1 dsa-nagios-checks (119) UNRELEASED; urgency=medium
4 * dsa-check-raid-sw: correctly parse resync percentages under 10%.
5 * Add check_puppetdb_nodes.
8 * dsa-check-soas: fix variable scoping
9 * Add check_clamav_signatures.
12 * port dsa-check-statusfile and dsa-check-memory to python3
13 * dsa-check-zone-signature-all: tell dig not to convert punycode.
15 -- Peter Palfrader <weasel@debian.org> Mon, 20 May 2019 12:52:00 +0200
17 dsa-nagios-checks (118) unstable; urgency=medium
20 * dsa-check-timedatectl:
21 - in buster, timedatectl no longer considers the ntp status of
22 the ntp.service. So we manually do that now.
23 - also switch to parsing the machine readable output in buster.
24 * dsa-check-ucode-intel: add.
26 -- Peter Palfrader <weasel@debian.org> Mon, 20 May 2019 12:50:51 +0200
28 dsa-nagios-checks (117) unstable; urgency=medium
31 * dsa-check-hpssacli: add --ignore-cache
32 * add: dsa-check-unbound-anchors
33 * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
35 * dsa-check-running-kernel: handle -unsigned packages
36 * dsa-check-backuppg: Ignore lost+found directory
39 * update-apt-statusdir, dsa-update-unowned-file-status:
40 Create status directory if not existing.
42 [ Moritz Muehlenhoff ]
43 * dsa-check-timedatectl: Adapt check for buster.
45 -- Aurelien Jarno <aurel32@debian.org> Mon, 01 Apr 2019 09:59:09 +0200
47 dsa-nagios-checks (116) unstable; urgency=medium
49 * Add dsa-check-ipv6-default-gw.
51 -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:05:39 +0100
53 dsa-nagios-checks (115) unstable; urgency=medium
56 * Set a specific User-Agent in dsa-check-mirrorsync
58 -- Aurelien Jarno <aurel32@debian.org> Sat, 03 Mar 2018 11:10:51 +0100
60 dsa-nagios-checks (114) unstable; urgency=medium
62 * Add dsa-check-openmanage to monitor Dell hosts.
64 -- Julien Cristau <jcristau@debian.org> Sun, 18 Feb 2018 11:03:16 +0100
66 dsa-nagios-checks (113) unstable; urgency=medium
68 * Add dsa-check-systemd-services that also prints failed systemd services
69 when things are degraded.
71 -- Peter Palfrader <weasel@debian.org> Sun, 11 Feb 2018 11:16:30 +0100
73 dsa-nagios-checks (112) unstable; urgency=medium
75 * maintainer scripts: use dpkg-maintscript-helper to clean out
76 /etc/cron.d/dsa-nagios-checks.
77 * libproc-processtable-perl: allow ignoring young processes.
79 -- Peter Palfrader <weasel@debian.org> Sun, 04 Feb 2018 12:23:46 +0100
81 dsa-nagios-checks (111) unstable; urgency=medium
84 * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
85 * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
86 an is_sep() method. Update.
87 * dsa-update-unowned-file-status: ignore autofs and nfs4
88 * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
90 * dsa-check-backuppg: Support per host and per cluster retention
92 * remove debian/cron.d: moved into puppet
95 * Set LWP::UserAgent timeout in dsa-check-mirrorsync
97 -- Peter Palfrader <weasel@debian.org> Thu, 01 Feb 2018 18:31:17 +0100
99 dsa-nagios-checks (110) unstable; urgency=medium
101 * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
102 * dsa-check-backuppg: warn if backups for a database configured in
103 dsa-check-backuppg.conf are missing entirely.
104 * dsa-check-file_age: support following symlinks and warning on empty files.
105 * dsa-check-file_age: support multiple files.
106 * dsa-check-running-kernel: meta package version check, also work on 4.x
108 * dsa-check_puppet_agent: add from Alexander Swen's github.
109 * dsa-check-memory: move from / to /checks in source (so now it should get
111 * dsa-wrap-nagios-check: add.
113 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
115 dsa-nagios-checks (109) unstable; urgency=medium
118 * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
120 * dsa-check-soas: on soa disagreement, list nameservers.
