1 ******************************************************************************
5 ******************************************************************************
6 * Please add new entries in reverse chronological order whenever you make *
7 * changes to this system (first command at top, last at bottom) *
8 ******************************************************************************
10 * aptitude update && aptitude dist-upgrade
11 * restarted cron, nullmailer, sshd
12 * aptitude install git-core ikiwiki
15 * created a bare repo at ~webmaster/monkeysphere.git. I then
16 pushed into this repo from my working directory on servo to verify
17 that it was accepting.
18 * cloned above repo at ~webmaster/monkeysphere
19 * created ~webmaster/ikiwiki.setup
20 * ikiwiki --setup ikiwiki.setup
21 * linked post-receive to new post-commit hook in monkeysphere.git
22 * changed default keyserver to be pgp.mit.edu (subkeys.pgp.net blows)
26 * added monkeysphere apt repository to /etc/apt/sources.list
27 * added dkg's key to apt's list of trusted keys.
28 * ran aptitude dist-upgrade
29 * upgraded to monkeysphere 0.2-1
30 * moved authorized_user_ids files into users' home directories.
31 * installed lockfile-progs
34 * installed screen (mjgoins and i were collaborating)
37 * Restored /etc/init.d/ssh to original package state and changed
38 /etc/default/ssh to have 'unset SSHD_OOM_ADJUST' instead.
41 * Commented out the 'export SSHD_OOM_ADJUST=-17' from the
42 /etc/init.d/ssh initscript, and the 'SSHD_OOM_ADJUST=-17' from
43 /etc/default/ssh in order to make this error go away:
44 "error writing /proc/self/oom_adj: Operation not permitted"
48 * touched /etc/environment to get rid of some spurious auth.log
50 * turned up sshd's LogLevel from INFO to DEBUG
53 * installed rsync (for maintaining a public apt repo)
55 * configured mathopd to listen on port 80, serving /srv/www as /
56 and /srv/apt as /debian. We've got nothing in /srv/www at the
59 * installed lsof and psmisc as sysadmin utilities. sorry for the
62 * installed strace to try to figure out why onak is segfaulting.
65 * removed etch sources, switched "testing" to "lenny", added
66 lenny/updates, removed all contrib and non-free.
68 * removed testing pin in /etc/apt/preferences
71 * reset emacs22 to emacs22-nox (avoiding dependencies)
73 * removed sysklog and klogd because of errors restarting klogd.
74 Installed syslog-ng in their stead, which still gives errors
75 related to /proc/kmsg unreadability, but the install completes :/
78 * juggled pinning: experimental: 1, unstable: 2
79 * added mathopd onak, tweaked /etc/mathopd.conf and /etc/onak.conf
81 * installed monkeysphere v0.1-1, changed host key, published
82 them via the local keyserver (see host-key-publication)
84 * added local unprivileged user accounts for everyone listed in
85 /usr/share/doc/monkeysphere/copyright
87 * configured authorized_user_ids for every user account based on
88 my best guess at their OpenPGP User ID (see
89 user-id-configuration).
91 * set up a cronjob (in /etc/crontab) to run "monkeysphere-server
92 update-users" at 26 minutes past the hour.
95 * installed less, emacs;
96 * aptitude update && aptitude dist-upgrade
99 * debootstrap'd debian etch install
100 * installed /etc/apt/sources.list with local proxy sources for etch,
101 testing, unstable, backports and volatile
102 * configured /etc/apt/preferences and apt.conf.d/local-conf to
103 pin etch, but make testing, sid and backports available
104 * added backports.org apt-key
105 * installed openssh-server and openssh-client packages
106 * added dkg, jrollins, mjgoins ssh public_keys to /root/.ssh/authorized_keys