Change log for debian-lan-config package in Debian

debian-lan-config (0.28) unstable; urgency=medium

  * Add autopkgtest with shellcheck.
  * Fix shellcheck complaints (closes: #793624).
  * Bump Standards-Version to 4.5.1 (no changes needed).
  * Small fixes and cleanup.

 -- Andreas B. Mundt <email address hidden>  Thu, 24 Dec 2020 13:33:10 +0100

Available diffs

• diff from 0.27 to 0.28 (16.1 KiB)

debian-lan-config (0.27) unstable; urgency=medium

  * Update 'sources.list' files for bullseye (closes: #969936).
  * debian/copyright: spaces rather than tabs to start continuation lines.
  * Update standards version to 4.5.0, no changes needed.
  * Switch dh compat level to 13.
  * Make sure some services are not started during conversion.
  * Workaround and many fixes/adaptions for bullseye.
  * Fixes for SSSD: Services are socket activated by now.
  * Update boot parameters for diskless machines.

 -- Andreas B. Mundt <email address hidden>  Mon, 26 Oct 2020 18:04:03 +0100

Available diffs

• diff from 0.26 to 0.27 (6.0 KiB)

debian-lan-config (0.23+deb9u1) stretch-security; urgency=high

  * Fix kadmin access rules.
  * Add NEWS file.

 -- Andreas B. Mundt <email address hidden>  Fri, 27 Dec 2019 14:30:19 +0100

debian-lan-config (0.25+deb10u1) buster-security; urgency=high

  * Fix kadmin access rules.
  * Add NEWS file.

 -- Andreas B. Mundt <email address hidden>  Fri, 27 Dec 2019 14:21:49 +0100

debian-lan-config (0.26) unstable; urgency=high

  * Prepare for salsa-ci.
  * Fix kadmin access rules (closes: #947459).
  * Bump Standards-Version to 4.4.1:
    - Switch to dh compat level to 12 and remove dh-compat-file.
    - Add lintian-overrides to ignore false positives.
    - Set Rules-Requires-Root: no.

 -- Andreas B. Mundt <email address hidden>  Tue, 24 Dec 2019 14:52:12 +0100

Available diffs

• diff from 0.25 to 0.26 (1.3 KiB)

debian-lan-config (0.25) unstable; urgency=medium

  * Remove some packages from NFSROOT; fix fstab entries.
  * Fixes for diskless clients.
  * Use NFSv4 to serve FAI config space.
  * Add 'Multi-Arch: foreign' to 'debian/control'.
  * Upgrade to icinga2 and icinga2-classicui.

 -- Andreas B. Mundt <email address hidden>  Sun, 21 Oct 2018 08:13:37 +0300

Available diffs

• diff from 0.23 to 0.25 (21.5 KiB)

debian-lan-config (0.24) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/copyright: Use https protocol in Format field
  * d/control: Deprecating priority extra as per policy 4.0.1
  * d/control: Set Vcs-* to salsa.debian.org

  [ Andreas B. Mundt ]
  * Update 'README.Debian', switch from stretch to buster.
  * Update package name and selection.
  * Remove di-netboot-assistant setup, keep it a separate project.
  * Eliminate the use of cfengine scripts.
  * Bump Standards-Version to 4.2.1 and dh compat level to 11.
  * Import some updates from FAI upstream.
  * Updates and fixes in the config space for buster.
  * Remove CUPS_{CLIENT,SERVER} and MAIL_SERVER classes.
  * Fix sssd autofs (default schema changed).
  * Add 'haveged' to avoid low entropy failures.
  * Rely on auto detection for idmapd, gssd and svcgssd.
  * Index 'sudoHost' in slapd.
  * Set 'SUDO_FORCE_REMOVE=yes' to be able to replace 'sudo'.

 -- Andreas B. Mundt <email address hidden>  Sat, 06 Oct 2018 19:37:17 +0300

debian-lan-config (0.23) unstable; urgency=medium

  [ Andreas B. Mundt ]
  * Fix diskless clients (closes: #774033).
  * Updates and fixes for GOsa².
  * Fixes for fai-cd.

  [ Afif Elghraoui ]
  * Use correct http root in APT_REPO_DIR
  * Prevent HOSTNAME from evaluating to FQDN (from FAI 5 updates)

  [ Andreas B. Mundt ]
  * Updates and fixes for icinga.
  * Fix shorewall setup.
  * Update package selection.
  * Use ldap as fallback for automounts.
  * First step towards nbd swap activation.

 -- Andreas B. Mundt <email address hidden>  Tue, 24 Jan 2017 14:00:06 +0100

Available diffs

• diff from 0.22 to 0.23 (6.9 KiB)

debian-lan-config (0.22) unstable; urgency=medium

  * Disable backports.
  * Remove separate /usr partition.
  * Rename *.source to *.sh (FAI upstream change).
  * Fixes for di-netboot-assistant.
  * Updates and fixes for stretch and FAI upstream.
  * Handle dynamic NIC labels.
  * Fixes and updates for squid and dhcp-server.
  * Fix shorewall NIC labels.
  * Fix NFSROOT and PXE booting.
  * Switch autofs to sssd caching.
  * Remove unburden-home-dir, cleanup, iceweases → firefox.
  * Switch to systemd-networkd.
  * Temporary fixes and workarounds.
  * Add note to README.
  * Bump Stanards-Version to 3.9.8 (no changes needed).

