Jul 2, 2011:

3:01 PM Changeset [1926] by mitchb
Unbork yum-plugin-post-transaction-actions We tried to be too clever for ourselves; stop doing that. Our intent was to make sure that permission changes were made on both installs and updates of packages containing relevant files, but we didn't want to duplicate each line, so we chose to trigger on "any" instead of "install" and "update". An update actually consists of installation of one package and removal of its previous version, and filelists aren't available to yum or rpm for removed packages, so if your trigger is a filename on a removed package, the plugin fails ungracefully. Since an update includes an install of the new package version, the "install" package set includes all updated packages, and we should only trigger on it. Additionally, the -f option we gave chmod to blow through errors silently when files weren't there (for removal of a package) won't be necessary as a result.

Jul 1, 2011:

4:33 PM Changeset [1925] by geofft
It helps to edit curl.spec instead of curl.spec.orig
4:17 PM Changeset [1924] by geofft
curl.spec.patch: Don't run tests
11:04 AM Changeset [1923] by geofft
Fix file name in curl.spec.patch
10:58 AM Changeset [1922] by geofft
Patch curl for CVE-2011-2192: do not delegate tickets over HTTP
2:00 AM Ticket #208 (We deleted the known_hosts file) closed by achernya
fixed: Updated known_hosts in r1921.
1:55 AM Changeset [1921] by achernya
Enumerate all hosts for known_hosts Enumerate all 9 scripts servers, scripts, scripts-vhosts, scripts-test, and IP addresses.
1:18 AM Changeset [1920] by achernya
Bring known_hosts under version control Bring the known_hosts file under version control. It previous had been sitting in the ssh/ directory in the locker. Additionally, correct the scripts-ssh and ssh scripts to point to this new location. Note that this requires the creation of the etc -> checkout/etc symlink in the locker.

Jun 30, 2011:

9:44 PM Ticket #208 (We deleted the known_hosts file) created by geofft
And so autoinstalls prompt about host keys. We should fix this.

Jun 28, 2011:

2:45 PM Changeset [1919] by mitchb
statoverride yum post-transaction action o Name the file as we'd discussed o Fill in missing entry o Don't clutter it with the documentation that's in the sample
4:07 AM Changeset [1918] by achernya
Create yum post-actions: setugid-override.action This file is to be used with yum-plugin-post-transaction-actions. The specified files will be stripped of their set[ug]id bits upon installation or update.
4:05 AM Ticket #207 (/etc/rc.d/rc.local is not executable) created by andersk
So we’ve been failing to execute /etc/rc.d/rc.local for who knows how …
3:54 AM Ticket #206 (We forgot to keep disabling new PHP extensions) created by andersk
[…] We should consider disabling these for F15, and add a step to …
3:35 AM Changeset [1917] by achernya
Create check-setugid cronjob This cronjob and associated whitelist will search the Scripts servers daily for set[ug]id binaries, and complain if any unexpected ones are found.

Jun 26, 2011:

1:55 PM Changeset [1916] by achernya
aliases: correct file format The /etc/aliases file can't have comments at an arbitrary position in the line. According to aliases(5), only "Lines beginning with # are comments."

Jun 25, 2011:

3:36 PM Changeset [1915] by adehnert
Disable mail for dbriggs and ro21531

Jun 21, 2011:

5:24 PM Changeset [1914] by achernya
Restore openafs-localcsdb.patch Mitch points out that the localcsdb patch was just Scripts configuration, and not actually relevant to the Scripts AFS patch. Therefore, the patch has been brought back, split out into a separte file as it was before.

Jun 20, 2011:

7:07 PM Changeset [1913] by achernya
Update OpenAFS from 1.4.14 to 1.6.0pre6 kaduk finished porting the openafs-scripts patch to 1.6.0, which was then lightly modified be me to get it to compile -- mostly fixing typos. The openafs.spec.patch was also fixed, including another chmod +x hack on some libraries to get rpm to properly process them for Provides directives. Interestingly, these libraries had the correct mode in 1.4.14. The patches that were added to get 1.4.14 to compile have also been removed, as 1.6.0pre6 compiles on kernel 2.6.38 unmodified. openafs-numsysnames is getting removed because 32 is now the default. openafs-localcsdb is getting removed because the change was included in kaduk's patchset.

Jun 19, 2011:

12:08 AM Ticket #120 (autoinstalled scripts should be uninstallable without interacting with ...) reopened by achernya

Jun 18, 2011:

11:18 PM Ticket #120 (autoinstalled scripts should be uninstallable without interacting with ...) closed by achernya
wontfix: r1904 punted phpical.
10:38 PM Ticket #179 (resolv.conf gets overwritten on reboot) closed by achernya
fixed: On Fedora 15, the culprit was ifcfg-eth0 specifying DNS servers, …
3:41 PM Changeset [1912] by quentin
Uhh, actually depend on c-p-d

Jun 17, 2011:

8:40 PM Changeset [1911] by achernya
Make d_zroot work properly d_zroot.pl was copied to a-h, and it was noticed that it failed quite horribly. Fixed by Quentin, these changes are also relevant to the Fedora VMs.
6:39 PM Changeset [1910] by achernya
Make ghc-cgi installonly ghc-cgi exists in Fedora, but is an older version than the Scripts package. This allows the yum depsolver to correctly install ghc-* without trying to install i686 packages.
6:35 PM Changeset [1909] by achernya
Allow weak crypto in krb5.conf Without this configuration, F15 would not work with the MIT KDC.

Jun 16, 2011:

2:37 PM Changeset [1908] by achernya
Fix createrepo recommendation in upgrade-tips upgrade-tips has a section on officializing everything, added the `createrepo -d` recommendation there as well.
2:32 PM Changeset [1907] by achernya
Change createrepo recommendation Previously, the Scripts repo was generated without sqlite databases for yum. These would be nice to have, as they make the yum update process better (yum would have to generate the databases itself, slowing it down). Recommendation is now to do `createrepo -d`, to generate the databases. This recommendation has not been added to upgrade-tips, because it doesn't really matter for mock-local.

Jun 12, 2011:

8:59 AM Ticket #197 (Making setting up the git smart HTTP server easy) closed by adehnert
fixed: Docs updated. They're not great; if anybody wants to do further …
8:46 AM Ticket #205 (Document git with certificates) created by adehnert
Either our FAQ or the autoinstaller should link users to some page(s) …
8:10 AM Ticket #130 ("MIT Academic Calendar" is out of date) closed by adehnert
wontfix: r1904 punted phpical.
8:09 AM Ticket #124 (Update or punt phpical autoinstaller) closed by adehnert
fixed: r1904 punted the autoinstaller.
8:09 AM Ticket #5 (PHP iCalendar should default to Eastern time zone) closed by adehnert
wontfix: r1904 punted the installer entirely.
8:08 AM Changeset [1906] by adehnert
Add the git autoinstaller (Trac: #197)
8:08 AM Changeset [1905] by adehnert
Swap the ordering of Joomla and Trac This order feels more logical... Put the bugtracker closer to the webapp frameworks that are likely to go along with bugtracking...
8:08 AM Changeset [1904] by adehnert
Punt the phpical autoinstaller It was never terribly popular, upstream is ~dead, and I bet this version has security issues. (Trac: #124)
8:07 AM Changeset [1903] by adehnert
Remove the advanced{poll,book} and e107 installers They were never (I think?) terribly popular, we removed them from our menu ages ago, and I bet they install something with known security issues.
7:40 AM Ticket #47 (autoinstallers should support vhosts) closed by adehnert
fixed: By and large, this works. The elephant in the room here is WordPress?, …
7:38 AM Ticket #204 (WordPress should work at other URLs) created by adehnert
WordPress? only works at the URL it's installed at, making life …
7:25 AM Ticket #159 (sensitive tickets plugin causes a bug with milestones) closed by adehnert
fixed: This is irrelevant, because we aren't using that plugin anymore and …
7:00 AM Changeset [1902] by adehnert
Keep the locker-dev branch alive See http://svnbook.red-bean.com/nightly/en/svn.branchmerge.advanced.html

Jun 11, 2011:

11:21 PM Changeset [1901] by adehnert
Merge locker-dev to trunk
11:20 PM Changeset [1900] by cberzan
static-cat: add support for multiple ranges Also added the skeleton for a unit test. The test does not work yet, but the included test cases are useful.
10:13 PM Changeset [1899] by adehnert
Mark r1524 as having already been applied to trunk Change 1524 was essentially applied to trunk as 1551 by Edward.
6:57 PM Ticket #158 (send guest consoles to zephyr) closed by achernya
invalid: -> scripts / trac-158 / mitchb 18:51 (recursive mutex enter? fsck …
1:45 AM Changeset [1898] by adehnert
Use better priority and tag for num-crontabs It needs to be authpriv to get zephyred.
12:38 AM Changeset [1897] by andersk
logview: Make /usr/local/bin/logview setgid to the right group, even
12:18 AM Changeset [1896] by andersk
Makefile: fix openafs_url
12:15 AM Changeset [1895] by andersk
logview: Make /usr/local/bin/logview setgid, not setuid This is needed because the error logs have group logview, not user logview.
12:03 AM Changeset [1894] by andersk
logview: Simplify, fix spurious newlines, get rid of sketchy regexes
12:00 AM Changeset [1893] by quentin
Add a dependency on subversion

Jun 10, 2011:

11:34 PM Changeset [1892] by quentin
Version 0.1 of scripts host config package
11:30 PM Changeset [1891] by quentin
Move Xen stuff into a separate host/ directory
11:27 PM Changeset [1890] by quentin
Allow logview usage for sipb-cell lockers

Jun 8, 2011:

9:05 PM Changeset [1889] by achernya
Also update new repo path for mock
7:32 PM Changeset [1888] by achernya
Update location of Scripts repository for F13
1:33 PM Changeset [1887] by mitchb
Renewed certificate for scripts-cert
4:03 AM Changeset [1886] by achernya
Postfix got updated for F15 since last configuration update.
3:47 AM Changeset [1885] by achernya
Set sysname for Fedora 15
2:56 AM Changeset [1884] by achernya
Whitespace sucks. Spaces replaced with tabs. Makefile is happy again.
2:53 AM Changeset [1883] by achernya
Fix Makefile to be aware of athena-aclocal and discuss. In the earlier large merge from trunk, Makefile was incorrectly left as "mine-full" instead of a proper conflicts resolution. This version of Makefile correctly includes the changes that were missed.
2:44 AM Changeset [1882] by andersk
Also this directory
2:42 AM Changeset [1881] by andersk
Remove this 00scripts-home.pth too
2:36 AM Changeset [1880] by andersk
Remove 00scripts-home.pth for Fedora 15 The path for user-installed Python modules needs to change anyway from ~/lib/python2.6/site-packages because the Python version is changing, and nobody will be using ~/lib/python2.7/site-packages yet, so let’s take this opportunity to switch to the upstream-supported path: ~/.local/lib/python2.7/site-packages. This is also where modules installed using ‘easy_install --user’ go. (The relevant documentation has already been updated, since this works already as of Python 2.6.)
2:09 AM Changeset [1879] by achernya
Add scripts-static-cat to scripts-base.

Jun 7, 2011:

12:58 PM Changeset [1878] by achernya
Merge r1803-1877 from trunk to branches/fc15-dev
12:23 PM Changeset [1877] by geofft
static-cat: Add all MS Office (including OOXML) and ODF types
12:18 AM Changeset [1876] by achernya
sysconfig/sysstat configuration for F15
12:15 AM Changeset [1875] by achernya
sysconfig/httpd configuration for F15
12:06 AM Changeset [1874] by achernya
syslog-ng configuration for F15
12:01 AM Changeset [1873] by achernya
Postfix configuration for F15

Jun 6, 2011:

12:46 PM Changeset [1872] by geofft
11:12 AM Changeset [1871] by geofft
Certificate renewal for tours.mit.edu
4:00 AM Ticket #203 (Integrate Django better with scripts) created by adehnert
People running Django on scripts.mit.edu are fairly likely to want to …

Jun 5, 2011:

6:49 AM Changeset [1870] by adehnert
Actually write to the log file
4:29 AM Changeset [1869] by adehnert
Script to report crontabs not being on the primary

Jun 4, 2011:

3:08 AM Ticket #169 (Failed LDAP replication due to busy replica should only warn when ...) closed by adehnert
wontfix: WONTFIX'ing per zephyr conversation just now on -c scripts -i …
Note: See TracTimeline for information about the timeline view.