config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "6070D3A1";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      oldstable;
  29      stable;
  30      testing;
  31    };
  32    SecurityQueueHandling "true";
  33    SecurityQueueBuild "true";
  34    DefaultSuite "oldstable";
  35    SuiteSuffix "updates";
  36    OverrideMaintainer "dak@security.debian.org";
  37    StableDislocationSupport "false";
  38    LegacyStableHasNoSections "false";
  39 };
  40
  41 Process-New
  42 {
  43   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  44 };
  45
  46 Import-Users-From-Passwd
  47 {
  48   ValidGID "800";
  49   // Comma separated list of users who are in Postgres but not the passwd file
  50   KnownPostgres "postgres,dak,www-data,udmsearch";
  51 };
  52
  53 Queue-Report
  54 {
  55   Directories
  56   {
  57     // byhand;
  58     // new;
  59     unembargoed;
  60   };
  61 };
  62
  63 Clean-Queues
  64 {
  65   Options
  66   {
  67     Days 14;
  68   };
  69  MorgueSubDir "queue";
  70 };
  71
  72 Rm
  73 {
  74   Options
  75   {
  76     Suite "unstable";
  77   };
  78
  79   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  80   LogFile "/org/security.debian.org/dak-log/removals.txt";
  81 };
  82
  83 Init-Archive
  84 {
  85   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  86 };
  87
  88 Clean-Suites
  89 {
  90   // How long (in seconds) dead packages are left before being killed
  91   StayOfExecution 129600; // 1.5 days
  92   QueueBuildStayOfExecution 86400; // 24 hours
  93   MorgueSubDir "pool";
  94   OverrideFilename "override.source-only";
  95 };
  96
  97 Security-Install
  98 {
  99   ComponentMappings
 100   {
 101     main "ftp-master.debian.org:/pub/UploadQueue";
 102     contrib "ftp-master.debian.org:/pub/UploadQueue";
 103     non-free "ftp-master.debian.org:/pub/UploadQueue";
 104     non-US/main "non-us.debian.org:/pub/UploadQueue";
 105     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 106     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 107   };
 108 };
 109
 110 Suite
 111 {
 112   // Priority determines which suite is used for the Maintainers file
 113   // as generated by 'dak make-maintainers' (highest wins).
 114
 115   Oldstable
 116   {
 117         Components
 118         {
 119           updates/main;
 120           updates/contrib;
 121           updates/non-free;
 122         };
 123         Architectures
 124         {
 125           source;
 126           all;
 127           alpha;
 128           amd64;
 129           arm;
 130           hppa;
 131           i386;
 132           ia64;
 133           m68k;
 134           mips;
 135           mipsel;
 136           powerpc;
 137           s390;
 138           sparc;
 139         };
 140         Announce "dak@security.debian.org";
 141         Version "3.1";
 142         Origin "Debian";
 143         Label "Debian-Security";
 144         Description "Debian 3.1 Security Updates";
 145         CodeName "sarge";
 146         OverrideCodeName "sarge";
 147         CopyDotDak "/org/security.debian.org/queue/done/";
 148   };
 149
 150   Stable
 151   {
 152         Components
 153         {
 154           updates/main;
 155           updates/contrib;
 156           updates/non-free;
 157         };
 158         Architectures
 159         {
 160           source;
 161           all;
 162           amd64;
 163           alpha;
 164           arm;
 165           hppa;
 166           i386;
 167           ia64;
 168           mips;
 169           mipsel;
 170           powerpc;
 171           s390;
 172           sparc;
 173         };
 174         Announce "dak@security.debian.org";
 175         Version "";
 176         Origin "Debian";
 177         Label "Debian-Security";
 178         Description "Debian 4.0 Security Updates";
 179         CodeName "etch";
 180         OverrideCodeName "etch";
 181         CopyDotDak "/org/security.debian.org/queue/done/";
 182   };
 183
 184   Testing
 185   {
 186         Components
 187         {
 188           updates/main;
 189           updates/contrib;
 190           updates/non-free;
 191         };
 192         Architectures
 193         {
 194           source;
 195           all;
 196           amd64;
 197           alpha;
 198           arm;
 199           armel;
 200           hppa;
 201           i386;
 202           ia64;
 203           mips;
 204           mipsel;
 205           powerpc;
 206           s390;
 207           sparc;
 208         };
 209         Announce "dak@security.debian.org";
 210         Version "";
 211         Origin "Debian";
 212         Label "Debian-Security";
 213         Description "Debian testing Security Updates";