123 * dsa-check-libs: also ignore files that are open via normal file handles
127 * dsa-check-libs: accept -v as short for --verbose.
128 * dsa-check-libs: ignore deleted CWDs.
129 * dsa-check-drbd: Add --ok-no-devices option.
130 * dsa-check-backuppg: allow specifying which timeline we expect a database
132 * dsa-check-cert-expire-dir: add
133 * dsa-check-raid-3ware: modernize
134 * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
136 * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
137 the last zone checker finished.
138 * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
140 * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
141 domain share nameservers.
142 * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
143 labels for NS responses.
144 * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
145 * dsa-check-mirrorsync: support unix timestamps in tracefile
146 (for staticsync mirrors).
147 * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
148 in zonefiles. This will skip it being checked.
149 * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
150 data) in detail output.
151 * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
152 * dsa-check-zone-signature-all: add.
153 * dsa-check-timedatectl: add
154 * dsa-check-dabackup-server: replace /org/backup.debian.org with
155 /srv/backups/da-backup.
158 * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
160 * dsa-update-unowned-file-status: avoid printing the apex of pruned
164 * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
165 * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
166 * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
168 -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
170 dsa-nagios-checks (108) unstable; urgency=medium
172 * dsa-check-stunnel-sanity: Fix variable name in output.
173 * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
175 * dsa-check-config: check for DAD failures.
176 * dsa-check-config: retire ldap.conf check - we ship it with puppet
179 -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
181 dsa-nagios-checks (107) unstable; urgency=medium
183 * Add dsa-check-stunnel-sanity.
185 -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
187 dsa-nagios-checks (106) unstable; urgency=medium
189 * Depend on libyaml-syck-perl.
191 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
193 dsa-nagios-checks (105) unstable; urgency=medium
196 * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
197 * dsa-check-libs: add.
200 * dsa-check-backuppg: Ignore removed tmp files instead of crashing
202 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
204 dsa-nagios-checks (104) unstable; urgency=medium
206 * Fix iptables-save cronjob.
208 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
210 dsa-nagios-checks (103) unstable; urgency=medium
212 * dsa-update-apt-status: run apt-get update in a flock wrapper.
214 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
216 dsa-nagios-checks (102) unstable; urgency=medium
218 * dsa-check-entropy: unbreak script by removing non-ASCII characters.
220 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
222 dsa-nagios-checks (101) unstable; urgency=low
225 * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
226 * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
227 ask for SOA with dnssec data. Apparently some nameservers do give you the
228 RRSIG on the DS record instead of a referral (rcode0's for instance).
229 * dsa-check-hpasm: Support supplying a list of things for which failures are
231 * dsa-check-soas: do some queries without RD set.
232 * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
233 for the magic start sequence. This makes running times bearable on our
235 * dsa-check-config: check if existing ed25519 host keys are in ldap.
238 * Extend dsa-check-entropy output so Icinga2 can process performance
239 data (e.g. used by Graphite).
241 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
243 dsa-nagios-checks (100) unstable; urgency=low
246 * dsa-check-running-kernel: Check from all compression tokens.
247 * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
248 it does not get set later.
249 * dsa-check-running-kernel: fix kernel metapackage version regex
252 * dsa-check-packages: go critical if there are security updates.
255 * dsa-check-cert-expire: Make timers configurable.
257 [ George Kargiotakis ]
258 * dsa-check-hpacucli: Add Parity check for logical drives.
261 * dsa-check-mq-connection: Catch case when host has never connected
263 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
265 dsa-nagios-checks (99) unstable; urgency=low
267 * dsa-check-hpacucli: SATA drives have different transfer speed.
268 * dsa-check-edac: add.
270 -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
272 dsa-nagios-checks (98) unstable; urgency=low
274 * Add dsa-check-dchroots-current.
276 -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
278 dsa-nagios-checks (97) unstable; urgency=low
281 * Update dsa-check-mq-connection to actually work
284 * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
285 * dsa-check-config: Update for new TLS_CACERT config.
287 -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
289 dsa-nagios-checks (96) unstable; urgency=low
292 * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
293 Allow supplying the nameservers to start recursion at (per zone).
294 This is useful for reverse zones of RFC1918 space.
295 * dsa-check-bacula: exit status fix.
