1 dsa-nagios-checks (118) unstable; urgency=medium
4 * dsa-check-timedatectl:
5 - in buster, timedatectl no longer considers the ntp status of
6 the ntp.service. So we manually do that now.
7 - also switch to parsing the machine readable output in buster.
8 * dsa-check-ucode-intel: add.
10 -- Peter Palfrader <weasel@debian.org> Mon, 20 May 2019 12:50:51 +0200
12 dsa-nagios-checks (117) unstable; urgency=medium
15 * dsa-check-hpssacli: add --ignore-cache
16 * add: dsa-check-unbound-anchors
17 * dsa-check-zone-rrsig-expiration-many: fix use of uninitialized value
19 * dsa-check-running-kernel: handle -unsigned packages
20 * dsa-check-backuppg: Ignore lost+found directory
23 * update-apt-statusdir, dsa-update-unowned-file-status:
24 Create status directory if not existing.
26 [ Moritz Muehlenhoff ]
27 * dsa-check-timedatectl: Adapt check for buster.
29 -- Aurelien Jarno <aurel32@debian.org> Mon, 01 Apr 2019 09:59:09 +0200
31 dsa-nagios-checks (116) unstable; urgency=medium
33 * Add dsa-check-ipv6-default-gw.
35 -- Peter Palfrader <weasel@debian.org> Sun, 11 Mar 2018 09:05:39 +0100
37 dsa-nagios-checks (115) unstable; urgency=medium
40 * Set a specific User-Agent in dsa-check-mirrorsync
42 -- Aurelien Jarno <aurel32@debian.org> Sat, 03 Mar 2018 11:10:51 +0100
44 dsa-nagios-checks (114) unstable; urgency=medium
46 * Add dsa-check-openmanage to monitor Dell hosts.
48 -- Julien Cristau <jcristau@debian.org> Sun, 18 Feb 2018 11:03:16 +0100
50 dsa-nagios-checks (113) unstable; urgency=medium
52 * Add dsa-check-systemd-services that also prints failed systemd services
53 when things are degraded.
55 -- Peter Palfrader <weasel@debian.org> Sun, 11 Feb 2018 11:16:30 +0100
57 dsa-nagios-checks (112) unstable; urgency=medium
59 * maintainer scripts: use dpkg-maintscript-helper to clean out
60 /etc/cron.d/dsa-nagios-checks.
61 * libproc-processtable-perl: allow ignoring young processes.
63 -- Peter Palfrader <weasel@debian.org> Sun, 04 Feb 2018 12:23:46 +0100
65 dsa-nagios-checks (111) unstable; urgency=medium
68 * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
69 * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
70 an is_sep() method. Update.
71 * dsa-update-unowned-file-status: ignore autofs and nfs4
72 * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
74 * dsa-check-backuppg: Support per host and per cluster retention
76 * remove debian/cron.d: moved into puppet
79 * Set LWP::UserAgent timeout in dsa-check-mirrorsync
81 -- Peter Palfrader <weasel@debian.org> Thu, 01 Feb 2018 18:31:17 +0100
83 dsa-nagios-checks (110) unstable; urgency=medium
85 * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
86 * dsa-check-backuppg: warn if backups for a database configured in
87 dsa-check-backuppg.conf are missing entirely.
88 * dsa-check-file_age: support following symlinks and warning on empty files.
89 * dsa-check-file_age: support multiple files.
90 * dsa-check-running-kernel: meta package version check, also work on 4.x
92 * dsa-check_puppet_agent: add from Alexander Swen's github.
93 * dsa-check-memory: move from / to /checks in source (so now it should get
95 * dsa-wrap-nagios-check: add.
97 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
99 dsa-nagios-checks (109) unstable; urgency=medium
102 * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
104 * dsa-check-soas: on soa disagreement, list nameservers.
107 * dsa-check-libs: also ignore files that are open via normal file handles
111 * dsa-check-libs: accept -v as short for --verbose.
112 * dsa-check-libs: ignore deleted CWDs.
113 * dsa-check-drbd: Add --ok-no-devices option.
