]>
git.donarmstrong.com Git - dsa-puppet.git/log
Peter Palfrader [Mon, 24 Aug 2015 19:13:12 +0000 (21:13 +0200)]
Add debian-debug rsync share
Peter Palfrader [Mon, 24 Aug 2015 19:12:16 +0000 (21:12 +0200)]
Remove commented out, obsolete rsync shares
Aurelien Jarno [Mon, 24 Aug 2015 13:56:53 +0000 (15:56 +0200)]
Add root ssh key for aurel32
Aurelien Jarno [Mon, 24 Aug 2015 10:08:09 +0000 (12:08 +0200)]
ferm: use NFLOG instead of LOG/ULOG on jessie
ULOG is deprecated and has been removed from recent kernels. Use the
(not so new) NFLOG module instead. It requires ulogd2 so we can do that
only on jessie hosts.
This fixes logging on jessie hosts as ulogd2 doesn't listen for ULOG
logs by default.
This also allows logging IPv6 the same way than IPv4.
Aurelien Jarno [Mon, 24 Aug 2015 10:03:33 +0000 (12:03 +0200)]
ferm: change ferm.conf to a template
So we can provide a different version for wheezy and jessie hosts
Aurelien Jarno [Mon, 24 Aug 2015 10:00:44 +0000 (12:00 +0200)]
ferm: drop aurel32's IPs
They have changed since they have been added.
Aurelien Jarno [Mon, 24 Aug 2015 09:58:43 +0000 (11:58 +0200)]
Remove file committed in the wrong place in commit
5715c43a
Aurelien Jarno [Fri, 21 Aug 2015 22:59:27 +0000 (00:59 +0200)]
buildd.conf: add puppet header
Aurelien Jarno [Fri, 21 Aug 2015 22:56:17 +0000 (00:56 +0200)]
buildd.conf: push more default values through puppet
Instead of changing the default sbuild configuration
Peter Palfrader [Thu, 20 Aug 2015 07:15:26 +0000 (09:15 +0200)]
create portforwarder key
Peter Palfrader [Thu, 20 Aug 2015 07:11:46 +0000 (09:11 +0200)]
fqdn
Peter Palfrader [Thu, 20 Aug 2015 07:06:40 +0000 (09:06 +0200)]
Get rid of search replication stunnel
It interacts badly with how xapian does network. In particular, when
the server closes the connection, stunnel does too, not sending to the
client any remaining data.
Peter Palfrader [Thu, 20 Aug 2015 07:05:49 +0000 (09:05 +0200)]
A portforwarder for search replication
Peter Palfrader [Thu, 20 Aug 2015 07:04:25 +0000 (09:04 +0200)]
Remove obsolete portforwarder.rb file
Peter Palfrader [Thu, 20 Aug 2015 07:03:25 +0000 (09:03 +0200)]
portforwarder facters
Aurelien Jarno [Wed, 19 Aug 2015 22:27:28 +0000 (00:27 +0200)]
setup-dchroot: generate a jessie-kfreebsd alias on buildds
Peter Palfrader [Wed, 19 Aug 2015 18:03:59 +0000 (20:03 +0200)]
Add seger
Martin Zobel-Helas [Wed, 19 Aug 2015 15:53:03 +0000 (15:53 +0000)]
try fixing config for openstack
Signed-off-by: Martin Zobel-Helas <zobel@handel.debian.org>
Martin Zobel-Helas [Wed, 19 Aug 2015 13:25:51 +0000 (13:25 +0000)]
Update to Kilo
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Wed, 19 Aug 2015 12:54:24 +0000 (12:54 +0000)]
give some more rights to the openstack group
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Tue, 18 Aug 2015 14:34:18 +0000 (16:34 +0200)]
Do not run backups for x86-csail-0[12]
Martin Zobel-Helas [Mon, 17 Aug 2015 11:51:42 +0000 (11:51 +0000)]
we ship buildd.conf with puppet nowadays, ignore that file im samhain
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Luca Filipozzi [Sun, 16 Aug 2015 13:52:12 +0000 (13:52 +0000)]
RT #4908 - deploy XMPP service
Aurelien Jarno [Sat, 15 Aug 2015 11:30:23 +0000 (13:30 +0200)]
Provide a default configuration file for buildds
We can provide a /etc/buildd/buildd.conf file on buildds to reduce a
bit the amount of configuration to be done in $HOME/.builddrc. It
currently mostly includes upload configuration.
