Jul 1, 2009:

8:05 PM Changeset [1228] by ezyang
Patch SSH to add environment variable of Kerberos principal. Patch stolen from XVM.
2:14 PM Changeset [1227] by quentin
Add cycling-club to set of blocked mail users, and split the list off into a file for easier updating
12:37 PM Changeset [1226] by mitchb
Merge r1219:1225 from trunk to branches/fc11-dev
12:11 PM Changeset [1225] by mitchb
Make athrun use arch/@sys/bin instead of just bin
12:04 PM Changeset [1224] by ezyang
Convert MediaWiki autoinstaller to use new Git system. This was originally a set of three commits that were reverted in preparation for a merge.
12:00 PM Changeset [1223] by ezyang
Merge scriptsdev changes from trunk (in practice, it should be the other way around).
11:57 AM Changeset [1222] by ezyang
Fix incorrect including of production onserver.pm when scriptsdev=dev is used.
11:56 AM Changeset [1221] by ezyang
Branching trunk for locker development. This is what will go in deploydev.
11:51 AM Changeset [1220] by mitchb
Merge r1209:1219 from trunk to branches/fc11-dev
10:53 AM Ticket #100 (.txt should be a trusted extension) closed by ezyang
wontfix: Since the scripts team is not comfortable evaluating every .txt file …
10:40 AM Ticket #100 (.txt should be a trusted extension) created by ezyang
The primary concern with this is that the behavior of scripts.mit.edu …
9:44 AM Ticket #98 (athrun should exist on scripts servers) closed by mitchb
fixed: The Athena 9.4 RPMs won't work. athrun is just a simple shell script …
9:17 AM Changeset [1219] by mitchb
Add a very braindead implementation of athrun for scripts. This version just assumes that you want to run /mit/locker/bin/program, and does not use the fairly complex athdir tool and library that Athena do; they would require actual work to get going on scripts, as they end up with the wrong arch directory as built for Athena 9.
5:53 AM Ticket #99 (test ticket for updated zephyr plugin) closed by mitchb
fixed: Sorry for the noise; all fixed now, I think.
5:42 AM Ticket #99 (test ticket for updated zephyr plugin) created by mitchb
1:03 AM Changeset [1218] by ezyang
Add list of dotfiles to transfer.

Jun 30, 2009:

8:46 PM Changeset [1217] by ezyang
Reverted changes improperly checked into trunk and not a development branch.
8:37 PM Changeset [1216] by ezyang
Move copy functionality onto scripts server to remove dependence on Git locker.
8:09 PM Ticket #98 (athrun should exist on scripts servers) created by ezyang
It doesn't. The Athena 9.4 rpms might work.
5:03 PM Ticket #97 (Autoinstaller deploy/deploydev should use Git) created by ezyang
Autoinstallers are no longer all on svn trunk, but they are still …
4:54 PM Changeset [1215] by ezyang
Implement enhanced logic for Git-style installs; namely, removing patching facilities that are built into Git and generating an empty commit when performing the install to subsume .scripts-version.
2:50 PM Changeset [1214] by geofft
SSL cert and config for tours.mit.edu
2:05 AM Ticket #69 (parallel-find hangs outside -c athena) closed by ezyang
wontfix: In the future, the supported use-case for parallel-find.pl will to be …
2:00 AM Ticket #64 (Autoinstallers should use svn co instead of untar) closed by ezyang
wontfix: The decision was to use a Git based system, named Wizard.
1:54 AM Ticket #96 (parallel-find.pl will fail to find new-style autoinstalls) created by ezyang
New style autoinstalls will not have .scripts-version files in them; …
1:46 AM Ticket #95 (Onserver scripts hard-code deploy directory) created by ezyang
All of the onserver scripts for autoinstallers hardcode the deploy …
12:14 AM Changeset [1213] by ezyang
Convert MediaWiki to use Git to setup the working directory.

