1 dsa-nagios-checks (111) UNRELEASED; urgency=medium
4 * Rename dsa-check_puppet_agent -> dsa-check-puppet_agent
5 * dsa-check-dnssec-delegation: Net::DNS::RR::DNSKEY no longer has
6 an is_sep() method. Update.
7 * dsa-update-unowned-file-status: ignore autofs and nfs4
8 * dsa-check-backuppg: Do not print info level items (IGNORED, etc.)
10 * dsa-check-backuppg: Support per host and per cluster retention
14 * Set LWP::UserAgent timeout in dsa-check-mirrorsync
16 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:46:50 +0100
18 dsa-nagios-checks (110) unstable; urgency=medium
20 * dsa-check-timedatectl: handle n/a in timedatectl output for RTC.
21 * dsa-check-backuppg: warn if backups for a database configured in
22 dsa-check-backuppg.conf are missing entirely.
23 * dsa-check-file_age: support following symlinks and warning on empty files.
24 * dsa-check-file_age: support multiple files.
25 * dsa-check-running-kernel: meta package version check, also work on 4.x
27 * dsa-check_puppet_agent: add from Alexander Swen's github.
28 * dsa-check-memory: move from / to /checks in source (so now it should get
30 * dsa-wrap-nagios-check: add.
32 -- Peter Palfrader <weasel@debian.org> Mon, 20 Mar 2017 09:45:53 +0100
34 dsa-nagios-checks (109) unstable; urgency=medium
37 * dsa-check-dabackup: use old logfile if lockfile indicates da-backup still
39 * dsa-check-soas: on soa disagreement, list nameservers.
42 * dsa-check-libs: also ignore files that are open via normal file handles
46 * dsa-check-libs: accept -v as short for --verbose.
47 * dsa-check-libs: ignore deleted CWDs.
48 * dsa-check-drbd: Add --ok-no-devices option.
49 * dsa-check-backuppg: allow specifying which timeline we expect a database
51 * dsa-check-cert-expire-dir: add
52 * dsa-check-raid-3ware: modernize
53 * dsa-check-zone-rrsig-expiration-many: actually exit non-zero if there were
55 * dsa-check-zone-rrsig-expiration-many: stop waiting for the timeout after
56 the last zone checker finished.
57 * dsa-check-zone-rrsig-expiration-many: print which threads we are waiting
59 * dsa-check-zone-rrsig-expiration: Handle cases where a child and parent
60 domain share nameservers.
61 * dsa-check-zone-rrsig-expiration: Handle upper/lower case mismatch in
62 labels for NS responses.
63 * dsa-check-zone-rrsig-expiration: document -r and -s in help output.
64 * dsa-check-mirrorsync: support unix timestamps in tracefile
65 (for staticsync mirrors).
66 * dsa-check-zone-rrsig-expiration-many: support setting "delegated = no"
67 in zonefiles. This will skip it being checked.
68 * dsa-check-zone-rrsig-expiration-many: remove | (which starts performance
69 data) in detail output.
70 * dsa-check-zone-rrsig-expiration-many: sort zone details by state.
71 * dsa-check-zone-signature-all: add.
72 * dsa-check-timedatectl: add
73 * dsa-check-dabackup-server: replace /org/backup.debian.org with
74 /srv/backups/da-backup.
77 * dsa-update-unowned-file-status: ignore fdescfs, used for /dev/fd on
79 * dsa-update-unowned-file-status: avoid printing the apex of pruned
83 * dsa-check-hpacucli: accept 3.0Gbps as transfer speed for SATA
84 * Add dsa-check-hpssacli, replaces hpacucli for new hosts.
85 * dsa-check-hpssacli: accept 12.0Gbps as transfer speed for SAS
87 -- Peter Palfrader <weasel@debian.org> Mon, 23 Jan 2017 13:48:29 +0100
89 dsa-nagios-checks (108) unstable; urgency=medium
91 * dsa-check-stunnel-sanity: Fix variable name in output.
92 * dsa-check-dabackup: Fix regex as rsync now adds thousands separator on its
94 * dsa-check-config: check for DAD failures.
