Muehlenhoff has submitted this change and it was merged.
Change subject: Disable unprivileged user namespaces on labvirt nodes running
4.4 HWE kernels
..
Disable unprivileged user namespaces on labvirt nodes running 4.4 HWE
Muehlenhoff has submitted this change and it was merged.
Change subject: Ship a script to rewrite group memberships after enabling the
memberof overlay
..
Ship a script to rewrite group memberships after enabling the memberof
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306910
Change subject: Disable unprivileged user namespaces on labvirt nodes running
4.4 HWE kernels
..
Disable unprivileged user namespaces on
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306905
Change subject: Ship a script to rewrite group memberships after enabling the
memberof overlay
..
Ship a script to rewrite group
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306894
Change subject: Remove $ALL_NETWORKS ferm definition
..
Remove $ALL_NETWORKS ferm definition
This is unnessary broad, all existing
Muehlenhoff has submitted this change and it was merged.
Change subject: openldap_labs: Limit to production networks and labs networks
..
openldap_labs: Limit to production networks and labs networks
Needs to be accessed from
Muehlenhoff has submitted this change and it was merged.
Change subject: role::logging::mediawiki: Restrict to domain networks
..
role::logging::mediawiki: Restrict to domain networks
Only used in labs. Limit access to
Muehlenhoff has submitted this change and it was merged.
Change subject: ipsec_allow: Restrict to domain networks
..
ipsec_allow: Restrict to domain networks
The role is used by kafka*, mc* and rdb* systems. These systems in
Muehlenhoff has submitted this change and it was merged.
Change subject: Kafka brokers: Limit access to production and fundraising
networks
..
Kafka brokers: Limit access to production and fundraising networks
We're removing
Muehlenhoff has submitted this change and it was merged.
Change subject: Provide override file for base::service_unit
..
Provide override file for base::service_unit
systemd implements a two-stage lookup for unit files:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306633
Change subject: Add modprobe configuration for br_netfilter for Linux >= 3.18
..
Add modprobe configuration for br_netfilter for Linux >=
Muehlenhoff has submitted this change and it was merged.
Change subject: Rename Hiera data for Salt grain
..
Rename Hiera data for Salt grain
The role was renamed in 6e0120712dcb59a104359d4ed6725eb6e56a91f0, also
rename the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306629
Change subject: Rename Hiera data for Salt grain
..
Rename Hiera data for Salt grain
The role was renamed in
Muehlenhoff has submitted this change and it was merged.
Change subject: Mention security release and CVE IDs in changelog
..
Mention security release and CVE IDs in changelog
There's several people in Debian following the
Muehlenhoff has submitted this change and it was merged.
Change subject: Disable unprivileged user namespaces on trusty systems
..
Disable unprivileged user namespaces on trusty systems
By default trusty allows the creation of
Muehlenhoff has submitted this change and it was merged.
Change subject: contint::firewall: Limit to production networks
..
contint::firewall: Limit to production networks
Only accessed from the Varnish misc cluster.
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306397
Change subject: Mention security release and CVE IDs in changelog
..
Mention security release and CVE IDs in changelog
There's several
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306225
Change subject: Provide a systemd override unit for hhvm
..
Provide a systemd override unit for hhvm
The default service file shipped by
Muehlenhoff has submitted this change and it was merged.
Change subject: contint: use require_package for php5
..
contint: use require_package for php5
d903e25 added php5-dev to package_builder class which ends up causing a
Muehlenhoff has submitted this change and it was merged.
Change subject: wdqs: Limit to domain networks
..
wdqs: Limit to domain networks
Restrict wdqs/ to $DOMAIN_NETWORKS; this limits the access for the
production
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/306027
Change subject: wdqs: Limit to domain networks
..
wdqs: Limit to domain networks
Restrict wdqs/ to $DOMAIN_NETWORKS; this limits the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305992
Change subject: Use DB_LOG_AUTOREMOVE for openldap database
..
Use DB_LOG_AUTOREMOVE for openldap database
Have slapd automatically
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305969
Change subject: Kafka brokers: Limit access to production and fundraising
networks
..
Kafka brokers: Limit access to production and
Muehlenhoff has submitted this change and it was merged.
Change subject: statsd proxy: Limit to production networks
..
statsd proxy: Limit to production networks
Only used by graphite* and accessed from production networks.
Muehlenhoff has submitted this change and it was merged.
