Jun 6, 2009:

10:55 PM Changeset [1175] by mitchb
Bash whatever keeps clobbering resolv.conf at boot time over the head
10:00 PM Changeset [1174] by mitchb
Monitor new scripts webserver cats-whiskers
9:49 PM Changeset [1173] by mitchb
Add AFS sysnames for scripts on Leonidas (F11)
9:48 PM Changeset [1172] by mitchb
Allow more AFS sysnames... you can never have enough
1:57 PM Changeset [1171] by quentin
Script for checking certificate expiration times

Jun 5, 2009:

4:18 PM Changeset [1170] by geofft
scripts.mit.edu Equifax-signed 2-year cert
12:24 AM Changeset [1169] by geofft
suexec: Hardcode the JAVA_TOOL_OPTIONS value. Because, otherwise, suexec doesn't save you from JAVA_TOOL_OPTIONS="-cp /path/to/sketchy/code.jar". Reported by Anders.

Jun 4, 2009:

11:32 PM Changeset [1168] by geofft
Make Java work again by reducing its maximum heap size. Otherwise, it will crash with an out-of-memory error on startup because it tries to allocate 1.05 G. While one option is to increase our memory limits, a better one is to make it grab less RAM. The startup code's idea of "a reasonable fraction" of total physical memory in the machine is not our idea of a reasonable amount for one process on scripts to use. Reported by tabbott, debugged by quentin and geofft, fix suggested by mitchb.
10:47 PM Changeset [1167] by geofft
suexec: Let the JAVA_TOOL_OPTIONS environment variable through.
9:04 PM Changeset [1166] by geofft
Replace *.scripts' cert with an Equifax-signed one from RapidSSL.
5:20 AM Changeset [1165] by geofft
limits.conf: Actually, keep data and as around. rss isn't respected according to quentin's testing, so we should keep the data and as limits so we still have a memory usage limit. On the other hand, Anders is right that we have no reason to _increase_ memlock from its defaults.
5:18 AM Changeset [1164] by quentin
Revert r1162 (DDoS over?)
2:13 AM Changeset [1163] by andersk
Punt memory limits other than rss.

Jun 3, 2009:

1:31 PM Changeset [1162] by quentin
Temporarily reduce request timeouts in order to deal with DDoS
12:03 PM Changeset [1161] by mitchb
Restore accidentally lost lines in syslog-ng.conf
11:30 AM Changeset [1160] by mitchb
Config for ssh and networking to interact with cats-whiskers
11:27 AM Changeset [1159] by mitchb
Update for current version of munin config files
11:27 AM Changeset [1158] by mitchb
Update for current version of limits.conf
11:26 AM Changeset [1157] by mitchb
Don't change the commented-out stat-user in nscd.conf
11:25 AM Changeset [1156] by mitchb
Update for current version of nrpe.cfg Mostly reformatting, but significantly, use the package's created 'nrpe' user instead of the nonexistent 'nagios' user
11:23 AM Changeset [1155] by mitchb
Update for current version of syslog-ng.conf Mostly reformatting, but also uses more meaningful names for the default set of filters
11:22 AM Changeset [1154] by mitchb
No reason to empty out the default comments in our empty printcap
11:21 AM Changeset [1153] by mitchb
Bump version of postfix
11:19 AM Changeset [1152] by mitchb
updatedb is in /usr/bin, not /usr/sbin
11:18 AM Changeset [1151] by mitchb
Apache's PID file path changed
11:17 AM Changeset [1150] by mitchb
Don't pull any packages from testing on Fedora 11 yet
11:16 AM Changeset [1149] by mitchb
Punt the acpi config so that soft poweroff will work
6:51 AM Changeset [1148] by mitchb
Use the scripts fc11 yum repo
6:50 AM Changeset [1147] by mitchb
Build system updates for Fedora 11 o Don't fetch upstream pysvn source o Fedora 11 does i586, not i386, for 32-bit packages o krb5 needs texlive-latex to build o openssh needs fipscheck-devel to build o gobject-devel isn't available, and openssh doesn't really need it o Add build dependencies for php
6:46 AM Changeset [1146] by mitchb
Version, context, etc. fixups to build Apache on Fedora 11
6:43 AM Changeset [1145] by mitchb
Context fixups to build PHP on Fedora 11
6:42 AM Changeset [1144] by mitchb
Version, context, etc. fixups to build nss-ldapd on Fedora 11
6:41 AM Changeset [1143] by mitchb
Version, context, etc. fixups to build OpenSSH on Fedora 11
6:38 AM Changeset [1142] by mitchb
Stop building a scriptsified pysvn
6:37 AM Changeset [1141] by mitchb
Version, context, etc. fixups to build krb5 on Fedora 11
6:35 AM Changeset [1140] by mitchb
Don't require scripts-pysvn in scripts-base anymore Since we're not forcing a newer version of svn than in the base distribution, it's no longer necessary to rebuild pysvn against it.
6:33 AM Changeset [1139] by mitchb
Apply OpenAFS delta dprintf-rename-20090427 Renames the dpatch #define, which conflicts in Fedora 11
2:28 AM Changeset [1138] by andersk
Remove huge autogenerated tests directory.
2:15 AM Changeset [1137] by quentin
Import scripts PHP module