114 * dsa-check-backuppg: allow specifying which timeline we expect a database
116 * dsa-check-cert-expire-dir: add
117 * dsa-check-raid-3ware: modernize
118 * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
120 * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
121 the last zone checker finished.
122 * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
124 * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
125 domain share nameservers.
126 * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
127 labels for NS responses.
128 * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
129 * dsa-check-mirrorsync: support unix timestamps in tracefile
130 (for staticsync mirrors).
131 * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
132 in zonefiles. This will skip it being checked.
133 * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
134 data) in detail output.
135 * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
136 * dsa-check-zone-signature-all: add.
137 * dsa-check-timedatectl: add
138 * dsa-check-dabackup-server: replace /org/backup.debian.org with
139 /srv/backups/da-backup.
142 * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
144 * dsa-update-unowned-file-status: avoid printing the apex of pruned
148 * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
149 * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
150 * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
152 -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
154 dsa-nagios-checks (108) unstable; urgency=medium
156 * dsa-check-stunnel-sanity: Fix variable name in output.
157 * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
159 * dsa-check-config: check for DAD failures.
160 * dsa-check-config: retire ldap.conf check - we ship it with puppet
163 -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
165 dsa-nagios-checks (107) unstable; urgency=medium
167 * Add dsa-check-stunnel-sanity.
169 -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
171 dsa-nagios-checks (106) unstable; urgency=medium
173 * Depend on libyaml-syck-perl.
175 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
177 dsa-nagios-checks (105) unstable; urgency=medium
180 * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
181 * dsa-check-libs: add.
184 * dsa-check-backuppg: Ignore removed tmp files instead of crashing
186 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
188 dsa-nagios-checks (104) unstable; urgency=medium
190 * Fix iptables-save cronjob.
192 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
194 dsa-nagios-checks (103) unstable; urgency=medium
196 * dsa-update-apt-status: run apt-get update in a flock wrapper.
198 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
200 dsa-nagios-checks (102) unstable; urgency=medium
202 * dsa-check-entropy: unbreak script by removing non-ASCII characters.
204 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
206 dsa-nagios-checks (101) unstable; urgency=low
209 * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
210 * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
211 ask for SOA with dnssec data. Apparently some nameservers do give you the
212 RRSIG on the DS record instead of a referral (rcode0's for instance).
213 * dsa-check-hpasm: Support supplying a list of things for which failures are
215 * dsa-check-soas: do some queries without RD set.
216 * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
217 for the magic start sequence. This makes running times bearable on our
219 * dsa-check-config: check if existing ed25519 host keys are in ldap.
222 * Extend dsa-check-entropy output so Icinga2 can process performance
223 data (e.g. used by Graphite).
225 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
227 dsa-nagios-checks (100) unstable; urgency=low
230 * dsa-check-running-kernel: Check from all compression tokens.
231 * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
232 it does not get set later.
233 * dsa-check-running-kernel: fix kernel metapackage version regex
236 * dsa-check-packages: go critical if there are security updates.
239 * dsa-check-cert-expire: Make timers configurable.
241 [ George Kargiotakis ]
242 * dsa-check-hpacucli: Add Parity check for logical drives.
245 * dsa-check-mq-connection: Catch case when host has never connected
247 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
249 dsa-nagios-checks (99) unstable; urgency=low
251 * dsa-check-hpacucli: SATA drives have different transfer speed.
252 * dsa-check-edac: add.
254 -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
256 dsa-nagios-checks (98) unstable; urgency=low
258 * Add dsa-check-dchroots-current.
260 -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
262 dsa-nagios-checks (97) unstable; urgency=low
265 * Update dsa-check-mq-connection to actually work
268 * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
269 * dsa-check-config: Update for new TLS_CACERT config.
271 -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
273 dsa-nagios-checks (96) unstable; urgency=low
276 * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
277 Allow supplying the nameservers to start recursion at (per zone).
278 This is useful for reverse zones of RFC1918 space.
279 * dsa-check-bacula: exit status fix.
280 * dsa-check-hpacucli:
281 - support filtering controllers.
282 - add an option to accept no-controllers as an OK state.
283 * remove weak keys check
284 * dsa-check-dnssec-delegation
285 - handle zones with no keys that have the SEP bit.
