Timeline
Jul 3, 2009:
- 3:47 AM Changeset [1238] by
- Merge r1225:1237 from trunk to branches/fc11-dev
- 3:27 AM Changeset [1237] by
- Small fixes to the server installation doc
- 3:16 AM Changeset [1236] by
- Nitpick punctuation fix in spec file; doesn't change anything
- 2:58 AM Changeset [1235] by
- Tidy up dependencies for php_scripts o Add BuildRequires dependency on php-devel (for phpize) in php_scripts o Add php-devel to scripts install-deps for oursrc packages o Make php_scripts a dependency of scripts-base
- 2:03 AM Changeset [1234] by
- Package the php scripts.so logging module stupid_server_install_kludges--;
- 1:01 AM Changeset [1233] by
- Update to new Athena CellServDB
Jul 2, 2009:
- 8:21 PM Changeset [1232] by
- Fix missing trailing newlines and double-newline.
- 6:50 PM Changeset [1231] by
- Also don't create php.ini symlinks inside subdirectories of .git or .svn
- 6:42 PM Changeset [1230] by
- Don't create php.ini files inside svn or git directories
- 2:50 AM Changeset [1229] by
- Move repositories to new location.
Jul 1, 2009:
- 8:05 PM Changeset [1228] by
- Patch SSH to add environment variable of Kerberos principal. Patch stolen from XVM.
- 2:14 PM Changeset [1227] by
- Add cycling-club to set of blocked mail users, and split the list off into a file for easier updating
- 12:37 PM Changeset [1226] by
- Merge r1219:1225 from trunk to branches/fc11-dev
- 12:11 PM Changeset [1225] by
- Make athrun use arch/@sys/bin instead of just bin
- 12:04 PM Changeset [1224] by
- Convert MediaWiki autoinstaller to use new Git system. This was originally a set of three commits that were reverted in preparation for a merge.
- 12:00 PM Changeset [1223] by
- Merge scriptsdev changes from trunk (in practice, it should be the other way around).
- 11:57 AM Changeset [1222] by
- Fix incorrect including of production onserver.pm when scriptsdev=dev is used.
- 11:56 AM Changeset [1221] by
- Branching trunk for locker development. This is what will go in deploydev.
- 11:51 AM Changeset [1220] by
- Merge r1209:1219 from trunk to branches/fc11-dev
- 10:53 AM Ticket #100 (.txt should be a trusted extension) closed by
- wontfix: Since the scripts team is not comfortable evaluating every .txt file …
- 10:40 AM Ticket #100 (.txt should be a trusted extension) created by
- The primary concern with this is that the behavior of scripts.mit.edu …
- 9:44 AM Ticket #98 (athrun should exist on scripts servers) closed by
- fixed: The Athena 9.4 RPMs won't work. athrun is just a simple shell script …
- 9:17 AM Changeset [1219] by
- Add a very braindead implementation of athrun for scripts. This version just assumes that you want to run /mit/locker/bin/program, and does not use the fairly complex athdir tool and library that Athena do; they would require actual work to get going on scripts, as they end up with the wrong arch directory as built for Athena 9.
- 5:53 AM Ticket #99 (test ticket for updated zephyr plugin) closed by
- fixed: Sorry for the noise; all fixed now, I think.
- 5:42 AM Ticket #99 (test ticket for updated zephyr plugin) created by
- foo
- 1:03 AM Changeset [1218] by
- Add list of dotfiles to transfer.
Jun 30, 2009:
- 8:46 PM Changeset [1217] by
- Reverted changes improperly checked into trunk and not a development branch.
- 8:37 PM Changeset [1216] by
- Move copy functionality onto scripts server to remove dependence on Git locker.
- 8:09 PM Ticket #98 (athrun should exist on scripts servers) created by
- It doesn't. The Athena 9.4 rpms might work.
- 5:03 PM Ticket #97 (Autoinstaller deploy/deploydev should use Git) created by
- Autoinstallers are no longer all on svn trunk, but they are still …
- 4:54 PM Changeset [1215] by
- Implement enhanced logic for Git-style installs; namely, removing patching facilities that are built into Git and generating an empty commit when performing the install to subsume .scripts-version.
