{"host": "cp2043.codfw.wmnet", "state": "core_diff", "description": "Differences to core resources", "diff": {"full": {"total": 4080, "only_in_self": ["Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy]"], "only_in_other": ["Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy-awslc]"], "resource_diffs": [{"resource": "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "parameters": "--- Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources].orig\n+++ Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]\n\n-    mode           => 0444\n-    backup         => puppet\n-    force          => False\n-    ensure         => present\n-    order          => alpha\n-    format         => plain\n-    owner          => root\n-    notify         => Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n-    path           => /etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    replace        => True\n-    show_diff      => True\n-    group          => root\n-    ensure_newline => False\n-    warn           => False\n"}, {"resource": "File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "parameters": "--- File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list].orig\n+++ File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]\n\n-    group  => root\n-    ensure => absent\n-    owner  => root\n"}, {"resource": "Package[haproxy-awslc]", "parameters": "--- Package[haproxy-awslc].orig\n+++ Package[haproxy-awslc]\n\n+    provider => apt\n+    ensure   => present\n"}, {"resource": "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "parameters": "--- Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources].orig\n+++ Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]\n\n+    mode           => 0444\n+    backup         => puppet\n+    force          => False\n+    ensure         => present\n+    order          => alpha\n+    format         => plain\n+    owner          => root\n+    notify         => Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n+    path           => /etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    replace        => True\n+    show_diff      => True\n+    group          => root\n+    ensure_newline => False\n+    warn           => False\n"}, {"resource": "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n+    target => /etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    order  => 10\n"}, {"resource": "File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "parameters": "--- File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list].orig\n+++ File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]\n\n+    group  => root\n+    ensure => absent\n+    owner  => root\n"}, {"resource": "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "parameters": "--- Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header].orig\n+++ Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]\n\n+    target => /etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    source => puppet:///modules/apt/sources-deb822-header.txt\n+    order  => 01\n+    tag    => _etc_apt_sources.list.d_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n"}, {"resource": "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "content": "--- thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.orig\n+++ thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia\n@@ -1,5 +0,0 @@\n-Types: deb deb-src\n-URIs: http://apt.wikimedia.org/wikimedia\n-Suites: trixie-wikimedia\n-Components: thirdparty/haproxy32\n-Signed-By: /etc/apt/keyrings/wikimedia-archive-keyring.gpg", "parameters": "--- Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n-    target => /etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    order  => 10\n-    tag    => _etc_apt_sources.list.d_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n"}, {"resource": "Class[Haproxy]", "parameters": "--- Class[Haproxy].orig\n+++ Class[Haproxy]\n\n@@\n-    package_name   => haproxy\n+    package_name   => haproxy-awslc\n@@\n-    config_content => # Note: This file is managed by puppet.