tools/debianqueued-0.9/config-security

   1 #
   2 # example configuration file for debianqueued
   3 #
   4
   5 # set to != 0 for debugging output (to log file)
   6 $debug = 0;
   7
   8 # various programs:
   9 # -----------------
  10 $gpg       = "/usr/bin/gpg";
  11 $ssh       = "/usr/bin/ssh";
  12 $scp       = "/usr/bin/scp";
  13 $ssh_agent = "/usr/bin/ssh-agent";
  14 $ssh_add   = "/usr/bin/ssh-add";
  15 $md5sum    = "/usr/bin/md5sum";
  16 $mail      = "/usr/sbin/sendmail";
  17 $mkfifo    = "/usr/bin/mkfifo";
  18 $tar       = "/bin/tar"; # must be GNU tar!
  19 $gzip      = "/bin/gzip";
  20 $ar        = "/usr/bin/ar"; # must support p option, optional
  21 $ls        = "/bin/ls";
  22 $cp        = "/bin/cp";
  23 $chmod     = "/bin/chmod";
  24
  25 # binaries which existance should be tested before each queue run
  26 #@test_binaries = ();
  27
  28 # general options to ssh/scp
  29 $ssh_options = "-o'BatchMode yes' -o'FallBackToRsh no' ".
  30                "-o'ForwardAgent no' -o'ForwardX11 no' ".
  31                "-o'PasswordAuthentication no' -o'StrictHostKeyChecking yes'";
  32
  33 # ssh key file to use for connects to master (empty: default ~/.ssh/identity)
  34 $ssh_key_file = "";
  35
  36 # the incoming dir we live in
  37 $incoming = "/srv/queued/ftpmaster";
  38
  39 # the delayed incoming directories
  40 $incoming_delayed = "/srv/queued/UploadQueue/DELAYED/%d-day";
  41
  42 # maximum delay directory, -1 for no delayed directory,
  43 # incoming_delayed and target_delayed need to exist.
  44 $max_delayed = -1;
  45
  46 # files not to delete in $incoming (regexp)
  47 $keep_files = '(status|\.message|README)$';
  48
  49 # file patterns that aren't deleted right away
  50 $valid_files = '(\.changes|\.tar\.(?:gz|bz2|xz)|\.dsc|\.u?deb|diff\.gz|\.sh)$';
  51
  52 # Change files to mode 644 locally (after md5 check) or only on master?
  53 $chmod_on_target = 0;
  54
  55 # Do an md5sum check?
  56 $check_md5sum = 0;
  57
  58 # name of the status file or named pipe in the incoming dir
  59 $statusfile = "$incoming/status";
  60
  61 # if 0, status file implemented as FIFO; if > 0, status file is plain
  62 # file and updated with a delay of this many seconds
  63 $statusdelay = 30;
  64
  65 # names of the keyring files
  66 @keyrings = ( "/srv/keyring.debian.org/keyrings/debian-keyring.gpg",
  67               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-alpha-keyring.gpg",
  68               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-amd64-keyring.gpg",
  69               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-arm64-keyring.gpg",
  70               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-armhf-keyring.gpg",
  71               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-armel-keyring.gpg",
  72               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-hurd-i386-keyring.gpg",
  73               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-i386-keyring.gpg",
  74               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-ia64-keyring.gpg",
  75               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-kfreebsd-amd64-keyring.gpg",
  76               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-kfreebsd-i386-keyring.gpg",
  77               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-mipsel-keyring.gpg",
  78               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-mips-keyring.gpg",
  79               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-powerpc-keyring.gpg",
  80               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-ppc64el-keyring.gpg",
  81               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-s390-keyring.gpg",
  82               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-s390x-keyring.gpg",
  83               "/srv/keyring.debian.org/keyrings/buildd-keyrings/buildd-sparc-keyring.gpg");
  84
  85 # our log file
  86 $logfile = "$queued_dir/run/log";
  87
  88 # our pid file
  89 $pidfile = "$queued_dir/run/pid";
  90
  91 # upload method (ssh, copy, ftp)
  92 $upload_method = "ftp";
  93
  94 # name of target host (ignored on copy method)
  95 $target = "ftp.upload.debian.org";
  96
  97 # login name on target host (for ssh, always 'ftp' for ftp, ignored for copy)
  98 $targetlogin = "ftp";
  99
 100 # incoming on target host
 101 $targetdir = "/pub/UploadQueue/";
 102
 103 # incoming/delayed on target host
 104 $targetdir_delayed = "/srv/queued/DEFERRED/%d-day";
 105
 106 # select FTP debugging
 107 $ftpdebug = 0;
 108
 109 # FTP timeout
 110 $ftptimeout = 900;
 111
 112 # max. number of tries to upload
 113 $max_upload_retries = 8;
 114
 115 # delay after first failed upload
 116 $upload_delay_1 = 30*60; # 30 min.
 117
 118 # delay between successive failed uploads
 119 $upload_delay_2 = 4*60*60; # 4 hours
 120
 121 # packages that must go to nonus.debian.org and thus are rejected here
 122 #@nonus_packages = qw(gpg-rsaidea);
 123
 124 # timings:
 125 # --------
 126 #   time between two queue checks
 127 $queue_delay = 5*60; # 5 min.
 128 #   when are stray files deleted?
 129 $stray_remove_timeout = 24*60*60; # 1 day
 130 #   delay before reporting problems with a .changes file (not
 131 #   immediately for to-be-continued uploads)
 132 $problem_report_timeout = 30*60; # 30 min.
 133 #   delay before reporting that a .changes file is missing (not
 134 #   immediately for to-be-continued uploads)
 135 $no_changes_timeout = 30*60; # 30 min.
 136 #   when are .changes with persistent problems removed?
 137 $bad_changes_timeout = 2*24*60*60; # 2 days
 138 #   how long may a remote operation (ssh/scp) take?
 139 $remote_timeout = 3*60*60; # 3 hours
 140
 141 # mail address of maintainer
 142 $maintainer_mail = "ftpmaster\@debian.org";
 143
 144 # to override the TO address of ALL outgoing mail, set this value.
 145 $overridemail = "dak\@security.debian.org";
 146
 147
 148 # logfile rotating:
 149 # -----------------
 150 #    how often to rotate (in days)
 151 $log_age = 7;
 152 #    how much old logs to keep
 153 $log_keep = 4;
 154 #    send summary mail when rotating logs?
 155 $mail_summary = 1;
 156 #    write summary to file when rotating logs? (no if name empty)
 157 $summary_file = "$queued_dir/summary";
 158
 159 # don't remove this, Perl needs it!
 160 1;