Change subject: package_builder: Add dh-php5 to list of installed packages
..
package_builder: Add dh-php5 to list of installed packages
The build of php-mailparse
Muehlenhoff has submitted this change and it was merged.
Change subject: package_builder: Add php5-dev to list of installed packages
..
package_builder: Add php5-dev to list of installed packages
The build of php-mailparse
Muehlenhoff has submitted this change and it was merged.
Change subject: package_builder: Add pkg-php-tools to list of installed packages
..
package_builder: Add pkg-php-tools to list of installed packages
The build of
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305965
Change subject: package_builder: Add php5-dev to list of installed packages
..
package_builder: Add php5-dev to list of installed
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305964
Change subject: package_builder: Add dh-php5 to list of installed packages
..
package_builder: Add dh-php5 to list of installed packages
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305963
Change subject: package_builder: Add pkg-php-tools to list of installed packages
..
package_builder: Add pkg-php-tools to list of
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305635
Change subject: Provide override file for base::service_unit (WIP)
..
Provide override file for base::service_unit (WIP)
systemd
Muehlenhoff has submitted this change and it was merged.
Change subject: Amend CVE ID to changelog which was only assigned today, but
already fixed in 4.4.7
..
Amend CVE ID to changelog which was only assigned today, but
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305623
Change subject: Amend CVE ID to changelog which was only assigned today, but
already fixed in 4.4.7
..
Amend CVE ID to changelog which
Muehlenhoff has submitted this change and it was merged.
Change subject: Support scaling of huge SVGs
..
Support scaling of huge SVGs
Passing the unlimited flag to librsvg bypasses some size limits in librsvg.
Since we have
Muehlenhoff has submitted this change and it was merged.
Change subject: Use Yubico OTPs as a second authentication factor for members
of the yubiauth group on iron
..
Use Yubico OTPs as a second authentication factor for
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305194
Change subject: Rename canary host for depdeploy (got replaced by newer
hardware)
..
Rename canary host for depdeploy (got replaced by
Muehlenhoff has submitted this change and it was merged.
Change subject: Rename canary host for depdeploy (got replaced by newer
hardware)
..
Rename canary host for depdeploy (got replaced by newer hardware)
Change-Id:
Muehlenhoff has submitted this change and it was merged.
Change subject: package_builder: Add maven-repo-helper to list of installed
packages
..
package_builder: Add maven-repo-helper to list of installed packages
The build
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305026
Change subject: package_builder: Add maven-repo-helper to list of installed
packages
..
package_builder: Add maven-repo-helper to list
Muehlenhoff has submitted this change and it was merged.
Change subject: Update to 4.4.18
..
Update to 4.4.18
Change-Id: Ibcdd2a67dbac144ffadb15146b8abea98a922d7a
---
M debian/changelog
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/305008
Change subject: Update to 4.4.18
..
Update to 4.4.18
Change-Id: Ibcdd2a67dbac144ffadb15146b8abea98a922d7a
---
M debian/changelog
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304831
Change subject: xhgui: Restrict to domain networks
..
xhgui: Restrict to domain networks
Only accessed from production networks in
Muehlenhoff has submitted this change and it was merged.
Change subject: Fix malformed changelog entry (timezone is mandatory)
..
Fix malformed changelog entry (timezone is mandatory)
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304796
Change subject: Fix malformed changelog entry (timezone is mandatory)
..
Fix malformed changelog entry (timezone is mandatory)
Muehlenhoff has submitted this change and it was merged.
Change subject: gerrit (2.12.3-wmf.1) jessie-wikimedia; urgency=low
..
gerrit (2.12.3-wmf.1) jessie-wikimedia; urgency=low
* Update gerrit core + all core plugins to
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304483
Change subject: elasticsearch: Use domain networks
..
elasticsearch: Use domain networks
Access to the elasticsearch cluster in
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304476
Change subject: hhvm::admin: Restrict to domain networks
..
hhvm::admin: Restrict to domain networks
On production systems the port is
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304474
Change subject: Disable unprivileged user namespaces on trusty systems
..
Disable unprivileged user namespaces on trusty systems
By
Muehlenhoff has submitted this change and it was merged.
Change subject: Readd mw2086 to dsh, all fine
..
Readd mw2086 to dsh, all fine
Change-Id: Ide3c6205078414c0aa62ded7dedc22ad2bf2a827
---
M conftool-data/nodes/codfw.yaml
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304235
Change subject: Readd mw2086 to dsh, all fine
..
