Skip to content
GitLab
Commit 91e179d9 authored by Vagrant Cascadian's avatar Vagrant Cascadian
Browse files

reproducible: Remove armhf systems with only 1GB of ram (bpi0, hb0, 

wbd0, rpi2b, rpi2c) and adjust build jobs accordingly.
parent a4cb55b8
Hide whitespace changes
Inline Side-by-side
README
View file @ 91e179d9
...@@ -145,14 +145,12 @@ Installation tests inside chroot environments. ...@@ -145,14 +145,12 @@ Installation tests inside chroot environments.
** for 'amd64' we are using four virtual machines, profitbricks-build(1+5+11+15)-amd64, which have 15 or 16 cores and 48gb ram each. These nodes are sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Profitbricks]. ** for 'amd64' we are using four virtual machines, profitbricks-build(1+5+11+15)-amd64, which have 15 or 16 cores and 48gb ram each. These nodes are sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Profitbricks].
** for 'i386' we are also using four virtual machines, profitbricks-build(2+6+12+16)-i386, which have 10 or 9 cores and 36gb ram each. pb2+12 run emulated AMD Opteron CPUs and pb6+16 Intel Xeon CPUs. These nodes are also sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Profitbricks]. ** for 'i386' we are also using four virtual machines, profitbricks-build(2+6+12+16)-i386, which have 10 or 9 cores and 36gb ram each. pb2+12 run emulated AMD Opteron CPUs and pb6+16 Intel Xeon CPUs. These nodes are also sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Profitbricks].
** for 'arm64' we are using eight "moonshot" sleds, codethink-sled9-15-arm64, which have 8 cores and 64gb ram each. These nodes are sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Codethink]. ** for 'arm64' we are using eight "moonshot" sleds, codethink-sled9-15-arm64, which have 8 cores and 64gb ram each. These nodes are sponsored by link:https://jenkins.debian.net/userContent/thanks.html[Codethink].
** To test 'armhf' we are using 29 small boards hosted by vagrant@d.o: ** To test 'armhf' we are using 24 small boards hosted by vagrant@d.o:
*** six quad-cores (cbxi4a, cbxi4b, ff4a, jtx1a, jtx1b, jtx1c) with 4gb ram, *** six quad-cores (cbxi4a, cbxi4b, ff4a, jtx1a, jtx1b, jtx1c) with 4gb ram,
*** one hexa-core (ff64a) with 2gb ram, *** one hexa-core (ff64a) with 2gb ram,
*** three octo-cores (odxu4a, odxu4b and odxu4c) with 2gb ram, *** three octo-cores (odxu4a, odxu4b and odxu4c) with 2gb ram,
*** twelve quad-cores (wbq0, cbxi4pro0, ff2a, ff2b, odu3a, opi2a, opi2b, opi2c, jtk1a, jtk1b, p64b and p64c) with 2gb ram, *** twelve quad-cores (wbq0, cbxi4pro0, ff2a, ff2b, odu3a, opi2a, opi2b, opi2c, jtk1a, jtk1b, p64b and p64c) with 2gb ram, and
*** two dual-core (bbx15 and cb3a) with 2gb ram and, *** two dual-core (bbx15 and cb3a) with 2gb ram each.
*** two quad-cores (rpi2b and rpi2c) with 1gb ram and
*** three dual-cores (bpi0, hb0 and wbd0) with 1gb ram, each.
* We would love to have more or more powerful ARM hardware in the future, if you can help, please talk to us! * We would love to have more or more powerful ARM hardware in the future, if you can help, please talk to us!
* Packages to be build are scheduled in the database via a scheduler job, which runs every hour and if the queue is below a certain threshold schedules four types of packages: * Packages to be build are scheduled in the database via a scheduler job, which runs every hour and if the queue is below a certain threshold schedules four types of packages:
......
bin/common-functions.sh
View file @ 91e179d9
...@@ -113,7 +113,7 @@ else ...@@ -113,7 +113,7 @@ else
case $HOSTNAME in case $HOSTNAME in
jenkins|jenkins-test-vm|profitbricks-build*) jenkins|jenkins-test-vm|profitbricks-build*)
export MIRROR=http://deb.debian.org/debian ;; export MIRROR=http://deb.debian.org/debian ;;
bbx15|bpi0|cb3*|cbxi4*|hb0|wbq0|odxu4*|odu3*|odc*|wbd0|rpi2*|ff*|ff4*|opi2*|jt?1*|p64*) bbx15|cb3*|cbxi4*|wbq0|odxu4*|odu3*|odc*|ff*|ff4*|opi2*|jt?1*|p64*)
export MIRROR=http://deb.debian.org/debian ;; export MIRROR=http://deb.debian.org/debian ;;
codethink*) codethink*)
export MIRROR=http://deb.debian.org/debian ;; export MIRROR=http://deb.debian.org/debian ;;
...@@ -127,7 +127,7 @@ else ...@@ -127,7 +127,7 @@ else
case $HOSTNAME in case $HOSTNAME in
jenkins|jenkins-test-vm|profitbricks-build*|codethink*) jenkins|jenkins-test-vm|profitbricks-build*|codethink*)
export http_proxy="http://localhost:3128" ;; export http_proxy="http://localhost:3128" ;;
bbx15|bpi0|cb3*|cbxi4*|hb0|wbq0|odxu4*|odu3*|odc*|wbd0|rpi2*|ff*|ff4*|opi2*|jt?1*|p64*) bbx15|cb3*|cbxi4*|wbq0|odxu4*|odu3*|odc*|ff*|ff4*|opi2*|jt?1*|p64*)
export http_proxy="http://10.0.0.15:8000/" ;; export http_proxy="http://10.0.0.15:8000/" ;;
spectrum) spectrum)
export MIRROR=none ;; export MIRROR=none ;;
......