286 - warn on all domains where parent has a non-empty DS bit that does
287 not match ours, even if we did not expect it to have one at all.
288 * dsa-check-zone-rrsig-expiration-many:
289 - expect dnssec by default now.
290 * dsa-check-zone-rrsig-expiration:
291 - in the OK message, clarify we only check sigs at the zone apex.
292 * dsa-check-dnssec-delegation:
293 - accept any ds/dnskey combination whose intersection is not empty.
294 (previously we required them to match exactly.)
297 * dsa-check-mq-connection:
298 Check that all messages have been consumed and that there is an active
300 * kill some lintian warnings
302 -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
304 dsa-nagios-checks (95) unstable; urgency=low
306 * dsa-check-running-kernel: Try to fix zcat kernel case.
308 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
310 dsa-nagios-checks (94) unstable; urgency=low
313 * Start new changelog
316 * dsa-check-packages: work better with weird multi-arch cases.
317 * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
318 * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
319 all before comparing.
322 * Changed according to gitlog without corresponding debian/changelog entry:
324 - dsa-check-filesystems
325 - dsa-check-running-kernel
327 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
329 dsa-nagios-checks (93) unstable; urgency=low
332 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
333 coding /proc in order to match procfs in chroots too.
334 * dsa-update-apt-status: send the cron output to syslog rather than email
337 * dsa-check-msa-eventlog: Add --verbose switch to show info level
339 * add dsa-check-crl-expire.
340 * rename checks/dsa-check-backuppg.conf.sample ->
341 etc/dsa-check-backuppg.conf.sample.
342 * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
343 * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
344 at least for the "primary" arch. Does not really handle multi-arch
345 packages, but it makes things work again for now.
346 * dsa-check-packages: A better multi-arch capable version.
347 * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
348 * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
350 * dsa-check-hpasm: Typo fix.
353 * dsa-check-udldap-freshness: check new last_update.trace if it
354 exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
355 * dsa-check-statusfile: Complain if there is no extended information
356 * add dsa-check-filesystems (only checks ext at the moment)
359 * dsa-check-soas: Add --no-soa-ns flag.
361 [ Martin Zobel-Helas ]
362 * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
364 -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
366 dsa-nagios-checks (92.1) unstable; urgency=low
368 * Fix dsa-update-unowned-file-status cronjob entry more.
370 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
372 dsa-nagios-checks (92) unstable; urgency=low
374 * Fix dsa-update-unowned-file-status cronjob entry.
376 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
378 dsa-nagios-checks (91) unstable; urgency=low
381 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
383 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
384 properly timeout long checks.
385 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
386 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
388 * dsa-check-soas: support supplying an IP address for additional nameservers
392 * Make the unowned files check skip /proc.
393 * Limit the number of unowned files we register in the state file to 40.
396 * Rewrite unowned files check into something that writes proper
397 nagios status files and behaves in a nice and sane way.
399 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
401 dsa-nagios-checks (90) unstable; urgency=low
405 - document watermark default
406 - fix off-by-one in output
407 * dsa-check-backuppg:
408 - ignore regular files in pg backup's root directory if they are still
412 * dsa-check-log-age-loghost
413 - allow minus (-) in hostnames.
416 * Add event_handler to restart services
417 * Add dsa-check-raid-megactl for awkward PeRC controllers
419 [ Martin Zobel-Helas ]
420 * add rudimentary check for unowned files
422 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
424 dsa-nagios-checks (89) unstable; urgency=low
426 * dsa-check-running-kernel: kFreeBSD support.
427 * Add dsa-check-entropy.
429 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
431 dsa-nagios-checks (88) unstable; urgency=low
434 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
435 to '3.0GBPS, Unknown'.
436 - accept 6.0Gbps for SAS disks.
437 - add --ignore-transfer-speed option.
438 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
440 * Add dsa-check-hpacucli-enclosure.
441 * dsa-check-running-kernel:
442 - check if 'strings' is installed and complain nicely if it isn't instead
443 of falling over. [Uli Martens]
444 - Make the check work with Ubuntu's kernel names (Alexander
446 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
447 * Add dsa-check-port-closed.