296 * dsa-check-hpacucli:
297 - support filtering controllers.
298 - add an option to accept no-controllers as an OK state.
299 * remove weak keys check
300 * dsa-check-dnssec-delegation
301 - handle zones with no keys that have the SEP bit.
302 - warn on all domains where parent has a non-empty DS bit that does
303 not match ours, even if we did not expect it to have one at all.
304 * dsa-check-zone-rrsig-expiration-many:
305 - expect dnssec by default now.
306 * dsa-check-zone-rrsig-expiration:
307 - in the OK message, clarify we only check sigs at the zone apex.
308 * dsa-check-dnssec-delegation:
309 - accept any ds/dnskey combination whose intersection is not empty.
310 (previously we required them to match exactly.)
313 * dsa-check-mq-connection:
314 Check that all messages have been consumed and that there is an active
316 * kill some lintian warnings
318 -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
320 dsa-nagios-checks (95) unstable; urgency=low
322 * dsa-check-running-kernel: Try to fix zcat kernel case.
324 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
326 dsa-nagios-checks (94) unstable; urgency=low
329 * Start new changelog
332 * dsa-check-packages: work better with weird multi-arch cases.
333 * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
334 * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
335 all before comparing.
338 * Changed according to gitlog without corresponding debian/changelog entry:
340 - dsa-check-filesystems
341 - dsa-check-running-kernel
343 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
345 dsa-nagios-checks (93) unstable; urgency=low
348 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
349 coding /proc in order to match procfs in chroots too.
350 * dsa-update-apt-status: send the cron output to syslog rather than email
353 * dsa-check-msa-eventlog: Add --verbose switch to show info level
355 * add dsa-check-crl-expire.
356 * rename checks/dsa-check-backuppg.conf.sample ->
357 etc/dsa-check-backuppg.conf.sample.
358 * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
359 * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
360 at least for the "primary" arch. Does not really handle multi-arch
361 packages, but it makes things work again for now.
362 * dsa-check-packages: A better multi-arch capable version.
363 * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
364 * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
366 * dsa-check-hpasm: Typo fix.
369 * dsa-check-udldap-freshness: check new last_update.trace if it
370 exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
371 * dsa-check-statusfile: Complain if there is no extended information
372 * add dsa-check-filesystems (only checks ext at the moment)
375 * dsa-check-soas: Add --no-soa-ns flag.
377 [ Martin Zobel-Helas ]
378 * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
380 -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
382 dsa-nagios-checks (92.1) unstable; urgency=low
384 * Fix dsa-update-unowned-file-status cronjob entry more.
386 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
388 dsa-nagios-checks (92) unstable; urgency=low
390 * Fix dsa-update-unowned-file-status cronjob entry.
392 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
394 dsa-nagios-checks (91) unstable; urgency=low
397 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
399 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
400 properly timeout long checks.
401 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
402 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
404 * dsa-check-soas: support supplying an IP address for additional nameservers
408 * Make the unowned files check skip /proc.
409 * Limit the number of unowned files we register in the state file to 40.
412 * Rewrite unowned files check into something that writes proper
413 nagios status files and behaves in a nice and sane way.
415 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
417 dsa-nagios-checks (90) unstable; urgency=low
421 - document watermark default
422 - fix off-by-one in output
423 * dsa-check-backuppg:
424 - ignore regular files in pg backup's root directory if they are still
428 * dsa-check-log-age-loghost
429 - allow minus (-) in hostnames.
432 * Add event_handler to restart services
433 * Add dsa-check-raid-megactl for awkward PeRC controllers
435 [ Martin Zobel-Helas ]
436 * add rudimentary check for unowned files
438 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
440 dsa-nagios-checks (89) unstable; urgency=low
442 * dsa-check-running-kernel: kFreeBSD support.
443 * Add dsa-check-entropy.
445 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
447 dsa-nagios-checks (88) unstable; urgency=low
450 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
451 to '3.0GBPS, Unknown'.
452 - accept 6.0Gbps for SAS disks.
453 - add --ignore-transfer-speed option.
454 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
456 * Add dsa-check-hpacucli-enclosure.