Jun 2, 2009:

5:47 PM Changeset [1136] by geofft
Also delete the config
5:47 PM Changeset [1135] by geofft
cycling-club.scripts' 30-day cert expired, so revert to the *.scripts cert

May 30, 2009:

1:44 AM Ticket #93 (autoinstallers internally depend on vhost/~lockername working) reopened by geofft
Okay, I should be a little more clear about what I'm seeing. I have a …
1:40 AM Ticket #93 (autoinstallers internally depend on vhost/~lockername working) closed by andersk
worksforme: No it doesn’t.
1:05 AM Ticket #93 (autoinstallers internally depend on vhost/~lockername working) created by geofft
Figure out if we can in the general case make webapps run out of two …

May 26, 2009:

10:57 PM Changeset [1134] by ezyang
Update OpenAFS patch to not need 777 for .htaccess files. Symlinks to files that are not named .htaccess still need to be 777; if a file is hard linked, Apache can access it through its .htaccess name but not through any other name.

May 24, 2009:

6:49 PM Changeset [1133] by andersk
Build nss-ldapd.i386.
6:48 PM Changeset [1132] by andersk
Update nss-ldapd to 0.6.8.
6:03 PM Changeset [1131] by andersk
Update nss_nonlocal to 1.9.

May 21, 2009:

3:01 AM Changeset [1130] by geofft
*arm over head*

May 16, 2009:

1:03 AM Changeset [1129] by mitchb
Update phpBB autoinstaller to 3.0.4
12:40 AM Changeset [1128] by mitchb
Revert r1010, make the power button work, as previously directed.
12:34 AM Changeset [1127] by quentin
Don't make exceptions for single extensions
12:07 AM Changeset [1126] by mitchb
People want json. Turn it on.

May 13, 2009:

6:43 PM Changeset [1125] by geofft
reified vhost for geofft.mit.edu
6:39 PM Changeset [1124] by geofft
RapidSSL 30-day certificate for geofft.mit.edu
5:58 PM Changeset [1123] by mitchb
Proofreading... 9 out of 10 optometrists agree!
5:43 PM Changeset [1122] by geofft
(Temporarily?) permit mail to user@scripts-vhosts.mit.edu
5:26 PM Ticket #92 (robots.txt file permissions) created by mitchb
From [https://help.mit.edu/Ticket/UpdateCallCenter.html?id=883503 RT …

May 10, 2009:

4:44 PM Changeset [1121] by mitchb
New branch for prototyping work on a Fedora Core 11 server
2:35 PM Changeset [1120] by mitchb
Remove former top-level entries that are now in trunk (part 2) Add tags and branches at the top level.
2:27 PM Changeset [1119] by mitchb
Restructure so trunk of the repo is at /trunk, not / (part 1)
1:16 PM Changeset [1118] by quentin
Stuff goes down when AFS goes down...
1:15 PM Changeset [1117] by quentin
Don't notify about AFS outages during... AFS outages.

May 8, 2009:

3:38 AM Changeset [1116] by mitchb
Fix Gallery2 autoinstaller. Don't have separate star/non-star versions. The new version, when updated to use *.scripts, was creating ~locker/scripts-gallery2-star directories, and the onserver code was expecting to write into ~locker/scripts-gallery2. This silently worked for people who had a previous Gallery2 autoinstall, but was broken for anyone else. Good thing I didn't blog about it... totally not as bad as what happened when we advertised Django.

May 7, 2009:

9:19 PM Ticket #91 (autoinstallers should not assume locker 'foo' mounts at '/mit/foo') created by mitchb
The autoinstallers make an invalid assumption that if you 'add foo', …
Note: See TracTimeline for information about the timeline view.