Readd mw2086 to dsh, all fine
Change-Id: Ide3c6205078414c0aa62ded7dedc22ad2bf2a827
---
Muehlenhoff has submitted this change and it was merged.
Change subject: Inline firejail profile no longer shipped in firejail 0.9.40
..
Inline firejail profile no longer shipped in firejail 0.9.40
The firejail profiles used
Muehlenhoff has submitted this change and it was merged.
Change subject: role::dataset::common: Limit to production networks
..
role::dataset::common: Limit to production networks
This is only accessed from hosts in production
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304192
Change subject: role::dataset::common: Limit to production networks
..
role::dataset::common: Limit to production networks
This is only
Muehlenhoff has submitted this change and it was merged.
Change subject: etcd: Use DOMAIN_NETWORKS
..
etcd: Use DOMAIN_NETWORKS
The conf* hosts are only accessed by systems in the production networks
and the etcd installations
Muehlenhoff has submitted this change and it was merged.
Change subject: Update to 4.4.17
..
Update to 4.4.17
Change-Id: Ic86716e2cca0b9faa04eb446fb95995c9c63ed63
---
M debian/changelog
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304183
Change subject: Update to 4.4.17
..
Update to 4.4.17
Change-Id: Ic86716e2cca0b9faa04eb446fb95995c9c63ed63
---
M debian/changelog
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/304032
Change subject: ganglia: Limit to production networks and fundraising networks
..
ganglia: Limit to production networks and fundraising
Muehlenhoff has submitted this change and it was merged.
Change subject: openldap::labtest: Restrict to production/labs networks
..
openldap::labtest: Restrict to production/labs networks
We're getting rid of ALL_NETWORKS by
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303839
Change subject: openldap::labtest: Restrict to production/labs networks
..
openldap::labtest: Restrict to production/labs networks
We're
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303837
Change subject: ipsec_allow: Restrict to domain networks
..
ipsec_allow: Restrict to domain networks
The role is used by kafka*, mc* and
Muehlenhoff has submitted this change and it was merged.
Change subject: Assign debdeploy salt grain for labs::db::replica role
..
Assign debdeploy salt grain for labs::db::replica role
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303804
Change subject: Assign debdeploy salt grain for labs::db::replica role
..
Assign debdeploy salt grain for labs::db::replica role
Muehlenhoff has submitted this change and it was merged.
Change subject: pybal_config: Use PRODUCTION_NETWORKS
..
pybal_config: Use PRODUCTION_NETWORKS
Not used in labs, only accessed from production networks.
Change-Id:
Muehlenhoff has submitted this change and it was merged.
Change subject: druid: Limit to analytics networks
..
druid: Limit to analytics networks
Only accessed from the analytics networks.
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303553
Change subject: Inline firejail profile no longer shipped in firejail 0.9.40
..
Inline firejail profile no longer shipped in firejail
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303548
Change subject: Support scaling of huge SVGs
..
Support scaling of huge SVGs
Passing the unlimited flag to librsvg bypasses some size
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303532
Change subject: statsd proxy: Limit to production networks
..
statsd proxy: Limit to production networks
Only used by graphite* and
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303531
Change subject: Generate stats for monthly package upgrade activity
..
Generate stats for monthly package upgrade activity
Displays the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303181
Change subject: openldap_labs: Limit to production networks and labs networks
..
openldap_labs: Limit to production networks and labs
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303144
Change subject: druid: Limit to domain networks
..
druid: Limit to domain networks
druid* in production is only accessed from the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303140
Change subject: role::logging::mediawiki: Restrict to domain networks
..
role::logging::mediawiki: Restrict to domain networks
Used in
Muehlenhoff has submitted this change and it was merged.
Change subject: gerrit (2.12.2-wmf.2)
..
gerrit (2.12.2-wmf.2)
* Include updated its-phabricator that fixes patch tagging
* Also provide bcpkix because the debian
Muehlenhoff has submitted this change and it was merged.
Change subject: Assign Salt grains for thumbor
..
Assign Salt grains for thumbor
Change-Id: I692a5d7ca0ee973e4ff79faaf4325fb71747923d
---
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303128
Change subject: Assign Salt grains for thumbor
..
Assign Salt grains for thumbor
Change-Id: I692a5d7ca0ee973e4ff79faaf4325fb71747923d
Muehlenhoff has submitted this change and it was merged.
Change subject: Fix malformed changelog entry
..
Fix malformed changelog entry
Makes dpkg-source emit a lot of warnings/errors.