bin/jenkins_node_definitions.sh
View file @ 91e179d9
...@@ -12,7 +12,6 @@ ...@@ -12,7 +12,6 @@
# nice to also include pb-build3+4+7+9+10, to also cleanup # nice to also include pb-build3+4+7+9+10, to also cleanup
# jobs there… # jobs there…
BUILD_NODES="bbx15-armhf-rb.debian.net BUILD_NODES="bbx15-armhf-rb.debian.net
bpi0-armhf-rb.debian.net
cb3a-armhf-rb.debian.net cb3a-armhf-rb.debian.net
cbxi4a-armhf-rb.debian.net cbxi4a-armhf-rb.debian.net
cbxi4b-armhf-rb.debian.net cbxi4b-armhf-rb.debian.net
...@@ -29,7 +28,6 @@ ff2a-armhf-rb.debian.net ...@@ -29,7 +28,6 @@ ff2a-armhf-rb.debian.net
ff2b-armhf-rb.debian.net ff2b-armhf-rb.debian.net
ff4a-armhf-rb.debian.net ff4a-armhf-rb.debian.net
ff64a-armhf-rb.debian.net ff64a-armhf-rb.debian.net
hb0-armhf-rb.debian.net
jtk1a-armhf-rb.debian.net jtk1a-armhf-rb.debian.net
jtk1b-armhf-rb.debian.net jtk1b-armhf-rb.debian.net
jtx1a-armhf-rb.debian.net jtx1a-armhf-rb.debian.net
...@@ -52,9 +50,6 @@ profitbricks-build11-amd64.debian.net ...@@ -52,9 +50,6 @@ profitbricks-build11-amd64.debian.net
profitbricks-build12-i386.debian.net profitbricks-build12-i386.debian.net
profitbricks-build15-amd64.debian.net profitbricks-build15-amd64.debian.net
profitbricks-build16-i386.debian.net profitbricks-build16-i386.debian.net
rpi2b-armhf-rb.debian.net
rpi2c-armhf-rb.debian.net
wbd0-armhf-rb.debian.net
wbq0-armhf-rb.debian.net" wbq0-armhf-rb.debian.net"
# return the ports sshd is listening on # return the ports sshd is listening on
...@@ -65,12 +60,6 @@ get_node_ssh_port() { ...@@ -65,12 +60,6 @@ get_node_ssh_port() {
bbx15*) bbx15*)
PORT=2242 PORT=2242
;; ;;
bpi0*)
PORT=2222
;;
hb0*)
PORT=2224
;;
wbq0*) wbq0*)
PORT=2225 PORT=2225
;; ;;
...@@ -86,15 +75,6 @@ get_node_ssh_port() { ...@@ -86,15 +75,6 @@ get_node_ssh_port() {
odxu4a*) odxu4a*)
PORT=2229 PORT=2229
;; ;;
wbd0*)
PORT=2223
;;
rpi2b*)
PORT=2230
;;
rpi2c*)
PORT=2235
;;
odxu4b*) odxu4b*)
PORT=2232 PORT=2232
;; ;;
......
bin/reproducible_build_service.sh
View file @ 91e179d9
...@@ -117,14 +117,12 @@ choose_nodes() { ...@@ -117,14 +117,12 @@ choose_nodes() {
arm64_31) NODE1=codethink-sled16-arm64 NODE2=codethink-sled13-arm64 ;; arm64_31) NODE1=codethink-sled16-arm64 NODE2=codethink-sled13-arm64 ;;
arm64_32) NODE1=codethink-sled16-arm64 NODE2=codethink-sled15-arm64 ;; arm64_32) NODE1=codethink-sled16-arm64 NODE2=codethink-sled15-arm64 ;;
# to choose new armhf jobs: # to choose new armhf jobs:
# for i in hb0 rpi2b rpi2c wbd0 bpi0 cb3a bbx15 cbxi4pro0 ff2a ff2b ff64a jtk1a jtk1b odxu4a odxu4b odxu4c odu3a opi2a opi2b opi2c p64b p64c wbq0 cbxi4a cbxi4b ff4a jtx1a jtx1b jtx1c; do echo "$i: " ; grep NODE1 bin/reproducible_build_service.sh|grep armhf|grep $i-armhf ; done # for i in cb3a bbx15 cbxi4pro0 ff2a ff2b ff64a jtk1a jtk1b odxu4a odxu4b odxu4c odu3a opi2a opi2b opi2c p64b p64c wbq0 cbxi4a cbxi4b ff4a jtx1a jtx1b jtx1c; do echo "$i: " ; grep NODE1 bin/reproducible_build_service.sh|grep armhf|grep $i-armhf ; done
# 6 jobs for quad-cores with 4 gb ram # 6 jobs for quad-cores with 4 gb ram
# 4 jobs for octo-cores with 2 gb ram # 4 jobs for octo-cores with 2 gb ram
# 4 jobs for hexa-cores with 2 gb ram # 4 jobs for hexa-cores with 2 gb ram
# 4 jobs for quad-cores with 2 gb ram # 4 jobs for quad-cores with 2 gb ram
# 4 jobs for dual-cores with 2 gb ram # 4 jobs for dual-cores with 2 gb ram
# 2 jobs for dual-cores with 1 gb ram
# 2 jobs for quad-cores with 1 gb ram
# #
# Don't forget to update README with the number of builders…! # Don't forget to update README with the number of builders…!