- 2:50 PM Changeset [1214] by
- SSL cert and config for tours.mit.edu
- 2:05 AM Ticket #69 (parallel-find hangs outside -c athena) closed by
- wontfix: In the future, the supported use-case for parallel-find.pl will to be …
- 2:00 AM Ticket #64 (Autoinstallers should use svn co instead of untar) closed by
- wontfix: The decision was to use a Git based system, named Wizard.
- 1:54 AM Ticket #96 (parallel-find.pl will fail to find new-style autoinstalls) created by
- New style autoinstalls will not have .scripts-version files in them; …
- 1:46 AM Ticket #95 (Onserver scripts hard-code deploy directory) created by
- All of the onserver scripts for autoinstallers hardcode the deploy …
- 12:14 AM Changeset [1213] by
- Convert MediaWiki to use Git to setup the working directory.
Jun 29, 2009:
- 10:17 PM Changeset [1212] by
- Remove hardcoded fc11 and IP address.
- 9:47 PM Changeset [1211] by
- More install information.
Jun 25, 2009:
- 9:40 AM Changeset [1210] by
- Merge r1197:1209 from trunk to branches/fc11-dev
- 9:07 AM Changeset [1209] by
- kmod-openafs should be shaken, not stirred... err, installed, not updated You know those previous couple kernels we keep around in case a new one doesn't work? It'd be nice to be able to actually boot up the server under one of them... which requires the previous scripts AFS kernel module not to have been ripped out.
Jun 24, 2009:
- 1:54 PM Changeset [1208] by
- Add ImageMagick PHP extension
- 1:18 AM Ticket #25 (document LVS so as not to confuse users and their code) closed by
- fixed: While it doesn't explain LVS in detail, almost none of our users …
- 12:57 AM Ticket #61 (get certs signed by a real CA) closed by
- fixed: EQUIFAX FTW!!!!!!!ONE
- 12:53 AM Ticket #68 (Trying to make a cert-protected WordPress results in a redirection loop) closed by
- worksforme: You can actually create a cert-protected WordPress? without hitting a …
- 12:48 AM Ticket #76 (Upgrade Joomla) closed by
- fixed: It would seem that we have once again reached the end of time. I've …
- 12:40 AM Changeset [1207] by
- Complete overhaul of Joomla autoinstaller for version 1.5.11
Jun 22, 2009:
- 4:09 PM Changeset [1206] by
- More documentation updates.
Jun 20, 2009:
- 11:39 PM Changeset [1205] by
- Improve install docs from not-backward install.
Jun 17, 2009:
- 2:34 AM Changeset [1204] by
- Don't allow users to DoS the finger server on syn
- 2:33 AM Changeset [1203] by
- Apparently, ipvsadm, sed, and awk need more than 1 meg to run :(
- 2:30 AM Changeset [1202] by
- Don't allow HTTP and finger clients to steal too much RAM
- 2:24 AM Changeset [1201] by
- Browsers won't let you send HTTP to the finger port... :(
- 2:20 AM Changeset [1200] by
- HTTP-based list of scripts servers on http://scripts.mit.edu:78/
- 12:50 AM Changeset [1199] by
- Give finger port to the LVS directors
Jun 15, 2009:
- 11:30 PM Ticket #20 (scripts LVS design issues) closed by
- fixed: The LVS directors now run a local sorry-server that responds to all …
- 11:19 PM Ticket #89 (@reboot cron jobs sometimes start before afsagent gets tokens) closed by
- fixed: Fixed in r1187
Jun 14, 2009:
- 5:26 AM Changeset [1198] by
- Merge r1178:1197 from trunk to branches/fc11-dev
- 5:21 AM Changeset [1197] by
- Turn off the new php extensions in Fedora 11
- 5:20 AM Changeset [1196] by
- New php ini files appeared in Fedora 11
- 3:54 AM Changeset [1195] by
- LVS: b-k has more RAM now, so put it on equal priority.