457 * dsa-check-running-kernel:
458 - check if 'strings' is installed and complain nicely if it isn't instead
459 of falling over. [Uli Martens]
460 - Make the check work with Ubuntu's kernel names (Alexander
462 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
463 * Add dsa-check-port-closed.
464 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
466 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
467 that do not say 'Yes' in the present-line.
468 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
469 in addition to /var/lib/misc/thishost/passwd.tdb.
470 * Add dsa-check-resolver.
472 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
474 dsa-nagios-checks (87) unstable; urgency=low
477 * dsa-check-running-kernel:
478 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
479 - Handle cases where a meta package depends on a list of packages
480 (such as image and module package).
483 * dsa-check-apt-status: it's not an error to exit when we don't need to run
484 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
487 * Add checks/dsa-check-backuppg.
488 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
489 * Add dsa-check-log-age-loghost.
490 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
491 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
493 [ Martin Zobel-Helas ]
494 * Add checks/dsa-checks-file.
496 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
498 dsa-nagios-checks (86) unstable; urgency=low
501 * Add dsa-check-raid-megaraid.
502 * make samhain check go WARN, not CRITICAL.
505 * Add dsa-check-uptime
507 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
509 dsa-nagios-checks (85) unstable; urgency=low
512 * dsa-update-apt-status: Fix bashism by making it a bash script
514 * dsa-check-hpasm: Not all things where a temperature can be measured
515 might be installed (e.g. a second CPU). Don't do numeric computations
516 on a "-" instead of numbers then.
517 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
518 then non-redundant power supply will not be a warning state.
519 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
520 then non-redundant fans will not be a warning state.
521 * Add dsa-check-msa-eventlog.
522 * add dsa-check-zone-rrsig-expiration (therefore recommend
523 libnet-dns-sec-perl).
524 * add dsa-check-zone-rrsig-expiration-many.
525 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
526 controller with a battery: "ZMM Optimal" is the way it says "optimal".
527 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
528 /root/.ssh/authorized_keys.
529 * add dsa-check-dnssec-delegation.
530 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
532 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
533 and /var/lib/misc/userkeys, not just the first. (Also doesn't
534 blow up if a file is empty.)
536 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
538 dsa-nagios-checks (84) unstable; urgency=low
541 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
542 better (do not reference undefined values, properly exit with UNKNOWN).
543 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
544 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
545 wrapper) in the authorized_keys files. Such entries accept all
546 backup-manager entries for their host, but they do not require one.
547 As such we can just put all the hosts in the authkeys file regardless of
548 whether we actually have backups configured for them.
551 * New check: dsa-check-hpasm
552 * Release for new check
554 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
556 dsa-nagios-checks (83) stable; urgency=low
558 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
561 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
563 dsa-nagios-checks (82) stable; urgency=low
565 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
567 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
569 dsa-nagios-checks (81) stable; urgency=low
571 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
572 it found degraded raid arrays. Handle this correctly.
574 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
576 dsa-nagios-checks (80) stable; urgency=low
578 * dsa-check-packages: In the short overview say "obs/loc" instead of
579 just "obs" for local or obsolete packages.
580 * dsa-update-apt-status: Introduce -f switch.
582 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
584 dsa-nagios-checks (79) stable; urgency=low
586 * dsa-check-running-kernel: Correctly check *candidate* version
587 of kernel metapackage for unsatisfied depends, not the latest
588 metapackage (which might come from a non-default source).
590 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
592 dsa-nagios-checks (78) stable; urgency=low
594 * dsa-check-raid-aacraid: tmp directory in /tmp,
595 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
598 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
600 dsa-nagios-checks (77) stable; urgency=low
602 * Add checks/dsa-check-raid-aacraid.
604 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
606 dsa-nagios-checks (76) stable; urgency=low
608 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
610 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
612 dsa-nagios-checks (75) stable; urgency=low
614 * dsa-check-packages: Support ignore directories.
615 * debian/control: Fix dup word in description.