# #
...@@ -132,11 +130,11 @@ choose_nodes() { ...@@ -132,11 +130,11 @@ choose_nodes() {
armhf_2) NODE1=bbx15-armhf-rb NODE2=ff4a-armhf-rb ;; armhf_2) NODE1=bbx15-armhf-rb NODE2=ff4a-armhf-rb ;;
armhf_3) NODE1=cb3a-armhf-rb NODE2=jtx1a-armhf-rb ;; armhf_3) NODE1=cb3a-armhf-rb NODE2=jtx1a-armhf-rb ;;
armhf_4) NODE1=cb3a-armhf-rb NODE2=jtx1c-armhf-rb ;; armhf_4) NODE1=cb3a-armhf-rb NODE2=jtx1c-armhf-rb ;;
armhf_5) NODE1=hb0-armhf-rb NODE2=p64c-armhf-rb ;; armhf_5) NODE1=cbxi4a-armhf-rb NODE2=p64c-armhf-rb ;;
armhf_6) NODE1=rpi2b-armhf-rb NODE2=ff4a-armhf-rb ;; armhf_6) NODE1=jtx1a-armhf-rb NODE2=ff4a-armhf-rb ;;
armhf_7) NODE1=rpi2c-armhf-rb NODE2=cbxi4b-armhf-rb ;; armhf_7) NODE1=ff4a-armhf-rb NODE2=cbxi4b-armhf-rb ;;
armhf_8) NODE1=wbd0-armhf-rb NODE2=cbxi4b-armhf-rb ;; armhf_8) NODE1=ff64a-armhf-rb NODE2=cbxi4a-armhf-rb ;;
armhf_9) NODE1=bpi0-armhf-rb NODE2=cbxi4b-armhf-rb ;; armhf_9) NODE1=ff64a-armhf-rb NODE2=cbxi4pro0-armhf-rb ;;
armhf_10) NODE1=cbxi4pro0-armhf-rb NODE2=ff4a-armhf-rb ;; armhf_10) NODE1=cbxi4pro0-armhf-rb NODE2=ff4a-armhf-rb ;;
armhf_11) NODE1=cbxi4pro0-armhf-rb NODE2=jtx1a-armhf-rb ;; armhf_11) NODE1=cbxi4pro0-armhf-rb NODE2=jtx1a-armhf-rb ;;
armhf_12) NODE1=ff2a-armhf-rb NODE2=wbq0-armhf-rb ;; armhf_12) NODE1=ff2a-armhf-rb NODE2=wbq0-armhf-rb ;;
...@@ -156,7 +154,7 @@ choose_nodes() { ...@@ -156,7 +154,7 @@ choose_nodes() {
armhf_26) NODE1=odu3a-armhf-rb NODE2=odxu4a-armhf-rb ;; armhf_26) NODE1=odu3a-armhf-rb NODE2=odxu4a-armhf-rb ;;
armhf_27) NODE1=odu3a-armhf-rb NODE2=jtx1b-armhf-rb ;; armhf_27) NODE1=odu3a-armhf-rb NODE2=jtx1b-armhf-rb ;;
armhf_28) NODE1=opi2a-armhf-rb NODE2=odxu4c-armhf-rb ;; armhf_28) NODE1=opi2a-armhf-rb NODE2=odxu4c-armhf-rb ;;
armhf_29) NODE1=opi2a-armhf-rb NODE2=cbxi4a-armhf-rb ;; armhf_29) NODE1=opi2a-armhf-rb NODE2=cbxi4b-armhf-rb ;;
armhf_30) NODE1=opi2b-armhf-rb NODE2=odxu4c-armhf-rb ;; armhf_30) NODE1=opi2b-armhf-rb NODE2=odxu4c-armhf-rb ;;
armhf_31) NODE1=opi2b-armhf-rb NODE2=jtx1b-armhf-rb ;; armhf_31) NODE1=opi2b-armhf-rb NODE2=jtx1b-armhf-rb ;;
armhf_32) NODE1=opi2c-armhf-rb NODE2=odxu4b-armhf-rb ;; armhf_32) NODE1=opi2c-armhf-rb NODE2=odxu4b-armhf-rb ;;
...@@ -166,27 +164,22 @@ choose_nodes() { ...@@ -166,27 +164,22 @@ choose_nodes() {
armhf_36) NODE1=p64c-armhf-rb NODE2=ff2b-armhf-rb ;; armhf_36) NODE1=p64c-armhf-rb NODE2=ff2b-armhf-rb ;;
armhf_37) NODE1=p64c-armhf-rb NODE2=cbxi4pro0-armhf-rb ;; armhf_37) NODE1=p64c-armhf-rb NODE2=cbxi4pro0-armhf-rb ;;
armhf_38) NODE1=wbq0-armhf-rb NODE2=ff2b-armhf-rb ;; armhf_38) NODE1=wbq0-armhf-rb NODE2=ff2b-armhf-rb ;;
armhf_39) NODE1=wbq0-armhf-rb NODE2=cbxi4pro0-armhf-rb ;; armhf_39) NODE1=wbq0-armhf-rb NODE2=cbxi4a-armhf-rb ;;
armhf_40) NODE1=cbxi4a-armhf-rb NODE2=jtx1b-armhf-rb ;; armhf_40) NODE1=cbxi4a-armhf-rb NODE2=jtx1b-armhf-rb ;;
armhf_41) NODE1=cbxi4a-armhf-rb NODE2=cb3a-armhf-rb ;; armhf_41) NODE1=cbxi4a-armhf-rb NODE2=cb3a-armhf-rb ;;
armhf_42) NODE1=cbxi4a-armhf-rb NODE2=rpi2c-armhf-rb ;; armhf_42) NODE1=cbxi4b-armhf-rb NODE2=bbx15-armhf-rb ;;
