mariadb fails to start on Debian/forky, caused
by (quoting from /var/log/ngcp/mysql/mysql-error.log):
| [Note] Plugin 'wsrep-provider' is disabled.
| [Note] Server socket created on IP: '::1', port: '3306'.
| [Note] Server socket created on IP: '127.0.0.1', port: '3306'.
| [ERROR] Can't start server : Bind on unix socket: No such file or directory
| [ERROR] Do you already have another server running on socket: /run/mysqld/mysqld.sock ?
| [ERROR] Aborting
As of mariadb 1:11.8.9+ds-3, the mariadb-server Debian package assumes
and expects to use /run/mariadbd instead of /run/mysqld/, while we rely
on /run/mysqld/mysqld.sock in several ngcpcfg managed configuration
files (like /etc/odbcinst.ini, /etc/mysql/debian.cnf,
/etc/mysql/inc/my.mysqld1.cnf, /etc/logrotate.d/ngcp).
Ensure to still have /run/mysqld available, by depending on the
mariadb-server-compat package, which ships
/usr/lib/tmpfiles.d/mariadb-server-compat.conf, providing a symlink
/run/mysqld/ which points to /run/mariadbd.
Change-Id: I9d5ddd056428086081e04570b54e1f14d4ecbd60
This provides the needed packages to authenticate against an Active
Directory server, including using the forked Kerberos protocol to
provide encryption and authentication.
Change-Id: Ia2b4d252c578965ad5fd60f5e33c8f42cd35550a
We already have attr installed on the system, but only because the
glusterfs-common package depends on it. Add an explicit dependency to
guarantee we have extended-attribute tools available.
Add a dependency on acl, so that ops can handle ACLs on the filesystem.
Change-Id: Ie1354c9770d9b8af6832790fb1d4b8c1115f26d8
The last Debian release shipping ifrename was Debian trixie,
and it's no longer available with Debian forky.
The tool is deprecated, was moved to the Debian QA Group and
we shouldn't have any need for ifrename any longer.
The dependency dates back to our very beginnings, when we
didn't control all of this via udev yet.
Stop including ifrename to get support for forky.
Change-Id: I36dccc76e265a03bacaa815dcb20d07ec3b03400
See https://bugs.debian.org/926967 ("Don't recommend irqbalance (was:
Re: Handling irqbalance in virtual environments)"). It looks like the
kernel handles this properly nowadays, and without special configuration
irqbalance doesn't seem to make much sense anyway (see e.g.
https://github.com/Irqbalance/irqbalance/issues/236), so don't deploy it
by default.
Change-Id: I30c7727bd506db9e59b055d36b5fa3079553e61b
Let's us bypass/minimize file system caching, e.g. in a backup process
that should not interfere with the present state of the cache.
Thanks: Volodymyr Fedorov for the suggestion
Change-Id: Ibd66a0df953b72ba96289b2e3091412d3971c68d
We no longer need to run the prometheus-haproxy-exporter, as we can rely
on the built-in Prometheus support from haproxy itself.
Change-Id: I579d922341de16ba898726e283bf5d962274850c
For PRO/Carrier where this setting makes most sense, the
systemd-timesyncd service does not provide accurate nor reliable
fallback.
Having to support both implementations when we are required to support a
proper one, which will be the default going forward means more testing
surface for not much benefit, so we switch completely.
Change-Id: I6349c5f109530040ae010725daac87441a0e7794
- Update copyright years.
- Update Standards-Version to 4.7.2.
- Remove «Rules-Requires-Root: no» field, which is now the default.
- Remove «Priority: optional» field, which is now the default.
- Wrap and sort fields.
- Add spaces around operators in make variables.
Change-Id: Ie273d27732a0880f7aff9336008b47b27caea4c8
We were implicitly depending on ssl-cert via ngcp-prosody-modules, which
we no longer depend on. Add an explicit dependency on ssl-cert, as the
services and installer code rely on this being around.
