alex@alex-laptop:~$ ssh deployment-deploy-01.deployment-prep.eqiad.wmflabs
The authenticity of host 'deployment-deploy-01.deployment-prep.eqiad.wmflabs (<no hostip for proxy command>)' can't be established.
ECDSA key fingerprint is SHA256:XIOlW2OVKBLMsemKze8ZHPQ+Pa1k9FbBrLj/zYrbiaI.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'deployment-deploy-01.deployment-prep.eqiad.wmflabs' (ECDSA) to the list of known hosts.
Creating directory '/home/krenair'.
Linux deployment-deploy-01 4.9.0-5-amd64 #1 SMP Debian 4.9.65-3+deb9u2 (2018-01-04) x86_64
Debian GNU/Linux 9.3 (stretch)
The last Puppet run was at Wed May 30 18:35:11 UTC 2018 (11 minutes ago). 
krenair@deployment-deploy-01:~$ sudo nano /etc/puppet/puppet.conf
krenair@deployment-deploy-01:~$ sudo puppet agent -tv
Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key.
Certificate fingerprint: 1D:1F:88:FD:BD:FD:11:E7:70:BC:5B:53:39:4F:20:41:31:1F:E2:F6:54:26:ED:45:F1:B7:1F:21:FC:7C:99:1A
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certificate.
On the master:
  puppet cert clean deployment-deploy-01.deployment-prep.eqiad.wmflabs
On the agent:
  1a. On most platforms: find /var/lib/puppet/ssl -name deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem -delete
  1b. On Windows: del "\var\lib\puppet\ssl\certs\deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem" /f
  2. puppet agent -t

Exiting; failed to retrieve certificate and waitforcert is disabled
krenair@deployment-deploy-01:~$ sudo -i
root@deployment-deploy-01:~# puppet agent -tv
Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key.
Certificate fingerprint: 1D:1F:88:FD:BD:FD:11:E7:70:BC:5B:53:39:4F:20:41:31:1F:E2:F6:54:26:ED:45:F1:B7:1F:21:FC:7C:99:1A
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certificate.
On the master:
  puppet cert clean deployment-deploy-01.deployment-prep.eqiad.wmflabs
On the agent:
  1a. On most platforms: find /var/lib/puppet/ssl -name deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem -delete
  1b. On Windows: del "\var\lib\puppet\ssl\certs\deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem" /f
  2. puppet agent -t

Exiting; failed to retrieve certificate and waitforcert is disabled
root@deployment-deploy-01:~# cd /var/lib/puppet; mv ssl ssl_old; rm /usr/local/share/ca-certificates/Puppet_Internal_CA.crt; sudo nano /usr/local/share/ca-certificates/Puppet_Internal_CA.crt
root@deployment-deploy-01:/var/lib/puppet# update-ca-certificates --fresh
Clearing symlinks in /etc/ssl/certs...
done.
Updating certificates in /etc/ssl/certs...
172 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@deployment-deploy-01:/var/lib/puppet# puppet agent -tv
Info: Creating a new SSL key for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Info: Caching certificate for ca
Info: Caching certificate for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key.
Certificate fingerprint: 1D:1F:88:FD:BD:FD:11:E7:70:BC:5B:53:39:4F:20:41:31:1F:E2:F6:54:26:ED:45:F1:B7:1F:21:FC:7C:99:1A
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certificate.
On the master:
  puppet cert clean deployment-deploy-01.deployment-prep.eqiad.wmflabs
On the agent:
  1a. On most platforms: find /var/lib/puppet/ssl -name deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem -delete
  1b. On Windows: del "\var\lib\puppet\ssl\certs\deployment-deploy-01.deployment-prep.eqiad.wmflabs.pem" /f
  2. puppet agent -t

Exiting; failed to retrieve certificate and waitforcert is disabled
root@deployment-deploy-01:/var/lib/puppet# rm -rf ssl
root@deployment-deploy-01:/var/lib/puppet# update-ca-certificates --fresh
Clearing symlinks in /etc/ssl/certs...
done.
Updating certificates in /etc/ssl/certs...
172 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@deployment-deploy-01:/var/lib/puppet# puppet agent -tv
Info: Creating a new SSL key for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Info: Certificate Request fingerprint (SHA256): 94:EE:BC:DA:34:0D:E4:BB:01:4D:3A:50:64:8D:89:B0:13:FB:41:C2:63:2E:BB:93:ED:05:1C:11:E3:78:DA:D1
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled
root@deployment-deploy-01:/var/lib/puppet# puppet agent -tv
Info: Caching certificate for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Info: Caching certificate_revocation_list for ca
Info: Caching certificate for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Info: Using configured environment 'production'
Info: Retrieving pluginfacts
Info: Retrieving plugin
Notice: /File[/var/lib/puppet/lib/puppet/provider/scap_source/default.rb]/content: 
--- /var/lib/puppet/lib/puppet/provider/scap_source/default.rb	2018-05-30 18:33:13.686380000 +0000
+++ /tmp/puppet-file20180530-17618-ipwr8s	2018-05-30 18:50:23.034005002 +0000
@@ -81,13 +81,18 @@
   def checkout(name, path)
     umask = 0o002
     file_mode = 0o2775
+
     unless Dir.exists?(path)
       FileUtils.makedirs path, :mode => file_mode
       FileUtils.chown_R resource[:owner], resource[:group], path
     end
+
     pwd = Etc.getpwnam(resource[:owner])
+    pwg = Etc.getgrnam(resource[:group])
+
     uid = pwd.uid
-    gid = pwd.gid
+    gid = pwg.gid
+
     Puppet::Util.withumask(
       umask) {
       Puppet::Util::Execution.execute(

Notice: /File[/var/lib/puppet/lib/puppet/provider/scap_source/default.rb]/content: content changed '{md5}cb3875bb2326da8aebacdbb6a50366ef' to '{md5}7dd412c58b5339885edbcab1e7990954'
Info: Loading facts
Info: Caching catalog for deployment-deploy-01.deployment-prep.eqiad.wmflabs
Notice: /Stage[main]/Base::Environment/Tidy[/var/tmp/core]: Tidying 0 files
Info: Applying configuration version '1527706227'
Notice: /Stage[main]/Profile::Base::Certificates/Sslcert::Ca[Puppet_Internal_CA]/File[/usr/local/share/ca-certificates/Puppet_Internal_CA.crt]/group: group changed 'staff' to 'root'
Notice: /Stage[main]/Profile::Base::Certificates/Sslcert::Ca[Puppet_Internal_CA]/File[/usr/local/share/ca-certificates/Puppet_Internal_CA.crt]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Profile::Base::Certificates/Sslcert::Ca[Puppet_Internal_CA]/File[/usr/local/share/ca-certificates/Puppet_Internal_CA.crt]: Scheduling refresh of Exec[update-ca-certificates]
Info: /Stage[main]/Profile::Base::Certificates/Sslcert::Ca[Puppet_Internal_CA]/File[/usr/local/share/ca-certificates/Puppet_Internal_CA.crt]: Scheduling refresh of Exec[update-ca-certificates]
Notice: /Stage[main]/Sslcert/Exec[update-ca-certificates]: Triggered 'refresh' from 2 events
Notice: /Stage[main]/Ferm/File[/etc/modprobe.d/nf_conntrack.conf]/ensure: defined content as '{md5}401f0bc2c4f44a223e309be434d2c3b4'
Notice: /Stage[main]/Ferm/File[/etc/modules-load.d/conntrack.conf]/ensure: defined content as '{md5}65a23fdacaecc29912d86ebbd1256077'
Notice: /Stage[main]/Ferm/Package[ferm]/ensure: created
Notice: /Stage[main]/Ferm/Package[libnet-dns-perl]/ensure: created
Notice: /Stage[main]/Ferm/Package[conntrack]/ensure: created
Notice: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]/content: 
--- /etc/ferm/ferm.conf	2017-06-06 10:40:08.000000000 +0000
+++ /tmp/puppet-file20180530-17618-5usra5	2018-05-30 18:50:56.378182581 +0000
@@ -1,52 +1,3 @@
-# -*- shell-script -*-
-#
-#  Configuration file for ferm(1).
-#
+@include 'functions.conf';
 
-table filter {
-    chain INPUT {
-        policy DROP;
-
-        # connection tracking
-        mod state state INVALID DROP;
-        mod state state (ESTABLISHED RELATED) ACCEPT;
-
-        # allow local packet
-        interface lo ACCEPT;
-
-        # respond to ping
-        proto icmp ACCEPT; 
-
-        # allow IPsec
-        proto udp dport 500 ACCEPT;
-        proto (esp ah) ACCEPT;
-
-        # allow SSH connections
-        proto tcp dport ssh ACCEPT;
-    }
-    chain OUTPUT {
-        policy ACCEPT;
-
-        # connection tracking
-        #mod state state INVALID DROP;
-        mod state state (ESTABLISHED RELATED) ACCEPT;
-    }
-    chain FORWARD {
-        policy DROP;
-
-        # connection tracking
-        mod state state INVALID DROP;
-        mod state state (ESTABLISHED RELATED) ACCEPT;
-    }
-}
-
-# IPv6:
-#domain ip6 {
-#    table filter {
-#        chain INPUT {
-#            policy ACCEPT;
-#            # ...
-#        }
-#        # ...
-#    }
-#}
+@include 'conf.d/';

Info: Computing checksum on file /etc/ferm/ferm.conf
Info: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]: Filebucketed /etc/ferm/ferm.conf to puppet with sum 91410f27613e600a8892d2a7076d1bcf
Notice: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]/content: content changed '{md5}91410f27613e600a8892d2a7076d1bcf' to '{md5}4bea2934a124683725db912836697b1a'
Notice: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]/group: group changed 'adm' to 'root'
Notice: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]/mode: mode changed '0644' to '0400'
Info: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]: Scheduling refresh of Service[ferm]
Info: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]: Scheduling refresh of Service[ferm]
Info: /Stage[main]/Ferm/File[/etc/ferm/ferm.conf]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Ferm/File[/etc/ferm/functions.conf]/ensure: defined content as '{md5}cfb158d05f0678fd3f282fa73f63f87d'
Info: /Stage[main]/Ferm/File[/etc/ferm/functions.conf]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Ferm/File[/etc/ferm/conf.d]/ensure: created
Info: /Stage[main]/Ferm/File[/etc/ferm/conf.d]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Role::Prometheus::Node_exporter/Ferm::Service[prometheus-node-exporter]/File[/etc/ferm/conf.d/10_prometheus-node-exporter]/ensure: defined content as '{md5}0d82d468a63b2bad2a2dc8ae395aa408'
Info: /Stage[main]/Role::Prometheus::Node_exporter/Ferm::Service[prometheus-node-exporter]/File[/etc/ferm/conf.d/10_prometheus-node-exporter]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Profile::Openstack::Main::Cumin::Target/Ferm::Service[ssh-from-cumin-project-masters]/File[/etc/ferm/conf.d/10_ssh-from-cumin-project-masters]/ensure: defined content as '{md5}26cce1eb911fc807e27cf02cce9b40a0'
Info: /Stage[main]/Profile::Openstack::Main::Cumin::Target/Ferm::Service[ssh-from-cumin-project-masters]/File[/etc/ferm/conf.d/10_ssh-from-cumin-project-masters]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Ferm/File[/etc/default/ferm]/content: 
--- /etc/default/ferm	2018-05-30 18:50:52.102157666 +0000
+++ /tmp/puppet-file20180530-17618-10g2v3s	2018-05-30 18:50:56.690184422 +0000
@@ -4,10 +4,11 @@
 FAST=yes
 
 # cache the output of ferm --lines in /var/cache/ferm?
-CACHE=yes
+CACHE=no
 
-# additional paramaters for ferm (like --def '=bar')
+# additional paramaters for ferm (like --def '$foo=bar')
 OPTIONS=
 
-# Enable the ferm init script? (i.e. run on bootup)
-ENABLED="yes"
+# Enable ferm on bootup?
+ENABLED=yes
+

Info: Computing checksum on file /etc/default/ferm
Info: /Stage[main]/Ferm/File[/etc/default/ferm]: Filebucketed /etc/default/ferm to puppet with sum a4daba7939f6be9a87f26f1a89324806
Notice: /Stage[main]/Ferm/File[/etc/default/ferm]/content: content changed '{md5}a4daba7939f6be9a87f26f1a89324806' to '{md5}3e9b11c20066c1658ab353e597ea8e5e'
Notice: /Stage[main]/Ferm/File[/etc/default/ferm]/mode: mode changed '0644' to '0400'
Info: /Stage[main]/Ferm/File[/etc/default/ferm]: Scheduling refresh of Service[ferm]
Info: /Stage[main]/Ferm/File[/etc/default/ferm]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/File[/usr/lib/nagios/plugins/check_conntrack]/ensure: defined content as '{md5}a5a705cc6b0bc5e9074c467d69ae3eb3'
Notice: /Stage[main]/Base::Firewall/File[/usr/lib/nagios/plugins/check_ferm]/ensure: defined content as '{md5}f584c405e02f63bc7321239204993c75'
Notice: /Stage[main]/Packages::Python_psutil/Package[python-psutil]/ensure: created
Notice: /Stage[main]/Packages::Python_netifaces/Package[python-netifaces]/ensure: created
Notice: /Stage[main]/Packages::Python_jinja2/Package[python-jinja2]/ensure: created
Notice: /Stage[main]/Packages::Git_lfs/Package[git-lfs]/ensure: created
Notice: /Stage[main]/Scap/Package[scap]/ensure: created
Notice: /Stage[main]/Scap/File[/etc/scap.cfg]/ensure: defined content as '{md5}9ce71a39ab3508d10b09f40d10fbf1f0'
Notice: /Stage[main]/Deployment::Umask_wikidev/File[/etc/profile.d/umask-wikidev.sh]/ensure: defined content as '{md5}f7b7a8f111035aecfdf604a0449e2c22'
Notice: /Stage[main]/Deployment::Deployment_server/Package[python-gitdb]/ensure: created
Notice: /Stage[main]/Deployment::Deployment_server/Package[python-git]/ensure: created
Notice: /Stage[main]/Deployment::Deployment_server/File[/etc/gitconfig]/ensure: defined content as '{md5}ce8553c617df521d55e84cbfb8cd9215'
Notice: /Stage[main]/Deployment::Deployment_server/File[/usr/local/bin/git-new-workdir]/ensure: defined content as '{md5}807fa53ce01b1e0ee01481f348626b61'
Notice: /Stage[main]/Deployment::Deployment_server/File[/srv/patches]/ensure: created
Notice: /Stage[main]/Packages::Links/Package[links]/ensure: created
Notice: /Stage[main]/Apache::Monitoring/File[/usr/local/bin/apache-status]/ensure: defined content as '{md5}fb80019f03331dde9239e9a6a0af0d46'
Notice: /Stage[main]/Apache/Package[apache2]/ensure: created
Info: Computing checksum on file /etc/apache2/mods-available/status.conf
Info: /Stage[main]/Apache::Mod::Status/File[/etc/apache2/mods-available/status.conf]: Filebucketed /etc/apache2/mods-available/status.conf to puppet with sum 5d3689f109baf304af4f145249ca6326
Notice: /Stage[main]/Apache::Mod::Status/File[/etc/apache2/mods-available/status.conf]/ensure: removed
Notice: /Stage[main]/Apache::Mod::Status/File[/etc/apache2/mods-enabled/status.conf]/ensure: removed
Notice: /Stage[main]/Apache::Mpm/File[/etc/apache2/mods-available/mpm_prefork.load]/mode: mode changed '0644' to '0444'
Notice: /Stage[main]/Apache/File[/etc/apache2/env-available]/ensure: created
Notice: /Stage[main]/Apache/File[/etc/apache2/conf-enabled/charset.conf]/ensure: removed
Notice: /Stage[main]/Apache/File[/etc/apache2/conf-enabled/localized-error-pages.conf]/ensure: removed
Notice: /Stage[main]/Apache/File[/etc/apache2/conf-enabled/other-vhosts-access-log.conf]/ensure: removed
Notice: /Stage[main]/Apache/File[/etc/apache2/conf-enabled/security.conf]/ensure: removed
Notice: /Stage[main]/Apache/File[/etc/apache2/conf-enabled/serve-cgi-bin.conf]/ensure: removed
Info: /etc/apache2/conf-enabled: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/File[/etc/apache2/env-enabled]/ensure: created
Info: /Stage[main]/Apache/File[/etc/apache2/env-enabled]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/File[/etc/apache2/sites-enabled/000-default.conf]/ensure: removed
Info: /etc/apache2/sites-enabled: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/File_line[load_env_enabled]/ensure: created
Notice: Augeas[Apache2 logs](provider=augeas): 
--- /etc/logrotate.d/apache2	2018-03-31 08:45:18.000000000 +0000
+++ /etc/logrotate.d/apache2.augnew	2018-05-30 18:51:24.106358234 +0000
@@ -1,7 +1,7 @@
 /var/log/apache2/*.log {
 	daily
 	missingok
-	rotate 14
+	rotate 30
 	compress
 	delaycompress
 	notifempty

Notice: /Stage[main]/Apache::Logrotate/Augeas[Apache2 logs]/returns: executed successfully
Notice: /Stage[main]/Packages::Mysql_client/Package[mysql-client]/ensure: created
Notice: /Stage[main]/Rsync::Server/File[/etc/default/rsync]/content: 
--- /etc/default/rsync	2017-12-10 12:57:17.000000000 +0000
+++ /tmp/puppet-file20180530-17618-1yew7wx	2018-05-30 18:51:27.702382726 +0000
@@ -1,17 +1,16 @@
+#####################################################################
+### THIS FILE IS MANAGED BY PUPPET
+### puppet:///rsync/rsync.default.erb
+#####################################################################
+
 # defaults file for rsync daemon mode
-#
-# This file is only used for init.d based systems!
-# If this system uses systemd, you can specify options etc. for rsync
-# in daemon mode by copying /lib/systemd/system/rsync.service to
-# /etc/systemd/system/rsync.service and modifying the copy; add required
-# options to the ExecStart line.
 
 # start rsync in daemon mode from init.d script?
 #  only allowed values are "true", "false", and "inetd"
 #  Use "inetd" if you want to start the rsyncd from inetd,
 #  all this does is prevent the init.d script from printing a message
 #  about not starting rsyncd (you still need to modify inetd's config yourself).
-RSYNC_ENABLE=false
+RSYNC_ENABLE=true
 
 # which file should be used as the configuration file for rsync.
 # This file is used instead of the default /etc/rsyncd.conf
@@ -19,7 +18,7 @@
 #          using a remote shell. When using a different file for
 #          rsync you might want to symlink /etc/rsyncd.conf to
 #          that file.
-# RSYNC_CONFIG_FILE=
+RSYNC_CONFIG_FILE=/etc/rsyncd.conf
 
 # what extra options to give rsync --daemon?
 #  that excludes the --daemon; that's always done in the init.d script

Info: Computing checksum on file /etc/default/rsync
Info: /Stage[main]/Rsync::Server/File[/etc/default/rsync]: Filebucketed /etc/default/rsync to puppet with sum b8fd9efa75e2bda2583b0d7c0892a073
Notice: /Stage[main]/Rsync::Server/File[/etc/default/rsync]/content: content changed '{md5}b8fd9efa75e2bda2583b0d7c0892a073' to '{md5}dac590a62ab2eb259c1eb2f10d85a647'
Notice: /Stage[main]/Rsync::Server/File[/etc/default/rsync]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Rsync::Server/File[/etc/default/rsync]: Scheduling refresh of Service[rsync]
Info: /Stage[main]/Rsync::Server/File[/etc/default/rsync]: Scheduling refresh of Service[rsync]
Notice: /Stage[main]/Rsync::Server/File[/etc/rsync.d]/ensure: created
Notice: /Stage[main]/Rsync::Server/File[/etc/rsync.d/header]/ensure: defined content as '{md5}05dcfd612c978d99b68a94f1e70d5885'
Info: /Stage[main]/Rsync::Server/File[/etc/rsync.d/header]: Scheduling refresh of Exec[compile fragments]
Notice: /Stage[main]/Deployment::Rsync/Cron[sync_deployment_dir]/ensure: created
Notice: /Stage[main]/Packages::Percona_toolkit/Package[percona-toolkit]/ensure: created
Notice: /Stage[main]/Packages::Tig/Package[tig]/ensure: created
Notice: /Stage[main]/Packages::Php7.0_readline/Package[php7.0-readline]/ensure: created
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/File[/srv/deployment]/ensure: created
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/File[/var/lock/scap-global-lock]/ensure: defined content as '{md5}894be24ce8feb13ebd3b4a531adbbe60'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/File[/usr/local/bin/apache-fast-test]/ensure: defined content as '{md5}228be7b3996fa7015e7bcc4fc979a807'
Notice: /Stage[main]/Packages::Cgroup_bin/Package[cgroup-bin]/ensure: created
Notice: /Stage[main]/Mediawiki::Cgroup/File[/usr/local/bin/cgroup-mediawiki-clean]/ensure: defined content as '{md5}c246998131ed028ce5ccac55efa96571'
Notice: /Stage[main]/Packages::Dvipng/Package[dvipng]/ensure: created
Notice: /Stage[main]/Packages::Gsfonts/Package[gsfonts]/ensure: created
Notice: /Stage[main]/Packages::Make/Package[make]/ensure: created
Notice: /Stage[main]/Packages::Ocaml/Package[ocaml]/ensure: created
Notice: /Stage[main]/Packages::Ploticus/Package[ploticus]/ensure: created
Notice: /Stage[main]/Packages::Texvc/Package[texvc]/ensure: created
Notice: /Stage[main]/Packages::Texlive_science/Package[texlive-science]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-bibtex-extra]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-font-utils]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-fonts-extra]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-generic-extra]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-lang-all]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-pstricks]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages::Tex/Package[texlive-publishers]/ensure: created
Notice: /Stage[main]/Packages::Webp/Package[webp]/ensure: created
Notice: /Stage[main]/Imagemagick::Install/File[/etc/ImageMagick-6/policy.xml]/content: 
--- /etc/ImageMagick-6/policy.xml	2017-12-26 12:24:39.000000000 +0000
+++ /tmp/puppet-file20180530-17618-kgifbm	2018-05-30 18:57:32.610151163 +0000
@@ -35,39 +35,33 @@
   
