22 files changed, 440 insertions, 0 deletions
diff --git a/debian/TODO.Debian b/debian/TODO.Debian
new file mode 100644
index 00000000..2f1124a0
--- /dev/null
+++ b/debian/TODO.Debian
@@ -0,0 +1,20 @@
+* De-vendorize JS/font libraries
+	* bootstrap, raphael, jquery + some jquery plugins exist.
+		- web/lib/c3.min.js: #819891
+		- web/css/c3.min.css #819891
+		- web/lib/dygraph-combined.js: #749603
+		- web/lib/dygraph-smooth-plotter.js
+		- web/lib/bootstrap-toggle.min.js
+		- web/lib/ElementQueries.js
+		- web/lib/ResizeSensor.js
+		- web/lib/gauge.min.js
+		- web/lib/jquery.easypiechart.min.js
+		- web/lib/jquery.nanoscroller.min.js
+		- web/lib/jquery.peity.min.js
+		- web/lib/jquery.sparkline.min.js
+		- web/lib/morris.min.js
+		- web/css/bootstrap.slate.min.css
+		- web/css/bootstrap-toggle.min.css
+		- web/css/morris.css
+	* Create additional or keep them in mind for future linking
+* Restrict security permissions in netdata.service
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 00000000..442ae915
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,9 @@
+netdata (1.1.0-1) UNRELEASED; urgency=low
+
+  [ Federico Ceratto ]
+  * Initial release (Closes: #819661)
+
+  [ Lennart Weller ]
+  * Split the main package into appropriate sub packages
+
+ -- Lennart Weller <lhw@ring0.de>  Mon, 09 May 2016 17:01:31 +0200
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 00000000..ec635144
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/debian/control b/debian/control
new file mode 100644
index 00000000..f25e03e2
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,50 @@
+Source: netdata
+Section: net
+Priority: optional
+Maintainer: Lennart Weller <lhw@ring0.de>
+Uploaders: James Cowgill <jcowgill@debian.org>,
+           Federico Ceratto <federico@debian.org>
+Build-Depends: debhelper (>= 9),
+               dh-autoreconf,
+               dh-systemd (>= 1.5),
+               dpkg-dev (>= 1.13.19),
+               pkg-config,
+               zlib1g-dev
+Standards-Version: 3.9.8
+Homepage: https://github.com/firehol/netdata
+Vcs-Git: https://anonscm.debian.org/collab-maint/netdata.git
+Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/netdata.git
+
+Package: netdata
+Architecture: any
+Multi-Arch: no
+Depends: adduser,
+         fonts-font-awesome,
+         libcap2-bin (>= 1:2.0),
+         libjs-bootstrap,
+         libjs-d3,
+         libjs-jquery,
+         libjs-raphael,
+         lsb-base (>= 3.1-23.2),
+         netdata-data,
+         ${misc:Depends},
+         ${misc:Pre-Depends},
+         ${shlibs:Depends}
+Suggests: netdata-plugins-nodejs
+Description: real-time charts for system monitoring
+ Netdata is a daemon that collects data in realtime (per second)
+ and presents a web site to view and analyze them. The presentation
+ is also real-time and full of interactive charts that precisely
+ render all collected values.
+
+Package: netdata-data
+Architecture: all
+Multi-Arch: foreign
+Depends: ${misc:Depends}, ${shlibs:Depends}
+Description: real-time charts for system monitoring (Data)
+ Netdata is a daemon that collects data in realtime (per second)
+ and presents a web site to view and analyze them. The presentation
+ is also real-time and full of interactive charts that precisely
+ render all collected values.
+ .