\nglobal\n    user haproxy\n    group haproxy\n    stats socket /run/haproxy/haproxy.sock mode 600 expose-fd listeners level admin\n    log /var/lib/haproxy/dev/log local0 info\n    log /var/run/haproxykafka/haproxykafka.sock len 8192 format rfc5424 local0 info\n    tune.http.logurilen 2048\n    # do not keep old processes longer than 1m after a reload\n    hard-stop-after 1m\n    set-dumpable\n    nbthread 64\n\n    tune.lua.bool-sample-conversion pre-3.1-bug\n    lua-prepend-path /etc/haproxy/lua/private/?.lua\n    lua-load-per-thread /etc/haproxy/lua/private/main.lua\n    lua-load-per-thread /etc/haproxy/lua/maxmind-lookup.lua\n    tune.ssl.capture-buffer-size 96\n    lua-load-per-thread /etc/haproxy/lua/ja3n.lua\n    lua-load-per-thread /etc/haproxy/lua/ja4h.lua\n    lua-load-per-thread /etc/haproxy/lua/utf8ps.lua\n    lua-load-per-thread /etc/haproxy/lua/contact_info.lua\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_mmdb.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.mmdb\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_bloom.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.bloom\n\n    ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n    ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n    ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n    ssl-dh-param-file /etc/ssl/dhparam.pem\n    tune.ssl.cachesize 512000\n    tune.ssl.lifetime 86400\n    maxconn 200000\n\n\n    tune.h2.header-table-size 4096\n    tune.h2.max-concurrent-streams 100\n\n\ndefaults\n    mode       http\n    log-format \"%rt %Tr %Tw %Tc %ST {%[capture.req.hdr(0)]} {%[capture.res.hdr(0)]} %ts\"\n    log-format-sd %{+E}o\\ [haproxykafka@0\\ server_pid=\\\"%pid\\\"\\ ip=\\\"%ci\\\"\\ sequence=\\\"%rt\\\"\\ dt=\\\"%tr\\\"\\ time_backend_response=\\\"%Tr\\\"\\ http_status=\\\"%ST\\\"\\ response_size=\\\"%B\\\"\\ termination_state=\\\"%ts\\\"\\ uri_host=\\\"%[capture.req.hdr(0),lua.utf8ps]\\\"\\ referer=\\\"%[capture.req.hdr(1),lua.utf8ps]\\\"\\ user_agent=\\\"%[capture.req.hdr(2),lua.utf8ps]\\\"\\ accept_language=\\\"%[capture.req.hdr(3),lua.utf8ps]\\\"\\ range=\\\"%[capture.req.hdr(4),lua.utf8ps]\\\"\\ accept=\\\"%[capture.req.hdr(5),lua.utf8ps]\\\"\\ tls=\\\"%[var(txn.tls)]\\\"\\ cache_status=\\\"%[var(txn.x_cache_status)]\\\"\\ content_type=\\\"%[var(txn.content_type)]\\\"\\ x_analytics=\\\"%[var(txn.x_analytics)]\\\"\\ x_cache=\\\"%[var(txn.x_cache)]\\\"\\ backend=\\\"%[var(txn.server)]\\\"\\ http_method=\\\"%HM\\\"\\ uri_path=\\\"%HPO\\\"\\ uri_query=\\\"%HQ\\\"]\n\n    option     dontlognull\n    option     accept-unsafe-violations-in-http-request\n    option     accept-unsafe-violations-in-http-response\n    option     http-ignore-probes\n    retries    1\n    timeout    connect 50000\n    timeout    client 500000\n    timeout    server 500000\n\n+    config_content => # Note: This file is managed by puppet.\nglobal\n    user haproxy\n    group haproxy\n    stats socket /run/haproxy/haproxy.sock mode 600 expose-fd listeners level admin\n    log /var/lib/haproxy/dev/log local0 info\n    log /var/run/haproxykafka/haproxykafka.sock len 8192 format rfc5424 local0 info\n    tune.http.logurilen 2048\n    # do not keep old processes longer than 1m after a reload\n    hard-stop-after 1m\n    set-dumpable\n    nbthread 64\n\n    tune.lua.bool-sample-conversion pre-3.1-bug\n    lua-prepend-path /etc/haproxy/lua/private/?.lua\n    lua-load-per-thread /etc/haproxy/lua/private/main.lua\n    lua-load-per-thread /etc/haproxy/lua/maxmind-lookup.lua\n    tune.ssl.capture-buffer-size 96\n    lua-load-per-thread /etc/haproxy/lua/ja3n.lua\n    lua-load-per-thread /etc/haproxy/lua/ja4h.lua\n    lua-load-per-thread /etc/haproxy/lua/utf8ps.lua\n    lua-load-per-thread /etc/haproxy/lua/contact_info.lua\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_mmdb.