Add monitoring for upgradeable packages with security issues.

dump donations to a shared dir in /var/lib/archbuild/donate readable for
archweb and root.

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Added the OTP seed for the master token. Can be used to login to hetzner in conjunction
with the username and password. This master should only be used to login to create a new
token.

Santiago Torres authored 6 years ago and Florian Pritz committed 6 years ago

The current setup used to use the tagname and the remote names as
hardcoded strings in the main task. I moved them to the role's
variables. I also removed the permission task, and used the become
feature to simplify the task definition.

Disabled in package config.

https://git.archlinux.org/svntogit/community.git/commit/trunk?h=packages/unbound&id=9ef5a6f873f0025f048d8bc5ec322aa914556f65



Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

The container buildusers need to be able to write to SRCDEST, so we need
world-writeability. Argh.

Update to 1.11.15 for CVE-2018-14574

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Again, with a package not in the repos.

oidentd can use forwarding now.