1 dsa-nagios-checks (118) UNRELEASED; urgency=medium
7 * dsa-check-timedatectl:
8 - in buster, timedatectl no longer considers the ntp status of
9 the ntp.service. So we manually do that now.
10 - also switch to parsing the machine readable output in buster.
12 -- Aurelien Jarno <aurel32@debian.org> Mon, 01 Apr 2019 10:09:25 +0200
14 dsa-nagios-checks (117) unstable; urgency=medium
17 * dsa-check-hpssacli: add --ignore-cache
18 * add: dsa-check-unbound-anchors
19 * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
21 * dsa-check-running-kernel: handle -unsigned packages
22 * dsa-check-backuppg: Ignore lost+found directory
25 * update-apt-statusdir, dsa-update-unowned-file-status:
26 Create status directory if not existing.
28 [ Moritz Muehlenhoff ]
29 * dsa-check-timedatectl: Adapt check for buster.
31 -- Aurelien Jarno <aurel32@debian.org> Mon, 01 Apr 2019 09:59:09 +0200
33 dsa-nagios-checks (116) unstable; urgency=medium
35 * Add dsa-check-ipv6-default-gw.
37 -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:05:39 +0100
39 dsa-nagios-checks (115) unstable; urgency=medium
42 * Set a specific User-Agent in dsa-check-mirrorsync
44 -- Aurelien Jarno <aurel32@debian.org> Sat, 03 Mar 2018 11:10:51 +0100
46 dsa-nagios-checks (114) unstable; urgency=medium
48 * Add dsa-check-openmanage to monitor Dell hosts.
50 -- Julien Cristau <jcristau@debian.org> Sun, 18 Feb 2018 11:03:16 +0100
52 dsa-nagios-checks (113) unstable; urgency=medium
54 * Add dsa-check-systemd-services that also prints failed systemd services
55 when things are degraded.
57 -- Peter Palfrader <weasel@debian.org> Sun, 11 Feb 2018 11:16:30 +0100
59 dsa-nagios-checks (112) unstable; urgency=medium
61 * maintainer scripts: use dpkg-maintscript-helper to clean out
62 /etc/cron.d/dsa-nagios-checks.
63 * libproc-processtable-perl: allow ignoring young processes.
65 -- Peter Palfrader <weasel@debian.org> Sun, 04 Feb 2018 12:23:46 +0100
67 dsa-nagios-checks (111) unstable; urgency=medium
70 * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
71 * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
72 an is_sep() method. Update.
73 * dsa-update-unowned-file-status: ignore autofs and nfs4
74 * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
76 * dsa-check-backuppg: Support per host and per cluster retention
78 * remove debian/cron.d: moved into puppet
81 * Set LWP::UserAgent timeout in dsa-check-mirrorsync
83 -- Peter Palfrader <weasel@debian.org> Thu, 01 Feb 2018 18:31:17 +0100
85 dsa-nagios-checks (110) unstable; urgency=medium
87 * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
88 * dsa-check-backuppg: warn if backups for a database configured in
89 dsa-check-backuppg.conf are missing entirely.
90 * dsa-check-file_age: support following symlinks and warning on empty files.
91 * dsa-check-file_age: support multiple files.
92 * dsa-check-running-kernel: meta package version check, also work on 4.x
94 * dsa-check_puppet_agent: add from Alexander Swen's github.
95 * dsa-check-memory: move from / to /checks in source (so now it should get
97 * dsa-wrap-nagios-check: add.
99 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
101 dsa-nagios-checks (109) unstable; urgency=medium
104 * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
106 * dsa-check-soas: on soa disagreement, list nameservers.
109 * dsa-check-libs: also ignore files that are open via normal file handles
113 * dsa-check-libs: accept -v as short for --verbose.
114 * dsa-check-libs: ignore deleted CWDs.
115 * dsa-check-drbd: Add --ok-no-devices option.
116 * dsa-check-backuppg: allow specifying which timeline we expect a database
118 * dsa-check-cert-expire-dir: add
119 * dsa-check-raid-3ware: modernize
120 * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
122 * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
123 the last zone checker finished.