 -- Andreas B. Mundt <email address hidden>  Wed, 10 Aug 2016 13:14:15 +0200

Available diffs

• diff from 0.21 to 0.22 (14.6 KiB)

debian-lan-config (0.19+deb8u1) stable-proposed-updates; urgency=medium

  * Fix package names on i386.
  * Workarounds: #759424 (di-n-a) removed, #774033 (deadlock) added.
    - With the NMUed di-netboot-assistant package available in jessie,
      only chain.c32 has to be copied to the tftp-boot directory.  It is
      needed to boot from the local disk in the Debian-LAN PXE menu.
    - The Debian-LAN live system freezes when mounting the home
      directory with NFSv4.  Switch back to NFSv3 which works fine.
  * Fix squid configuration:  Modify ordering to succeed in a single
    cfengine pass.
  * Comment 'browser-plugin-gnash' and 'adzapper' in the package-list and
    the corresponding script:  These packages did not make it into jessie.
  * Define the replacement of exim4-daemon-light by exim4-daemon-heavy and
    sudo by sudo-ldap to make conversion more robust.
  * Describe how to use an arbitrary hostname for the 'mainserver'.
  * Add libcgi-fast-perl to make the zoom in munin work.

 -- Andreas B. Mundt <email address hidden>  Sun, 17 May 2015 20:22:54 +0200

debian-lan-config (0.21) unstable; urgency=medium

  * Set LC_ALL=C before executing sss_cache:  It fails without if run by
    www-data.
  * Switch to the next Debian release: 'stretch'.
  * Replace 'http.debian.net' by 'httpredir.debian.org'.
  * Add libcgi-fast-perl to make the zoom in munin work.

 -- Andreas B. Mundt <email address hidden>  Thu, 28 May 2015 14:52:33 +0200

Available diffs

• diff from 0.20 to 0.21 (2.1 KiB)

debian-lan-config (0.20) unstable; urgency=medium

  * Switch to sssd everywhere (cf. #759544).
  * Fix package names on i386.
  * Workarounds: #759424 (di-n-a) removed, #774033 (deadlock) added.
  * Invalidate the sssd cache when adding/removing content.
  * Fix ordering to succeed in single cfengine pass.
  * Make conversion more robust.  Allow arbitrary hostnames.

 -- Andreas B. Mundt <email address hidden>  Sun, 03 May 2015 11:13:43 +0200

Available diffs

• diff from 0.19 to 0.20 (5.5 KiB)

debian-lan-config (0.19) unstable; urgency=medium


  * Adapt to the format of '/etc/debian_version' (closes: #774035).
  * Enable 'jessie' repositories for di-netboot-assistant.
  * Preseed the grub installation and fix PXE-boot from the local disk.

 -- Andreas B. Mundt <email address hidden>  Wed, 31 Dec 2014 10:38:21 +0100

Available diffs

• diff from 0.18 to 0.19 (1.1 KiB)

debian-lan-config (0.18) unstable; urgency=medium


  * Work around broken di-netboot-assistant only if necessary to avoid
    problems with the (expected) fixed di-netboot-assistant package.
  * Enable SSL for the dovecot imap server.  The dovecot package switched
    to no SSL by default.

 -- Andreas B. Mundt <email address hidden>  Fri, 05 Dec 2014 14:02:20 +0100

Available diffs

• diff from 0.17 to 0.18 (986 bytes)

debian-lan-config (0.17) unstable; urgency=medium


  * Update package selection:  Standard Gnome desktop on clients.
  * Increase minimal size of some partitions.
  * Use Debian default umask, remove modification scripts.
  * Minor modifications and cosmetics. Merge FAI upstream.
  * Restore capabilities that get lost in the base.tar.xz archive.
  * Bump Standards-Version to 3.9.6 (no changes needed).

 -- Andreas B. Mundt <email address hidden>  Thu, 23 Oct 2014 08:44:10 +0200

Available diffs

• diff from 0.15 to 0.17 (12.2 KiB)

debian-lan-config (0.16) unstable; urgency=medium


  * Merge FAI modifications.
  * Mount /sys and /proc in the chroot to avoid warnings.
  * CUPS:
    - Fix false positive CUPS warning in icinga.
    - Fix access to CUPS in combination with systemd.
  * Chroots:
    - Simplify the setup and do not use 'rc.local'.
    - Add note in motd.
  * Optional PXE installation method (debian-installer and preseeding).
  * Do not switch on unburden-home-dir by default.
  * Pam-script fixes/updates.
  * Use gdm3 by default on clients (better systemd integration).