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.mmdb\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_bloom.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.bloom\n\n    ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n    ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n    ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n    tune.ssl.cachesize 512000\n    tune.ssl.lifetime 86400\n    maxconn 200000\n\n\n    tune.h2.header-table-size 4096\n    tune.h2.max-concurrent-streams 100\n\n\ndefaults\n    mode       http\n    log-format \"%rt %Tr %Tw %Tc %ST {%[capture.req.hdr(0)]} {%[capture.res.hdr(0)]} %ts\"\n    log-format-sd %{+E}o\\ [haproxykafka@0\\ server_pid=\\\"%pid\\\"\\ ip=\\\"%ci\\\"\\ sequence=\\\"%rt\\\"\\ dt=\\\"%tr\\\"\\ time_backend_response=\\\"%Tr\\\"\\ http_status=\\\"%ST\\\"\\ response_size=\\\"%B\\\"\\ termination_state=\\\"%ts\\\"\\ uri_host=\\\"%[capture.req.hdr(0),lua.utf8ps]\\\"\\ referer=\\\"%[capture.req.hdr(1),lua.utf8ps]\\\"\\ user_agent=\\\"%[capture.req.hdr(2),lua.utf8ps]\\\"\\ accept_language=\\\"%[capture.req.hdr(3),lua.utf8ps]\\\"\\ range=\\\"%[capture.req.hdr(4),lua.utf8ps]\\\"\\ accept=\\\"%[capture.req.hdr(5),lua.utf8ps]\\\"\\ tls=\\\"%[var(txn.tls)]\\\"\\ cache_status=\\\"%[var(txn.x_cache_status)]\\\"\\ content_type=\\\"%[var(txn.content_type)]\\\"\\ x_analytics=\\\"%[var(txn.x_analytics)]\\\"\\ x_cache=\\\"%[var(txn.x_cache)]\\\"\\ backend=\\\"%[var(txn.server)]\\\"\\ http_method=\\\"%HM\\\"\\ uri_path=\\\"%HPO\\\"\\ uri_query=\\\"%HQ\\\"]\n\n    option     dontlognull\n    option     accept-unsafe-violations-in-http-request\n    option     accept-unsafe-violations-in-http-response\n    option     http-ignore-probes\n    retries    1\n    timeout    connect 50000\n    timeout    client 500000\n    timeout    server 500000\n\n"}, {"resource": "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n-    target => /etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    order  => 10\n"}, {"resource": "Package[haproxy]", "parameters": "--- Package[haproxy].orig\n+++ Package[haproxy]\n\n-    provider => apt\n-    ensure   => present\n"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy-awslc]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n"}, {"resource": "Apt::Package_from_component[haproxy]", "parameters": "--- Apt::Package_from_component[haproxy].orig\n+++ Apt::Package_from_component[haproxy]\n\n@@\n-    component => thirdparty/haproxy32\n+    component => thirdparty/haproxy32-awslc\n"}, {"resource": "Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n-    refreshonly => True\n-    command     => /usr/bin/apt-get update \n"}, {"resource": "Apt::Pin[apt_pin_haproxy]", "parameters": "--- Apt::Pin[apt_pin_haproxy].orig\n+++ Apt::Pin[apt_pin_haproxy]\n\n@@\n-    pin => release c=thirdparty/haproxy32\n+    pin => release c=thirdparty/haproxy32-awslc\n"}, {"resource": "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "parameters": "--- Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header].orig\n+++ Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]\n\n-    target => /etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    source => puppet:///modules/apt/sources-deb822-header.txt\n-    order  => 01\n"}, {"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy-awslc]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n"}, {"resource": "Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n-    dist                     => trixie-wikimedia\n-    uri                      => http://apt.wikimedia.org/wikimedia\n-    bin                      => True\n-    trust_repo               => False\n-    ensure                   => present\n-    allow_releaseinfo_change => False\n-    components               => thirdparty/haproxy32\n-    source                   => True\n-    keyfile                  => puppet:///modules/install_server/autoinstall/keyring/wikimedia-archive-keyring.gpg\n"}, {"resource": "Class[Profile::Cache::Haproxy]", "parameters": "--- Class[Profile::Cache::Haproxy].orig\n+++ Class[Profile::Cache::Haproxy]\n\n@@\n-    haproxy_version => haproxy32\n+    haproxy_version => haproxy32-awslc\n"}, {"resource": "File[/etc/apt/preferences.d/apt_pin_haproxy.pref]", "content": "--- /etc/apt/preferences.d/apt_pin_haproxy.pref.orig\n+++ /etc/apt/preferences.d/apt_pin_haproxy.pref\n@@ -1,3 +1,3 @@\n Package: haproxy\n-Pin: release c=thirdparty/haproxy32\n+Pin: release c=thirdparty/haproxy32-awslc\n Pin-Priority: 1002"}, {"resource": "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "parameters": "--- Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header].orig\n+++ Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]\n\n-    target => /etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    source => puppet:///modules/apt/sources-deb822-header.txt\n-    order  => 01\n-    tag    => _etc_apt_sources.list.d_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n"}, {"resource": "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "parameters": "--- Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header].orig\n+++ Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]\n\n+    target => /etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    source => puppet:///modules/apt/sources-deb822-header.txt\n+    order  => 01\n"}, {"resource": "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "parameters": "--- Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources].orig\n+++ Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]\n\n+    mode           => 0444\n+    backup         => puppet\n+    force          => False\n+    order          => alpha\n+    format         => plain\n+    owner          => root\n+    tag            => _etc_apt_sources.list.d_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    replace        => True\n+    show_diff      => True\n+    group          => root\n+    ensure_newline => False\n"}, {"resource": "Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n+    dist                     => trixie-wikimedia\n+    uri                      => http://apt.wikimedia.org/wikimedia\n+    bin                      => True\n+    trust_repo               => False\n+    ensure                   => present\n+    allow_releaseinfo_change => False\n+    components               => thirdparty/haproxy32-awslc\n+    source                   => True\n+    keyfile                  => puppet:///modules/install_server/autoinstall/keyring/wikimedia-archive-keyring.gpg\n"}, {"resource": "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "content": "--- thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.orig\n+++ thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia\n@@ -0,0 +1,5 @@\n+Types: deb deb-src\n+URIs: http://apt.wikimedia.org/wikimedia\n+Suites: trixie-wikimedia\n+Components: thirdparty/haproxy32-awslc\n+Signed-By: /etc/apt/keyrings/wikimedia-archive-keyring.gpg", "parameters": "--- Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n+    target => /etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n+    order  => 10\n+    tag    => _etc_apt_sources.list.d_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n"}, {"resource": "File[/etc/haproxy/haproxy.cfg]", "content": "--- /etc/haproxy/haproxy.cfg.orig\n+++ /etc/haproxy/haproxy.cfg\n@@ -26,7 +26,6 @@\n     ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n     ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n     ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n-    ssl-dh-param-file /etc/ssl/dhparam.pem\n     tune.ssl.cachesize 512000\n     tune.ssl.lifetime 86400\n     maxconn 