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Paul Wise [Sat, 15 Aug 2015 12:19:46 +0000 (14:19 +0200)]
Add timeline.debian.net to the static CDN
Aurelien Jarno [Fri, 14 Aug 2015 18:24:18 +0000 (20:24 +0200)]
Add rsync configuration to /etc/dupload.conf
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Thu, 13 Aug 2015 21:19:16 +0000 (23:19 +0200)]
add ssh-wrapper + userkeys config for buildd rsync uploads
This should allow the buildds to do uploads using rsync to
ssh.upload.d.o:/srv/upload.debian.org/UploadQueue/
Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>
Aurelien Jarno [Fri, 14 Aug 2015 11:19:35 +0000 (13:19 +0200)]
Allow wbadm-ports to update buildds ssh keys
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Julien Cristau [Wed, 12 Aug 2015 18:06:56 +0000 (20:06 +0200)]
Remove no-op DefaultType from apache config
apache 2.4 stopped respecting DefaultType. Thanks, guys.
Julien Cristau [Wed, 12 Aug 2015 17:56:40 +0000 (19:56 +0200)]
Force content-type to text/plain for metadata.ftp-master's changelogs
Peter Palfrader [Tue, 11 Aug 2015 14:25:38 +0000 (16:25 +0200)]
fix sources.list
Peter Palfrader [Tue, 11 Aug 2015 14:23:30 +0000 (16:23 +0200)]
also support experimental
Peter Palfrader [Tue, 11 Aug 2015 14:20:02 +0000 (16:20 +0200)]
99porterbox-extra-sources support for ppc64
Peter Palfrader [Tue, 11 Aug 2015 13:55:18 +0000 (15:55 +0200)]
include debian-ports-archive-keyring on ppc64
Peter Palfrader [Tue, 11 Aug 2015 13:51:20 +0000 (15:51 +0200)]
setup-dchroot: Support including extra packages
Peter Palfrader [Tue, 11 Aug 2015 13:37:59 +0000 (15:37 +0200)]
make ppc64 chroots on pizzetti, II
Peter Palfrader [Tue, 11 Aug 2015 13:34:18 +0000 (15:34 +0200)]
make ppc64 chroots on pizzetti
Julien Cristau [Tue, 11 Aug 2015 12:36:04 +0000 (14:36 +0200)]
add pizzetti to more places
Julien Cristau [Tue, 11 Aug 2015 12:30:00 +0000 (14:30 +0200)]
add pizzetti dedication
Peter Palfrader [Sun, 9 Aug 2015 18:32:28 +0000 (20:32 +0200)]
Revert "Add dc15 reverse zones"
This reverts commit
eb83f1b0de642f3741cf54fb6411f398f23489d5 .
not needed.
