1 ******************************************************************************
5 ******************************************************************************
6 * Please add new entries in reverse chronological order whenever you make *
7 * changes to this system (first command at top, last at bottom) *
8 ******************************************************************************
11 * aptitude update && aptitude dist-upgrade: this includes
12 monkeysphere 0.11-1 and OpenSSH 5.1p1-2
15 * moved monkeysphere apt repo entry to
16 /etc/apt/sources.list.d/monkeysphere.list
17 * aptitude update && aptitude full-upgrade (including monkeysphere
19 * switched george's monkeysphere-server preferred keyserver to
20 monkeysphere.info for the moment. Both pgp.mit.edu and
21 subkeys.pgp.net are sluggish right now :/
24 * removed stale branches from jrollins from the master repo
25 * aptitude update && aptitude full-upgrade
26 * restarted services to clear up dependencies on old libraries
29 * aptitude update && aptitude full-upgrade
30 * restarted services to clear up dependencies on old libraries
33 * aptitude update && aptitude dist-upgrade
34 * removed debian's experimental from the sources.list
35 * removed experimental stanza from /etc/apt/preferences (now the
36 monkeysphere packages should upgrade automatically)
37 * upgraded to monkeysphere 0.7-1
39 * set up a public git daemon service to serve git repos from
40 george, using runit. (root-served repos are served from
41 /srv/git, but ~USER/public_git is supported as well, if anyone
42 wants to use that for publication).
45 * aptitude update && aptitude dist-upgrade
47 * added my User ID to ~webmaster/.config/monkeysphere/authorized_user_ids
50 * aptitude update && aptitude dist-upgrade
51 * restarted cron, nullmailer, sshd
52 * aptitude install git-core ikiwiki
55 * created a bare repo at ~webmaster/monkeysphere.git. I then
56 pushed into this repo from my working directory on servo to verify
57 that it was accepting.
58 * cloned above repo at ~webmaster/monkeysphere
59 * created ~webmaster/ikiwiki.setup
60 * ikiwiki --setup ikiwiki.setup
61 * linked post-receive to new post-commit hook in monkeysphere.git
62 * changed default keyserver to be pgp.mit.edu (subkeys.pgp.net
64 * updated /etc/skel with ssh and monkeysphere stuff
65 * made authorzied_user_ids file for webmaster and ran
66 "monkeysphere-server u webmaster".
69 * added monkeysphere apt repository to /etc/apt/sources.list
70 * added dkg's key to apt's list of trusted keys.
71 * ran aptitude dist-upgrade
72 * upgraded to monkeysphere 0.2-1
73 * moved authorized_user_ids files into users' home directories.
74 * installed lockfile-progs
77 * installed screen (mjgoins and i were collaborating)
80 * Restored /etc/init.d/ssh to original package state and changed
81 /etc/default/ssh to have 'unset SSHD_OOM_ADJUST' instead.
84 * Commented out the 'export SSHD_OOM_ADJUST=-17' from the
85 /etc/init.d/ssh initscript, and the 'SSHD_OOM_ADJUST=-17' from
86 /etc/default/ssh in order to make this error go away:
87 "error writing /proc/self/oom_adj: Operation not permitted"
91 * touched /etc/environment to get rid of some spurious auth.log
93 * turned up sshd's LogLevel from INFO to DEBUG
96 * installed rsync (for maintaining a public apt repo)
98 * configured mathopd to listen on port 80, serving /srv/www as /
99 and /srv/apt as /debian. We've got nothing in /srv/www at the
102 * installed lsof and psmisc as sysadmin utilities. sorry for the
105 * installed strace to try to figure out why onak is segfaulting.
108 * removed etch sources, switched "testing" to "lenny", added
109 lenny/updates, removed all contrib and non-free.
111 * removed testing pin in /etc/apt/preferences
114 * reset emacs22 to emacs22-nox (avoiding dependencies)
116 * removed sysklog and klogd because of errors restarting klogd.
117 Installed syslog-ng in their stead, which still gives errors
118 related to /proc/kmsg unreadability, but the install completes :/
121 * juggled pinning: experimental: 1, unstable: 2
122 * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf
124 * installed monkeysphere v0.1-1, changed host key, published
125 them via the local keyserver (see host-key-publication)
127 * added local unprivileged user accounts for everyone listed in
128 /usr/share/doc/monkeysphere/copyright
130 * configured authorized_user_ids for every user account based on
131 my best guess at their OpenPGP User ID (see
132 user-id-configuration).
134 * set up a cronjob (in /etc/crontab) to run "monkeysphere-server
135 update-users" at 26 minutes past the hour.
137 2008-06-18 - jrollins
138 * installed less, emacs;
139 * aptitude update && aptitude dist-upgrade
142 * debootstrap'd debian etch install
143 * installed /etc/apt/sources.list with local proxy sources for etch,
144 testing, unstable, backports and volatile
145 * configured /etc/apt/preferences and apt.conf.d/local-conf to
146 pin etch, but make testing, sid and backports available
147 * added backports.org apt-key
148 * installed openssh-server and openssh-client packages
149 * added dkg, jrollins, mjgoins ssh public_keys to /root/.ssh/authorized_keys