1 ******************************************************************************
5 ******************************************************************************
6 * Please add new entries in reverse chronological order whenever you make *
7 * changes to this system (first command at top, last at bottom) *
8 ******************************************************************************
11 * applied diff represented in commit
12 f75a5747a8b99e04c02c475791c476f1fbd2b674 to change log level for
13 unacceptable untranslatable keys.
16 * Replaced nullmailer with postfix, nullmailer doesn't handle aliases
17 and insisted either on constantly respooling mail when there was no
21 * Configured /etc/aliases to have root go to mjgoins, micah, dkg, jrollins
22 * Configured /etc/nullmailer/remotes to have mail.riseup.net so remote delivery will work
23 * Removed the hundreds of queued cron emails that had resulted in 30gig of mail.err logs
24 * Rotated the giant logs out
27 * extended the expiration date for george's key three months into
29 * aptitude update && aptitude full-upgrade (brings monkeysphere to
33 * aptitude update && aptitude full-upgrade
34 * brought monkeysphere up to 0.19-1
38 * aptitude update && aptitude full-upgrade
39 * brought monkeysphere up to 0.16-1
40 * repointed keyserver usage to pool.sks-keyservers.net
43 * added two mime-type declarations in /etc/mathopd.conf so .debs
44 and .tar.gz files come out reasonably; restarted mathopd for the
46 * built monkeyshell (from src/monkeyshell) and installed as
47 /usr/local/bin/monkeyshell, added to /etc/shells.
48 * created new account "monkey" which has monkeyshell as the shell
49 for non-privileged test access. To let someone test this out,
50 make sure they're well-connected to george's web of trust, and
51 then add their User ID to
52 ~monkey/.monkeysphere/authorized_user_ids
53 * more mime types for mathopd: image/png image/x-icon
56 * migrated /home/*/.config/monkeysphere/authorized_user_ids to new
57 agreed location: /home/*/.monkeysphere/authorized_user_ids and created
58 a symlink in the original location for transition purposes. Also,
59 did /root's as well. I used this hackish mechanism:
60 $ for user in `find . -wholename './*/.config/monkeysphere/authorized_user_ids' \
61 | cut -d/ -f2`; do mkdir -v ${user}/.monkeysphere; chown ${user}:${user} \
62 ${user}/.monkeysphere; mv -v ${user}/.config/monkeysphere/authorized_user_ids \
63 ${user}/.monkeysphere; ln -s /home/${user}/.monkeysphere/authorized_user_ids \
64 ${user}/.config/monkeysphere/authorized_user_ids; done
67 * added the monkeysphere archive repository signing key
68 * aptitude update && aptitude full-upgrade (brings in monkeysphere 0.13-1)
69 * cleaned up /etc/skel to reflect correct location of the
70 monkeysphere config directory.
71 * micah moved all the existing config stuff over, and left
72 symlinks so people aren't disoriented.
75 * set up http://dkg.monkeysphere.info so that i could play around
77 * moved apt repository over to http://archive.monkeysphere.info/
78 * aptitude update && aptitude dist-upgrade
79 * canonicalizing hostname for normal web access to
80 http://web.monkeysphere.info
83 * aptitude update && aptitude full-upgrade
84 * added account 'daniel' for Dan Scott, and set him up with a way
85 to publish to http://daniel.monkeysphere.info
88 * aptitude update && aptitude dist-upgrade: this includes
89 monkeysphere 0.11-1 and OpenSSH 5.1p1-2
92 * moved monkeysphere apt repo entry to
93 /etc/apt/sources.list.d/monkeysphere.list
94 * aptitude update && aptitude full-upgrade (including monkeysphere
96 * switched george's monkeysphere-server preferred keyserver to
97 monkeysphere.info for the moment. Both pgp.mit.edu and
98 subkeys.pgp.net are sluggish right now :/
100 2008-08-16 - jrollins
101 * removed stale branches from jrollins from the master repo
102 * aptitude update && aptitude full-upgrade
103 * restarted services to clear up dependencies on old libraries
106 * aptitude update && aptitude full-upgrade
107 * restarted services to clear up dependencies on old libraries
110 * aptitude update && aptitude dist-upgrade
111 * removed debian's experimental from the sources.list
112 * removed experimental stanza from /etc/apt/preferences (now the
113 monkeysphere packages should upgrade automatically)
114 * upgraded to monkeysphere 0.7-1
116 * set up a public git daemon service to serve git repos from
117 george, using runit. (root-served repos are served from
118 /srv/git, but ~USER/public_git is supported as well, if anyone
119 wants to use that for publication).