95 * dsa-check-config: retire ldap.conf check - we ship it with puppet
98 -- Peter Palfrader <weasel@debian.org> Sun, 31 May 2015 19:16:43 +0200
100 dsa-nagios-checks (107) unstable; urgency=medium
102 * Add dsa-check-stunnel-sanity.
104 -- Peter Palfrader <weasel@debian.org> Mon, 23 Mar 2015 13:32:18 +0100
106 dsa-nagios-checks (106) unstable; urgency=medium
108 * Depend on libyaml-syck-perl.
110 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 14:17:39 +0100
112 dsa-nagios-checks (105) unstable; urgency=medium
115 * dsa-check-dnssec-delegation: Ignore revoked DNSKEYs in zone.
116 * dsa-check-libs: add.
119 * dsa-check-backuppg: Ignore removed tmp files instead of crashing
121 -- Peter Palfrader <weasel@debian.org> Wed, 28 Jan 2015 00:10:25 +0100
123 dsa-nagios-checks (104) unstable; urgency=medium
125 * Fix iptables-save cronjob.
127 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 14:29:31 +0100
129 dsa-nagios-checks (103) unstable; urgency=medium
131 * dsa-update-apt-status: run apt-get update in a flock wrapper.
133 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:29:20 +0100
135 dsa-nagios-checks (102) unstable; urgency=medium
137 * dsa-check-entropy: unbreak script by removing non-ASCII characters.
139 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 12:04:38 +0100
141 dsa-nagios-checks (101) unstable; urgency=low
144 * dsa-check-zone-rrsig-expiration-many: add --debug option to pass through.
145 * dsa-check-zone-rrsig-expiration: Do not ask for RRSIG directly, instead
146 ask for SOA with dnssec data. Apparently some nameservers do give you the
147 RRSIG on the DS record instead of a referral (rcode0's for instance).
148 * dsa-check-hpasm: Support supplying a list of things for which failures are
150 * dsa-check-soas: do some queries without RD set.
151 * dsa-check-running-kernel: in cat_vmlinux(), only consider the first 5 hits
152 for the magic start sequence. This makes running times bearable on our
154 * dsa-check-config: check if existing ed25519 host keys are in ldap.
157 * Extend dsa-check-entropy output so Icinga2 can process performance
158 data (e.g. used by Graphite).
160 -- Peter Palfrader <weasel@debian.org> Sun, 07 Dec 2014 10:58:47 +0100
162 dsa-nagios-checks (100) unstable; urgency=low
165 * dsa-check-running-kernel: Check from all compression tokens.
166 * dsa-check-zone-rrsig-expiration-many: Initialize exit properly, in case
167 it does not get set later.
168 * dsa-check-running-kernel: fix kernel metapackage version regex
171 * dsa-check-packages: go critical if there are security updates.
174 * dsa-check-cert-expire: Make timers configurable.
176 [ George Kargiotakis ]
177 * dsa-check-hpacucli: Add Parity check for logical drives.
180 * dsa-check-mq-connection: Catch case when host has never connected
182 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2014 12:33:55 +0200
184 dsa-nagios-checks (99) unstable; urgency=low
186 * dsa-check-hpacucli: SATA drives have different transfer speed.
187 * dsa-check-edac: add.
189 -- Peter Palfrader <weasel@debian.org> Mon, 31 Mar 2014 10:45:57 +0200
191 dsa-nagios-checks (98) unstable; urgency=low
193 * Add dsa-check-dchroots-current.
195 -- Peter Palfrader <weasel@debian.org> Fri, 28 Feb 2014 19:40:16 +0100
197 dsa-nagios-checks (97) unstable; urgency=low
200 * Update dsa-check-mq-connection to actually work
203 * dsa-check-backuppg: allow BASE backup filenames without the WAL ID.
204 * dsa-check-config: Update for new TLS_CACERT config.
206 -- Peter Palfrader <weasel@debian.org> Mon, 27 Jan 2014 22:29:15 +0100
208 dsa-nagios-checks (96) unstable; urgency=low
211 * dsa-check-zone-rrsig-expiration, dsa-check-zone-rrsig-expiration-many:
212 Allow supplying the nameservers to start recursion at (per zone).
213 This is useful for reverse zones of RFC1918 space.
214 * dsa-check-bacula: exit status fix.