     <policy domain="path" rights="read" pattern="/repository/*" />
 
-  Let's prevent possible exploits by removing the right to use indirect reads.
-
-    <policy domain="path" rights="none" pattern="@*" />
-
   Any large image is cached to disk rather than memory:
 
     <policy domain="resource" name="area" value="1GB"/>
 
-  Define arguments for the memory, map, area, width, height, and disk resources
-  with SI prefixes (.e.g 100MB).  In addition, resource policies are maximums
-  for each instance of ImageMagick (e.g. policy memory limit 1GB, -limit 2GB
+  Define arguments for the memory, map, area, and disk resources with
+  SI prefixes (.e.g 100MB).  In addition, resource policies are maximums for
+  each instance of ImageMagick (e.g. policy memory limit 1GB, -limit 2GB
   exceeds policy maximum so memory limit is 1GB).
 -->
 <policymap>
+  <!-- <policy domain="system" name="precision" value="6"/> -->
   <!-- <policy domain="resource" name="temporary-path" value="/tmp"/> -->
-  <policy domain="resource" name="memory" value="256MiB"/>
-  <policy domain="resource" name="map" value="512MiB"/>
-  <policy domain="resource" name="width" value="16KP"/>
-  <policy domain="resource" name="height" value="16KP"/>
-  <policy domain="resource" name="area" value="128MB"/>
-  <policy domain="resource" name="disk" value="1GiB"/>
+  <!-- <policy domain="resource" name="memory" value="2GiB"/> -->
+  <!-- <policy domain="resource" name="map" value="4GiB"/> -->
+  <!-- <policy domain="resource" name="area" value="1GB"/> -->
+  <!-- <policy domain="resource" name="disk" value="16EB"/> -->
   <!-- <policy domain="resource" name="file" value="768"/> -->
   <!-- <policy domain="resource" name="thread" value="4"/> -->
   <!-- <policy domain="resource" name="throttle" value="0"/> -->
   <!-- <policy domain="resource" name="time" value="3600"/> -->
-  <!-- <policy domain="system" name="precision" value="6"/> -->
-  <!-- not needed due to the need to use explicitly by mvg: -->
-  <!-- <policy domain="delegate" rights="none" pattern="MVG" /> -->
-  <!-- use curl -->
-  <policy domain="delegate" rights="none" pattern="URL" />
-  <policy domain="delegate" rights="none" pattern="HTTPS" />
-  <policy domain="delegate" rights="none" pattern="HTTP" />
-  <!-- in order to avoid to get image with password text -->
-  <policy domain="path" rights="none" pattern="@*"/>
-  <policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/>
+  <policy domain="coder" rights="none" pattern="EPHEMERAL" />
+  <policy domain="coder" rights="none" pattern="URL" />
+  <policy domain="coder" rights="none" pattern="HTTPS" />
+  <policy domain="coder" rights="none" pattern="MVG" />
+  <policy domain="coder" rights="none" pattern="MSL" />
+  <policy domain="coder" rights="none" pattern="HTTP" />
+  <policy domain="coder" rights="none" pattern="FTP" />
+  <policy domain="coder" rights="none" pattern="TEXT" />
+  <policy domain="coder" rights="none" pattern="LABEL" />
 </policymap>