armhf_43) NODE1=cbxi4b-armhf-rb NODE2=bbx15-armhf-rb ;; armhf_43) NODE1=cbxi4b-armhf-rb NODE2=cb3a-armhf-rb ;;
armhf_44) NODE1=cbxi4b-armhf-rb NODE2=cb3a-armhf-rb ;; armhf_44) NODE1=cbxi4b-armhf-rb NODE2=ff64a-armhf-rb ;;
armhf_45) NODE1=cbxi4b-armhf-rb NODE2=ff64a-armhf-rb ;; armhf_45) NODE1=ff4a-armhf-rb NODE2=jtk1a-armhf-rb ;;
armhf_46) NODE1=ff4a-armhf-rb NODE2=jtk1a-armhf-rb ;; armhf_46) NODE1=ff4a-armhf-rb NODE2=jtx1c-armhf-rb ;;
armhf_47) NODE1=ff4a-armhf-rb NODE2=wbd0-armhf-rb ;; armhf_47) NODE1=jtx1a-armhf-rb NODE2=cbxi4b-armhf-rb ;;
armhf_48) NODE1=ff4a-armhf-rb NODE2=jtx1c-armhf-rb ;; armhf_48) NODE1=jtx1a-armhf-rb NODE2=odxu4a-armhf-rb ;;
armhf_49) NODE1=jtx1a-armhf-rb NODE2=cbxi4a-armhf-rb ;; armhf_49) NODE1=jtx1b-armhf-rb NODE2=bbx15-armhf-rb ;;
armhf_50) NODE1=jtx1a-armhf-rb NODE2=rpi2b-armhf-rb ;; armhf_50) NODE1=jtx1c-armhf-rb NODE2=jtk1a-armhf-rb ;;
armhf_51) NODE1=jtx1a-armhf-rb NODE2=odxu4a-armhf-rb ;; armhf_51) NODE1=jtx1c-armhf-rb NODE2=cbxi4a-armhf-rb ;;
armhf_52) NODE1=jtx1b-armhf-rb NODE2=bbx15-armhf-rb ;; armhf_52) NODE1=jtx1c-armhf-rb NODE2=odu3a-armhf-rb ;;
armhf_53) NODE1=jtx1c-armhf-rb NODE2=jtk1a-armhf-rb ;; armhf_53) NODE1=jtk1a-armhf-rb NODE2=wbq0-armhf-rb ;;
armhf_54) NODE1=jtx1c-armhf-rb NODE2=cbxi4a-armhf-rb ;; armhf_54) NODE1=jtk1a-armhf-rb NODE2=ff64a-armhf-rb ;;
armhf_55) NODE1=jtx1c-armhf-rb NODE2=odu3a-armhf-rb ;;
armhf_56) NODE1=jtk1a-armhf-rb NODE2=wbq0-armhf-rb ;;
armhf_57) NODE1=jtk1a-armhf-rb NODE2=ff64a-armhf-rb ;;
armhf_58) NODE1=ff64a-armhf-rb NODE2=hb0-armhf-rb ;;
armhf_59) NODE1=ff64a-armhf-rb NODE2=bpi0-armhf-rb ;;
*) NODE1=undefined *) NODE1=undefined
;; ;;
esac esac
......
deploy_jdn
View file @ 91e179d9
...@@ -54,7 +54,6 @@ profitbricks-build10-amd64.debian.net ...@@ -54,7 +54,6 @@ profitbricks-build10-amd64.debian.net
profitbricks-build11-amd64.debian.net profitbricks-build11-amd64.debian.net
profitbricks-build15-amd64.debian.net profitbricks-build15-amd64.debian.net
bbx15-armhf-rb.debian.net bbx15-armhf-rb.debian.net
bpi0-armhf-rb.debian.net
cb3a-armhf-rb.debian.net cb3a-armhf-rb.debian.net
cbxi4a-armhf-rb.debian.net cbxi4a-armhf-rb.debian.net
cbxi4b-armhf-rb.debian.net cbxi4b-armhf-rb.debian.net
...@@ -63,7 +62,6 @@ ff2a-armhf-rb.debian.net ...@@ -63,7 +62,6 @@ ff2a-armhf-rb.debian.net
ff2b-armhf-rb.debian.net ff2b-armhf-rb.debian.net
ff4a-armhf-rb.debian.net ff4a-armhf-rb.debian.net
ff64a-armhf-rb.debian.net ff64a-armhf-rb.debian.net
hb0-armhf-rb.debian.net
jtk1a-armhf-rb.debian.net jtk1a-armhf-rb.debian.net
jtk1b-armhf-rb.debian.net jtk1b-armhf-rb.debian.net
jtx1a-armhf-rb.debian.net jtx1a-armhf-rb.debian.net
...@@ -78,9 +76,6 @@ opi2b-armhf-rb.debian.net ...@@ -78,9 +76,6 @@ opi2b-armhf-rb.debian.net
opi2c-armhf-rb.debian.net opi2c-armhf-rb.debian.net
p64b-armhf-rb.debian.net p64b-armhf-rb.debian.net
p64c-armhf-rb.debian.net p64c-armhf-rb.debian.net
rpi2b-armhf-rb.debian.net
rpi2c-armhf-rb.debian.net
wbd0-armhf-rb.debian.net
wbq0-armhf-rb.debian.net wbq0-armhf-rb.debian.net
root@jenkins.debian.net root@jenkins.debian.net
) )
......