215 * dsa-check-hpacucli:
216 - support filtering controllers.
217 - add an option to accept no-controllers as an OK state.
218 * remove weak keys check
219 * dsa-check-dnssec-delegation
220 - handle zones with no keys that have the SEP bit.
221 - warn on all domains where parent has a non-empty DS bit that does
222 not match ours, even if we did not expect it to have one at all.
223 * dsa-check-zone-rrsig-expiration-many:
224 - expect dnssec by default now.
225 * dsa-check-zone-rrsig-expiration:
226 - in the OK message, clarify we only check sigs at the zone apex.
227 * dsa-check-dnssec-delegation:
228 - accept any ds/dnskey combination whose intersection is not empty.
229 (previously we required them to match exactly.)
232 * dsa-check-mq-connection:
233 Check that all messages have been consumed and that there is an active
235 * kill some lintian warnings
237 -- Peter Palfrader <weasel@debian.org> Tue, 23 Apr 2013 20:12:09 +0200
239 dsa-nagios-checks (95) unstable; urgency=low
241 * dsa-check-running-kernel: Try to fix zcat kernel case.
243 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 17:40:49 +0200
245 dsa-nagios-checks (94) unstable; urgency=low
248 * Start new changelog
251 * dsa-check-packages: work better with weird multi-arch cases.
252 * dsa-check-hpacucli: print errors to stdout so that nrpe can read it.
253 * dsa-check-hpacucli: new hpacucli changed case of transfer speed. Upcase
254 all before comparing.
257 * Changed according to gitlog without corresponding debian/changelog entry:
259 - dsa-check-filesystems
260 - dsa-check-running-kernel
262 -- Peter Palfrader <weasel@debian.org> Tue, 16 Apr 2013 11:32:23 +0200
264 dsa-nagios-checks (93) unstable; urgency=low
267 * dsa-update-unowned-file-status: Use -fstype proc rather than hard
268 coding /proc in order to match procfs in chroots too.
269 * dsa-update-apt-status: send the cron output to syslog rather than email
272 * dsa-check-msa-eventlog: Add --verbose switch to show info level
274 * add dsa-check-crl-expire.
275 * rename checks/dsa-check-backuppg.conf.sample ->
276 etc/dsa-check-backuppg.conf.sample.
277 * dsa-check-running-kernel: Fix finding meta package for 3.x kernels.
278 * dsa-check-packages: Ignore :$arch in package names of dpkg -l output,
279 at least for the "primary" arch. Does not really handle multi-arch
280 packages, but it makes things work again for now.
281 * dsa-check-packages: A better multi-arch capable version.
282 * dsa-check-backuppg: Ignore .dotfiles and *.old in rootdir.
283 * dsa-check-hpacucli: Add --no-battery to ignore battery/capacitor failures
285 * dsa-check-hpasm: Typo fix.
288 * dsa-check-udldap-freshness: check new last_update.trace if it
289 exists instead of /var/lib/misc/thishost/passwd.{db,tdb}.
290 * dsa-check-statusfile: Complain if there is no extended information
291 * add dsa-check-filesystems (only checks ext at the moment)
294 * dsa-check-soas: Add --no-soa-ns flag.
296 [ Martin Zobel-Helas ]
297 * Add dsa-check-drbd, taken from http://code.google.com/p/ganeti/wiki/DrbdDevicesMonitoring
299 -- Stephen Gran <sgran@debian.org> Sat, 29 Dec 2012 12:05:57 +0000
301 dsa-nagios-checks (92.1) unstable; urgency=low
303 * Fix dsa-update-unowned-file-status cronjob entry more.
305 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 13:30:08 +0100
307 dsa-nagios-checks (92) unstable; urgency=low
309 * Fix dsa-update-unowned-file-status cronjob entry.