Info: Computing checksum on file /etc/ImageMagick-6/policy.xml
Info: /Stage[main]/Imagemagick::Install/File[/etc/ImageMagick-6/policy.xml]: Filebucketed /etc/ImageMagick-6/policy.xml to puppet with sum c5ec6367e54debbf20f278a8ee79561f
Notice: /Stage[main]/Imagemagick::Install/File[/etc/ImageMagick-6/policy.xml]/content: content changed '{md5}c5ec6367e54debbf20f278a8ee79561f' to '{md5}6a39e6a7422a8d33baadf848ff02ab14'
Notice: /Stage[main]/Packages::Firejail/Package[firejail]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[python-imaging]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[tidy]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[php-pear]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[php-mail]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[php-mail-mime]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[djvulibre-bin]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[librsvg2-bin]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[libtiff-tools]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[poppler-utils]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[lilypond]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[timidity]/ensure: created
Notice: /Stage[main]/Mediawiki::Packages/Package[freepats]/ensure: created
Notice: /Stage[main]/Mediawiki::Users/Group[pybal-check]/ensure: created
Notice: /Stage[main]/Mediawiki::Users/User[pybal-check]/ensure: created
Notice: /Stage[main]/Mediawiki::Scap/File[/srv/mediawiki]/ensure: created
Notice: /Stage[main]/Mediawiki::Scap/File[/etc/profile.d/mediawiki.sh]/ensure: defined content as '{md5}de4900a874d476828c8e3e3026b24206'
Notice: /Stage[main]/Mediawiki::Syslog/File[/etc/logrotate.d/mediawiki_apache]/ensure: defined content as '{md5}754ce47abb7fa33f96c52e84b40669cf'
Notice: /Stage[main]/Packages::Php_curl/Package[php-curl]/ensure: created
Notice: /Stage[main]/Packages::Php_intl/Package[php-intl]/ensure: created
Notice: /Stage[main]/Packages::Php_mysql/Package[php-mysql]/ensure: created
Notice: /Stage[main]/Packages::Php_redis/Package[php-redis]/ensure: created
Notice: /Stage[main]/Packages::Php_luasandbox/Package[php-luasandbox]/ensure: created
Notice: /Stage[main]/Packages::Php_apcu/Package[php-apcu]/ensure: created
Notice: /Stage[main]/Packages::Php_bz2/Package[php-bz2]/ensure: created
Notice: /Stage[main]/Packages::Php_geoip/Package[php-geoip]/ensure: created
Notice: /Stage[main]/Packages::Php_memcached/Package[php-memcached]/ensure: created
Notice: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/fpm]/ensure: created
Notice: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/fpm/php.ini]/ensure: defined content as '{md5}2e4d4cca0e242e0a82cea9d6ec7a1445'
Notice: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/cli/php.ini]/content: 
--- /etc/php/7.0/cli/php.ini	2018-01-05 13:51:52.000000000 +0000
+++ /tmp/puppet-file20180530-17618-pgz736	2018-05-30 18:58:48.207113737 +0000
@@ -1,1918 +1,12 @@
-[PHP]
-
-;;;;;;;;;;;;;;;;;;;
-; About php.ini   ;
-;;;;;;;;;;;;;;;;;;;
-; PHP's initialization file, generally called php.ini, is responsible for
-; configuring many of the aspects of PHP's behavior.
-
-; PHP attempts to find and load this configuration from a number of locations.
-; The following is a summary of its search order:
-; 1. SAPI module specific location.
-; 2. The PHPRC environment variable. (As of PHP 5.2.0)
-; 3. A number of predefined registry keys on Windows (As of PHP 5.2.0)
-; 4. Current working directory (except CLI)
-; 5. The web server's directory (for SAPI modules), or directory of PHP
-; (otherwise in Windows)
-; 6. The directory from the --with-config-file-path compile time option, or the
-; Windows directory (C:\windows or C:\winnt)
-; See the PHP docs for more specific information.
-; http://php.net/configuration.file
-
-; The syntax of the file is extremely simple.  Whitespace and lines
-; beginning with a semicolon are silently ignored (as you probably guessed).
-; Section headers (e.g. [Foo]) are also silently ignored, even though
-; they might mean something in the future.
-
-; Directives following the section heading [PATH=/www/mysite] only
-; apply to PHP files in the /www/mysite directory.  Directives
-; following the section heading [HOST=www.example.com] only apply to
-; PHP files served from www.example.com.  Directives set in these
-; special sections cannot be overridden by user-defined INI files or
-; at runtime. Currently, [PATH=] and [HOST=] sections only work under
-; CGI/FastCGI.
-; http://php.net/ini.sections
-
-; Directives are specified using the following syntax:
-; directive = value
-; Directive names are *case sensitive* - foo=bar is different from FOO=bar.
-; Directives are variables used to configure PHP or PHP extensions.
-; There is no name validation.  If PHP can't find an expected
-; directive because it is not set or is mistyped, a default value will be used.
-
-; The value can be a string, a number, a PHP constant (e.g. E_ALL or M_PI), one
-; of the INI constants (On, Off, True, False, Yes, No and None) or an expression
-; (e.g. E_ALL & ~E_NOTICE), a quoted string ("bar"), or a reference to a
-; previously set variable or directive (e.g. ${foo})
-
-; Expressions in the INI file are limited to bitwise operators and parentheses:
-; |  bitwise OR
-; ^  bitwise XOR
-; &  bitwise AND
-; ~  bitwise NOT
-; !  boolean NOT
-
-; Boolean flags can be turned on using the values 1, On, True or Yes.
-; They can be turned off using the values 0, Off, False or No.
-
-; An empty string can be denoted by simply not writing anything after the equal
-; sign, or by using the None keyword:
-
-;  foo =         ; sets foo to an empty string
-;  foo = None    ; sets foo to an empty string
-;  foo = "None"  ; sets foo to the string 'None'
-
-; If you use constants in your value, and these constants belong to a
-; dynamically loaded extension (either a PHP extension or a Zend extension),
-; you may only use these constants *after* the line that loads the extension.
-
-;;;;;;;;;;;;;;;;;;;
-; About this file ;
-;;;;;;;;;;;;;;;;;;;
-; PHP comes packaged with two INI files. One that is recommended to be used
-; in production environments and one that is recommended to be used in
-; development environments.
-
-; php.ini-production contains settings which hold security, performance and
-; best practices at its core. But please be aware, these settings may break
-; compatibility with older or less security conscience applications. We
-; recommending using the production ini in production and testing environments.
-
-; php.ini-development is very similar to its production variant, except it is
-; much more verbose when it comes to errors. We recommend using the
-; development version only in development environments, as errors shown to
-; application users can inadvertently leak otherwise secure information.
-
-; This is php.ini-production INI file.
-
-;;;;;;;;;;;;;;;;;;;
-; Quick Reference ;
-;;;;;;;;;;;;;;;;;;;
-; The following are all the settings which are different in either the production
-; or development versions of the INIs with respect to PHP's default behavior.
-; Please see the actual settings later in the document for more details as to why
-; we recommend these changes in PHP's behavior.
-
-; display_errors
-;   Default Value: On
-;   Development Value: On
-;   Production Value: Off
-
-; display_startup_errors
-;   Default Value: Off
-;   Development Value: On
-;   Production Value: Off
-
-; error_reporting
-;   Default Value: E_ALL & ~E_NOTICE & ~E_STRICT & ~E_DEPRECATED
-;   Development Value: E_ALL
-;   Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
-
-; html_errors
-;   Default Value: On
-;   Development Value: On
-;   Production value: On
-
-; log_errors
-;   Default Value: Off
-;   Development Value: On
-;   Production Value: On
-
-; max_input_time
-;   Default Value: -1 (Unlimited)
-;   Development Value: 60 (60 seconds)
-;   Production Value: 60 (60 seconds)
-
-; output_buffering
-;   Default Value: Off
-;   Development Value: 4096
-;   Production Value: 4096
-
-; register_argc_argv
-;   Default Value: On
-;   Development Value: Off
-;   Production Value: Off
-
-; request_order
-;   Default Value: None
-;   Development Value: "GP"
-;   Production Value: "GP"
-
-; session.gc_divisor
-;   Default Value: 100
-;   Development Value: 1000
-;   Production Value: 1000
-
-; session.hash_bits_per_character
-;   Default Value: 4
-;   Development Value: 5
-;   Production Value: 5
-
-; short_open_tag
-;   Default Value: On
-;   Development Value: Off
-;   Production Value: Off
-
-; track_errors
-;   Default Value: Off
-;   Development Value: On
-;   Production Value: Off
-
-; url_rewriter.tags
-;   Default Value: "a=href,area=href,frame=src,form=,fieldset="
-;   Development Value: "a=href,area=href,frame=src,input=src,form=fakeentry"
-;   Production Value: "a=href,area=href,frame=src,input=src,form=fakeentry"
-
-; variables_order
-;   Default Value: "EGPCS"
-;   Development Value: "GPCS"
-;   Production Value: "GPCS"
-
-;;;;;;;;;;;;;;;;;;;;
-; php.ini Options  ;
-;;;;;;;;;;;;;;;;;;;;
-; Name for user-defined php.ini (.htaccess) files. Default is ".user.ini"
-;user_ini.filename = ".user.ini"
-
-; To disable this feature set this option to empty value
-;user_ini.filename =
-
-; TTL for user-defined php.ini files (time-to-live) in seconds. Default is 300 seconds (5 minutes)
-;user_ini.cache_ttl = 300
-
-;;;;;;;;;;;;;;;;;;;;
-; Language Options ;
-;;;;;;;;;;;;;;;;;;;;
-
-; Enable the PHP scripting language engine under Apache.
-; http://php.net/engine
-engine = On
-
-; This directive determines whether or not PHP will recognize code between
-; <? and ?> tags as PHP source which should be processed as such. It is
-; generally recommended that <?php and ?> should be used and that this feature
-; should be disabled, as enabling it may result in issues when generating XML
-; documents, however this remains supported for backward compatibility reasons.
-; Note that this directive does not control the <?= shorthand tag, which can be
-; used regardless of this directive.
-; Default Value: On
-; Development Value: Off
-; Production Value: Off
-; http://php.net/short-open-tag
-short_open_tag = Off
-
-; The number of significant digits displayed in floating point numbers.
-; http://php.net/precision
-precision = 14
-
-; Output buffering is a mechanism for controlling how much output data
-; (excluding headers and cookies) PHP should keep internally before pushing that
-; data to the client. If your application's output exceeds this setting, PHP
-; will send that data in chunks of roughly the size you specify.
-; Turning on this setting and managing its maximum buffer size can yield some
-; interesting side-effects depending on your application and web server.
-; You may be able to send headers and cookies after you've already sent output
-; through print or echo. You also may see performance benefits if your server is
-; emitting less packets due to buffered output versus PHP streaming the output
-; as it gets it. On production servers, 4096 bytes is a good setting for performance
-; reasons.
-; Note: Output buffering can also be controlled via Output Buffering Control
-;   functions.
-; Possible Values:
-;   On = Enabled and buffer is unlimited. (Use with caution)
-;   Off = Disabled
-;   Integer = Enables the buffer and sets its maximum size in bytes.
-; Note: This directive is hardcoded to Off for the CLI SAPI
-; Default Value: Off
-; Development Value: 4096
-; Production Value: 4096
-; http://php.net/output-buffering
-output_buffering = 4096
-
-; You can redirect all of the output of your scripts to a function.  For
-; example, if you set output_handler to "mb_output_handler", character
-; encoding will be transparently converted to the specified encoding.
-; Setting any output handler automatically turns on output buffering.
-; Note: People who wrote portable scripts should not depend on this ini
-;   directive. Instead, explicitly set the output handler using ob_start().
-;   Using this ini directive may cause problems unless you know what script
-;   is doing.
-; Note: You cannot use both "mb_output_handler" with "ob_iconv_handler"
-;   and you cannot use both "ob_gzhandler" and "zlib.output_compression".
-; Note: output_handler must be empty if this is set 'On' !!!!
-;   Instead you must use zlib.output_handler.
-; http://php.net/output-handler
-;output_handler =
-
-; Transparent output compression using the zlib library
-; Valid values for this option are 'off', 'on', or a specific buffer size
-; to be used for compression (default is 4KB)
-; Note: Resulting chunk size may vary due to nature of compression. PHP
-;   outputs chunks that are few hundreds bytes each as a result of
-;   compression. If you prefer a larger chunk size for better
-;   performance, enable output_buffering in addition.
-; Note: You need to use zlib.output_handler instead of the standard
-;   output_handler, or otherwise the output will be corrupted.
-; http://php.net/zlib.output-compression
-zlib.output_compression = Off
-
-; http://php.net/zlib.output-compression-level
-;zlib.output_compression_level = -1
-
-; You cannot specify additional output handlers if zlib.output_compression
-; is activated here. This setting does the same as output_handler but in
-; a different order.
-; http://php.net/zlib.output-handler
-;zlib.output_handler =
-
-; Implicit flush tells PHP to tell the output layer to flush itself
-; automatically after every output block.  This is equivalent to calling the
-; PHP function flush() after each and every call to print() or echo() and each
-; and every HTML block.  Turning this option on has serious performance
-; implications and is generally recommended for debugging purposes only.
-; http://php.net/implicit-flush
-; Note: This directive is hardcoded to On for the CLI SAPI
-implicit_flush = Off
-
-; The unserialize callback function will be called (with the undefined class'
-; name as parameter), if the unserializer finds an undefined class
-; which should be instantiated. A warning appears if the specified function is
-; not defined, or if the function doesn't include/implement the missing class.
-; So only set this entry, if you really want to implement such a
-; callback-function.
-unserialize_callback_func =
-
-; When floats & doubles are serialized store serialize_precision significant
-; digits after the floating point. The default value ensures that when floats
-; are decoded with unserialize, the data will remain the same.
-serialize_precision = 17
-
-; open_basedir, if set, limits all file operations to the defined directory
-; and below.  This directive makes most sense if used in a per-directory
-; or per-virtualhost web server configuration file.
-; http://php.net/open-basedir
-;open_basedir =
-
-; This directive allows you to disable certain functions for security reasons.
-; It receives a comma-delimited list of function names.
-; http://php.net/disable-functions
-disable_functions =
-
-; This directive allows you to disable certain classes for security reasons.
-; It receives a comma-delimited list of class names.
-; http://php.net/disable-classes
-disable_classes =
-
-; Colors for Syntax Highlighting mode.  Anything that's acceptable in
-; <span style="color: ???????"> would work.
-; http://php.net/syntax-highlighting
-;highlight.string  = #DD0000
-;highlight.comment = #FF9900
-;highlight.keyword = #007700
-;highlight.default = #0000BB
-;highlight.html    = #000000
-
-; If enabled, the request will be allowed to complete even if the user aborts
-; the request. Consider enabling it if executing long requests, which may end up
-; being interrupted by the user or a browser timing out. PHP's default behavior
-; is to disable this feature.
-; http://php.net/ignore-user-abort
-;ignore_user_abort = On
-
-; Determines the size of the realpath cache to be used by PHP. This value should
-; be increased on systems where PHP opens many files to reflect the quantity of
-; the file operations performed.
-; http://php.net/realpath-cache-size
-;realpath_cache_size = 4096k
-
-; Duration of time, in seconds for which to cache realpath information for a given
-; file or directory. For systems with rarely changing files, consider increasing this
-; value.
-; http://php.net/realpath-cache-ttl
-;realpath_cache_ttl = 120
-
-; Enables or disables the circular reference collector.
-; http://php.net/zend.enable-gc
-zend.enable_gc = On
-
-; If enabled, scripts may be written in encodings that are incompatible with
-; the scanner.  CP936, Big5, CP949 and Shift_JIS are the examples of such
-; encodings.  To use this feature, mbstring extension must be enabled.
-; Default: Off
-;zend.multibyte = Off
-
-; Allows to set the default encoding for the scripts.  This value will be used
-; unless "declare(encoding=...)" directive appears at the top of the script.
-; Only affects if zend.multibyte is set.
-; Default: ""
-;zend.script_encoding =
-
-;;;;;;;;;;;;;;;;;
-; Miscellaneous ;
-;;;;;;;;;;;;;;;;;
-
-; Decides whether PHP may expose the fact that it is installed on the server
-; (e.g. by adding its signature to the Web server header).  It is no security
-; threat in any way, but it makes it possible to determine whether you use PHP
-; on your server or not.
-; http://php.net/expose-php
-expose_php = On
-
-;;;;;;;;;;;;;;;;;;;
-; Resource Limits ;
-;;;;;;;;;;;;;;;;;;;
-
-; Maximum execution time of each script, in seconds
-; http://php.net/max-execution-time
-; Note: This directive is hardcoded to 0 for the CLI SAPI
-max_execution_time = 30
-
-; Maximum amount of time each script may spend parsing request data. It's a good
-; idea to limit this time on productions servers in order to eliminate unexpectedly
-; long running scripts.
-; Note: This directive is hardcoded to -1 for the CLI SAPI
-; Default Value: -1 (Unlimited)
-; Development Value: 60 (60 seconds)
-; Production Value: 60 (60 seconds)
-; http://php.net/max-input-time
-max_input_time = 60
-
-; Maximum input variable nesting level
-; http://php.net/max-input-nesting-level
-;max_input_nesting_level = 64
-
-; How many GET/POST/COOKIE input variables may be accepted
-; max_input_vars = 1000
-
-; Maximum amount of memory a script may consume (128MB)
-; http://php.net/memory-limit
-memory_limit = -1
-
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-; Error handling and logging ;
-;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-
-; This directive informs PHP of which errors, warnings and notices you would like
-; it to take action for. The recommended way of setting values for this
-; directive is through the use of the error level constants and bitwise
-; operators. The error level constants are below here for convenience as well as
-; some common settings and their meanings.
-; By default, PHP is set to take action on all errors, notices and warnings EXCEPT
-; those related to E_NOTICE and E_STRICT, which together cover best practices and
-; recommended coding standards in PHP. For performance reasons, this is the
-; recommend error reporting setting. Your production server shouldn't be wasting
-; resources complaining about best practices and coding standards. That's what
-; development servers and development settings are for.
-; Note: The php.ini-development file has this setting as E_ALL. This
-; means it pretty much reports everything which is exactly what you want during
-; development and early testing.
-;
-; Error Level Constants:
-; E_ALL             - All errors and warnings (includes E_STRICT as of PHP 5.4.0)
-; E_ERROR           - fatal run-time errors
-; E_RECOVERABLE_ERROR  - almost fatal run-time errors
-; E_WARNING         - run-time warnings (non-fatal errors)
-; E_PARSE           - compile-time parse errors
-; E_NOTICE          - run-time notices (these are warnings which often result
-;                     from a bug in your code, but it's possible that it was
-;                     intentional (e.g., using an uninitialized variable and
-;                     relying on the fact it is automatically initialized to an
-;                     empty string)
-; E_STRICT          - run-time notices, enable to have PHP suggest changes
-;                     to your code which will ensure the best interoperability
-;                     and forward compatibility of your code
-; E_CORE_ERROR      - fatal errors that occur during PHP's initial startup
-; E_CORE_WARNING    - warnings (non-fatal errors) that occur during PHP's
-;                     initial startup
-; E_COMPILE_ERROR   - fatal compile-time errors
-; E_COMPILE_WARNING - compile-time warnings (non-fatal errors)
-; E_USER_ERROR      - user-generated error message
-; E_USER_WARNING    - user-generated warning message
-; E_USER_NOTICE     - user-generated notice message
-; E_DEPRECATED      - warn about code that will not work in future versions
-;                     of PHP
-; E_USER_DEPRECATED - user-generated deprecation warnings
-;
-; Common Values:
-;   E_ALL (Show all errors, warnings and notices including coding standards.)
-;   E_ALL & ~E_NOTICE  (Show all errors, except for notices)
-;   E_ALL & ~E_NOTICE & ~E_STRICT  (Show all errors, except for notices and coding standards warnings.)
-;   E_COMPILE_ERROR|E_RECOVERABLE_ERROR|E_ERROR|E_CORE_ERROR  (Show only errors)
-; Default Value: E_ALL & ~E_NOTICE & ~E_STRICT & ~E_DEPRECATED
-; Development Value: E_ALL
-; Production Value: E_ALL & ~E_DEPRECATED & ~E_STRICT
-; http://php.net/error-reporting
-error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
-
-; This directive controls whether or not and where PHP will output errors,
-; notices and warnings too. Error output is very useful during development, but
-; it could be very dangerous in production environments. Depending on the code
-; which is triggering the error, sensitive information could potentially leak
-; out of your application such as database usernames and passwords or worse.
-; For production environments, we recommend logging errors rather than
-; sending them to STDOUT.
-; Possible Values:
-;   Off = Do not display any errors
-;   stderr = Display errors to STDERR (affects only CGI/CLI binaries!)
-;   On or stdout = Display errors to STDOUT
-; Default Value: On
-; Development Value: On
-; Production Value: Off
-; http://php.net/display-errors
-display_errors = Off
-
-; The display of errors which occur during PHP's startup sequence are handled
-; separately from display_errors. PHP's default behavior is to suppress those
-; errors from clients. Turning the display of startup errors on can be useful in
-; debugging configuration problems. We strongly recommend you
-; set this to 'off' for production servers.
-; Default Value: Off
-; Development Value: On
-; Production Value: Off
-; http://php.net/display-startup-errors
-display_startup_errors = Off
-
-; Besides displaying errors, PHP can also log errors to locations such as a
-; server-specific log, STDERR, or a location specified by the error_log
-; directive found below. While errors should not be displayed on productions
-; servers they should still be monitored and logging is a great way to do that.
-; Default Value: Off
-; Development Value: On
-; Production Value: On
-; http://php.net/log-errors
+date.timezone = UTC
+default_socket_timeout = 1
+display_errors = On
+error_log = syslog
+include_path = ".:/usr/share/php:/srv/mediawiki/php"
 log_errors = On
-
-; Set maximum length of log_errors. In error_log information about the source is
-; added. The default is 1024 and 0 allows to not apply any maximum length at all.
-; http://php.net/log-errors-max-len
-log_errors_max_len = 1024
-
-; Do not log repeated messages. Repeated errors must occur in same file on same
-; line unless ignore_repeated_source is set true.
-; http://php.net/ignore-repeated-errors
-ignore_repeated_errors = Off
-
-; Ignore source of message when ignoring repeated messages. When this setting
-; is On you will not log errors with repeated messages from different files or
-; source lines.
-; http://php.net/ignore-repeated-source
-ignore_repeated_source = Off
-
-; If this parameter is set to Off, then memory leaks will not be shown (on
-; stdout or in the log). This has only effect in a debug compile, and if
-; error reporting includes E_WARNING in the allowed list
-; http://php.net/report-memleaks
-report_memleaks = On
-
-; This setting is on by default.
-;report_zend_debug = 0
-
-; Store the last error/warning message in $php_errormsg (boolean). Setting this value
-; to On can assist in debugging and is appropriate for development servers. It should
-; however be disabled on production servers.
-; Default Value: Off
-; Development Value: On
-; Production Value: Off
-; http://php.net/track-errors
-track_errors = Off
-
-; Turn off normal error reporting and emit XML-RPC error XML
-; http://php.net/xmlrpc-errors
-;xmlrpc_errors = 0
-
-; An XML-RPC faultCode
-;xmlrpc_error_number = 0
-
-; When PHP displays or logs an error, it has the capability of formatting the
-; error message as HTML for easier reading. This directive controls whether
-; the error message is formatted as HTML or not.
-; Note: This directive is hardcoded to Off for the CLI SAPI
-; Default Value: On
-; Development Value: On
-; Production value: On
-; http://php.net/html-errors
-html_errors = On
-
-; If html_errors is set to On *and* docref_root is not empty, then PHP
-; produces clickable error messages that direct to a page describing the error
-; or function causing the error in detail.
-; You can download a copy of the PHP manual from http://php.net/docs
-; and change docref_root to the base URL of your local copy including the
-; leading '/'. You must also specify the file extension being used including
-; the dot. PHP's default behavior is to leave these settings empty, in which
-; case no links to documentation are generated.
-; Note: Never use this feature for production boxes.
-; http://php.net/docref-root
-; Examples
-;docref_root = "/phpmanual/"
-
-; http://php.net/docref-ext
-;docref_ext = .html
-
-; String to output before an error message. PHP's default behavior is to leave
-; this setting blank.
-; http://php.net/error-prepend-string
-; Example:
-;error_prepend_string = "<span style='color: #ff0000'>"
-
-; String to output after an error message. PHP's default behavior is to leave
-; this setting blank.
-; http://php.net/error-append-string
-; Example:
-;error_append_string = "</span>"
-
-; Log errors to specified file. PHP's default behavior is to leave this value
-; empty.
-; http://php.net/error-log
-; Example:
-;error_log = php_errors.log
-; Log errors to syslog (Event Log on Windows).
-;error_log = syslog
-
-;windows.show_crt_warning
-; Default value: 0
-; Development value: 0
-; Production value: 0
-
-;;;;;;;;;;;;;;;;;
-; Data Handling ;
-;;;;;;;;;;;;;;;;;
-
-; The separator used in PHP generated URLs to separate arguments.
-; PHP's default setting is "&".
-; http://php.net/arg-separator.output
-; Example:
-;arg_separator.output = "&amp;"
-
-; List of separator(s) used by PHP to parse input URLs into variables.
-; PHP's default setting is "&".
-; NOTE: Every character in this directive is considered as separator!
-; http://php.net/arg-separator.input
-; Example:
-;arg_separator.input = ";&"
-
-; This directive determines which super global arrays are registered when PHP
-; starts up. G,P,C,E & S are abbreviations for the following respective super
-; globals: GET, POST, COOKIE, ENV and SERVER. There is a performance penalty
-; paid for the registration of these arrays and because ENV is not as commonly
-; used as the others, ENV is not recommended on productions servers. You
-; can still get access to the environment variables through getenv() should you
-; need to.
-; Default Value: "EGPCS"
-; Development Value: "GPCS"
-; Production Value: "GPCS";
-; http://php.net/variables-order
-variables_order = "GPCS"
-
-; This directive determines which super global data (G,P & C) should be
-; registered into the super global array REQUEST. If so, it also determines
-; the order in which that data is registered. The values for this directive
-; are specified in the same manner as the variables_order directive,
-; EXCEPT one. Leaving this value empty will cause PHP to use the value set
-; in the variables_order directive. It does not mean it will leave the super
-; globals array REQUEST empty.
-; Default Value: None
-; Development Value: "GP"
-; Production Value: "GP"
-; http://php.net/request-order
-request_order = "GP"
-
-; This directive determines whether PHP registers $argv & $argc each time it
-; runs. $argv contains an array of all the arguments passed to PHP when a script
-; is invoked. $argc contains an integer representing the number of arguments
-; that were passed when the script was invoked. These arrays are extremely
-; useful when running scripts from the command line. When this directive is
-; enabled, registering these variables consumes CPU cycles and memory each time
-; a script is executed. For performance reasons, this feature should be disabled
-; on production servers.
-; Note: This directive is hardcoded to On for the CLI SAPI
-; Default Value: On
-; Development Value: Off
-; Production Value: Off
-; http://php.net/register-argc-argv
-register_argc_argv = Off
-
-; When enabled, the ENV, REQUEST and SERVER variables are created when they're
-; first used (Just In Time) instead of when the script starts. If these
-; variables are not used within a script, having this directive on will result
-; in a performance gain. The PHP directive register_argc_argv must be disabled
-; for this directive to have any affect.
-; http://php.net/auto-globals-jit
-auto_globals_jit = On
-
-; Whether PHP will read the POST data.
-; This option is enabled by default.
-; Most likely, you won't want to disable this option globally. It causes $_POST
-; and $_FILES to always be empty; the only way you will be able to read the
-; POST data will be through the php://input stream wrapper. This can be useful
-; to proxy requests or to process the POST data in a memory efficient fashion.
-; http://php.net/enable-post-data-reading
-;enable_post_data_reading = Off
-
-; Maximum size of POST data that PHP will accept.
-; Its value may be 0 to disable the limit. It is ignored if POST data reading
-; is disabled through enable_post_data_reading.
-; http://php.net/post-max-size
-post_max_size = 8M
-
-; Automatically add files before PHP document.
-; http://php.net/auto-prepend-file
-auto_prepend_file =
-
-; Automatically add files after PHP document.
-; http://php.net/auto-append-file
-auto_append_file =
-
-; By default, PHP will output a media type using the Content-Type header. To
-; disable this, simply set it to be empty.
-;
-; PHP's built-in default media type is set to text/html.
-; http://php.net/default-mimetype
-default_mimetype = "text/html"
-
-; PHP's default character set is set to UTF-8.
-; http://php.net/default-charset
-default_charset = "UTF-8"
-
-; PHP internal character encoding is set to empty.
-; If empty, default_charset is used.
-; http://php.net/internal-encoding
-;internal_encoding =
-
-; PHP input character encoding is set to empty.
-; If empty, default_charset is used.
-; http://php.net/input-encoding
-;input_encoding =
-
-; PHP output character encoding is set to empty.
-; If empty, default_charset is used.
-; See also output_buffer.
-; http://php.net/output-encoding
-;output_encoding =
-
-;;;;;;;;;;;;;;;;;;;;;;;;;
-; Paths and Directories ;
-;;;;;;;;;;;;;;;;;;;;;;;;;
-
-; UNIX: "/path1:/path2"
-;include_path = ".:/usr/share/php"
-;
-; Windows: "\path1;\path2"
-;include_path = ".;c:\php\includes"
-;
-; PHP's default setting for include_path is ".;/path/to/php/pear"
-; http://php.net/include-path
-
-; The root of the PHP pages, used only if nonempty.
-; if PHP was not compiled with FORCE_REDIRECT, you SHOULD set doc_root
-; if you are running php as a CGI under any web server (other than IIS)
-; see documentation for security issues.  The alternate is to use the
-; cgi.force_redirect configuration below
-; http://php.net/doc-root
-doc_root =
-
-; The directory under which PHP opens the script using /~username used only
-; if nonempty.
-; http://php.net/user-dir
-user_dir =
-
-; Directory in which the loadable extensions (modules) reside.
-; http://php.net/extension-dir
-; extension_dir = "./"
-; On windows:
-; extension_dir = "ext"
-
-; Directory where the temporary files should be placed.
-; Defaults to the system default (see sys_get_temp_dir)
-; sys_temp_dir = "/tmp"
-
-; Whether or not to enable the dl() function.  The dl() function does NOT work
-; properly in multithreaded servers, such as IIS or Zeus, and is automatically
-; disabled on them.
-; http://php.net/enable-dl
-enable_dl = Off
-
-; cgi.force_redirect is necessary to provide security running PHP as a CGI under
-; most web servers.  Left undefined, PHP turns this on by default.  You can
-; turn it off here AT YOUR OWN RISK
-; **You CAN safely turn this off for IIS, in fact, you MUST.**
-; http://php.net/cgi.force-redirect
-;cgi.force_redirect = 1
-
-; if cgi.nph is enabled it will force cgi to always sent Status: 200 with
-; every request. PHP's default behavior is to disable this feature.
-;cgi.nph = 1
-
-; if cgi.force_redirect is turned on, and you are not running under Apache or Netscape
-; (iPlanet) web servers, you MAY need to set an environment variable name that PHP
-; will look for to know it is OK to continue execution.  Setting this variable MAY
-; cause security issues, KNOW WHAT YOU ARE DOING FIRST.
-; http://php.net/cgi.redirect-status-env
-;cgi.redirect_status_env =
-
-; cgi.fix_pathinfo provides *real* PATH_INFO/PATH_TRANSLATED support for CGI.  PHP's
-; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
-; what PATH_INFO is.  For more information on PATH_INFO, see the cgi specs.  Setting
-; this to 1 will cause PHP CGI to fix its paths to conform to the spec.  A setting
-; of zero causes PHP to behave as before.  Default is 1.  You should fix your scripts
-; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
-; http://php.net/cgi.fix-pathinfo
-;cgi.fix_pathinfo=1
-
-; if cgi.discard_path is enabled, the PHP CGI binary can safely be placed outside
-; of the web tree and people will not be able to circumvent .htaccess security.
-; http://php.net/cgi.dicard-path
-;cgi.discard_path=1
-
-; FastCGI under IIS (on WINNT based OS) supports the ability to impersonate
-; security tokens of the calling client.  This allows IIS to define the
-; security context that the request runs under.  mod_fastcgi under Apache
-; does not currently support this feature (03/17/2002)
-; Set to 1 if running under IIS.  Default is zero.
-; http://php.net/fastcgi.impersonate
-;fastcgi.impersonate = 1
-
-; Disable logging through FastCGI connection. PHP's default behavior is to enable
-; this feature.
-;fastcgi.logging = 0
-
-; cgi.rfc2616_headers configuration option tells PHP what type of headers to
-; use when sending HTTP response code. If set to 0, PHP sends Status: header that
-; is supported by Apache. When this option is set to 1, PHP will send
-; RFC2616 compliant header.
-; Default is zero.
-; http://php.net/cgi.rfc2616-headers
-;cgi.rfc2616_headers = 0
-
-; cgi.check_shebang_line controls whether CGI PHP checks for line starting with #!
-; (shebang) at the top of the running script. This line might be needed if the
-; script support running both as stand-alone script and via PHP CGI<. PHP in CGI
-; mode skips this line and ignores its content if this directive is turned on.
-; http://php.net/cgi.check-shebang-line
-;cgi.check_shebang_line=1
-
-;;;;;;;;;;;;;;;;
-; File Uploads ;
-;;;;;;;;;;;;;;;;
-
-; Whether to allow HTTP file uploads.
-; http://php.net/file-uploads
-file_uploads = On
-
-; Temporary directory for HTTP uploaded files (will use system default if not
-; specified).
-; http://php.net/upload-tmp-dir
-;upload_tmp_dir =
-
-; Maximum allowed size for uploaded files.
-; http://php.net/upload-max-filesize
-upload_max_filesize = 2M
-
-; Maximum number of files that can be uploaded via a single request
-max_file_uploads = 20
-
-;;;;;;;;;;;;;;;;;;
-; Fopen wrappers ;
-;;;;;;;;;;;;;;;;;;
-
-; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
-; http://php.net/allow-url-fopen
-allow_url_fopen = On
-
-; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
-; http://php.net/allow-url-include
-allow_url_include = Off
-
-; Define the anonymous ftp password (your email address). PHP's default setting
-; for this is empty.
-; http://php.net/from
-;from="john@doe.com"
-
-; Define the User-Agent string. PHP's default setting for this is empty.
-; http://php.net/user-agent
-;user_agent="PHP"
-
-; Default timeout for socket based streams (seconds)
-; http://php.net/default-socket-timeout
-default_socket_timeout = 60
-
-; If your scripts have to deal with files from Macintosh systems,
-; or you are running on a Mac and need to deal with files from
-; unix or win32 systems, setting this flag will cause PHP to
-; automatically detect the EOL character in those files so that
-; fgets() and file() will work regardless of the source of the file.
-; http://php.net/auto-detect-line-endings
-;auto_detect_line_endings = Off
-
-;;;;;;;;;;;;;;;;;;;;;;
-; Dynamic Extensions ;
-;;;;;;;;;;;;;;;;;;;;;;
-
-; If you wish to have an extension loaded automatically, use the following
-; syntax:
-;
-;   extension=modulename.extension
-;
-; For example, on Windows:
-;
-;   extension=msql.dll
-;
-; ... or under UNIX:
-;
-;   extension=msql.so
-;
-; ... or with a path:
-;
-;   extension=/path/to/extension/msql.so
-;
-; If you only provide the name of the extension, PHP will look for it in its
-; default extension directory.
-;
-; Windows Extensions
-; Note that ODBC support is built in, so no dll is needed for it.
-; Note that many DLL files are located in the extensions/ (PHP 4) ext/ (PHP 5+)
-; extension folders as well as the separate PECL DLL download (PHP 5+).
-; Be sure to appropriately set the extension_dir directive.
-;
-;extension=php_bz2.dll
-;extension=php_curl.dll
-;extension=php_fileinfo.dll
-;extension=php_ftp.dll
-;extension=php_gd2.dll
-;extension=php_gettext.dll
-;extension=php_gmp.dll
-;extension=php_intl.dll
-;extension=php_imap.dll
-;extension=php_interbase.dll
-;extension=php_ldap.dll
-;extension=php_mbstring.dll
-;extension=php_exif.dll      ; Must be after mbstring as it depends on it
-;extension=php_mysqli.dll
-;extension=php_oci8_12c.dll  ; Use with Oracle Database 12c Instant Client
-;extension=php_openssl.dll
-;extension=php_pdo_firebird.dll
-;extension=php_pdo_mysql.dll
-;extension=php_pdo_oci.dll
-;extension=php_pdo_odbc.dll
-;extension=php_pdo_pgsql.dll
-;extension=php_pdo_sqlite.dll
-;extension=php_pgsql.dll
-;extension=php_shmop.dll
-
-; The MIBS data available in the PHP distribution must be installed.
-; See http://www.php.net/manual/en/snmp.installation.php
-;extension=php_snmp.dll
-
-;extension=php_soap.dll
-;extension=php_sockets.dll
-;extension=php_sqlite3.dll
-;extension=php_tidy.dll
-;extension=php_xmlrpc.dll
-;extension=php_xsl.dll
-
-;;;;;;;;;;;;;;;;;;;
-; Module Settings ;
-;;;;;;;;;;;;;;;;;;;
-
-[CLI Server]
-; Whether the CLI web server uses ANSI color coding in its terminal output.
-cli_server.color = On
-
-[Date]
-; Defines the default timezone used by the date functions
-; http://php.net/date.timezone
-;date.timezone =
-
-; http://php.net/date.default-latitude
-;date.default_latitude = 31.7667
-
-; http://php.net/date.default-longitude
-;date.default_longitude = 35.2333
-
-; http://php.net/date.sunrise-zenith
-;date.sunrise_zenith = 90.583333
-
-; http://php.net/date.sunset-zenith
-;date.sunset_zenith = 90.583333
-
-[filter]
-; http://php.net/filter.default
-;filter.default = unsafe_raw
-
-; http://php.net/filter.default-flags
-;filter.default_flags =
-
-[iconv]
-; Use of this INI entry is deprecated, use global input_encoding instead.
-; If empty, default_charset or input_encoding or iconv.input_encoding is used.
-; The precedence is: default_charset < intput_encoding < iconv.input_encoding
-;iconv.input_encoding =
-
-; Use of this INI entry is deprecated, use global internal_encoding instead.
-; If empty, default_charset or internal_encoding or iconv.internal_encoding is used.
-; The precedence is: default_charset < internal_encoding < iconv.internal_encoding
-;iconv.internal_encoding =
-
-; Use of this INI entry is deprecated, use global output_encoding instead.
-; If empty, default_charset or output_encoding or iconv.output_encoding is used.
-; The precedence is: default_charset < output_encoding < iconv.output_encoding
-; To use an output encoding conversion, iconv's output handler must be set
-; otherwise output encoding conversion cannot be performed.
-;iconv.output_encoding =
-
-[intl]
-;intl.default_locale =
-; This directive allows you to produce PHP errors when some error
-; happens within intl functions. The value is the level of the error produced.
-; Default is 0, which does not produce any errors.
-;intl.error_level = E_WARNING
-;intl.use_exceptions = 0
-
-[sqlite3]
-;sqlite3.extension_dir =
-
-[Pcre]
-;PCRE library backtracking limit.
-; http://php.net/pcre.backtrack-limit
-;pcre.backtrack_limit=100000
-
-;PCRE library recursion limit.
-;Please note that if you set this value to a high number you may consume all
-;the available process stack and eventually crash PHP (due to reaching the
-;stack size limit imposed by the Operating System).
-; http://php.net/pcre.recursion-limit
-;pcre.recursion_limit=100000
-
-;Enables or disables JIT compilation of patterns. This requires the PCRE
-;library to be compiled with JIT support.
-;pcre.jit=1
-
-[Pdo]
-; Whether to pool ODBC connections. Can be one of "strict", "relaxed" or "off"
-; http://php.net/pdo-odbc.connection-pooling
-;pdo_odbc.connection_pooling=strict
-
-;pdo_odbc.db2_instance_name
-
-[Pdo_mysql]
-; If mysqlnd is used: Number of cache slots for the internal result set cache
-; http://php.net/pdo_mysql.cache_size
-pdo_mysql.cache_size = 2000
-
-; Default socket name for local MySQL connects.  If empty, uses the built-in
-; MySQL defaults.
-; http://php.net/pdo_mysql.default-socket
-pdo_mysql.default_socket=
-
-[Phar]
-; http://php.net/phar.readonly
-;phar.readonly = On
-
-; http://php.net/phar.require-hash
-;phar.require_hash = On
-
-;phar.cache_list =
-
-[mail function]
-; For Win32 only.
-; http://php.net/smtp
-SMTP = localhost
-; http://php.net/smtp-port
-smtp_port = 25
-
-; For Win32 only.
-; http://php.net/sendmail-from
-;sendmail_from = me@example.com
-
-; For Unix only.  You may supply arguments as well (default: "sendmail -t -i").
-; http://php.net/sendmail-path
-;sendmail_path =
-
-; Force the addition of the specified parameters to be passed as extra parameters
-; to the sendmail binary. These parameters will always replace the value of
-; the 5th parameter to mail().
-;mail.force_extra_parameters =
-
-; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename
-mail.add_x_header = On
-
-; The path to a log file that will log all mail() calls. Log entries include
-; the full path of the script, line number, To address and headers.
-;mail.log =
-; Log mail to syslog (Event Log on Windows).
-;mail.log = syslog
-
-[SQL]
-; http://php.net/sql.safe-mode
-sql.safe_mode = Off
-
-[ODBC]
-; http://php.net/odbc.default-db
-;odbc.default_db    =  Not yet implemented
-
-; http://php.net/odbc.default-user
-;odbc.default_user  =  Not yet implemented
-
-; http://php.net/odbc.default-pw
-;odbc.default_pw    =  Not yet implemented
-
-; Controls the ODBC cursor model.
-; Default: SQL_CURSOR_STATIC (default).
-;odbc.default_cursortype
-
-; Allow or prevent persistent links.
-; http://php.net/odbc.allow-persistent
-odbc.allow_persistent = On
-
-; Check that a connection is still valid before reuse.
-; http://php.net/odbc.check-persistent
-odbc.check_persistent = On
-
-; Maximum number of persistent links.  -1 means no limit.
-; http://php.net/odbc.max-persistent
-odbc.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-; http://php.net/odbc.max-links
-odbc.max_links = -1
-
-; Handling of LONG fields.  Returns number of bytes to variables.  0 means
-; passthru.
-; http://php.net/odbc.defaultlrl
-odbc.defaultlrl = 4096
-
-; Handling of binary data.  0 means passthru, 1 return as is, 2 convert to char.
-; See the documentation on odbc_binmode and odbc_longreadlen for an explanation
-; of odbc.defaultlrl and odbc.defaultbinmode
-; http://php.net/odbc.defaultbinmode
-odbc.defaultbinmode = 1
-
-;birdstep.max_links = -1
-
-[Interbase]
-; Allow or prevent persistent links.
-ibase.allow_persistent = 1
-
-; Maximum number of persistent links.  -1 means no limit.
-ibase.max_persistent = -1
-
-; Maximum number of links (persistent + non-persistent).  -1 means no limit.
-ibase.max_links = -1
-
-; Default database name for ibase_connect().
-;ibase.default_db =
-
-; Default username for ibase_connect().
-;ibase.default_user =
-
-; Default password for ibase_connect().
-;ibase.default_password =
-
-; Default charset for ibase_connect().
-;ibase.default_charset =
-
-; Default timestamp format.
-ibase.timestampformat = "%Y-%m-%d %H:%M:%S"
-
-; Default date format.
-ibase.dateformat = "%Y-%m-%d"
-
-; Default time format.
-ibase.timeformat = "%H:%M:%S"
-
-[MySQLi]
-
-; Maximum number of persistent links.  -1 means no limit.
-; http://php.net/mysqli.max-persistent
-mysqli.max_persistent = -1
-
-; Allow accessing, from PHP's perspective, local files with LOAD DATA statements
-; http://php.net/mysqli.allow_local_infile
-;mysqli.allow_local_infile = On
-
-; Allow or prevent persistent links.
-; http://php.net/mysqli.allow-persistent
-mysqli.allow_persistent = On
-
-; Maximum number of links.  -1 means no limit.
-; http://php.net/mysqli.max-links
-mysqli.max_links = -1
-
-; If mysqlnd is used: Number of cache slots for the internal result set cache
-; http://php.net/mysqli.cache_size
-mysqli.cache_size = 2000
-
-; Default port number for mysqli_connect().  If unset, mysqli_connect() will use
-; the $MYSQL_TCP_PORT or the mysql-tcp entry in /etc/services or the
-; compile-time value defined MYSQL_PORT (in that order).  Win32 will only look
-; at MYSQL_PORT.
-; http://php.net/mysqli.default-port
-mysqli.default_port = 3306
-
-; Default socket name for local MySQL connects.  If empty, uses the built-in
-; MySQL defaults.
-; http://php.net/mysqli.default-socket
-mysqli.default_socket =
-
-; Default host for mysql_connect() (doesn't apply in safe mode).
-; http://php.net/mysqli.default-host
-mysqli.default_host =
-
-; Default user for mysql_connect() (doesn't apply in safe mode).
-; http://php.net/mysqli.default-user
-mysqli.default_user =
-
-; Default password for mysqli_connect() (doesn't apply in safe mode).
-; Note that this is generally a *bad* idea to store passwords in this file.
-; *Any* user with PHP access can run 'echo get_cfg_var("mysqli.default_pw")
-; and reveal this password!  And of course, any users with read access to this
-; file will be able to reveal the password as well.
-; http://php.net/mysqli.default-pw
-mysqli.default_pw =
-
-; Allow or prevent reconnect
-mysqli.reconnect = Off
-
-[mysqlnd]
-; Enable / Disable collection of general statistics by mysqlnd which can be
-; used to tune and monitor MySQL operations.
-; http://php.net/mysqlnd.collect_statistics
-mysqlnd.collect_statistics = On
-
-; Enable / Disable collection of memory usage statistics by mysqlnd which can be
-; used to tune and monitor MySQL operations.
-; http://php.net/mysqlnd.collect_memory_statistics
-mysqlnd.collect_memory_statistics = Off
-
-; Records communication from all extensions using mysqlnd to the specified log
-; file.
-; http://php.net/mysqlnd.debug
-;mysqlnd.debug =
-
-; Defines which queries will be logged.
-; http://php.net/mysqlnd.log_mask
-;mysqlnd.log_mask = 0
-
-; Default size of the mysqlnd memory pool, which is used by result sets.
-; http://php.net/mysqlnd.mempool_default_size
-;mysqlnd.mempool_default_size = 16000
-
-; Size of a pre-allocated buffer used when sending commands to MySQL in bytes.
-; http://php.net/mysqlnd.net_cmd_buffer_size
-;mysqlnd.net_cmd_buffer_size = 2048
-
-; Size of a pre-allocated buffer used for reading data sent by the server in
-; bytes.
-; http://php.net/mysqlnd.net_read_buffer_size
-;mysqlnd.net_read_buffer_size = 32768
-
-; Timeout for network requests in seconds.
-; http://php.net/mysqlnd.net_read_timeout
-;mysqlnd.net_read_timeout = 31536000
-
-; SHA-256 Authentication Plugin related. File with the MySQL server public RSA
-; key.
-; http://php.net/mysqlnd.sha256_server_public_key
-;mysqlnd.sha256_server_public_key =
-
-[OCI8]
-
-; Connection: Enables privileged connections using external
-; credentials (OCI_SYSOPER, OCI_SYSDBA)
-; http://php.net/oci8.privileged-connect
-;oci8.privileged_connect = Off
-
-; Connection: The maximum number of persistent OCI8 connections per
-; process. Using -1 means no limit.
-; http://php.net/oci8.max-persistent
-;oci8.max_persistent = -1
-
-; Connection: The maximum number of seconds a process is allowed to
-; maintain an idle persistent connection. Using -1 means idle
-; persistent connections will be maintained forever.
-; http://php.net/oci8.persistent-timeout
-;oci8.persistent_timeout = -1
-
-; Connection: The number of seconds that must pass before issuing a
-; ping during oci_pconnect() to check the connection validity. When
-; set to 0, each oci_pconnect() will cause a ping. Using -1 disables
-; pings completely.
-; http://php.net/oci8.ping-interval
-;oci8.ping_interval = 60
-
-; Connection: Set this to a user chosen connection class to be used
-; for all pooled server requests with Oracle 11g Database Resident
-; Connection Pooling (DRCP).  To use DRCP, this value should be set to
-; the same string for all web servers running the same application,
-; the database pool must be configured, and the connection string must
-; specify to use a pooled server.
-;oci8.connection_class =
-
-; High Availability: Using On lets PHP receive Fast Application
-; Notification (FAN) events generated when a database node fails. The
-; database must also be configured to post FAN events.
-;oci8.events = Off
-
-; Tuning: This option enables statement caching, and specifies how
-; many statements to cache. Using 0 disables statement caching.
-; http://php.net/oci8.statement-cache-size
-;oci8.statement_cache_size = 20
-
-; Tuning: Enables statement prefetching and sets the default number of
-; rows that will be fetched automatically after statement execution.
-; http://php.net/oci8.default-prefetch
-;oci8.default_prefetch = 100
-
-; Compatibility. Using On means oci_close() will not close
-; oci_connect() and oci_new_connect() connections.
-; http://php.net/oci8.old-oci-close-semantics
-;oci8.old_oci_close_semantics = Off
-
-[PostgreSQL]
-; Allow or prevent persistent links.
-; http://php.net/pgsql.allow-persistent
-pgsql.allow_persistent = On
-
-; Detect broken persistent links always with pg_pconnect().
-; Auto reset feature requires a little overheads.
-; http://php.net/pgsql.auto-reset-persistent
-pgsql.auto_reset_persistent = Off
-
-; Maximum number of persistent links.  -1 means no limit.
-; http://php.net/pgsql.max-persistent
-pgsql.max_persistent = -1
-
-; Maximum number of links (persistent+non persistent).  -1 means no limit.
-; http://php.net/pgsql.max-links
-pgsql.max_links = -1
-
-; Ignore PostgreSQL backends Notice message or not.
-; Notice message logging require a little overheads.
-; http://php.net/pgsql.ignore-notice
-pgsql.ignore_notice = 0
-
-; Log PostgreSQL backends Notice message or not.
-; Unless pgsql.ignore_notice=0, module cannot log notice message.
-; http://php.net/pgsql.log-notice
-pgsql.log_notice = 0
-
-[bcmath]
-; Number of decimal digits for all bcmath functions.
-; http://php.net/bcmath.scale
-bcmath.scale = 0
-
-[browscap]
-; http://php.net/browscap
-;browscap = extra/browscap.ini
-
-[Session]
-; Handler used to store/retrieve data.
-; http://php.net/session.save-handler
-session.save_handler = files
-
-; Argument passed to save_handler.  In the case of files, this is the path
-; where data files are stored. Note: Windows users have to change this
-; variable in order to use PHP's session functions.
-;
-; The path can be defined as:
-;
-;     session.save_path = "N;/path"
-;
-; where N is an integer.  Instead of storing all the session files in
-; /path, what this will do is use subdirectories N-levels deep, and
-; store the session data in those directories.  This is useful if
-; your OS has problems with many files in one directory, and is
-; a more efficient layout for servers that handle many sessions.
-;
-; NOTE 1: PHP will not create this directory structure automatically.
-;         You can use the script in the ext/session dir for that purpose.
-; NOTE 2: See the section on garbage collection below if you choose to
-;         use subdirectories for session storage
-;
-; The file storage module creates files using mode 600 by default.
-; You can change that by using
-;
-;     session.save_path = "N;MODE;/path"
-;
-; where MODE is the octal representation of the mode. Note that this
-; does not overwrite the process's umask.
-; http://php.net/session.save-path
-;session.save_path = "/var/lib/php/sessions"
-
-; Whether to use strict session mode.
-; Strict session mode does not accept uninitialized session ID and regenerate
-; session ID if browser sends uninitialized session ID. Strict mode protects
-; applications from session fixation via session adoption vulnerability. It is
-; disabled by default for maximum compatibility, but enabling it is encouraged.
-; https://wiki.php.net/rfc/strict_sessions
-session.use_strict_mode = 0
-
-; Whether to use cookies.
-; http://php.net/session.use-cookies
-session.use_cookies = 1
-
-; http://php.net/session.cookie-secure
-;session.cookie_secure =
-
-; This option forces PHP to fetch and use a cookie for storing and maintaining
-; the session id. We encourage this operation as it's very helpful in combating
-; session hijacking when not specifying and managing your own session id. It is
-; not the be-all and end-all of session hijacking defense, but it's a good start.
-; http://php.net/session.use-only-cookies
-session.use_only_cookies = 1
-
-; Name of the session (used as cookie name).
-; http://php.net/session.name
-session.name = PHPSESSID
-
-; Initialize session on request startup.
-; http://php.net/session.auto-start
-session.auto_start = 0
-
-; Lifetime in seconds of cookie or, if 0, until browser is restarted.
-; http://php.net/session.cookie-lifetime
-session.cookie_lifetime = 0
-
-; The path for which the cookie is valid.
-; http://php.net/session.cookie-path
-session.cookie_path = /
-
-; The domain for which the cookie is valid.
-; http://php.net/session.cookie-domain
-session.cookie_domain =
-
-; Whether or not to add the httpOnly flag to the cookie, which makes it inaccessible to browser scripting languages such as JavaScript.
-; http://php.net/session.cookie-httponly
-session.cookie_httponly =
-
-; Handler used to serialize data.  php is the standard serializer of PHP.
-; http://php.net/session.serialize-handler
-session.serialize_handler = php
-
-; Defines the probability that the 'garbage collection' process is started
-; on every session initialization. The probability is calculated by using
-; gc_probability/gc_divisor. Where session.gc_probability is the numerator
-; and gc_divisor is the denominator in the equation. Setting this value to 1
-; when the session.gc_divisor value is 100 will give you approximately a 1% chance
-; the gc will run on any give request.
-; Default Value: 1
-; Development Value: 1
-; Production Value: 1
-; http://php.net/session.gc-probability
-session.gc_probability = 0
-
-; Defines the probability that the 'garbage collection' process is started on every
-; session initialization. The probability is calculated by using the following equation:
-; gc_probability/gc_divisor. Where session.gc_probability is the numerator and
-; session.gc_divisor is the denominator in the equation. Setting this value to 1
-; when the session.gc_divisor value is 100 will give you approximately a 1% chance
-; the gc will run on any give request. Increasing this value to 1000 will give you
-; a 0.1% chance the gc will run on any give request. For high volume production servers,
-; this is a more efficient approach.
-; Default Value: 100
-; Development Value: 1000
-; Production Value: 1000
-; http://php.net/session.gc-divisor
-session.gc_divisor = 1000
-
-; After this number of seconds, stored data will be seen as 'garbage' and
-; cleaned up by the garbage collection process.
-; http://php.net/session.gc-maxlifetime
-session.gc_maxlifetime = 1440
-
-; NOTE: If you are using the subdirectory option for storing session files
-;       (see session.save_path above), then garbage collection does *not*
-;       happen automatically.  You will need to do your own garbage
-;       collection through a shell script, cron entry, or some other method.
-;       For example, the following script would is the equivalent of
-;       setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes):
-;          find /path/to/sessions -cmin +24 -type f | xargs rm
-
-; Check HTTP Referer to invalidate externally stored URLs containing ids.
-; HTTP_REFERER has to contain this substring for the session to be
-; considered as valid.
-; http://php.net/session.referer-check
-session.referer_check =
-
-; How many bytes to read from the file.
-; http://php.net/session.entropy-length
-;session.entropy_length = 32
-
-; Specified here to create the session id.
-; http://php.net/session.entropy-file
-; Defaults to /dev/urandom
-; On systems that don't have /dev/urandom but do have /dev/arandom, this will default to /dev/arandom
-; If neither are found at compile time, the default is no entropy file.
-; On windows, setting the entropy_length setting will activate the
-; Windows random source (using the CryptoAPI)
-;session.entropy_file = /dev/urandom
-
-; Set to {nocache,private,public,} to determine HTTP caching aspects
-; or leave this empty to avoid sending anti-caching headers.
-; http://php.net/session.cache-limiter
-session.cache_limiter = nocache
-
-; Document expires after n minutes.
-; http://php.net/session.cache-expire
-session.cache_expire = 180
-
-; trans sid support is disabled by default.
-; Use of trans sid may risk your users' security.
-; Use this option with caution.
-; - User may send URL contains active session ID
-;   to other person via. email/irc/etc.
-; - URL that contains active session ID may be stored
-;   in publicly accessible computer.
-; - User may access your site with the same session ID
-;   always using URL stored in browser's history or bookmarks.
-; http://php.net/session.use-trans-sid
-session.use_trans_sid = 0
-
-; Select a hash function for use in generating session ids.
-; Possible Values
-;   0  (MD5 128 bits)
-;   1  (SHA-1 160 bits)
-; This option may also be set to the name of any hash function supported by
-; the hash extension. A list of available hashes is returned by the hash_algos()
-; function.
-; http://php.net/session.hash-function
-session.hash_function = 0
-
-; Define how many bits are stored in each character when converting
-; the binary hash data to something readable.
-; Possible values:
-;   4  (4 bits: 0-9, a-f)
-;   5  (5 bits: 0-9, a-v)
-;   6  (6 bits: 0-9, a-z, A-Z, "-", ",")
-; Default Value: 4
-; Development Value: 5
-; Production Value: 5
-; http://php.net/session.hash-bits-per-character
-session.hash_bits_per_character = 5
-
-; The URL rewriter will look for URLs in a defined set of HTML tags.
-; form/fieldset are special; if you include them here, the rewriter will
-; add a hidden <input> field with the info which is otherwise appended
-; to URLs.  If you want XHTML conformity, remove the form entry.
-; Note that all valid entries require a "=", even if no value follows.
-; Default Value: "a=href,area=href,frame=src,form=,fieldset="
-; Development Value: "a=href,area=href,frame=src,input=src,form=fakeentry"
-; Production Value: "a=href,area=href,frame=src,input=src,form=fakeentry"
-; http://php.net/url-rewriter.tags
-url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"
-
-; Enable upload progress tracking in $_SESSION
-; Default Value: On
-; Development Value: On
-; Production Value: On
-; http://php.net/session.upload-progress.enabled
-;session.upload_progress.enabled = On
-
-; Cleanup the progress information as soon as all POST data has been read
-; (i.e. upload completed).
-; Default Value: On
-; Development Value: On
-; Production Value: On
-; http://php.net/session.upload-progress.cleanup
-;session.upload_progress.cleanup = On
-
-; A prefix used for the upload progress key in $_SESSION
-; Default Value: "upload_progress_"
-; Development Value: "upload_progress_"
-; Production Value: "upload_progress_"
-; http://php.net/session.upload-progress.prefix
-;session.upload_progress.prefix = "upload_progress_"
-
-; The index name (concatenated with the prefix) in $_SESSION
-; containing the upload progress information
-; Default Value: "PHP_SESSION_UPLOAD_PROGRESS"
-; Development Value: "PHP_SESSION_UPLOAD_PROGRESS"
-; Production Value: "PHP_SESSION_UPLOAD_PROGRESS"
-; http://php.net/session.upload-progress.name
-;session.upload_progress.name = "PHP_SESSION_UPLOAD_PROGRESS"
-
-; How frequently the upload progress should be updated.
-; Given either in percentages (per-file), or in bytes
-; Default Value: "1%"
-; Development Value: "1%"
-; Production Value: "1%"
-; http://php.net/session.upload-progress.freq
-;session.upload_progress.freq =  "1%"
-
-; The minimum delay between updates, in seconds
-; Default Value: 1
-; Development Value: 1
-; Production Value: 1
-; http://php.net/session.upload-progress.min-freq
-;session.upload_progress.min_freq = "1"
-
-; Only write session data when session data is changed. Enabled by default.
-; http://php.net/session.lazy-write
-;session.lazy_write = On
-
-[Assertion]
-; Switch whether to compile assertions at all (to have no overhead at run-time)
-; -1: Do not compile at all
-;  0: Jump over assertion at run-time
-;  1: Execute assertions
-; Changing from or to a negative value is only possible in php.ini! (For turning assertions on and off at run-time, see assert.active, when zend.assertions = 1)
-; Default Value: 1
-; Development Value: 1
-; Production Value: -1
-; http://php.net/zend.assertions
-zend.assertions = -1
-
-; Assert(expr); active by default.
-; http://php.net/assert.active
-;assert.active = On
-
-; Throw an AssertationException on failed assertions
-; http://php.net/assert.exception
-;assert.exception = On
-
-; Issue a PHP warning for each failed assertion. (Overridden by assert.exception if active)
-; http://php.net/assert.warning
-;assert.warning = On
-
-; Don't bail out by default.
-; http://php.net/assert.bail
-;assert.bail = Off
-
-; User-function to be called if an assertion fails.
-; http://php.net/assert.callback
-;assert.callback = 0
-
-; Eval the expression with current error_reporting().  Set to true if you want
-; error_reporting(0) around the eval().
-; http://php.net/assert.quiet-eval
-;assert.quiet_eval = 0
-
-[COM]
-; path to a file containing GUIDs, IIDs or filenames of files with TypeLibs
-; http://php.net/com.typelib-file
-;com.typelib_file =
-
-; allow Distributed-COM calls
-; http://php.net/com.allow-dcom
-;com.allow_dcom = true
-
-; autoregister constants of a components typlib on com_load()
-; http://php.net/com.autoregister-typelib
-;com.autoregister_typelib = true
-
-; register constants casesensitive
-; http://php.net/com.autoregister-casesensitive
-;com.autoregister_casesensitive = false
-
-; show warnings on duplicate constant registrations
-; http://php.net/com.autoregister-verbose
-;com.autoregister_verbose = true
-
-; The default character set code-page to use when passing strings to and from COM objects.
-; Default: system ANSI code page
-;com.code_page=
-
-[mbstring]
-; language for internal character representation.
-; This affects mb_send_mail() and mbstring.detect_order.
-; http://php.net/mbstring.language
-;mbstring.language = Japanese
-
-; Use of this INI entry is deprecated, use global internal_encoding instead.
-; internal/script encoding.
-; Some encoding cannot work as internal encoding. (e.g. SJIS, BIG5, ISO-2022-*)
-; If empty, default_charset or internal_encoding or iconv.internal_encoding is used.
-; The precedence is: default_charset < internal_encoding < iconv.internal_encoding
-;mbstring.internal_encoding =
-
-; Use of this INI entry is deprecated, use global input_encoding instead.
-; http input encoding.
-; mbstring.encoding_traslation = On is needed to use this setting.
-; If empty, default_charset or input_encoding or mbstring.input is used.
-; The precedence is: default_charset < intput_encoding < mbsting.http_input
-; http://php.net/mbstring.http-input
-;mbstring.http_input =
-
-; Use of this INI entry is deprecated, use global output_encoding instead.
-; http output encoding.
-; mb_output_handler must be registered as output buffer to function.
-; If empty, default_charset or output_encoding or mbstring.http_output is used.
-; The precedence is: default_charset < output_encoding < mbstring.http_output
-; To use an output encoding conversion, mbstring's output handler must be set
-; otherwise output encoding conversion cannot be performed.
-; http://php.net/mbstring.http-output
-;mbstring.http_output =
-
-; enable automatic encoding translation according to
-; mbstring.internal_encoding setting. Input chars are
-; converted to internal encoding by setting this to On.
-; Note: Do _not_ use automatic encoding translation for
-;       portable libs/applications.
-; http://php.net/mbstring.encoding-translation
-;mbstring.encoding_translation = Off
-
-; automatic encoding detection order.
-; "auto" detect order is changed according to mbstring.language
-; http://php.net/mbstring.detect-order
-;mbstring.detect_order = auto
-
-; substitute_character used when character cannot be converted
-; one from another
-; http://php.net/mbstring.substitute-character
-;mbstring.substitute_character = none
-
-; overload(replace) single byte functions by mbstring functions.
-; mail(), ereg(), etc are overloaded by mb_send_mail(), mb_ereg(),
-; etc. Possible values are 0,1,2,4 or combination of them.
-; For example, 7 for overload everything.
-; 0: No overload
-; 1: Overload mail() function
-; 2: Overload str*() functions
-; 4: Overload ereg*() functions
-; http://php.net/mbstring.func-overload
-;mbstring.func_overload = 0
-
-; enable strict encoding detection.
-; Default: Off
-;mbstring.strict_detection = On
-
-; This directive specifies the regex pattern of content types for which mb_output_handler()
-; is activated.
-; Default: mbstring.http_output_conv_mimetype=^(text/|application/xhtml\+xml)
-;mbstring.http_output_conv_mimetype=
-
-[gd]
-; Tell the jpeg decode to ignore warnings and try to create
-; a gd image. The warning will then be displayed as notices
-; disabled by default
-; http://php.net/gd.jpeg-ignore-warning
-;gd.jpeg_ignore_warning = 0
-
-[exif]
-; Exif UNICODE user comments are handled as UCS-2BE/UCS-2LE and JIS as JIS.
-; With mbstring support this will automatically be converted into the encoding
-; given by corresponding encode setting. When empty mbstring.internal_encoding
-; is used. For the decode settings you can distinguish between motorola and
-; intel byte order. A decode setting cannot be empty.
-; http://php.net/exif.encode-unicode
-;exif.encode_unicode = ISO-8859-15
-
-; http://php.net/exif.decode-unicode-motorola
-;exif.decode_unicode_motorola = UCS-2BE
-
-; http://php.net/exif.decode-unicode-intel
-;exif.decode_unicode_intel    = UCS-2LE
-
-; http://php.net/exif.encode-jis
-;exif.encode_jis =
-
-; http://php.net/exif.decode-jis-motorola
-;exif.decode_jis_motorola = JIS
-
-; http://php.net/exif.decode-jis-intel
-;exif.decode_jis_intel    = JIS
-
-[Tidy]
-; The path to a default tidy configuration file to use when using tidy
-; http://php.net/tidy.default-config
-;tidy.default_config = /usr/local/lib/php/default.tcfg
-
-; Should tidy clean and repair output automatically?
-; WARNING: Do not use this option if you are generating non-html content
-; such as dynamic images
-; http://php.net/tidy.clean-output
-tidy.clean_output = Off
-
-[soap]
-; Enables or disables WSDL caching feature.
-; http://php.net/soap.wsdl-cache-enabled
-soap.wsdl_cache_enabled=1
-
-; Sets the directory name where SOAP extension will put cache files.
-; http://php.net/soap.wsdl-cache-dir
-soap.wsdl_cache_dir="/tmp"
-
-; (time to live) Sets the number of second while cached file will be used
-; instead of original one.
-; http://php.net/soap.wsdl-cache-ttl
-soap.wsdl_cache_ttl=86400
-
-; Sets the size of the cache limit. (Max. number of WSDL files to cache)
-soap.wsdl_cache_limit = 5
-
-[sysvshm]
-; A default size of the shared memory segment
-;sysvshm.init_mem = 10000
-
-[ldap]
-; Sets the maximum number of open links or -1 for unlimited.
-ldap.max_links = -1
-
-[mcrypt]
-; For more information about mcrypt settings see http://php.net/mcrypt-module-open
-
-; Directory where to load mcrypt algorithms
-; Default: Compiled in into libmcrypt (usually /usr/local/lib/libmcrypt)
-;mcrypt.algorithms_dir=
-
-; Directory where to load mcrypt modes
-; Default: Compiled in into libmcrypt (usually /usr/local/lib/libmcrypt)
-;mcrypt.modes_dir=
-
-[dba]
-;dba.default_handler=
-
-[opcache]
-; Determines if Zend OPCache is enabled
-;opcache.enable=0
-
-; Determines if Zend OPCache is enabled for the CLI version of PHP
-;opcache.enable_cli=0
-
-; The OPcache shared memory storage size.
-;opcache.memory_consumption=64
-
-; The amount of memory for interned strings in Mbytes.
-;opcache.interned_strings_buffer=4
-
-; The maximum number of keys (scripts) in the OPcache hash table.
-; Only numbers between 200 and 1000000 are allowed.
-;opcache.max_accelerated_files=2000
-
-; The maximum percentage of "wasted" memory until a restart is scheduled.
-;opcache.max_wasted_percentage=5
-
-; When this directive is enabled, the OPcache appends the current working
-; directory to the script key, thus eliminating possible collisions between
-; files with the same name (basename). Disabling the directive improves
-; performance, but may break existing applications.
-;opcache.use_cwd=1
-
-; When disabled, you must reset the OPcache manually or restart the
-; webserver for changes to the filesystem to take effect.
-;opcache.validate_timestamps=1
-
-; How often (in seconds) to check file timestamps for changes to the shared
-; memory storage allocation. ("1" means validate once per second, but only
-; once per request. "0" means always validate)
-;opcache.revalidate_freq=2
-
-; Enables or disables file search in include_path optimization
-;opcache.revalidate_path=0
-
-; If disabled, all PHPDoc comments are dropped from the code to reduce the
-; size of the optimized code.
-;opcache.save_comments=1
-
-; If enabled, a fast shutdown sequence is used for the accelerated code
-; Depending on the used Memory Manager this may cause some incompatibilities.
-;opcache.fast_shutdown=0
-
-; Allow file existence override (file_exists, etc.) performance feature.
-;opcache.enable_file_override=0
-
-; A bitmask, where each bit enables or disables the appropriate OPcache
-; passes
-;opcache.optimization_level=0xffffffff
-
-;opcache.inherited_hack=1
-;opcache.dups_fix=0
-
-; The location of the OPcache blacklist file (wildcards allowed).
-; Each OPcache blacklist file is a text file that holds the names of files
-; that should not be accelerated. The file format is to add each filename
-; to a new line. The filename may be a full path or just a file prefix
-; (i.e., /var/www/x  blacklists all the files and directories in /var/www
-; that start with 'x'). Line starting with a ; are ignored (comments).
-;opcache.blacklist_filename=
-
-; Allows exclusion of large files from being cached. By default all files
-; are cached.
-;opcache.max_file_size=0
-
-; Check the cache checksum each N requests.
-; The default value of "0" means that the checks are disabled.
-;opcache.consistency_checks=0
-
-; How long to wait (in seconds) for a scheduled restart to begin if the cache
-; is not being accessed.
-;opcache.force_restart_timeout=180
-
-; OPcache error_log file name. Empty string assumes "stderr".
-;opcache.error_log=
-
-; All OPcache errors go to the Web server log.
-; By default, only fatal errors (level 0) or errors (level 1) are logged.
-; You can also enable warnings (level 2), info messages (level 3) or
-; debug messages (level 4).
-;opcache.log_verbosity_level=1
-
-; Preferred Shared Memory back-end. Leave empty and let the system decide.
-;opcache.preferred_memory_model=
-
-; Protect the shared memory from unexpected writing during script execution.
-; Useful for internal debugging only.
-;opcache.protect_memory=0
-
-; Allows calling OPcache API functions only from PHP scripts which path is
-; started from specified string. The default "" means no restriction
-;opcache.restrict_api=
-
-; Mapping base of shared memory segments (for Windows only). All the PHP
-; processes have to map shared memory into the same address space. This
-; directive allows to manually fix the "Unable to reattach to base address"
-; errors.
-;opcache.mmap_base=
-
-; Enables and sets the second level cache directory.
-; It should improve performance when SHM memory is full, at server restart or
-; SHM reset. The default "" disables file based caching.
-;opcache.file_cache=
-
-; Enables or disables opcode caching in shared memory.
-;opcache.file_cache_only=0
-
-; Enables or disables checksum validation when script loaded from file cache.
-;opcache.file_cache_consistency_checks=1
-
-; Implies opcache.file_cache_only=1 for a certain process that failed to
-; reattach to the shared memory (for Windows only). Explicitly enabled file
-; cache is required.
-;opcache.file_cache_fallback=1
-
-; Enables or disables copying of PHP code (text segment) into HUGE PAGES.
-; This should improve performance, but requires appropriate OS configuration.
-;opcache.huge_code_pages=1
-
-; Validate cached file permissions.
-; opcache.validate_permission=0
-
-; Prevent name collisions in chroot'ed environment.
-; opcache.validate_root=0
-
-[curl]
-; A default value for the CURLOPT_CAINFO option. This is required to be an
-; absolute path.
-;curl.cainfo =
-
-[openssl]
-; The location of a Certificate Authority (CA) file on the local filesystem
-; to use when verifying the identity of SSL/TLS peers. Most users should
-; not specify a value for this directive as PHP will attempt to use the
-; OS-managed cert stores in its absence. If specified, this value may still
-; be overridden on a per-stream basis via the "cafile" SSL stream context
-; option.
-;openssl.cafile=
-
-; If openssl.cafile is not specified or if the CA file is not found, the
-; directory pointed to by openssl.capath is searched for a suitable
-; certificate. This value must be a correctly hashed certificate directory.
-; Most users should not specify a value for this directive as PHP will
-; attempt to use the OS-managed cert stores in its absence. If specified,
-; this value may still be overridden on a per-stream basis via the "capath"
-; SSL stream context option.
-;openssl.capath=
-
-; Local Variables:
-; tab-width: 4
-; End:
+max_execution_time = 180
+memory_limit = 100M
+mysql.connect_timeout = 1
+post_max_size = 100M
+session.save_path = /tmp
+upload_max_filesize = 100M

