config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   7    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   8    SigningKeyIds "55BE302B";
   9    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  10    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  11    MyAdminAddress "ftpmaster@debian.org";
  12    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  13    MyDistribution "Debian"; // Used in emails
  14    BugServer "bugs.debian.org";
  15    PackagesServer "packages.debian.org";
  16    LockFile "/org/security.debian.org/dak/lock";
  17    Bcc "archive@ftp-master.debian.org";
  18    // GroupOverrideFilename "override.group-maint";
  19    FutureTimeTravelGrace 28800; // 8 hours
  20    PastCutoffYear "1984";
  21    SkipTime 300;
  22    CloseBugs "false";
  23    OverrideDisparityCheck "false";
  24    BXANotify "false";
  25    QueueBuildSuites
  26    {
  27      oldstable;
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  42 };
  43
  44 Import-Users-From-Passwd
  45 {
  46   ValidGID "800";
  47   // Comma separated list of users who are in Postgres but not the passwd file
  48   KnownPostgres "postgres,dak,www-data,udmsearch";
  49 };
  50
  51 Queue-Report
  52 {
  53   Directories
  54   {
  55     // byhand;
  56     // new;
  57     unembargoed;
  58   };
  59 };
  60
  61 Clean-Queues
  62 {
  63   Options
  64   {
  65     Days 14;
  66   };
  67  MorgueSubDir "queue";
  68 };
  69
  70 Rm
  71 {
  72   Options
  73   {
  74     Suite "unstable";
  75   };
  76
  77   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  78   LogFile "/org/security.debian.org/dak-log/removals.txt";
  79 };
  80
  81 Init-Archive
  82 {
  83   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  84 };
  85
  86 Clean-Suites
  87 {
  88   // How long (in seconds) dead packages are left before being killed
  89   StayOfExecution 129600; // 1.5 days
  90   QueueBuildStayOfExecution 86400; // 24 hours
  91   MorgueSubDir "pool";
  92   OverrideFilename "override.source-only";
  93 };
  94
  95 Security-Install
  96 {
  97   ComponentMappings
  98   {
  99     main "ftp-master.debian.org:/pub/UploadQueue";
 100     contrib "ftp-master.debian.org:/pub/UploadQueue";
 101     non-free "ftp-master.debian.org:/pub/UploadQueue";
 102     non-US/main "non-us.debian.org:/pub/UploadQueue";
 103     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 104     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 105   };
 106 };
 107
 108 Suite
 109 {
 110   // Priority determines which suite is used for the Maintainers file
 111   // as generated by 'dak make-maintainers' (highest wins).
 112
 113   OldStable
 114   {
 115         Components
 116         {
 117           updates/main;
 118           updates/contrib;
 119           updates/non-free;
 120         };
 121         Announce "dak@security.debian.org";
 122         Version "";
 123         Origin "Debian";
 124         Label "Debian-Security";
 125         Description "Debian 4.0 Security Updates";
 126         ValidTime 864000; // 10 days
 127         CodeName "etch";
 128         OverrideCodeName "etch";
 129         CopyDotDak "/org/security.debian.org/queue/done/";
 130   };
 131
 132   Stable
 133   {
 134         Components
 135         {
 136           updates/main;
 137           updates/contrib;
 138           updates/non-free;
 139         };
 140         Announce "dak@security.debian.org";
 141         Version "";
 142         Origin "Debian";
 143         Label "Debian-Security";
 144         Description "Debian 5.0 Security Updates";
 145         ValidTime 864000; // 10 days
 146         CodeName "lenny";
 147         OverrideCodeName "lenny";
 148         CopyDotDak "/org/security.debian.org/queue/done/";
 149   };
 150
 151   Testing
 152   {
 153         Components
 154         {
 155           updates/main;
 156           updates/contrib;
 157           updates/non-free;
 158         };
 159         Announce "dak@security.debian.org";
 160         Version "";
 161         Origin "Debian";
 162         Label "Debian-Security";
 163         Description "Debian testing Security Updates";
 164         ValidTime 864000; // 10 days
 165         CodeName "squeeze";
 166         OverrideCodeName "squeeze";
 167         CopyDotDak "/org/security.debian.org/queue/done/";
 168   };
 169 };
 170
 171 SuiteMappings
 172 {
 173  "silent-map stable-security stable";
 174  "silent-map oldstable-security oldstable";
 175  // JT - FIXME, hackorama
 176  // "silent-map testing-security stable";
