mirror/dsa-puppet.git
7 years agonfs server on senfter
Julien Cristau [Sat, 28 May 2016 13:20:39 +0000 (15:20 +0200)]
nfs server on senfter

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agoImprove ftp.debian-ports.org redirections (a bit more)
Aurelien Jarno [Sat, 28 May 2016 12:22:39 +0000 (14:22 +0200)]
Improve ftp.debian-ports.org redirections (a bit more)

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAdd buildd.debian-ports.org and debian-ports.org virtual domains
Aurelien Jarno [Fri, 27 May 2016 22:46:13 +0000 (00:46 +0200)]
Add buildd.debian-ports.org and debian-ports.org virtual domains

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoOne more ftp.debian-ports.org redirection
Aurelien Jarno [Fri, 27 May 2016 20:42:35 +0000 (22:42 +0200)]
One more ftp.debian-ports.org redirection

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoImprove ftp.debian-ports.org redirections (second try)
Aurelien Jarno [Fri, 27 May 2016 17:18:12 +0000 (19:18 +0200)]
Improve ftp.debian-ports.org redirections (second try)

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoImprove ftp.debian-ports.org redirections
Aurelien Jarno [Fri, 27 May 2016 16:56:28 +0000 (18:56 +0200)]
Improve ftp.debian-ports.org redirections

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agosudoers: allow mini-dak to trigger /home/archvsync/signal_ports-cd
Aurelien Jarno [Fri, 27 May 2016 16:17:09 +0000 (18:17 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports-cd

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAdd redirections from old debian-ports.org URLs to the new ones
Aurelien Jarno [Fri, 27 May 2016 13:55:01 +0000 (15:55 +0200)]
Add redirections from old debian-ports.org URLs to the new ones

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAdd /debian-ports-cd alias to ftp.ports.debian.org
Peter Palfrader [Fri, 27 May 2016 12:43:16 +0000 (14:43 +0200)]
Add /debian-ports-cd alias to ftp.ports.debian.org

7 years agosudoers: allow mini-dak to trigger /home/archvsync/signal_ports
Aurelien Jarno [Fri, 27 May 2016 10:07:09 +0000 (12:07 +0200)]
sudoers: allow mini-dak to trigger /home/archvsync/signal_ports

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoignore nonreadable for debian-ports
Peter Palfrader [Fri, 27 May 2016 08:58:34 +0000 (10:58 +0200)]
ignore nonreadable for debian-ports

7 years agoMove ports upload directory to a different directory
Aurelien Jarno [Thu, 26 May 2016 23:55:29 +0000 (01:55 +0200)]
Move ports upload directory to a different directory

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAvoid double redirection for www.ports.debian.org
Aurelien Jarno [Thu, 26 May 2016 23:41:20 +0000 (01:41 +0200)]
Avoid double redirection for www.ports.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoFix stupid copy&paste in previous commit
Aurelien Jarno [Thu, 26 May 2016 23:37:33 +0000 (01:37 +0200)]
Fix stupid copy&paste in previous commit

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoHTTPS for www.ports.debian.org
Aurelien Jarno [Thu, 26 May 2016 23:32:44 +0000 (01:32 +0200)]
HTTPS for www.ports.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoDrop wheezy compatibility code in static-vhosts-simple
Aurelien Jarno [Thu, 26 May 2016 23:28:05 +0000 (01:28 +0200)]
Drop wheezy compatibility code in static-vhosts-simple

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAdd ftp on ports-master for incoming
Aurelien Jarno [Thu, 26 May 2016 22:52:29 +0000 (00:52 +0200)]
Add ftp on ports-master for incoming

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoAdd more -ports stuff
Peter Palfrader [Thu, 26 May 2016 20:34:32 +0000 (22:34 +0200)]
Add more -ports stuff

7 years agoports mirrors
Peter Palfrader [Thu, 26 May 2016 15:53:01 +0000 (17:53 +0200)]
ports mirrors

7 years agoAdd incoming.port.d.o static vhost
Aurelien Jarno [Thu, 26 May 2016 13:00:14 +0000 (15:00 +0200)]
Add incoming.port.d.o static vhost

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoFix incoming.ports.d.o sudo entry
Aurelien Jarno [Thu, 26 May 2016 12:42:36 +0000 (14:42 +0200)]
Fix incoming.ports.d.o sudo entry