Info: Computing checksum on file /etc/php/7.0/cli/php.ini
Info: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/cli/php.ini]: Filebucketed /etc/php/7.0/cli/php.ini to puppet with sum 7486755facc6f6f0b7a7bf2ae2c523a9
Notice: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/cli/php.ini]/content: content changed '{md5}7486755facc6f6f0b7a7bf2ae2c523a9' to '{md5}acc9a5df3cf5399852ce7587f094cdf2'
Notice: /Stage[main]/Mediawiki::Php/File[/etc/php/7.0/cli/php.ini]/mode: mode changed '0644' to '0444'
Notice: /Stage[main]/Mediawiki::Mwrepl/File[/var/lib/hphpd]/ensure: created
Notice: /Stage[main]/Mediawiki::Mwrepl/File[/var/lib/hphpd/hphpd.ini]/ensure: defined content as '{md5}aec571e862046be4469dda5567b36616'
Notice: /Stage[main]/Packages::Google_perftools/Package[google-perftools]/ensure: created
Notice: /Stage[main]/Packages::Graphviz/Package[graphviz]/ensure: created
Notice: /Stage[main]/Packages::Gv/Package[gv]/ensure: created
Notice: /Stage[main]/Packages::Hhvm_dbg/Package[hhvm-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libc6_dbg/Package[libc6-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libcurl3_dbg/Package[libcurl3-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libevent_dbg/Package[libevent-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libgcc1_dbg/Package[libgcc1-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libjemalloc1_dbg/Package[libjemalloc1-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libldap_2.4_2_dbg/Package[libldap-2.4-2-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libmemcached_dbg/Package[libmemcached-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libpcre3_dbg/Package[libpcre3-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libsqlite3_0_dbg/Package[libsqlite3-0-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libxml2_dbg/Package[libxml2-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libxslt1_dbg/Package[libxslt1-dbg]/ensure: created
Notice: /Stage[main]/Packages::Libstdc__6_6_dbg/Package[libstdc++6-6-dbg]/ensure: created
Notice: /Stage[main]/Packages::Perf_tools_unstable/Package[perf-tools-unstable]/ensure: created
Notice: /Stage[main]/Hhvm::Debug/File[/usr/local/sbin/hhvm-dump-debug]/ensure: defined content as '{md5}78ca14ddb7c6661aae8219c89a5b7422'
Notice: /Stage[main]/Hhvm::Debug/File[/usr/local/bin/hhvmadm]/ensure: defined content as '{md5}847c3148fabf30f41234adcae31c03d7'
Notice: /Stage[main]/Hhvm::Debug/Package[dpkg-dev]/ensure: created
Notice: /Stage[main]/Hhvm::Debug/File[/usr/local/sbin/install-pkg-src]/ensure: defined content as '{md5}17bcb994d647268f58c03618046cb0b7'
Notice: /Stage[main]/Hhvm::Debug/File[/usr/local/sbin/hhvm-collect-heaps]/ensure: defined content as '{md5}7f961ec45739e5c97cd3f48b5898265e'
Notice: /Stage[main]/Hhvm::Debug/File[/usr/local/sbin/hhvm-diff-heaps]/ensure: defined content as '{md5}c763a26274e4364ba44bf95f4efe1616'
Notice: /Stage[main]/Packages::Liblua5.1_0_dbg/Package[liblua5.1-0-dbg]/ensure: created
Notice: /Stage[main]/Hhvm::Debug/Exec[/usr/local/sbin/install-pkg-src hhvm]/returns: executed successfully
Notice: /Stage[main]/Hhvm/Package[hhvm-luasandbox]/ensure: created
Info: /Stage[main]/Hhvm/Package[hhvm-luasandbox]: Scheduling refresh of Base::Service_unit[hhvm]
Notice: /Stage[main]/Hhvm/Package[hhvm-tidy]/ensure: created
Info: /Stage[main]/Hhvm/Package[hhvm-tidy]: Scheduling refresh of Base::Service_unit[hhvm]
Notice: /Stage[main]/Hhvm/Package[hhvm-wikidiff2]/ensure: created
Info: /Stage[main]/Hhvm/Package[hhvm-wikidiff2]: Scheduling refresh of Base::Service_unit[hhvm]
Notice: /Stage[main]/Hhvm/File[/etc/default/hhvm]/content: 
--- /etc/default/hhvm	2017-04-05 07:45:06.000000000 +0000
+++ /tmp/puppet-file20180530-17618-226330	2018-05-30 19:01:24.861194527 +0000
@@ -1,17 +1,9 @@
-# This is a configuration file for HHVM
+# Default file for HHVM
+# This file is managed by Puppet.
 
