2 # No way I try to deal with a crippled sh just for POSIX foo.
4 # Copyright (C) 2009 Joerg Jaspert <joerg@debian.org>
6 # This program is free software; you can redistribute it and/or
7 # modify it under the terms of the GNU General Public License as
8 # published by the Free Software Foundation; version 2.
10 # This program is distributed in the hope that it will be useful, but
11 # WITHOUT ANY WARRANTY; without even the implied warranty of
12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 # General Public License for more details.
15 # You should have received a copy of the GNU General Public License
16 # along with this program; if not, write to the Free Software
17 # Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
19 # Homer: Are you saying you're never going to eat any animal again? What
25 # Lisa: Dad, those all come from the same animal.
26 # Homer: Heh heh heh. Ooh, yeah, right, Lisa. A wonderful, magical animal.
30 # make sure to only use defined variables
32 # ERR traps should be inherited from functions too. (And command
33 # substitutions and subshells and whatnot, but for us the functions is
34 # the important part here)
37 # import the general variable set.
38 export SCRIPTVARS=/srv/ftp.debian.org/dak/config/debian/vars
41 ########################################################################
43 ########################################################################
44 # common functions are "outsourced"
45 . "${configdir}/common"
47 # Timestamp. Used for dinstall stat graphs
49 echo "Archive maintenance timestamp ($1): $(date +%H:%M:%S)"
55 rm -f ${LOCK_ACCEPTED}
58 # If we error out this one is called, *FOLLOWED* by cleanup above
60 ERRDATE=$(date "+%Y.%m.%d-%H:%M:%S")
62 subject="ATTENTION ATTENTION!"
63 if [ "${error}" = "false" ]; then
64 subject="${subject} (continued)"
66 subject="${subject} (interrupted)"
68 subject="${subject} dinstall error at ${ERRDATE} in ${STAGEFILE} - (Be quiet, Brain, or I'll stab you with a Q-tip)"
70 cat "${STAGEFILE}.log" | mail -s "${subject}" -a "X-Debian: DAK" cron@ftp-master.debian.org
73 ########################################################################
74 # the actual dinstall functions follow #
75 ########################################################################
77 # Setup the notice file to tell bad mirrors they used the wrong time
81 Packages are currently being installed and indices rebuilt.
82 Maintenance is automatic, starting at 01|07|13|19:52 UTC,
83 and ending about an hour later. This file is then removed.
85 You should not mirror the archive during this period. If you find this
86 file on a Debian mirror please have a nice talk with the admin. They
87 are doing something wrong.
91 # pushing merkels QA user, part one
93 log "Telling merkels QA user that we start dinstall"
94 ssh -2 -i ~dak/.ssh/push_merkel_qa -o BatchMode=yes -o SetupTimeOut=90 -o ConnectTimeout=90 qa@merkel.debian.org sleep 1
97 # Create the postgres dump files
98 function pgdump_pre() {
99 log "Creating pre-daily-cron-job backup of projectb database..."
100 pg_dump projectb > $base/backup/dump_pre_$(date +%Y.%m.%d-%H:%M:%S)
103 function pgdump_post() {
104 log "Creating post-daily-cron-job backup of projectb database..."
106 POSTDUMP=$(date +%Y.%m.%d-%H:%M:%S)
107 pg_dump projectb > $base/backup/dump_$POSTDUMP
108 pg_dumpall --globals-only > $base/backup/dumpall_$POSTDUMP
109 ln -sf $base/backup/dump_$POSTDUMP current
110 ln -sf $base/backup/dumpall_$POSTDUMP currentall
113 # Load the dak-dev projectb
114 function pgdakdev() {
116 echo "drop database projectb" | psql -p 5433 template1
117 cat currentall | psql -p 5433 template1
118 createdb -p 5433 -T template0 projectb
119 fgrep -v '\connect' current | psql -p 5433 projectb
122 # Updating various files
124 log "Updating Bugs docu, Mirror list and mailing-lists.txt"
126 $scriptsdir/update-bugdoctxt
127 $scriptsdir/update-mirrorlists
128 $scriptsdir/update-mailingliststxt
129 $scriptsdir/update-pseudopackages.sh
132 # Process (oldstable)-proposed-updates "NEW" queue
133 function punew_do() {
134 cd "${queuedir}/${1}"
136 dak process-new -a -C COMMENTS >> REPORT || true
140 log "Doing automated p-u-new processing"
144 log "Doing automated o-p-u-new processing"
148 # The first i18n one, syncing new descriptions
150 log "Synchronizing i18n package descriptions"
151 # First sync their newest data
152 cd ${scriptdir}/i18nsync
153 rsync -aq --delete --delete-after ddtp-sync:/does/not/matter . || true
155 # Now check if we still know about the packages for which they created the files
156 # is the timestamp signed by us?
