]> git.decadent.org.uk Git - dak.git/blob - config/debian-security/dak.conf
modify new-security-install to allow multiple packages accepted at once
[dak.git] / config / debian-security / dak.conf
1 Dinstall
2 {
3    GPGKeyring {
4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
5    };
6    // was non-us.d.o path before
7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
9    SigningKeyIds "55BE302B";
10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
11    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
12    MyAdminAddress "ftpmaster@debian.org";
13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
14    MyDistribution "Debian"; // Used in emails
15    BugServer "bugs.debian.org";
16    PackagesServer "packages.debian.org";
17    LockFile "/org/security-master.debian.org/dak/lock";
18    Bcc "archive@ftp-master.debian.org";
19    // GroupOverrideFilename "override.group-maint";
20    FutureTimeTravelGrace 28800; // 8 hours
21    PastCutoffYear "1984";
22    SkipTime 300;
23    CloseBugs "false";
24    OverrideDisparityCheck "false";
25    BXANotify "false";
26    QueueBuildSuites
27    {
28      stable;
29      testing;
30    };
31    SecurityQueueHandling "true";     
32    SecurityQueueBuild "true";     
33    DefaultSuite "stable";
34    SuiteSuffix "updates";
35    OverrideMaintainer "dak@security.debian.org";
36    LegacyStableHasNoSections "false";
37 };
38
39 Process-New
40 {
41   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
42   LockDir "/srv/security-master.debian.org/lock/new/";
43 };
44
45 Import-Users-From-Passwd
46 {
47   ValidGID "800";
48   // Comma separated list of users who are in Postgres but not the passwd file
49   KnownPostgres "postgres,dak,www-data,udmsearch";
50 };
51
52 Queue-Report
53 {
54   Directories
55   {
56     byhand;
57     new;
58     unembargoed;
59     embargoed;
60   };
61 };
62
63 Import-Keyring
64 {
65   /srv/keyring.debian.org/keyrings/debian-maintainers.gpg
66     {
67       Debian-Maintainer "true";
68     };
69 };
70
71 Import-LDAP-Fingerprints
72 {
73   LDAPDn "ou=users,dc=debian,dc=org";
74   LDAPServer "db.debian.org";
75   ExtraKeyrings
76   {
77     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
78     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
79     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
80   };
81   KeyServer "wwwkeys.eu.pgp.net";
82 };
83
84 Check-Overrides
85 {
86   OverrideSuites
87   {
88     Stable
89     {
90       Process "0";
91     };
92
93     Testing
94     {
95       Process "0";
96     };
97
98   };
99 };
100
101 Clean-Queues
102 {
103   Options
104   {
105     Days 14;
106   };
107  MorgueSubDir "queue";
108 };
109
110 Rm
111 {
112   Options
113   {
114     Suite "unstable";
115   };
116
117   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
118   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
119 };
120
121 Init-Archive
122 {
123   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
124 };
125
126 Clean-Suites
127 {
128   // How long (in seconds) dead packages are left before being killed
129   StayOfExecution 129600; // 1.5 days
130   QueueBuildStayOfExecution 86400; // 24 hours
131   MorgueSubDir "pool";
132   OverrideFilename "override.source-only";
133 };
134
135 Security-Install
136 {
137   ComponentMappings
138   {
139     main "ftp-master.debian.org:/pub/UploadQueue";
140     contrib "ftp-master.debian.org:/pub/UploadQueue";
141     non-free "ftp-master.debian.org:/pub/UploadQueue";
142     non-US/main "non-us.debian.org:/pub/UploadQueue";
143     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
144     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
145   };
146 };
147
148 Suite
149 {
150   // Priority determines which suite is used for the Maintainers file
151   // as generated by 'dak make-maintainers' (highest wins).
152
153   OldStable
154   {
155         Components 
156         {
157           updates/main;
158           updates/contrib;
159           updates/non-free;
160         };
161         Announce "dak@security.debian.org";
162         Version "";
163         Origin "Debian";
164         Label "Debian-Security";
165         Description "Debian 5.0 Security Updates";
166         ValidTime 864000; // 10 days
167         CodeName "lenny";
168         OverrideCodeName "lenny";
169         CopyDotDak "/srv/security-master.debian.org/queue/done/";
170   };
171
172   Stable
173   {
174         Components
175         {
176           updates/main;
177           updates/contrib;
178           updates/non-free;
179         };
180         Announce "dak@security.debian.org";
181         Version "";
182         Origin "Debian";
183         Label "Debian-Security";
184         Description "Debian 6.0 Security Updates";
185         ValidTime 864000; // 10 days
186         CodeName "squeeze";
187         OverrideCodeName "squeeze";
188         CopyDotDak "/srv/security-master.debian.org/queue/done/";
189   };
190
191   Testing
192   {
193         Components
194         {
195           updates/main;
196           updates/contrib;
197           updates/non-free;
198         };
199         Announce "dak@security.debian.org";
200         Version "";
201         Origin "Debian";
202         Label "Debian-Security";
203         Description "Debian testing Security Updates";