124 * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
126 * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
127 domain share nameservers.
128 * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
129 labels for NS responses.
130 * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
131 * dsa-check-mirrorsync: support unix timestamps in tracefile
132 (for staticsync mirrors).
133 * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
134 in zonefiles. This will skip it being checked.
135 * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
136 data) in detail output.
137 * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
138 * dsa-check-zone-signature-all: add.
139 * dsa-check-timedatectl: add
140 * dsa-check-dabackup-server: replace /org/backup.debian.org with
141 /srv/backups/da-backup.
144 * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
146 * dsa-update-unowned-file-status: avoid printing the apex of pruned
150 * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
151 * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
152 * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
154 -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
156 dsa-nagios-checks (108) unstable; urgency=medium
158 * dsa-check-stunnel-sanity: Fix variable name in output.
159 * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
161 * dsa-check-config: check for DAD failures.
162 * dsa-check-config: retire ldap.conf check - we ship it with puppet
165 -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
167 dsa-nagios-checks (107) unstable; urgency=medium
169 * Add dsa-check-stunnel-sanity.
171 -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
173 dsa-nagios-checks (106) unstable; urgency=medium
175 * Depend on libyaml-syck-perl.
177 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
179 dsa-nagios-checks (105) unstable; urgency=medium
182 * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
183 * dsa-check-libs: add.
186 * dsa-check-backuppg: Ignore removed tmp files instead of crashing
188 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
190 dsa-nagios-checks (104) unstable; urgency=medium
192 * Fix iptables-save cronjob.
194 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
196 dsa-nagios-checks (103) unstable; urgency=medium
198 * dsa-update-apt-status: run apt-get update in a flock wrapper.
200 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
202 dsa-nagios-checks (102) unstable; urgency=medium
204 * dsa-check-entropy: unbreak script by removing non-ASCII characters.
206 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
208 dsa-nagios-checks (101) unstable; urgency=low
211 * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
212 * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
213 ask for SOA with dnssec data. Apparently some nameservers do give you the
214 RRSIG on the DS record instead of a referral (rcode0's for instance).
215 * dsa-check-hpasm: Support supplying a list of things for which failures are
217 * dsa-check-soas: do some queries without RD set.
218 * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
219 for the magic start sequence. This makes running times bearable on our
221 * dsa-check-config: check if existing ed25519 host keys are in ldap.
224 * Extend dsa-check-entropy output so Icinga2 can process performance
225 data (e.g. used by Graphite).
227 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
229 dsa-nagios-checks (100) unstable; urgency=low
232 * dsa-check-running-kernel: Check from all compression tokens.
233 * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
234 it does not get set later.
235 * dsa-check-running-kernel: fix kernel metapackage version regex
238 * dsa-check-packages: go critical if there are security updates.
241 * dsa-check-cert-expire: Make timers configurable.
243 [ George Kargiotakis ]
244 * dsa-check-hpacucli: Add Parity check for logical drives.
247 * dsa-check-mq-connection: Catch case when host has never connected
249 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
251 dsa-nagios-checks (99) unstable; urgency=low
253 * dsa-check-hpacucli: SATA drives have different transfer speed.
254 * dsa-check-edac: add.
256 -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
258 dsa-nagios-checks (98) unstable; urgency=low
260 * Add dsa-check-dchroots-current.
262 -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
264 dsa-nagios-checks (97) unstable; urgency=low
267 * Update dsa-check-mq-connection to actually work
270 * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
271 * dsa-check-config: Update for new TLS_CACERT config.
273 -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
275 dsa-nagios-checks (96) unstable; urgency=low
278 * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
279 Allow supplying the nameservers to start recursion at (per zone).
280 This is useful for reverse zones of RFC1918 space.
281 * dsa-check-bacula: exit status fix.
282 * dsa-check-hpacucli:
283 - support filtering controllers.
284 - add an option to accept no-controllers as an OK state.
285 * remove weak keys check
286 * dsa-check-dnssec-delegation
287 - handle zones with no keys that have the SEP bit.
288 - warn on all domains where parent has a non-empty DS bit that does
289 not match ours, even if we did not expect it to have one at all.