157 if $(gpgv --keyring /srv/ftp.debian.org/s3kr1t/dot-gnupg/pubring.gpg timestamp.gpg timestamp); then
158 # now read it. As its signed by us we are sure the content is what we expect, no need
159 # to do more here. And we only test -d a directory on it anyway.
160 TSTAMP=$(cat timestamp)
161 # do we have the dir still?
162 if [ -d ${scriptdir}/i18n/${TSTAMP} ]; then
164 if ${scriptsdir}/ddtp-i18n-check.sh . ${scriptdir}/i18n/${TSTAMP}; then
165 # Yay, worked, lets copy around
166 for dir in squeeze sid; do
167 if [ -d dists/${dir}/ ]; then
168 cd dists/${dir}/main/i18n
169 rsync -aq --delete --delete-after . ${ftpdir}/dists/${dir}/main/i18n/.
171 cd ${scriptdir}/i18nsync
174 echo "ARRRR, bad guys, wrong files, ARRR"
175 echo "Arf, Arf, Arf, bad guys, wrong files, arf, arf, arf" | mail -s "Don't you kids take anything. I'm watching you. I've got eye implants in the back of my head." debian-l10n-devel@lists.alioth.debian.org
178 echo "ARRRR, missing the timestamp ${TSTAMP} directory, not updating i18n, ARRR"
179 echo "Arf, Arf, Arf, missing the timestamp ${TSTAMP} directory, not updating i18n, arf, arf, arf" | mail -s "Lisa, if you don't like your job you don't strike. You just go in every day and do it really half-assed. That's the American way." debian-l10n-devel@lists.alioth.debian.org
182 echo "ARRRRRRR, could not verify our timestamp signature, ARRR. Don't mess with our files, i18n guys, ARRRRR."
183 echo "Arf, Arf, Arf, could not verify our timestamp signature, arf. Don't mess with our files, i18n guys, arf, arf, arf" | mail -s "You can't keep blaming yourself. Just blame yourself once, and move on." debian-l10n-devel@lists.alioth.debian.org
187 # Process the accepted queue
188 function accepted() {
189 log "Processing queue/accepted"
190 rm -f "$accepted/REPORT"
191 dak process-accepted -pa -d "$accepted" > "$accepted/REPORT"
192 cat "$accepted/REPORT" | mail -s "Install for $(date +"%D - %R")" ftpmaster@ftp-master.debian.org
193 chgrp debadmin "$accepted/REPORT"
194 chmod 664 "$accepted/REPORT"
198 log "Checking for cruft in overrides"
201 log "Fixing symlinks in $ftpdir"
202 symlinks -d -r $ftpdir
206 log "Generating suite file lists for apt-ftparchive"
207 dak make-suite-file-list
210 function fingerprints() {
211 log "Updating fingerprints"
212 dak import-keyring -L /srv/keyring.debian.org/keyrings/debian-keyring.gpg
215 dak import-keyring --generate-users "%s" /srv/keyring.debian.org/keyrings/debian-maintainers.gpg >"${OUTFILE}"
217 if [ -s "${OUTFILE}" ]; then
218 /usr/sbin/sendmail -odq -oi -t -f envelope@ftp-master.debian.org <<EOF
219 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
220 To: <debian-project@lists.debian.org>
221 Subject: Debian Maintainers Keyring changes
222 Content-Type: text/plain; charset=utf-8
225 The following changes to the debian-maintainers keyring have just been activated:
229 Debian distribution maintenance software,
230 on behalf of the Keyring maintainers
237 function overrides() {
238 log "Writing overrides into text files"
243 rm -f override.sid.all3
244 for i in main contrib non-free main.debian-installer; do cat override.sid.$i >> override.sid.all3; done
248 log "Generating package / file mapping"
249 dak make-pkg-file-mapping | bzip2 -9 > $base/ftp/indices/package-file.map.bz2
252 function packages() {
253 log "Generating Packages and Sources files"
255 apt-ftparchive generate apt.conf
259 log "Generating pdiff files"
260 dak generate-index-diffs
264 log "Generating Release files"
265 dak generate-releases
268 function dakcleanup() {
269 log "Cleanup old packages/files"
270 dak clean-suites -m 10000
275 # Needs to be rebuilt, as files have moved. Due to unaccepts, we need to
276 # update this before wanna-build is updated.
