aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ldap-sshkey2file.py: add dry-run and verbose modeOlivier Blin2017-02-231-0/+16
|
* ldap-sshkey2file.py: use argparse for options parsing and usageOlivier Blin2017-02-231-16/+15
|
* ldap-sshkey2file.py: reorder code in write_keys to prepare adding a dry-run modeOlivier Blin2017-02-231-29/+29
|
* ldap-sshkey2file.py: fix path of authorized_keys in usageOlivier Blin2017-02-231-1/+1
|
* Fix ldap-sshkey2file so it doesn't crash when a user has no uidNumberDan Fandrich2017-02-231-3/+3
| | | | | This shouldn't happen in normal operation, but can happen when binding to a DN who doesn't have access to that attribute.
* Adapt to changes in catdap trunkNicolas Lécureuil2017-02-221-22/+1
|
* Add new login_domain_blacklist: optionNicolas Lécureuil2017-02-221-0/+32
| | | | | Rename login_blacklist to login_username_blacklist: Keep login_blacklist for compatibility ( for the migration )
* Use concat from stdlib to add arm32 arch in iurt/upload.confOlivier Blin2017-02-211-2/+4
| | | | | | This avoids hardcoding the x86 arch list one more time. We already use puppet-stdlib for the file_line and concat helpers.
* Use concat from stdlib to merged admins in access classesOlivier Blin2017-02-212-5/+12
| | | | We already use puppet-stdlib for the file_line helper.
* Implicitely allow mga-sysadmin login for all access classesOlivier Blin2017-02-214-4/+5
| | | | | | Like done already for mga-unrestricted_shell_access. There is no easy way to concatenate arrays in puppet, the rules are kept inlined for mga-sysadmin and mga-unrestricted_shell_access.
* Remove unused web_and_artwork access classOlivier Blin2017-02-211-5/+0
|
* Fixup last mediawiki change (missing quote)Olivier Blin2017-02-212-2/+2
|
* Fix mediawiki package nameOlivier Blin2017-02-212-2/+2
| | | | | | | mediawiki-minimal does not exist anymore since Mga3, use mediawiki instead. This still works on alamut (Mga1) and allows installation on sucuk (Mga5).
* Remove broken apache-mod_deflate package requirementOlivier Blin2017-02-212-5/+0
| | | | | | | | | | | | | This has been provided by the apache package directly since Mga3. apache-mod_deflate was used for the planet config only, on the champagne host, running Mga4. puppet failed because it did not handle the virtual package from the apache package: Error: Package apache-mod_deflate was not present after trying to install it Error: /Stage[main]/Apache::Mod::Deflate/Package[apache-mod_deflate]/ensure: change from absent to present failed: Package apache-mod_deflate was not present after trying to install it
* Allow mga-unrestricted_shell_access group login on duvelOlivier Blin2017-02-211-1/+1
| | | | Also-by: Dan Fandrich <dan@coneharvesters.com>
* Allow mga-unrestricted_shell_access group login on all nodesOlivier Blin2017-02-211-0/+1
|
* Remove unnecessary AllowGroups sshd restriction on rabbitOlivier Blin2017-02-211-4/+0
| | | | | | | | This is already covered by pam.d/system-auth, which only allows local users and authorized access classes. Otherwise, login fails: sshd[1234]: fatal: Access denied for user XXX by PAM account configuration [preauth]
* Encourage Tier 1 mirrors to sync at least every hour (mga#20140)Marja van Waes2017-01-191-0/+1
|
* typo fixesMarja van Waes2017-01-191-3/+3
|
* remove accidentally just added empty linesMarja van Waes2017-01-191-2/+0
|
* improve information about expected mirror size (mga#14717)Marja van Waes2017-01-191-1/+8
|
* Typofix (mga#20140). The previous mirror.readme edits today were for that ↵Marja van Waes2017-01-191-1/+1
| | | | bug report, too. Sorry
* Tell where to see the bandwidth and status of the mirrorsMarja van Waes2017-01-191-1/+4
|
* Add the Princeton and the Ibiblio mirrorsMarja van Waes2017-01-191-0/+4
|
* The LinuxCabal mirror no longer existsMarja van Waes2017-01-191-2/+0
|
* - typo fixesMarja van Waes2017-01-191-2/+2
| | | | | o and test whether I can accidentally git push here o because our outdated mirror.readme irritates me
* Unlock the wikiNicolas Lécureuil2017-01-171-1/+1
|
* Lock down wikiThomas Backlund2016-12-231-0/+2
|
* Fix typo (spotted by Neal Gompa)Pascal Terjan2016-12-131-1/+1
|
* enable rabbitThomas Backlund2016-12-111-2/+2
|
* free up rabbit for iso-buildersThomas Backlund2016-12-091-2/+2
|
* enable rabbit to flush build queueThomas Backlund2016-12-081-2/+2
|
* sucuk: temporarily disable xymon configThomas Backlund2016-12-071-4/+4
|
* MirrorBrain: redo cron jobsThomas Backlund2016-12-071-11/+51
|
* mirrorbrain: fix typoThomas Backlund2016-12-061-1/+1
|
* Fix Mageia.pmPascal Terjan2016-12-061-0/+2
|
* Delete broken unwanted codePascal Terjan2016-12-051-21/+0
| | | | | We actually do not want to delete old major of a lib before packages get rebuilt with the new one.
* sucuk: disable mirrorbrain null-sync for nowThomas Backlund2016-12-051-5/+5
|
* valstar will be a buildnodeThomas Backlund2016-12-051-0/+2
|
* allow fiona to use internal repositoryThomas Backlund2016-12-051-0/+2
|
* Kill get_revisions, the one in the base class is betterPascal Terjan2016-12-051-29/+0
|
* Fix duplicate namePascal Terjan2016-11-281-1/+2
|
* Fix syntaxPascal Terjan2016-11-281-1/+1
|
* Properly add armlet6 to bsPascal Terjan2016-11-281-2/+2
|
* simplify regexpThierry Vignaud2016-11-151-1/+1
|
* Disable rabbit as we are building isosNicolas Lécureuil2016-11-061-2/+2
|
* Add iurt to the list of whitelisted mageia packagesPascal Terjan2016-10-171-1/+1
|
* Do not forget about remote builds after 10h, 100h looks more realisticPascal Terjan2016-10-151-0/+1
|
* Avoid rebuilding some old packagesPascal Terjan2016-10-142-0/+10
| | | | | | | | | | When a package gets built for mandatory arches but fails on non mandatory arches, src.rpm stays around (that should be fixed). When we cleanup old log files after 2 weeks, we often have the src.rpm staying around longer (it seems it's ctime gets changed) than the file saying it had already been built for mandatory architectures, so it gets built again then rejected. By removing rpms earlier than the logs, we avoid that problem.
* Revert "Allow members of mga-sysadmin to run sudo on all servers"Pascal Terjan2016-10-133-9/+0
| | | | | | This reverts commit e0230ba1c5819f15245b930df0949b7ddabce4a0. This prevent sysadmins from submitting packages