Jun 29, 2009:

10:17 PM Changeset [1212] by ezyang
Remove hardcoded fc11 and IP address.
9:47 PM Changeset [1211] by ezyang
More install information.

Jun 25, 2009:

9:40 AM Changeset [1210] by mitchb
Merge r1197:1209 from trunk to branches/fc11-dev
9:07 AM Changeset [1209] by mitchb
kmod-openafs should be shaken, not stirred... err, installed, not updated You know those previous couple kernels we keep around in case a new one doesn't work? It'd be nice to be able to actually boot up the server under one of them... which requires the previous scripts AFS kernel module not to have been ripped out.

Jun 24, 2009:

1:54 PM Changeset [1208] by quentin
Add ImageMagick PHP extension
1:18 AM Ticket #25 (document LVS so as not to confuse users and their code) closed by mitchb
fixed: While it doesn't explain LVS in detail, almost none of our users …
12:57 AM Ticket #61 (get certs signed by a real CA) closed by mitchb
fixed: EQUIFAX FTW!!!!!!!ONE
12:53 AM Ticket #68 (Trying to make a cert-protected WordPress results in a redirection loop) closed by mitchb
worksforme: You can actually create a cert-protected WordPress? without hitting a …
12:48 AM Ticket #76 (Upgrade Joomla) closed by mitchb
fixed: It would seem that we have once again reached the end of time. I've …
12:40 AM Changeset [1207] by mitchb
Complete overhaul of Joomla autoinstaller for version 1.5.11

Jun 22, 2009:

4:09 PM Changeset [1206] by ezyang
More documentation updates.

Jun 20, 2009:

11:39 PM Changeset [1205] by ezyang
Improve install docs from not-backward install.

Jun 17, 2009:

2:34 AM Changeset [1204] by quentin
Don't allow users to DoS the finger server on syn
2:33 AM Changeset [1203] by quentin
Apparently, ipvsadm, sed, and awk need more than 1 meg to run :(
2:30 AM Changeset [1202] by quentin
Don't allow HTTP and finger clients to steal too much RAM
2:24 AM Changeset [1201] by quentin
Browsers won't let you send HTTP to the finger port... :(
2:20 AM Changeset [1200] by quentin
HTTP-based list of scripts servers on http://scripts.mit.edu:78/
12:50 AM Changeset [1199] by quentin
Give finger port to the LVS directors

Jun 15, 2009:

11:30 PM Ticket #20 (scripts LVS design issues) closed by quentin
fixed: The LVS directors now run a local sorry-server that responds to all …
11:19 PM Ticket #89 (@reboot cron jobs sometimes start before afsagent gets tokens) closed by quentin
fixed: Fixed in r1187

Jun 14, 2009:

5:26 AM Changeset [1198] by mitchb
Merge r1178:1197 from trunk to branches/fc11-dev
5:21 AM Changeset [1197] by mitchb
Turn off the new php extensions in Fedora 11
5:20 AM Changeset [1196] by mitchb
New php ini files appeared in Fedora 11
3:54 AM Changeset [1195] by geofft
LVS: b-k has more RAM now, so put it on equal priority.
3:51 AM Changeset [1194] by geofft
LVS: Add a fingerd Also punt some old ports that tried to run commands that no longer exist. Much as I'd like it to run as nobody, ipvsadm needs to run as root.
3:31 AM Changeset [1193] by ezyang
Commiting enabling of dom.ini, pending further performance review.

Jun 13, 2009:

4:41 PM Changeset [1192] by geofft
RECOVERY alert - maintainer/geofft is OK
2:12 PM Changeset [1191] by mitchb
Remove expired test cert and config for geofft.mit.edu

Jun 12, 2009:

7:35 PM Changeset [1190] by mitchb
Make the server install directions slightly more complete
2:31 AM Changeset [1189] by mitchb
Apply OpenAFS delta linux26-defer-cred-changing-20090511 The OpenAFS newsletter claims we need this on Fedora 11, and it will be present in the upcoming 1.4.11 release.
1:35 AM Changeset [1188] by andersk
webaccess: No more chmod 777 .ht*.