277 log "Regenerating wanna-build/buildd information"
278 psql projectb -A -t -q -c "SELECT filename FROM queue_build WHERE suite = 5 AND queue = 0 AND in_queue = true AND filename ~ 'd(sc|eb)$'" > $dbdir/dists/unstable_accepted.list
279 symlinks -d /srv/incoming.debian.org/buildd > /dev/null
280 apt-ftparchive generate apt.conf.buildd
283 function buildd_dir() {
284 # Rebuilt the buildd dir to avoid long times of 403
285 log "Regenerating the buildd incoming dir"
286 STAMP=$(date "+%Y%m%d%H%M")
291 log "Running various scripts from $scriptsdir"
301 echo "Regenerating \"public\" mirror/ hardlink fun"
303 rsync -aH --link-dest ${ftpdir} --exclude Archive_Maintenance_In_Progress --delete --delete-after --ignore-errors ${ftpdir}/. .
307 log "Trigger daily wanna-build run"
308 ssh -o BatchMode=yes -o SetupTimeOut=90 -o ConnectTimeout=90 wbadm@buildd /org/wanna-build/trigger.daily || echo "W-B trigger.daily failed" | mail -s "W-B Daily trigger failed" ftpmaster@ftp-master.debian.org
312 log "Expiring old database dumps..."
314 $scriptsdir/expire_dumps -d . -p -f "dump_*"
317 function transitionsclean() {
318 log "Removing out of date transitions..."
320 dak transitions -c -a
324 # Send a report on NEW/BYHAND packages
325 log "Nagging ftpteam about NEW/BYHAND packages"
326 dak queue-report | mail -e -s "NEW and BYHAND on $(date +%D)" ftpmaster@ftp-master.debian.org
327 # and one on crufty packages
328 log "Sending information about crufty packages"
329 dak cruft-report > $webdir/cruft-report-daily.txt
330 dak cruft-report -s experimental >> $webdir/cruft-report-daily.txt
331 cat $webdir/cruft-report-daily.txt | mail -e -s "Debian archive cruft report for $(date +%D)" ftpmaster@ftp-master.debian.org
335 log "Updating DM html page"
336 $scriptsdir/dm-monitor >$webdir/dm-uploaders.html
340 log "Categorizing uncategorized bugs filed against ftp.debian.org"
345 # Push dak@merkel so it syncs the projectb there. Returns immediately, the sync runs detached
346 log "Trigger merkel/flotows projectb sync"
347 ssh -2 -o BatchMode=yes -o SetupTimeOut=30 -o ConnectTimeout=30 -i ~/.ssh/push_merkel_projectb dak@merkel.debian.org sleep 1
348 # Also trigger flotow, the ftpmaster test box
349 ssh -2 -o BatchMode=yes -o SetupTimeOut=30 -o ConnectTimeout=30 -i ~/.ssh/push_flotow_projectb dak@flotow.debconf.org sleep 1
353 # Push dak@merkel to tell it to sync the dd accessible parts. Returns immediately, the sync runs detached
354 log "Trigger merkels dd accessible parts sync"
355 ssh -2 -o BatchMode=yes -o SetupTimeOut=30 -o ConnectTimeout=30 -i ~/.ssh/push_merkel_ddaccess dak@merkel.debian.org sleep 1
358 function runparts() {
359 log "Using run-parts to run scripts in $base/scripts/distmnt"
360 run-parts --report $base/scripts/distmnt
364 log "Exporting package data foo for i18n project"
365 STAMP=$(date "+%Y%m%d%H%M")
366 mkdir -p ${scriptdir}/i18n/${STAMP}
367 cd ${scriptdir}/i18n/${STAMP}
368 dak control-suite -l stable > lenny
369 dak control-suite -l testing > squeeze
370 dak control-suite -l unstable > sid
371 echo "${STAMP}" > timestamp
372 gpg --secret-keyring /srv/ftp.debian.org/s3kr1t/dot-gnupg/secring.gpg --keyring /srv/ftp.debian.org/s3kr1t/dot-gnupg/pubring.gpg --no-options --batch --no-tty --armour --default-key 55BE302B --detach-sign -o timestamp.gpg timestamp
376 ln -sfT ${scriptdir}/i18n/${STAMP} i18n