617 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
619 dsa-nagios-checks (74) stable; urgency=low
623 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
625 dsa-nagios-checks (73) stable; urgency=low
627 * Er, new test needs to be executable
629 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
631 dsa-nagios-checks (72) stable; urgency=low
633 * Generalize puppet file age check and remove old one
635 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
637 dsa-nagios-checks (71) stable; urgency=low
639 * Update the kernel check to not complain when we can't trace back to a meta
640 package name - this generally indicates a custom kernel that we're running
643 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
645 dsa-nagios-checks (70) XXstable; urgency=low
647 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
648 * Only run weak keys check if there is no prior weak key status.
649 * dsa-check-hpacucli: Slots need not be all numeric.
650 * dsa-check-hpacucli: Spares can be active.
651 * dsa-check-hpacucli: And SAS can be E too.
653 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
655 dsa-nagios-checks (69) unstable; urgency=low
657 * Rename to dsa-nagios-checks.
658 * Replaces/Conflicts dsa-nagios-nrpe-config.
659 * Update description.
660 * No longer install nrpe_dsa.cfg.
661 * Move files into specific directories in source.
663 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
665 dsa-nagios-nrpe-config (68) unstable; urgency=low
667 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
670 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
672 dsa-nagios-nrpe-config (67) unstable; urgency=low
674 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
675 long text for obs(ign).
677 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
679 dsa-nagios-nrpe-config (66) unstable; urgency=low
681 * Add dsa-check-packages
682 * Make apt-status-check use dsa-check-packages.
683 * And install obsolete-packages-ignore into etc/nagios.
685 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
687 dsa-nagios-nrpe-config (65) unstable; urgency=low
691 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
693 dsa-nagios-nrpe-config (64) unstable; urgency=low
695 * dsa-check-mirrorsync: make it work in embedded perl again.
697 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
699 dsa-nagios-nrpe-config (63) unstable; urgency=low
701 * dsa-check-mirrorsync: print help if additional args are given (we don't
704 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
706 dsa-nagios-nrpe-config (62) unstable; urgency=low
708 * Add check_securitymirror by formorer.
710 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
712 dsa-nagios-nrpe-config (61) unstable; urgency=low
714 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
715 entry is in there. If it doesn't exist that's also good.
717 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
719 dsa-nagios-nrpe-config (60) unstable; urgency=low
721 * Add dsa-check-raid-areca.
723 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
725 dsa-nagios-nrpe-config (59) unstable; urgency=low
727 * apt-status-check: Ignore stderr during apt-get update.
729 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
731 dsa-nagios-nrpe-config (58) unstable; urgency=low
733 * Rename dsa-check-da-in-aliases to dsa-check-config.
734 * dsa-check-config: check if ldap.conf is configured correctly.
736 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
738 dsa-nagios-nrpe-config (57) unstable; urgency=low
740 * dsa-check-hpacucli: Do not inspect drives in detail when they are
741 listed as Failed in the overview already.
743 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
745 dsa-nagios-nrpe-config (56) unstable; urgency=low
747 * fix dsa-check-samhain.
748 sudo is not in $PATH.
750 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
752 dsa-nagios-nrpe-config (55) unstable; urgency=low
754 * And another one, weasel should sleep.
756 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
758 dsa-nagios-nrpe-config (54) unstable; urgency=low
760 * dsa-check-dabackup-server fixes.
762 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
764 dsa-nagios-nrpe-config (53) unstable; urgency=low
766 * Add dsa-check-dabackup-server.
768 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
770 dsa-nagios-nrpe-config (52) unstable; urgency=low
772 * The nagios _check_ package should probably not be the one that
773 depends on the stuff we want on most or all hosts, thus removing
774 dependency on samhain, which should probably get pulled in via
777 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
779 dsa-nagios-nrpe-config (51) unstable; urgency=low
781 * Add check for samhain.
783 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
785 dsa-nagios-nrpe-config (50) unstable; urgency=low
787 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
789 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
791 dsa-nagios-nrpe-config (49) unstable; urgency=low
793 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
795 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
797 dsa-nagios-nrpe-config (48) unstable; urgency=low
799 * Don't just print the sudoers lines to stdout, tell the admin to add them
802 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
804 dsa-nagios-nrpe-config (47) unstable; urgency=low
806 * dsa-check-hpacucli: Check transfer speed of disks.
808 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
810 dsa-nagios-nrpe-config (46) unstable; urgency=low
812 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
813 * Move script calls from cron.daily to cron.d @daily and @reboot.