 -- Andreas B. Mundt <email address hidden>  Sun, 05 Oct 2014 12:30:04 +0200

debian-lan-config (0.15) unstable; urgency=medium


  * Merge FAI 4.2, no non-free firmware, minor fixes and improvements.
  * Reduce default squid disk cache and increase root partition size.
  * Switch to NFSv4 everywhere.
  * Improve the setup of the chroots for FAI and diskless machines.
  * Implement SSHFS_CLIENT class for diskless clients.  Modify default
    restrictions for ssh access (needed for sshfs).
  * Remove initramfs-tools and memtest86+ from package list.
  * Make sure dnsmasq listens on the internal interface (gateway).

 -- Andreas B. Mundt <email address hidden>  Thu, 19 Jun 2014 11:04:56 +0200

Available diffs

• diff from 0.14 to 0.15 (7.1 KiB)

debian-lan-config (0.14) unstable; urgency=medium


  * Switch from apt-cacher-ng to Squid as package cache.
  * Switch to jessie repositories.  Dracut by default in the chroots.
  * Merge with FAI 4.1 examples config space, fixes for jessie.
  * Implement unburden-home-dir.
  * Add hook to remove old partition tables before installation.
  * Add check if the network (APT repository) is available.
  * Icinga:  Check if diskless machines need any package updates.  Do not
    send notifications for hosts that are switched on and off.
  * Improved kerberos machine key distribution.
  * Bump Standards-Version to 3.9.5 (no changes needed).

 -- Andreas B. Mundt <email address hidden>  Thu, 15 May 2014 14:25:03 +0200

Available diffs

• diff from 0.13 to 0.14 (14.3 KiB)

debian-lan-config (0.13) unstable; urgency=low


  * Fix timeout in PXE menu.
  * Rearrange squid cfengine script to make it succeed in a single run.
  * Increase squid cache size.
  * Add FIREWALL class and the new machine 'gateway', a simple
    gateway/firewall.
  * Enable shorewall for the 'two-interfaces'-setup.
  * Fix permission problem when executing '/etc/rc.local' manually.
  * Add some packages to DESKTOP, DISKLESS_CLIENT and EDU class.

 -- Andreas B. Mundt <email address hidden>  Thu, 01 Aug 2013 21:02:25 +0200

Available diffs

• diff from 0.12 to 0.13 (5.4 KiB)

debian-lan-config (0.12) unstable; urgency=low


  * Implement ROAMING class, which allows using machines off-line.
  * Add roaming machine installation to the PXE-boot menu.
  * Switch to dynamic DNS updates.  Improve DHCPd configuration and
    improve handling of unknown machines that do not provide a hostname.
  * Enable disk cache for squid.

 -- Andreas B. Mundt <email address hidden>  Sat, 08 Jun 2013 08:23:39 +0200

Available diffs

• diff from 0.11 to 0.12 (6.6 KiB)

debian-lan-config (0.11) unstable; urgency=low


  * Fix lintian warnings and errors.
  * Config space:  Add localization class FR_BELGIAN, thanks to Julien
    Lambot.  Create certificate for dovecot and replace the default one.
    Do not add unnecessary modules to '/etc/modules'.  Use default options
    for NFSv4 mounts.
  * Enable 'dialog' to choose setup variant during installation or
    conversion.  Non-interactive installations are possible by providing
    the necessary FAI variables as kernel boot parameters.  Thanks to
    Andreas Schockenhoff.
  * Small fixes and improvements.

 -- Andreas B. Mundt <email address hidden>  Mon, 20 May 2013 20:45:09 +0200

Available diffs

• diff from 0.10 to 0.11 (5.0 KiB)

debian-lan-config (0.10) unstable; urgency=low


  * Remove disk checks for diskless clients in munin.
  * Increase the default size range of /boot and /var partitions.
  * Improve debian-lan script (distribution of Kerberos keytabs).
  * Packaging:  Team maintenance.  Bump debian/compat to 9.
  * Small fixes/improvements, cleanup and cosmetics (Closes: #705891):
    - Only allow signed APT repositories.
    - Fix permissions for the public key of the local APT repository.
    - Enable the local APT repository for the 'mainserver'.
    - Rename some scripts for consistency, typos, ... .
    - Remove workaround for apt-cacher-ng as it is not needed anymore.
    - Add acpi-support-base package.
  * Rework the creation of self-signed certificates (subjectAltName=...).
  * Add link to the GOsa password changing page on the Debian-LAN intranet
    site and make it the default home page on the clients.
  * Many thanks to Andreas Schockenhoff, Julien Lambot and Michael Welsh
    Duggan for various valuable input.

 -- Andreas B. Mundt <email address hidden>  Sat, 04 May 2013 14:38:17 +0200

debian-lan-config (0.9) experimental; urgency=low


  * Initial packaged release.

 -- Andreas B. Mundt <email address hidden>  Mon, 25 Mar 2013 14:17:37 +0100