Faidon has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/78797


Change subject: uninstall os-prober from all machines
......................................................................

uninstall os-prober from all machines

os-prober runs as part of update-grub and tries to detected alternative
operating systems (Windows, Solaris, Hurd, Minix etc.). Fortunately we
use none of them, and having the package installed is not only cruft but
also has the nasty side-effect that in the process of detection (= every
time a kernel gets installed), it modprobes a bunch of filesystems (jfs,
btrfs, hfs+, fat32 etc.) that a) could have bugs or even security
vulnerabilities, b) spawn kernel threads (e.g.  jfsCommit) that sit
there and who knows what they do.

Change-Id: Id97f1d35b45d3c3c1e702288d372e52e4d49aa0c
---
M manifests/base.pp
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/97/78797/1

diff --git a/manifests/base.pp b/manifests/base.pp
index 0531a7e..791fbd3 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -358,7 +358,7 @@
                }
 
                # DEINSTALL these packages
-               package { [ "mlocate" ]:
+               package { [ "mlocate", "os-prober" ]:
                        ensure => absent;
                }
        }

-- 
To view, visit https://gerrit.wikimedia.org/r/78797
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Id97f1d35b45d3c3c1e702288d372e52e4d49aa0c
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Faidon <fai...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to