290 * dsa-check-zone-rrsig-expiration-many:
291 - expect dnssec by default now.
292 * dsa-check-zone-rrsig-expiration:
293 - in the OK message, clarify we only check sigs at the zone apex.
294 * dsa-check-dnssec-delegation:
295 - accept any ds/dnskey combination whose intersection is not empty.
296 (previously we required them to match exactly.)
299 * dsa-check-mq-connection:
300 Check that all messages have been consumed and that there is an active
302 * kill some lintian warnings
304 -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
306 dsa-nagios-checks (95) unstable; urgency=low
308 * dsa-check-running-kernel: Try to fix zcat kernel case.
310 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
312 dsa-nagios-checks (94) unstable; urgency=low
315 * Start new changelog
318 * dsa-check-packages: work better with weird multi-arch cases.
319 * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
320 * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
321 all before comparing.
324 * Changed according to gitlog without corresponding debian/changelog entry:
326 - dsa-check-filesystems
327 - dsa-check-running-kernel
329 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
331 dsa-nagios-checks (93) unstable; urgency=low
334 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
335 coding /proc in order to match procfs in chroots too.
336 * dsa-update-apt-status: send the cron output to syslog rather than email
339 * dsa-check-msa-eventlog: Add --verbose switch to show info level
341 * add dsa-check-crl-expire.
342 * rename checks/dsa-check-backuppg.conf.sample ->
343 etc/dsa-check-backuppg.conf.sample.
344 * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
345 * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
346 at least for the "primary" arch. Does not really handle multi-arch
347 packages, but it makes things work again for now.
348 * dsa-check-packages: A better multi-arch capable version.
349 * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
350 * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
352 * dsa-check-hpasm: Typo fix.
355 * dsa-check-udldap-freshness: check new last_update.trace if it
356 exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
357 * dsa-check-statusfile: Complain if there is no extended information
358 * add dsa-check-filesystems (only checks ext at the moment)
361 * dsa-check-soas: Add --no-soa-ns flag.
363 [ Martin Zobel-Helas ]
364 * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
366 -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
368 dsa-nagios-checks (92.1) unstable; urgency=low
370 * Fix dsa-update-unowned-file-status cronjob entry more.
372 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
374 dsa-nagios-checks (92) unstable; urgency=low
376 * Fix dsa-update-unowned-file-status cronjob entry.
378 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
380 dsa-nagios-checks (91) unstable; urgency=low
383 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
385 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
386 properly timeout long checks.
387 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
388 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
390 * dsa-check-soas: support supplying an IP address for additional nameservers
394 * Make the unowned files check skip /proc.
395 * Limit the number of unowned files we register in the state file to 40.
398 * Rewrite unowned files check into something that writes proper
399 nagios status files and behaves in a nice and sane way.
401 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
403 dsa-nagios-checks (90) unstable; urgency=low
407 - document watermark default
408 - fix off-by-one in output
409 * dsa-check-backuppg:
410 - ignore regular files in pg backup's root directory if they are still
414 * dsa-check-log-age-loghost
415 - allow minus (-) in hostnames.
418 * Add event_handler to restart services
419 * Add dsa-check-raid-megactl for awkward PeRC controllers
421 [ Martin Zobel-Helas ]
422 * add rudimentary check for unowned files
424 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
426 dsa-nagios-checks (89) unstable; urgency=low
428 * dsa-check-running-kernel: kFreeBSD support.
429 * Add dsa-check-entropy.
431 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
433 dsa-nagios-checks (88) unstable; urgency=low
436 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
437 to '3.0GBPS, Unknown'.
438 - accept 6.0Gbps for SAS disks.
439 - add --ignore-transfer-speed option.
440 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
442 * Add dsa-check-hpacucli-enclosure.
443 * dsa-check-running-kernel:
444 - check if 'strings' is installed and complain nicely if it isn't instead
445 of falling over. [Uli Martens]
446 - Make the check work with Ubuntu's kernel names (Alexander
448 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
449 * Add dsa-check-port-closed.
450 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
452 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
453 that do not say 'Yes' in the present-line.