hosts/bpi0 deleted 120000 → 0
View file @ a4cb55b8
bpi0-armhf-rb
\ No newline at end of file
hosts/bpi0-armhf-rb/etc/munin/munin-node.conf deleted 100644 → 0
View file @ a4cb55b8
#
# Example config-file for munin-node
#
log_level 4
log_file /var/log/munin/munin-node.log
pid_file /var/run/munin/munin-node.pid
background 1
setsid 1
user root
group root
# This is the timeout for the whole transaction.
# Units are in sec. Default is 15 min
#
# global_timeout 900
# This is the timeout for each plugin.
# Units are in sec. Default is 1 min
#
# timeout 60
# Regexps for files to ignore
ignore_file [\#~]$
ignore_file DEADJOE$
ignore_file \.bak$
ignore_file %$
ignore_file \.dpkg-(tmp|new|old|dist)$
ignore_file \.rpm(save|new)$
ignore_file \.pod$
# Set this if the client doesn't report the correct hostname when
# telnetting to localhost, port 4949
#
#host_name localhost.localdomain
# A list of addresses that are allowed to connect. This must be a
# regular expression, since Net::Server does not understand CIDR-style
# network notation unless the perl module Net::CIDR is installed. You
# may repeat the allow line as many times as you'd like
allow ^127\.0\.0\.1$
allow ^::1$
# If you have installed the Net::CIDR perl module, you can use one or more
# cidr_allow and cidr_deny address/mask patterns. A connecting client must
# match any cidr_allow, and not match any cidr_deny. Note that a netmask
# *must* be provided, even if it's /32
#
# Example:
#
# cidr_allow 127.0.0.1/32
# cidr_allow 192.0.2.0/24
# cidr_deny 192.0.2.42/32
# Which address to bind to;
host *
# host 127.0.0.1
# And which port
port 4949
allow ^78\.137\.96\.196
hostname bpi0-armhf-rb.debian.net
hosts/bpi0-armhf-rb/etc/postfix/main.cf deleted 100644 → 0
View file @ a4cb55b8
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = bpi0-armhf-rb.debian.net
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = bpi0-armhf-rb.debian.net, localhost
relayhost = mail.holgerlevsen.de
#mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks = 127.0.0.0/8
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
hosts/bpi0-armhf-rb/etc/ssh/sshd_config deleted 100644 → 0
View file @ a4cb55b8
# Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
Port 2222
#AddressFamily any
#ListenAddress ::
#ListenAddress 0.0.0.0
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
# Logging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
#LoginGraceTime 2n
PermitRootLogin prohibit-password
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10
PubkeyAuthentication yes
AuthorizedKeysFile /var/lib/misc/userkeys/%u %h/.ssh/authorized_keys
#AuthorizedPrincipalsFile none
#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody
# For this to work you will also need host keys in /etc/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
#PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication no
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
PrintMotd no
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS no
#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100
#PermitTunnel no
#ChrootDirectory none
#VersionAddendum none
# no default banner path
#Banner none
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
# override default of no subsystems
Subsystem sftp /usr/lib/openssh/sftp-server
hosts/common/etc/pbuilder/rebuild-hooks/D01_modify_environment
View file @ 91e179d9
...@@ -33,15 +33,7 @@ if [ -n "$BUILDUSERNAME" ] ; then ...@@ -33,15 +33,7 @@ if [ -n "$BUILDUSERNAME" ] ; then
fi fi
# disable disorderfs due to #844498 # disable disorderfs due to #844498
#exit 0 exit 0
# use disorderfs on armhf only for now
if [ "$(dpkg --print-architecture)" != "armhf" ] ; then
exit 0
elif [ "$REAL_HOSTNAME" != "bpi0" ] ; then
exit 0
else
echo "disorder-fs debug: bpi0, yay, enabling disorderfs now…"
fi
# use disorderfs # use disorderfs
if [ -x /usr/bin/disorderfs ] ; then if [ -x /usr/bin/disorderfs ] ; then
......
