Index: /branches/wsgi/COPYING =================================================================== --- /branches/wsgi/COPYING (revision 571) +++ /branches/wsgi/COPYING (revision 571) @@ -0,0 +1,353 @@ +This software is SIPB Virtual Servers, copyright 2007-2008 its contributors. + +SIPB Virtual Servers is free software: you can redistribute it and/or +modify it under the terms of the GNU General Public License as +published by the Free Software Foundation, either version 2 of the +License, or (at your option) any later version. + +SIPB Virtual Servers is distributed in the hope that it will be +useful, but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +General Public License for more details. + +----- + + GNU GENERAL PUBLIC LICENSE + Version 2, June 1991 + + Copyright (C) 1989, 1991 Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The licenses for most software are designed to take away your +freedom to share and change it. By contrast, the GNU General Public +License is intended to guarantee your freedom to share and change free +software--to make sure the software is free for all its users. This +General Public License applies to most of the Free Software +Foundation's software and to any other program whose authors commit to +using it. (Some other Free Software Foundation software is covered by +the GNU Lesser General Public License instead.) You can apply it to +your programs, too. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +this service if you wish), that you receive source code or can get it +if you want it, that you can change the software or use pieces of it +in new free programs; and that you know you can do these things. + + To protect your rights, we need to make restrictions that forbid +anyone to deny you these rights or to ask you to surrender the rights. +These restrictions translate to certain responsibilities for you if you +distribute copies of the software, or if you modify it. + + For example, if you distribute copies of such a program, whether +gratis or for a fee, you must give the recipients all the rights that +you have. You must make sure that they, too, receive or can get the +source code. And you must show them these terms so they know their +rights. + + We protect your rights with two steps: (1) copyright the software, and +(2) offer you this license which gives you legal permission to copy, +distribute and/or modify the software. + + Also, for each author's protection and ours, we want to make certain +that everyone understands that there is no warranty for this free +software. If the software is modified by someone else and passed on, we +want its recipients to know that what they have is not the original, so +that any problems introduced by others will not reflect on the original +authors' reputations. + + Finally, any free program is threatened constantly by software +patents. We wish to avoid the danger that redistributors of a free +program will individually obtain patent licenses, in effect making the +program proprietary. To prevent this, we have made it clear that any +patent must be licensed for everyone's free use or not licensed at all. + + The precise terms and conditions for copying, distribution and +modification follow. + + GNU GENERAL PUBLIC LICENSE + TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION + + 0. This License applies to any program or other work which contains +a notice placed by the copyright holder saying it may be distributed +under the terms of this General Public License. The "Program", below, +refers to any such program or work, and a "work based on the Program" +means either the Program or any derivative work under copyright law: +that is to say, a work containing the Program or a portion of it, +either verbatim or with modifications and/or translated into another +language. (Hereinafter, translation is included without limitation in +the term "modification".) Each licensee is addressed as "you". + +Activities other than copying, distribution and modification are not +covered by this License; they are outside its scope. The act of +running the Program is not restricted, and the output from the Program +is covered only if its contents constitute a work based on the +Program (independent of having been made by running the Program). +Whether that is true depends on what the Program does. + + 1. You may copy and distribute verbatim copies of the Program's +source code as you receive it, in any medium, provided that you +conspicuously and appropriately publish on each copy an appropriate +copyright notice and disclaimer of warranty; keep intact all the +notices that refer to this License and to the absence of any warranty; +and give any other recipients of the Program a copy of this License +along with the Program. + +You may charge a fee for the physical act of transferring a copy, and +you may at your option offer warranty protection in exchange for a fee. + + 2. You may modify your copy or copies of the Program or any portion +of it, thus forming a work based on the Program, and copy and +distribute such modifications or work under the terms of Section 1 +above, provided that you also meet all of these conditions: + + a) You must cause the modified files to carry prominent notices + stating that you changed the files and the date of any change. + + b) You must cause any work that you distribute or publish, that in + whole or in part contains or is derived from the Program or any + part thereof, to be licensed as a whole at no charge to all third + parties under the terms of this License. + + c) If the modified program normally reads commands interactively + when run, you must cause it, when started running for such + interactive use in the most ordinary way, to print or display an + announcement including an appropriate copyright notice and a + notice that there is no warranty (or else, saying that you provide + a warranty) and that users may redistribute the program under + these conditions, and telling the user how to view a copy of this + License. (Exception: if the Program itself is interactive but + does not normally print such an announcement, your work based on + the Program is not required to print an announcement.) + +These requirements apply to the modified work as a whole. If +identifiable sections of that work are not derived from the Program, +and can be reasonably considered independent and separate works in +themselves, then this License, and its terms, do not apply to those +sections when you distribute them as separate works. But when you +distribute the same sections as part of a whole which is a work based +on the Program, the distribution of the whole must be on the terms of +this License, whose permissions for other licensees extend to the +entire whole, and thus to each and every part regardless of who wrote it. + +Thus, it is not the intent of this section to claim rights or contest +your rights to work written entirely by you; rather, the intent is to +exercise the right to control the distribution of derivative or +collective works based on the Program. + +In addition, mere aggregation of another work not based on the Program +with the Program (or with a work based on the Program) on a volume of +a storage or distribution medium does not bring the other work under +the scope of this License. + + 3. You may copy and distribute the Program (or a work based on it, +under Section 2) in object code or executable form under the terms of +Sections 1 and 2 above provided that you also do one of the following: + + a) Accompany it with the complete corresponding machine-readable + source code, which must be distributed under the terms of Sections + 1 and 2 above on a medium customarily used for software interchange; or, + + b) Accompany it with a written offer, valid for at least three + years, to give any third party, for a charge no more than your + cost of physically performing source distribution, a complete + machine-readable copy of the corresponding source code, to be + distributed under the terms of Sections 1 and 2 above on a medium + customarily used for software interchange; or, + + c) Accompany it with the information you received as to the offer + to distribute corresponding source code. (This alternative