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agoadd incoming.ports.d.o static component
Aurelien Jarno [Thu, 26 May 2016 11:23:26 +0000 (13:23 +0200)]
add incoming.ports.d.o static component

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agouse a different secrets file
Peter Palfrader [Thu, 26 May 2016 11:01:29 +0000 (13:01 +0200)]
use a different secrets file

7 years agoAdd a ports-master role
Peter Palfrader [Thu, 26 May 2016 10:49:36 +0000 (12:49 +0200)]
Add a ports-master role

7 years agoRedirect ports.d.o to www.ports.d.o
Aurelien Jarno [Thu, 26 May 2016 10:36:04 +0000 (12:36 +0200)]
Redirect ports.d.o to www.ports.d.o

Currently we have no vhost entry for ports.d.o, so it redirects to
www.d.o.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agorespighi is a static source
Julien Cristau [Thu, 26 May 2016 10:14:58 +0000 (12:14 +0200)]
respighi is a static source

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agoAdd ports-master.debian.org virtual domain
Aurelien Jarno [Thu, 26 May 2016 10:09:00 +0000 (12:09 +0200)]
Add ports-master.debian.org virtual domain

7 years agodebian-release group can update release.d.o static component
Julien Cristau [Thu, 26 May 2016 09:47:50 +0000 (11:47 +0200)]
debian-release group can update release.d.o static component

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agoadd release.d.o static component
Julien Cristau [Thu, 26 May 2016 09:45:08 +0000 (11:45 +0200)]
add release.d.o static component

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agorespighi needs access to projectb on bmdb1
Julien Cristau [Thu, 26 May 2016 09:17:57 +0000 (11:17 +0200)]
respighi needs access to projectb on bmdb1

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agoDrop redirects to a host we never created
Aurelien Jarno [Thu, 26 May 2016 09:07:15 +0000 (11:07 +0200)]
Drop redirects to a host we never created

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
7 years agorespighi autofs/nfs
Peter Palfrader [Wed, 25 May 2016 22:50:01 +0000 (00:50 +0200)]
respighi autofs/nfs

7 years agoAdd respighi
Julien Cristau [Wed, 25 May 2016 21:56:36 +0000 (23:56 +0200)]
Add respighi

7 years agoHTTPS for backports.d.o
Julien Cristau [Wed, 25 May 2016 12:02:53 +0000 (14:02 +0200)]
HTTPS for backports.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agobackports.d.o ssl cert for static mirrors
Julien Cristau [Wed, 25 May 2016 11:08:43 +0000 (13:08 +0200)]
backports.d.o ssl cert for static mirrors

Signed-off-by: Julien Cristau <jcristau@debian.org>
7 years agoFix syntax error
Tollef Fog Heen [Sun, 15 May 2016 08:01:39 +0000 (10:01 +0200)]
Fix syntax error

8 years agoUse sysconfig.get_config_var(SIZEOF_TIME_T) since that is what we actually care about
Tollef Fog Heen [Thu, 12 May 2016 14:00:18 +0000 (16:00 +0200)]
Use sysconfig.get_config_var(SIZEOF_TIME_T) since that is what we actually care about

8 years agomail-big-homedirs: Work even when we cannot read /etc/dsa/pubsub.conf
Peter Palfrader [Thu, 12 May 2016 13:51:37 +0000 (15:51 +0200)]
mail-big-homedirs: Work even when we cannot read /etc/dsa/pubsub.conf

8 years agomail-big-homedirs: Fix architecture guessing (re: RT#6221)
Peter Palfrader [Thu, 12 May 2016 13:44:47 +0000 (15:44 +0200)]
mail-big-homedirs: Fix architecture guessing (re: RT#6221)

8 years agokeyring.d.o cert on keyring service
Peter Palfrader [Wed, 11 May 2016 20:34:08 +0000 (22:34 +0200)]
keyring.d.o cert on keyring service

8 years agoAlways create mips64el chroot on mipsel buildds
Aurelien Jarno [Thu, 5 May 2016 23:02:24 +0000 (01:02 +0200)]
Always create mips64el chroot on mipsel buildds

All our mipsel build daemons are now capable of running mips64el
binaries. In addition we have mips64el capables build daemons which
are not using a Loongson 3 CPU.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoAdd mipsel-aql-03.debian.org
Aurelien Jarno [Thu, 5 May 2016 22:40:09 +0000 (00:40 +0200)]
Add mipsel-aql-03.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoupdate zumbi email address
Héctor Orón Martínez [Mon, 2 May 2016 19:19:12 +0000 (21:19 +0200)]
update zumbi email address

Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
8 years agoDisable security.d.o repo for wheezy hosts
Julien Cristau [Fri, 29 Apr 2016 15:08:05 +0000 (17:08 +0200)]
Disable security.d.o repo for wheezy hosts

It's been repurposed for LTS, which doesn't carry ia64/sparc.