Peter Palfrader [Sun, 9 Aug 2015 18:17:01 +0000 (20:17 +0200)]
Add dc15 reverse zones
Peter Palfrader [Sat, 8 Aug 2015 08:15:39 +0000 (10:15 +0200)]
disable elasticsearch - the service fails to start
Peter Palfrader [Fri, 7 Aug 2015 20:53:30 +0000 (22:53 +0200)]
multipath also has /[aio] open, confusing checklibs
Peter Palfrader [Wed, 5 Aug 2015 07:00:27 +0000 (09:00 +0200)]
do ca check as puppet
Peter Palfrader [Wed, 5 Aug 2015 06:59:21 +0000 (08:59 +0200)]
allow nagios to check puppet's ca cert
Peter Palfrader [Wed, 5 Aug 2015 06:52:49 +0000 (08:52 +0200)]
ignore python-django-ldapdb on draghi
Peter Palfrader [Wed, 5 Aug 2015 06:10:59 +0000 (08:10 +0200)]
On sparc, do not use https to buildd.d.o
Peter Palfrader [Fri, 31 Jul 2015 15:16:16 +0000 (17:16 +0200)]
Decommission parry (RT#5889)
Julien Cristau [Mon, 3 Aug 2015 19:38:01 +0000 (21:38 +0200)]
Replace non-ascii char in dedication
Julien Cristau [Mon, 3 Aug 2015 19:29:36 +0000 (21:29 +0200)]
add soriano
Peter Palfrader [Thu, 30 Jul 2015 21:39:20 +0000 (23:39 +0200)]
No backups for powerpc-ousosl-01.debian.org
Christoph Egger [Thu, 30 Jul 2015 08:50:29 +0000 (10:50 +0200)]
Add support for jessie-kfreebsd suites
Update the $CHROOT_ALIAS globs to match jessie-kfreebsd suite (which
have one extra dash in them compared to the relative "normal" suites)
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Thu, 30 Jul 2015 06:35:06 +0000 (08:35 +0200)]
No backups for ppc64el-osuosl-01, ppc64el-unicamp-01
Peter Palfrader [Wed, 29 Jul 2015 11:00:20 +0000 (13:00 +0200)]
Add pieta
Peter Palfrader [Wed, 29 Jul 2015 10:50:48 +0000 (12:50 +0200)]
update osuosl netrange
Julien Cristau [Mon, 27 Jul 2015 05:42:36 +0000 (07:42 +0200)]
setup-all-dchroots: sparc removed from sid
Signed-off-by: Julien Cristau <jcristau@debian.org>
Peter Palfrader [Sun, 26 Jul 2015 06:32:03 +0000 (08:32 +0200)]
mysql does something weird with / - ignore for check-libs purposes
Héctor Orón Martínez [Thu, 23 Jul 2015 09:05:57 +0000 (11:05 +0200)]
mips-aql-0[45]: new hosts at AQL
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Tue, 21 Jul 2015 14:36:16 +0000 (16:36 +0200)]
512m rlimitmem for apache on dgit_git host
Peter Palfrader [Mon, 13 Jul 2015 19:38:18 +0000 (21:38 +0200)]
appstream ssl
Peter Palfrader [Mon, 13 Jul 2015 16:46:18 +0000 (18:46 +0200)]
Add non-ssl appstream.debian.org for now
Peter Palfrader [Mon, 13 Jul 2015 16:41:50 +0000 (18:41 +0200)]
redirect to https instead of http browse.dgit
Peter Palfrader [Mon, 13 Jul 2015 16:29:49 +0000 (18:29 +0200)]
people cert update
Peter Palfrader [Mon, 13 Jul 2015 16:28:43 +0000 (18:28 +0200)]
wiki cert update
Peter Palfrader [Mon, 13 Jul 2015 16:24:53 +0000 (18:24 +0200)]
lintian cert update
Peter Palfrader [Mon, 13 Jul 2015 16:23:48 +0000 (18:23 +0200)]
bits cert update
Peter Palfrader [Mon, 13 Jul 2015 15:49:50 +0000 (17:49 +0200)]
sudo for %appstream for static-update-component appstream.debian.org
Peter Palfrader [Mon, 13 Jul 2015 15:49:02 +0000 (17:49 +0200)]
Add appstream.d.o static component
Peter Palfrader [Mon, 13 Jul 2015 15:47:44 +0000 (17:47 +0200)]
mekeel is a static source
Peter Palfrader [Mon, 13 Jul 2015 15:31:48 +0000 (17:31 +0200)]
And python-chardet
Peter Palfrader [Mon, 13 Jul 2015 15:27:41 +0000 (17:27 +0200)]
need python-pygments for syntax hilighting
Peter Palfrader [Mon, 13 Jul 2015 15:23:48 +0000 (17:23 +0200)]