hosts/common/etc/pbuilderrc
View file @ 91e179d9
...@@ -9,7 +9,7 @@ ...@@ -9,7 +9,7 @@
case $HOSTNAME in case $HOSTNAME in
jenkins|jenkins-test-vm|profitbricks-build*) jenkins|jenkins-test-vm|profitbricks-build*)
MIRRORSITE=http://deb.debian.org/debian ;; MIRRORSITE=http://deb.debian.org/debian ;;
bbx15|bpi0|cb3*|cbxi4*|hb0|wbq0|odxu4*|odu3*|odc*|wbd0|rpi2*|ff*|ff4*|opi2*|jt?1*|p64*) bbx15|cb3*|cbxi4*|wbq0|odxu4*|odu3*|odc*|ff*|ff4*|opi2*|jt?1*|p64*)
MIRRORSITE=http://deb.debian.org/debian ;; MIRRORSITE=http://deb.debian.org/debian ;;
codethink*) codethink*)
...@@ -21,7 +21,7 @@ esac ...@@ -21,7 +21,7 @@ esac
case $HOSTNAME in case $HOSTNAME in
profitbricks-build*i386) profitbricks-build*i386)
EATMYDATA=yes ;; EATMYDATA=yes ;;
bbx15|bpi0|cb3*|cbxi4*|hb0|wbq0|odxu4*|odu3*|odc*|wbd0|rpi2*|ff*|ff4*|opi2*|jt?1*|p64*) bbx15|cb3*|cbxi4*|wbq0|odxu4*|odu3*|odc*|ff*|ff4*|opi2*|jt?1*|p64*)
EATMYDATA=yes ;; EATMYDATA=yes ;;
*) ;; *) ;;
esac esac
......
hosts/hb0 deleted 120000 → 0
View file @ a4cb55b8
hb0-armhf-rb
\ No newline at end of file
hosts/hb0-armhf-rb/etc/munin/munin-node.conf deleted 100644 → 0
View file @ a4cb55b8
#
# Example config-file for munin-node
#
log_level 4
log_file /var/log/munin/munin-node.log
pid_file /var/run/munin/munin-node.pid
background 1
setsid 1
user root
group root
# This is the timeout for the whole transaction.
# Units are in sec. Default is 15 min
#
# global_timeout 900
# This is the timeout for each plugin.
# Units are in sec. Default is 1 min
#
# timeout 60
# Regexps for files to ignore
ignore_file [\#~]$
ignore_file DEADJOE$
ignore_file \.bak$
ignore_file %$
ignore_file \.dpkg-(tmp|new|old|dist)$
ignore_file \.rpm(save|new)$
ignore_file \.pod$
# Set this if the client doesn't report the correct hostname when
# telnetting to localhost, port 4949
#
#host_name localhost.localdomain
# A list of addresses that are allowed to connect. This must be a
# regular expression, since Net::Server does not understand CIDR-style
# network notation unless the perl module Net::CIDR is installed. You
# may repeat the allow line as many times as you'd like
allow ^127\.0\.0\.1$
allow ^::1$
# If you have installed the Net::CIDR perl module, you can use one or more
# cidr_allow and cidr_deny address/mask patterns. A connecting client must
# match any cidr_allow, and not match any cidr_deny. Note that a netmask
# *must* be provided, even if it's /32
#
# Example:
#
# cidr_allow 127.0.0.1/32
# cidr_allow 192.0.2.0/24
# cidr_deny 192.0.2.42/32
# Which address to bind to;
host *
# host 127.0.0.1
# And which port
port 4949
allow ^78\.137\.96\.196
hostname hb0-armhf-rb.debian.net
hosts/hb0-armhf-rb/etc/postfix/main.cf deleted 100644 → 0
View file @ a4cb55b8
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = hb0-armhf-rb.debian.net
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = hb0-armhf-rb.debian.net, localhost
relayhost = mail.holgerlevsen.de
#mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks = 127.0.0.0/8
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
hosts/hb0-armhf-rb/etc/ssh/sshd_config deleted 100644 → 0
View file @ a4cb55b8
# Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
Port 2224
#AddressFamily any
#ListenAddress ::
#ListenAddress 0.0.0.0
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
# Logging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
#LoginGraceTime 2n
PermitRootLogin prohibit-password
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10
PubkeyAuthentication yes
AuthorizedKeysFile /var/lib/misc/userkeys/%u %h/.ssh/authorized_keys
#AuthorizedPrincipalsFile none
#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody
# For this to work you will also need host keys in /etc/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
#PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication no
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
PrintMotd no
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS no
#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100
#PermitTunnel no
#ChrootDirectory none
#VersionAddendum none
# no default banner path
#Banner none
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
# override default of no subsystems
Subsystem sftp /usr/lib/openssh/sftp-server
hosts/jenkins/etc/munin/munin.conf
View file @ 91e179d9
...@@ -396,26 +396,6 @@ contact.me.command mail -s "Munin notification ${var:host}" root ...@@ -396,26 +396,6 @@ contact.me.command mail -s "Munin notification ${var:host}" root
diskstats_utilization.graph no diskstats_utilization.graph no
diskstats_iops.graph no diskstats_iops.graph no
[bpi0-armhf-rb.debian.net]
address ssh://jenkins@bpi0-armhf-rb.debian.net:2222/bin/nc localhost 4949
use_node_name yes