is + allowed only for noncommercial distribution and only if you + received the program in object code or executable form with such + an offer, in accord with Subsection b above.) + +The source code for a work means the preferred form of the work for +making modifications to it. For an executable work, complete source +code means all the source code for all modules it contains, plus any +associated interface definition files, plus the scripts used to +control compilation and installation of the executable. However, as a +special exception, the source code distributed need not include +anything that is normally distributed (in either source or binary +form) with the major components (compiler, kernel, and so on) of the +operating system on which the executable runs, unless that component +itself accompanies the executable. + +If distribution of executable or object code is made by offering +access to copy from a designated place, then offering equivalent +access to copy the source code from the same place counts as +distribution of the source code, even though third parties are not +compelled to copy the source along with the object code. + + 4. You may not copy, modify, sublicense, or distribute the Program +except as expressly provided under this License. Any attempt +otherwise to copy, modify, sublicense or distribute the Program is +void, and will automatically terminate your rights under this License. +However, parties who have received copies, or rights, from you under +this License will not have their licenses terminated so long as such +parties remain in full compliance. + + 5. You are not required to accept this License, since you have not +signed it. However, nothing else grants you permission to modify or +distribute the Program or its derivative works. These actions are +prohibited by law if you do not accept this License. Therefore, by +modifying or distributing the Program (or any work based on the +Program), you indicate your acceptance of this License to do so, and +all its terms and conditions for copying, distributing or modifying +the Program or works based on it. + + 6. Each time you redistribute the Program (or any work based on the +Program), the recipient automatically receives a license from the +original licensor to copy, distribute or modify the Program subject to +these terms and conditions. You may not impose any further +restrictions on the recipients' exercise of the rights granted herein. +You are not responsible for enforcing compliance by third parties to +this License. + + 7. If, as a consequence of a court judgment or allegation of patent +infringement or for any other reason (not limited to patent issues), +conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot +distribute so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you +may not distribute the Program at all. For example, if a patent +license would not permit royalty-free redistribution of the Program by +all those who receive copies directly or indirectly through you, then +the only way you could satisfy both it and this License would be to +refrain entirely from distribution of the Program. + +If any portion of this section is held invalid or unenforceable under +any particular circumstance, the balance of the section is intended to +apply and the section as a whole is intended to apply in other +circumstances. + +It is not the purpose of this section to induce you to infringe any +patents or other property right claims or to contest validity of any +such claims; this section has the sole purpose of protecting the +integrity of the free software distribution system, which is +implemented by public license practices. Many people have made +generous contributions to the wide range of software distributed +through that system in reliance on consistent application of that +system; it is up to the author/donor to decide if he or she is willing +to distribute software through any other system and a licensee cannot +impose that choice. + +This section is intended to make thoroughly clear what is believed to +be a consequence of the rest of this License. + + 8. If the distribution and/or use of the Program is restricted in +certain countries either by patents or by copyrighted interfaces, the +original copyright holder who places the Program under this License +may add an explicit geographical distribution limitation excluding +those countries, so that distribution is permitted only in or among +countries not thus excluded. In such case, this License incorporates +the limitation as if written in the body of this License. + + 9. The Free Software Foundation may publish revised and/or new versions +of the General Public License from time to time. Such new versions will +be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + +Each version is given a distinguishing version number. If the Program +specifies a version number of this License which applies to it and "any +later version", you have the option of following the terms and conditions +either of that version or of any later version published by the Free +Software Foundation. If the Program does not specify a version number of +this License, you may choose any version ever published by the Free Software +Foundation. + + 10. If you wish to incorporate parts of the Program into other free +programs whose distribution conditions are different, write to the author +to ask for permission. For software which is copyrighted by the Free +Software Foundation, write to the Free Software Foundation; we sometimes +make exceptions for this. Our decision will be guided by the two goals +of preserving the free status of all derivatives of our free software and +of promoting the sharing and reuse of software generally. + + NO WARRANTY + + 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY +FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN +OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES +PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED +OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS +TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE +PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, +REPAIR OR CORRECTION. + + 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR +REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, +INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING +OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED +TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY +YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER +PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +convey the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License along + with this program; if not, write to the Free Software Foundation, Inc., + 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + +Also add information on how to contact you by electronic and paper mail. + +If the program is interactive, make it output a short notice like this +when it starts in an interactive mode: + + Gnomovision version 69, Copyright (C) year name of author + Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type `show c' for details. + +The hypothetical commands `show w' and `show c' should show the appropriate +parts of the General Public License. Of course, the commands you use may +be called something other than `show w' and `show c'; they could even be +mouse-clicks or menu items--whatever suits your program. + +You should also get your employer (if you work as a programmer) or your +school, if any, to sign a "copyright disclaimer" for the program, if +necessary. Here is a sample; alter the names: + + Yoyodyne, Inc., hereby disclaims all copyright interest in the program + `Gnomovision' (which makes passes at compilers) written by James Hacker. + + , 1 April 1989 + Ty Coon, President of Vice + +This General Public License does not permit incorporating your program into +proprietary programs. If your program is a subroutine library, you may +consider it more useful to permit linking proprietary applications with the +library. If this is what you want to do, use the GNU Lesser General +Public License instead of this License. Index: /branches/wsgi/packages/sipb-xen-base/debian/changelog =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/changelog (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/changelog (revision 571) @@ -0,0 +1,49 @@ +sipb-xen-base (8) unstable; urgency=low + + * update .k5login to match black-mesa + + -- Greg Price Sun, 4 May 2008 20:28:28 -0400 + +sipb-xen-base (7) unstable; urgency=low + + * include backports.org + * sources.list.d doesn't actually need a .sources.list, just .list + + -- Greg Price Thu, 1 May 2008 19:45:50 -0400 + +sipb-xen-base (6) unstable; urgency=low + + * actually use sources.list.d correctly + + -- Greg Price Sat, 26 Apr 2008 21:22:12 -0400 + +sipb-xen-base (5) unstable; urgency=low + + * update sources.list, use sources.list.d + + -- Greg Price Sat, 26 Apr 2008 21:06:05 -0400 + +sipb-xen-base (4) unstable; urgency=low + + * sipb-vm-1 becomes sipb-xen-dev + + -- Sam Hartman Tue, 4 Sep 2007 15:48:50 -0400 + +sipb-xen-base (3) unstable; urgency=low + + * We want security updates too + + -- Sam Hartman Fri, 10 Aug 2007 20:39:14 -0400 + +sipb-xen-base (2) unstable; urgency=low + + * Update sources.list to include our debian mirror + + -- Sam Hartman Sat, 4 Aug 2007 19:11:18 -0400 + +sipb-xen-base (1) unstable; urgency=low + + * New upstream version + + -- Sam Hartman Sat, 4 Aug 2007 18:44:21 -0400 + Index: /branches/wsgi/packages/sipb-xen-base/debian/compat =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/compat (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/compat (revision 571) @@ -0,0 +1,1 @@ +4 Index: /branches/wsgi/packages/sipb-xen-base/debian/control =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/control (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/control (revision 571) @@ -0,0 +1,14 @@ +Source: sipb-xen-base +Section: base +Priority: extra +Maintainer: SIPB Xen Project +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 4.1.0) +Standards-Version: 3.7.2 + +Package: sipb-xen-base +Architecture: all +Depends: ${misc:Depends}, +Description: Base configuration required for all SIPB xen servers + This package includes apt configuration, .k5login and other files that + should be synchronized among all our servers. + Installing this on a non-sipb-xen machine would be very anti-social. Index: /branches/wsgi/packages/sipb-xen-base/debian/copyright =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/copyright (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/copyright (revision 571) @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask tabbott@mit.edu if +you have questions about redistribution. Index: /branches/wsgi/packages/sipb-xen-base/debian/rules =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/rules (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/rules (revision 571) @@ -0,0 +1,4 @@ +#!/usr/bin/make -f + + +include /usr/share/cdbs/1/rules/debhelper.mk Index: /branches/wsgi/packages/sipb-xen-base/debian/sipb-xen-base.install =================================================================== --- /branches/wsgi/packages/sipb-xen-base/debian/sipb-xen-base.install (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/debian/sipb-xen-base.install (revision 571) @@ -0,0 +1,1 @@ +files/* . Index: /branches/wsgi/packages/sipb-xen-base/files/etc/apt/sources.list.d/sipb-xen.list =================================================================== --- /branches/wsgi/packages/sipb-xen-base/files/etc/apt/sources.list.d/sipb-xen.list (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/files/etc/apt/sources.list.d/sipb-xen.list (revision 571) @@ -0,0 +1,4 @@ +deb http://sipb-xen-dev.mit.edu/sipb-xen stable main +deb-src http://sipb-xen-dev.mit.edu/sipb-xen stable main +deb http://www.backports.org/debian etch-backports main +deb-src http://www.backports.org/debian etch-backports main Index: /branches/wsgi/packages/sipb-xen-base/files/root/.k5login =================================================================== --- /branches/wsgi/packages/sipb-xen-base/files/root/.k5login (revision 571) +++ /branches/wsgi/packages/sipb-xen-base/files/root/.k5login (revision 571) @@ -0,0 +1,20 @@ +hartmans@ATHENA.MIT.EDU +hartmans/root@ATHENA.MIT.EDU +jbarnold@ATHENA.MIT.EDU +jbarnold/root@ATHENA.MIT.EDU +andersk@ATHENA.MIT.EDU +andersk/root@ATHENA.MIT.EDU +nelhage@ATHENA.MIT.EDU +nelhage/root@ATHENA.MIT.EDU +tabbott@ATHENA.MIT.EDU +tabbott/root@ATHENA.MIT.EDU +quentin/root@ATHENA.MIT.EDU +ecprice@ATHENA.MIT.EDU +ecprice/root@ATHENA.MIT.EDU +price@ATHENA.MIT.EDU +price/root@ATHENA.MIT.EDU +broder/root@ATHENA.MIT.EDU +neboat@ATHENA.MIT.EDU +geofft/root@ATHENA.MIT.EDU +zev/root@ATHENA.MIT.EDU +ccpost/root@ATHENA.MIT.EDU Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/changelog =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/changelog (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/changelog (revision 571) @@ -0,0 +1,12 @@ +sipb-xen-chrony-config (1.2) unstable; urgency=low + + * Divert /etc/chrony/chrony.conf, not /etc/chrony.conf. + * Switch to current config-packages-dev API. + + -- Anders Kaseorg Sun, 01 Jun 2008 16:48:32 -0400 + +sipb-xen-chrony-config (1) unstable; urgency=low + + * Initial release. + + -- SIPB Xen Project Sun, 30 Mar 2008 06:23:10 -0400 Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/compat =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/compat (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/compat (revision 571) @@ -0,0 +1,1 @@ +5 Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/control =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/control (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/control (revision 571) @@ -0,0 +1,15 @@ +Source: sipb-xen-chrony-config +Section: misc +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 5), config-package-dev (>= 4.5~) +Standards-Version: 3.7.2 + +Package: sipb-xen-chrony-config +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, chrony +Description: Chrony configuration package for sipb-xen VMs + This package should be installed on sipb-xen VMs to maintain + an accurate clock Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/control.in =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/control.in (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/control.in (revision 571) @@ -0,0 +1,15 @@ +Source: sipb-xen-chrony-config +Section: misc +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: @cdbs@ +Standards-Version: 3.7.2 + +Package: sipb-xen-chrony-config +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, chrony +Description: Chrony configuration package for sipb-xen VMs + This package should be installed on sipb-xen VMs to maintain + an accurate clock Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/copyright =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/copyright (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/copyright (revision 571) @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask sipb-xen@mit.edu if +you have questions about redistribution. Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/rules =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/rules (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/rules (revision 571) @@ -0,0 +1,9 @@ +#!/usr/bin/make -f + +DEB_AUTO_UPDATE_DEBIAN_CONTROL = 1 +DEB_DIVERT_EXTENSION = .sipb-xen +DEB_DIVERT_FILES_sipb-xen-chrony-config += \ + /etc/chrony/chrony.conf + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/rules/divert.mk Index: /branches/wsgi/packages/sipb-xen-chrony-config/debian/sipb-xen-chrony-config.install =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/debian/sipb-xen-chrony-config.install (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/debian/sipb-xen-chrony-config.install (revision 571) @@ -0,0 +1,1 @@ +files/* . Index: /branches/wsgi/packages/sipb-xen-chrony-config/files/etc/chrony/chrony.conf.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-chrony-config/files/etc/chrony/chrony.conf.