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoadd httpredir-bm-01-srv wwid
Julien Cristau [Thu, 28 Apr 2016 00:13:18 +0000 (02:13 +0200)]
add httpredir-bm-01-srv wwid

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agonagios: add tivsm-apicit and tivsm-bacit to sibelius package ignore list
Julien Cristau [Wed, 27 Apr 2016 23:20:26 +0000 (01:20 +0200)]
nagios: add tivsm-apicit and tivsm-bacit to sibelius package ignore list

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoReplace the deb.d.o RedirectPermanent with plain Redirects
Peter Palfrader [Mon, 25 Apr 2016 15:36:10 +0000 (17:36 +0200)]
Replace the deb.d.o RedirectPermanent with plain Redirects

8 years agobuildd: fix sbuild.conf on wheezy harder
Julien Cristau [Sun, 24 Apr 2016 20:13:14 +0000 (22:13 +0200)]
buildd: fix sbuild.conf on wheezy harder

8 years agoAdd porta
Aurelien Jarno [Sun, 24 Apr 2016 15:44:32 +0000 (17:44 +0200)]
Add porta

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agobuildd: ship a different sbuild.conf for wheezy hosts
Aurelien Jarno [Sat, 23 Apr 2016 17:47:12 +0000 (19:47 +0200)]
buildd: ship a different sbuild.conf for wheezy hosts

Otherwise the wheezy sbuild version chokes on the aspcud_criteria
configuration variable.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoFix a typo in previous commit
Aurelien Jarno [Sat, 23 Apr 2016 13:15:59 +0000 (15:15 +0200)]
Fix a typo in previous commit

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agobuildd: provide sbuild.conf with ASPCUD criteria
Aurelien Jarno [Sat, 23 Apr 2016 12:05:40 +0000 (14:05 +0200)]
buildd: provide sbuild.conf with ASPCUD criteria

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agobuildds: don't add dm_snapshot to /etc/modules
Aurelien Jarno [Fri, 22 Apr 2016 18:25:28 +0000 (20:25 +0200)]
buildds: don't add dm_snapshot to /etc/modules

build daemons do not use LVM for the chroots anymore, therefore we don't
need to add dm_snapshot to /etc/modules.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoAdd debian.nl
Julien Cristau [Fri, 22 Apr 2016 12:08:20 +0000 (14:08 +0200)]
Add debian.nl

8 years agotlsa record for gobby (port 6523)
Julien Cristau [Wed, 20 Apr 2016 14:54:23 +0000 (16:54 +0200)]
tlsa record for gobby (port 6523)

8 years agoSwitch gobby.debian.org ssl cert to letsencrypt
Julien Cristau [Wed, 20 Apr 2016 14:20:03 +0000 (16:20 +0200)]
Switch gobby.debian.org ssl cert to letsencrypt

8 years agoRemove tlsa record for gobby
Julien Cristau [Wed, 20 Apr 2016 10:28:34 +0000 (12:28 +0200)]
Remove tlsa record for gobby

8 years agoNew *.alioth.debian.org ssl cert
Julien Cristau [Sat, 16 Apr 2016 14:03:27 +0000 (16:03 +0200)]
New *.alioth.debian.org ssl cert

8 years agoferm: remove my office addresses
Julien Cristau [Sat, 16 Apr 2016 13:33:26 +0000 (15:33 +0200)]
ferm: remove my office addresses

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoUse ftp.at at conova
Peter Palfrader [Sat, 16 Apr 2016 06:00:10 +0000 (08:00 +0200)]
Use ftp.at at conova

8 years agoadd new office networks
Martin Zobel-Helas [Fri, 15 Apr 2016 19:29:42 +0000 (19:29 +0000)]
add new office networks