diskstats_latency.sda.avgwrwait.warning 0:20
diskstats_latency.sda.avgrdwait.warning 0:10
diskstats_latency.graph no
diskstats_throughput.graph no
diskstats_utilization.graph no
diskstats_iops.graph no
[hb0-armhf-rb.debian.net]
address ssh://jenkins@hb0-armhf-rb.debian.net:2224/bin/nc localhost 4949
use_node_name yes
diskstats_latency.sda.avgwrwait.warning 0:20
diskstats_latency.sda.avgrdwait.warning 0:10
diskstats_latency.graph no
diskstats_throughput.graph no
diskstats_utilization.graph no
diskstats_iops.graph no
[wbq0-armhf-rb.debian.net] [wbq0-armhf-rb.debian.net]
address ssh://jenkins@wbq0-armhf-rb.debian.net:2225/bin/nc localhost 4949 address ssh://jenkins@wbq0-armhf-rb.debian.net:2225/bin/nc localhost 4949
use_node_name yes use_node_name yes
...@@ -466,36 +446,6 @@ contact.me.command mail -s "Munin notification ${var:host}" root ...@@ -466,36 +446,6 @@ contact.me.command mail -s "Munin notification ${var:host}" root
diskstats_utilization.graph no diskstats_utilization.graph no
diskstats_iops.graph no diskstats_iops.graph no
[wbd0-armhf-rb.debian.net]
address ssh://jenkins@wbd0-armhf-rb.debian.net:2223/bin/nc localhost 4949
use_node_name yes
diskstats_latency.sda.avgwrwait.warning 0:20
diskstats_latency.sda.avgrdwait.warning 0:10
diskstats_latency.graph no
diskstats_throughput.graph no
diskstats_utilization.graph no
diskstats_iops.graph no
[rpi2b-armhf-rb.debian.net]
address ssh://jenkins@rpi2b-armhf-rb.debian.net:2230/bin/nc localhost 4949
use_node_name yes
diskstats_latency.sda.avgwrwait.warning 0:20
diskstats_latency.sda.avgrdwait.warning 0:10
diskstats_latency.graph no
diskstats_throughput.graph no
diskstats_utilization.graph no
diskstats_iops.graph no
[rpi2c-armhf-rb.debian.net]
address ssh://jenkins@rpi2c-armhf-rb.debian.net:2235/bin/nc localhost 4949
use_node_name yes
diskstats_latency.sda.avgwrwait.warning 0:20
diskstats_latency.sda.avgrdwait.warning 0:10
diskstats_latency.graph no
diskstats_throughput.graph no
diskstats_utilization.graph no
diskstats_iops.graph no
[odxu4b-armhf-rb.debian.net] [odxu4b-armhf-rb.debian.net]
address ssh://jenkins@odxu4b-armhf-rb.debian.net:2232/bin/nc localhost 4949 address ssh://jenkins@odxu4b-armhf-rb.debian.net:2232/bin/nc localhost 4949
use_node_name yes use_node_name yes
...@@ -739,5 +689,5 @@ contact.me.command mail -s "Munin notification ${var:host}" root ...@@ -739,5 +689,5 @@ contact.me.command mail -s "Munin notification ${var:host}" root
# node_order Totals fii.foo.com fay.foo.com # node_order Totals fii.foo.com fay.foo.com
# #
[debian.net;] [debian.net;]
node_order jenkins.debian.net profitbricks-build1-amd64.debian.net profitbricks-build2-i386.debian.net profitbricks-build3-amd64.debian.net profitbricks-build4-amd64.debian.net profitbricks-build5-amd64.debian.net profitbricks-build6-i386.debian.net profitbricks-build9-amd64.debian.net profitbricks-build10-amd64.debian.net profitbricks-build11-amd64.debian.net profitbricks-build12-i386.debian.net profitbricks-build15-amd64.debian.net profitbricks-build16-i386.debian.net codethink-sled9-arm64.debian.net codethink-sled10-arm64.debian.net codethink-sled11-arm64.debian.net codethink-sled12-arm64.debian.net codethink-sled13-arm64.debian.net codethink-sled14-arm64.debian.net codethink-sled15-arm64.debian.net codethink-sled16-arm64.debian.net bbx15-armhf-rb.debian.net bpi0-armhf-rb.debian.net cbxi4a-armhf-rb.debian.net cbxi4b-armhf-rb.debian.net cbxi4pro0-armhf-rb.debian.net cb3a-armhf-rb.debian.net ff2a-armhf-rb.debian.net ff2b-armhf-rb.debian.net ff4a-armhf-rb.debian.net ff64a-armhf-rb.debian.net hb0-armhf-rb.debian.net odxu4a-armhf-rb.debian.net odxu4b-armhf-rb.debian.net odxu4c-armhf-rb.debian.net odu3a-armhf-rb.debian.net jtk1a-armhf-rb.debian.net jtk1b-armhf-rb.debian.net jtx1a-armhf-rb.debian.net jtx1b-armhf-rb.debian.net jtx1c-armhf-rb.debian.net opi2a-armhf-rb.debian.net opi2b-armhf-rb.debian.net opi2c-armhf-rb.debian.net p64b-armhf-rb.debian.net p64c-armhf-rb.debian.net rpi2b-armhf-rb.debian.net rpi2c-armhf-rb.debian.net wbd0-armhf-rb.debian.net wbq0-armhf-rb.debian.net freebsd-jenkins.debian.net jenkins-test-vm.debian.net node_order jenkins.debian.net profitbricks-build1-amd64.debian.net profitbricks-build2-i386.debian.net profitbricks-build3-amd64.debian.net profitbricks-build4-amd64.debian.net profitbricks-build5-amd64.debian.net profitbricks-build6-i386.debian.net profitbricks-build9-amd64.debian.net profitbricks-build10-amd64.debian.net profitbricks-build11-amd64.debian.net profitbricks-build12-i386.debian.net profitbricks-build15-amd64.debian.net profitbricks-build16-i386.debian.net codethink-sled9-arm64.debian.net codethink-sled10-arm64.debian.net codethink-sled11-arm64.debian.net codethink-sled12-arm64.debian.net