311 -- Peter Palfrader <weasel@debian.org> Sat, 25 Feb 2012 12:40:00 +0100
313 dsa-nagios-checks (91) unstable; urgency=low
316 * dsa-check-zone-rrsig-expiration: configurable packet size, and change
318 * dsa-check-zone-rrsig-expiration-many: run checks in parallel and
319 properly timeout long checks.
320 * dsa-nagios-checks: add perfdata (Alexander Reichle-Schmehl).
321 * dsa-check-statusfile: change shebang from ruby to python and fix syntax
323 * dsa-check-soas: support supplying an IP address for additional nameservers
327 * Make the unowned files check skip /proc.
328 * Limit the number of unowned files we register in the state file to 40.
331 * Rewrite unowned files check into something that writes proper
332 nagios status files and behaves in a nice and sane way.
334 -- Peter Palfrader <weasel@debian.org> Fri, 24 Feb 2012 18:12:36 +0100
336 dsa-nagios-checks (90) unstable; urgency=low
340 - document watermark default
341 - fix off-by-one in output
342 * dsa-check-backuppg:
343 - ignore regular files in pg backup's root directory if they are still
347 * dsa-check-log-age-loghost
348 - allow minus (-) in hostnames.
351 * Add event_handler to restart services
352 * Add dsa-check-raid-megactl for awkward PeRC controllers
354 [ Martin Zobel-Helas ]
355 * add rudimentary check for unowned files
357 -- Martin Zobel-Helas <zobel@debian.org> Mon, 02 Jan 2012 16:46:33 +0100
359 dsa-nagios-checks (89) unstable; urgency=low
361 * dsa-check-running-kernel: kFreeBSD support.
362 * Add dsa-check-entropy.
364 -- Peter Palfrader <weasel@debian.org> Mon, 28 Mar 2011 14:47:11 +0200
366 dsa-nagios-checks (88) unstable; urgency=low
369 - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
370 to '3.0GBPS, Unknown'.
371 - accept 6.0Gbps for SAS disks.
372 - add --ignore-transfer-speed option.
373 - ignore the line for unassigned disks (patch by Emmanuel Lacour).
375 * Add dsa-check-hpacucli-enclosure.
376 * dsa-check-running-kernel:
377 - check if 'strings' is installed and complain nicely if it isn't instead
378 of falling over. [Uli Martens]
379 - Make the check work with Ubuntu's kernel names (Alexander
381 * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
382 * Add dsa-check-port-closed.
383 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
385 * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
386 that do not say 'Yes' in the present-line.
387 * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
388 in addition to /var/lib/misc/thishost/passwd.tdb.
389 * Add dsa-check-resolver.
391 -- Peter Palfrader <weasel@debian.org> Tue, 01 Mar 2011 18:10:25 +0100
393 dsa-nagios-checks (87) unstable; urgency=low
396 * dsa-check-running-kernel:
397 - Teach dsa-check-running-kernel about LZMA compressed kernel images.
398 - Handle cases where a meta package depends on a list of packages
399 (such as image and module package).
402 * dsa-check-apt-status: it's not an error to exit when we don't need to run
403 * Update check-hpacucli to deal with dual domain and 6GBPS SAS
406 * Add checks/dsa-check-backuppg.
407 * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
408 * Add dsa-check-log-age-loghost.
409 * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
410 * dsa-check-dnssec-delegation: allow multiple dirs to be checked.
412 [ Martin Zobel-Helas ]
413 * Add checks/dsa-checks-file.
415 -- Martin Zobel-Helas <zobel@debian.org> Fri, 23 Jul 2010 19:26:00 +0200
417 dsa-nagios-checks (86) unstable; urgency=low
420 * Add dsa-check-raid-megaraid.
421 * make samhain check go WARN, not CRITICAL.
424 * Add dsa-check-uptime
426 -- Stephen Gran <sgran@debian.org> Fri, 02 Apr 2010 16:55:51 +0100
428 dsa-nagios-checks (85) unstable; urgency=low
431 * dsa-update-apt-status: Fix bashism by making it a bash script
433 * dsa-check-hpasm: Not all things where a temperature can be measured
434 might be installed (e.g. a second CPU). Don't do numeric computations
435 on a "-" instead of numbers then.