200000"}, {"resource": "Exec[apt_package_from_component_haproxy]", "parameters": "--- Exec[apt_package_from_component_haproxy].orig\n+++ Exec[apt_package_from_component_haproxy]\n\n@@\n-    subscribe => Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n+    subscribe => Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n"}, {"resource": "Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "parameters": "--- Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia].orig\n+++ Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n\n+    refreshonly => True\n+    command     => /usr/bin/apt-get update \n"}, {"resource": "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "parameters": "--- Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources].orig\n+++ Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]\n\n-    mode           => 0444\n-    backup         => puppet\n-    force          => False\n-    order          => alpha\n-    format         => plain\n-    owner          => root\n-    tag            => _etc_apt_sources.list.d_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources\n-    replace        => True\n-    show_diff      => True\n-    group          => root\n-    ensure_newline => False\n"}], "perc_changed": "1.20%"}, "core": {"total": 4080, "only_in_self": ["Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy]"], "only_in_other": ["Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy-awslc]"], "resource_diffs": [{"resource": "File[/etc/apt/preferences.d/apt_pin_haproxy.pref]", "content": "--- /etc/apt/preferences.d/apt_pin_haproxy.pref.orig\n+++ /etc/apt/preferences.d/apt_pin_haproxy.pref\n@@ -1,3 +1,3 @@\n Package: haproxy\n-Pin: release c=thirdparty/haproxy32\n+Pin: release c=thirdparty/haproxy32-awslc\n Pin-Priority: 1002"}, {"resource": "File[/etc/haproxy/haproxy.cfg]", "content": "--- /etc/haproxy/haproxy.cfg.orig\n+++ /etc/haproxy/haproxy.cfg\n@@ -26,7 +26,6 @@\n     ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n     ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n     ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n-    ssl-dh-param-file /etc/ssl/dhparam.pem\n     tune.ssl.cachesize 512000\n     tune.ssl.lifetime 86400\n     maxconn 200000"}, {"resource": "Exec[apt_package_from_component_haproxy]", "parameters": "--- Exec[apt_package_from_component_haproxy].orig\n+++ Exec[apt_package_from_component_haproxy]\n\n@@\n-    subscribe => Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n+    subscribe => Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n"}], "perc_changed": "0.42%"}, "main": {"total": 4080, "only_in_self": ["Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat::Fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy]"], "only_in_other": ["Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat::Fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Concat[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_file[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.sources]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia-header]", "Concat_fragment[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "Exec[apt_repository_thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]", "File[/etc/apt/sources.list.d/thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia.list]", "Package[haproxy-awslc]"], "resource_diffs": [{"resource": "Class[Profile::Apt]", "parameters": "--- Class[Profile::Apt].orig\n+++ Class[Profile::Apt]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy-awslc]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n"}, {"resource": "Class[Profile::Cache::Haproxy]", "parameters": "--- Class[Profile::Cache::Haproxy].orig\n+++ Class[Profile::Cache::Haproxy]\n\n@@\n-    haproxy_version => haproxy32\n+    haproxy_version => haproxy32-awslc\n"}, {"resource": "File[/etc/apt/preferences.d/apt_pin_haproxy.pref]", "content": "--- /etc/apt/preferences.d/apt_pin_haproxy.pref.orig\n+++ /etc/apt/preferences.d/apt_pin_haproxy.pref\n@@ -1,3 +1,3 @@\n Package: haproxy\n-Pin: release c=thirdparty/haproxy32\n+Pin: release c=thirdparty/haproxy32-awslc\n Pin-Priority: 1002"}, {"resource": "Class[Haproxy]", "parameters": "--- Class[Haproxy].orig\n+++ Class[Haproxy]\n\n@@\n-    package_name   => haproxy\n+    package_name   => haproxy-awslc\n@@\n-    config_content => # Note: This file is managed by puppet.