+ This package contains all the architecture independent data
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 00000000..8f5409ad
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,18 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: netdata
+Upstream-Contact: Costa Tsaousis <costa@tsaousis.gr>
+Source: https://github.com/firehol/netdata
+
+Files: *
+Copyright: 2014-2016, Costa Tsaousis
+License: GPL-3+
+
+Files: debian/*
+Copyright: 2016 Matthew Newton <mcn4@leicester.ac.uk>
+           2016 Lennart Weller <lhw@ring0.de>
+           2016 Federico Ceratto <federico@debian.org>
+License: GPL-3+
+
+License: GPL-3+
+ On Debian systems, the complete text of the GNU General Public
+ License version 3 can be found in /usr/share/common-licenses/GPL-3.
diff --git a/debian/netdata-data.install b/debian/netdata-data.install
new file mode 100644
index 00000000..32a3caaa
--- /dev/null
+++ b/debian/netdata-data.install
@@ -0,0 +1 @@
+/usr/share/netdata
diff --git a/debian/netdata-data.links b/debian/netdata-data.links
new file mode 100644
index 00000000..cbba848c
--- /dev/null
+++ b/debian/netdata-data.links
@@ -0,0 +1,15 @@
+#libjs-bootstrap
+/usr/share/javascript/bootstrap/js/bootstrap.min.js usr/share/netdata/web/lib/bootstrap.min.js
+/usr/share/javascript/bootstrap/fonts/glyphicons-halflings-regular.ttf usr/share/netdata/web/fonts/glyphicons-halflings-regular.ttf
+/usr/share/javascript/bootstrap/css/bootstrap-theme.min.css usr/share/netdata/css/bootstrap-theme.min.css
+/usr/share/javascript/bootstrap/css/bootstrap.min.css usr/share/netdata/css/bootstrap.min.css
+#libjs-jquery
+/usr/share/javascript/jquery/jquery.min.js usr/share/netdata/web/lib/jquery-1.12.0.min.js
+#libjs-d3
+/usr/share/javascript/d3/d3.min.js usr/share/netdata/web/lib/d3.min.js
+#libjs-raphael
+/usr/share/javascript/raphael/raphael.min.js usr/share/netdata/web/lib/raphael-min.js
+#fonts-font-awesome
+/usr/share/fonts-font-awesome/fonts/FontAwesome.otf usr/share/netdata/web/fonts/FontAwesome.otf
+/usr/share/fonts-font-awesome/fonts/fontawesome-webfont.ttf usr/share/netdata/web/fonts/fontawesome-webfont.ttf
+/usr/share/fonts-font-awesome/css/font-awesome.min.css usr/share/netdata/css/font-awesome.min.css
diff --git a/debian/netdata.1 b/debian/netdata.1
new file mode 100644
index 00000000..3069d2d2
--- /dev/null
+++ b/debian/netdata.1
@@ -0,0 +1,33 @@
+.TH NETDATA "1" "April 2016" "" "User Commands"
+.SH NAME
+netdata \- real-time charts for system monitoring
+.SH DESCRIPTION
+This manual page documents briefly the
+.B netdata
+command.
+.PP
+The netdata daemon is usually started by an initscript or a systemd service.
+.SH USAGE
+\fI\,/usr/sbin/netdata\/\fP [\-d] [\-l LINES_TO_SAVE] [\-u UPDATE_TIMER] [\-p LISTEN_PORT] [\-dl debug log file] [\-df debug flags]
+.HP
+\fB\-c\fR CONFIG FILE the configuration file to load. Default: \fI\,/etc/netdata/netdata.conf\/\fP.
+.HP
+\fB\-l\fR LINES_TO_SAVE can be from 5 to 864000 lines in JSON data. Default: 3600.
+.HP
+\fB\-t\fR UPDATE_TIMER can be from 1 to 3600 seconds. Default: 1.
+.HP
+\fB\-p\fR LISTEN_PORT can be from 1 to 65535. Default: 19999.
+.HP
+\fB\-u\fR USERNAME can be any system username to run as. Default: none.
+.HP
+\fB\-ch\fR path to access host \fI\,/proc\/\fP and \fI\,/sys\/\fP when running in a container. Default: empty.
+.HP
+\fB\-nd\fR or \fB\-nodeamon\fR to disable forking in the background. Default: unset.
+.HP
+\fB\-df\fR FLAGS debug options. Default: 0x00000000.
