config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    PGPKeyring "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   4    GPGKeyring "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   6    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   7    SigningKeyIds "2D230C5F";
   8    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   9    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  10    MyAdminAddress "ftpmaster@debian.org";
  11    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  12    MyDistribution "Debian"; // Used in emails
  13    BugServer "bugs.debian.org";
  14    PackagesServer "packages.debian.org";
  15    LockFile "/org/security.debian.org/dak/lock";
  16    Bcc "archive@ftp-master.debian.org";
  17    FutureTimeTravelGrace 28800; // 8 hours
  18    PastCutoffYear "1984";
  19    SkipTime 300;
  20    CloseBugs "false";
  21    OverrideDisparityCheck "false";
  22    BXANotify "false";
  23    QueueBuildSuites
  24    {
  25      oldstable;
  26      stable;
  27      testing;
  28    };
  29    SecurityQueueHandling "true";
  30    SecurityQueueBuild "true";
  31    DefaultSuite "Testing";
  32    SuiteSuffix "updates";
  33    OverrideMaintainer "dak@security.debian.org";
  34    StableDislocationSupport "false";
  35    LegacyStableHasNoSections "false";
  36 };
  37
  38 Process-Unchecked
  39 {
  40   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  41 };
  42
  43 Import-Users-From-Passwd
  44 {
  45   ValidGID "800";
  46   // Comma separated list of users who are in Postgres but not the passwd file
  47   KnownPostgres "postgres,dak,www-data,udmsearch";
  48 };
  49
  50 Queue-Report
  51 {
  52   Directories
  53   {
  54     byhand;
  55     new;
  56     accepted;
  57   };
  58 };
  59
  60 Clean-Queues
  61 {
  62   Options
  63   {
  64     Days 14;
  65   };
  66  MorgueSubDir "queue";
  67 };
  68
  69 Rm
  70 {
  71   Options
  72   {
  73     Suite "unstable";
  74   };
  75
  76   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  77   LogFile "/org/security.debian.org/dak-log/removals.txt";
  78 };
  79
  80 Init-Archive
  81 {
  82   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  83 };
  84
  85 Clean-Suites
  86 {
  87   // How long (in seconds) dead packages are left before being killed
  88   StayOfExecution 129600; // 1.5 days
  89   QueueBuildStayOfExecution 86400; // 24 hours
  90   MorgueSubDir "pool";
  91   OverrideFilename "override.source-only";
  92 };
  93
  94 Security-Install
  95 {
  96   ComponentMappings
  97   {
  98     main "ftp-master.debian.org:/pub/UploadQueue";
  99     contrib "ftp-master.debian.org:/pub/UploadQueue";
 100     non-free "ftp-master.debian.org:/pub/UploadQueue";
 101     non-US/main "non-us.debian.org:/pub/UploadQueue";
 102     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 103     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 104   };
 105 };
 106
 107 Suite
 108 {
 109   // Priority determines which suite is used for the Maintainers file
 110   // as generated by 'dak make-maintainers' (highest wins).
 111
 112   Oldstable
 113   {
 114         Components
 115         {
 116           updates/main;
 117           updates/contrib;
 118           updates/non-free;
 119         };
 120         Architectures
 121         {
 122           source;
 123           all;
 124           alpha;
 125           arm;
 126           hppa;
 127           i386;
 128           ia64;
 129           m68k;
 130           mips;
 131           mipsel;
 132           powerpc;
 133           s390;
 134           sparc;
 135         };
 136         Announce "dak@security.debian.org";
 137         Version "3.0";
 138         Origin "Debian";
 139         Label "Debian-Security";
 140         Description "Debian 3.0 Security Updates";
 141         CodeName "woody";
 142         OverrideCodeName "woody";
 143         CopyDotDak "/org/security.debian.org/queue/done/";
 144   };
 145
 146   Stable
 147   {
 148         Components
 149         {
 150           updates/main;
 151           updates/contrib;
 152           updates/non-free;
 153         };
 154         Architectures
 155         {
 156           source;
 157           all;
 158           alpha;
 159           amd64;
 160           arm;
 161           hppa;
 162           i386;
 163           ia64;
 164           m68k;
 165           mips;
 166           mipsel;
 167           powerpc;
 168           s390;
 169           sparc;
 170         };
 171         Announce "dak@security.debian.org";
 172         Version "3.1";
 173         Origin "Debian";
 174         Label "Debian-Security";
 175         Description "Debian 3.1 Security Updates";
 176         CodeName "sarge";
 177         OverrideCodeName "sarge";
 178         CopyDotDak "/org/security.debian.org/queue/done/";
 179   };
 180
 181   Testing
 182   {
 183         Components
 184         {
 185           updates/main;
 186           updates/contrib;
 187           updates/non-free;
 188         };
 189         Architectures
 190         {