379 find ./i18n -mindepth 1 -maxdepth 1 -mtime +2 -not -name "${STAMP}" -type d -print0 | xargs --no-run-if-empty -0 rm -rf
383 log "Updating stats data"
385 $scriptsdir/update-ftpstats $base/log/* > $base/misc/ftpstats.data
386 R --slave --vanilla < $base/misc/ftpstats.R
387 dak stats arch-space > $webdir/arch-space
388 dak stats pkg-nums > $webdir/pkg-nums
391 function aptftpcleanup() {
392 log "Clean up apt-ftparchive's databases"
394 apt-ftparchive -q clean apt.conf
397 function compress() {
398 log "Compress old psql backups"
400 find -maxdepth 1 -mindepth 1 -type f -name 'dump_pre_*' -mtime +2 -print0 | xargs -0 --no-run-if-empty rm
402 find -maxdepth 1 -mindepth 1 -type f -name 'dump_*' \! -name '*.bz2' \! -name '*.gz' -mmin +720 |
403 while read dumpname; do
404 echo "Compressing $dumpname"
405 bzip2 -9fv "$dumpname"
407 find -maxdepth 1 -mindepth 1 -type f -name "dumpall_*" \! -name '*.bz2' \! -name '*.gz' -mmin +720 |
408 while read dumpname; do
409 echo "Compressing $dumpname"
410 bzip2 -9fv "$dumpname"
412 finddup -l -d $base/backup
415 function logstats() {
416 $masterdir/tools/logs.py "$1"
419 # save timestamp when we start
420 function savetimestamp() {
421 NOW=`date "+%Y.%m.%d-%H:%M:%S"`
422 echo ${NOW} > "${dbdir}/dinstallstart"
425 function maillogfile() {
426 cat "$LOGFILE" | mail -s "Log for dinstall run of ${NOW}" cron@ftp-master.debian.org
429 function renamelogfile() {
430 if [ -f "${dbdir}/dinstallstart" ]; then
431 NOW=$(cat "${dbdir}/dinstallstart")
433 mv "$LOGFILE" "$logdir/dinstall_${NOW}.log"
434 logstats "$logdir/dinstall_${NOW}.log"
435 bzip2 -9 "$logdir/dinstall_${NOW}.log"
437 error "Problem, I don't know when dinstall started, unable to do log statistics."
438 NOW=`date "+%Y.%m.%d-%H:%M:%S"`
440 mv "$LOGFILE" "$logdir/dinstall_${NOW}.log"
441 bzip2 -9 "$logdir/dinstall_${NOW}.log"
445 function testingsourcelist() {
446 dak ls -s testing -f heidi -r .| egrep 'source$' > ${webdir}/testing.list
449 # do a last run of process-unchecked before dinstall is on.
450 function process_unchecked() {
451 log "Processing the unchecked queue"
453 UNCHECKED_WITHOUT_LOCK="-p"
458 ########################################################################
459 ########################################################################
461 # Function to save which stage we are in, so we can restart an interrupted
462 # dinstall. Or even run actions in parallel, if we dare to, by simply
463 # backgrounding the call to this function. But that should only really be
464 # done for things we don't care much about.
466 # This should be called with the first argument being an array, with the
468 # - FUNC - the function name to call
469 # - ARGS - Possible arguments to hand to the function. Can be the empty string
470 # - TIME - The timestamp name. Can be the empty string
471 # - ERR - if this is the string false, then the call will be surrounded by
472 # set +e ... set -e calls, so errors in the function do not exit
473 # dinstall. Can be the empty string, meaning true.
475 # MAKE SURE TO KEEP THIS THE LAST FUNCTION, AFTER ALL THE VARIOUS ONES
476 # ADDED FOR DINSTALL FEATURES!
483 STAGEFILE="${stagedir}/${FUNC}"
484 if [ -f "${STAGEFILE}" ]; then
485 stamptime=$(/usr/bin/stat -c %Z "${STAGEFILE}")
487 difference=$(( $unixtime - $stamptime ))
488 if [ ${difference} -ge 14400 ]; then
489 log_error "Did already run ${FUNC}, stagefile exists, but that was ${difference} seconds ago. Please check."