436 * dsa-check-hpasm: Support a --ps-no-redundant option. If supplied
437 then non-redundant power supply will not be a warning state.
438 * dsa-check-hpasm: Support a --fan-no-redundant option. If supplied
439 then non-redundant fans will not be a warning state.
440 * Add dsa-check-msa-eventlog.
441 * add dsa-check-zone-rrsig-expiration (therefore recommend
442 libnet-dns-sec-perl).
443 * add dsa-check-zone-rrsig-expiration-many.
444 * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
445 controller with a battery: "ZMM Optimal" is the way it says "optimal".
446 * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
447 /root/.ssh/authorized_keys.
448 * add dsa-check-dnssec-delegation.
449 * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
451 * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
452 and /var/lib/misc/userkeys, not just the first. (Also doesn't
453 blow up if a file is empty.)
455 -- Peter Palfrader <weasel@debian.org> Mon, 22 Feb 2010 10:32:51 +0100
457 dsa-nagios-checks (84) unstable; urgency=low
460 * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
461 better (do not reference undefined values, properly exit with UNKNOWN).
462 * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
463 * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
464 wrapper) in the authorized_keys files. Such entries accept all
465 backup-manager entries for their host, but they do not require one.
466 As such we can just put all the hosts in the authkeys file regardless of
467 whether we actually have backups configured for them.
470 * New check: dsa-check-hpasm
471 * Release for new check
473 -- Stephen Gran <sgran@debian.org> Mon, 30 Nov 2009 22:10:46 +0000
475 dsa-nagios-checks (83) stable; urgency=low
477 * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
480 -- Peter Palfrader <weasel@debian.org> Fri, 02 Oct 2009 20:22:42 +0200
482 dsa-nagios-checks (82) stable; urgency=low
484 * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.
486 -- Peter Palfrader <weasel@debian.org> Thu, 20 Aug 2009 13:48:43 +0200
488 dsa-nagios-checks (81) stable; urgency=low
490 * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
491 it found degraded raid arrays. Handle this correctly.
493 -- Peter Palfrader <weasel@debian.org> Fri, 07 Aug 2009 12:17:22 +0200
495 dsa-nagios-checks (80) stable; urgency=low
497 * dsa-check-packages: In the short overview say "obs/loc" instead of
498 just "obs" for local or obsolete packages.
499 * dsa-update-apt-status: Introduce -f switch.
501 -- Peter Palfrader <weasel@debian.org> Wed, 22 Jul 2009 11:34:15 +0200
503 dsa-nagios-checks (79) stable; urgency=low
505 * dsa-check-running-kernel: Correctly check *candidate* version
506 of kernel metapackage for unsatisfied depends, not the latest
507 metapackage (which might come from a non-default source).
509 -- Peter Palfrader <weasel@debian.org> Fri, 03 Jul 2009 20:07:13 +0200
511 dsa-nagios-checks (78) stable; urgency=low
513 * dsa-check-raid-aacraid: tmp directory in /tmp,
514 * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
517 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:36:39 +0200
519 dsa-nagios-checks (77) stable; urgency=low
521 * Add checks/dsa-check-raid-aacraid.
523 -- Peter Palfrader <weasel@debian.org> Sun, 28 Jun 2009 16:31:13 +0200
525 dsa-nagios-checks (76) stable; urgency=low
527 * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.
529 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:09:54 +0200
531 dsa-nagios-checks (75) stable; urgency=low
533 * dsa-check-packages: Support ignore directories.
534 * debian/control: Fix dup word in description.
536 -- Peter Palfrader <weasel@debian.org> Sun, 14 Jun 2009 12:01:00 +0200
538 dsa-nagios-checks (74) stable; urgency=low
542 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 22:12:34 +0100
544 dsa-nagios-checks (73) stable; urgency=low
546 * Er, new test needs to be executable
548 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 21:17:27 +0100
550 dsa-nagios-checks (72) stable; urgency=low
552 * Generalize puppet file age check and remove old one
554 -- Stephen Gran <sgran@debian.org> Thu, 21 May 2009 20:52:12 +0100
556 dsa-nagios-checks (71) stable; urgency=low
558 * Update the kernel check to not complain when we can't trace back to a meta
559 package name - this generally indicates a custom kernel that we're running
562 -- Stephen Gran <sgran@debian.org> Tue, 19 May 2009 22:20:44 +0100
564 dsa-nagios-checks (70) XXstable; urgency=low
566 * No longer check nrpe config in postinst - puppet fixes it for us anyway.