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
8 years agoAdd manpages, II
Peter Palfrader [Fri, 15 Apr 2016 18:04:25 +0000 (20:04 +0200)]
Add manpages, II

8 years agoAdd manpages
Peter Palfrader [Fri, 15 Apr 2016 17:58:56 +0000 (19:58 +0200)]
Add manpages

8 years agosudo for manpages
Peter Palfrader [Fri, 15 Apr 2016 17:41:48 +0000 (19:41 +0200)]
sudo for manpages

8 years agorename debian-cdn to debian2 so it sorts after debian.list
Peter Palfrader [Fri, 15 Apr 2016 17:31:46 +0000 (19:31 +0200)]
rename debian-cdn to debian2 so it sorts after debian.list

8 years agoAdd manziarly
Peter Palfrader [Fri, 15 Apr 2016 17:06:21 +0000 (19:06 +0200)]
Add manziarly

8 years agoAdd manziarly
Peter Palfrader [Fri, 15 Apr 2016 17:03:55 +0000 (19:03 +0200)]
Add manziarly

8 years agore-order entries
Peter Palfrader [Tue, 12 Apr 2016 15:29:01 +0000 (17:29 +0200)]
re-order entries

8 years agoRedirect /debian* on deb.d.o to cdn-fastly
Peter Palfrader [Tue, 12 Apr 2016 15:25:12 +0000 (17:25 +0200)]
Redirect /debian* on deb.d.o to cdn-fastly

SRV support in apt only helps when there is no http proxy (transparent
or directly configured).  If there is a proxy, and it doesn't support
SRV records as well, requests end up directly on the deb.d.o vhost.

Do something smart in that case, namely redirect to cdn-fastly.

8 years agosyntax
Peter Palfrader [Thu, 7 Apr 2016 18:27:01 +0000 (20:27 +0200)]
syntax

8 years agoAdd a secondary source for main debian packages
Peter Palfrader [Thu, 7 Apr 2016 18:19:36 +0000 (20:19 +0200)]
Add a secondary source for main debian packages

8 years agoAdd mips-aql-06 to broken-rtc
Aurelien Jarno [Tue, 5 Apr 2016 20:14:54 +0000 (22:14 +0200)]
Add mips-aql-06 to broken-rtc

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoAdd mips-aql-06.debian.org to buildd
Aurelien Jarno [Tue, 5 Apr 2016 20:12:47 +0000 (22:12 +0200)]
Add mips-aql-06.debian.org to buildd

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoRemove wbadm-ports ports from sudoers
Aurelien Jarno [Tue, 5 Apr 2016 08:52:46 +0000 (10:52 +0200)]
Remove wbadm-ports ports from sudoers

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agoAlso refresh ca-global when Debian certs change
Paul Wise [Sun, 3 Apr 2016 13:03:44 +0000 (21:03 +0800)]
Also refresh ca-global when Debian certs change

8 years agoFix broken symlinks in /etc/ssl/ca-global (RT#6182)
Paul Wise [Sun, 3 Apr 2016 12:42:27 +0000 (20:42 +0800)]
Fix broken symlinks in /etc/ssl/ca-global (RT#6182)

8 years agoFix some issues with the previous change.
Paul Wise [Fri, 1 Apr 2016 06:01:40 +0000 (14:01 +0800)]
Fix some issues with the previous change.

8 years agoRedirect https URLs for www-other sites to debian.org too.
Paul Wise [Fri, 1 Apr 2016 05:47:56 +0000 (13:47 +0800)]
Redirect https URLs for www-other sites to debian.org too.

Suggested-in: <CAKiQC487c4kZiTvxUYtM+nmWS9Bh3b7s3tY6jb2=eA69k0-9Ww@mail.gmail.com>
Suggested-by: Adam Cadman <adam.cadman@gmail.com>
8 years agoremove gluck and rietz from puppet config
Peter Palfrader [Tue, 22 Mar 2016 09:26:48 +0000 (10:26 +0100)]
remove gluck and rietz from puppet config

8 years agoremove alioth's expiring git et al. cert
Peter Palfrader [Tue, 22 Mar 2016 07:50:17 +0000 (08:50 +0100)]
remove alioth's expiring git et al. cert

8 years agorenumber mirror-isc3
Peter Palfrader [Tue, 22 Mar 2016 07:11:48 +0000 (08:11 +0100)]
renumber mirror-isc3