448 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
450 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
451 that do not say 'Yes' in the present-line.
452 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
453 in addition to /var/lib/misc/thishost/passwd.tdb.
454 * Add dsa-check-resolver.
456 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
458 dsa-nagios-checks (87) unstable; urgency=low
461 * dsa-check-running-kernel:
462 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
463 - Handle cases where a meta package depends on a list of packages
464 (such as image and module package).
467 * dsa-check-apt-status: it's not an error to exit when we don't need to run
468 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
471 * Add checks/dsa-check-backuppg.
472 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
473 * Add dsa-check-log-age-loghost.
474 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
475 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
477 [ Martin Zobel-Helas ]
478 * Add checks/dsa-checks-file.
480 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
482 dsa-nagios-checks (86) unstable; urgency=low
485 * Add dsa-check-raid-megaraid.
486 * make samhain check go WARN, not CRITICAL.
489 * Add dsa-check-uptime
491 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
493 dsa-nagios-checks (85) unstable; urgency=low
496 * dsa-update-apt-status: Fix bashism by making it a bash script
498 * dsa-check-hpasm: Not all things where a temperature can be measured
499 might be installed (e.g. a second CPU). Don't do numeric computations
500 on a "-" instead of numbers then.
501 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
502 then non-redundant power supply will not be a warning state.
503 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
504 then non-redundant fans will not be a warning state.
505 * Add dsa-check-msa-eventlog.
506 * add dsa-check-zone-rrsig-expiration (therefore recommend
507 libnet-dns-sec-perl).
508 * add dsa-check-zone-rrsig-expiration-many.
509 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
510 controller with a battery: "ZMM Optimal" is the way it says "optimal".
511 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
512 /root/.ssh/authorized_keys.
513 * add dsa-check-dnssec-delegation.
514 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
516 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
517 and /var/lib/misc/userkeys, not just the first. (Also doesn't
518 blow up if a file is empty.)
520 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
522 dsa-nagios-checks (84) unstable; urgency=low
525 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
526 better (do not reference undefined values, properly exit with UNKNOWN).
527 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
528 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
529 wrapper) in the authorized_keys files. Such entries accept all
530 backup-manager entries for their host, but they do not require one.
531 As such we can just put all the hosts in the authkeys file regardless of
532 whether we actually have backups configured for them.
535 * New check: dsa-check-hpasm
536 * Release for new check
538 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
540 dsa-nagios-checks (83) stable; urgency=low
542 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
545 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
547 dsa-nagios-checks (82) stable; urgency=low
549 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
551 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
553 dsa-nagios-checks (81) stable; urgency=low
555 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
556 it found degraded raid arrays. Handle this correctly.
558 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
560 dsa-nagios-checks (80) stable; urgency=low
562 * dsa-check-packages: In the short overview say "obs/loc" instead of
563 just "obs" for local or obsolete packages.
564 * dsa-update-apt-status: Introduce -f switch.
566 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
568 dsa-nagios-checks (79) stable; urgency=low
570 * dsa-check-running-kernel: Correctly check *candidate* version
571 of kernel metapackage for unsatisfied depends, not the latest
572 metapackage (which might come from a non-default source).
574 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
576 dsa-nagios-checks (78) stable; urgency=low
578 * dsa-check-raid-aacraid: tmp directory in /tmp,
579 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
582 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
584 dsa-nagios-checks (77) stable; urgency=low
586 * Add checks/dsa-check-raid-aacraid.
588 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
590 dsa-nagios-checks (76) stable; urgency=low
592 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
594 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
596 dsa-nagios-checks (75) stable; urgency=low
598 * dsa-check-packages: Support ignore directories.
599 * debian/control: Fix dup word in description.
601 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
603 dsa-nagios-checks (74) stable; urgency=low
607 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
609 dsa-nagios-checks (73) stable; urgency=low
611 * Er, new test needs to be executable
613 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
615 dsa-nagios-checks (72) stable; urgency=low
617 * Generalize puppet file age check and remove old one
619 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
621 dsa-nagios-checks (71) stable; urgency=low
623 * Update the kernel check to not complain when we can't trace back to a meta
624 package name - this generally indicates a custom kernel that we're running
627 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
629 dsa-nagios-checks (70) XXstable; urgency=low
631 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
632 * Only run weak keys check if there is no prior weak key status.