- 3:51 AM Changeset [1194] by
- LVS: Add a fingerd Also punt some old ports that tried to run commands that no longer exist. Much as I'd like it to run as nobody, ipvsadm needs to run as root.
- 3:31 AM Changeset [1193] by
- Commiting enabling of dom.ini, pending further performance review.
Jun 13, 2009:
- 4:41 PM Changeset [1192] by
- RECOVERY alert - maintainer/geofft is OK
- 2:12 PM Changeset [1191] by
- Remove expired test cert and config for geofft.mit.edu
Jun 12, 2009:
- 7:35 PM Changeset [1190] by
- Make the server install directions slightly more complete
- 2:31 AM Changeset [1189] by
- Apply OpenAFS delta linux26-defer-cred-changing-20090511 The OpenAFS newsletter claims we need this on Fedora 11, and it will be present in the upcoming 1.4.11 release.
- 1:35 AM Changeset [1188] by
- webaccess: No more chmod 777 .ht*.
Jun 11, 2009:
- 11:32 AM Changeset [1187] by
- Always ensure we have tokens before starting crond
Jun 10, 2009:
- 1:58 PM Ticket #94 (Shibboleth authentication) created by
- We should support Shibboleth authentication, as implemented by MIT …
Jun 9, 2009:
- 4:56 PM Changeset [1186] by
- Apparently FC11 changes /etc/httpd/run's target and mode
- 2:57 PM Changeset [1185] by
- Update Munin plugins for watching FWMs
- 2:32 PM Changeset [1184] by
- Change the LVS configuration to use the same source hashing; FWM 1 is the same as before, FWM 2 is Apache-bound traffic, and FWM 3 is Postfix-bound traffic
- 2:30 PM Changeset [1183] by
- Tweak sorry server configuration for maximum performance
- 10:48 AM Changeset [1182] by
- Configure yum-updatesd with the scripts customizations o Check every 4 hours instead of every hour o E-mail us about updates o Download updates and their dependencies automatically
- 10:46 AM Changeset [1181] by
- Add yum-updatesd config file to the repo
- 10:07 AM Changeset [1180] by
- Provide enough memory for java to spit out its usage message Java has become an insanely memory-hungry hog and requires the virtual memory address space limits to be raised beyond anything sane. Bump the "as" limit in limits.conf from 1GB to 1.25GB, and the "RLimitMEM" directive in httpd.conf from 0.5GB to 1.25GB.
Jun 8, 2009:
- 1:07 PM Changeset [1179] by
- Merge r1121:1178 from trunk to branches/fc11-dev
- 7:51 AM Changeset [1178] by
- Make installation of a scripts server less of a hazing ritual by explaining some of the mysterious things you'll otherwise botch. Plenty of hazing remains, though.
Jun 7, 2009:
- 2:31 AM Changeset [1177] by
- Document how to generate a pkcs12 file from a PEM certificate and key
- 1:21 AM Changeset [1176] by
- Add c-w to relevant hostgroups in Nagios
Jun 6, 2009:
- 10:55 PM Changeset [1175] by
- Bash whatever keeps clobbering resolv.conf at boot time over the head
- 10:00 PM Changeset [1174] by
- Monitor new scripts webserver cats-whiskers
- 9:49 PM Changeset [1173] by
- Add AFS sysnames for scripts on Leonidas (F11)
- 9:48 PM Changeset [1172] by
- Allow more AFS sysnames... you can never have enough
- 1:57 PM Changeset [1171] by
- Script for checking certificate expiration times
Jun 5, 2009:
- 4:18 PM Changeset [1170] by
- scripts.mit.edu Equifax-signed 2-year cert
- 12:24 AM Changeset [1169] by
- suexec: Hardcode the JAVA_TOOL_OPTIONS value. Because, otherwise, suexec doesn't save you from JAVA_TOOL_OPTIONS="-cp /path/to/sketchy/code.jar". Reported by Anders.