204         ValidTime 864000; // 10 days
205         CodeName "wheezy";
206         OverrideCodeName "wheezy";
207         CopyDotDak "/srv/security-master.debian.org/queue/done/";
208   };
209 };
210
211 SuiteMappings
212 {
213  "silent-map stable-security stable";
214  "silent-map oldstable-security oldstable";
215  // JT - FIXME, hackorama
216  // "silent-map testing-security stable";
217   "silent-map etch-secure oldstable";
218   "silent-map lenny-secure stable";
219   "silent-map testing-security testing";
220   "silent-map lenny-security oldstable";
221   "silent-map squeeze-security stable";
222   "silent-map wheezy-security testing";
223 };
224
225 Dir
226 {
227   Root "/srv/security-master.debian.org/ftp/";
228   Pool "/srv/security-master.debian.org/ftp/pool/";
229   Export "/srv/security-master.debian.org/export/";
230   Dak "/srv/security-master.debian.org/dak/";
231   Templates "/srv/security-master.debian.org/dak/templates/";
232   PoolRoot "pool/";
233   Override "/srv/security-master.debian.org/override/";
234   Lock "/srv/security-master.debian.org/lock/";
235   Cache "/srv/security-master.debian.org/database/";
236   Lists "/srv/security-master.debian.org/dak-database/dists/";
237   Log "/srv/security-master.debian.org/dak-log/";
238   Morgue "/srv/security-master.debian.org/morgue/";
239   MorgueReject "reject";
240   Override "/srv/security-master.debian.org/scripts/override/";
241   QueueBuild "/srv/security-master.debian.org/buildd/";
242   Upload "/srv/queued/ftpmaster/";
243   TempPath "/srv/security-master.debian.org/tmp";
244   Queue
245   {
246     Byhand "/srv/security-master.debian.org/queue/byhand/";
247     Done "/srv/security-master.debian.org/queue/done/";
248     Holding "/srv/security-master.debian.org/queue/holding/";
249     New "/srv/security-master.debian.org/queue/new/";
250     Reject "/srv/security-master.debian.org/queue/reject/";
251     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
252     Newstage "/srv/security-master.debian.org/queue/newstage/";
253
254     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
255     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
256
257     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
258     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
259     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
260   };
261 };
262
263 DB
264 {
265   Name "obscurity";
266   Host ""; 
267   Port -1;
268
269 };
270
271 Architectures
272 {
273
274   source "Source";
275   all "Architecture Independent";
276   alpha "DEC Alpha";
277   hppa "HP PA RISC";
278   arm "ARM";
279   armel "ARM EABI";
280   i386 "Intel ia32";
281   ia64 "Intel ia64";
282   mips "MIPS (Big Endian)";
283   mipsel "MIPS (Little Endian)";
284   powerpc "PowerPC";
285   s390 "IBM S/390";
286   sparc "Sun SPARC/UltraSPARC";
287   amd64 "AMD x86_64 (AMD64)";
288   kfreebsd-i386 "GNU/kFreeBSD i386";
289   kfreebsd-amd64 "GNU/kFreeBSD amd64";
290
291 };
292
293 Archive
294 {
295
296   security
297   {
298     OriginServer "security.debian.org";
299     PrimaryMirror "security.debian.org";
300     Description "Security Updates for the Debian project";
301   };
302
303 };
304
305 Component
306 {
307
308   updates/main
309   {
310         Description "Main (updates)";
311         MeetsDFSG "true";
312   };
313
314   updates/contrib
315   {
316         Description "Contrib (updates)";
317         MeetsDFSG "true";
318   };
319
320   updates/non-free
321   {
322         Description "Software that fails to meet the DFSG";
323         MeetsDFSG "false";
324   };
325
326 };
327
328 ComponentMappings
329 {
330  "main updates/main";
331  "contrib updates/contrib";
332  "non-free updates/non-free";
333  "non-US/main updates/main";
334  "non-US/contrib updates/contrib";
335  "non-US/non-free updates/non-free";
336 };
337
338 Section
339 {
340   admin;
341   cli-mono;
342   comm;
343   database;
344   debian-installer;
345   debug;
346   devel;
347   doc;
348   editors;
349   embedded;
350   electronics;
351   fonts;
352   games;
353   gnome;
354   graphics;
355   gnu-r;
356   gnustep;
357   hamradio;
358   haskell;
359   httpd;
360   interpreters;
361   java;
362   kde;
363   kernel;
364   libdevel;
365   libs;
366   lisp;
367   localization;
368   mail;
369   math;
370   misc;
371   net;
372   news;
373   ocaml;
374   oldlibs;
375   otherosfs;
376   perl;
377   php;
378   python;
379   ruby;
380   science;
381   shells;
382   sound;
383   tex;
384   text;
385   utils;
386   web;
387   vcs;
388   video;
389   x11;
390   xfce;
391   zope;
392 };
393
394 Priority
395 {
396   required 1;
397   important 2;
398   standard 3;
399   optional 4;
400   extra 5;
401   source 0; // i.e. unused
402 };
403
404 OverrideType
405 {
406   deb;
407   udeb;
408   dsc;
409 };
410
411 Location
412 {
413   /srv/security-master.debian.org/ftp/pool/
414     {
415       Archive "security";
416       Suites 
417         {
418           OldStable;
419           Stable;
420           Testing;
421         };
422       Type "pool";
423     };
424 };
425
426 Urgency
427 {
428   Default "low";
429   Valid
430   {
431     low;
432     medium;
433     high;
434     emergency;
435     critical;
436   };
437 };
438
439 Changelogs
440 {
441   Export "/srv/security-master.debian.org/export/changelogs";
442 }