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/302455
Change subject: Fix malformed changelog entry
..
Fix malformed changelog entry
Makes dpkg-source emit a lot of warnings/errors.
Muehlenhoff has submitted this change and it was merged.
Change subject: Minor tweaks to 2.12.2 package
..
Minor tweaks to 2.12.2 package
- Create all the way to /var/lib/gerrit2/review_site
- Bring in all plugins, makes the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/302394
Change subject: Enable base::firewall for palladium
..
Enable base::firewall for palladium
This was temporarily enabled before and the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301645
Change subject: Remove role::logging::mediawiki
..
Remove role::logging::mediawiki
I'm in the process of reviewing/fixing all use cases
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301627
Change subject: contint::firewall: Limit to production networks
..
contint::firewall: Limit to production networks
Only accessed from
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301621
Change subject: pmacct: Limit to production networks
..
pmacct: Limit to production networks
From what I can see this was only used
Muehlenhoff has submitted this change and it was merged.
Change subject: Remove DNS entries for old trusty scalers
..
Remove DNS entries for old trusty scalers
Bug: T141352
Change-Id: Id36569b48561ca47aa2ec2e69feb8caf97745fce
Muehlenhoff has submitted this change and it was merged.
Change subject: logstash: Use DOMAIN_NETWORKS
..
logstash: Use DOMAIN_NETWORKS
Using DOMAIN_NETWORKS allows us to restrict access to the production
logstash cluster to
Muehlenhoff has submitted this change and it was merged.
Change subject: Add salt grains for prometheus
..
Add salt grains for prometheus
Change-Id: I6ce0932e2e95faf1f2a490ae6d44edab2223f667
---
A
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301591
Change subject: Add salt grains for prometheus
..
Add salt grains for prometheus
Change-Id: I6ce0932e2e95faf1f2a490ae6d44edab2223f667
Muehlenhoff has submitted this change and it was merged.
Change subject: Add CVE ID to changelog which was assigned retroactively
..
Add CVE ID to changelog which was assigned retroactively
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301553
Change subject: Add CVE ID to changelog which was assigned retroactively
..
Add CVE ID to changelog which was assigned retroactively
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301406
Change subject: Remove DNS entries for old trusty scalers
..
Remove DNS entries for old trusty scalers
Bug: T141352
Change-Id:
Muehlenhoff has submitted this change and it was merged.
Change subject: Remove old trusty scalers from installer config
..
Remove old trusty scalers from installer config
Change-Id: Ia26e1d06b739d7354b46f5bb796a7310e91ddb20
Muehlenhoff has submitted this change and it was merged.
Change subject: Remove old trusty image scalers from site.pp
..
Remove old trusty image scalers from site.pp
Replaced by more recent hardware and now based on jessie
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301388
Change subject: Remove old trusty scalers from installer config
..
Remove old trusty scalers from installer config
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301386
Change subject: Remove old trusty image scalers from site.pp
..
Remove old trusty image scalers from site.pp
Replaced by more recent
Muehlenhoff has submitted this change and it was merged.
Change subject: Remove old trusty scalers from conftool-data and dsh
..
Remove old trusty scalers from conftool-data and dsh
Replaced by newer hardware and jessie
Bug:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301336
Change subject: Lower loglevel for resourceloader to info
..
Lower loglevel for resourceloader to info
Since around the 21st/22nd the
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/301138
Change subject: Remove old trusty scalers from conftool-data and dsh
..
Remove old trusty scalers from conftool-data and dsh
Replaced by
Muehlenhoff has submitted this change and it was merged.
Change subject: Remove access credentials for jzerebecki
..
Remove access credentials for jzerebecki
Change-Id: Iac5c80fc44a291534b671c9dfcd6741c36fd7da2
---
M
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/299141
Change subject: Remove access credentials for jzerebecki
..
Remove access credentials for jzerebecki
Change-Id:
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/299131
Change subject: Provide fontconfig configuration which forces antialiasing
..
Provide fontconfig configuration which forces antialiasing
Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/299116
Change subject: etcd: Use DOMAIN_NETWORKS
..
etcd: Use DOMAIN_NETWORKS
The conf* hosts are only accessed by systems in the production
Muehlenhoff has submitted this change and it was merged.
Change subject: Update to Linux 4.4.15
..
Update to Linux 4.4.15
Change-Id: I42a65502534e264d81fb84ef58e5a8dae0ace13d
---
M debian/changelog
A
1501 - 1600 of 3305 matches
Mail list logo