+.SH "SEE ALSO"
+The full documentation for netdata is available in /usr/share/doc/netdata
+.SH AUTHOR
+netadata was written by Costa Tsaousis <costa@tsaousis.gr>
+.PP
+This manual page was written by Federico Ceratto <federico@debian.org> for the Debian project and may be used by others.
diff --git a/debian/netdata.conf b/debian/netdata.conf
new file mode 100644
index 00000000..1f6bcf36
--- /dev/null
+++ b/debian/netdata.conf
@@ -0,0 +1,19 @@
+# NetData Configuration
+
+# The current full configuration can be retrieved from the running
+# server at the URL
+#
+#   http://localhost:19999/netdata.conf
+#
+# for example:
+#
+#   wget -O /etc/netdata/netdata.conf http://localhost:19999/netdata.conf
+#
+
+[global]
+	run as user = netdata
+	web files owner = root
+	web files group = netdata
+	# Netdata is not designed to be exposed to potentially hostile
+	# networks.See https://github.com/firehol/netdata/issues/164
+	bind socket to IP = 127.0.0.1
diff --git a/debian/netdata.dirs b/debian/netdata.dirs
new file mode 100644
index 00000000..0dfa7901
--- /dev/null
+++ b/debian/netdata.dirs
@@ -0,0 +1,4 @@
+etc/netdata
+var/cache/netdata
+var/log/netdata
+var/run
diff --git a/debian/netdata.docs b/debian/netdata.docs
new file mode 100644
index 00000000..b43bf86b
--- /dev/null
+++ b/debian/netdata.docs
@@ -0,0 +1 @@
+README.md
diff --git a/debian/netdata.install b/debian/netdata.install
new file mode 100644
index 00000000..97091ff7
--- /dev/null
+++ b/debian/netdata.install
@@ -0,0 +1,8 @@
+/usr/sbin
+debian/netdata.conf /etc/netdata/
+usr/lib/*/netdata/charts.d
+usr/lib/*/netdata/plugins.d/apps.plugin
+usr/lib/*/netdata/plugins.d/charts.d.dryrun-helper.sh
+usr/lib/*/netdata/plugins.d/charts.d.plugin
+usr/lib/*/netdata/plugins.d/loopsleepms.sh.inc
+usr/lib/*/netdata/plugins.d/tc-qos-helper.sh
diff --git a/debian/netdata.lintian-overrides b/debian/netdata.lintian-overrides
new file mode 100644
index 00000000..23c0880b
--- /dev/null
+++ b/debian/netdata.lintian-overrides
@@ -0,0 +1,3 @@
+# See Debian policy 10.9. apps.plugin has extra capabilities, so don't let
+# normal users run it.
+netdata: non-standard-executable-perm usr/lib/*/netdata/plugins.d/apps.plugin 0754 != 0755
diff --git a/debian/netdata.logrotate b/debian/netdata.logrotate
new file mode 100644
index 00000000..ed49ac4b
--- /dev/null
+++ b/debian/netdata.logrotate
@@ -0,0 +1,17 @@
+/var/log/netdata/*log {
+	compress
+	create 0640 netdata adm
+	daily
+	delaycompress
+	missingok
+	notifempty
+	rotate 14
+	sharedscripts
+	postrotate
+		if service netdata status > /dev/null ; then \
+			service netdata restart > /dev/null; \
+		fi;
+	endscript
+}
+
+
diff --git a/debian/netdata.manpages b/debian/netdata.manpages
new file mode 100644
index 00000000..421a3ab8
--- /dev/null
+++ b/debian/netdata.manpages
@@ -0,0 +1 @@
+debian/netdata.1
diff --git a/debian/netdata.postinst.in b/debian/netdata.postinst.in
new file mode 100644
index 00000000..90aa33c1
--- /dev/null
+++ b/debian/netdata.postinst.in
@@ -0,0 +1,42 @@
+#! /bin/sh
+
+set -e
+
+case "$1" in
+  configure)
+        if [ -z "$2" ]; then
+          if ! getent group netdata >/dev/null; then
+              addgroup --quiet --system netdata
+          fi
+
+          if ! getent passwd netdata >/dev/null; then
+              adduser --quiet --system --ingroup netdata --home /var/lib/netdata --no-create-home netdata