633 * dsa-check-hpacucli: Slots need not be all numeric.
634 * dsa-check-hpacucli: Spares can be active.
635 * dsa-check-hpacucli: And SAS can be E too.
637 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
639 dsa-nagios-checks (69) unstable; urgency=low
641 * Rename to dsa-nagios-checks.
642 * Replaces/Conflicts dsa-nagios-nrpe-config.
643 * Update description.
644 * No longer install nrpe_dsa.cfg.
645 * Move files into specific directories in source.
647 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
649 dsa-nagios-nrpe-config (68) unstable; urgency=low
651 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
654 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
656 dsa-nagios-nrpe-config (67) unstable; urgency=low
658 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
659 long text for obs(ign).
661 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
663 dsa-nagios-nrpe-config (66) unstable; urgency=low
665 * Add dsa-check-packages
666 * Make apt-status-check use dsa-check-packages.
667 * And install obsolete-packages-ignore into etc/nagios.
669 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
671 dsa-nagios-nrpe-config (65) unstable; urgency=low
675 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
677 dsa-nagios-nrpe-config (64) unstable; urgency=low
679 * dsa-check-mirrorsync: make it work in embedded perl again.
681 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
683 dsa-nagios-nrpe-config (63) unstable; urgency=low
685 * dsa-check-mirrorsync: print help if additional args are given (we don't
688 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
690 dsa-nagios-nrpe-config (62) unstable; urgency=low
692 * Add check_securitymirror by formorer.
694 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
696 dsa-nagios-nrpe-config (61) unstable; urgency=low
698 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
699 entry is in there. If it doesn't exist that's also good.
701 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
703 dsa-nagios-nrpe-config (60) unstable; urgency=low
705 * Add dsa-check-raid-areca.
707 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
709 dsa-nagios-nrpe-config (59) unstable; urgency=low
711 * apt-status-check: Ignore stderr during apt-get update.
713 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
715 dsa-nagios-nrpe-config (58) unstable; urgency=low
717 * Rename dsa-check-da-in-aliases to dsa-check-config.
718 * dsa-check-config: check if ldap.conf is configured correctly.
720 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
722 dsa-nagios-nrpe-config (57) unstable; urgency=low
724 * dsa-check-hpacucli: Do not inspect drives in detail when they are
725 listed as Failed in the overview already.
727 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
729 dsa-nagios-nrpe-config (56) unstable; urgency=low
731 * fix dsa-check-samhain.
732 sudo is not in $PATH.
734 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
736 dsa-nagios-nrpe-config (55) unstable; urgency=low
738 * And another one, weasel should sleep.
740 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
742 dsa-nagios-nrpe-config (54) unstable; urgency=low
744 * dsa-check-dabackup-server fixes.
746 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
748 dsa-nagios-nrpe-config (53) unstable; urgency=low
750 * Add dsa-check-dabackup-server.
752 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
754 dsa-nagios-nrpe-config (52) unstable; urgency=low
756 * The nagios _check_ package should probably not be the one that
757 depends on the stuff we want on most or all hosts, thus removing
758 dependency on samhain, which should probably get pulled in via
761 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
763 dsa-nagios-nrpe-config (51) unstable; urgency=low
765 * Add check for samhain.
767 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
769 dsa-nagios-nrpe-config (50) unstable; urgency=low
771 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
773 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
775 dsa-nagios-nrpe-config (49) unstable; urgency=low
777 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
779 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
781 dsa-nagios-nrpe-config (48) unstable; urgency=low
783 * Don't just print the sudoers lines to stdout, tell the admin to add them
786 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
788 dsa-nagios-nrpe-config (47) unstable; urgency=low
790 * dsa-check-hpacucli: Check transfer speed of disks.
792 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
794 dsa-nagios-nrpe-config (46) unstable; urgency=low
796 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
797 * Move script calls from cron.daily to cron.d @daily and @reboot.