Drop GIT_HTTP_EXPORT_ALL
Peter Palfrader [Mon, 13 Jul 2015 15:20:16 +0000 (17:20 +0200)]
install certs
Peter Palfrader [Mon, 13 Jul 2015 15:19:23 +0000 (17:19 +0200)]
and number of args
Peter Palfrader [Mon, 13 Jul 2015 15:17:07 +0000 (17:17 +0200)]
fix macro name
Peter Palfrader [Mon, 13 Jul 2015 15:14:53 +0000 (17:14 +0200)]
ssl for dgit
Peter Palfrader [Mon, 13 Jul 2015 15:00:30 +0000 (17:00 +0200)]
allow the smart git http backend cgi
Peter Palfrader [Mon, 13 Jul 2015 14:52:37 +0000 (16:52 +0200)]
fix class name
Peter Palfrader [Mon, 13 Jul 2015 14:51:59 +0000 (16:51 +0200)]
git.dgit
Peter Palfrader [Mon, 13 Jul 2015 14:50:23 +0000 (16:50 +0200)]
fix commented out ssl service name
Peter Palfrader [Mon, 13 Jul 2015 06:30:15 +0000 (08:30 +0200)]
Do not use site-wide cgit.conf
Peter Palfrader [Sun, 12 Jul 2015 15:37:54 +0000 (17:37 +0200)]
typo fix
Peter Palfrader [Sun, 12 Jul 2015 15:35:59 +0000 (17:35 +0200)]
Add cgit for dgit (RT#5866)
Peter Palfrader [Sun, 12 Jul 2015 15:06:53 +0000 (17:06 +0200)]
retire couper, popov
Peter Palfrader [Thu, 9 Jul 2015 07:45:47 +0000 (09:45 +0200)]
/etc/multipath/wwids probably should be in /var - samhain ignoring it
Peter Palfrader [Wed, 8 Jul 2015 19:15:05 +0000 (21:15 +0200)]
Add pinel to nfs
Peter Palfrader [Wed, 8 Jul 2015 16:27:06 +0000 (18:27 +0200)]
Add pinel to heavy-exim
Peter Palfrader [Wed, 8 Jul 2015 16:04:13 +0000 (18:04 +0200)]
prepare pinel for popcon
Héctor Orón Martínez [Wed, 8 Jul 2015 15:49:11 +0000 (17:49 +0200)]
ynic: use ftp.uk mirror temporarily
< mhy> Hi all, due to disk space limitations on our mirror, we might have
to drop powerpc - at least for a while. Would it be possible for
porpora and poulenc to be repointed at ftp.uk.debian.org as their
mirror?
Signed-off-by: Héctor Orón Martínez <zumbi@debian.org>
Peter Palfrader [Wed, 8 Jul 2015 15:49:03 +0000 (17:49 +0200)]
Add pinel
Peter Palfrader [Wed, 8 Jul 2015 14:56:00 +0000 (16:56 +0200)]
appstream sudo
Paul Wise [Wed, 8 Jul 2015 10:34:43 +0000 (18:34 +0800)]
Clean up mentions of ball.d.o
Suggested-by: Martin Zobel-Helas <zobel@debian.org>
Suggested-in: <
20150629212028 .GA30893@ftbfs.de>
Peter Palfrader [Tue, 7 Jul 2015 15:34:39 +0000 (17:34 +0200)]
Give the dgit group sudo to dgit-unpriv
Julien Cristau [Mon, 6 Jul 2015 15:00:16 +0000 (17:00 +0200)]
Revert "Revert "small number of apaches on popcon host""
This reverts commit
bf307e7702505ca016fdb25fef4c1d34a6f6f84f .
The host goes crazy with too many apache and popcon processes eating all
memory.
Peter Palfrader [Sat, 4 Jul 2015 08:00:23 +0000 (10:00 +0200)]
Revert "small number of apaches on popcon host"
This reverts commit
3c936ab358a3e6ddca6d979dfc12e87088266d2c .
Peter Palfrader [Sat, 4 Jul 2015 07:54:12 +0000 (09:54 +0200)]
fix search.d.o cert chain
Peter Palfrader [Sat, 4 Jul 2015 07:52:12 +0000 (09:52 +0200)]
autofs fu on pittar
Martin Zobel-Helas [Fri, 3 Jul 2015 15:16:07 +0000 (15:16 +0000)]
try with modules from master
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 3 Jul 2015 11:38:47 +0000 (11:38 +0000)]
Revert "Add the posibility to tell openstack to use --os_cacert for keystone_tenant"
This reverts commit
9323043aa25de76c23ba73489d575aecc7a8041d .
Martin Zobel-Helas [Fri, 3 Jul 2015 11:28:01 +0000 (11:28 +0000)]
Add the posibility to tell openstack to use --os_cacert for keystone_tenant
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>