+          fi
+
+          if ! dpkg-statoverride --list /var/lib/netdata >/dev/null 2>&1; then
+              dpkg-statoverride --update --add root netdata 0755 /var/lib/netdata
+          fi
+
+          if ! dpkg-statoverride --list /usr/share/netdata/web >/dev/null 2>&1; then
+              dpkg-statoverride --update --add root netdata 0755 /usr/share/netdata/web
+          fi
+
+          if ! dpkg-statoverride --list /var/cache/netdata >/dev/null 2>&1; then
+              dpkg-statoverride --update --add netdata netdata 0755 /var/cache/netdata
+          fi
+
+        fi
+
+        chown -R root:netdata /usr/share/netdata/web
+        chown -R root:netdata /usr/lib/@DEB_HOST_MULTIARCH@/netdata/plugins.d
+        setcap cap_dac_read_search,cap_sys_ptrace+ep /usr/lib/@DEB_HOST_MULTIARCH@/netdata/plugins.d/apps.plugin
+        chown netdata:adm /var/log/netdata
+        chmod 02750 /var/log/netdata
+
+#PERMS#
+        ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/netdata.postrm b/debian/netdata.postrm
new file mode 100644
index 00000000..1e4677f8
--- /dev/null
+++ b/debian/netdata.postrm
@@ -0,0 +1,33 @@
+#!/bin/sh
+
+set -e
+
+case "$1" in
+    remove)
+        ;;
+
+    purge)
+        for dir_name in /var/cache/netdata /var/lib/netdata /var/lib/netdata/www; do
+            if dpkg-statoverride --list | grep -qw "$dir_name"; then
+                dpkg-statoverride --remove "$dir_name"
+            fi
+        done
+        rm -rf /var/cache/netdata /var/log/netdata
+
+        if getent passwd netdata >/dev/null; then
+            deluser --quiet --system netdata || echo "Unable to remove netdata user"
+        fi
+
+        if getent group netdata >/dev/null; then
+            delgroup --quiet --system netdata || echo "Unable to remove netdata group"
+        fi
+
+        ;;
+
+    *)
+        ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/netdata.service b/debian/netdata.service
new file mode 100644
index 00000000..59ca5754
--- /dev/null
+++ b/debian/netdata.service
@@ -0,0 +1,57 @@
+# netdata systemd target
+
+[Unit]
+Description=netdata - Real-time performance monitoring
+Documentation=man:netdata
+Documentation=file:///usr/share/doc/netdata/html/index.html
+Documentation=https://github.com/firehol/netdata
+After=network.target httpd.service squid.service nfs-server.service mysqld.service named.service postfix.service
+Wants=network-online.target
+ConditionPathExists=/etc/netdata/netdata.conf
+
+[Service]
+Type=forking
+#PIDFile=/run/netdata.pid
+PIDFile=/var/run/netdata/netdata.pid
+Environment="netdata_LOG_LOCATION=/var/log/netdata/log"
+ExecStart=/usr/sbin/netdata
+ExecReload=/usr/sbin/netdata reload
+#ExecStop=/bin/kill -SIGTERM $MAINPID
+ExecStop=-/sbin/start-stop-daemon --quiet --stop --retry=TERM/5/KILL/5 --pidfile /run/netdata.pid
+TimeoutStopSec=30
+KillMode=mixed
+
+EnvironmentFile=-/etc/default/%p
+User=netdata
+PermissionsStartOnly=true
+Restart=on-abnormal
+RestartSec=2s
+LimitNOFILE=65536
+
+WorkingDirectory=/tmp
+User=root
+Group=root
+
+# Hardening
+# AppArmorProfile=system_netdata
+# CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN CAP_FOWNER
+NoNewPrivileges=yes
+#PrivateDevices=yes
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=full
+# TODO: restrict ReadOnlyDirectories
+ReadOnlyDirectories=/