-## Configuration file location.
-## Default: "/etc/hhvm/server.ini"
-#CONFIG_FILE="/etc/hhvm/server.ini"
-
-## User to run the service as.
-## Default: "www-data"
-#RUN_AS_USER="www-data"
-#RUN_AS_GROUP="www-data"
+# Run the FastCGI server as this user.
+RUN_AS_USER="www-data"
+RUN_AS_GROUP="www-data
 
 ## Add additional arguments to the hhvm service start up that you can't put in CONFIG_FILE for some reason.
-## Default: ""
-## Examples:
-##   "-v Log.Level=Debug"                Enable debug log level
-##   "-v Server.DefaultDocument=app.php" Change the default document
-#ADDITIONAL_ARGS=""
+# ADDITIONAL_ARGS=

Info: Computing checksum on file /etc/default/hhvm
Info: /Stage[main]/Hhvm/File[/etc/default/hhvm]: Filebucketed /etc/default/hhvm to puppet with sum 0ab40316d009ce8304461fb70dc1d5c7
Notice: /Stage[main]/Hhvm/File[/etc/default/hhvm]/content: content changed '{md5}0ab40316d009ce8304461fb70dc1d5c7' to '{md5}cbb4d2809da611167721532d07abc1bb'
Notice: /Stage[main]/Hhvm/File[/etc/default/hhvm]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Hhvm/File[/etc/default/hhvm]: Scheduling refresh of Service[hhvm]
Info: /Stage[main]/Hhvm/File[/etc/default/hhvm]: Scheduling refresh of Service[hhvm]
Notice: /Stage[main]/Hhvm/File[/usr/local/bin/check-hhvm-stacktraces]/ensure: defined content as '{md5}927586303748cf091c58a6366c2fb008'
Info: Base::Service_unit[hhvm]: Scheduling refresh of Exec[systemd reload for hhvm]
Info: Base::Service_unit[hhvm]: Scheduling refresh of Service[hhvm]
Notice: /Stage[main]/Hhvm/File[/etc/hhvm]/mode: mode changed '0755' to '0555'
Notice: /Stage[main]/Hhvm/File[/usr/local/bin/hhvm-needs-restart]/ensure: defined content as '{md5}3d651abcb0525f6e416772e7d209d52e'
Notice: /Stage[main]/Hhvm/File[/var/log/hhvm]/ensure: created
Notice: /Stage[main]/Hhvm/File[/etc/logrotate.d/hhvm]/ensure: defined content as '{md5}cbb833863457e220cf2c27b1e3fa3b66'
Notice: /Stage[main]/Hhvm/File[/run/hhvm]/ensure: created
Notice: /Stage[main]/Hhvm/File[/var/cache/hhvm/cli.hhbc.sq3]/ensure: created
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/php.ini]/content: 
--- /etc/hhvm/php.ini	2017-04-05 07:45:06.000000000 +0000
+++ /tmp/puppet-file20180530-17618-1otxf37	2018-05-30 19:01:25.325200817 +0000
@@ -1,7 +1,30 @@
-; php options
-
-; hhvm specific 
-hhvm.log.level = Warning
-hhvm.log.always_log_unhandled_exceptions = true
-hhvm.log.runtime_error_reporting_level = 8191
+curl.namedPools = cirrus-eqiad,cirrus-codfw
+date.timezone = UTC
+hhvm.debug.core_dump_report_directory = /var/log/hhvm
+hhvm.dynamic_extension_path = /usr/lib/x86_64-linux-gnu/hhvm/extensions/20150212
+hhvm.dynamic_extensions[luasandbox.so] = luasandbox.so
+hhvm.dynamic_extensions[tidy.so] = tidy.so
+hhvm.dynamic_extensions[wikidiff2.so] = wikidiff2.so
+hhvm.enable_obj_destruct_call = true
+hhvm.enable_zend_compat = true
+hhvm.hack.lang.iconv_ignore_correct = true
+hhvm.jit = false
+hhvm.jit_pseudomain = false
+hhvm.log.header = true
+hhvm.log.level = Error
+hhvm.log.native_stack_trace = true
+hhvm.log.use_syslog = true
+hhvm.mysql.connect_timeout = 3000
+hhvm.mysql.slow_query_threshold = 10000
 hhvm.mysql.typed_results = false
+hhvm.perf_pid_map = false
+hhvm.pid_file = 
+hhvm.repo.central.path = /var/cache/hhvm/cli.hhbc.sq3
+hhvm.repo.local.mode = --
+hhvm.resource_limit.core_file_size = 8589934592
+hhvm.server.apc.expire_on_sets = true
+hhvm.server.apc.ttl_limit = 172800
+hhvm.server.light_process_count = 5
+hhvm.server.light_process_file_prefix = /var/tmp/hhvm
+hhvm.timeouts_use_wall_time = true
+include_path = .:/usr/share/php

