leap_platform.git, branch 0.8.1 [leap_platform] Disable the Trace method (#8195) 2016-06-16T18:58:34+00:00 Micah micah@leap.se 2016-06-16T16:24:01+00:00 7becc465d726a1dbc1733db5c02c343cdac53d15 The Trace method is enabled because of the Apache module, but it is not the default in Debian, and it should not be enabled, for more information see the following: https://www.kb.cert.org/vuls/id/867593 Change-Id: I06a06ae679dbf7049f26a017125b61e5e38f6268 
The Trace method is enabled because of the Apache module, but it is not the
default in Debian, and it should not be enabled, for more information see the
following:

https://www.kb.cert.org/vuls/id/867593

Change-Id: I06a06ae679dbf7049f26a017125b61e5e38f6268
Fix matching for cleanup check. 2016-06-16T18:58:21+00:00 Micah micah@leap.se 2016-06-16T15:39:11+00:00 f2cc9926bcc0d72c8c490583b5eed712a869c4d2 The onlyif check was incorrectly specified in the original implementation in commit id: 15b83d88dcedab496a19cef57f11c5c8e091dd4a this inverts it so it is properly detected. Change-Id: I531e206fff1ca61780adcd195e1f917011e50fb4 
The onlyif check was incorrectly specified in the original implementation in
commit id: 15b83d88dcedab496a19cef57f11c5c8e091dd4a this inverts it so it
is properly detected.

Change-Id: I531e206fff1ca61780adcd195e1f917011e50fb4
switch to two-space soft tabs to fix lint error 2016-06-16T18:41:58+00:00 Micah micah@leap.se 2016-06-14T16:51:08+00:00 8532c9656eba93a10601421089502e39aa23b753 Change-Id: Ic12b243b195e40482a70dd70219212c3697899ba 
Change-Id: Ic12b243b195e40482a70dd70219212c3697899ba
make sure required x509 bits are there before stunnel is started 2016-06-16T18:41:58+00:00 Micah micah@leap.se 2016-06-14T16:37:10+00:00 25cdee309d4ad749d633c8b4d5bf7e65f83fb75b Change-Id: I772c3b6e489e3c1848c45c6bcaa240324fc88928 
Change-Id: I772c3b6e489e3c1848c45c6bcaa240324fc88928
Ensure stunnel package, service and default ordering. 2016-06-16T18:41:58+00:00 Micah Anderson micah@riseup.net 2016-06-14T14:46:20+00:00 4a9be045411e43534df0aec4289d64f4129c52d2 






update stunnel module for refresh_stunnel fixes
2016-06-16T18:41:58+00:00

Micah
micah@leap.se

2016-06-14T14:02:40+00:00

5e3c2f821dec68d2fd61454e495b8ffb6e0d2dcf

Change-Id: I7675dbaba4d896a62dab9fcf4817092ea69f1298





Change-Id: I7675dbaba4d896a62dab9fcf4817092ea69f1298







refresh_stunnel sometimes doesn't run (#8168).
2016-06-16T18:41:58+00:00

Micah
micah@leap.se

2016-06-07T19:26:01+00:00

a0bd7c33d4d2968d9824fd4613c701c94a91c2cc

It turns out that in some corner-cases, the script is not called:

 (1) start the deploy, create files in /var/lib/puppet/stunnel4/config
 (2) halt puppet before apply finishes
 (3) re-run deploy

in this scenario, next time you run deploy, refresh_stunnel will never
get called to populate /etc/stunnel, because the files in
/var/lib/puppet/stunnel4/config haven't changed.

This problem can be really confusing when it happens.

To fix this, we just run refresh_stunnel every, it is pretty fast and
the script has more complete logic for what to do than puppet, which has
only an asymmetrical view on the situation.

Change-Id: I9e5fad1d081c2fe07f3ac8f07cfb87d86b88f7c9





It turns out that in some corner-cases, the script is not called:

 (1) start the deploy, create files in /var/lib/puppet/stunnel4/config
 (2) halt puppet before apply finishes
 (3) re-run deploy

in this scenario, next time you run deploy, refresh_stunnel will never
get called to populate /etc/stunnel, because the files in
/var/lib/puppet/stunnel4/config haven't changed.

This problem can be really confusing when it happens.

To fix this, we just run refresh_stunnel every, it is pretty fast and
the script has more complete logic for what to do than puppet, which has
only an asymmetrical view on the situation.

Change-Id: I9e5fad1d081c2fe07f3ac8f07cfb87d86b88f7c9







auto run bundler when needed for site_static
2016-06-16T15:11:03+00:00

elijah
elijah@riseup.net

2016-06-03T19:02:09+00:00

2055ae4ae2e780dec0b73b6233e1785ec6409546












fix typo that prevented common.ENV.json from being loaded. closes #7697
2016-06-16T15:10:55+00:00

elijah
elijah@riseup.net

2016-05-26T18:50:33+00:00

462975799b9c130285761958d040b71f0ab1ac9b












debian packages don't know AllowSupplementaryGroups
2016-06-16T15:10:47+00:00

Christoph Kluenter
ckluente@thoughtworks.com

2016-06-06T08:14:50+00:00

88d3a09a87c483ccde6517063d4a34756272c0f0

if this is set in the config, the deamons do not
start anymore. From the debian changelog:

  clamav (0.99.2+dfsg-0+deb8u1) stable; urgency=medium
  * Import new Upstream.
  * Drop AllowSupplementaryGroups option which is default now
    (Closes: #822444).





if this is set in the config, the deamons do not
start anymore. From the debian changelog:

  clamav (0.99.2+dfsg-0+deb8u1) stable; urgency=medium
  * Import new Upstream.
  * Drop AllowSupplementaryGroups option which is default now
    (Closes: #822444).