491 log "Did already run ${FUNC}, not calling again..."
496 debug "Now calling function ${FUNC}. Arguments: ${ARGS}. Timestamp: ${TIME}"
498 # Make sure we are always at the same place. If a function wants to be elsewhere,
499 # it has to cd first!
502 # Now redirect the output into $STAGEFILE.log. In case it errors out somewhere our
503 # errorhandler trap can then mail the contents of $STAGEFILE.log only, instead of a whole
504 # dinstall logfile. Short error mails ftw!
505 exec >> "${STAGEFILE}.log" 2>&1
507 if [ -f "${LOCK_STOP}" ]; then
508 log "${LOCK_STOP} exists, exiting immediately"
512 if [ "${error}" = "false" ]; then
517 # No matter what happened in the function, we make sure we have set -e default state back
520 # Make sure we are always at the same place.
525 if [ -n "${TIME}" ]; then
529 # And the output goes back to the normal logfile
530 exec >> "$LOGFILE" 2>&1
532 # Now we should make sure that we have a usable dinstall.log, so append the $STAGEFILE.log
534 cat "${STAGEFILE}.log" >> "${LOGFILE}"
535 rm -f "${STAGEFILE}.log"
537 if [ -f "${LOCK_STOP}" ]; then
538 log "${LOCK_STOP} exists, exiting immediately"
543 ########################################################################
546 LOGFILE="$logdir/dinstall.log"
548 exec >> "$LOGFILE" 2>&1
550 # usually we are not using debug logs. Set to 1 if you want them.
556 # where do we want mails to go? For example log entries made with error()
557 if [ "x$(hostname -s)x" != "xriesx" ]; then
558 # Not our ftpmaster host
559 MAILTO=${MAILTO:-"root"}
562 MAILTO=${MAILTO:-"ftpmaster@debian.org"}
565 # How many logfiles to keep
566 LOGROTATE=${LOGROTATE:-400}
568 # Marker for dinstall start
569 DINSTALLSTART="${lockdir}/dinstallstart"
570 # Marker for dinstall end
571 DINSTALLEND="${lockdir}/dinstallend"
573 touch "${DINSTALLSTART}"
576 # Tell everyone we are doing some work
577 NOTICE="$ftpdir/Archive_Maintenance_In_Progress"
579 # lock cron.unchecked (it immediately exits when this exists)
580 LOCK_DAILY="$lockdir/daily.lock"
582 # Lock cron.unchecked from doing work
583 LOCK_ACCEPTED="$lockdir/unchecked.lock"
585 # Lock process-new from doing work
586 LOCK_NEW="$lockdir/processnew.lock"
588 # This file is simply used to indicate to britney whether or not
589 # the Packages file updates completed sucessfully. It's not a lock
590 # from our point of view
591 LOCK_BRITNEY="$lockdir/britney.lock"
593 # If this file exists we exit immediately after the currently running
595 LOCK_STOP="$lockdir/archive.stop"
597 lockfile -l 3600 "${LOCK_DAILY}"
599 trap cleanup EXIT TERM HUP INT QUIT
601 touch "${LOCK_BRITNEY}"
637 TIME="External Updates"
667 lockfile "$LOCK_ACCEPTED"
671 FUNC="process_unchecked"
703 rm -f "$LOCK_ACCEPTED"
708 TIME="make-suite-file-list"
716 TIME="import-keyring"
732 TIME="pkg-file-mapping"
740 TIME="apt-ftparchive"
788 TIME="mirror hardlinks"
803 rm -f "${LOCK_DAILY}"
805 ts "locked part finished"
824 FUNC="transitionsclean"
825 TIME="transitionsclean"
857 TIME="merkel projectb push"
888 FUNC="testingsourcelist"
895 rm -f ${LOCK_BRITNEY}
907 TIME="apt-ftparchive cleanup"
915 TIME="merkel ddaccessible sync"
929 log "Daily cron scripts successful, all done"
931 exec > "$logdir/afterdinstall.log" 2>&1
942 # Now, at the very (successful) end of dinstall, make sure we remove
943 # our stage files, so the next dinstall run will do it all again.
945 touch "${DINSTALLEND}"