1 ******************************************************************************
5 ******************************************************************************
6 * Please add new entries in reverse chronological order whenever you make *
7 * changes to this system (first command at top, last at bottom) *
8 ******************************************************************************
11 * aptitude update && aptitude full-upgrade
14 * aptitude update && aptitude dist-upgrade: this includes
15 monkeysphere 0.11-1 and OpenSSH 5.1p1-2
18 * moved monkeysphere apt repo entry to
19 /etc/apt/sources.list.d/monkeysphere.list
20 * aptitude update && aptitude full-upgrade (including monkeysphere
22 * switched george's monkeysphere-server preferred keyserver to
23 monkeysphere.info for the moment. Both pgp.mit.edu and
24 subkeys.pgp.net are sluggish right now :/
27 * removed stale branches from jrollins from the master repo
28 * aptitude update && aptitude full-upgrade
29 * restarted services to clear up dependencies on old libraries
32 * aptitude update && aptitude full-upgrade
33 * restarted services to clear up dependencies on old libraries
36 * aptitude update && aptitude dist-upgrade
37 * removed debian's experimental from the sources.list
38 * removed experimental stanza from /etc/apt/preferences (now the
39 monkeysphere packages should upgrade automatically)
40 * upgraded to monkeysphere 0.7-1
42 * set up a public git daemon service to serve git repos from
43 george, using runit. (root-served repos are served from
44 /srv/git, but ~USER/public_git is supported as well, if anyone
45 wants to use that for publication).
48 * aptitude update && aptitude dist-upgrade
50 * added my User ID to ~webmaster/.config/monkeysphere/authorized_user_ids
53 * aptitude update && aptitude dist-upgrade
54 * restarted cron, nullmailer, sshd
55 * aptitude install git-core ikiwiki
58 * created a bare repo at ~webmaster/monkeysphere.git. I then
59 pushed into this repo from my working directory on servo to verify
60 that it was accepting.
61 * cloned above repo at ~webmaster/monkeysphere
62 * created ~webmaster/ikiwiki.setup
63 * ikiwiki --setup ikiwiki.setup
64 * linked post-receive to new post-commit hook in monkeysphere.git
65 * changed default keyserver to be pgp.mit.edu (subkeys.pgp.net
67 * updated /etc/skel with ssh and monkeysphere stuff
68 * made authorzied_user_ids file for webmaster and ran
69 "monkeysphere-server u webmaster".
72 * added monkeysphere apt repository to /etc/apt/sources.list
73 * added dkg's key to apt's list of trusted keys.
74 * ran aptitude dist-upgrade
75 * upgraded to monkeysphere 0.2-1
76 * moved authorized_user_ids files into users' home directories.
77 * installed lockfile-progs
80 * installed screen (mjgoins and i were collaborating)
83 * Restored /etc/init.d/ssh to original package state and changed
84 /etc/default/ssh to have 'unset SSHD_OOM_ADJUST' instead.
87 * Commented out the 'export SSHD_OOM_ADJUST=-17' from the
88 /etc/init.d/ssh initscript, and the 'SSHD_OOM_ADJUST=-17' from
89 /etc/default/ssh in order to make this error go away:
90 "error writing /proc/self/oom_adj: Operation not permitted"
94 * touched /etc/environment to get rid of some spurious auth.log
96 * turned up sshd's LogLevel from INFO to DEBUG
99 * installed rsync (for maintaining a public apt repo)
101 * configured mathopd to listen on port 80, serving /srv/www as /
102 and /srv/apt as /debian. We've got nothing in /srv/www at the
105 * installed lsof and psmisc as sysadmin utilities. sorry for the
108 * installed strace to try to figure out why onak is segfaulting.
111 * removed etch sources, switched "testing" to "lenny", added
112 lenny/updates, removed all contrib and non-free.
114 * removed testing pin in /etc/apt/preferences
117 * reset emacs22 to emacs22-nox (avoiding dependencies)
119 * removed sysklog and klogd because of errors restarting klogd.
120 Installed syslog-ng in their stead, which still gives errors
121 related to /proc/kmsg unreadability, but the install completes :/
124 * juggled pinning: experimental: 1, unstable: 2
125 * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf
127 * installed monkeysphere v0.1-1, changed host key, published
128 them via the local keyserver (see host-key-publication)
130 * added local unprivileged user accounts for everyone listed in
131 /usr/share/doc/monkeysphere/copyright
133 * configured authorized_user_ids for every user account based on
134 my best guess at their OpenPGP User ID (see
135 user-id-configuration).
137 * set up a cronjob (in /etc/crontab) to run "monkeysphere-server
138 update-users" at 26 minutes past the hour.
140 2008-06-18 - jrollins
141 * installed less, emacs;
142 * aptitude update && aptitude dist-upgrade
145 * debootstrap'd debian etch install
146 * installed /etc/apt/sources.list with local proxy sources for etch,
147 testing, unstable, backports and volatile
148 * configured /etc/apt/preferences and apt.conf.d/local-conf to
149 pin etch, but make testing, sid and backports available
150 * added backports.org apt-key
151 * installed openssh-server and openssh-client packages
152 * added dkg, jrollins, mjgoins ssh public_keys to /root/.ssh/authorized_keys