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-chrony-config/files/etc/chrony/chrony.conf.sipb-xen (revision 571) @@ -0,0 +1,87 @@ +# This the default chrony.conf file for the Debian chrony package. It is +# suitable for a system with an intermittent dial-up connection. After +# editing this file use the command 'invoke-rc.d chrony restart' to make +# your changes take effect. +# John Hasler 3 Dec. 1998 + +# See www.pool.ntp.org for an explanation of these servers. Please +# consider joining the project if possible. If you can't or don't want to +# use these servers I suggest that you try your ISP's nameservers. We mark +# the servers 'offline' so that chronyd won't try to connect when the link +# is down. Scripts in /etc/ppp/ip-up.d and /etc/ppp/ip-down.d use chronyc +# commands to switch it on when the link comes up and off when it goes +# down. If you have an always-on connection such as cable omit the +# 'offline' directive and chronyd will default to online. + +server time.mit.edu +server tick.mit.edu + +# Look here for the admin password needed for chronyc. The initial +# password is generated by a random process at install time. You may +# change it if you wish. + +keyfile /etc/chrony/chrony.keys + +# Set runtime command key. Note that if you change the key (not the +# password) to anything other than 1 you will need to edit +# /etc/ppp/ip-up.d/chrony, /etc/ppp/ip-down.d/chrony, and +# /etc/cron.weekly/chrony as these scripts use it to get the password. + +commandkey 1 + +# I moved the driftfile to /var/lib/chrony to comply with the Debian +# filesystem standard. + +driftfile /var/lib/chrony/chrony.drift + +# Comment this line out to turn off logging. + +log tracking measurements statistics +logdir /var/log/chrony + +# Stop bad estimates upsetting machine clock. + +maxupdateskew 100.0 + +# Dump measurements when daemon exits. + +dumponexit + +# Specify directory for dumping measurements. + +dumpdir /var/lib/chrony + +# Let computer be a server when it is unsynchronised. + +local stratum 10 + +# Allow computers on the unrouted nets 10 and 192.168 to use the server. + +allow 10/8 +allow 192.168/16 +allow 172.16/12 + +# This directive forces `chronyd' to send a message to syslog if it +# makes a system clock adjustment larger than a threshold value in seconds. + +logchange 0.5 + +# This directive defines an email address to which mail should be sent +# if chronyd applies a correction exceeding a particular threshold to the +# system clock. + +# mailonchange root@localhost 0.5 + +# This directive tells chrony to regulate the real-time clock and tells it +# Where to store related data. It may not work on some newer motherboards +# that use the HPET real-time clock. It requires enhanced real-time +# support in the kernel. + +rtcfile /var/lib/chrony/chrony.rtc + +# If the last line of this file reads 'rtconutc' chrony will assume that +# the CMOS clock is on UTC (GMT). If it reads '# rtconutc' or is absent +# chrony will assume local time. The line (if any) was written by the +# chrony postinst based on what it found in /etc/default/rcS. You may +# change it if necessary. +rtconutc Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/changelog =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/changelog (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/changelog (revision 571) @@ -0,0 +1,28 @@ +sipb-xen-clvm-config (2.0) unstable; urgency=low + + * Depend on multipath-tools because we're going to want it + * Fix multipath-tools' udev script because it's horribly broken + + -- Evan Broder Mon, 5 May 2008 03:35:00 -0400 + +sipb-xen-clvm-config (1.2) unstable; urgency=low + + * I remain an idiot, unfortunately, and didn't notice this last time + + -- Evan Broder Sun, 27 Apr 2008 18:20:06 -0400 + +sipb-xen-clvm-config (1.1) unstable; urgency=low + + [ Evan Broder ] + * And...I'm an idiot - but it's fixed now + + [ Quentin Smith ] + * I'm an idiot too. Make LVM actually use clvm. + + -- Quentin Smith Sun, 27 Apr 2008 18:02:28 -0400 + +sipb-xen-clvm-config (1) unstable; urgency=low + + * Initial Release. + + -- Evan Broder Sun, 27 Apr 2008 12:55:34 -0400 Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/compat =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/compat (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/compat (revision 571) @@ -0,0 +1,1 @@ +5 Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/control =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/control (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/control (revision 571) @@ -0,0 +1,14 @@ +Source: sipb-xen-clvm-config +Section: base +Priority: extra +Maintainer: SIPB Xen Project +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 5), config-package-dev (>= 4.5~) +Standards-Version: 3.7.2 + +Package: sipb-xen-clvm-config +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends}, clvm, cman, ccs, multipath-tools +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Description: Configure clustering LVM + Configure the dom0 servers for clustering LVM Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/control.in =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/control.in (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/control.in (revision 571) @@ -0,0 +1,14 @@ +Source: sipb-xen-clvm-config +Section: base +Priority: extra +Maintainer: SIPB Xen Project +Build-Depends: @cdbs@ +Standards-Version: 3.7.2 + +Package: sipb-xen-clvm-config +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends}, clvm, cman, ccs, multipath-tools +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Description: Configure clustering LVM + Configure the dom0 servers for clustering LVM Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/copyright =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/copyright (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/copyright (revision 571) @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask sipb-xen@mit.edu if +you have questions about redistribution. Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/init =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/init (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/init (revision 571) @@ -0,0 +1,57 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: sipb-xen-clvm-config +# Required-Start: $ccs $cman +# Required-Stop: +# Should-Start: $network +# Default-Start: S +# Default-Stop: +# Short-Description: Start clvm daemon +# Description: Network file systems are mounted by +# /etc/network/if-up.d/mountnfs in the background +# when interfaces are brought up; this script waits +# for them to be mounted before carrying on. +### END INIT INFO + +PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin +DAEMON=/sbin/clvmd +NAME=sipb-xen-clvm-config +PIDFILE=/var/run/cluster/clvmd.pid +DESC="Cluster LVM" + +test -x $DAEMON || exit 0 + +CLVMD_OPTIONS="" + +if [ -f /etc/default/sipb-xen-clvm-config ] ; then + . /etc/default/sipb-xen-clvm-config +fi + +set -e + +case "$1" in + start) + echo -n "Starting $DESC: " + start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- $CLVMD_OPTIONS + echo "$NAME." + ;; + stop) + echo -n "Stopping $DESC: " + start-stop-daemon --stop --oknodo --quiet --pidfile $PIDFILE --exec $DAEMON + echo "$NAME." + ;; + restart|force-reload) + echo -n "Restarting $DESC: " + $0 stop + sleep 1 + $0 start + echo "$NAME." + ;; + *) + N=/etc/init.d/$NAME + echo "Usage: $N {start|stop|restart|force-reload}" >&2 + exit 1 + ;; +esac + +exit 0 Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/install =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/install (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/install (revision 571) @@ -0,0 +1,1 @@ +files/* . Index: /branches/wsgi/packages/sipb-xen-clvm-config/debian/rules =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/debian/rules (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/debian/rules (revision 571) @@ -0,0 +1,10 @@ +#!/usr/bin/make -f + +DEB_AUTO_UPDATE_DEBIAN_CONTROL = 1 +DEB_DIVERT_EXTENSION = .sipb-xen +DEB_DIVERT_FILES_sipb-xen-clvm-config += \ + /etc/lvm/lvm.conf.sipb-xen \ + /etc/udev/multipath.rules.sipb-xen + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/rules/config-package.mk Index: /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/lvm/lvm.conf.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/lvm/lvm.conf.