122 * aptitude update && aptitude dist-upgrade
124 * added my User ID to ~webmaster/.config/monkeysphere/authorized_user_ids
126 2008-08-02 - jrollins
127 * aptitude update && aptitude dist-upgrade
128 * restarted cron, nullmailer, sshd
129 * aptitude install git-core ikiwiki
132 * created a bare repo at ~webmaster/monkeysphere.git. I then
133 pushed into this repo from my working directory on servo to verify
134 that it was accepting.
135 * cloned above repo at ~webmaster/monkeysphere
136 * created ~webmaster/ikiwiki.setup
137 * ikiwiki --setup ikiwiki.setup
138 * linked post-receive to new post-commit hook in monkeysphere.git
139 * changed default keyserver to be pgp.mit.edu (subkeys.pgp.net
141 * updated /etc/skel with ssh and monkeysphere stuff
142 * made authorzied_user_ids file for webmaster and ran
143 "monkeysphere-server u webmaster".
146 * added monkeysphere apt repository to /etc/apt/sources.list
147 * added dkg's key to apt's list of trusted keys.
148 * ran aptitude dist-upgrade
149 * upgraded to monkeysphere 0.2-1
150 * moved authorized_user_ids files into users' home directories.
151 * installed lockfile-progs
154 * installed screen (mjgoins and i were collaborating)
157 * Restored /etc/init.d/ssh to original package state and changed
158 /etc/default/ssh to have 'unset SSHD_OOM_ADJUST' instead.
161 * Commented out the 'export SSHD_OOM_ADJUST=-17' from the
162 /etc/init.d/ssh initscript, and the 'SSHD_OOM_ADJUST=-17' from
163 /etc/default/ssh in order to make this error go away:
164 "error writing /proc/self/oom_adj: Operation not permitted"
165 (c.f. Debian #487325)
168 * touched /etc/environment to get rid of some spurious auth.log
170 * turned up sshd's LogLevel from INFO to DEBUG
173 * installed rsync (for maintaining a public apt repo)
175 * configured mathopd to listen on port 80, serving /srv/www as /
176 and /srv/apt as /debian. We've got nothing in /srv/www at the
179 * installed lsof and psmisc as sysadmin utilities. sorry for the
182 * installed strace to try to figure out why onak is segfaulting.
185 * removed etch sources, switched "testing" to "lenny", added
186 lenny/updates, removed all contrib and non-free.
188 * removed testing pin in /etc/apt/preferences
191 * reset emacs22 to emacs22-nox (avoiding dependencies)
193 * removed sysklog and klogd because of errors restarting klogd.
194 Installed syslog-ng in their stead, which still gives errors
195 related to /proc/kmsg unreadability, but the install completes :/
198 * juggled pinning: experimental: 1, unstable: 2
199 * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf
201 * installed monkeysphere v0.1-1, changed host key, published
202 them via the local keyserver (see host-key-publication)
204 * added local unprivileged user accounts for everyone listed in
205 /usr/share/doc/monkeysphere/copyright
207 * configured authorized_user_ids for every user account based on
208 my best guess at their OpenPGP User ID (see
209 user-id-configuration).
211 * set up a cronjob (in /etc/crontab) to run "monkeysphere-server
212 update-users" at 26 minutes past the hour.
214 2008-06-18 - jrollins
215 * installed less, emacs;
216 * aptitude update && aptitude dist-upgrade
219 * debootstrap'd debian etch install
220 * installed /etc/apt/sources.list with local proxy sources for etch,
221 testing, unstable, backports and volatile
222 * configured /etc/apt/preferences and apt.conf.d/local-conf to
223 pin etch, but make testing, sid and backports available
224 * added backports.org apt-key
225 * installed openssh-server and openssh-client packages
226 * added dkg, jrollins, mjgoins ssh public_keys to /root/.ssh/authorized_keys