A few few weeks ago two CVEs have been announced for the Nagios core and Nagios webinterface. Since Naemon inherits some code of Nagios, people might wonder if Naemon is also affected by those issues.
This is an issue with the Nagios webinterface which never made it into the Naemon codebase since we use Thruk as default web interface. So this issue simply doesn’t exist in Naemon.
This issue uses the fact that systemV init scripts start the Nagios process as root and then the process itself drops privileges and continues as normal user. Naemon inherited that issue so you might be affected.
However, you are not affected by this issue if you run Naemon either in OMD-Labs or on any Systemd based system like the OP5 Monitor.
We are working on a fix right now and there will be a new release soon.
Today we released the version 1.0.5 of naemon-core and naemon-livestatus. Thanks to all people who were involved in this release. This release fixes two critical bugs introduced in the last release which makes naemon stop on logrotation.
Today we released our first bug fix release after the 1.0 in February.
There is one bug fixed which made the debian packages from the 1.0 look
like 0.9 packages. The other bugs are related to the
Summer vacation is over and we are making good progress on the way to a stable 1.0 release which is planned for the next weeks. A change to make timeperiods more sane and some final testing are hopefully done till the weekend.
Till the final release, you can test the daily releases which are almost exactly like the stable release, the only different part is the version string.
Also last news call to help reviewing a few last documentation pages is still valid.
One last note, Andreas will talk about Naemon on the OSMC in Nuremberg this year.
Since we started the documentation project, we made great progress. Mostly due to the help of Johan. Thanks.
The initial import of the original documentation pages has been finished, but there are still pages left to be reviewed. This can be done by anyone who wants to help making our documentation awesome. Just follow the steps as described here.
All pages left over for review got a review_required tag at the top of the page so they can easily be found. A simple grep would also work:
%> grep -r review_required documentation/usersguide/
The doxygen documentation has already been ported into the website and is now part of the normal developer documentation.
We now even have Travis CI tests for our website.
Next steps are:
Almost half a year after we started this project we can now announce the first release.
The version 0.8.0 is a stable release, which means it does not contain any known critical issues. It’s not a 1.x release yet because we felt like it’s a good idea to be able to change APIs before a final 1.x release. That said, the 0.8.0 is probably lot more stable than its predecessor.
We tried to make getting started as easy and convenient as possible, so there are binary downloads for common linux systems and source rpms available. Unless you have good reasons, you really should go for the binary releases - they are build to just work.
We spend a lot of time to build tests and fix the most critical bugs of Nagios 4. There is a list of active issues in the developers section. It’s not yet completed and we have to walk through all issues and decide whether Naemon is affected or not.
Naemon is a community project. So if you like this project, talk about it - or even better, help make it better. See the community page on how you can help.
Today we started the documentation project and you are welcome to help out. There is lot of stuff to write and the more people help, the less documentation has to be written by single person.
The issues with our build system have been sorted out and it seems quite stable and we only have to tweak some last things, like better init scripts, before we finally release the first version of Naemon.
We’re still working on getting a release out - unfortunately, we’ve been having some issues with our build system.
But we do have a new webpage - how about that?