\nglobal\n    user haproxy\n    group haproxy\n    stats socket /run/haproxy/haproxy.sock mode 600 expose-fd listeners level admin\n    log /var/lib/haproxy/dev/log local0 info\n    log /var/run/haproxykafka/haproxykafka.sock len 8192 format rfc5424 local0 info\n    tune.http.logurilen 2048\n    # do not keep old processes longer than 1m after a reload\n    hard-stop-after 1m\n    set-dumpable\n    nbthread 64\n\n    tune.lua.bool-sample-conversion pre-3.1-bug\n    lua-prepend-path /etc/haproxy/lua/private/?.lua\n    lua-load-per-thread /etc/haproxy/lua/private/main.lua\n    lua-load-per-thread /etc/haproxy/lua/maxmind-lookup.lua\n    tune.ssl.capture-buffer-size 96\n    lua-load-per-thread /etc/haproxy/lua/ja3n.lua\n    lua-load-per-thread /etc/haproxy/lua/ja4h.lua\n    lua-load-per-thread /etc/haproxy/lua/utf8ps.lua\n    lua-load-per-thread /etc/haproxy/lua/contact_info.lua\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_mmdb.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.mmdb\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_bloom.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.bloom\n\n    ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n    ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n    ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n    ssl-dh-param-file /etc/ssl/dhparam.pem\n    tune.ssl.cachesize 512000\n    tune.ssl.lifetime 86400\n    maxconn 200000\n\n\n    tune.h2.header-table-size 4096\n    tune.h2.max-concurrent-streams 100\n\n\ndefaults\n    mode       http\n    log-format \"%rt %Tr %Tw %Tc %ST {%[capture.req.hdr(0)]} {%[capture.res.hdr(0)]} %ts\"\n    log-format-sd %{+E}o\\ [haproxykafka@0\\ server_pid=\\\"%pid\\\"\\ ip=\\\"%ci\\\"\\ sequence=\\\"%rt\\\"\\ dt=\\\"%tr\\\"\\ time_backend_response=\\\"%Tr\\\"\\ http_status=\\\"%ST\\\"\\ response_size=\\\"%B\\\"\\ termination_state=\\\"%ts\\\"\\ uri_host=\\\"%[capture.req.hdr(0),lua.utf8ps]\\\"\\ referer=\\\"%[capture.req.hdr(1),lua.utf8ps]\\\"\\ user_agent=\\\"%[capture.req.hdr(2),lua.utf8ps]\\\"\\ accept_language=\\\"%[capture.req.hdr(3),lua.utf8ps]\\\"\\ range=\\\"%[capture.req.hdr(4),lua.utf8ps]\\\"\\ accept=\\\"%[capture.req.hdr(5),lua.utf8ps]\\\"\\ tls=\\\"%[var(txn.tls)]\\\"\\ cache_status=\\\"%[var(txn.x_cache_status)]\\\"\\ content_type=\\\"%[var(txn.content_type)]\\\"\\ x_analytics=\\\"%[var(txn.x_analytics)]\\\"\\ x_cache=\\\"%[var(txn.x_cache)]\\\"\\ backend=\\\"%[var(txn.server)]\\\"\\ http_method=\\\"%HM\\\"\\ uri_path=\\\"%HPO\\\"\\ uri_query=\\\"%HQ\\\"]\n\n    option     dontlognull\n    option     accept-unsafe-violations-in-http-request\n    option     accept-unsafe-violations-in-http-response\n    option     http-ignore-probes\n    retries    1\n    timeout    connect 50000\n    timeout    client 500000\n    timeout    server 500000\n\n+    config_content => # Note: This file is managed by puppet.\nglobal\n    user haproxy\n    group haproxy\n    stats socket /run/haproxy/haproxy.sock mode 600 expose-fd listeners level admin\n    log /var/lib/haproxy/dev/log local0 info\n    log /var/run/haproxykafka/haproxykafka.sock len 8192 format rfc5424 local0 info\n    tune.http.logurilen 2048\n    # do not keep old processes longer than 1m after a reload\n    hard-stop-after 1m\n    set-dumpable\n    nbthread 64\n\n    tune.lua.bool-sample-conversion pre-3.1-bug\n    lua-prepend-path /etc/haproxy/lua/private/?.lua\n    lua-load-per-thread /etc/haproxy/lua/private/main.lua\n    lua-load-per-thread /etc/haproxy/lua/maxmind-lookup.lua\n    tune.ssl.capture-buffer-size 96\n    lua-load-per-thread /etc/haproxy/lua/ja3n.lua\n    lua-load-per-thread /etc/haproxy/lua/ja4h.lua\n    lua-load-per-thread /etc/haproxy/lua/utf8ps.lua\n    lua-load-per-thread /etc/haproxy/lua/contact_info.lua\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_mmdb.