8 years ago99builddsourceslist: get rid of backports.debian.org
Aurelien Jarno [Mon, 21 Mar 2016 15:47:59 +0000 (16:47 +0100)]
99builddsourceslist: get rid of backports.debian.org

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years ago99builddsourceslist: drop support for -edu
Aurelien Jarno [Mon, 21 Mar 2016 15:47:59 +0000 (16:47 +0100)]
99builddsourceslist: drop support for -edu

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
8 years agopuppetmaster: don't look for puppet-dashboard.d.o cert
Julien Cristau [Mon, 21 Mar 2016 12:48:47 +0000 (13:48 +0100)]
puppetmaster: don't look for puppet-dashboard.d.o cert

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoRemove puppet-dashboard.d.o cert
Julien Cristau [Mon, 21 Mar 2016 12:46:15 +0000 (13:46 +0100)]
Remove puppet-dashboard.d.o cert

It seems unused, and expires soon.

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoRetire portman and pittar (RT#6121, RT#6135)
Peter Palfrader [Sun, 20 Mar 2016 15:02:35 +0000 (16:02 +0100)]
Retire portman and pittar (RT#6121, RT#6135)

8 years agoRe-enable surbl checks, and set {keep,add}_environment to empty values
Tollef Fog Heen [Sun, 20 Mar 2016 08:53:19 +0000 (09:53 +0100)]
Re-enable surbl checks, and set {keep,add}_environment to empty values

8 years agoUse letsencrypt cert for packages.d.o
Julien Cristau [Sat, 19 Mar 2016 16:39:15 +0000 (17:39 +0100)]
Use letsencrypt cert for packages.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoTemporarily disable TLSA for packages.d.o
Julien Cristau [Sat, 19 Mar 2016 15:19:44 +0000 (16:19 +0100)]
Temporarily disable TLSA for packages.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoThe debian-backports repository is obsolete: stop redirecting www.backports.org ...
Peter Palfrader [Sun, 13 Mar 2016 13:08:53 +0000 (14:08 +0100)]
The debian-backports repository is obsolete: stop redirecting backports.org /debian, /backports.org and /debian-backports to the old archive location

8 years agoThe debian-backports repository is obsolete. Remove from autofs and rsync/syncproxy...
Peter Palfrader [Sun, 13 Mar 2016 13:07:08 +0000 (14:07 +0100)]
The debian-backports repository is obsolete.  Remove from autofs and rsync/syncproxy config

8 years agoSwitch piuparts.d.o SSL cert to letsencrypt
Julien Cristau [Sat, 12 Mar 2016 16:57:10 +0000 (17:57 +0100)]
Switch piuparts.d.o SSL cert to letsencrypt

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoremove TLSA record for piuparts.d.o
Julien Cristau [Sat, 12 Mar 2016 15:38:36 +0000 (16:38 +0100)]
remove TLSA record for piuparts.d.o

Signed-off-by: Julien Cristau <jcristau@debian.org>
8 years agoDo not run both puppet clientbucket cleanup job concurrently. sequentially should...
Peter Palfrader [Fri, 11 Mar 2016 07:08:40 +0000 (08:08 +0100)]
Do not run both puppet clientbucket cleanup job concurrently.  sequentially should work better

8 years agosso-rp for quantz
Peter Palfrader [Thu, 10 Mar 2016 21:48:30 +0000 (22:48 +0100)]
sso-rp for quantz

8 years agoDisable surbl/perl check for now
Tollef Fog Heen [Thu, 10 Mar 2016 10:30:12 +0000 (11:30 +0100)]
Disable surbl/perl check for now

8 years agostop using broken dns forwarders
Peter Palfrader [Wed, 9 Mar 2016 21:28:16 +0000 (22:28 +0100)]
stop using broken dns forwarders

8 years agoinclude archive_master role too
Peter Palfrader [Wed, 9 Mar 2016 18:56:41 +0000 (19:56 +0100)]
include archive_master role too

8 years agopush sibelius archive rsync via puppet, make it ssl
Peter Palfrader [Wed, 9 Mar 2016 18:53:05 +0000 (19:53 +0100)]
push sibelius archive rsync via puppet, make it ssl

8 years agoretire schein
Peter Palfrader [Wed, 9 Mar 2016 15:30:49 +0000 (16:30 +0100)]
retire schein