Info: Computing checksum on file /etc/hhvm/php.ini
Info: /Stage[main]/Hhvm/File[/etc/hhvm/php.ini]: Filebucketed /etc/hhvm/php.ini to puppet with sum 907676def0e613cabe1724b10ec5d82b
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/php.ini]/content: content changed '{md5}907676def0e613cabe1724b10ec5d82b' to '{md5}f13f0f43e0430338388042eb202bb481'
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/php.ini]/mode: mode changed '0644' to '0444'
Notice: /Stage[main]/Hhvm/File[/var/cache/hhvm/fcgi.hhbc.sq3]/ensure: created
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]/content: 
--- /etc/hhvm/server.ini	2017-04-05 07:45:06.000000000 +0000
+++ /tmp/puppet-file20180530-17618-x38zzq	2018-05-30 19:01:25.345201089 +0000
@@ -1,12 +1,54 @@
-; php options
-
-; hhvm specific 
-
+auto_prepend_file = /srv/mediawiki/wmf-config/PhpAutoPrepend-labs.php
+curl.namedPools = cirrus-eqiad,cirrus-codfw
+curl.namedPools.cirrus-codfw.size = 20
+curl.namedPools.cirrus-eqiad.size = 20
+date.timezone = UTC
+hhvm.admin_server.port = 9001
+hhvm.debug.core_dump_report_directory = /var/log/hhvm
+hhvm.dynamic_extension_path = /usr/lib/x86_64-linux-gnu/hhvm/extensions/20150212
+hhvm.dynamic_extensions[luasandbox.so] = luasandbox.so
+hhvm.dynamic_extensions[tidy.so] = tidy.so
+hhvm.dynamic_extensions[wikidiff2.so] = wikidiff2.so
+hhvm.enable_obj_destruct_call = true
+hhvm.enable_reusable_tc = true
+hhvm.enable_zend_compat = true
+hhvm.error_handling.call_user_handler_on_fatals = true
+hhvm.hack.lang.iconv_ignore_correct = true
+hhvm.jit = true
+hhvm.jit_a_cold_size = 60555264.0
+hhvm.jit_a_frozen_size = 60555264.0
+hhvm.jit_a_size = 183500800
+hhvm.jit_pseudomain = false
+hhvm.log.header = true
+hhvm.log.level = Error
+hhvm.log.native_stack_trace = true
+hhvm.log.use_syslog = true
+hhvm.mysql.connect_timeout = 3000
+hhvm.mysql.slow_query_threshold = 10000
+hhvm.mysql.typed_results = false
+hhvm.pcre_cache_type = lru
+hhvm.perf_pid_map = true
+hhvm.pid_file = 
+hhvm.repo.central.path = /var/cache/hhvm/fcgi.hhbc.sq3
+hhvm.resource_limit.core_file_size = 8589934592
+hhvm.server.apc.expire_on_sets = true
+hhvm.server.apc.ttl_limit = 172800
+hhvm.server.dns_cache.enable = true
+hhvm.server.dns_cache.ttl = 300
+hhvm.server.error_document404 = /srv/mediawiki/errorpages/404.php
+hhvm.server.error_document500 = /srv/mediawiki/errorpages/hhvm-fatal-error.php
+hhvm.server.gzip_compression_level = 0
+hhvm.server.ip = 127.0.0.1
+hhvm.server.light_process_count = 5
+hhvm.server.light_process_file_prefix = /var/tmp/hhvm
 hhvm.server.port = 9000
+hhvm.server.request_init_document = /srv/mediawiki/wmf-config/HHVMRequestInit.php
+hhvm.server.source_root = /srv/mediawiki/docroot
+hhvm.server.stat_cache = true
+hhvm.server.thread_count = 32
 hhvm.server.type = fastcgi
-hhvm.server.default_document = index.php
-hhvm.server.source_root=/var/www/html
-
-hhvm.log.use_log_file = false
-hhvm.log.use_syslog = true
-hhvm.repo.central.path = /var/cache/hhvm/hhvm.hhbc
+hhvm.timeouts_use_wall_time = true
+hhvm.xenon.period = 600
+include_path = .:/usr/share/php
+max_execution_time = 60
+memory_limit = 500M

Info: Computing checksum on file /etc/hhvm/server.ini
Info: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]: Filebucketed /etc/hhvm/server.ini to puppet with sum e0fbb8ecf04ab0de9b7d9e0b7fae514e
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]/content: content changed '{md5}e0fbb8ecf04ab0de9b7d9e0b7fae514e' to '{md5}2e08ae7b87e36cce87231a037bab49eb'
Notice: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]: Scheduling refresh of Service[hhvm]
Info: /Stage[main]/Hhvm/File[/etc/hhvm/server.ini]: Scheduling refresh of Service[hhvm]
Notice: /Stage[main]/Hhvm/File[/tmp/heaps]/ensure: created
Notice: /Stage[main]/Hhvm/Cron[tidy_perf_maps]/ensure: created
Notice: /Stage[main]/Profile::Mediawiki::Hhvm/File[/usr/local/bin/furl]/ensure: defined content as '{md5}1de9f370767caf1124b18a42a1a460a7'
Notice: /Stage[main]/Profile::Mediawiki::Hhvm/File[/usr/local/sbin/hhvm_cleanup_cache]/ensure: defined content as '{md5}1dcf22c3935381c0a24820dd651d7443'
Notice: /Stage[main]/Mediawiki/File[/etc/firejail/mediawiki-imagemagick.profile]/ensure: defined content as '{md5}62af71b1bfbe5e56751b3c347459d774'
Notice: /Stage[main]/Mediawiki/File[/usr/local/bin/mediawiki-firejail-convert]/ensure: defined content as '{md5}f6c00ee74142a2af79d5b4fd641830ec'
Notice: /Stage[main]/Mediawiki/File[/etc/firejail/mediawiki-converters.profile]/ensure: defined content as '{md5}62af71b1bfbe5e56751b3c347459d774'
Notice: /Stage[main]/Mediawiki/File[/usr/local/bin/mediawiki-firejail-ghostscript]/ensure: defined content as '{md5}08c371f36cb607a014a43b59b7507ce4'
Notice: /Stage[main]/Mediawiki/File[/var/log/mediawiki]/ensure: created
Notice: /Stage[main]/Mediawiki/File[/root/decommission_appserver]/ensure: defined content as '{md5}ceb4c7cbd959f0d9caec85879fd65d78'
Notice: /Stage[main]/Packages::Prometheus_nutcracker_exporter/Package[prometheus-nutcracker-exporter]/ensure: created
Notice: /Stage[main]/Packages::Nutcracker/Package[nutcracker]/ensure: created
Notice: /Stage[main]/Nutcracker/File[/etc/nutcracker/nutcracker.yml]/ensure: defined content as '{md5}4d30c6c3c22d197bbb8e0b536c425ad6'
Notice: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]/content: 
--- /etc/default/nutcracker	2015-07-29 06:06:07.000000000 +0000
+++ /tmp/puppet-file20180530-17618-p0q2tf	2018-05-30 19:01:31.469284158 +0000
@@ -1,2 +1,4 @@
-# extra daemon options; see nutcracker --help
-DAEMON_OPTS=""
+# Default settings for nutcracker.
+# This file is managed by Puppet.
+
+DAEMON_OPTS="--verbose=4 --mbuf-size=65536"

Info: Computing checksum on file /etc/default/nutcracker
Info: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]: Filebucketed /etc/default/nutcracker to puppet with sum eb6091757de19a069a0cdfa67b7d58ac
Notice: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]/content: content changed '{md5}eb6091757de19a069a0cdfa67b7d58ac' to '{md5}4938512fd04a02dfca6369c19bb97dcf'
Notice: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]: Scheduling refresh of Service[nutcracker]
Info: /Stage[main]/Nutcracker/File[/etc/default/nutcracker]: Scheduling refresh of Service[nutcracker]
Notice: /Stage[main]/Nutcracker/File[/etc/init/nutcracker.override]/ensure: defined content as '{md5}3f249768f5d2a6eca0fc5db4415ca50c'
Info: /Stage[main]/Nutcracker/File[/etc/init/nutcracker.override]: Scheduling refresh of Service[nutcracker]
Notice: /Stage[main]/Nutcracker/Service[nutcracker]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Nutcracker/Service[nutcracker]: Unscheduling refresh on Service[nutcracker]
Notice: /Stage[main]/Packages::Python_socks/Package[python-socks]/ensure: created
Notice: /Stage[main]/Etcd::Client::Globalconfig/File[/etc/etcd]/ensure: created
Notice: /Stage[main]/Conftool::Config/File[/etc/conftool]/ensure: created
Notice: /Stage[main]/Conftool::Config/File[/etc/conftool/config.yaml]/ensure: defined content as '{md5}7a8c2e0324366a8fb43b4794bb4cda3c'
Notice: /Stage[main]/Profile::Conftool::Client/File[/etc/conftool/schema.yaml]/ensure: defined content as '{md5}2d6332b14b94209e4e017870fd1ddffd'
Notice: /Stage[main]/Profile::Conftool::Client/File[/etc/conftool/json-schema/]/ensure: created
Notice: /Stage[main]/Profile::Conftool::Client/File[/etc/conftool/json-schema/mediawiki-config]/ensure: created
Notice: /Stage[main]/Profile::Conftool::Client/File[/etc/conftool/json-schema/mediawiki-config/db_readonly.schema]/ensure: defined content as '{md5}3969fa9a701182299fed9e597fa6db18'
Notice: /Stage[main]/Profile::Conftool::Client/File[/etc/conftool/json-schema/mediawiki-config/wmf_datacenter.schema]/ensure: defined content as '{md5}9ad163f2574b05e11e81a7b40005647e'
Notice: /Stage[main]/Scap::Master/Package[dsh]/ensure: created
Notice: /Stage[main]/Scap::Master/Package[python-service-checker]/ensure: created
Notice: /Stage[main]/Scap::Master/File[/usr/local/bin/scap-master-sync]/ensure: defined content as '{md5}3e1b52e700ad8b4433675df6da750de7'
Notice: /Stage[main]/Confd/Package[confd]/ensure: created
Notice: /Stage[main]/Confd/File[/etc/confd]/ensure: created
Notice: /Stage[main]/Confd/File[/etc/confd/conf.d]/ensure: created
Notice: /Stage[main]/Confd/File[/etc/confd/templates]/ensure: created
Notice: /Stage[main]/Confd/File[/usr/local/bin/confd-lint-wrap]/ensure: defined content as '{md5}ce6e104d3de5b6768ada7e0f7741ed09'
Notice: /Stage[main]/Confd/File[/usr/local/lib/nagios/plugins/check_confd_lint]/ensure: defined content as '{md5}1da2e4495621f6ca914099b1d24d44e8'
Notice: /Stage[main]/Confd/File[/usr/local/lib/nagios/plugins/check_confd_template]/ensure: defined content as '{md5}a5981da6d39fac1e932a11b5a82cfe26'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh]/mode: mode changed '0755' to '0555'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/group]/mode: mode changed '0755' to '0555'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/group/scap-proxies]/ensure: defined content as '{md5}d41d8cd98f00b204e9800998ecf8427e'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/group/scap-masters]/ensure: defined content as '{md5}be0d8c59467b1b51fb6acc59fb01b5ed'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/dsh.conf]/content: 
--- /etc/dsh/dsh.conf	2017-04-08 21:58:21.000000000 +0000
+++ /tmp/puppet-file20180530-17618-wbb9rt	2018-05-30 19:01:51.505556644 +0000
@@ -2,10 +2,11 @@
 #default configuration file for dsh.
   # suppled as part of dancer's shell
 
-verbose = 0 
-
- remoteshell =rsh  
- showmachinenames = 0
+verbose = 0
+remoteshell =ssh
+#remoteshellopt="-o ConnectTimeout=10 -o SetupTimeout=10"
+remoteshellopt=-o ConnectTimeout=10
+showmachinenames = 0
 waitshell=1  # whether to wait for execution
 
 #remoteshellopt=...

Info: Computing checksum on file /etc/dsh/dsh.conf
Info: /Stage[main]/Scap::Dsh/File[/etc/dsh/dsh.conf]: Filebucketed /etc/dsh/dsh.conf to puppet with sum 85ac0125dd2d63b98839acf117733980
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/dsh.conf]/content: content changed '{md5}85ac0125dd2d63b98839acf117733980' to '{md5}618cf3fd8c81615800b5eb245f26849b'
Notice: /Stage[main]/Scap::Dsh/File[/etc/dsh/dsh.conf]/mode: mode changed '0644' to '0444'
Notice: /Stage[main]/Packages::Python3_yaml/Package[python3-yaml]/ensure: created
Notice: /Stage[main]/Keyholder/Group[keyholder]/ensure: created
Notice: /Stage[main]/Keyholder/User[keyholder]/ensure: created
Notice: /Stage[main]/Keyholder/File[/run/keyholder]/ensure: created
Notice: /Stage[main]/Keyholder/File[/etc/keyholder.d]/ensure: created
Notice: /Stage[main]/Keyholder/File[/etc/keyholder-auth.d]/ensure: created
Notice: /Stage[main]/Keyholder/File[/usr/local/bin/ssh-agent-proxy]/ensure: defined content as '{md5}33139dd38102b8969fb1e415e0aae27c'
Info: /Stage[main]/Keyholder/File[/usr/local/bin/ssh-agent-proxy]: Scheduling refresh of Service[keyholder-agent]
Notice: /Stage[main]/Keyholder/File[/etc/keyholder-auth.d/keyholder.conf]/ensure: defined content as '{md5}05affd2ec49468005a7256291777a60e'
Notice: /Stage[main]/Keyholder/File[/usr/local/sbin/keyholder]/ensure: defined content as '{md5}7d3a0059bfca24d331da1aa13d3e386f'
Info: /Stage[main]/Keyholder/File[/usr/local/sbin/keyholder]: Scheduling refresh of Service[keyholder-proxy]
Notice: /Stage[main]/Keyholder::Monitoring/File[/usr/lib/nagios/plugins/check_keyholder]/ensure: defined content as '{md5}59bba2deebd48bd8a4f7ad4521dee794'
Notice: /Stage[main]/Releases::Reprepro::Upload/Group[releases]/ensure: created
Notice: /Stage[main]/Releases::Reprepro::Upload/User[releases]/ensure: created
Notice: /Stage[main]/Releases::Reprepro::Upload/File[/var/lib/releases/.ssh]/ensure: created
Notice: /Stage[main]/Releases::Reprepro::Upload/File[/var/lib/releases/.ssh/id_rsa.releases1001.eqiad.wmnet]/ensure: defined content as '{md5}d41d8cd98f00b204e9800998ecf8427e'
Notice: /Stage[main]/Releases::Reprepro::Upload/File[/var/lib/releases/.ssh/config]/ensure: defined content as '{md5}044eaf1c9b8d68bf60a7f5b6d5975855'
Notice: /Stage[main]/Releases::Reprepro::Upload/File[/var/lib/releases/.dput.cf]/ensure: defined content as '{md5}63145e4a7d8287edcefa32f69de793d8'
Notice: /Stage[main]/Releases::Reprepro::Upload/Package[dput]/ensure: created
Notice: /Stage[main]/Releases::Reprepro::Upload/File[/usr/local/bin/deb-upload]/ensure: defined content as '{md5}4bd6ffe9a789a3065eeca1fe567f6e09'
Notice: /Stage[main]/Releases::Reprepro::Upload/Package[unzip]/ensure: created
Notice: /Stage[main]/Helm/Package[helm]/ensure: created
Notice: /Stage[main]/Helm/Package[kubernetes-client]/ensure: created
Notice: /Stage[main]/Helm/Group[helm]/ensure: created
Notice: /Stage[main]/Helm/User[helm]/ensure: created
Notice: /Stage[main]/Helm/File[/etc/helm]/ensure: created
Notice: /Stage[main]/Helm/Exec[helm-init]/returns: executed successfully
Notice: /Stage[main]/Helm/Cron[helm-repo-update]/ensure: created
Notice: /Stage[main]/Profile::Kubernetes::Deployment_server/File[/usr/local/bin/scap-helm]/ensure: defined content as '{md5}a3dc9ce5cb489e52c76bb12519238af9'
Notice: /Stage[main]/Profile::Kubernetes::Deployment_server/File[/etc/kubernetes]/mode: mode changed '0755' to '0555'
Notice: /Stage[main]/Base::Firewall/Ferm::Conf[defs]/File[/etc/ferm/conf.d/00_defs]/ensure: defined content as '{md5}2a884f210d6e57000ddfab0c6c574db3'
Info: /Stage[main]/Base::Firewall/Ferm::Conf[defs]/File[/etc/ferm/conf.d/00_defs]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/Ferm::Conf[main]/File[/etc/ferm/conf.d/00_main]/ensure: defined content as '{md5}31835a68d4305c91a1acf38e37eb827d'
Info: /Stage[main]/Base::Firewall/Ferm::Conf[main]/File[/etc/ferm/conf.d/00_main]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/Ferm::Rule[bastion-ssh]/File[/etc/ferm/conf.d/10_bastion-ssh]/ensure: defined content as '{md5}96b0e1a82b89be89ff332b32f3e768fc'
Info: /Stage[main]/Base::Firewall/Ferm::Rule[bastion-ssh]/File[/etc/ferm/conf.d/10_bastion-ssh]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/Ferm::Rule[monitoring-all]/File[/etc/ferm/conf.d/10_monitoring-all]/ensure: defined content as '{md5}925744ab53e15d5dfda3815b42cd3673'
Info: /Stage[main]/Base::Firewall/Ferm::Rule[monitoring-all]/File[/etc/ferm/conf.d/10_monitoring-all]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/Ferm::Service[ssh-from-cumin-masters]/File[/etc/ferm/conf.d/10_ssh-from-cumin-masters]/ensure: defined content as '{md5}4ca567c959ee80ebc1349dbc5c63a2cc'
Info: /Stage[main]/Base::Firewall/Ferm::Service[ssh-from-cumin-masters]/File[/etc/ferm/conf.d/10_ssh-from-cumin-masters]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Base::Firewall/Sudo::User[nagios_check_ferm]/File[/etc/sudoers.d/nagios_check_ferm]/ensure: defined content as '{md5}f8cef3fc64ddcf933cf13ffaf787ab6c'
Info: /Stage[main]/Base::Firewall/Sudo::User[nagios_check_ferm]/File[/etc/sudoers.d/nagios_check_ferm]: Scheduling refresh of Exec[sudo_user_nagios_check_ferm_linting]
Notice: /Stage[main]/Base::Firewall/Sudo::User[nagios_check_ferm]/Exec[sudo_user_nagios_check_ferm_linting]: Triggered 'refresh' from 1 events
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[3d2png/deploy]/Scap_source[3d2png/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[cassandra/logstash-logback-encoder]/Scap_source[cassandra/logstash-logback-encoder]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[cassandra/metrics-collector]/Scap_source[cassandra/metrics-collector]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[cpjobqueue/deploy]/Scap_source[cpjobqueue/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[dumps/dumps]/Scap_source[dumps/dumps]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[eventlogging/analytics]/Scap_source[eventlogging/analytics]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[eventlogging/eventbus]/Scap_source[eventlogging/eventbus]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[eventstreams/deploy]/Scap_source[eventstreams/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[iegreview/iegreview]/Scap_source[iegreview/iegreview]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[jobrunner/jobrunner]/Scap_source[jobrunner/jobrunner]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[netbox/deploy]/Scap_source[netbox/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[phabricator/deployment]/Scap_source[phabricator/deployment]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[prometheus/jmx_exporter]/Scap_source[prometheus/jmx_exporter]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[recommendation-api/deploy]/Scap_source[recommendation-api/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[restbase/deploy]/Scap_source[restbase/deploy]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: Execution of '/usr/bin/scap deploy --init' returned 1: 
Error: /Stage[main]/Profile::Mediawiki::Deployment::Server/Scap::Source[scholarships/scholarships]/Scap_source[scholarships/scholarships]/ensure: change from absent to present failed: Execution of '/usr/bin/scap deploy --init' returned 1: 
Notice: /Stage[main]/Apache::Mod::Status/Apache::Conf[server_status]/File[/etc/apache2/conf-available/50-server-status.conf]/ensure: defined content as '{md5}d0e436f428fe56c243c2ab63582b7030'
Info: /Stage[main]/Apache::Mod::Status/Apache::Conf[server_status]/File[/etc/apache2/conf-available/50-server-status.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache::Mod::Status/Apache::Conf[server_status]/File[/etc/apache2/conf-enabled/50-server-status.conf]/ensure: created
Info: /Stage[main]/Apache::Mod::Status/Apache::Conf[server_status]/File[/etc/apache2/conf-enabled/50-server-status.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache::Mpm/Apache::Mod_conf[mpm_event]/Exec[ensure_absent_mod_mpm_event]/returns: executed successfully
Info: /Stage[main]/Apache::Mpm/Apache::Mod_conf[mpm_event]/Exec[ensure_absent_mod_mpm_event]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache::Mpm/Apache::Mod_conf[mpm_prefork]/Exec[ensure_present_mod_mpm_prefork]/returns: executed successfully
Info: /Stage[main]/Apache::Mpm/Apache::Mod_conf[mpm_prefork]/Exec[ensure_present_mod_mpm_prefork]: Scheduling refresh of Service[apache2]
Info: Apache::Mod_conf[mpm_prefork]: Scheduling refresh of Exec[apache2_test_config_and_restart]
Notice: /Stage[main]/Apache/Exec[apache2_test_config_and_restart]: Triggered 'refresh' from 1 events
Info: /Stage[main]/Apache/Exec[apache2_test_config_and_restart]: Scheduling refresh of Exec[apache2_hard_restart]
Notice: /Stage[main]/Apache/Exec[apache2_hard_restart]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Apache/Apache::Conf[defaults]/File[/etc/apache2/conf-available/00-defaults.conf]/ensure: defined content as '{md5}cb4708de5aef2a292badee670a4386ef'
Info: /Stage[main]/Apache/Apache::Conf[defaults]/File[/etc/apache2/conf-available/00-defaults.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/Apache::Conf[defaults]/File[/etc/apache2/conf-enabled/00-defaults.conf]/ensure: created
Info: /Stage[main]/Apache/Apache::Conf[defaults]/File[/etc/apache2/conf-enabled/00-defaults.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Ferm::Service[rsyncd_scap_master]/File[/etc/ferm/conf.d/10_rsyncd_scap_master]/ensure: defined content as '{md5}73783aa18dc8b7c18081f659bfba09ba'
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Ferm::Service[rsyncd_scap_master]/File[/etc/ferm/conf.d/10_rsyncd_scap_master]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Ferm::Service[http_deployment_server]/File[/etc/ferm/conf.d/10_http_deployment_server]/ensure: defined content as '{md5}c49ddd9c919386c0901f306e6cf4e9c4'
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Ferm::Service[http_deployment_server]/File[/etc/ferm/conf.d/10_http_deployment_server]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Git_merge[mediawiki_config]/File[check_mediawiki_config_needs_merge]/ensure: defined content as '{md5}6a7ad947f2fac5eefc5e5f934937502c'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Git_merge[mediawiki_config]/File[sudo_nagios_mediawiki_config]/ensure: defined content as '{md5}10b95f3b2894e2171f4c203c9fd522ad'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Bad_directory_owner[/srv/mediawiki-staging]/File[/usr/local/lib/nagios/plugins/check_srv_mediawiki-staging-bad-owner]/ensure: defined content as '{md5}cdb521c881c501f3713f0057a4c12aeb'
Notice: /Stage[main]/Deployment::Rsync/Rsync::Server::Module[trebuchet_server]/File[/etc/rsync.d/frag-trebuchet_server]/ensure: defined content as '{md5}77aa3aab7cb5ddb3d5630af01ac5e4e0'
Info: /Stage[main]/Deployment::Rsync/Rsync::Server::Module[trebuchet_server]/File[/etc/rsync.d/frag-trebuchet_server]: Scheduling refresh of Exec[compile fragments]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Motd::Script[inactive_warning]/File[/etc/update-motd.d/01-inactive-warning]/ensure: defined content as '{md5}8af186bad5cccafaeac1d72df6750be1'
Notice: /Stage[main]/Mediawiki::Cgroup/Base::Service_unit[mw-cgroup]/File[/lib/systemd/system/mw-cgroup.service]/ensure: defined content as '{md5}b8686a85fe33beb9bc7c93986080f303'
Info: /Stage[main]/Mediawiki::Cgroup/Base::Service_unit[mw-cgroup]/File[/lib/systemd/system/mw-cgroup.service]: Scheduling refresh of Exec[systemd reload for mw-cgroup]
Notice: /Stage[main]/Mediawiki::Cgroup/Base::Service_unit[mw-cgroup]/Exec[systemd reload for mw-cgroup]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Mediawiki::Cgroup/Base::Service_unit[mw-cgroup]/Service[mw-cgroup]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Mediawiki::Cgroup/Base::Service_unit[mw-cgroup]/Service[mw-cgroup]: Unscheduling refresh on Service[mw-cgroup]
Notice: Augeas[grub2 cgroup_enable=memory](provider=augeas): 
--- /etc/default/grub	2018-05-30 18:33:26.602380000 +0000
+++ /etc/default/grub.augnew	2018-05-30 19:03:16.826727433 +0000
@@ -1,4 +1,4 @@
-GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0"
+GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0 cgroup_enable=memory"
 GRUB_TIMEOUT=0
 GRUB_SERIAL_COMMAND="serial"
 GRUB_DISABLE_RECOVERY=True