+ReadWriteDirectories=-/proc
+ReadWriteDirectories=-/run
+ReadWriteDirectories=-/var/log/netdata
+ReadWriteDirectories=-/var
+ReadWriteDirectories=-/var/cache
+ReadWriteDirectories=-/var/cache/netdata
+ReadWriteDirectories=-/var/run
+
+[Install]
+WantedBy=multi-user.target
+
+
+
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 00000000..040eb35d
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,74 @@
+#!/usr/bin/make -f
+
+# Find the arch we are building for, as this determines
+# the location of plugins in /usr/lib
+DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
+TOP = $(CURDIR)/debian/netdata
+WEB = $(TOP)-data/usr/share/web/
+
+export DH_VERBOSE = 1
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+export DEB_CFLAGS_MAINT_APPEND  = -Wall -O3
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+MULTIARCH_INSTALL = debian/netdata.postinst
+
+EXISTING_LINKS = $(WEB)lib/bootstrap.min.js \
+	$(WEB)fonts/glyphicons-halflings-regular.ttf \
+	$(WEB)css/bootstrap-theme.min.css \
+	$(WEB)css/bootstrap.min.css \
+	$(WEB)lib/jquery-1.12.0.min.js \
+	$(WEB)lib/d3.min.js \
+	$(WEB)lib/raphael-min.js \
+	$(WEB)fonts/FontAwesome.otf \
+	$(WEB)fonts/fontawesome-webfont.ttf \
+	$(WEB)css/font-awesome.min.css
+
+%:
+	# For jessie and beyond
+	#
+	dh $@ --with autoreconf,systemd
+
+	# For wheezy or other non-systemd distributions use the following. You
+	# should also see contrib/README.md which gives details of updates to
+	# make to debian/control.
+	#
+	#dh $@ --with autoreconf
+
+override_dh_auto_configure:
+	dh_auto_configure -- --with-math
+
+$(MULTIARCH_INSTALL): % : %.in
+	sed 's/@DEB_HOST_MULTIARCH@/$(DEB_HOST_MULTIARCH)/g' $< > $@
+
+override_dh_install: $(MULTIARCH_INSTALL)
+	dh_install
+
+	# Remove unneeded .keep files
+	#
+	find "$(TOP)" -name .keep -exec rm '{}' ';'
+	rm -rf $(TOP)-data/usr/share/netdata/web/old
+
+	rm -f $(EXISTING_LINKS)
+
+	# Update postinst to set correct group for www files on installation.
+	# Should probably be dpkg-statoverride really, but that gets *really*
+	# messy. We also set all web files in /var as conffiles so an upgrade
+	# doesn't splat them.
+	#
+	#for D in $$(find "$(TOP)/var/lib/netdata/www/" -maxdepth 1 -type f -printf '%f '); do \
+	#	echo Updating postinst for $$D; \
+	#	sed -i "s/^#PERMS#/chgrp netdata \/var\/lib\/netdata\/www\/$$D\n#PERMS#/g" \
+	#		$(CURDIR)/debian/netdata.postinst; \
+	#	echo "/var/lib/netdata/www/$$D" >> $(CURDIR)/debian/netdata.conffiles; \
+	#done
+	#sed -i "/^#PERMS#/d" $(CURDIR)/debian/netdata.postinst
+
+override_dh_fixperms:
+	dh_fixperms
+
+	# apps.plugin should only be runnable by the netdata user. It will be
+	# given extra capabilities in the postinst script.
+	#
+	chmod 0754 $(TOP)/usr/lib/$(DEB_HOST_MULTIARCH)/netdata/plugins.d/apps.plugin
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 00000000..163aaf8d
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 00000000..edc0e9ec
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1
+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==
+=rLhF
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 00000000..665850db
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,3 @@
+version=3
+opts=pgpsigurlmangle=s/$/.asc/ \
+ https://firehol.org/download/netdata/releases/v(\d\S*)/ netdata-(\d\S*)\.(?:zip|tgz|tbz|txz|(?:tar\.(?:gz|bz2|xz)))