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.mmdb\n    lua-load-per-thread /etc/haproxy/lua/cidergrinder_bloom.lua /usr/share/CIDERGRINDER/anonymous-residential.cider.bloom\n\n    ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n    ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n    ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n    tune.ssl.cachesize 512000\n    tune.ssl.lifetime 86400\n    maxconn 200000\n\n\n    tune.h2.header-table-size 4096\n    tune.h2.max-concurrent-streams 100\n\n\ndefaults\n    mode       http\n    log-format \"%rt %Tr %Tw %Tc %ST {%[capture.req.hdr(0)]} {%[capture.res.hdr(0)]} %ts\"\n    log-format-sd %{+E}o\\ [haproxykafka@0\\ server_pid=\\\"%pid\\\"\\ ip=\\\"%ci\\\"\\ sequence=\\\"%rt\\\"\\ dt=\\\"%tr\\\"\\ time_backend_response=\\\"%Tr\\\"\\ http_status=\\\"%ST\\\"\\ response_size=\\\"%B\\\"\\ termination_state=\\\"%ts\\\"\\ uri_host=\\\"%[capture.req.hdr(0),lua.utf8ps]\\\"\\ referer=\\\"%[capture.req.hdr(1),lua.utf8ps]\\\"\\ user_agent=\\\"%[capture.req.hdr(2),lua.utf8ps]\\\"\\ accept_language=\\\"%[capture.req.hdr(3),lua.utf8ps]\\\"\\ range=\\\"%[capture.req.hdr(4),lua.utf8ps]\\\"\\ accept=\\\"%[capture.req.hdr(5),lua.utf8ps]\\\"\\ tls=\\\"%[var(txn.tls)]\\\"\\ cache_status=\\\"%[var(txn.x_cache_status)]\\\"\\ content_type=\\\"%[var(txn.content_type)]\\\"\\ x_analytics=\\\"%[var(txn.x_analytics)]\\\"\\ x_cache=\\\"%[var(txn.x_cache)]\\\"\\ backend=\\\"%[var(txn.server)]\\\"\\ http_method=\\\"%HM\\\"\\ uri_path=\\\"%HPO\\\"\\ uri_query=\\\"%HQ\\\"]\n\n    option     dontlognull\n    option     accept-unsafe-violations-in-http-request\n    option     accept-unsafe-violations-in-http-response\n    option     http-ignore-probes\n    retries    1\n    timeout    connect 50000\n    timeout    client 500000\n    timeout    server 500000\n\n"}, {"resource": "File[/etc/haproxy/haproxy.cfg]", "content": "--- /etc/haproxy/haproxy.cfg.orig\n+++ /etc/haproxy/haproxy.cfg\n@@ -26,7 +26,6 @@\n     ssl-default-bind-options ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.3\n     ssl-default-bind-ciphers -ALL:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256\n     ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384\n-    ssl-dh-param-file /etc/ssl/dhparam.pem\n     tune.ssl.cachesize 512000\n     tune.ssl.lifetime 86400\n     maxconn 200000"}, {"resource": "Class[Adduser]", "parameters": "--- Class[Adduser].orig\n+++ Class[Adduser]\n\n@@\n-    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n+    before => ['Package[puppet]', 'Package[facter]', 'Package[augeas-tools]', 'Package[virt-what]', 'Package[puppet-module-puppetlabs-augeas-core]', 'Package[python3-prometheus-client]', 'Package[python3-yaml]', 'Package[ruby-net-ssh]', 'Package[openssl]', 'Package[ssl-cert]', 'Package[ca-certificates]', 'Package[wmf-certificates]', 'Package[ntp]', 'Package[systemd-timesyncd]', 'Package[exim4-config]', 'Package[exim4-daemon-light]', 'Package[logrotate]', 'Package[prometheus-node-exporter]', 'Package[bsdutils]', 'Package[smartmontools]', 'Package[rsyslog]', 'Package[rsyslog-openssl]', 'Package[cadvisor]', 'Package[acct]', 'Package[byobu]', 'Package[colordiff]', 'Package[curl]', 'Package[debian-goodies]', 'Package[ethtool]', 'Package[gdb]', 'Package[gdisk]', 'Package[git]', 'Package[htop]', 'Package[httpry]', 'Package[iotop]', 'Package[iperf]', 'Package[jq]', 'Package[libtemplate-perl]', 'Package[lldpd]', 'Package[lshw]', 'Package[molly-guard]', 