567 * Only run weak keys check if there is no prior weak key status.
568 * dsa-check-hpacucli: Slots need not be all numeric.
569 * dsa-check-hpacucli: Spares can be active.
570 * dsa-check-hpacucli: And SAS can be E too.
572 -- Peter Palfrader <weasel@debian.org> Sat, 18 Apr 2009 01:41:32 +0200
574 dsa-nagios-checks (69) unstable; urgency=low
576 * Rename to dsa-nagios-checks.
577 * Replaces/Conflicts dsa-nagios-nrpe-config.
578 * Update description.
579 * No longer install nrpe_dsa.cfg.
580 * Move files into specific directories in source.
582 -- Peter Palfrader <weasel@debian.org> Tue, 31 Mar 2009 19:19:14 +0200
584 dsa-nagios-nrpe-config (68) unstable; urgency=low
586 * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
589 -- Peter Palfrader <weasel@debian.org> Wed, 11 Feb 2009 21:59:55 +0100
591 dsa-nagios-nrpe-config (67) unstable; urgency=low
593 * Minor tweak to dsa-check-packages: reorder ok and obs(ign), change
594 long text for obs(ign).
596 -- Peter Palfrader <weasel@debian.org> Wed, 4 Feb 2009 09:40:26 +0000
598 dsa-nagios-nrpe-config (66) unstable; urgency=low
600 * Add dsa-check-packages
601 * Make apt-status-check use dsa-check-packages.
602 * And install obsolete-packages-ignore into etc/nagios.
604 -- Peter Palfrader <weasel@debian.org> Tue, 03 Feb 2009 20:39:01 +0100
606 dsa-nagios-nrpe-config (65) unstable; urgency=low
610 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 23:11:19 +0000
612 dsa-nagios-nrpe-config (64) unstable; urgency=low
614 * dsa-check-mirrorsync: make it work in embedded perl again.
616 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:59:06 +0000
618 dsa-nagios-nrpe-config (63) unstable; urgency=low
620 * dsa-check-mirrorsync: print help if additional args are given (we don't
623 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 22:14:44 +0000
625 dsa-nagios-nrpe-config (62) unstable; urgency=low
627 * Add check_securitymirror by formorer.
629 -- Peter Palfrader <weasel@debian.org> Tue, 23 Dec 2008 21:59:47 +0000
631 dsa-nagios-nrpe-config (61) unstable; urgency=low
633 * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
634 entry is in there. If it doesn't exist that's also good.
636 -- Peter Palfrader <weasel@debian.org> Mon, 06 Oct 2008 14:08:30 +0200
638 dsa-nagios-nrpe-config (60) unstable; urgency=low
640 * Add dsa-check-raid-areca.
642 -- Peter Palfrader <weasel@debian.org> Wed, 01 Oct 2008 16:23:33 +0200
644 dsa-nagios-nrpe-config (59) unstable; urgency=low
646 * apt-status-check: Ignore stderr during apt-get update.
648 -- Peter Palfrader <weasel@debian.org> Tue, 30 Sep 2008 19:58:36 +0200
650 dsa-nagios-nrpe-config (58) unstable; urgency=low
652 * Rename dsa-check-da-in-aliases to dsa-check-config.
653 * dsa-check-config: check if ldap.conf is configured correctly.
655 -- Peter Palfrader <weasel@debian.org> Fri, 26 Sep 2008 15:02:53 +0200
657 dsa-nagios-nrpe-config (57) unstable; urgency=low
659 * dsa-check-hpacucli: Do not inspect drives in detail when they are
660 listed as Failed in the overview already.
662 -- Peter Palfrader <weasel@debian.org> Wed, 24 Sep 2008 16:02:31 +0200
664 dsa-nagios-nrpe-config (56) unstable; urgency=low
666 * fix dsa-check-samhain.