Change-Id: Iaf7bab36024b249615aba5cc07fac12342d8915e
This tool requires both elfutils and dctrl-tools (for its grep-aptavail
command) to be able to find the required debug symbols packages to
install or list.
Change-Id: Id8e49ebadf823220df3a61779272e3ac67f29f91
This is a tiny tool that helps visualize directory structures, with a
tree-like layout, colors, etc.
Change-Id: Id81a3c25bf4fdf380c2dff8bbcc421b2e6abecc5
The telnet package is currently (already in Debian bookworm) a
transitional package that pulls in inetutils-telnet, so no need to
have that around instead of the real package providing the functionality.
Change-Id: I5a16fe52dc3f0e1458f6a0e70fe8fd5afdde6d1f
This package is needed to support software RAID. We have it installed
on NGCP by the installer, but no other package depends on it, so it
could end up being removed, during an upgrade or due to user error.
Change-Id: I8a46095bbee40c09b5edf5bbdd62363011b33ee0
We removed support for percona-toolkit in our tools as the percona
replication check was causing broken replication scenarios in our
Carrier multi master setup.
Do not install it by default to avoid accidental usage.
Change-Id: I4df3f4b75b7e210f4fdfacca5e9911083eb20d50
We are introducing support for Valkey as an alternative to KeyDB (in
itself an alternative to Redis, which now has the additional problem
of its non-free license), which we are intending to switch on all
installations that do not rely on KeyDB specific features currently
not present in Valkey.
KeyDB has an uncertain future, being managed and developer by a single
vendor (Snapchat) who has stopped interacting publicly on its GitHub
project, where its primary public face developers has quit the company,
and where Snapchat is part of the corporate supporters for Valkey.
So we better start planning our escape route, before we are left with
a potentially unmaintained project that no one else is using or
supporting.
Change-Id: Idf5ab9dac4e085070dbdc6d63cddfeeaf495ca9f
Quoting from <https://github.com/jirka-h/haveged/blob/master/README.md>:
Starting from Linux kernel v5.4, the HAVEGED inspired algorithm has
been included in the Linux kernel (see the LKML article and the Linux
Kernel commit). Additionally, since v5.6, as soon as the CRNG (the
Linux cryptographic-strength random number generator) gets ready,
/dev/random does not block on reads anymore (see this commit).
Given that even Debian oldstable AKA bullseye is already at Linux 5.10,
we do not really need this daemon any longer.
Change-Id: If90f935a1e950ed07be3ee3f1fcd11663dbaffcf
In Debian trixie, the fence-agents package is an empty package which has
all its actual fence-agents in Recommends only since
0ac9bfcc4b
As of
8cc112f623
the fence-agents source package provides a fence-agents-common binary
package.
If we install only the fence-agents package with Recommends disabled,
we end up without any actual fence agent, and also missing file
/usr/share/fence/fencing.py shipped by fence-agents-common.
Therfore our fence_ngcp fails hard:
| root@sp1:~# /usr/sbin/fence_ngcp
| Traceback (most recent call last):
| File "/usr/sbin/fence_ngcp", line 11, in <module>
| from fencing import * # noqa: E402
| ^^^^^^^^^^^^^^^^^^^^^
| ModuleNotFoundError: No module named 'fencing'
Reported as https://bugs.debian.org/1085256
NOTE: applied change from system-toools.git, see
commit dc2f41e074b3a91ac3174dd65c370a856d576a34
Change-Id: I8471f264a7f2a398a45fdaeefda8bdd3435f5c4f
This includes the upstream FreeSWITCH package and required modules, and
the NGCP FreeSWITCH application server.
Change-Id: I46e9684b05d767b0d80ca49c661c64775ba62d22
Michael Prokop
Richard Fuchs
Guillem Jover
Sipwise Jenkins Builder
Jose Su
Marco Capetta
Victor Seva