 214         CodeName "lenny";
 215         OverrideCodeName "lenny";
 216         CopyDotDak "/org/security.debian.org/queue/done/";
 217   };
 218 };
 219
 220 SuiteMappings
 221 {
 222   "silent-map oldstable-security oldstable";
 223  "silent-map stable-security stable";
 224  // JT - FIXME, hackorama
 225  // "silent-map testing-security stable";
 226   "silent-map etch-secure stable";
 227   "silent-map testing-security testing";
 228 };
 229
 230 Dir
 231 {
 232   Root "/org/security.debian.org/ftp/";
 233   Pool "/org/security.debian.org/ftp/pool/";
 234   Dak "/org/security.debian.org/dak/";
 235   Templates "/org/security.debian.org/dak/templates/";
 236   PoolRoot "pool/";
 237   Override "/org/security.debian.org/override/";
 238   Lock "/org/security.debian.org/lock/";
 239   Lists "/org/security.debian.org/dak-database/dists/";
 240   Log "/org/security.debian.org/dak-log/";
 241   Morgue "/org/security.debian.org/morgue/";
 242   MorgueReject "reject";
 243   Override "/org/security.debian.org/scripts/override/";
 244   QueueBuild "/org/security.debian.org/buildd/";
 245   Queue
 246   {
 247     Accepted "/org/security.debian.org/queue/accepted/";
 248     Byhand "/org/security.debian.org/queue/byhand/";
 249     Done "/org/security.debian.org/queue/done/";
 250     Holding "/org/security.debian.org/queue/holding/";
 251     New "/org/security.debian.org/queue/new/";
 252     Reject "/org/security.debian.org/queue/reject/";
 253     Unchecked "/org/security.debian.org/queue/unchecked/";
 254     ProposedUpdates "/does/not/exist/"; // XXX fixme
 255     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 256
 257     Embargoed "/org/security.debian.org/queue/embargoed/";
 258     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 259     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 260   };
 261 };
 262
 263 DB
 264 {
 265   Name "obscurity";
 266   Host "";
 267   Port -1;
 268
 269 };
 270
 271 Architectures
 272 {
 273
 274   source "Source";
 275   all "Architecture Independent";
 276   alpha "DEC Alpha";
 277   hppa "HP PA RISC";
 278   arm "ARM";
 279   armel "ARM EABI";
 280   i386 "Intel ia32";
 281   ia64 "Intel ia64";
 282   m68k "Motorola Mc680x0";
 283   mips "MIPS (Big Endian)";
 284   mipsel "MIPS (Little Endian)";
 285   powerpc "PowerPC";
 286   s390 "IBM S/390";
 287   sparc "Sun SPARC/UltraSPARC";
 288   amd64 "AMD x86_64 (AMD64)";
 289
 290 };
 291
 292 Archive
 293 {
 294
 295   security
 296   {
 297     OriginServer "security.debian.org";
 298     PrimaryMirror "security.debian.org";
 299     Description "Security Updates for the Debian project";
 300   };
 301
 302 };
 303
 304 Component
 305 {
 306
 307   updates/main
 308   {
 309         Description "Main (updates)";
 310         MeetsDFSG "true";
 311   };
 312
 313   updates/contrib
 314   {
 315         Description "Contrib (updates)";
 316         MeetsDFSG "true";
 317   };
 318
 319   updates/non-free
 320   {
 321         Description "Software that fails to meet the DFSG";
 322         MeetsDFSG "false";
 323   };
 324
 325 };
 326
 327 ComponentMappings
 328 {
 329  "main updates/main";
 330  "contrib updates/contrib";
 331  "non-free updates/non-free";
 332  "non-US/main updates/main";
 333  "non-US/contrib updates/contrib";
 334  "non-US/non-free updates/non-free";
 335 };
 336
 337 Section
 338 {
 339   admin;
 340   base;
 341   comm;
 342   debian-installer;
 343   devel;
 344   doc;
 345   editors;
 346   electronics;
 347   embedded;
 348   games;
 349   gnome;
 350   graphics;
 351   hamradio;
 352   interpreters;
 353   kde;
 354   libdevel;
 355   libs;
 356   mail;
 357   math;
 358   misc;
 359   net;
 360   news;
 361   oldlibs;
 362   otherosfs;
 363   perl;
 364   python;
 365   science;
 366   shells;
 367   sound;
 368   tex;
 369   text;
 370   utils;
 371   web;
 372   x11;
 373   non-US;
 374 };
 375
 376 Priority
 377 {
 378   required 1;
 379   important 2;
 380   standard 3;
 381   optional 4;
 382   extra 5;
 383   source 0; // i.e. unused
 384 };
 385
 386 OverrideType
 387 {
 388   deb;
 389   udeb;
 390   dsc;
 391 };
 392
 393 Location
 394 {
 395   /org/security.debian.org/ftp/dists/
 396     {
 397       Archive "security";
 398       Type "legacy";
 399     };
 400
 401   /org/security.debian.org/ftp/pool/
 402     {
 403       Archive "security";
 404       Suites
 405         {
 406           Oldstable;
 407           Stable;
 408           Testing;
 409         };
 410       Type "pool";
 411     };
 412 };
 413
 414 Urgency
 415 {
 416   Default "low";
 417   Valid
 418   {
 419     low;
 420     medium;
 421     high;
 422     emergency;
 423     critical;
 424   };
 425 };