667 sudo is not in $PATH.
669 -- Martin Zobel-Helas <zobel@debian.org> Mon, 22 Sep 2008 06:45:19 +0000
671 dsa-nagios-nrpe-config (55) unstable; urgency=low
673 * And another one, weasel should sleep.
675 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:29:15 +0000
677 dsa-nagios-nrpe-config (54) unstable; urgency=low
679 * dsa-check-dabackup-server fixes.
681 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:27:41 +0000
683 dsa-nagios-nrpe-config (53) unstable; urgency=low
685 * Add dsa-check-dabackup-server.
687 -- Peter Palfrader <weasel@debian.org> Mon, 22 Sep 2008 00:19:28 +0000
689 dsa-nagios-nrpe-config (52) unstable; urgency=low
691 * The nagios _check_ package should probably not be the one that
692 depends on the stuff we want on most or all hosts, thus removing
693 dependency on samhain, which should probably get pulled in via
696 -- Peter Palfrader <weasel@debian.org> Sun, 21 Sep 2008 23:41:01 +0000
698 dsa-nagios-nrpe-config (51) unstable; urgency=low
700 * Add check for samhain.
702 -- Martin Zobel-Helas <zobel@samosa.debian.org> Sat, 20 Sep 2008 07:29:23 +0000
704 dsa-nagios-nrpe-config (50) unstable; urgency=low
706 * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.
708 -- Peter Palfrader <weasel@debian.org> Sat, 09 Aug 2008 11:39:55 +0200
710 dsa-nagios-nrpe-config (49) unstable; urgency=low
712 * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)
714 -- Peter Palfrader <weasel@debian.org> Wed, 23 Jul 2008 00:56:54 +0200
716 dsa-nagios-nrpe-config (48) unstable; urgency=low
718 * Don't just print the sudoers lines to stdout, tell the admin to add them
721 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 21:25:56 +0000
723 dsa-nagios-nrpe-config (47) unstable; urgency=low
725 * dsa-check-hpacucli: Check transfer speed of disks.
727 -- Peter Palfrader <weasel@debian.org> Tue, 22 Jul 2008 23:14:50 +0200
729 dsa-nagios-nrpe-config (46) unstable; urgency=low
731 * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
732 * Move script calls from cron.daily to cron.d @daily and @reboot.
733 * Introduce hourly runs for dsa-update-apt-status that happen if the system
734 changed in the meantime, that is if /var/lib/dpkg/status or
735 /var/cache/apt/pkgcache.bin are newer than the status file.
736 Also run if the status file does not exist, or if the last apt-get update
737 call failed, or if the last run was more than a day ago.
738 * No longer do @daily runs of dsa-update-apt-status
740 -- Peter Palfrader <weasel@debian.org> Sun, 06 Jul 2008 11:51:27 +0200
742 dsa-nagios-nrpe-config (45) unstable; urgency=low
744 * Add apt upgrades check.
746 -- Peter Palfrader <weasel@debian.org> Tue, 20 May 2008 22:01:07 +0000
748 dsa-nagios-nrpe-config (44) unstable; urgency=low
750 * Fix ssh-dss detection. It need not be at the start of a line
751 (think >from="1.2.3.4" ssh-dss< ...).
753 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:34:23 +0000
755 dsa-nagios-nrpe-config (43) unstable; urgency=low
759 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:19:10 +0000
761 dsa-nagios-nrpe-config (42) unstable; urgency=low
763 * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
764 * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
765 * Run weak-ssh-keys-check on install.
767 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 14:05:10 +0000
769 dsa-nagios-nrpe-config (41) unstable; urgency=low
771 * Add dsa-check-statusfile.
772 * Add weak-ssh-keys-check to be run from cron.daily. Depend on
773 libberkeleydb-perl and dsa-ssh-weak-keys now.
774 * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.
776 -- Peter Palfrader <weasel@debian.org> Mon, 19 May 2008 15:55:43 +0200
778 dsa-nagios-nrpe-config (40) unstable; urgency=low
780 * Teach dsa-check-hpacucli about rebuilding.