454 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
455 in addition to /var/lib/misc/thishost/passwd.tdb.
456 * Add dsa-check-resolver.
458 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
460 dsa-nagios-checks (87) unstable; urgency=low
463 * dsa-check-running-kernel:
464 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
465 - Handle cases where a meta package depends on a list of packages
466 (such as image and module package).
469 * dsa-check-apt-status: it's not an error to exit when we don't need to run
470 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
473 * Add checks/dsa-check-backuppg.
474 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
475 * Add dsa-check-log-age-loghost.
476 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
477 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
479 [ Martin Zobel-Helas ]
480 * Add checks/dsa-checks-file.
482 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
484 dsa-nagios-checks (86) unstable; urgency=low
487 * Add dsa-check-raid-megaraid.
488 * make samhain check go WARN, not CRITICAL.
491 * Add dsa-check-uptime
493 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
495 dsa-nagios-checks (85) unstable; urgency=low
498 * dsa-update-apt-status: Fix bashism by making it a bash script
500 * dsa-check-hpasm: Not all things where a temperature can be measured
501 might be installed (e.g. a second CPU). Don't do numeric computations
502 on a "-" instead of numbers then.
503 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
504 then non-redundant power supply will not be a warning state.
505 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
506 then non-redundant fans will not be a warning state.
507 * Add dsa-check-msa-eventlog.
508 * add dsa-check-zone-rrsig-expiration (therefore recommend
509 libnet-dns-sec-perl).
510 * add dsa-check-zone-rrsig-expiration-many.
511 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
512 controller with a battery: "ZMM Optimal" is the way it says "optimal".
513 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
514 /root/.ssh/authorized_keys.
515 * add dsa-check-dnssec-delegation.
516 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
518 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
519 and /var/lib/misc/userkeys, not just the first. (Also doesn't
520 blow up if a file is empty.)
522 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
524 dsa-nagios-checks (84) unstable; urgency=low
527 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
528 better (do not reference undefined values, properly exit with UNKNOWN).
529 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
530 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
531 wrapper) in the authorized_keys files. Such entries accept all
532 backup-manager entries for their host, but they do not require one.
533 As such we can just put all the hosts in the authkeys file regardless of
534 whether we actually have backups configured for them.
537 * New check: dsa-check-hpasm
538 * Release for new check
540 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
542 dsa-nagios-checks (83) stable; urgency=low
544 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
547 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
549 dsa-nagios-checks (82) stable; urgency=low
551 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
553 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
555 dsa-nagios-checks (81) stable; urgency=low
557 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
558 it found degraded raid arrays. Handle this correctly.
560 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
562 dsa-nagios-checks (80) stable; urgency=low
564 * dsa-check-packages: In the short overview say "obs/loc" instead of
565 just "obs" for local or obsolete packages.
566 * dsa-update-apt-status: Introduce -f switch.
568 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
570 dsa-nagios-checks (79) stable; urgency=low
572 * dsa-check-running-kernel: Correctly check *candidate* version
573 of kernel metapackage for unsatisfied depends, not the latest
574 metapackage (which might come from a non-default source).
576 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
578 dsa-nagios-checks (78) stable; urgency=low
580 * dsa-check-raid-aacraid: tmp directory in /tmp,
581 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
584 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
586 dsa-nagios-checks (77) stable; urgency=low
588 * Add checks/dsa-check-raid-aacraid.
590 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
592 dsa-nagios-checks (76) stable; urgency=low
594 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
596 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
598 dsa-nagios-checks (75) stable; urgency=low
600 * dsa-check-packages: Support ignore directories.
601 * debian/control: Fix dup word in description.
603 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
605 dsa-nagios-checks (74) stable; urgency=low
609 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
611 dsa-nagios-checks (73) stable; urgency=low
613 * Er, new test needs to be executable
615 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
617 dsa-nagios-checks (72) stable; urgency=low
619 * Generalize puppet file age check and remove old one
621 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
623 dsa-nagios-checks (71) stable; urgency=low
625 * Update the kernel check to not complain when we can't trace back to a meta
626 package name - this generally indicates a custom kernel that we're running
629 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
631 dsa-nagios-checks (70) XXstable; urgency=low
633 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
634 * Only run weak keys check if there is no prior weak key status.