Jun 11, 2009:

11:32 AM Changeset [1187] by quentin
Always ensure we have tokens before starting crond

Jun 10, 2009:

1:58 PM Ticket #94 (Shibboleth authentication) created by quentin
We should support Shibboleth authentication, as implemented by MIT …

Jun 9, 2009:

4:56 PM Changeset [1186] by geofft
Apparently FC11 changes /etc/httpd/run's target and mode
2:57 PM Changeset [1185] by quentin
Update Munin plugins for watching FWMs
2:32 PM Changeset [1184] by quentin
Change the LVS configuration to use the same source hashing; FWM 1 is the same as before, FWM 2 is Apache-bound traffic, and FWM 3 is Postfix-bound traffic
2:30 PM Changeset [1183] by quentin
Tweak sorry server configuration for maximum performance
10:48 AM Changeset [1182] by mitchb
Configure yum-updatesd with the scripts customizations o Check every 4 hours instead of every hour o E-mail us about updates o Download updates and their dependencies automatically
10:46 AM Changeset [1181] by mitchb
Add yum-updatesd config file to the repo
10:07 AM Changeset [1180] by mitchb
Provide enough memory for java to spit out its usage message Java has become an insanely memory-hungry hog and requires the virtual memory address space limits to be raised beyond anything sane. Bump the "as" limit in limits.conf from 1GB to 1.25GB, and the "RLimitMEM" directive in httpd.conf from 0.5GB to 1.25GB.

Jun 8, 2009:

1:07 PM Changeset [1179] by mitchb
Merge r1121:1178 from trunk to branches/fc11-dev
7:51 AM Changeset [1178] by mitchb
Make installation of a scripts server less of a hazing ritual by explaining some of the mysterious things you'll otherwise botch. Plenty of hazing remains, though.

Jun 7, 2009:

2:31 AM Changeset [1177] by quentin
Document how to generate a pkcs12 file from a PEM certificate and key
1:21 AM Changeset [1176] by mitchb
Add c-w to relevant hostgroups in Nagios

Jun 6, 2009:

10:55 PM Changeset [1175] by mitchb
Bash whatever keeps clobbering resolv.conf at boot time over the head
10:00 PM Changeset [1174] by mitchb
Monitor new scripts webserver cats-whiskers
9:49 PM Changeset [1173] by mitchb
Add AFS sysnames for scripts on Leonidas (F11)
9:48 PM Changeset [1172] by mitchb
Allow more AFS sysnames... you can never have enough
1:57 PM Changeset [1171] by quentin
Script for checking certificate expiration times

Jun 5, 2009:

4:18 PM Changeset [1170] by geofft
scripts.mit.edu Equifax-signed 2-year cert
12:24 AM Changeset [1169] by geofft
suexec: Hardcode the JAVA_TOOL_OPTIONS value. Because, otherwise, suexec doesn't save you from JAVA_TOOL_OPTIONS="-cp /path/to/sketchy/code.jar". Reported by Anders.

Jun 4, 2009:

11:32 PM Changeset [1168] by geofft
Make Java work again by reducing its maximum heap size. Otherwise, it will crash with an out-of-memory error on startup because it tries to allocate 1.05 G. While one option is to increase our memory limits, a better one is to make it grab less RAM. The startup code's idea of "a reasonable fraction" of total physical memory in the machine is not our idea of a reasonable amount for one process on scripts to use. Reported by tabbott, debugged by quentin and geofft, fix suggested by mitchb.
10:47 PM Changeset [1167] by geofft
suexec: Let the JAVA_TOOL_OPTIONS environment variable through.
9:04 PM Changeset [1166] by geofft
Replace *.scripts' cert with an Equifax-signed one from RapidSSL.
5:20 AM Changeset [1165] by geofft
limits.conf: Actually, keep data and as around. rss isn't respected according to quentin's testing, so we should keep the data and as limits so we still have a memory usage limit. On the other hand, Anders is right that we have no reason to _increase_ memlock from its defaults.
5:18 AM Changeset [1164] by quentin
Revert r1162 (DDoS over?)
2:13 AM Changeset [1163] by andersk
Punt memory limits other than rss.

