[...]
I wonder if there are any active members of the Debian linux-ha team.
[...]

• pacemaker: https://tracker.debian.org/pkg/pacemaker
• corosync: https://tracker.debian.org/pkg/corosync

Changes in version 0.0.2 (2015-12-02)

• Additional #ifdef statements suggested by Bradley White in CCTZ ticket #5 permitting compilation on Solaris with thanks to Jeroen for testing our branch.

Changes in version 0.0.1 (2015-12-01)

• Initial CRAN upload.
• Package is functional and provides examples.

This post by Dirk Eddelbuettel originated on his Thinking inside the box blog. Please report excessive re-aggregation in third-party for-profit settings.

• diffie-hellman-group14-sha1 key exchange (mostly by Ian Moore, finished off by me)
• diffie-hellman-group-exchange-sha256 key exchange
• hmac-sha2-256 and hmac-sha2-512 MACs

1. Recycled several ancient machines migrating services off of them while consolidating them by placing all their configuration on our central configuration management platform ran by Puppet. This includes a grand total of 7 machines that were replaced by new hardware and extended warranties the Foundation kindly sponsored.
2. We strenghten our websites security by introducing SSL certificates everywhere and recently replacing them with SHA2 certificates.
3. We introduced several services such as Owncloud, the Commits Bot, the Pastebin, the Etherpad, Jabber, the GNOME Github mirror.
4. We restructured the way we backup our machines also thanks to the Fedora Project sponsoring the disk space on their backup facility. The way we were used to handle backups drastically changed from early years where a magnetic tape facility was in charge of all the burden of archiving our data to today where a NetApp is used together with rdiff-backup.
5. We upgraded Bugzilla to the latest release, a huge thanks goes to Krzesimir Nowak who kindly helped us building the migration tools.
6. We introduced the GNOME Apprentice program open-sourcing our internal Puppet repository and cleansing it (shallow clones FTW!) from any sensitive information which now lives on a different repository with restricted access.
7. We retired Mango and our OpenLDAP instance in favor of FreeIPA which allows users to modify their account information on their own without waiting for the Accounts Team to process the change.
8. We documented how our internal tools are customized to play together making it easy for future Sysadmin Team members to learn how the infrastructure works and supersede existing members in case they aren t able to keep up their position anymore.
9. We started providing hosting to the GIMP and GTK projects which now completely rely on the GNOME Infrastructure. (DNS, email, websites and other services infrastructure hosting)
10. We started providing hosting not only to the GIMP and GTK projects but to localized communities as well such as GNOME Hispano and GNOME Greece
11. We configured proper monitoring for all the hosted services thanks to Nagios and Check-MK
12. We migrated the IRC network to a newer ircd with proper IRC services (Nickserv, Chanserv) in place.
13. We made sure each machine had a configured management (mgmt) and KVM interface for direct remote access to the bare metal machine itself, its hardware status and all the operations related to it. (hard reset, reboot, shutdown etc.)
14. We upgraded MoinMoin to the latest release and made a substantial cleanup of old accounts, pages marked as spam and trashed pages.
15. We deployed DNSSEC for several domains we manage including gnome.org, guadec.es, gnomehispano.es, guadec.org, gtk.org and gimp.org
16. We introduced an account de-activation policy which comes into play when a contributor not committing to any of the hosted repositories at git.gnome.org since two years is caught by the script. The account in question is marked as inactive and the gnomecvs (from the old cvs days) and ftpadmin groups are removed.
17. We planned mass reboots of all the machines roughly every month for properly applying security and kernel updates.
18. We introduced Mirrorbrain (MB), the mirroring service serving GNOME and related modules tarballs and software all over the world. Before introducing MB GNOME had several mirrors located in all the main continents and at the same time a very low amount of users making good use of them. Many organizations and companies behind these mirrors decided to not host GNOME sources anymore as the statistics of usage were very poor and preferred providing the same service to projects that really had a demand for these resources. MB solved all this allowing a proper redirect to the closest mirror (through mod_geoip) and making sure the sources checksum matched across all the mirrors and against the original tarball uploaded by a GNOME maintainer and hosted at master.gnome.org.

$ cd /git/GNOME/puppet && git shortlog -ns
3520 Andrea Veri
506 Olav Vitters
338 Owen W. Taylor
239 Patrick Uiterwijk
112 Jeff Schroeder
71 Christer Edwards
4 Daniel Mustieles
4 Matanya Moses
3 Tobias Mueller
2 John Carr
2 Ray Wang
1 Daniel Mustieles Garc a
1 Peter Baumgarten

mysql> select count(*) from Tickets where LastUpdatedBy = '52388';
+----------+
  count(*)  
+----------+
  3613  
+----------+
1 row in set (0.01 sec)
mysql> select count(*) from Tickets where LastUpdatedBy = '52388' and Status = 'Resolved';
+----------+
  count(*)  
+----------+
  1596  
+----------+
1 row in set (0.03 sec)