 191           source;
 192           all;
 193           amd64;
 194           alpha;
 195           arm;
 196           hppa;
 197           i386;
 198           ia64;
 199           m68k;
 200           mips;
 201           mipsel;
 202           powerpc;
 203           s390;
 204           sparc;
 205         };
 206         Announce "dak@security.debian.org";
 207         Version "";
 208         Origin "Debian";
 209         Label "Debian-Security";
 210         Description "Debian testing Security Updates";
 211         CodeName "etch";
 212         OverrideCodeName "etch";
 213         CopyDotDak "/org/security.debian.org/queue/done/";
 214   };
 215
 216 };
 217
 218 SuiteMappings
 219 {
 220   "silent-map oldstable-security oldstable";
 221  "silent-map stable-security stable";
 222  // JT - FIXME, hackorama
 223  // "silent-map testing-security stable";
 224   "silent-map etch-secure testing";
 225   "silent-map testing-security testing";
 226 };
 227
 228 Dir
 229 {
 230   Root "/org/security.debian.org/ftp/";
 231   Pool "/org/security.debian.org/ftp/pool/";
 232   Dak "/org/security.debian.org/dak/";
 233   Templates "/org/security.debian.org/dak/templates/";
 234   PoolRoot "pool/";
 235   Override "/org/security.debian.org/override/";
 236   Lock "/org/security.debian.org/lock/";
 237   Lists "/org/security.debian.org/dak-database/dists/";
 238   Log "/org/security.debian.org/dak-log/";
 239   Morgue "/org/security.debian.org/morgue/";
 240   MorgueReject "reject";
 241   Override "/org/security.debian.org/scripts/override/";
 242   QueueBuild "/org/security.debian.org/buildd/";
 243   Queue
 244   {
 245     Accepted "/org/security.debian.org/queue/accepted/";
 246     Byhand "/org/security.debian.org/queue/byhand/";
 247     Done "/org/security.debian.org/queue/done/";
 248     Holding "/org/security.debian.org/queue/holding/";
 249     New "/org/security.debian.org/queue/new/";
 250     Reject "/org/security.debian.org/queue/reject/";
 251     Unchecked "/org/security.debian.org/queue/unchecked/";
 252
 253     Embargoed "/org/security.debian.org/queue/embargoed/";
 254     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 255     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 256   };
 257 };
 258
 259 DB
 260 {
 261   Name "obscurity";
 262   Host "";
 263   Port -1;
 264
 265 };
 266
 267 Architectures
 268 {
 269
 270   source "Source";
 271   all "Architecture Independent";
 272   alpha "DEC Alpha";
 273   hppa "HP PA RISC";
 274   arm "ARM";
 275   i386 "Intel ia32";
 276   ia64 "Intel ia64";
 277   m68k "Motorola Mc680x0";
 278   mips "MIPS (Big Endian)";
 279   mipsel "MIPS (Little Endian)";
 280   powerpc "PowerPC";
 281   s390 "IBM S/390";
 282   sparc "Sun SPARC/UltraSPARC";
 283   amd64 "AMD x86_64 (AMD64)";
 284
 285 };
 286
 287 Archive
 288 {
 289
 290   security
 291   {
 292     OriginServer "security.debian.org";
 293     PrimaryMirror "security.debian.org";
 294     Description "Security Updates for the Debian project";
 295   };
 296
 297 };
 298
 299 Component
 300 {
 301
 302   updates/main
 303   {
 304         Description "Main (updates)";
 305         MeetsDFSG "true";
 306   };
 307
 308   updates/contrib
 309   {
 310         Description "Contrib (updates)";
 311         MeetsDFSG "true";
 312   };
 313
 314   updates/non-free
 315   {
 316         Description "Software that fails to meet the DFSG";
 317         MeetsDFSG "false";
 318   };
 319
 320 };
 321
 322 ComponentMappings
 323 {
 324  "main updates/main";
 325  "contrib updates/contrib";
 326  "non-free updates/non-free";
 327  "non-US/main updates/main";
 328  "non-US/contrib updates/contrib";
 329  "non-US/non-free updates/non-free";
 330 };
 331
 332 Section
 333 {
 334   admin;
 335   base;
 336   comm;
 337   debian-installer;
 338   devel;
 339   doc;
 340   editors;
 341   electronics;
 342   embedded;
 343   games;
 344   gnome;
 345   graphics;
 346   hamradio;
 347   interpreters;
 348   kde;
 349   libdevel;
 350   libs;
 351   mail;
 352   math;
 353   misc;
 354   net;
 355   news;
 356   oldlibs;
 357   otherosfs;
 358   perl;
 359   python;
 360   science;
 361   shells;
 362   sound;
 363   tex;
 364   text;
 365   utils;
 366   web;
 367   x11;
 368   non-US;
 369 };
 370
 371 Priority
 372 {
 373   required 1;
 374   important 2;
 375   standard 3;
 376   optional 4;
 377   extra 5;
 378   source 0; // i.e. unused
 379 };
 380
 381 OverrideType
 382 {
 383   deb;
 384   udeb;
 385   dsc;
 386 };
 387
 388 Location
 389 {
 390   /org/security.debian.org/ftp/dists/
 391     {
 392       Archive "security";
 393       Type "legacy";
 394     };
 395
 396   /org/security.debian.org/ftp/pool/
 397     {
 398       Archive "security";
 399       Suites
 400         {
 401           Oldstable;
 402           Stable;
 403           Testing;
 404         };
 405       Type "pool";
 406     };
 407 };
 408
 409 Urgency
 410 {
 411   Default "low";
 412   Valid
 413   {
 414     low;
 415     medium;
 416     high;
 417     emergency;
 418     critical;
 419   };
 420 };