codethink-sled13-arm64.debian.net codethink-sled14-arm64.debian.net codethink-sled15-arm64.debian.net codethink-sled16-arm64.debian.net bbx15-armhf-rb.debian.net cbxi4a-armhf-rb.debian.net cbxi4b-armhf-rb.debian.net cbxi4pro0-armhf-rb.debian.net cb3a-armhf-rb.debian.net ff2a-armhf-rb.debian.net ff2b-armhf-rb.debian.net ff4a-armhf-rb.debian.net ff64a-armhf-rb.debian.net odxu4a-armhf-rb.debian.net odxu4b-armhf-rb.debian.net odxu4c-armhf-rb.debian.net odu3a-armhf-rb.debian.net jtk1a-armhf-rb.debian.net jtk1b-armhf-rb.debian.net jtx1a-armhf-rb.debian.net jtx1b-armhf-rb.debian.net jtx1c-armhf-rb.debian.net opi2a-armhf-rb.debian.net opi2b-armhf-rb.debian.net opi2c-armhf-rb.debian.net p64b-armhf-rb.debian.net p64c-armhf-rb.debian.net wbq0-armhf-rb.debian.net freebsd-jenkins.debian.net jenkins-test-vm.debian.net
hosts/rpi2b deleted 120000 → 0
View file @ a4cb55b8
rpi2b-armhf-rb
\ No newline at end of file
hosts/rpi2b-armhf-rb/etc/munin/munin-node.conf deleted 100644 → 0
View file @ a4cb55b8
#
# Example config-file for munin-node
#
log_level 4
log_file /var/log/munin/munin-node.log
pid_file /var/run/munin/munin-node.pid
background 1
setsid 1
user root
group root
# This is the timeout for the whole transaction.
# Units are in sec. Default is 15 min
#
# global_timeout 900
# This is the timeout for each plugin.
# Units are in sec. Default is 1 min
#
# timeout 60
# Regexps for files to ignore
ignore_file [\#~]$
ignore_file DEADJOE$
ignore_file \.bak$
ignore_file %$
ignore_file \.dpkg-(tmp|new|old|dist)$
ignore_file \.rpm(save|new)$
ignore_file \.pod$
# Set this if the client doesn't report the correct hostname when
# telnetting to localhost, port 4949
#
#host_name localhost.localdomain
# A list of addresses that are allowed to connect. This must be a
# regular expression, since Net::Server does not understand CIDR-style
# network notation unless the perl module Net::CIDR is installed. You
# may repeat the allow line as many times as you'd like
allow ^127\.0\.0\.1$
allow ^::1$
# If you have installed the Net::CIDR perl module, you can use one or more
# cidr_allow and cidr_deny address/mask patterns. A connecting client must
# match any cidr_allow, and not match any cidr_deny. Note that a netmask
# *must* be provided, even if it's /32
#
# Example:
#
# cidr_allow 127.0.0.1/32
# cidr_allow 192.0.2.0/24
# cidr_deny 192.0.2.42/32
# Which address to bind to;
host *
# host 127.0.0.1
# And which port
port 4949
allow ^78\.137\.96\.196
hostname rpi2b-armhf-rb.debian.net
hosts/rpi2b-armhf-rb/etc/postfix/main.cf deleted 100644 → 0
View file @ a4cb55b8
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
myhostname = rpi2b-armhf-rb.debian.net
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = rpi2b-armhf-rb.debian.net, localhost
relayhost = mail.holgerlevsen.de
#mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mynetworks = 127.0.0.0/8
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
mailbox_command = /usr/bin/procmail -a "$EXTENSION"
hosts/rpi2b-armhf-rb/etc/ssh/sshd_config deleted 100644 → 0
View file @ a4cb55b8
# Package generated configuration file
# See the sshd_config(5) manpage for details
# What ports, IPs and protocols we listen for
Port 22
Port 2230
#AddressFamily any
#ListenAddress ::
#ListenAddress 0.0.0.0
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
# Logging
#SyslogFacility AUTH
#LogLevel INFO
# Authentication:
#LoginGraceTime 2n
PermitRootLogin prohibit-password
#StrictModes yes
#MaxAuthTries 6
#MaxSessions 10
PubkeyAuthentication yes
AuthorizedKeysFile /var/lib/misc/userkeys/%u %h/.ssh/authorized_keys
#AuthorizedPrincipalsFile none
#AuthorizedKeysCommand none
#AuthorizedKeysCommandUser nobody
# For this to work you will also need host keys in /etc/ssh_known_hosts
#HostbasedAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# HostbasedAuthentication
#IgnoreUserKnownHosts no
# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
#PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords
PasswordAuthentication no
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication. Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes
#AllowAgentForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes
PrintMotd no
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#PermitUserEnvironment no
#Compression delayed
#ClientAliveInterval 0
#ClientAliveCountMax 3
#UseDNS no
#PidFile /var/run/sshd.pid
#MaxStartups 10:30:100
#PermitTunnel no
#ChrootDirectory none
#VersionAddendum none
# no default banner path
#Banner none
# Allow client to pass locale environment variables
AcceptEnv LANG LC_*
# override default of no subsystems
Subsystem sftp /usr/lib/openssh/sftp-server
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment