config/debian-security/cron.daily

   1 #!/bin/bash
   2 #
   3 # Executed daily via cron, out of dak's crontab.
   4
   5 set -e
   6 export SCRIPTVARS=/srv/security-master.debian.org/dak/config/debian-security/vars
   7 . $SCRIPTVARS
   8
   9 LOCKFILE="$lockdir/unchecked.lock"
  10
  11 ################################################################################
  12
  13 # Fix overrides
  14
  15 rsync --delete -r --include=override\* --exclude=\* --password-file /srv/security-master.debian.org/s3kr1t/rsync-password -ql security-master@ftp-master::indices/ $overridedir
  16
  17 cd $overridedir
  18 for file in override*.gz; do
  19     zcat $file > $(basename $file .gz)
  20 done
  21 find . -maxdepth 1 -mindepth 1 -type l | xargs --no-run-if-empty rm
  22
  23 for suite in $suites; do
  24     case $suite in
  25         stable) override_suite=squeeze;;
  26         testing) override_suite=wheezy;;
  27         *) echo "Unknown suite type ($suite)"; exit 1;;
  28     esac
  29     for component in $components; do
  30         for override_type in $override_types; do
  31             case $override_type in
  32                 deb) type="" ;;
  33                 dsc) type=".src" ;;
  34                 udeb) type=".debian-installer" ;;
  35             esac
  36
  37             if [ "$override_type" = "udeb" ]; then
  38                 if [ ! "$component" = "main" ]; then
  39                     continue
  40                 fi
  41             fi
  42
  43             OFILE="override.$override_suite.$component$type.gz"
  44             if [ -r "$OFILE" ]; then
  45                 zcat "$OFILE" | dak control-overrides -q -a -t $override_type -s $suite -c updates/$component
  46             fi
  47         done
  48     done
  49 done
  50
  51 # Generate .all3 overides for the buildd support
  52 for dist in squeeze wheezy; do
  53     rm -f override.$dist.all3
  54     components="main contrib non-free";
  55     if [ -f override.$dist.main.debian-installer.gz ]; then
  56         components="$components main.debian-installer"
  57     fi
  58     for component in $components; do
  59         zcat override.$dist.$component.gz >> override.$dist.all3
  60         if [ -e "override.$dist.$component.src.gz" ]; then
  61             zcat override.$dist.$component.src.gz >> override.$dist.all3.src
  62         fi
  63     done
  64 done
  65
  66 ################################################################################
  67
  68 cd $configdir
  69 dak import-keyring -L /srv/keyring.debian.org/keyrings/debian-keyring.gpg
  70
  71 cleanup() {
  72     rm -f "$LOCKFILE"
  73 }
  74
  75 if ! lockfile -r100 "$LOCKFILE"; then
  76     echo "Could not lock $LOCKFILE." >&2
  77     exit 1
  78 fi
  79 trap cleanup EXIT
  80
  81 dak clean-queues
  82 dak clean-queues -i $disembargo
  83 dak clean-suites
  84
  85 cleanup
  86 trap - EXIT
  87
  88 symlinks -d -r $ftpdir
  89
  90 pg_dump obscurity > /org/security-master.debian.org/dak-backup/dump_$(date +%Y.%m.%d-%H:%M:%S)
  91 find -maxdepth 1 -mindepth 1 -type f -name 'dump_*' \! -name '*.bz2' \! -name '*.gz' -mmin +720 |
  92 while read dumpname; do
  93     bzip2 -9fv "$dumpname"
  94 done
  95
  96 #apt-ftparchive -q clean apt.conf
  97 #apt-ftparchive -q clean apt.conf.buildd
  98
  99 ################################################################################