Notice: /Stage[main]/Mediawiki::Cgroup/Grub::Bootparam[cgroup_enable]/Augeas[grub2 cgroup_enable=memory]/returns: executed successfully
Info: /Stage[main]/Mediawiki::Cgroup/Grub::Bootparam[cgroup_enable]/Augeas[grub2 cgroup_enable=memory]: Scheduling refresh of Exec[update-grub]
Notice: Augeas[grub2 swapaccount=1](provider=augeas): 
--- /etc/default/grub	2018-05-30 19:03:16.874728096 +0000
+++ /etc/default/grub.augnew	2018-05-30 19:03:16.906728538 +0000
@@ -1,4 +1,4 @@
-GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0 cgroup_enable=memory"
+GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0 cgroup_enable=memory swapaccount=1"
 GRUB_TIMEOUT=0
 GRUB_SERIAL_COMMAND="serial"
 GRUB_DISABLE_RECOVERY=True

Notice: /Stage[main]/Mediawiki::Cgroup/Grub::Bootparam[swapaccount]/Augeas[grub2 swapaccount=1]/returns: executed successfully
Info: /Stage[main]/Mediawiki::Cgroup/Grub::Bootparam[swapaccount]/Augeas[grub2 swapaccount=1]: Scheduling refresh of Exec[update-grub]
Notice: /Stage[main]/Grub/Exec[update-grub]: Triggered 'refresh' from 2 events
Notice: /Stage[main]/Mediawiki::Users/Ssh::Userkey[mwdeploy]/File[/etc/ssh/userkeys/mwdeploy]/ensure: defined content as '{md5}09332337c75847a02cb6d5f78b8be676'
Notice: /Stage[main]/Mediawiki::Users/Sudo::User[mwdeploy]/File[/etc/sudoers.d/mwdeploy]/ensure: defined content as '{md5}ac53aba89587a8ffe17310157b8e137c'
Info: /Stage[main]/Mediawiki::Users/Sudo::User[mwdeploy]/File[/etc/sudoers.d/mwdeploy]: Scheduling refresh of Exec[sudo_user_mwdeploy_linting]
Notice: /Stage[main]/Mediawiki::Users/Sudo::User[mwdeploy]/Exec[sudo_user_mwdeploy_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Mediawiki::Users/Ssh::Userkey[pybal-check]/File[/etc/ssh/userkeys/pybal-check]/ensure: defined content as '{md5}2110b1ed8c6be60a04b11b7c84dd1c56'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/logstash_checker.py]/ensure: defined content as '{md5}69f5ebf7d9343f162c59b3b55feb3475'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/dologmsg]/ensure: defined content as '{md5}178df7dac974559d8dfd1cec8811f7df'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/mwgrep]/ensure: defined content as '{md5}ce3efc24a08f99ad2b5b4eb1b3148264'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/foreachwiki]/ensure: defined content as '{md5}87080deeef4c7a0edf41d708f978f858'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/foreachwikiindblist]/ensure: defined content as '{md5}6d08695c8e9f9e327ffc9e3a8a5f97cf'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/expanddblist]/ensure: defined content as '{md5}00c50a5a6b22bf6afd80fc9c88b9e998'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/mwscript]/ensure: defined content as '{md5}c6e6822773874d6e499e1fd9c0c066b9'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/mwscriptwikiset]/ensure: defined content as '{md5}8b82c853ab93b3db26754eaee055d764'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/purge-varnish]/ensure: defined content as '{md5}f82e3288e506f2a33ed048dca0eb9e9f'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/set-group-write]/ensure: defined content as '{md5}0b221c936b5411b97933408d2810d903'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/sql]/ensure: defined content as '{md5}045d216e0228511315999e34e7077cc8'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/sqldump]/ensure: defined content as '{md5}c012d29b8c726ff445af1fa4cdbadaa2'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/sbin/set-group-write2]/ensure: defined content as '{md5}135bd167efa05e59b27a215b8cdb8031'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/share/man/man1]/ensure: created
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/share/man/man1/dologmsg.1]/ensure: defined content as '{md5}dc7dda46f03d243b2fcc2ca252b62c2f'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/share/man/man1/foreachwiki.1]/ensure: defined content as '{md5}b6af0720ff39dadb052abfba71c7ab22'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/share/man/man1/set-group-write.1]/ensure: defined content as '{md5}00b4200a95d52982e8707c772297eb12'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/share/man/man1/set-group-write2.1]/ensure: defined content as '{md5}7e9ae7996afc4f5098bc7b4279892a21'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/bin/sudo-withagent]/ensure: defined content as '{md5}8f3e0a6c5ca03df80695d98d89f76e91'
Notice: /Stage[main]/Scap::Scripts/File[/usr/local/lib/mw-deployment-vars.sh]/ensure: defined content as '{md5}ffc16687ea3d977e488920380c071ed0'
Notice: /Stage[main]/Mediawiki::Mwrepl/File[/usr/local/bin/mwrepl]/ensure: defined content as '{md5}1d5c4e478787b5d861dc4ca8368cafb0'
Notice: /Stage[main]/Scap::L10nupdate/File[/home/l10nupdate]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/File[/usr/local/bin/l10nupdate]/ensure: defined content as '{md5}0428fcc434fe202045a6dcfe995c3ab1'
Notice: /Stage[main]/Scap::L10nupdate/File[/usr/local/bin/l10nupdate-1]/ensure: defined content as '{md5}ff56b2af3a769d49332a945011ebaffb'
Notice: /Stage[main]/Scap::L10nupdate/File[/home/l10nupdate/.gitconfig]/ensure: defined content as '{md5}bdda51dab3fe7df8253f0d0e2a9f80ba'
Notice: /Stage[main]/Scap::L10nupdate/File[/var/log/l10nupdatelog]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/File[/var/lib/l10nupdate]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/File[/var/lib/l10nupdate/caches]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/File[/var/lib/l10nupdate/mediawiki]/ensure: created
Notice: /Stage[main]/Mediawiki::Syslog/Rsyslog::Conf[mediawiki]/File[/etc/rsyslog.d/40-mediawiki.conf]/ensure: defined content as '{md5}77e85830bd47aa99663f9048b2d4f629'
Info: /Stage[main]/Mediawiki::Syslog/Rsyslog::Conf[mediawiki]/File[/etc/rsyslog.d/40-mediawiki.conf]: Scheduling refresh of Service[rsyslog]
Notice: /Stage[main]/Mediawiki::Packages::Php7/Apt::Pin[php-wikidiff2]/File[/etc/apt/preferences.d/php_wikidiff2.pref]/ensure: defined content as '{md5}e72312dd6734f091e199cd55bb4adee7'
Info: /Stage[main]/Mediawiki::Packages::Php7/Apt::Pin[php-wikidiff2]/File[/etc/apt/preferences.d/php_wikidiff2.pref]: Scheduling refresh of Exec[apt-get update]
Notice: /Stage[main]/Apt/Exec[apt-get update]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Mediawiki::Packages::Php7/Package[php-wikidiff2]/ensure: created
Notice: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/File[/etc/systemd/system/hhvm.service.d]/ensure: created
Notice: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/File[/etc/systemd/system/hhvm.service.d/puppet-override.conf]/ensure: defined content as '{md5}19e56f6549e66ae937e219257f12f4a2'
Info: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/File[/etc/systemd/system/hhvm.service.d/puppet-override.conf]: Scheduling refresh of Exec[systemd reload for hhvm]
Notice: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/Exec[systemd reload for hhvm]: Triggered 'refresh' from 2 events
Notice: /Stage[main]/Hhvm/Rsyslog::Conf[hhvm]/File[/etc/rsyslog.d/20-hhvm.conf]/ensure: defined content as '{md5}a34c6fcc192bbd4ac940e688d84ae813'
Info: /Stage[main]/Hhvm/Rsyslog::Conf[hhvm]/File[/etc/rsyslog.d/20-hhvm.conf]: Scheduling refresh of Service[rsyslog]
Notice: /Stage[main]/Profile::Mediawiki::Hhvm/Alternatives::Select[php]/Exec[update_alternative_php]/returns: executed successfully
Notice: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/Service[hhvm]/enable: enable changed 'false' to 'true'
Notice: /Stage[main]/Hhvm/Base::Service_unit[hhvm]/Service[hhvm]: Triggered 'refresh' from 5 events
Notice: /Stage[main]/Profile::Prometheus::Nutcracker_exporter/Ferm::Service[prometheus-nutcracker-exporter]/File[/etc/ferm/conf.d/10_prometheus-nutcracker-exporter]/ensure: defined content as '{md5}5ab06ca50243a7a8646419903cf3ed9e'
Info: /Stage[main]/Profile::Prometheus::Nutcracker_exporter/Ferm::Service[prometheus-nutcracker-exporter]/File[/etc/ferm/conf.d/10_prometheus-nutcracker-exporter]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Profile::Prometheus::Nutcracker_exporter/Base::Service_auto_restart[prometheus-nutcracker-exporter]/Cron[wmf_auto_restart_prometheus-nutcracker-exporter]/ensure: created
Notice: /Stage[main]/Profile::Mediawiki::Nutcracker/Systemd::Tmpfile[nutcracker]/File[/etc/tmpfiles.d/nutcracker.conf]/ensure: defined content as '{md5}fb613bb4d62a574bee47e8f1ba99d0ee'
Notice: /Stage[main]/Nutcracker::Monitoring/Diamond::Collector[Nutcracker]/File[/etc/diamond/collectors/NutcrackerCollector.conf]/ensure: defined content as '{md5}13f88aed3dc5224baefe9be464af8ea2'
Info: /Stage[main]/Nutcracker::Monitoring/Diamond::Collector[Nutcracker]/File[/etc/diamond/collectors/NutcrackerCollector.conf]: Scheduling refresh of Service[diamond]
Notice: /Stage[main]/Nutcracker::Monitoring/Diamond::Collector[Nutcracker]/File[/usr/share/diamond/collectors/Nutcracker]/ensure: created
Notice: /Stage[main]/Nutcracker::Monitoring/Diamond::Collector[Nutcracker]/File[/usr/share/diamond/collectors/Nutcracker/Nutcracker.py]/ensure: defined content as '{md5}dc8665b2c5ec124ef0f7f20635ed6d60'
Info: /Stage[main]/Nutcracker::Monitoring/Diamond::Collector[Nutcracker]/File[/usr/share/diamond/collectors/Nutcracker/Nutcracker.py]: Scheduling refresh of Service[diamond]
Notice: /Stage[main]/Profile::Mediawiki::Nutcracker/Ferm::Rule[skip_nutcracker_conntrack_out]/File[/etc/ferm/conf.d/10_skip_nutcracker_conntrack_out]/ensure: defined content as '{md5}5b708b308ba4dbc44784515bd01ae004'
Info: /Stage[main]/Profile::Mediawiki::Nutcracker/Ferm::Rule[skip_nutcracker_conntrack_out]/File[/etc/ferm/conf.d/10_skip_nutcracker_conntrack_out]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Profile::Mediawiki::Nutcracker/Ferm::Rule[skip_nutcracker_conntrack_in]/File[/etc/ferm/conf.d/10_skip_nutcracker_conntrack_in]/ensure: defined content as '{md5}5a9f6697888b87659ef428cd26a46f8d'
Info: /Stage[main]/Profile::Mediawiki::Nutcracker/Ferm::Rule[skip_nutcracker_conntrack_in]/File[/etc/ferm/conf.d/10_skip_nutcracker_conntrack_in]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Etcd::Client::Globalconfig/Etcd::Client::Config[/etc/etcd/etcdrc]/File[/etc/etcd/etcdrc]/ensure: defined content as '{md5}1adc808b188e17bc5db37c9a7d8175d5'
Notice: /Stage[main]/Profile::Conftool::Client/Etcd::Client::Config[/root/.etcdrc]/File[/root/.etcdrc]/ensure: defined content as '{md5}75a1faa5ad6a31b1694eb17a39a0936a'
Notice: /Stage[main]/Scap::Master/Git::Clone[operations/mediawiki-config]/File[/srv/mediawiki-staging]/ensure: created
Notice: /Stage[main]/Scap::Master/Git::Clone[operations/mediawiki-config]/Exec[git_clone_operations/mediawiki-config]/returns: executed successfully
Notice: /Stage[main]/Mediawiki::Scap/Exec[fetch_mediawiki]/returns: executed successfully
Notice: /Stage[main]/Scap::Master/File[/srv/mediawiki-staging/.git/hooks/commit-msg]/ensure: defined content as '{md5}ac0e821fad7b0306c69b2cf10a19faef'
Notice: /Stage[main]/Scap::Master/Rsync::Server::Module[common]/File[/etc/rsync.d/frag-common]/ensure: defined content as '{md5}5e69e75abca5f06459abd34e6df5c19d'
Info: /Stage[main]/Scap::Master/Rsync::Server::Module[common]/File[/etc/rsync.d/frag-common]: Scheduling refresh of Exec[compile fragments]
Notice: /Stage[main]/Scap::Master/Rsync::Server::Module[patches]/File[/etc/rsync.d/frag-patches]/ensure: defined content as '{md5}e7a05638ad2d217fc8ba2893d2b6ccc0'
Info: /Stage[main]/Scap::Master/Rsync::Server::Module[patches]/File[/etc/rsync.d/frag-patches]: Scheduling refresh of Exec[compile fragments]
Notice: /Stage[main]/Rsync::Server/Exec[compile fragments]: Triggered 'refresh' from 4 events
Info: /Stage[main]/Rsync::Server/Exec[compile fragments]: Scheduling refresh of Service[rsync]
Notice: /Stage[main]/Rsync::Server/Service[rsync]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Rsync::Server/Service[rsync]: Unscheduling refresh on Service[rsync]
Notice: /Stage[main]/Scap::L10nupdate/Sudo::User[l10nupdate]/File[/etc/sudoers.d/l10nupdate]/ensure: defined content as '{md5}a883efa7afa516b9a69aed4ca9c3d0be'
Info: /Stage[main]/Scap::L10nupdate/Sudo::User[l10nupdate]/File[/etc/sudoers.d/l10nupdate]: Scheduling refresh of Exec[sudo_user_l10nupdate_linting]
Notice: /Stage[main]/Scap::L10nupdate/Sudo::User[l10nupdate]/Exec[sudo_user_l10nupdate_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Scap::L10nupdate/Logrotate::Conf[l10nupdate]/File[/etc/logrotate.d/l10nupdate]/ensure: defined content as '{md5}b5445bde69366c2be0760c69c2c3f39a'
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/core]/File[/var/lib/l10nupdate/mediawiki/core]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/core]/Exec[git_clone_mediawiki/core]/returns: executed successfully
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/extensions]/File[/var/lib/l10nupdate/mediawiki/extensions]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/extensions]/Exec[git_clone_mediawiki/extensions]/returns: executed successfully
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/skins]/File[/var/lib/l10nupdate/mediawiki/skins]/ensure: created
Notice: /Stage[main]/Scap::L10nupdate/Git::Clone[mediawiki/skins]/Exec[git_clone_mediawiki/skins]/returns: executed successfully
Notice: /Stage[main]/Scap::Master/Sudo::User[scap-master-sync]/File[/etc/sudoers.d/scap-master-sync]/ensure: defined content as '{md5}6311eac26ea7ea2a68e42c2e7c6fb942'
Info: /Stage[main]/Scap::Master/Sudo::User[scap-master-sync]/File[/etc/sudoers.d/scap-master-sync]: Scheduling refresh of Exec[sudo_user_scap-master-sync_linting]
Notice: /Stage[main]/Scap::Master/Sudo::User[scap-master-sync]/Exec[sudo_user_scap-master-sync_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]/content: 
--- /lib/systemd/system/confd.service	2015-05-04 17:00:58.000000000 +0000
+++ /tmp/puppet-file20180530-17618-18y61hw	2018-05-30 19:13:13.946455033 +0000
@@ -4,5 +4,11 @@
 [Service]
 User=root
 Environment="CONFD_BACKEND=etcd"
-Environment="CONFD_OPTS=-node 127.0.0.1:4001 -watch"
-ExecStart=/usr/bin/confd -backend $CONFD_BACKEND $CONFD_OPTS
+Environment="CONFD_DISCOVERY=-srv-domain  -scheme https"
+Environment="CONFD_OPTS=-interval=300 -prefix=/conftool/v1"
+ExecStart=/usr/bin/confd -backend $CONFD_BACKEND $CONFD_DISCOVERY $CONFD_OPTS
+Restart=on-failure
+RestartSec=10s
+
+[Install]
+WantedBy=multi-user.target

