Index: trunk/server/fedora/config/etc/httpd/conf/httpd.conf =================================================================== --- trunk/server/fedora/config/etc/httpd/conf/httpd.conf (revision 1250) +++ trunk/server/fedora/config/etc/httpd/conf/httpd.conf (revision 1259) @@ -260,5 +260,5 @@ RLimitCPU 300 300 -RLimitMEM 536870912 536870912 +RLimitMEM 1342177280 1342177280 RLimitNPROC 4096 4096 Index: trunk/server/fedora/config/etc/logrotate.d/httpd =================================================================== --- trunk/server/fedora/config/etc/logrotate.d/httpd (revision 1250) +++ trunk/server/fedora/config/etc/logrotate.d/httpd (revision 1259) @@ -6,5 +6,5 @@ sharedscripts postrotate - /bin/kill -HUP `cat /var/run/httpd.pid 2>/dev/null` 2> /dev/null || true + /bin/kill -HUP `cat /var/run/httpd/httpd.pid 2>/dev/null` 2> /dev/null || true endscript } Index: trunk/server/fedora/config/etc/munin/munin-node.conf =================================================================== --- trunk/server/fedora/config/etc/munin/munin-node.conf (revision 1250) +++ trunk/server/fedora/config/etc/munin/munin-node.conf (revision 1259) @@ -5,11 +5,9 @@ log_level 4 log_file /var/log/munin/munin-node.log -port 4949 pid_file /var/run/munin/munin-node.pid + background 1 setseid 1 -# Which port to bind to; -host * user munin group munin @@ -23,9 +21,10 @@ ignore_file \.dpkg-(tmp|new|old|dist)$ ignore_file \.rpm(save|new)$ +ignore_file \.pod$ # Set this if the client doesn't report the correct hostname when # telnetting to localhost, port 4949 # -#host_name ppc2.fedora.redhat.com +#host_name x86-3.fedora.phx.redhat.com # A list of addresses that are allowed to connect. This must be a @@ -37,2 +36,10 @@ allow ^18\.187\.1\.128$ allow ^18\.181\.0\.65$ + +# Which address to bind to; +host * +# host 127.0.0.1 + +# And which port +port 4949 + Index: trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node =================================================================== --- trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node (revision 1250) +++ trunk/server/fedora/config/etc/munin/plugin-conf.d/munin-node (revision 1259) @@ -1,13 +1,15 @@ +# This file is used to configure how the plugins are invoked. +# Place in /etc/munin/plugin-conf.d/ or corresponding directory. # -# This file contains configuration options for the plugins. Three -# options are understood by munin-node itself: +# PLEASE NOTE: Changes in the plugin-conf.d directory are only +# read at munin-node startup, so restart at any changes. # -# user # Set the user to run the plugin as -# group # Set the group to run the plugin as -# command # Run instead of the plugin. %c -# expands to what would normally be run. -# env. # Sets in the plugin's environment, see the -# individual plugins to find out which variables they -# care about. +# user # Set the user to run the plugin as +# group # Set the group to run the plugin as +# command # Run instead of the plugin. %c +# expands to what would normally be run. +# env. # Sets in the plugin's environment, see the +# individual plugins to find out which variables they +# care about. # # Index: trunk/server/fedora/config/etc/nagios/nrpe.cfg =================================================================== --- trunk/server/fedora/config/etc/nagios/nrpe.cfg (revision 1250) +++ trunk/server/fedora/config/etc/nagios/nrpe.cfg (revision 1259) @@ -3,5 +3,5 @@ # Written by: Ethan Galstad (nagios@nagios.org) # -# Last Modified: 02-23-2006 +# Last Modified: 11-23-2007 # # NOTES: @@ -12,4 +12,11 @@ +# LOG FACILITY +# The syslog facility that should be used for logging purposes. + +log_facility=daemon + + + # PID FILE # The name of the file in which the NRPE daemon should write it's process ID @@ -35,5 +42,5 @@ # NOTE: This option is ignored if NRPE is running under either inetd or xinetd -#server_address=192.168.1.1 +#server_address=127.0.0.1 @@ -45,5 +52,5 @@ # NOTE: This option is ignored if NRPE is running under either inetd or xinetd -nrpe_user=nagios +nrpe_user=nrpe @@ -55,5 +62,5 @@ # NOTE: This option is ignored if NRPE is running under either inetd or xinetd -nrpe_group=nagios +nrpe_group=nrpe @@ -125,4 +132,15 @@ command_timeout=60 + + + +# CONNECTION TIMEOUT +# This specifies the maximum number of seconds that the NRPE daemon will +# wait for a connection to be established before exiting. This is sometimes +# seen where a network problem stops the SSL being established even though +# all network sessions are connected. This causes the nrpe daemons to +# accumulate, eating system resources. Do not set this too low. + +connection_timeout=300 @@ -176,17 +194,19 @@ # examples only! + # The following examples use hardcoded command arguments... #command[check_users]=/usr/lib64/nagios/plugins/check_users -w 5 -c 10 #command[check_load]=/usr/lib64/nagios/plugins/check_load -w 15,10,5 -c 30,25,20 -#command[check_disk1]=/usr/lib64/nagios/plugins/check_disk -w 20 -c 10 -p /dev/hda1 -#command[check_disk2]=/usr/lib64/nagios/plugins/check_disk -w 20 -c 10 -p /dev/hdb1 +#command[check_hda1]=/usr/lib64/nagios/plugins/check_disk -w 20% -c 10% -p /dev/hda1 #command[check_zombie_procs]=/usr/lib64/nagios/plugins/check_procs -w 5 -c 10 -s Z #command[check_total_procs]=/usr/lib64/nagios/plugins/check_procs -w 150 -c 200 + # The following examples allow user-supplied arguments and can # only be used if the NRPE daemon was compiled with support for # command arguments *AND* the dont_blame_nrpe directive in this -# config file is set to '1'... +# config file is set to '1'. This poses a potential security risk, so +# make sure you read the SECURITY file before doing this. command[check_users]=/usr/lib64/nagios/plugins/check_users -w $ARG1$ -c $ARG2$ Index: trunk/server/fedora/config/etc/nscd.conf =================================================================== --- trunk/server/fedora/config/etc/nscd.conf (revision 1250) +++ trunk/server/fedora/config/etc/nscd.conf (revision 1259) @@ -35,5 +35,5 @@ max-threads 128 server-user nscd -# stat-user nocpulse +# stat-user somebody debug-level 0 #31 Index: trunk/server/fedora/config/etc/printcap =================================================================== --- trunk/server/fedora/config/etc/printcap (revision 1250) +++ trunk/server/fedora/config/etc/printcap (revision 1259) @@ -0,0 +1,3 @@ +# This file was automatically generated by cupsd(8) from the +# /etc/cups/printers.conf file. All changes to this file +# will be lost. Index: trunk/server/fedora/config/etc/security/limits.conf =================================================================== --- trunk/server/fedora/config/etc/security/limits.conf (revision 1250) +++ trunk/server/fedora/config/etc/security/limits.conf (revision 1259) @@ -27,5 +27,5 @@ # - cpu - max CPU time (MIN) # - nproc - max number of processes -# - as - address space limit +# - as - address space limit (KB) # - maxlogins - max number of logins for this user # - maxsyslogins - max number of logins on the system @@ -34,5 +34,5 @@ # - sigpending - max number of pending signals # - msgqueue - max memory used by POSIX message queues (bytes) -# - nice - max nice priority allowed to raise to +# - nice - max nice priority allowed to raise to values: [-20, 19] # - rtprio - max realtime priority # @@ -41,11 +41,14 @@ # No limits for root -root - +root - +scripts-build - # For everyone else, -* soft core 0 -* - rss 524268 -* - data 1048576 -* - as 1048576 +* soft core 0 +* - rss 524268 +* - data 1048576 +* - as 1310720 + +#* soft core 0 #* hard rss 10000 #@student hard nproc 20 Index: trunk/server/fedora/config/etc/sudoers =================================================================== --- trunk/server/fedora/config/etc/sudoers (revision 1250) +++ trunk/server/fedora/config/etc/sudoers (revision 1259) @@ -34,5 +34,5 @@ ## Updating the locate database -Cmnd_Alias LOCATE = /usr/sbin/updatedb +Cmnd_Alias LOCATE = /usr/bin/updatedb ## Storage Index: trunk/server/fedora/config/etc/sysconfig/networking/profiles/default/resolv.conf =================================================================== --- trunk/server/fedora/config/etc/sysconfig/networking/profiles/default/resolv.conf (revision 1259) +++ trunk/server/fedora/config/etc/sysconfig/networking/profiles/default/resolv.conf (revision 1259) @@ -0,0 +1,2 @@ +search mit.edu +nameserver 127.0.0.1 Index: trunk/server/fedora/config/etc/sysconfig/openafs =================================================================== --- trunk/server/fedora/config/etc/sysconfig/openafs (revision 1250) +++ trunk/server/fedora/config/etc/sysconfig/openafs (revision 1259) @@ -10,4 +10,6 @@ Sulphur) /usr/bin/fs sysname 'amd64_fedora9_scripts' 'amd64_fedora7_scripts' 'scripts' 'amd64_fedora9' 'amd64_fedora7' 'amd64_linux26' 'i386_deb40' 'i386_rhel4' 'i386_rhel3' 'i386_rh9' 'i386_linux26' 'i386_linux24' 'i386_linux22' 'i386_linux3' 'i386_linux2' ;; + Leonidas) + /usr/bin/fs sysname 'amd64_fedora11_scripts' 'amd64_fedora9_scripts' 'amd64_fedora7_scripts' 'scripts' 'amd64_fedora11' 'amd64_fedora9' 'amd64_fedora7' 'amd64_linux26' 'i386_deb50' 'i386_deb40' 'i386_rhel4' 'i386_rhel3' 'i386_rh9' 'i386_linux26' 'i386_linux24' 'i386_linux22' 'i386_linux3' 'i386_linux2' ;; *) echo "Warning: unknown platform. AFS sysname not set." Index: trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf =================================================================== --- trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf (revision 1250) +++ trunk/server/fedora/config/etc/syslog-ng/syslog-ng.conf (revision 1259) @@ -6,52 +6,21 @@ # See syslog-ng(8) and syslog-ng.conf(5) for more information. # -# 20000925 gb@sysfive.com -# -# Updated by Frank Crawford () - 10 Aug 2002 -# - for Red Hat 7.3 -# - totally do away with klogd -# - add message "kernel:" as is done with klogd. -# -# Updated by Frank Crawford () - 22 Aug 2002 -# - use the log_prefix option as per Balazs Scheidler's email -# -# Updated by Jose Pedro Oliveira () - 05 Apr 2003 -# - corrected filters 'f_filter2' and 'f_filter6' -# these filters were only allowing messages of one specific -# priority level; they should be allowing messages from that -# priority and upper levels. -# -# Updated by Jose Pedro Oliveira () - 25 Jan 2005 -# - Don't sync the d_mail destination -# -# Updated by Jose Pedro Oliveira () - 01 Feb 2005 -# - /proc/kmsg is a file not a pipe. -# (https://lists.balabit.hu/pipermail/syslog-ng/2005-February/006963.html) -# -# Updated by Jose Pedro Oliveira () - 31 May 2007 -# - increase the number of unix-stream max-connections (syslog-ng 2.0.4) -# -# Updated by Jose Pedro Oliveira () - 26 July 2007 -# - revert previous unix-stream max-connections change -# (the new unix-stream max-connections default in syslog-ng 2.0.5 is 256) -# options { - sync (0); - time_reopen (10); - log_fifo_size (1000); - long_hostnames (off); - use_dns (no); - use_fqdn (no); - create_dirs (no); - keep_hostname (yes); + sync (0); + time_reopen (10); + log_fifo_size (1000); + long_hostnames (off); + use_dns (no); + use_fqdn (no); + create_dirs (no); + keep_hostname (yes); }; source s_sys { - file ("/proc/kmsg" log_prefix("kernel: ")); - unix-stream ("/dev/log"); - internal(); - # udp(ip(0.0.0.0) port(514)); - # tcp(ip(0.0.0.0) port(514)); + file ("/proc/kmsg" log_prefix("kernel: ")); + unix-stream ("/dev/log"); + internal(); + # udp(ip(0.0.0.0) port(514)); }; @@ -63,4 +32,5 @@ destination d_boot { file("/var/log/boot.log"); }; destination d_cron { file("/var/log/cron"); }; +#destination d_kern { file("/var/log/kern"); }; destination d_mlal { usertty("*"); }; @@ -68,29 +38,33 @@ #destination d_watch { program("/usr/local/libexec/watch-syslog.py"); }; -#filter f_filter1 { facility(kern); }; -filter f_filter2 { level(info..emerg) and - not facility(mail,authpriv,cron); }; -filter f_filter3 { facility(authpriv); }; -filter f_filter4 { facility(mail); }; -filter f_filter5 { level(emerg); }; -filter f_filter6 { facility(uucp) or - (facility(news) and level(crit..emerg)); }; -filter f_filter7 { facility(local7); }; -filter f_filter8 { facility(cron); }; +#filter f_kernel { facility(kern); }; +filter f_default { level(info..emerg) and + not (facility(mail) + or facility(authpriv) + or facility(cron)); }; +filter f_auth { facility(authpriv); }; +filter f_mail { facility(mail); }; +filter f_emergency { level(emerg); }; +filter f_news { facility(uucp) or + (facility(news) + and level(crit..emerg)); }; +filter f_boot { facility(local7); }; +filter f_cron { facility(cron); }; filter f_oom { facility(kern) and (match("Out of memory:") or match("Killed process")); }; -#log { source(s_sys); filter(f_filter1); destination(d_cons); }; -log { source(s_sys); filter(f_filter2); destination(d_mesg); }; -log { source(s_sys); filter(f_filter3); destination(d_auth); }; -log { source(s_sys); filter(f_filter4); destination(d_mail); }; -log { source(s_sys); filter(f_filter5); destination(d_mlal); }; -log { source(s_sys); filter(f_filter6); destination(d_spol); }; -log { source(s_sys); filter(f_filter7); destination(d_boot); }; -log { source(s_sys); filter(f_filter8); destination(d_cron); }; +#log { source(s_sys); filter(f_kernel); destination(d_cons); }; +#log { source(s_sys); filter(f_kernel); destination(d_kern); }; +log { source(s_sys); filter(f_default); destination(d_mesg); }; +log { source(s_sys); filter(f_auth); destination(d_auth); }; +log { source(s_sys); filter(f_mail); destination(d_mail); }; +log { source(s_sys); filter(f_emergency); destination(d_mlal); }; +log { source(s_sys); filter(f_news); destination(d_spol); }; +log { source(s_sys); filter(f_boot); destination(d_boot); }; +log { source(s_sys); filter(f_cron); destination(d_cron); }; -log { source(s_sys); filter(f_filter3); destination(d_zroot); }; -#log { source(s_sys); filter(f_filter2); destination(d_watch); }; +log { source(s_sys); filter(f_auth); destination(d_zroot); }; +#log { source(s_sys); filter(f_default); destination(d_watch); }; log { source(s_sys); filter(f_oom); destination(d_zroot); }; -# vim:set ai ts=4 sw=4 sts=4 et: +# vim:ft=syslog-ng:ai:si:ts=4:sw=4:et: Index: trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo =================================================================== --- trunk/server/fedora/config/etc/yum.repos.d/fedora-updates-testing-newkey.repo (revision 1250) +++ (revision ) @@ -1,27 +1,0 @@ -[updates-testing-newkey] -name=Fedora $releasever - $basearch - Test Updates Newkey -failovermethod=priority -#baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch.newkey/ -mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-f$releasever.newkey&arch=$basearch -enabled=1 -gpgcheck=1 -includepkgs=subversion mod_dav_svn subversion-devel -gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-test-8-and-9-$basearch - -[updates-testing-newkey-debuginfo] -name=Fedora $releasever - $basearch - Test Updates Debug Newkey -failovermethod=priority -#baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/$basearch.newkey/debug/ -mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-debug-f$releasever.newkey&arch=$basearch -enabled=0 -gpgcheck=1 -gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-test-8-and-9-$basearch - -[updates-testing-newkey-source] -name=Fedora $releasever - Test Updates Source Newkey -failovermethod=priority -#baseurl=http://download.fedoraproject.org/pub/fedora/linux/updates/testing/$releasever/SRPMS.newkey/ -mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-testing-source-f$releasever.newkey&arch=$basearch -enabled=0 -gpgcheck=1 -gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-test-8-and-9-$basearch Index: trunk/server/fedora/config/etc/yum.repos.d/scripts.repo =================================================================== --- trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (revision 1250) +++ trunk/server/fedora/config/etc/yum.repos.d/scripts.repo (revision 1259) @@ -1,5 +1,5 @@ [scripts] name=Scripts -baseurl=http://web.mit.edu/scripts/rpm/ +baseurl=http://web.mit.edu/scripts/rpm-fc11/ enabled=1 gpgcheck=0 Index: trunk/server/fedora/config/etc/yum/yum-updatesd.conf =================================================================== --- trunk/server/fedora/config/etc/yum/yum-updatesd.conf (revision 1259) +++ trunk/server/fedora/config/etc/yum/yum-updatesd.conf (revision 1259) @@ -0,0 +1,18 @@ +[main] +# how often to check for new updates (in seconds) +run_interval = 14400 +# how often to allow checking on request (in seconds) +updaterefresh = 600 + +# how to send notifications (valid: dbus, email, syslog) +emit_via = dbus email +# should we listen via dbus to give out update information/check for +# new updates +dbus_listener = yes + +# automatically install updates +do_update = no +# automatically download updates +do_download = yes +# automatically download deps of updates +do_download_deps = yes