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/lvm/lvm.conf.sipb-xen (revision 571) @@ -0,0 +1,357 @@ +# This is an example configuration file for the LVM2 system. +# It contains the default settings that would be used if there was no +# /etc/lvm/lvm.conf file. +# +# Refer to 'man lvm.conf' for further information including the file layout. +# +# To put this file in a different directory and override /etc/lvm set +# the environment variable LVM_SYSTEM_DIR before running the tools. + + +# This section allows you to configure which block devices should +# be used by the LVM system. +devices { + + # Where do you want your volume groups to appear ? + dir = "/dev" + + # An array of directories that contain the device nodes you wish + # to use with LVM2. + scan = [ "/dev" ] + + # A filter that tells LVM2 to only use a restricted set of devices. + # The filter consists of an array of regular expressions. These + # expressions can be delimited by a character of your choice, and + # prefixed with either an 'a' (for accept) or 'r' (for reject). + # The first expression found to match a device name determines if + # the device will be accepted or rejected (ignored). Devices that + # don't match any patterns are accepted. + + # Be careful if there there are symbolic links or multiple filesystem + # entries for the same device as each name is checked separately against + # the list of patterns. The effect is that if any name matches any 'a' + # pattern, the device is accepted; otherwise if any name matches any 'r' + # pattern it is rejected; otherwise it is accepted. + + # Don't have more than one filter line active at once: only one gets used. + + # Run vgscan after you change this parameter to ensure that + # the cache file gets regenerated (see below). + # If it doesn't do what you expect, check the output of 'vgscan -vvvv'. + + # By default we accept every block device + # filter = [ "a/.*/" ] + + # Exclude the cdrom drive + filter = [ "r|/dev/cdrom|" ] + + # When testing I like to work with just loopback devices: + # filter = [ "a/loop/", "r/.*/" ] + + # Or maybe all loops and ide drives except hdc: + # filter =[ "a|loop|", "r|/dev/hdc|", "a|/dev/ide|", "r|.*|" ] + + # Use anchors if you want to be really specific + # filter = [ "a|^/dev/hda8$|", "r/.*/" ] + + # The results of the filtering are cached on disk to avoid + # rescanning dud devices (which can take a very long time). By + # default this cache file is hidden in the /etc/lvm directory. + # It is safe to delete this file: the tools regenerate it. + cache = "/etc/lvm/.cache" + + # You can turn off writing this cache file by setting this to 0. + write_cache_state = 1 + + # Advanced settings. + + # List of pairs of additional acceptable block device types found + # in /proc/devices with maximum (non-zero) number of partitions. + # types = [ "fd", 16 ] + + # If sysfs is mounted (2.6 kernels) restrict device scanning to + # the block devices it believes are valid. + # 1 enables; 0 disables. + sysfs_scan = 1 + + # By default, LVM2 will ignore devices used as components of + # software RAID (md) devices by looking for md superblocks. + # 1 enables; 0 disables. + md_component_detection = 1 +} + +# This section that allows you to configure the nature of the +# information that LVM2 reports. +log { + + # Controls the messages sent to stdout or stderr. + # There are three levels of verbosity, 3 being the most verbose. + verbose = 0 + + # Should we send log messages through syslog? + # 1 is yes; 0 is no. + syslog = 1 + + # Should we log error and debug messages to a file? + # By default there is no log file. + #file = "/var/log/lvm2.log" + + # Should we overwrite the log file each time the program is run? + # By default we append. + overwrite = 0 + + # What level of log messages should we send to the log file and/or syslog? + # There are 6 syslog-like log levels currently in use - 2 to 7 inclusive. + # 7 is the most verbose (LOG_DEBUG). + level = 0 + + # Format of output messages + # Whether or not (1 or 0) to indent messages according to their severity + indent = 1 + + # Whether or not (1 or 0) to display the command name on each line output + command_names = 0 + + # A prefix to use before the message text (but after the command name, + # if selected). Default is two spaces, so you can see/grep the severity + # of each message. + prefix = " " + + # To make the messages look similar to the original LVM tools use: + # indent = 0 + # command_names = 1 + # prefix = " -- " + + # Set this if you want log messages during activation. + # Don't use this in low memory situations (can deadlock). + # activation = 0 +} + +# Configuration of metadata backups and archiving. In LVM2 when we +# talk about a 'backup' we mean making a copy of the metadata for the +# *current* system. The 'archive' contains old metadata configurations. +# Backups are stored in a human readeable text format. +backup { + + # Should we maintain a backup of the current metadata configuration ? + # Use 1 for Yes; 0 for No. + # Think very hard before turning this off! + backup = 1 + + # Where shall we keep it ? + # Remember to back up this directory regularly! + backup_dir = "/etc/lvm/backup" + + # Should we maintain an archive of old metadata configurations. + # Use 1 for Yes; 0 for No. + # On by default. Think very hard before turning this off. + archive = 1 + + # Where should archived files go ? + # Remember to back up this directory regularly! + archive_dir = "/etc/lvm/archive" + + # What is the minimum number of archive files you wish to keep ? + retain_min = 10 + + # What is the minimum time you wish to keep an archive file for ? + retain_days = 30 +} + +# Settings for the running LVM2 in shell (readline) mode. +shell { + + # Number of lines of history to store in ~/.lvm_history + history_size = 100 +} + + +# Miscellaneous global LVM2 settings +global { + + # The file creation mask for any files and directories created. + # Interpreted as octal if the first digit is zero. + umask = 077 + + # Allow other users to read the files + #umask = 022 + + # Enabling test mode means that no changes to the on disk metadata + # will be made. Equivalent to having the -t option on every + # command. Defaults to off. + test = 0 + + # Whether or not to communicate with the kernel device-mapper. + # Set to 0 if you want to use the tools to manipulate LVM metadata + # without activating any logical volumes. + # If the device-mapper kernel driver is not present in your kernel + # setting this to 0 should suppress the error messages. + activation = 1 + + # If we can't communicate with device-mapper, should we try running + # the LVM1 tools? + # This option only applies to 2.4 kernels and is provided to help you + # switch between device-mapper kernels and LVM1 kernels. + # The LVM1 tools need to be installed with .lvm1 suffices + # e.g. vgscan.lvm1 and they will stop working after you start using + # the new lvm2 on-disk metadata format. + # The default value is set when the tools are built. + # fallback_to_lvm1 = 0 + + # The default metadata format that commands should use - "lvm1" or "lvm2". + # The command line override is -M1 or -M2. + # Defaults to "lvm1" if compiled in, else "lvm2". + # format = "lvm1" + + # Location of proc filesystem + proc = "/proc" + + # Type of locking to use. Defaults to file-based locking (1). + # Turn locking off by setting to 0 (dangerous: risks metadata corruption + # if LVM2 commands get run concurrently). + #locking_type = 1 + + # Local non-LV directory that holds file-based locks while commands are + # in progress. A directory like /tmp that may get wiped on reboot is OK. + locking_dir = "/var/lock/lvm" + + # Other entries can go here to allow you to load shared libraries + # e.g. if support for LVM1 metadata was compiled as a shared library use + # format_libraries = "liblvm2format1.so" + # Full pathnames can be given. + + # Search this directory first for shared libraries. + # library_dir = "/lib/lvm2" + + # Enable these three for cluster LVM when clvmd is running. + # Remember to remove the "locking_type = 1" above. + # + locking_library = "liblvm2clusterlock.so" + locking_type = 2 + library_dir = "/lib/lvm2" +} + +activation { + # Device used in place of missing stripes if activating incomplete volume. + # For now, you need to set this up yourself first (e.g. with 'dmsetup') + # For example, you could make it return I/O errors using the 'error' + # target or make it return zeros. + missing_stripe_filler = "/dev/ioerror" + + # How much stack (in KB) to reserve for use while devices