Jun 4, 2009:
- 11:32 PM Changeset [1168] by
- Make Java work again by reducing its maximum heap size. Otherwise, it will crash with an out-of-memory error on startup because it tries to allocate 1.05 G. While one option is to increase our memory limits, a better one is to make it grab less RAM. The startup code's idea of "a reasonable fraction" of total physical memory in the machine is not our idea of a reasonable amount for one process on scripts to use. Reported by tabbott, debugged by quentin and geofft, fix suggested by mitchb.
- 10:47 PM Changeset [1167] by
- suexec: Let the JAVA_TOOL_OPTIONS environment variable through.
- 9:04 PM Changeset [1166] by
- Replace *.scripts' cert with an Equifax-signed one from RapidSSL.
- 5:20 AM Changeset [1165] by
- limits.conf: Actually, keep data and as around. rss isn't respected according to quentin's testing, so we should keep the data and as limits so we still have a memory usage limit. On the other hand, Anders is right that we have no reason to _increase_ memlock from its defaults.
- 5:18 AM Changeset [1164] by
- Revert r1162 (DDoS over?)
- 2:13 AM Changeset [1163] by
- Punt memory limits other than rss.
Jun 3, 2009:
- 1:31 PM Changeset [1162] by
- Temporarily reduce request timeouts in order to deal with DDoS
- 12:03 PM Changeset [1161] by
- Restore accidentally lost lines in syslog-ng.conf
- 11:30 AM Changeset [1160] by
- Config for ssh and networking to interact with cats-whiskers
- 11:27 AM Changeset [1159] by
- Update for current version of munin config files
- 11:27 AM Changeset [1158] by
- Update for current version of limits.conf
- 11:26 AM Changeset [1157] by
- Don't change the commented-out stat-user in nscd.conf
- 11:25 AM Changeset [1156] by
- Update for current version of nrpe.cfg Mostly reformatting, but significantly, use the package's created 'nrpe' user instead of the nonexistent 'nagios' user
- 11:23 AM Changeset [1155] by
- Update for current version of syslog-ng.conf Mostly reformatting, but also uses more meaningful names for the default set of filters
- 11:22 AM Changeset [1154] by
- No reason to empty out the default comments in our empty printcap
- 11:21 AM Changeset [1153] by
- Bump version of postfix
- 11:19 AM Changeset [1152] by
- updatedb is in /usr/bin, not /usr/sbin
- 11:18 AM Changeset [1151] by
- Apache's PID file path changed
- 11:17 AM Changeset [1150] by
- Don't pull any packages from testing on Fedora 11 yet
- 11:16 AM Changeset [1149] by
- Punt the acpi config so that soft poweroff will work
- 6:51 AM Changeset [1148] by
- Use the scripts fc11 yum repo
- 6:50 AM Changeset [1147] by
- Build system updates for Fedora 11 o Don't fetch upstream pysvn source o Fedora 11 does i586, not i386, for 32-bit packages o krb5 needs texlive-latex to build o openssh needs fipscheck-devel to build o gobject-devel isn't available, and openssh doesn't really need it o Add build dependencies for php
- 6:46 AM Changeset [1146] by
- Version, context, etc. fixups to build Apache on Fedora 11
- 6:43 AM Changeset [1145] by
- Context fixups to build PHP on Fedora 11
- 6:42 AM Changeset [1144] by
- Version, context, etc. fixups to build nss-ldapd on Fedora 11
- 6:41 AM Changeset [1143] by
- Version, context, etc. fixups to build OpenSSH on Fedora 11
- 6:38 AM Changeset [1142] by
- Stop building a scriptsified pysvn
- 6:37 AM Changeset [1141] by
- Version, context, etc. fixups to build krb5 on Fedora 11
- 6:35 AM Changeset [1140] by
- Don't require scripts-pysvn in scripts-base anymore Since we're not forcing a newer version of svn than in the base distribution, it's no longer necessary to rebuild pysvn against it.
- 6:33 AM Changeset [1139] by
- Apply OpenAFS delta dprintf-rename-20090427 Renames the dpatch #define, which conflicts in Fedora 11
- 2:28 AM Changeset [1138] by
- Remove huge autogenerated tests directory.
- 2:15 AM Changeset [1137] by
- Import scripts PHP module
Note: See TracTimeline
for information about the timeline view.