// from examples/hello.cc
//
// [[Rcpp::export]]
int helloMoon()  
    cctz::TimeZone syd;
    if (!cctz::LoadTimeZone("Australia/Sydney", &syd)) return -1;
    // Neil Armstrong first walks on the moon
    const auto tp1 = cctz::MakeTime(1969, 7, 21, 12, 56, 0, syd);
    const std::string s = cctz::Format("%F %T %z", tp1, syd);
    Rcpp::Rcout << s << "\n";
    cctz::TimeZone nyc;
    cctz::LoadTimeZone("America/New_York", &nyc);
    const auto tp2 = cctz::MakeTime(1969, 7, 20, 22, 56, 0, nyc);
    return tp2 == tp1 ? 0 : 1;
 

R> library(RcppCCTZ)
R> helloMoon()
1969-07-21 12:56:00 +1000
[1] 0
R>

This post by Dirk Eddelbuettel originated on his Thinking inside the box blog. Please report excessive re-aggregation in third-party for-profit settings.

• [DLA 341-1] php5 security update
• [DLA 343-1] libpng security update
• [DLA 355-1] libxml2 security update
• [DLA 356-1] libsndfile security update

• From November 2nd to November 8th, I was handling the LTS frontdesk, triaging new CVE, filing bugs, and ensuring timely answers on the mailing list. I pushed 26 commits to the security tracker. While investigating CVE-2015-7183 I discovered more embedded copies of nspr (which resulted in #804058). I also commented on the upstream fix for CVE-2015-5602 which looked like insufficient.
• Prepared and released DLA-339-1 on libhtml-scrubber-perl fixing one CVE.
• Prepared and released DLA-350-1 on eglibc with a non-trivial backport fixing one CVE.
• Prepared and released DLA-353-1 on imagemagick fixing two security issues without CVE yet (and marking one as not-affecting squeeze).
• Added a third patch after review by the upstream author on my still pending bouncycastle update. The upstream author asked me to further defer the update as they have some related fixes coming up.
• I did preparatory work for DLA-352-1 by identifying the upstream commits that fixed the security issue.
• I spent some time checking issues that have been assigned for a long time without any visible progress being made in the hope to unblock them (libvncserver, pound, quassel).

Fran ois-R gis Vuillemin, Juliette Belin and Rapha l Hertzog

No comment Liked this article? Click here. My blog is Flattr-enabled.

• apt/1.1~exp9 uploaded by Michael Vogt, original patch by Lunar.
• libnet-interface-perl/1.012-3 uploaded by gregor herrmann, original patch by Reiner Herrmann.
• lightdm-gtk-greeter-settings/1.2.0-2 by James Lu, reported by Christian Kastner.
• lilo/1:24.2-1 uploaded by Joachim Wiedorn, original patch by Dmitry Bogatov.
• ncl/6.3.0-4 by Alastair McKinstry.
• pbuilder/0.221 uploaded by Mattia Rizzolo, patch by Reiner Herrmann.
• phantomjs/2.0.0+dfsg-1 uploaded by TANIGUCHI Takaki, fixed upstream.
• pxz/4.999.99~beta5+gitfcfea93-1 uploaded by Holger Levsen, original patch by Reiner Herrman.

• tiger/1:3.2.3-13 uploaded by Javier Fern ndez-Sanguino Pe a, original patch by Daniel Kahn Gillmor.

• #805773 on keylaunch by Chris Lamb: removes an automatically-updated copyright date from the build system.
• #805787 on deja-dup by Reiner Herrmann: use system help2man instead of embedded copy.
• #806321 on coreutils by Lunar: use system help2man instead of embedded copy.
• #806434 on mboxcheck by Reiner Herrmann: set the embedded date to the last date from the changelog.
• #806452 on lierolibre by Reiner Herrmann: set LC_ALL instead of LANG to ensure how dd output looks like.
• #806490 on binutils by Reiner Herrmann: filter user and date from test output.
• #806517 on onboard by Reiner Herrmann: sort the list of items parsed from pkg-config.
• #806547 on netsniff-ng by Reiner Herrmann: set LC_ALL=C when enumerating files to link.
• #806551 on libosmocore by Reiner Herrmann: use C locale and UTC when formatting the changelog date.
• #806552 on remake by Reiner Herrmann: set the mtime of the texinfo source to the latest debian/changelog entry.
• #806564 on libdigidoc by Reiner Herrmann: add support for SOURCE_DATE_EPOCH in VersionInfo.cmake.

mcd()  mkdir "$1"; cd "$1";  
gum()  git checkout "$1" && git rebase master && git checkout master;  
gsb()   LIST= git branch egrep -v '(release staging trusty playground stale)' tr '\n' ' ' tr -d '*' ; git show-branch $LIST;  
gleaf()  git branch --merged master   egrep -v '(release staging trusty playground pipeline review stale)';