782 -- Peter Palfrader <weasel@debian.org> Fri, 9 May 2008 12:55:07 +0000
784 dsa-nagios-nrpe-config (39) unstable; urgency=low
786 * Add dsa-check-hpacucli.
789 -- Peter Palfrader <weasel@debian.org> Wed, 7 May 2008 19:54:55 +0000
791 dsa-nagios-nrpe-config (38) unstable; urgency=low
793 * Try harder to find version string.
795 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:48:42 +0000
797 dsa-nagios-nrpe-config (37) unstable; urgency=low
799 * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
800 * Depend on binutils for string(1).
802 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:41:13 +0000
804 dsa-nagios-nrpe-config (36) unstable; urgency=low
806 * Add dsa-check-running-kernel
808 -- Peter Palfrader <weasel@debian.org> Mon, 5 May 2008 17:11:54 +0000
810 dsa-nagios-nrpe-config (35) unstable; urgency=low
814 -- Peter Palfrader <weasel@debian.org> Tue, 29 Apr 2008 12:57:50 +0000
816 dsa-nagios-nrpe-config (34) unstable; urgency=low
818 * dsa-check-raid-3ware
820 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:37:47 +0000
822 dsa-nagios-nrpe-config (33) unstable; urgency=low
824 * Add dsa-check-raid-dac960
826 -- Peter Palfrader <weasel@debian.org> Thu, 24 Apr 2008 19:20:57 +0000
828 dsa-nagios-nrpe-config (32) unstable; urgency=low
830 * Add dsa-check-udldap-freshness.
832 -- Peter Palfrader <weasel@debian.org> Wed, 16 Apr 2008 07:39:21 -0400
834 dsa-nagios-nrpe-config (31) unstable; urgency=low
836 * dsa-check-dabackup: Use last time's log file if backup is currently running.
838 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:37:54 -0400
840 dsa-nagios-nrpe-config (30) unstable; urgency=low
842 * dsa-check-raid-sw: cleaner output.
844 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 17:05:17 -0400
846 dsa-nagios-nrpe-config (29) unstable; urgency=low
848 * dsa-check-dabackup: terser output.
850 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 13:09:07 -0400
852 dsa-nagios-nrpe-config (28) unstable; urgency=low
854 * dsa-check-dabackup: ignore .bak files in confdir.
856 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:23:25 -0400
858 dsa-nagios-nrpe-config (27) unstable; urgency=low
860 * Change OK text when da-backup not installed.
862 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:19:00 -0400
864 dsa-nagios-nrpe-config (26) unstable; urgency=low
866 * dsa-check-dabackup: Warn if installed but no backups configured.
868 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:13:30 -0400
870 dsa-nagios-nrpe-config (25) unstable; urgency=low
872 * Install dsa-check-dabackup
874 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 12:05:11 -0400
876 dsa-nagios-nrpe-config (24) unstable; urgency=low
878 * Check for dsa-check-backup sudoers entry
880 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 11:48:48 -0400
882 dsa-nagios-nrpe-config (23) unstable; urgency=low
884 * Add dsa-check-dabackup
886 -- Peter Palfrader <weasel@debian.org> Mon, 14 Apr 2008 10:56:32 -0400
888 dsa-nagios-nrpe-config (22) unstable; urgency=low
890 * Add a very easy dsa-check-da-in-aliases.
892 -- Peter Palfrader <weasel@debian.org> Fri, 11 Apr 2008 10:25:54 -0400
894 dsa-nagios-nrpe-config (21) unstable; urgency=low
896 * Add dsa-check-raid-sw.
898 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 06:22:44 -0400
900 dsa-nagios-nrpe-config (20) unstable; urgency=low
902 * Do away with a new changelog entry and version for every build of the
903 package - it floods us with useless commit mails - and just
904 increase the version to $TIMESTAMP in the build area.
906 -- Peter Palfrader <weasel@debian.org> Thu, 3 Apr 2008 05:38:27 -0400
908 dsa-nagios-nrpe-config (1) unstable; urgency=low
912 -- Peter Palfrader <weasel@debian.org> Wed, 2 Apr 2008 22:24:12 +0200