798 * Introduce hourly runs for dsa-update-apt-status that happen if the system
799 changed in the meantime, that is if /var/lib/dpkg/status or
800 /var/cache/apt/pkgcache.bin are newer than the status file.
801 Also run if the status file does not exist, or if the last apt-get update
802 call failed, or if the last run was more than a day ago.
803 * No longer do @daily runs of dsa-update-apt-status
805 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
807 dsa-nagios-nrpe-config (45) unstable; urgency=low
809 * Add apt upgrades check.
811 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
813 dsa-nagios-nrpe-config (44) unstable; urgency=low
815 * Fix ssh-dss detection. It need not be at the start of a line
816 (think >from="1.2.3.4" ssh-dss< ...).
818 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
820 dsa-nagios-nrpe-config (43) unstable; urgency=low
824 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
826 dsa-nagios-nrpe-config (42) unstable; urgency=low
828 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
829 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
830 * Run weak-ssh-keys-check on install.
832 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
834 dsa-nagios-nrpe-config (41) unstable; urgency=low
836 * Add dsa-check-statusfile.
837 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
838 libberkeleydb-perl and dsa-ssh-weak-keys now.
839 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
841 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
843 dsa-nagios-nrpe-config (40) unstable; urgency=low
845 * Teach dsa-check-hpacucli about rebuilding.
847 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
849 dsa-nagios-nrpe-config (39) unstable; urgency=low
851 * Add dsa-check-hpacucli.
854 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
856 dsa-nagios-nrpe-config (38) unstable; urgency=low
858 * Try harder to find version string.
860 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
862 dsa-nagios-nrpe-config (37) unstable; urgency=low
864 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
865 * Depend on binutils for string(1).
867 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
869 dsa-nagios-nrpe-config (36) unstable; urgency=low
871 * Add dsa-check-running-kernel
873 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
875 dsa-nagios-nrpe-config (35) unstable; urgency=low
879 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
881 dsa-nagios-nrpe-config (34) unstable; urgency=low
883 * dsa-check-raid-3ware
885 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
887 dsa-nagios-nrpe-config (33) unstable; urgency=low
889 * Add dsa-check-raid-dac960
891 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
893 dsa-nagios-nrpe-config (32) unstable; urgency=low
895 * Add dsa-check-udldap-freshness.
897 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
899 dsa-nagios-nrpe-config (31) unstable; urgency=low
901 * dsa-check-dabackup: Use last time's log file if backup is currently running.
903 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
905 dsa-nagios-nrpe-config (30) unstable; urgency=low
907 * dsa-check-raid-sw: cleaner output.
909 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
911 dsa-nagios-nrpe-config (29) unstable; urgency=low
913 * dsa-check-dabackup: terser output.
915 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
917 dsa-nagios-nrpe-config (28) unstable; urgency=low
919 * dsa-check-dabackup: ignore .bak files in confdir.
921 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
923 dsa-nagios-nrpe-config (27) unstable; urgency=low
925 * Change OK text when da-backup not installed.
927 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
929 dsa-nagios-nrpe-config (26) unstable; urgency=low
931 * dsa-check-dabackup: Warn if installed but no backups configured.
933 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
935 dsa-nagios-nrpe-config (25) unstable; urgency=low
937 * Install dsa-check-dabackup
939 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
941 dsa-nagios-nrpe-config (24) unstable; urgency=low
943 * Check for dsa-check-backup sudoers entry
945 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
947 dsa-nagios-nrpe-config (23) unstable; urgency=low
949 * Add dsa-check-dabackup
951 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
953 dsa-nagios-nrpe-config (22) unstable; urgency=low
955 * Add a very easy dsa-check-da-in-aliases.
957 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
959 dsa-nagios-nrpe-config (21) unstable; urgency=low
961 * Add dsa-check-raid-sw.
963 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
965 dsa-nagios-nrpe-config (20) unstable; urgency=low
967 * Do away with a new changelog entry and version for every build of the
968 package - it floods us with useless commit mails - and just
969 increase the version to $TIMESTAMP in the build area.
971 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
973 dsa-nagios-nrpe-config (1) unstable; urgency=low
977 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200