 177   "silent-map etch-secure oldstable";
 178   "silent-map lenny-secure stable";
 179   "silent-map testing-security testing";
 180 };
 181
 182 Dir
 183 {
 184   Root "/org/security.debian.org/ftp/";
 185   Pool "/org/security.debian.org/ftp/pool/";
 186   Dak "/org/security.debian.org/dak/";
 187   Templates "/org/security.debian.org/dak/templates/";
 188   PoolRoot "pool/";
 189   Override "/org/security.debian.org/override/";
 190   Lock "/org/security.debian.org/lock/";
 191   Lists "/org/security.debian.org/dak-database/dists/";
 192   Log "/org/security.debian.org/dak-log/";
 193   Morgue "/org/security.debian.org/morgue/";
 194   MorgueReject "reject";
 195   Override "/org/security.debian.org/scripts/override/";
 196   QueueBuild "/org/security.debian.org/buildd/";
 197   Upload "/srv/queued/UploadQueue/";
 198   Queue
 199   {
 200     Accepted "/org/security.debian.org/queue/accepted/";
 201     Byhand "/org/security.debian.org/queue/byhand/";
 202     Done "/org/security.debian.org/queue/done/";
 203     Holding "/org/security.debian.org/queue/holding/";
 204     New "/org/security.debian.org/queue/new/";
 205     Reject "/org/security.debian.org/queue/reject/";
 206     Unchecked "/org/security.debian.org/queue/unchecked/";
 207     ProposedUpdates "/does/not/exist/"; // XXX fixme
 208     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 209
 210     Embargoed "/org/security.debian.org/queue/embargoed/";
 211     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 212     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 213   };
 214 };
 215
 216 DB
 217 {
 218   Name "obscurity";
 219   Host "";
 220   Port -1;
 221
 222 };
 223
 224 Architectures
 225 {
 226
 227   source "Source";
 228   all "Architecture Independent";
 229   alpha "DEC Alpha";
 230   hppa "HP PA RISC";
 231   arm "ARM";
 232   armel "ARM EABI";
 233   i386 "Intel ia32";
 234   ia64 "Intel ia64";
 235   mips "MIPS (Big Endian)";
 236   mipsel "MIPS (Little Endian)";
 237   powerpc "PowerPC";
 238   s390 "IBM S/390";
 239   sparc "Sun SPARC/UltraSPARC";
 240   amd64 "AMD x86_64 (AMD64)";
 241
 242 };
 243
 244 Archive
 245 {
 246
 247   security
 248   {
 249     OriginServer "security.debian.org";
 250     PrimaryMirror "security.debian.org";
 251     Description "Security Updates for the Debian project";
 252   };
 253
 254 };
 255
 256 Component
 257 {
 258
 259   updates/main
 260   {
 261         Description "Main (updates)";
 262         MeetsDFSG "true";
 263   };
 264
 265   updates/contrib
 266   {
 267         Description "Contrib (updates)";
 268         MeetsDFSG "true";
 269   };
 270
 271   updates/non-free
 272   {
 273         Description "Software that fails to meet the DFSG";
 274         MeetsDFSG "false";
 275   };
 276
 277 };
 278
 279 ComponentMappings
 280 {
 281  "main updates/main";
 282  "contrib updates/contrib";
 283  "non-free updates/non-free";
 284  "non-US/main updates/main";
 285  "non-US/contrib updates/contrib";
 286  "non-US/non-free updates/non-free";
 287 };
 288
 289 Section
 290 {
 291   admin;
 292   cli-mono;
 293   comm;
 294   database;
 295   debian-installer;
 296   debug;
 297   devel;
 298   doc;
 299   editors;
 300   embedded;
 301   electronics;
 302   fonts;
 303   games;
 304   gnome;
 305   graphics;
 306   gnu-r;
 307   gnustep;
 308   hamradio;
 309   haskell;
 310   httpd;
 311   interpreters;
 312   java;
 313   kde;
 314   kernel;
 315   libdevel;
 316   libs;
 317   lisp;
 318   localization;
 319   mail;
 320   math;
 321   misc;
 322   net;
 323   news;
 324   ocaml;
 325   oldlibs;
 326   otherosfs;
 327   perl;
 328   php;
 329   python;
 330   ruby;
 331   science;
 332   shells;
 333   sound;
 334   tex;
 335   text;
 336   utils;
 337   web;
 338   vcs;
 339   video;
 340   x11;
 341   xfce;
 342   zope;
 343 };
 344
 345 Priority
 346 {
 347   required 1;
 348   important 2;
 349   standard 3;
 350   optional 4;
 351   extra 5;
 352   source 0; // i.e. unused
 353 };
 354
 355 OverrideType
 356 {
 357   deb;
 358   udeb;
 359   dsc;
 360 };
 361
 362 Location
 363 {
 364   /org/security.debian.org/ftp/pool/
 365     {
 366       Archive "security";
 367       Suites
 368         {
 369           OldStable;
 370           Stable;
 371           Testing;
 372         };
 373       Type "pool";
 374     };
 375 };
 376
 377 Urgency
 378 {
 379   Default "low";
 380   Valid
 381   {
 382     low;
 383     medium;
 384     high;
 385     emergency;
 386     critical;
 387   };
 388 };