814 * Introduce hourly runs for dsa-update-apt-status that happen if the system
815 changed in the meantime, that is if /var/lib/dpkg/status or
816 /var/cache/apt/pkgcache.bin are newer than the status file.
817 Also run if the status file does not exist, or if the last apt-get update
818 call failed, or if the last run was more than a day ago.
819 * No longer do @daily runs of dsa-update-apt-status
821 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
823 dsa-nagios-nrpe-config (45) unstable; urgency=low
825 * Add apt upgrades check.
827 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
829 dsa-nagios-nrpe-config (44) unstable; urgency=low
831 * Fix ssh-dss detection. It need not be at the start of a line
832 (think >from="1.2.3.4" ssh-dss< ...).
834 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
836 dsa-nagios-nrpe-config (43) unstable; urgency=low
840 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
842 dsa-nagios-nrpe-config (42) unstable; urgency=low
844 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
845 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
846 * Run weak-ssh-keys-check on install.
848 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
850 dsa-nagios-nrpe-config (41) unstable; urgency=low
852 * Add dsa-check-statusfile.
853 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
854 libberkeleydb-perl and dsa-ssh-weak-keys now.
855 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
857 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
859 dsa-nagios-nrpe-config (40) unstable; urgency=low
861 * Teach dsa-check-hpacucli about rebuilding.
863 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
865 dsa-nagios-nrpe-config (39) unstable; urgency=low
867 * Add dsa-check-hpacucli.
870 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
872 dsa-nagios-nrpe-config (38) unstable; urgency=low
874 * Try harder to find version string.
876 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
878 dsa-nagios-nrpe-config (37) unstable; urgency=low
880 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
881 * Depend on binutils for string(1).
883 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
885 dsa-nagios-nrpe-config (36) unstable; urgency=low
887 * Add dsa-check-running-kernel
889 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
891 dsa-nagios-nrpe-config (35) unstable; urgency=low
895 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
897 dsa-nagios-nrpe-config (34) unstable; urgency=low
899 * dsa-check-raid-3ware
901 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
903 dsa-nagios-nrpe-config (33) unstable; urgency=low
905 * Add dsa-check-raid-dac960
907 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
909 dsa-nagios-nrpe-config (32) unstable; urgency=low
911 * Add dsa-check-udldap-freshness.
913 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
915 dsa-nagios-nrpe-config (31) unstable; urgency=low
917 * dsa-check-dabackup: Use last time's log file if backup is currently running.
919 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
921 dsa-nagios-nrpe-config (30) unstable; urgency=low
923 * dsa-check-raid-sw: cleaner output.
925 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
927 dsa-nagios-nrpe-config (29) unstable; urgency=low
929 * dsa-check-dabackup: terser output.
931 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
933 dsa-nagios-nrpe-config (28) unstable; urgency=low
935 * dsa-check-dabackup: ignore .bak files in confdir.
937 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
939 dsa-nagios-nrpe-config (27) unstable; urgency=low
941 * Change OK text when da-backup not installed.
943 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
945 dsa-nagios-nrpe-config (26) unstable; urgency=low
947 * dsa-check-dabackup: Warn if installed but no backups configured.
949 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
951 dsa-nagios-nrpe-config (25) unstable; urgency=low
953 * Install dsa-check-dabackup
955 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
957 dsa-nagios-nrpe-config (24) unstable; urgency=low
959 * Check for dsa-check-backup sudoers entry
961 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
963 dsa-nagios-nrpe-config (23) unstable; urgency=low
965 * Add dsa-check-dabackup
967 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
969 dsa-nagios-nrpe-config (22) unstable; urgency=low
971 * Add a very easy dsa-check-da-in-aliases.
973 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
975 dsa-nagios-nrpe-config (21) unstable; urgency=low
977 * Add dsa-check-raid-sw.
979 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
981 dsa-nagios-nrpe-config (20) unstable; urgency=low
983 * Do away with a new changelog entry and version for every build of the
984 package - it floods us with useless commit mails - and just
985 increase the version to $TIMESTAMP in the build area.
987 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
989 dsa-nagios-nrpe-config (1) unstable; urgency=low
993 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200