Jun 3, 2009:

1:31 PM Changeset [1162] by quentin
Temporarily reduce request timeouts in order to deal with DDoS
12:03 PM Changeset [1161] by mitchb
Restore accidentally lost lines in syslog-ng.conf
11:30 AM Changeset [1160] by mitchb
Config for ssh and networking to interact with cats-whiskers
11:27 AM Changeset [1159] by mitchb
Update for current version of munin config files
11:27 AM Changeset [1158] by mitchb
Update for current version of limits.conf
11:26 AM Changeset [1157] by mitchb
Don't change the commented-out stat-user in nscd.conf
11:25 AM Changeset [1156] by mitchb
Update for current version of nrpe.cfg Mostly reformatting, but significantly, use the package's created 'nrpe' user instead of the nonexistent 'nagios' user
11:23 AM Changeset [1155] by mitchb
Update for current version of syslog-ng.conf Mostly reformatting, but also uses more meaningful names for the default set of filters
11:22 AM Changeset [1154] by mitchb
No reason to empty out the default comments in our empty printcap
11:21 AM Changeset [1153] by mitchb
Bump version of postfix
11:19 AM Changeset [1152] by mitchb
updatedb is in /usr/bin, not /usr/sbin
11:18 AM Changeset [1151] by mitchb
Apache's PID file path changed
11:17 AM Changeset [1150] by mitchb
Don't pull any packages from testing on Fedora 11 yet
11:16 AM Changeset [1149] by mitchb
Punt the acpi config so that soft poweroff will work
6:51 AM Changeset [1148] by mitchb
Use the scripts fc11 yum repo
6:50 AM Changeset [1147] by mitchb
Build system updates for Fedora 11 o Don't fetch upstream pysvn source o Fedora 11 does i586, not i386, for 32-bit packages o krb5 needs texlive-latex to build o openssh needs fipscheck-devel to build o gobject-devel isn't available, and openssh doesn't really need it o Add build dependencies for php
6:46 AM Changeset [1146] by mitchb
Version, context, etc. fixups to build Apache on Fedora 11
6:43 AM Changeset [1145] by mitchb
Context fixups to build PHP on Fedora 11
6:42 AM Changeset [1144] by mitchb
Version, context, etc. fixups to build nss-ldapd on Fedora 11
6:41 AM Changeset [1143] by mitchb
Version, context, etc. fixups to build OpenSSH on Fedora 11
6:38 AM Changeset [1142] by mitchb
Stop building a scriptsified pysvn
6:37 AM Changeset [1141] by mitchb
Version, context, etc. fixups to build krb5 on Fedora 11
6:35 AM Changeset [1140] by mitchb
Don't require scripts-pysvn in scripts-base anymore Since we're not forcing a newer version of svn than in the base distribution, it's no longer necessary to rebuild pysvn against it.
6:33 AM Changeset [1139] by mitchb
Apply OpenAFS delta dprintf-rename-20090427 Renames the dpatch #define, which conflicts in Fedora 11
2:28 AM Changeset [1138] by andersk
Remove huge autogenerated tests directory.
2:15 AM Changeset [1137] by quentin
Import scripts PHP module

Jun 2, 2009:

5:47 PM Changeset [1136] by geofft
Also delete the config
5:47 PM Changeset [1135] by geofft
cycling-club.scripts' 30-day cert expired, so revert to the *.scripts cert
Note: See TracTimeline for information about the timeline view.