# # ChangeLog for / # # Generated by Trac 1.0.2 # Mar 28, 2024, 6:54:07 PM Thu, 23 Apr 2009 16:59:31 GMT mitchb [1091] * server/fedora/specs/php.spec.patch (modified) Upgrade from php 5.2.8-1 to 5.2.9-2. I'm sure this will solve all ... Thu, 23 Apr 2009 14:41:57 GMT quentin [1090] * noc/nagios/checkcommands.cfg (modified) Move XVM DHCP check command into XVM configuration file Wed, 22 Apr 2009 21:03:05 GMT presbrey [1089] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) httpd: add mod_proxy module and friends Tue, 21 Apr 2009 00:01:01 GMT mitchb [1088] * server/fedora/config/etc/httpd/vhosts.d/bc.conf (added) * server/fedora/config/etc/pki/tls/certs/bc.pem (added) bc.mit.edu certificate and reified vhost Mon, 20 Apr 2009 22:03:58 GMT geofft [1087] * locker/bin/scripts (modified) * locker/bin/signup-cron (modified) * locker/bin/signup-mail (modified) multiplexer over scripts-start/signup-* for "add scripts; scripts" ... Sun, 19 Apr 2009 21:49:25 GMT quentin [1086] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Test your changes! Port 444 was serving axo.mit.edu all day! Sun, 19 Apr 2009 06:51:58 GMT mitchb [1085] * server/fedora/config/etc/pki/tls/openssl.cnf (modified) scripts.mit.edu CSR defaults Sun, 19 Apr 2009 06:45:22 GMT mitchb [1084] * server/fedora/config/etc/pki/tls/openssl.cnf (added) Add openssl.cnf file, so we can track our standard CSR fields Sat, 18 Apr 2009 23:45:28 GMT mitchb [1083] * locker/bin/fix-php-ini (added) New fix-php-ini script to make symlinks to php.ini from child ... Sat, 18 Apr 2009 01:20:45 GMT geofft [1082] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Allow reified vhosts to override *.scripts Fri, 17 Apr 2009 23:45:18 GMT geofft [1081] * server/fedora/config/etc/httpd/vhosts.d/cycling-club.conf (added) * server/fedora/config/etc/httpd/vhosts.d/debathena.conf (modified) reify cycling-club.scripts.mit.edu to pick up the cert Fri, 17 Apr 2009 23:36:26 GMT geofft [1080] * server/fedora/config/etc/pki/tls/certs/cycling-club.pem (added) cycling-club.scripts 30 day cert from Comodo Tue, 14 Apr 2009 09:21:11 GMT mitchb [1079] * server/common/patches/openafs-localcsdb.patch (added) * server/fedora/specs/openafs.spec.patch (modified) Use only our local CellServDB, not the one in the distribution so ... Tue, 14 Apr 2009 08:22:05 GMT mitchb [1078] * server/fedora/config/usr (added) * server/fedora/config/usr/vice (added) * server/fedora/config/usr/vice/etc (added) * server/fedora/config/usr/vice/etc/CellServDB.local (added) Add a CellServDB.local so we can pull in changes without rebuilding. Sun, 12 Apr 2009 08:36:52 GMT quentin [1077] * noc/nagios/checkcommands.cfg (modified) Check command for xvm's DHCP servers Sun, 12 Apr 2009 08:02:25 GMT quentin [1076] * noc/nagios/checkcommands.cfg (modified) Monitoring of DNS servers Sun, 12 Apr 2009 07:54:50 GMT quentin [1075] * noc/nagios/nagios.cfg (modified) * noc/nagios/sipb.cfg (added) Add monitoring of stuff Sun, 12 Apr 2009 07:53:44 GMT quentin [1074] * noc/nagios/services.cfg (modified) Make CPU depend on NRPE for scripts hosts Sat, 11 Apr 2009 19:02:13 GMT quentin [1073] * server/fedora/config/etc/security/limits.conf (modified) Don't let people lock all our memory (use the Ubuntu default of 64KB ... Sat, 11 Apr 2009 07:39:21 GMT quentin [1072] * server/fedora/config/etc/security/limits.conf (modified) Don't apply resource limits to root's processes, and clean up ... Sat, 11 Apr 2009 06:55:37 GMT quentin [1071] * server/fedora/config/etc/security/limits.conf (modified) Set sane memory resource limits Wed, 08 Apr 2009 13:23:50 GMT mitchb [1070] * server/common/patches/openafs-scripts.patch (modified) * server/fedora/Makefile (modified) * server/fedora/specs/openafs.spec.patch (modified) Build system fixes to upgrade to OpenAFS 1.4.10 Pulls in fixes for ... Wed, 08 Apr 2009 11:11:17 GMT mitchb [1069] * server/common/patches/krb5-kuserok-scripts.patch (modified) * server/fedora/specs/krb5.spec.patch (modified) Updates to the build system for krb5 Allow us to build with patches ... Tue, 07 Apr 2009 21:29:01 GMT quentin [1068] * server/fedora/config/etc/pam.d/sshd (modified) Disallow root keyboard-interactive logins Tue, 07 Apr 2009 14:41:33 GMT quentin [1067] * server/fedora/config/etc/httpd/vhosts.d/tibetforum.conf (added) * server/fedora/config/etc/pki/tls/certs/tibetforum.pem (added) tibetforum.mit.edu vhost + cert Mon, 06 Apr 2009 01:35:25 GMT quentin [1066] * noc/nagios/nagios.cfg (modified) Use soft states when determining dependencies, so we don't get ... Mon, 06 Apr 2009 01:34:40 GMT quentin [1065] * noc/nagios/hosts.cfg (modified) Update Nagios links to mrtg Sun, 05 Apr 2009 10:27:32 GMT mitchb [1064] * server/fedora/Makefile (modified) Change to new OpenSUSE nss-ldapd version so we can download and build ... Sat, 04 Apr 2009 05:40:26 GMT quentin [1063] * server/doc/install-howto.sh (modified) First parts of installer script Sat, 04 Apr 2009 05:38:36 GMT quentin [1062] * noc/nagios/services.cfg (modified) if NRPE is down, don't bother notifying about NRPE-related services Sat, 04 Apr 2009 05:14:55 GMT quentin [1061] * noc/nagios/nagios.cfg (modified) Forgot a couple config files Sat, 04 Apr 2009 04:59:01 GMT quentin [1060] * noc/nagios/cgi.cfg (modified) * noc/nagios/nagios.cfg (modified) Update Nagios configuration for Nagios 3 Sat, 04 Apr 2009 04:54:44 GMT geofft [1059] * server/fedora/config/etc/nsswitch.conf (modified) We don't need mDNS Sat, 04 Apr 2009 03:53:25 GMT quentin [1058] * server/doc/install-howto.sh (moved) Make the install process be a shell script Sat, 04 Apr 2009 03:47:23 GMT quentin [1057] * server/doc/install-howto (modified) Don't enable useless services Sat, 04 Apr 2009 03:05:13 GMT geofft [1056] * server/doc/install-howto (modified) What to do at the initial Fedora config screen Fri, 03 Apr 2009 09:39:50 GMT quentin [1055] * noc/nagios/checkcommands.cfg (modified) * noc/nagios/services.cfg (modified) Monitor NRPE status Fri, 03 Apr 2009 09:36:53 GMT quentin [1054] * noc/nagios/services.cfg (modified) Bump load thresholds to 50 Fri, 03 Apr 2009 09:21:22 GMT quentin [1053] * locker/doc/autoinstallers (modified) Document how to apply patches before generating an update Fri, 03 Apr 2009 05:34:03 GMT quentin [1052] * locker/sbin/build-update (modified) Use gtar so Sun can play too Fri, 03 Apr 2009 05:05:36 GMT quentin [1051] * locker/sbin/build-update (modified) Don't duplicate the lockername Fri, 03 Apr 2009 04:51:32 GMT quentin [1050] * locker/doc/autoinstallers (modified) * locker/sbin/build-update (modified) update-system fixes: catch errors, and get the lockername from the input Fri, 03 Apr 2009 01:55:40 GMT mitchb [1049] * locker/sql/bin/get-password (modified) Make get-password deal with carriage returns, because the mysql ... Thu, 02 Apr 2009 23:55:13 GMT geofft [1048] * server/common/patches/openafs-scripts.patch (modified) oops, forgot an && Thu, 02 Apr 2009 23:52:34 GMT geofft [1047] * server/common/patches/openafs-scripts.patch (modified) openafs-scripts.patch: efficiency hack afs_GetAccessBits is a ... Thu, 02 Apr 2009 18:53:22 GMT mitchb [1046] * locker/deploy/bin/django (modified) Dammit, Geoff, test things. Fix django autoinstaller again. Thu, 02 Apr 2009 18:23:02 GMT geofft [1045] * locker/deploy/bin/onathena (modified) onathena: Uncommitted changes that enable *.scripts and ~/Scripts ... Thu, 02 Apr 2009 18:20:10 GMT geofft [1044] * locker/deploy/bin/django (modified) django installer: Add pointers to docs.djangoproject.com Thu, 02 Apr 2009 04:53:52 GMT geofft [1043] * server/fedora/config/etc/nagios/check_afs (modified) contrib.scripts moved Wed, 01 Apr 2009 15:50:09 GMT mitchb [1042] * locker/bin/scripts-django (modified) * locker/deploy/bin/django (modified) More fixes and improvements to the django autoinstaller o Set ... Wed, 01 Apr 2009 15:31:29 GMT mitchb [1041] * locker/deploy/bin/onathena (modified) Avoid a harmless yet ominous error message when using hack ... Wed, 01 Apr 2009 14:43:33 GMT mitchb [1040] * server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Use the django media directory from the RPM, not the egg. Silly ... Wed, 01 Apr 2009 01:28:32 GMT mitchb [1039] * server/fedora/config/etc/httpd/conf.d/scripts-special.conf (modified) Provide autoinstalled Djangos with /__scripts/django/media for admin CSS Tue, 31 Mar 2009 23:30:52 GMT mitchb [1038] * locker/deploy/bin/django (modified) Fix more of django autoinstaller. Actually fill in settings.py, ... Tue, 31 Mar 2009 09:31:30 GMT mitchb [1037] * locker/sql/bin/get-password (modified) Make get-password more accomodating in my.cnf formats it understands. ... Tue, 31 Mar 2009 07:53:34 GMT mitchb [1036] * locker/deploy/bin/django (modified) Fix django autoinstaller. Pass the URL components to the fcgi. Sat, 28 Mar 2009 20:19:19 GMT mitchb [1035] * server/common/patches/httpd-2.2.x-304.patch (added) * server/common/patches/php-scripts-304.patch (added) * server/fedora/Makefile (modified) * server/fedora/specs/httpd.spec.patch (modified) * server/fedora/specs/php.spec.patch (added) * server/fedora/specs/scripts-base.spec (modified) Fix "the-bug" (non-empty content in 304s) in PHP (patch by ezyang) ... Sat, 28 Mar 2009 17:57:34 GMT mitchb [1034] * server/fedora/specs/httpd.spec.patch (modified) Fedora 9 changed from Apache 2.2.9 to 2.2.10 while we weren't looking Sat, 28 Mar 2009 17:29:57 GMT mitchb [1033] * server/fedora/specs/httpd.spec.patch (modified) Revert r959; we're not using Fedora 10. Fri, 27 Mar 2009 05:13:50 GMT mitchb [1032] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Change CPU time limit for Apache-spawned processes from 3min to 5min. ... Fri, 27 Mar 2009 01:04:39 GMT mitchb [1031] * locker/doc/hardware/better-mousetrap/m_s2882d_100.pdf (modified) Binaries, man. Don't diff them. No, really. Ouch. Thu, 26 Mar 2009 06:56:33 GMT mitchb [1030] * locker/sbin/propose-update (modified) Fix propose-update to a) work at all again, and b) work on all platforms Thu, 26 Mar 2009 06:30:20 GMT mitchb [1029] * locker/doc/autoinstallers (modified) Correct capitalization of the scriptsdev variable name Thu, 26 Mar 2009 01:58:15 GMT quentin [1028] * locker/doc/autoinstallers (added) Autoinstaller documentation Thu, 26 Mar 2009 01:42:01 GMT quentin [1027] * locker/doc (modified) Don't check in restricted docs by accident Thu, 26 Mar 2009 01:38:13 GMT quentin [1026] * locker/doc (added) * locker/doc/hardware (added) * locker/doc/hardware/better-mousetrap (added) * locker/doc/hardware/better-mousetrap/d_s2882d_100.pdf (added) * locker/doc/hardware/better-mousetrap/m_s2882d_100.pdf (added) * locker/doc/object-identifiers (added) * locker/doc/scripts-admin-use-policy (added) * locker/doc/scripts-decision-policy (added) * locker/doc/tickets (added) * locker/doc/tickets/cnames.txt (added) * locker/doc/tickets/rt.txt (added) Import doc directory from locker Wed, 25 Mar 2009 20:57:48 GMT quentin [1025] * locker/sbin/propose-update (modified) xargs doesn't have -I everywhere Mon, 23 Mar 2009 15:31:59 GMT mitchb [1024] * server/fedora/Makefile (modified) * server/fedora/specs/pysvn.spec.patch (added) * server/fedora/specs/scripts-base.spec (modified) Clean up pysvn kludge for svn 1.5 on scripts. Patch the package ... Mon, 23 Mar 2009 07:33:35 GMT quentin [1023] * lvs/doc/install-howto (modified) Update LVS install docs Mon, 23 Mar 2009 07:29:48 GMT quentin [1022] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) * lvs/debian/config/etc/lighttpd/lighttpd.conf (modified) Start using sorry server Mon, 23 Mar 2009 07:17:30 GMT quentin [1021] * lvs/debian/config/etc/lighttpd (added) * lvs/debian/config/etc/lighttpd/lighttpd.conf (added) * lvs/debian/config/etc/lighttpd/scripts-maint (added) * lvs/debian/config/etc/lighttpd/scripts-maint.lua (added) * lvs/debian/config/etc/lighttpd/scripts-maint/1.gif (added) * lvs/debian/config/etc/lighttpd/scripts-maint/index.html (added) * lvs/debian/config/etc/lighttpd/scripts-maint/powered_by-trans.gif (added) * lvs/debian/config/etc/lighttpd/scripts-maint/sb.gif (added) * lvs/debian/config/etc/lighttpd/scripts-maint/style.css (added) Lighttpd-based sorry server Mon, 23 Mar 2009 04:25:28 GMT geofft [1020] * server/fedora/config/etc/sysconfig/openafs (modified) /etc/sysconfig/openafs: for great awesome Fri, 20 Mar 2009 18:38:23 GMT mitchb [1019] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Increase CPU time limit for processes spawned by Apache. This should ... Fri, 20 Mar 2009 10:42:46 GMT quentin [1018] * server/fedora/config/etc/ssh/shosts.equiv (modified) Allow hostbased authentication over the backend network (Yay!) Fri, 20 Mar 2009 10:19:50 GMT quentin [1017] * server/fedora/config/etc/sysconfig/network-scripts/route-eth1 (modified) Route to b-k over the backend network Fri, 20 Mar 2009 03:19:50 GMT quentin [1016] * server/fedora/config/etc/httpd/conf/httpd.conf (modified) Allow FastCGIs to take up to 5 minutes to respond Sun, 15 Mar 2009 09:24:11 GMT mitchb [1015] * locker/deploy/bin/trac (modified) Fix generation of the fallback htaccess file for trac. Using single ... Sat, 14 Mar 2009 22:01:47 GMT geofft [1014] * locker/deploy/bin/trac (modified) trac: Enable the git plugin if you're using git. Tue, 10 Mar 2009 06:36:44 GMT mitchb [1013] * locker/bin/scripts-turbogears (added) Autoinstaller support for turbogears, from xavid Tue, 10 Mar 2009 06:30:19 GMT mitchb [1012] * locker/bin/scripts-mediawiki (modified) * locker/bin/scripts-start (modified) * locker/bin/scripts-wordpress (modified) Uncommitted changes from geofft and andersk. Allow Django ... Tue, 10 Mar 2009 06:23:53 GMT mitchb [1011] * locker/bin/signup-mail (modified) It's wrong to assume that the address lockername@mit.edu is valid. ... Tue, 10 Mar 2009 00:08:12 GMT quentin [1010] * server/fedora/config/etc/acpi (added) * server/fedora/config/etc/acpi/actions (added) * server/fedora/config/etc/acpi/actions/power.sh (added) ACPI event handler so you can't shut down with the power button Sat, 07 Mar 2009 01:20:09 GMT quentin [1009] * lvs/debian/config/etc/munin/plugin-conf.d (added) * lvs/debian/config/etc/munin/plugin-conf.d/hddtemp_smartctl (added) Don't check CD drive on LVS servers for a temperature Fri, 06 Mar 2009 20:47:24 GMT quentin [1008] * noc/munin/munin.conf (modified) Incorporate scripts-vhost data from r-b in Aggregated graph Fri, 06 Mar 2009 20:26:12 GMT quentin [1007] * noc/munin/munin.conf (modified) Import old Munin conf changes Fri, 06 Mar 2009 07:23:21 GMT quentin [1006] * server/fedora/config/etc/sysctl.conf (modified) Reboot on OOM Fri, 06 Mar 2009 04:22:28 GMT quentin [1005] * lvs/debian/config/etc/ha.d/ldirectord.cf (modified) * lvs/debian/config/etc/network/if-up.d/iptables (modified) Load balance SMTP Fri, 06 Mar 2009 01:55:56 GMT quentin [1004] * lvs/debian/config/etc/apt/sources.list.d/heartbeat.list (deleted) * lvs/debian/config/etc/ha.d/ha.cf (modified) Use lenny's heartbeat Fri, 06 Mar 2009 01:55:30 GMT quentin [1003] * lvs/debian/config/etc/sysctl.conf (modified) Upgrade to lenny's sysctl.conf Fri, 06 Mar 2009 01:53:27 GMT quentin [1002] * lvs/debian/config/etc/nagios/nrpe.cfg (modified) Upgrade to Lenny's nrpe Wed, 04 Mar 2009 12:43:27 GMT mitchb [1001] * server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (modified) We need subversion-devel from testing as well, so that we can build ... Wed, 04 Mar 2009 00:23:46 GMT andersk [1000] * server/fedora/config/etc/security/limits.conf (modified) Change the core file limit from hard to soft. Tue, 03 Mar 2009 07:29:48 GMT geofft [999] * server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (added) Install Subversion (1.5) from the updates-testing-newkey repo. Tue, 03 Mar 2009 05:59:36 GMT geofft [998] * server/fedora/config/etc/httpd/vhosts.d/schuh.conf (added) * server/fedora/config/etc/pki/tls/certs/schuh.pem (added) cert and vhost for schuh.mit.edu Mon, 02 Mar 2009 19:01:58 GMT andersk [997] * locker/bin/scripts-start (modified) Automatic numbering in scripts-start. Mon, 02 Mar 2009 07:01:13 GMT mitchb [996] * server/fedora/config/etc/sysconfig/openafs (modified) i386_linux3 isn't actually twice as good just because we listed it ... Mon, 02 Mar 2009 03:08:27 GMT geofft [995] * locker/bin/scripts-django (added) * locker/deploy/bin/django (added) Django auto-installer. Mon, 02 Mar 2009 00:05:18 GMT geofft [994] * server/fedora/config/etc/sysconfig/openafs (modified) i386_deb40 is better than i386_linux1 Sun, 22 Feb 2009 17:37:55 GMT quentin [993] * noc/nagios/services.cfg (modified) Don't warn about CRON being broken during an AFS outage Sun, 22 Feb 2009 12:49:04 GMT mitchb [992] * server/fedora/config/etc/cron.d/scripts-cron_status (modified) Don't let cron send mail if it can't touch the cron status file. ...