config/debian-security/cron.buildd

   1 #! /bin/bash
   2 #
   3 # Executed after cron.unchecked
   4
   5 set -e
   6 set -u
   7
   8 export SCRIPTVARS=/srv/security-master.debian.org/dak/config/debian-security/vars
   9 . $SCRIPTVARS
  10 SSH_SOCKET=~/.ssh/buildd.debian.org.socket
  11 DISTS=$(dak admin s list)
  12
  13 if [ -e $ftpdir/Archive_Maintenance_In_Progress ]; then
  14     exit 0
  15 fi
  16
  17 for dist in $DISTS; do
  18     eval SOURCES_$dist=`stat -c "%Y" $base/buildd/$dist/Sources.gz`
  19     eval PACKAGES_$dist=`stat -c "%Y" $base/buildd/$dist/Packages.gz`
  20 done
  21
  22 cd $configdir
  23 apt-ftparchive -qq -o APT::FTPArchive::Contents=off generate apt.conf.buildd
  24
  25 cd  ${base}/buildd
  26 for dist in $DISTS; do
  27     rm -f $dist/Release*
  28     archs=$(dak admin s-a list-arch $dist | tr '\n' ' ')
  29     apt-ftparchive -qq -o APT::FTPArchive::Release::Origin="Debian" -o APT::FTPArchive::Release::Label="Debian" -o APT::FTPArchive::Release::Description="buildd $dist security" -o APT::FTPArchive::Release::Architectures="${archs}" release $dist > Release
  30     gpg --secret-keyring ${base}/s3kr1t/dot-gnupg/secring.gpg --keyring ${base}/s3kr1t/dot-gnupg/pubring.gpg --no-options --batch --no-tty --armour --default-key 55BE302B --detach-sign -o Release.gpg Release
  31     mv Release* $dist/.
  32 done
  33
  34 dists=
  35
  36
  37 for dist in $DISTS; do
  38     eval NEW_SOURCES_$dist=`stat -c "%Y" $base/buildd/$dist/Sources.gz`
  39     eval NEW_PACKAGES_$dist=`stat -c "%Y" $base/buildd/$dist/Packages.gz`
  40     old=SOURCES_$dist
  41     new=NEW_$old
  42     if [ ${!new} -gt ${!old} ]; then
  43         if [ -z "$dists" ]; then
  44             dists="$dist"
  45         else
  46             dists="$dists $dist"
  47         fi
  48         continue
  49     fi
  50     old=PACKAGES_$dist
  51     new=NEW_$old
  52     if [ ${!new} -gt ${!old} ]; then
  53         if [ -z "$dists" ]; then
  54             dists="$dist"
  55         else
  56             dists="$dists $dist"
  57         fi
  58         continue
  59     fi
  60 done
  61
  62 if [ ! -z "$dists" ]; then
  63     # setup ssh master process
  64     ssh wbadm@buildd -S $SSH_SOCKET -MN 2> /dev/null &
  65     SSH_PID=$!
  66     while [ ! -S $SSH_SOCKET ]; do
  67         sleep 1
  68     done
  69     trap 'kill -TERM $SSH_PID' 0
  70     for d in $dists; do
  71         ssh wbadm@buildd -S $SSH_SOCKET trigger.security $d
  72     done
  73 fi