suspended + reserved_stack = 256 + + # How much memory (in KB) to reserve for use while devices suspended + reserved_memory = 8192 + + # Nice value used while devices suspended + process_priority = -18 + + # If volume_list is defined, each LV is only activated if there is a + # match against the list. + # "vgname" and "vgname/lvname" are matched exactly. + # "@tag" matches any tag set in the LV or VG. + # "@*" matches if any tag defined on the host is also set in the LV or VG + # + # volume_list = [ "vg1", "vg2/lvol1", "@tag1", "@*" ] + + # Permissions to use for new devices + # device_permissions = [ 0, 6, 0660 ] + + # Size (in KB) of each copy operation when mirroring + mirror_region_size = 512 + + # 'mirror_image_fault_policy' and 'mirror_log_fault_policy' define + # how a device failure affecting a mirror is handled. + # A mirror is composed of mirror images (copies) and a log. + # A disk log ensures that a mirror does not need to be re-synced + # (all copies made the same) every time a machine reboots or crashes. + # + # In the event of a failure, the specified policy will be used to + # determine what happens: + # + # "remove" - Simply remove the faulty device and run without it. If + # the log device fails, the mirror would convert to using + # an in-memory log. This means the mirror will not + # remember its sync status across crashes/reboots and + # the entire mirror will be re-synced. If a + # mirror image fails, the mirror will convert to a + # non-mirrored device if there is only one remaining good + # copy. + # + # "allocate" - Remove the faulty device and try to allocate space on + # a new device to be a replacement for the failed device. + # Using this policy for the log is fast and maintains the + # ability to remember sync state through crashes/reboots. + # Using this policy for a mirror device is slow, as it + # requires the mirror to resynchronize the devices, but it + # will preserve the mirror characteristic of the device. + # This policy acts like "remove" if no suitable device and + # space can be allocated for the replacement. + # Currently this is not implemented properly and behaves + # similarly to: + # + # "allocate_anywhere" - Operates like "allocate", but it does not + # require that the new space being allocated be on a + # device is not part of the mirror. For a log device + # failure, this could mean that the log is allocated on + # the same device as a mirror device. For a mirror + # device, this could mean that the mirror device is + # allocated on the same device as another mirror device. + # This policy would not be wise for mirror devices + # because it would break the redundant nature of the + # mirror. This policy acts like "remove" if no suitable + # device and space can be allocated for the replacement. + + mirror_log_fault_policy = "allocate" + mirror_device_fault_policy = "remove" +} + + +#################### +# Advanced section # +#################### + +# Metadata settings +# +# metadata { + # Default number of copies of metadata to hold on each PV. 0, 1 or 2. + # You might want to override it from the command line with 0 + # when running pvcreate on new PVs which are to be added to large VGs. + + # pvmetadatacopies = 1 + + # Approximate default size of on-disk metadata areas in sectors. + # You should increase this if you have large volume groups or + # you want to retain a large on-disk history of your metadata changes. + + # pvmetadatasize = 255 + + # List of directories holding live copies of text format metadata. + # These directories must not be on logical volumes! + # It's possible to use LVM2 with a couple of directories here, + # preferably on different (non-LV) filesystems, and with no other + # on-disk metadata (pvmetadatacopies = 0). Or this can be in + # addition to on-disk metadata areas. + # The feature was originally added to simplify testing and is not + # supported under low memory situations - the machine could lock up. + # + # Never edit any files in these directories by hand unless you + # you are absolutely sure you know what you are doing! Use + # the supplied toolset to make changes (e.g. vgcfgrestore). + + # dirs = [ "/etc/lvm/metadata", "/mnt/disk2/lvm/metadata2" ] +#} + +# Event daemon +# +# dmeventd { + # mirror_library is the library used when monitoring a mirror device. + # + # "libdevmapper-event-lvm2mirror.so" attempts to recover from failures. + # It removes failed devices from a volume group and reconfigures a + # mirror as necessary. + # + # mirror_library = "libdevmapper-event-lvm2mirror.so" +#} + Index: /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/udev/multipath.rules.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/udev/multipath.rules.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-clvm-config/files/etc/udev/multipath.rules.sipb-xen (revision 571) @@ -0,0 +1,12 @@ +# +# multipath and multipath partitions nodes are created in /dev/mapper/ +# this file should be installed in /etc/udev/rules.d +# + +# take care of devmap partitioning +ACTION=="add", SUBSYSTEM=="block", KERNEL=="dm-*", \ + PROGRAM="/sbin/dmsetup -j %M -m %m status", \ + RESULT=="*multipath*", \ + PROGRAM="/sbin/dmsetup -j %M -m %m --noopencount --noheadings -c -o name info", \ + RUN+="/sbin/kpartx -a /dev/mapper/%c" + Index: /branches/wsgi/packages/sipb-xen-console-server/debian/changelog =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/changelog (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/changelog (revision 571) @@ -0,0 +1,38 @@ +sipb-xen-console-server (2.02) unstable; urgency=low + + * And...xm isn't in the path, so give a full path + + -- Evan Broder Wed, 2 Apr 2008 04:48:53 -0400 + +sipb-xen-console-server (2.01) unstable; urgency=low + + * update-conserver script should reload, not restart + + -- Evan Broder Wed, 2 Apr 2008 04:43:12 -0400 + +sipb-xen-console-server (2) unstable; urgency=low + + * Use a python based update-conserver script that gets the list of + consoles from xm list + * Run the update-conserver script every 5 minutes to catch VMs that + are not started or stopped through the remctl interface + + -- Evan Broder Wed, 2 Apr 2008 04:32:58 -0400 + +sipb-xen-console-server (1.0.2) unstable; urgency=low + + * Also...make this package actually do something + + -- Evan Broder Wed, 2 Apr 2008 01:41:32 -0400 + +sipb-xen-console-server (1.0.1) unstable; urgency=low + + * Misnamed a file + + -- Evan Broder Wed, 2 Apr 2008 01:36:29 -0400 + +sipb-xen-console-server (1) unstable; urgency=low + + * Initial release. + + -- SIPB Xen Project Wed, 2 Apr 2008 00:27:12 -0400 Index: /branches/wsgi/packages/sipb-xen-console-server/debian/compat =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/compat (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/compat (revision 571) @@ -0,0 +1,1 @@ +5 Index: /branches/wsgi/packages/sipb-xen-console-server/debian/control =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/control (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/control (revision 571) @@ -0,0 +1,14 @@ +Source: sipb-xen-console-server +Section: servers +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 5), config-package-dev +Standards-Version: 3.7.2 + +Package: sipb-xen-console-server +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, conserver-server +Description: SIPB Xen serial console server server + This configures the VMM for the server-side of the console server Index: /branches/wsgi/packages/sipb-xen-console-server/debian/control.in =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/control.in (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/control.in (revision 571) @@ -0,0 +1,14 @@ +Source: sipb-xen-console-server +Section: servers +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: @cdbs@ +Standards-Version: 3.7.2 + +Package: sipb-xen-console-server +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, conserver-server +Description: SIPB Xen serial console server server + This configures the VMM for the server-side of the console server Index: /branches/wsgi/packages/sipb-xen-console-server/debian/copyright =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/copyright (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/copyright (revision 571) @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask sipb-xen@mit.edu if +you have questions about redistribution. Index: /branches/wsgi/packages/sipb-xen-console-server/debian/rules =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/rules (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/rules (revision 571) @@ -0,0 +1,9 @@ +#!