635 * dsa-check-hpacucli: Slots need not be all numeric.
636 * dsa-check-hpacucli: Spares can be active.
637 * dsa-check-hpacucli: And SAS can be E too.
639 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
641 dsa-nagios-checks (69) unstable; urgency=low
643 * Rename to dsa-nagios-checks.
644 * Replaces/Conflicts dsa-nagios-nrpe-config.
645 * Update description.
646 * No longer install nrpe_dsa.cfg.
647 * Move files into specific directories in source.
649 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
651 dsa-nagios-nrpe-config (68) unstable; urgency=low
653 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
656 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
658 dsa-nagios-nrpe-config (67) unstable; urgency=low
660 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
661 long text for obs(ign).
663 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
665 dsa-nagios-nrpe-config (66) unstable; urgency=low
667 * Add dsa-check-packages
668 * Make apt-status-check use dsa-check-packages.
669 * And install obsolete-packages-ignore into etc/nagios.
671 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
673 dsa-nagios-nrpe-config (65) unstable; urgency=low
677 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
679 dsa-nagios-nrpe-config (64) unstable; urgency=low
681 * dsa-check-mirrorsync: make it work in embedded perl again.
683 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
685 dsa-nagios-nrpe-config (63) unstable; urgency=low
687 * dsa-check-mirrorsync: print help if additional args are given (we don't
690 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
692 dsa-nagios-nrpe-config (62) unstable; urgency=low
694 * Add check_securitymirror by formorer.
696 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
698 dsa-nagios-nrpe-config (61) unstable; urgency=low
700 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
701 entry is in there. If it doesn't exist that's also good.
703 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
705 dsa-nagios-nrpe-config (60) unstable; urgency=low
707 * Add dsa-check-raid-areca.
709 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
711 dsa-nagios-nrpe-config (59) unstable; urgency=low
713 * apt-status-check: Ignore stderr during apt-get update.
715 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
717 dsa-nagios-nrpe-config (58) unstable; urgency=low
719 * Rename dsa-check-da-in-aliases to dsa-check-config.
720 * dsa-check-config: check if ldap.conf is configured correctly.
722 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
724 dsa-nagios-nrpe-config (57) unstable; urgency=low
726 * dsa-check-hpacucli: Do not inspect drives in detail when they are
727 listed as Failed in the overview already.
729 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
731 dsa-nagios-nrpe-config (56) unstable; urgency=low
733 * fix dsa-check-samhain.
734 sudo is not in $PATH.
736 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
738 dsa-nagios-nrpe-config (55) unstable; urgency=low
740 * And another one, weasel should sleep.
742 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
744 dsa-nagios-nrpe-config (54) unstable; urgency=low
746 * dsa-check-dabackup-server fixes.
748 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
750 dsa-nagios-nrpe-config (53) unstable; urgency=low
752 * Add dsa-check-dabackup-server.
754 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
756 dsa-nagios-nrpe-config (52) unstable; urgency=low
758 * The nagios _check_ package should probably not be the one that
759 depends on the stuff we want on most or all hosts, thus removing
760 dependency on samhain, which should probably get pulled in via
763 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
765 dsa-nagios-nrpe-config (51) unstable; urgency=low
767 * Add check for samhain.
769 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
771 dsa-nagios-nrpe-config (50) unstable; urgency=low
773 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
775 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
777 dsa-nagios-nrpe-config (49) unstable; urgency=low
779 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
781 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
783 dsa-nagios-nrpe-config (48) unstable; urgency=low
785 * Don't just print the sudoers lines to stdout, tell the admin to add them
788 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
790 dsa-nagios-nrpe-config (47) unstable; urgency=low
792 * dsa-check-hpacucli: Check transfer speed of disks.
794 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
796 dsa-nagios-nrpe-config (46) unstable; urgency=low
798 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
799 * Move script calls from cron.daily to cron.d @daily and @reboot.