'Package[moreutils]', 'Package[net-tools]', 'Package[numactl]', 'Package[ncdu]', 'Package[ngrep]', 'Package[pigz]', 'Package[psmisc]', 'Package[pv]', 'Package[python3]', 'Package[screen]', 'Package[strace]', 'Package[sysstat]', 'Package[tcpdump]', 'Package[tmux]', 'Package[tree]', 'Package[vim]', 'Package[vim-addon-manager]', 'Package[vim-scripts]', 'Package[wipe]', 'Package[xfsprogs]', 'Package[zsh]', 'Package[icdiff]', 'Package[linux-perf]', 'Package[bsd-mailx]', 'Package[ack]', 'Package[netcat-openbsd]', 'Package[tshark]', 'Package[fzf]', 'Package[ripgrep]', 'Package[fd-find]', 'Package[kitty-terminfo]', 'Package[mtr-tiny]', 'Package[bat]', 'Package[efibootmgr]', 'Package[bind9-dnsutils]', 'Package[tzdata]', 'Package[python3-wmflib]', 'Package[starship]', 'Package[ruby-sorted-set]', 'Package[btop]', 'Package[linux-sysctl-defaults]', 'Package[apport]', 'Package[command-not-found]', 'Package[command-not-found-data]', 'Package[ecryptfs-utils]', 'Package[mlocate]', 'Package[os-prober]', 'Package[python3-apport]', 'Package[wpasupplicant]', 'Package[apt-listchanges]', 'Package[isc-dhcp-client]', 'Package[rasdaemon]', 'Package[openssh-client]', 'Package[openssh-server]', 'Package[debdeploy-client]', 'Package[python3-dateutil]', 'Package[sudo]', 'Package[golang-cfssl]', 'Package[debmonitor-client]', 'Package[nagios-nrpe-server]', 'Package[monitoring-plugins]', 'Package[monitoring-plugins-basic]', 'Package[monitoring-plugins-standard]', 'Package[liburiparser1]', 'Package[python3-attr]', 'Package[iucode-tool]', 'Package[freeipmi-tools]', 'Package[freeipmi-ipmiseld]', 'Package[rsyslog-kafka]', 'Package[emacs-nox]', 'Package[prometheus-ipmi-exporter]', 'Package[python3-conftool]', 'Package[prometheus-varnishkafka-exporter]', 'Package[purged]', 'Package[linux-cpupower]', 'Package[geoip-bin]', 'Package[mmdb-bin]', 'Package[libgeoip-dev]', 'Package[libmaxminddb-dev]', 'Package[python3-logstash]', 'Package[socat]', 'Package[haproxy-awslc]', 'Package[python3-pystemd]', 'Package[benthos]', 'Package[lua5.4-maxminddb]', 'Package[lua5.4-ciderbloom]', 'Package[wikimedia-lvs-realserver]', 'Package[python3-poolcounter]', 'Package[python3-jsonschema]', 'Package[python3-requests]', 'Package[libvmod-netmapper]', 'Package[libvmod-querysort]', 'Package[libvmod-wmfuniq]', 'Package[varnish]', 'Package[varnish-modules]', 'Package[varnish-re2]', 'Package[libsodium-dev]', 'Package[python3-nacl]', 'Package[tcp-mss-clamper]', 'Package[haproxykafka]', 'Package[ruby-concurrent]', 'Package[ruby]', 'Package[libruby]', 'Package[puppet-agent]', 'Package[prometheus-rsyslog-exporter]', 'Package[initramfs-tools]', 'Package[python3-click]', 'Package[python3-box]', 'Package[varnishkafka]', 'Package[confd]', 'Package[python3-toml]', 'Package[mtail]', 'Package[prometheus-varnish-exporter]', 'Package[trafficserver]', 'Package[trafficserver-experimental-plugins]', 'Package[lua-busted]', 'Package[prometheus-trafficserver-exporter]', 'Package[fifo-log-demux]']\n"}, {"resource": "Apt::Package_from_component[haproxy]", "parameters": "--- Apt::Package_from_component[haproxy].orig\n+++ Apt::Package_from_component[haproxy]\n\n@@\n-    component => thirdparty/haproxy32\n+    component => thirdparty/haproxy32-awslc\n"}, {"resource": "Exec[apt_package_from_component_haproxy]", "parameters": "--- Exec[apt_package_from_component_haproxy].orig\n+++ Exec[apt_package_from_component_haproxy]\n\n@@\n-    subscribe => Apt::Repository[thirdparty-haproxy32-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n+    subscribe => Apt::Repository[thirdparty-haproxy32-awslc-apt.wikimedia.org-wikimedia-trixie-wikimedia]\n"}, {"resource": "Apt::Pin[apt_pin_haproxy]", "parameters": "--- Apt::Pin[apt_pin_haproxy].orig\n+++ Apt::Pin[apt_pin_haproxy]\n\n@@\n-    pin => release c=thirdparty/haproxy32\n+    pin => release c=thirdparty/haproxy32-awslc\n"}], "perc_changed": "0.71%"}}}