/usr/bin/make -f + +DEB_AUTO_UPDATE_DEBIAN_CONTROL = 1 +DEB_DIVERT_EXTENSION = .sipb-xen +DEB_DIVERT_FILES_sipb-xen-console += \ + /etc/conserver/conserver.cf + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/rules/replace-files.mk Index: /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.cron.d =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.cron.d (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.cron.d (revision 571) @@ -0,0 +1,8 @@ +# +# cron-jobs for sipb-xen-console-server +# Refresh the list of active VM consoles +# + +MAILTO=root + +*/5 * * * * root python /usr/sbin/sipb-xen-update-conserver Index: /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.install =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.install (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/debian/sipb-xen-console-server.install (revision 571) @@ -0,0 +1,1 @@ +files/* . Index: /branches/wsgi/packages/sipb-xen-console-server/files/etc/conserver/conserver.cf.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/files/etc/conserver/conserver.cf.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/files/etc/conserver/conserver.cf.sipb-xen (revision 571) @@ -0,0 +1,36 @@ +# The character '&' in logfile names are substituted with the console +# name. +# + +config * { + sslrequired yes; +} +default full { + rw *; +} +default * { + master black-mesa; + logfile /var/log/conserver/&.log; + timestamp "1lab"; + include full; + type exec; + exec xm console d_f; + execsubst f=cs; +} + +console s_sipb-xen-dev { + type exec; + exec xm console s_sipb-xen-dev; +} + +#include /etc/conserver/sipb-xen-consoles.cf + +## +## list of clients we allow +## +access * { + allowed 127.0.0.1; + trusted 18.181.0.134; + limited *; +} + Index: /branches/wsgi/packages/sipb-xen-console-server/files/usr/sbin/sipb-xen-update-conserver =================================================================== --- /branches/wsgi/packages/sipb-xen-console-server/files/usr/sbin/sipb-xen-update-conserver (revision 571) +++ /branches/wsgi/packages/sipb-xen-console-server/files/usr/sbin/sipb-xen-update-conserver (revision 571) @@ -0,0 +1,24 @@ +#!/usr/bin/python + +import sipb_xen_database +import subprocess +import os + +sipb_xen_database.connect('postgres://sipb-xen@sipb-xen-dev.mit.edu/sipb_xen') + +def live_vms(): + p = subprocess.Popen(['/usr/sbin/xm', 'list'], stdout=subprocess.PIPE) + p.wait() + output = p.stdout.read() + vms = [x.split()[0][2:] for x in output.splitlines() if x.startswith('d_')] + return vms + +def reload_conserver(): + p = subprocess.Popen(['/etc/init.d/conserver-server', 'reload'], stdout=subprocess.PIPE) + p.wait() + +if __name__ == '__main__': + f = open('/etc/conserver/sipb-xen-consoles.cf', 'w') + f.write('\n'.join('console %s {}' % vm for vm in live_vms())) + f.close() + reload_conserver() Index: /branches/wsgi/packages/sipb-xen-console/debian/changelog =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/changelog (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/changelog (revision 571) @@ -0,0 +1,94 @@ +sipb-xen-console (7.1) unstable; urgency=low + + * Remember to actually divert the conserver config + + -- Evan Broder Wed, 2 Apr 2008 01:48:05 -0400 + +sipb-xen-console (7) unstable; urgency=low + + * Use conserver instead of ssh to connect to black-mesa + + -- Evan Broder Wed, 2 Apr 2008 00:52:05 -0400 + +sipb-xen-console (6.2) unstable; urgency=low + + * /etc/modules is no longer managed by this package + + -- SIPB Xen Project Tue, 1 Apr 2008 22:25:09 -0400 + +sipb-xen-console (6.1) unstable; urgency=low + + * Don't add the "d_" to the domain name on this side - do it on the + black-mesa side + + -- SIPB Xen Project Tue, 01 Apr 2008 22:20:47 -0400 + +sipb-xen-console (6) unstable; urgency=low + + * modprobe fuse before attaching consolefs + * Revert code to block dropping privileges to user accounts + * Add configuration to accept Kerberos config for users and error on + non-root users if Kerberos authentication fails + + -- SIPB Xen Project Tue, 01 Apr 2008 20:03:11 -0400 + +sipb-xen-console (5.1) unstable; urgency=low + + * Package should create /consolefs so that sipb-xen-consolefs has + somewhere to mount to + + -- Evan Broder Sun, 30 Mar 2008 18:20:02 -0400 + +sipb-xen-console (5) unstable; urgency=low + + * modprobe fuse at boot + + -- Evan Broder Sun, 30 Mar 2008 17:57:36 -0400 + +sipb-xen-console (4.1) unstable; urgency=low + + * It should not be trivial for us to access the serial console of + users' machines + + -- SIPB Xen Project Sun, 30 Mar 2008 17:42:04 -0400 + +sipb-xen-console (4) unstable; urgency=low + + * Added comments to sipb-xen-consolefs + * Added support for symlinks in the realpath + * Changed sipb-xen-consolefs to use syslog instead of printf debugging + + -- SIPB Xen Project Sun, 30 Mar 2008 14:17:59 -0400 + +sipb-xen-console (3.2) unstable; urgency=low + + * Fixing a bug in sipb-xen-consolefs ('@' is not re-added to realms + in the .k5login + + -- SIPB Xen Project Sun, 30 Mar 2008 06:39:30 -0400 + +sipb-xen-console (3.1) unstable; urgency=low + + * Clean up the motd a bit + * Add dependency on sipb-xen-chrony-config to make sure the clock is + staying synced + + -- SIPB Xen Project Sun, 30 Mar 2008 06:33:55 -0400 + +sipb-xen-console (3) unstable; urgency=low + + * Make the motd useful instead of turning it off + + -- SIPB Xen Project Sun, 30 Mar 2008 06:14:23 -0400 + +sipb-xen-console (2) unstable; urgency=low + + * Actually functional release. + + -- SIPB Xen Project Sun, 30 Mar 2008 05:07:43 -0400 + +sipb-xen-console (1) unstable; urgency=low + + * Initial release. + + -- SIPB Xen Project Sun, 30 Mar 2008 01:08:50 -0400 Index: /branches/wsgi/packages/sipb-xen-console/debian/compat =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/compat (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/compat (revision 571) @@ -0,0 +1,1 @@ +5 Index: /branches/wsgi/packages/sipb-xen-console/debian/control =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/control (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/control (revision 571) @@ -0,0 +1,15 @@ +Source: sipb-xen-console +Section: servers +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 5), config-package-dev +Standards-Version: 3.7.2 + +Package: sipb-xen-console +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, conserver-client, daemon, debathena-kerberos-config, fuse-utils, libnss-pgsql1, nscd, openssh-server, python-fuse, sipb-xen-chrony-config, sipb-xen-database-common +Description: SIPB Xen serial console server + This package should be installed on sipb-xen-console + It makes sure that necessary tools are available. Index: /branches/wsgi/packages/sipb-xen-console/debian/control.in =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/control.in (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/control.in (revision 571) @@ -0,0 +1,15 @@ +Source: sipb-xen-console +Section: servers +Priority: important +Maintainer: sipb-xen@mit.edu +Build-Depends: @cdbs@ +Standards-Version: 3.7.2 + +Package: sipb-xen-console +Architecture: all +Provides: ${diverted-files} +Conflicts: ${diverted-files} +Depends: ${shlibs:Depends}, ${misc:Depends}, conserver-client, daemon, debathena-kerberos-config, fuse-utils, libnss-pgsql1, nscd, openssh-server, python-fuse, sipb-xen-chrony-config, sipb-xen-database-common +Description: SIPB Xen serial console server + This package should be installed on sipb-xen-console + It makes sure that necessary tools are available. Index: /branches/wsgi/packages/sipb-xen-console/debian/copyright =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/copyright (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/copyright (revision 571) @@ -0,0 +1,3 @@ +This package was created for internal use of the SIPB Xen Project of +the MIT Student Information Processing Board. Ask sipb-xen@mit.edu if +you have questions about redistribution. Index: /branches/wsgi/packages/sipb-xen-console/debian/rules =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/rules (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/rules (revision 571) @@ -0,0 +1,15 @@ +#!/usr/bin/make -f + +DEB_AUTO_UPDATE_DEBIAN_CONTROL = 1 +DEB_DIVERT_EXTENSION = .sipb-xen +DEB_DIVERT_FILES_sipb-xen-console += \ + /etc/init.d/bootmisc.sh \ + /etc/conserver/conserver.cf \ + /etc/motd \ + /etc/nscd.conf \ + /etc/nsswitch.conf \ + /etc/pam.d/ssh \ + /etc/ssh/sshd_config + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/rules/replace-files.mk Index: /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.init =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.init (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.init (revision 571) @@ -0,0 +1,126 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: sipb-xen-console +# Required-Start: $local_fs $remote_fs +# Required-Stop: $local_fs $remote_fs +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: sipb-xen Console Server homedir filesystem +# Description: +### END INIT INFO + +# Author: SIPB Xen Project + +# Do NOT "set -e" + +# PATH should only include /usr/* if it runs after the mountnfs.sh script +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="The sipb-xen console server homedir filesystem" +NAME=sipb-xen-console +DAEMON=/usr/bin/sipb-xen-consolefs +DAEMON_ARGS="/consolefs" +PIDFILE=/var/run/$NAME.pid +SCRIPTNAME=/etc/init.d/$NAME + +# Exit if the package is not installed +[ -x "$DAEMON" ] || exit 0 + +# Read configuration variable file if it is present +[ -r /etc/default/$NAME ] && . /etc/default/$NAME + +# Load the VERBOSE setting and other rcS variables +. /lib/init/vars.sh + +# Define LSB log_* functions. +# Depend on lsb-base (>= 3.0-6) to ensure that this file is present. +. /lib/lsb/init-functions + +# +# Function that starts the daemon/service +# +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # 2 if daemon could not be started + modprobe fuse + daemon --running -n $NAME && return 1 + daemon -r -O daemon.info -E daemon.err -n $NAME -U $DAEMON $DAEMON_ARGS || return 2 +} + +# +# Function that stops the daemon/service +# +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # 2 if daemon could not be stopped + # other if a failure occurred + daemon --stop -n $NAME + RETVAL="$?" + [ "$RETVAL" = 2 ] && return 2 + # Many daemons don't delete their pidfiles when they exit. + rm -f $PIDFILE + umount "$DAEMON_ARGS" + return "$RETVAL" +} + +case "$1" in + start) + [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME" + do_start + case "$?" in + 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; + 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; + esac + ;; + stop) + [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME" + do_stop + case "$?" in + 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; + 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; + esac + ;; + #reload|force-reload) + # + # If do_reload() is not implemented then leave this commented out + # and leave 'force-reload' as an alias for 'restart'. + # + #log_daemon_msg "Reloading $DESC" "$NAME" + #do_reload + #log_end_msg $? + #;; + restart|force-reload) + # + # If the "reload" option is implemented then remove the + # 'force-reload' alias + # + log_daemon_msg "Restarting $DESC" "$NAME" + do_stop + case "$?" in + 0|1) + do_start + case "$?" in + 0) log_end_msg 0 ;; + 1) log_end_msg 1 ;; # Old process is still running + *) log_end_msg 1 ;; # Failed to start + esac + ;; + *) + # Failed to stop + log_end_msg 1 + ;; + esac + ;; + *) + #echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2 + echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2 + exit 3 + ;; +esac + +: Index: /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.install =================================================================== --- /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.install (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/debian/sipb-xen-console.install (revision 571) @@ -0,0 +1,1 @@ +files/* . Index: /branches/wsgi/packages/sipb-xen-console/files/etc/conserver/conserver.cf.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/conserver/conserver.cf.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/conserver/conserver.cf.sipb-xen (revision 571) @@ -0,0 +1,6 @@ +# default config for console +config * { + master black-mesa; + port 3109; + sslenabled yes; +} Index: /branches/wsgi/packages/sipb-xen-console/files/etc/init.d/bootmisc.sh.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/init.d/bootmisc.sh.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/init.d/bootmisc.sh.sipb-xen (revision 571) @@ -0,0 +1,92 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: bootmisc +# Required-Start: $local_fs hostname $remote_fs +# Required-Stop: $local_fs +# Default-Start: S +# Default-Stop: +# Short-Description: Miscellaneous things to be done during bootup. +# Description: +### END INIT INFO + +PATH=/sbin:/usr/sbin:/bin:/usr/bin +[ "$DELAYLOGIN" ] || DELAYLOGIN=yes +. /lib/init/vars.sh + +do_start () { + # + # If login delaying is enabled then create the flag file + # which prevents logins before startup is complete + # + case "$DELAYLOGIN" in + Y*|y*) + echo "System bootup in progress - please wait" > /var/lib/initscripts/nologin + ;; + esac + + # Create /var/run/utmp so we can login. + : > /var/run/utmp + if grep -q ^utmp: /etc/group + then + chmod 664 /var/run/utmp + chgrp utmp /var/run/utmp + fi + + # Set pseudo-terminal access permissions. + if [ ! -e /dev/.devfsd ] && [ -c /dev/ttyp0 ] + then + chmod -f 666 /dev/tty[p-za-e][0-9a-f] + chown -f root:tty /dev/tty[p-za-e][0-9a-f] + fi + + # Do not update motd + #uname -snrvm > /var/run/motd + #[ -f /etc/motd.tail ] && cat /etc/motd.tail >> /var/run/motd + cp /etc/motd /var/run/motd + + # Save kernel messages in /var/log/dmesg + if which dmesg >/dev/null 2>&1 + then + savelog -q -p -c 5 /var/log/dmesg + dmesg -s 524288 > /var/log/dmesg + chgrp adm /var/log/dmesg || : + elif [ -c /dev/klog ] + then + savelog -q -p -c 5 /var/log/dmesg + dd if=/dev/klog of=/var/log/dmesg & + sleep 1 + kill $! + [ -f /var/log/dmesg ] && { chgrp adm /var/log/dmesg || : ; } + fi + + # + # Save udev log in /var/log/udev + # + if [ -e /dev/.udev.log ] + then + mv -f /dev/.udev.log /var/log/udev + fi + + # Remove bootclean's flag files. + # Don't run bootclean again after this! + rm -f /tmp/.clean /var/run/.clean /var/lock/.clean +} + +case "$1" in + start|"") + do_start + ;; + restart|reload|force-reload) + echo "Error: argument '$1' not supported" >&2 + exit 3 + ;; + stop) + # No-op + ;; + *) + echo "Usage: bootmisc.sh [start|stop]" >&2 + exit 3 + ;; +esac + +: Index: /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_tkt =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_tkt (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_tkt (revision 571) @@ -0,0 +1,2 @@ +You must login to the sipb-xen console server using Kerberos tickets, but your +ssh client did not pass a valid ticket to the console server. Index: /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_user =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_user (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/issue.net.no_user (revision 571) @@ -0,0 +1,2 @@ +The VM you are attempting to access does not appear to exist. + Index: /branches/wsgi/packages/sipb-xen-console/files/etc/motd.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/motd.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/motd.sipb-xen (revision 571) @@ -0,0 +1,3 @@ + +Type Ctrl-e, then c, then . to escape from the console + Index: /branches/wsgi/packages/sipb-xen-console/files/etc/nscd.conf.sipb-xen =================================================================== --- /branches/wsgi/packages/sipb-xen-console/files/etc/nscd.conf.sipb-xen (revision 571) +++ /branches/wsgi/packages/sipb-xen-console/files/etc/nscd.conf.sipb-xen (revision 571) @@ -0,0 +1,67 @@ +# +# /etc/nscd.conf +# +# An example Name Service Cache config file. This file is needed by nscd. +# +# Legal entries are: +# +# logfile +# debug-level +# threads +# max-threads +# server-user +# server-user is ignored if nscd is started with -S parameters +# stat-user +# reload-count unlimited| +# paranoia +# restart-interval