) unstable; urgency=low

  * Change OK text when da-backup not installed.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:19:00 -0400

dsa-nagios-nrpe-config (26) unstable; urgency=low

  * dsa-check-dabackup: Warn if installed but no backups configured.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:13:30 -0400

dsa-nagios-nrpe-config (25) unstable; urgency=low

  * Install dsa-check-dabackup

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:05:11 -0400

dsa-nagios-nrpe-config (24) unstable; urgency=low

  * Check for dsa-check-backup sudoers entry

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 11:48:48 -0400

dsa-nagios-nrpe-config (23) unstable; urgency=low

  * Add dsa-check-dabackup

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 10:56:32 -0400

dsa-nagios-nrpe-config (22) unstable; urgency=low

  * Add a very easy dsa-check-da-in-aliases.

 -- Peter Palfrader <weasel@debian.org>  Fri, 11 Apr 2008 10:25:54 -0400

dsa-nagios-nrpe-config (21) unstable; urgency=low

  * Add dsa-check-raid-sw.

 -- Peter Palfrader <weasel@debian.org>  Thu,  3 Apr 2008 06:22:44 -0400

dsa-nagios-nrpe-config (20) unstable; urgency=low

  * Do away with a new changelog entry and version for every build of the
    package - it floods us with useless commit mails - and just
    increase the version to $TIMESTAMP in the build area.

 -- Peter Palfrader <weasel@debian.org>  Thu,  3 Apr 2008 05:38:27 -0400

dsa-nagios-nrpe-config (1) unstable; urgency=low

  * Initial release.

 -- Peter Palfrader <weasel@debian.org>  Wed,  2 Apr 2008 22:24:12 +0200