Info: Computing checksum on file /lib/systemd/system/confd.service
Info: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]: Filebucketed /lib/systemd/system/confd.service to puppet with sum f72647f318df9c58ab423c4b75370864
Notice: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]/content: content changed '{md5}f72647f318df9c58ab423c4b75370864' to '{md5}f596dfddbb5983bcea778caa71e1931e'
Notice: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]/mode: mode changed '0644' to '0444'
Info: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]: Scheduling refresh of Service[confd]
Info: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]: Scheduling refresh of Exec[systemd reload for confd]
Info: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]: Scheduling refresh of Service[confd]
Info: /Stage[main]/Confd/Base::Service_unit[confd]/File[/lib/systemd/system/confd.service]: Scheduling refresh of Exec[systemd reload for confd]
Notice: /Stage[main]/Confd/Base::Service_unit[confd]/Exec[systemd reload for confd]: Triggered 'refresh' from 2 events
Notice: /Stage[main]/Confd/Base::Service_unit[confd]/Service[confd]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Confd/Base::Service_unit[confd]/Service[confd]: Unscheduling refresh on Service[confd]
Notice: /Stage[main]/Nrpe::Systemd_scripts/File[/usr/local/bin/nrpe_check_systemd_unit_state]/ensure: defined content as '{md5}1556cc3ec4307724ab6dbed9815ae19d'
Notice: /Stage[main]/Confd/Logrotate::Conf[confd]/File[/etc/logrotate.d/confd]/ensure: defined content as '{md5}ae0769e41a7f8950f80ca50aa92ef3d0'
Notice: /Stage[main]/Confd/Rsyslog::Conf[confd]/File[/etc/rsyslog.d/20-confd.conf]/ensure: defined content as '{md5}002a1e176272b2d53c2cbe2e7ccaf2cb'
Info: /Stage[main]/Confd/Rsyslog::Conf[confd]/File[/etc/rsyslog.d/20-confd.conf]: Scheduling refresh of Service[rsyslog]
Notice: /Stage[main]/Rsyslog/Service[rsyslog]: Triggered 'refresh' from 3 events
Notice: /Stage[main]/Scap::Dsh/Scap::Dsh::Group[mediawiki-installation]/File[/etc/dsh/group/mediawiki-installation]/ensure: defined content as '{md5}44010eae7e216733143b39860b0632fb'
Notice: /Stage[main]/Scap::Dsh/Scap::Dsh::Group[mediawiki-appserver-canaries]/File[/etc/dsh/group/mediawiki-appserver-canaries]/ensure: defined content as '{md5}eba94ffbb1330ed18ff08543e47cd5a1'
Notice: /Stage[main]/Scap::Dsh/Scap::Dsh::Group[mediawiki-api-canaries]/File[/etc/dsh/group/mediawiki-api-canaries]/ensure: defined content as '{md5}b7e9f0550731d29f9768a7209fbbe560'
Notice: /Stage[main]/Scap::Dsh/Scap::Dsh::Group[restbase-betacluster]/File[/etc/dsh/group/restbase-betacluster]/ensure: defined content as '{md5}570f8ec4344507a8bc6258bfdc0d0e71'
Notice: /Stage[main]/Scap::Ferm/Ferm::Rule[deployment-ssh]/File[/etc/ferm/conf.d/10_deployment-ssh]/ensure: defined content as '{md5}4ab930ecf904f96fb4c7fa5b22278bbf'
Info: /Stage[main]/Scap::Ferm/Ferm::Rule[deployment-ssh]/File[/etc/ferm/conf.d/10_deployment-ssh]: Scheduling refresh of Service[ferm]
Notice: /Stage[main]/Ferm/Service[ferm]: Triggered 'refresh' from 20 events
Notice: /Stage[main]/Keyholder/Systemd::Tmpfile[keyholder]/File[/etc/tmpfiles.d/keyholder.conf]/ensure: defined content as '{md5}cfff02afeff3c4e7c1ec2a17b3f9904d'
Notice: /Stage[main]/Keyholder::Monitoring/Sudo::User[nagios_check_keyholder]/File[/etc/sudoers.d/nagios_check_keyholder]/ensure: defined content as '{md5}1caec215b96d81891e163d2c2e4dd399'
Info: /Stage[main]/Keyholder::Monitoring/Sudo::User[nagios_check_keyholder]/File[/etc/sudoers.d/nagios_check_keyholder]: Scheduling refresh of Exec[sudo_user_nagios_check_keyholder_linting]
Notice: /Stage[main]/Keyholder::Monitoring/Sudo::User[nagios_check_keyholder]/Exec[sudo_user_nagios_check_keyholder_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Keyholder::Monitoring/Sudo::User[diamond_check_keyholder]/File[/etc/sudoers.d/diamond_check_keyholder]/ensure: defined content as '{md5}da0b5c2b9b553336200034646a5beacd'
Info: /Stage[main]/Keyholder::Monitoring/Sudo::User[diamond_check_keyholder]/File[/etc/sudoers.d/diamond_check_keyholder]: Scheduling refresh of Exec[sudo_user_diamond_check_keyholder_linting]
Notice: /Stage[main]/Keyholder::Monitoring/Sudo::User[diamond_check_keyholder]/Exec[sudo_user_diamond_check_keyholder_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Diamond::Collector::Nagios_lib/File[/etc/diamond/nagios.d]/ensure: created
Notice: /Stage[main]/Keyholder::Monitoring/Diamond::Collector::Nagios[keyholder_status]/File[/etc/diamond/nagios.d/keyholder_status.json]/ensure: defined content as '{md5}fedeb90d0c34b26f9a125e86c5952cc3'
Info: /Stage[main]/Keyholder::Monitoring/Diamond::Collector::Nagios[keyholder_status]/File[/etc/diamond/nagios.d/keyholder_status.json]: Scheduling refresh of Service[diamond]
Notice: /Stage[main]/Releases::Reprepro::Upload/Sudo::User[releases_dput]/File[/etc/sudoers.d/releases_dput]/ensure: defined content as '{md5}b2de52c939320b2db0b173b1d2d485d5'
Info: /Stage[main]/Releases::Reprepro::Upload/Sudo::User[releases_dput]/File[/etc/sudoers.d/releases_dput]: Scheduling refresh of Exec[sudo_user_releases_dput_linting]
Notice: /Stage[main]/Releases::Reprepro::Upload/Sudo::User[releases_dput]/Exec[sudo_user_releases_dput_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Profile::Kubernetes::Deployment_server/Git::Clone[operations/deployment-charts]/File[/srv/deployment-charts]/ensure: created
Notice: /Stage[main]/Profile::Kubernetes::Deployment_server/Git::Clone[operations/deployment-charts]/Exec[git_clone_operations/deployment-charts]/returns: executed successfully
Notice: /Stage[main]/Base::Firewall/Sysctl::Parameters[ferm_conntrack]/Sysctl::Conffile[ferm_conntrack]/File[/etc/sysctl.d/70-ferm_conntrack.conf]/ensure: defined content as '{md5}117ec150d2baac324d1e701edb170d3e'
Info: /Stage[main]/Base::Firewall/Sysctl::Parameters[ferm_conntrack]/Sysctl::Conffile[ferm_conntrack]/File[/etc/sysctl.d/70-ferm_conntrack.conf]: Scheduling refresh of Exec[update_sysctl]
Notice: /Stage[main]/Sysctl/Exec[update_sysctl]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Base::Firewall/Nrpe::Monitor_service[conntrack_table_size]/Nrpe::Check[check_conntrack_table_size]/File[/etc/nagios/nrpe.d/check_conntrack_table_size.cfg]/ensure: defined content as '{md5}dea44d81c45749ddad7d2e74886c40bd'
Info: /Stage[main]/Base::Firewall/Nrpe::Monitor_service[conntrack_table_size]/Nrpe::Check[check_conntrack_table_size]/File[/etc/nagios/nrpe.d/check_conntrack_table_size.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Base::Firewall/Nrpe::Monitor_service[ferm_active]/Nrpe::Check[check_ferm_active]/File[/etc/nagios/nrpe.d/check_ferm_active.cfg]/ensure: defined content as '{md5}8a9135b166fc29e735a6fd937deeb5b9'
Info: /Stage[main]/Base::Firewall/Nrpe::Monitor_service[ferm_active]/Nrpe::Check[check_ferm_active]/File[/etc/nagios/nrpe.d/check_ferm_active.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Apache/Apache::Site[dummy]/Apache::Conf[dummy]/File[/etc/apache2/sites-available/00-dummy.conf]/ensure: defined content as '{md5}6a7c5e68f0e8e576e9b751a61ba60239'
Info: /Stage[main]/Apache/Apache::Site[dummy]/Apache::Conf[dummy]/File[/etc/apache2/sites-available/00-dummy.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/Apache::Site[dummy]/Apache::Conf[dummy]/File[/etc/apache2/sites-enabled/00-dummy.conf]/ensure: created
Info: /Stage[main]/Apache/Apache::Site[dummy]/Apache::Conf[dummy]/File[/etc/apache2/sites-enabled/00-dummy.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Apache::Site[deployment]/Apache::Conf[deployment]/File[/etc/apache2/sites-available/50-deployment.conf]/ensure: defined content as '{md5}9cd3138b4b64e29063978d18a588a0e3'
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Apache::Site[deployment]/Apache::Conf[deployment]/File[/etc/apache2/sites-available/50-deployment.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Apache::Site[deployment]/Apache::Conf[deployment]/File[/etc/apache2/sites-enabled/50-deployment.conf]/ensure: created
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Apache::Site[deployment]/Apache::Conf[deployment]/File[/etc/apache2/sites-enabled/50-deployment.conf]: Scheduling refresh of Service[apache2]
Notice: /Stage[main]/Apache/Service[apache2]: Triggered 'refresh' from 13 events
Notice: /Stage[main]/Nutcracker::Monitoring/Nrpe::Monitor_service[nutcracker]/Nrpe::Check[check_nutcracker]/File[/etc/nagios/nrpe.d/check_nutcracker.cfg]/ensure: defined content as '{md5}bb5f48db2f1b32e69c5396baf1705bb3'
Info: /Stage[main]/Nutcracker::Monitoring/Nrpe::Monitor_service[nutcracker]/Nrpe::Check[check_nutcracker]/File[/etc/nagios/nrpe.d/check_nutcracker.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Nutcracker::Monitoring/Nrpe::Monitor_service[nutcracker_port]/Nrpe::Check[check_nutcracker_port]/File[/etc/nagios/nrpe.d/check_nutcracker_port.cfg]/ensure: defined content as '{md5}78e236e8fd063d7c4e8074590c3e2401'
Info: /Stage[main]/Nutcracker::Monitoring/Nrpe::Monitor_service[nutcracker_port]/Nrpe::Check[check_nutcracker_port]/File[/etc/nagios/nrpe.d/check_nutcracker_port.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Systemd::Unit[keyholder-agent]/File[/lib/systemd/system/keyholder-agent.service]/ensure: defined content as '{md5}bf75e6da10ffb227fde1fa68ff1c69dd'
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Systemd::Unit[keyholder-agent]/File[/lib/systemd/system/keyholder-agent.service]: Scheduling refresh of Exec[systemd daemon-reload for keyholder-agent.service]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Systemd::Unit[keyholder-agent]/Exec[systemd daemon-reload for keyholder-agent.service]: Triggered 'refresh' from 1 events
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Systemd::Unit[keyholder-agent]/Exec[systemd daemon-reload for keyholder-agent.service]: Scheduling refresh of Service[keyholder-agent]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Service[keyholder-agent]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-agent]/Service[keyholder-agent]: Unscheduling refresh on Service[keyholder-agent]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Systemd::Unit[keyholder-proxy]/File[/lib/systemd/system/keyholder-proxy.service]/ensure: defined content as '{md5}69e62c7b9983cf00c439b154e8838f8a'
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Systemd::Unit[keyholder-proxy]/File[/lib/systemd/system/keyholder-proxy.service]: Scheduling refresh of Exec[systemd daemon-reload for keyholder-proxy.service]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Systemd::Unit[keyholder-proxy]/Exec[systemd daemon-reload for keyholder-proxy.service]: Triggered 'refresh' from 1 events
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Systemd::Unit[keyholder-proxy]/Exec[systemd daemon-reload for keyholder-proxy.service]: Scheduling refresh of Service[keyholder-proxy]
Notice: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Service[keyholder-proxy]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Keyholder/Systemd::Service[keyholder-proxy]/Service[keyholder-proxy]: Unscheduling refresh on Service[keyholder-proxy]
Notice: /Stage[main]/Keyholder::Monitoring/Nrpe::Monitor_service[keyholder]/Nrpe::Check[check_keyholder]/File[/etc/nagios/nrpe.d/check_keyholder.cfg]/ensure: defined content as '{md5}b3eb9ef7f93c31ecdbc03018354a8909'
Info: /Stage[main]/Keyholder::Monitoring/Nrpe::Monitor_service[keyholder]/Nrpe::Check[check_keyholder]/File[/etc/nagios/nrpe.d/check_keyholder.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-librenms]/File[/etc/keyholder.d/deploy_librenms]/ensure: defined content as '{md5}9774a2e30e93d7f09f2b8eb3b777788a'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-librenms]/File[/etc/keyholder.d/deploy_librenms.pub]/ensure: defined content as '{md5}430d66f671016fed4bf6489ec7f1779e'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-librenms]/File[/etc/keyholder-auth.d/deploy_librenms.yml]/ensure: defined content as '{md5}d2c66f236a22f8a84b3f520d7a3a3af1'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-service]/File[/etc/keyholder.d/deploy_service]/ensure: defined content as '{md5}711998404ed5eb0c2663758dae31190a'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-service]/File[/etc/keyholder.d/deploy_service.pub]/ensure: defined content as '{md5}90c65e982a38cd208ca0c3b9560fdb0d'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[deploy-service]/File[/etc/keyholder-auth.d/deploy_service.yml]/ensure: defined content as '{md5}6a5e565bc8c0a8357d50e89fd46fb308'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[dumpsdeploy]/File[/etc/keyholder.d/dumpsdeploy]/ensure: defined content as '{md5}898030d3a82c5a08f142b20fc4d3292b'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[dumpsdeploy]/File[/etc/keyholder.d/dumpsdeploy.pub]/ensure: defined content as '{md5}d14139131fa8a44e9efb60630acbd495'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[dumpsdeploy]/File[/etc/keyholder-auth.d/dumpsdeploy.yml]/ensure: defined content as '{md5}b4c874892fa8bc268eaf0bb819b46420'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventbus]/File[/etc/keyholder.d/eventbus]/ensure: defined content as '{md5}c9eadecb606e33f92e19e6fadf241227'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventbus]/File[/etc/keyholder.d/eventbus.pub]/ensure: defined content as '{md5}b2680696540296a8c9d39dd4121f04c9'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventbus]/File[/etc/keyholder-auth.d/eventbus.yml]/ensure: defined content as '{md5}6d7743143fbbf13fffd8f16fc9b5ab9a'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventlogging]/File[/etc/keyholder.d/eventlogging]/ensure: defined content as '{md5}a64111b301f7d269718fd9a1e05becd8'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventlogging]/File[/etc/keyholder.d/eventlogging.pub]/ensure: defined content as '{md5}79fe8842af1ecfcd1e8fe898aba843c8'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[eventlogging]/File[/etc/keyholder-auth.d/eventlogging.yml]/ensure: defined content as '{md5}2c8dc776468b841ecfce6565530bdc33'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[phabricator]/File[/etc/keyholder.d/phabricator]/ensure: defined content as '{md5}83fc9fe7410dddd0c94b130d4e8354f6'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[phabricator]/File[/etc/keyholder.d/phabricator.pub]/ensure: defined content as '{md5}98ca7b4407b15cd675ad41e7b6cc4641'
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Keyholder::Agent[phabricator]/File[/etc/keyholder-auth.d/phabricator.yml]/ensure: defined content as '{md5}930b693c400e106fd049f32b663bfdd3'
Notice: /Stage[main]/Role::Deployment::Mediawiki/Keyholder::Agent[mwdeploy]/File[/etc/keyholder.d/mwdeploy]/ensure: defined content as '{md5}d5988e9d0a4d0c328b45dfc22df1dbaa'
Notice: /Stage[main]/Role::Deployment::Mediawiki/Keyholder::Agent[mwdeploy]/File[/etc/keyholder.d/mwdeploy.pub]/ensure: defined content as '{md5}09332337c75847a02cb6d5f78b8be676'
Notice: /Stage[main]/Role::Deployment::Mediawiki/Keyholder::Agent[mwdeploy]/File[/etc/keyholder-auth.d/mwdeploy.yml]/ensure: defined content as '{md5}6ff24800c0fa3bd48944838575b6590b'
Notice: /Stage[main]/Diamond::Collector::Nagios_lib/Diamond::Collector[Nagios]/File[/etc/diamond/collectors/NagiosCollector.conf]/ensure: defined content as '{md5}7477e124d72047a6af164b66e3ef0e0a'
Info: /Stage[main]/Diamond::Collector::Nagios_lib/Diamond::Collector[Nagios]/File[/etc/diamond/collectors/NagiosCollector.conf]: Scheduling refresh of Service[diamond]
Notice: /Stage[main]/Diamond::Collector::Nagios_lib/Diamond::Collector[Nagios]/File[/usr/share/diamond/collectors/Nagios]/ensure: created
Notice: /Stage[main]/Diamond::Collector::Nagios_lib/Diamond::Collector[Nagios]/File[/usr/share/diamond/collectors/Nagios/Nagios.py]/ensure: defined content as '{md5}07f136315142ab458012268186025b20'
Info: /Stage[main]/Diamond::Collector::Nagios_lib/Diamond::Collector[Nagios]/File[/usr/share/diamond/collectors/Nagios/Nagios.py]: Scheduling refresh of Service[diamond]
Notice: /Stage[main]/Diamond/Service[diamond]: Triggered 'refresh' from 5 events
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Git_merge[mediawiki_config]/Nrpe::Monitor_service[mediawiki_config_merged]/Nrpe::Check[check_mediawiki_config_merged]/File[/etc/nagios/nrpe.d/check_mediawiki_config_merged.cfg]/ensure: defined content as '{md5}8433f7529e189d15d838b13afd322829'
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Git_merge[mediawiki_config]/Nrpe::Monitor_service[mediawiki_config_merged]/Nrpe::Check[check_mediawiki_config_merged]/File[/etc/nagios/nrpe.d/check_mediawiki_config_merged.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Bad_directory_owner[/srv/mediawiki-staging]/Nrpe::Monitor_service[_srv_mediawiki-staging_owned]/Nrpe::Check[check__srv_mediawiki-staging_owned]/File[/etc/nagios/nrpe.d/check__srv_mediawiki-staging_owned.cfg]/ensure: defined content as '{md5}ea42e0c0c5e506e0a606bc28573ad448'
Info: /Stage[main]/Profile::Mediawiki::Deployment::Server/Monitoring::Icinga::Bad_directory_owner[/srv/mediawiki-staging]/Nrpe::Monitor_service[_srv_mediawiki-staging_owned]/Nrpe::Check[check__srv_mediawiki-staging_owned]/File[/etc/nagios/nrpe.d/check__srv_mediawiki-staging_owned.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Info: Class[Profile::Mediawiki::Deployment::Server]: Unscheduling all events on Class[Profile::Mediawiki::Deployment::Server]
Notice: /Stage[main]/Confd/Nrpe::Monitor_systemd_unit_state[confd]/Nrpe::Monitor_service[confd-state]/Nrpe::Check[check_confd-state]/File[/etc/nagios/nrpe.d/check_confd-state.cfg]/ensure: defined content as '{md5}acf16631b057fb1aff27e0501b3d16fc'
Info: /Stage[main]/Confd/Nrpe::Monitor_systemd_unit_state[confd]/Nrpe::Monitor_service[confd-state]/Nrpe::Check[check_confd-state]/File[/etc/nagios/nrpe.d/check_confd-state.cfg]: Scheduling refresh of Service[nagios-nrpe-server]
Notice: /Stage[main]/Nrpe/Base::Service_unit[nagios-nrpe-server]/Service[nagios-nrpe-server]: Triggered 'refresh' from 8 events
Info: Stage[main]: Unscheduling all events on Stage[main]
Notice: Applied catalog in 1360.60 seconds
root@deployment-deploy-01:/var/lib/puppet#