800 * Introduce hourly runs for dsa-update-apt-status that happen if the system
801 changed in the meantime, that is if /var/lib/dpkg/status or
802 /var/cache/apt/pkgcache.bin are newer than the status file.
803 Also run if the status file does not exist, or if the last apt-get update
804 call failed, or if the last run was more than a day ago.
805 * No longer do @daily runs of dsa-update-apt-status
807 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
809 dsa-nagios-nrpe-config (45) unstable; urgency=low
811 * Add apt upgrades check.
813 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
815 dsa-nagios-nrpe-config (44) unstable; urgency=low
817 * Fix ssh-dss detection. It need not be at the start of a line
818 (think >from="1.2.3.4" ssh-dss< ...).
820 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
822 dsa-nagios-nrpe-config (43) unstable; urgency=low
826 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
828 dsa-nagios-nrpe-config (42) unstable; urgency=low
830 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
831 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
832 * Run weak-ssh-keys-check on install.
834 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
836 dsa-nagios-nrpe-config (41) unstable; urgency=low
838 * Add dsa-check-statusfile.
839 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
840 libberkeleydb-perl and dsa-ssh-weak-keys now.
841 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
843 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
845 dsa-nagios-nrpe-config (40) unstable; urgency=low
847 * Teach dsa-check-hpacucli about rebuilding.
849 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
851 dsa-nagios-nrpe-config (39) unstable; urgency=low
853 * Add dsa-check-hpacucli.
856 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
858 dsa-nagios-nrpe-config (38) unstable; urgency=low
860 * Try harder to find version string.
862 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
864 dsa-nagios-nrpe-config (37) unstable; urgency=low
866 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
867 * Depend on binutils for string(1).
869 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
871 dsa-nagios-nrpe-config (36) unstable; urgency=low
873 * Add dsa-check-running-kernel
875 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
877 dsa-nagios-nrpe-config (35) unstable; urgency=low
881 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
883 dsa-nagios-nrpe-config (34) unstable; urgency=low
885 * dsa-check-raid-3ware
887 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
889 dsa-nagios-nrpe-config (33) unstable; urgency=low
891 * Add dsa-check-raid-dac960
893 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
895 dsa-nagios-nrpe-config (32) unstable; urgency=low
897 * Add dsa-check-udldap-freshness.
899 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
901 dsa-nagios-nrpe-config (31) unstable; urgency=low
903 * dsa-check-dabackup: Use last time's log file if backup is currently running.
905 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
907 dsa-nagios-nrpe-config (30) unstable; urgency=low
909 * dsa-check-raid-sw: cleaner output.
911 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
913 dsa-nagios-nrpe-config (29) unstable; urgency=low
915 * dsa-check-dabackup: terser output.
917 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
919 dsa-nagios-nrpe-config (28) unstable; urgency=low
921 * dsa-check-dabackup: ignore .bak files in confdir.
923 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
925 dsa-nagios-nrpe-config (27) unstable; urgency=low
927 * Change OK text when da-backup not installed.
929 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
931 dsa-nagios-nrpe-config (26) unstable; urgency=low
933 * dsa-check-dabackup: Warn if installed but no backups configured.
935 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
937 dsa-nagios-nrpe-config (25) unstable; urgency=low
939 * Install dsa-check-dabackup
941 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
943 dsa-nagios-nrpe-config (24) unstable; urgency=low
945 * Check for dsa-check-backup sudoers entry
947 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
949 dsa-nagios-nrpe-config (23) unstable; urgency=low
951 * Add dsa-check-dabackup
953 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
955 dsa-nagios-nrpe-config (22) unstable; urgency=low
957 * Add a very easy dsa-check-da-in-aliases.
959 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
961 dsa-nagios-nrpe-config (21) unstable; urgency=low
963 * Add dsa-check-raid-sw.
965 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
967 dsa-nagios-nrpe-config (20) unstable; urgency=low
969 * Do away with a new changelog entry and version for every build of the
970 package - it floods us with useless commit mails - and just
971 increase the version to $TIMESTAMP in the build area.
973 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
975 dsa-nagios-nrpe-config (1) unstable; urgency=low
979 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200