config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "6070D3A1";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    StableDislocationSupport "false";
  37    LegacyStableHasNoSections "false";
  38 };
  39
  40 Process-New
  41 {
  42   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     // byhand;
  57     // new;
  58     unembargoed;
  59   };
  60 };
  61
  62 Clean-Queues
  63 {
  64   Options
  65   {
  66     Days 14;
  67   };
  68  MorgueSubDir "queue";
  69 };
  70
  71 Rm
  72 {
  73   Options
  74   {
  75     Suite "unstable";
  76   };
  77
  78   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  79   LogFile "/org/security.debian.org/dak-log/removals.txt";
  80 };
  81
  82 Init-Archive
  83 {
  84   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  85 };
  86
  87 Clean-Suites
  88 {
  89   // How long (in seconds) dead packages are left before being killed
  90   StayOfExecution 129600; // 1.5 days
  91   QueueBuildStayOfExecution 86400; // 24 hours
  92   MorgueSubDir "pool";
  93   OverrideFilename "override.source-only";
  94 };
  95
  96 Security-Install
  97 {
  98   ComponentMappings
  99   {
 100     main "ftp-master.debian.org:/pub/UploadQueue";
 101     contrib "ftp-master.debian.org:/pub/UploadQueue";
 102     non-free "ftp-master.debian.org:/pub/UploadQueue";
 103     non-US/main "non-us.debian.org:/pub/UploadQueue";
 104     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 105     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 106   };
 107 };
 108
 109 Suite
 110 {
 111   // Priority determines which suite is used for the Maintainers file
 112   // as generated by 'dak make-maintainers' (highest wins).
 113
 114   Stable
 115   {
 116         Components
 117         {
 118           updates/main;
 119           updates/contrib;
 120           updates/non-free;
 121         };
 122         Architectures
 123         {
 124           source;
 125           all;
 126           amd64;
 127           alpha;
 128           arm;
 129           hppa;
 130           i386;
 131           ia64;
 132           mips;
 133           mipsel;
 134           powerpc;
 135           s390;
 136           sparc;
 137         };
 138         Announce "dak@security.debian.org";
 139         Version "";
 140         Origin "Debian";
 141         Label "Debian-Security";
 142         Description "Debian 4.0 Security Updates";
 143         CodeName "etch";
 144         OverrideCodeName "etch";
 145         CopyDotDak "/org/security.debian.org/queue/done/";
 146   };
 147
 148   Testing
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Architectures
 157         {
 158           source;
 159           all;
 160           amd64;
 161           alpha;
 162           arm;
 163           armel;
 164           hppa;
 165           i386;
 166           ia64;
 167           mips;
 168           mipsel;
 169           powerpc;
 170           s390;
 171           sparc;
 172         };
 173         Announce "dak@security.debian.org";
 174         Version "";
 175         Origin "Debian";
 176         Label "Debian-Security";
 177         Description "Debian testing Security Updates";
 178         CodeName "lenny";
 179         OverrideCodeName "lenny";
 180         CopyDotDak "/org/security.debian.org/queue/done/";
 181   };
 182 };
 183
 184 SuiteMappings
 185 {
 186  "silent-map stable-security stable";
 187  // JT - FIXME, hackorama
 188  // "silent-map testing-security stable";
 189   "silent-map etch-secure stable";
 190   "silent-map testing-security testing";
 191 };
 192
 193 Dir
 194 {
 195   Root "/org/security.debian.org/ftp/";
 196   Pool "/org/security.debian.org/ftp/pool/";
 197   Dak "/org/security.debian.org/dak/";
 198   Templates "/org/security.debian.org/dak/templates/";
 199   PoolRoot "pool/";
 200   Override "/org/security.debian.org/override/";
 201   Lock "/org/security.debian.org/lock/";
 202   Lists "/org/security.debian.org/dak-database/dists/";
 203   Log "/org/security.debian.org/dak-log/";
 204   Morgue "/org/security.debian.org/morgue/";
 205   MorgueReject "reject";
 206   Override "/org/security.debian.org/scripts/override/";
 207   QueueBuild "/org/security.debian.org/buildd/";
 208   Queue
 209   {
 210     Accepted "/org/security.debian.org/queue/accepted/";
 211     Byhand "/org/security.debian.org/queue/byhand/";
 212     Done "/org/security.debian.org/queue/done/";
 213     Holding "/org/security.debian.org/queue/holding/";
 214     New "/org/security.debian.org/queue/new/";
 215     Reject "/org/security.debian.org/queue/reject/";
 216     Unchecked "/org/security.debian.org/queue/unchecked/";
 217     ProposedUpdates "/does/not/exist/"; // XXX fixme
 218     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 219
 220     Embargoed "/org/security.debian.org/queue/embargoed/";
 221     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 222     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 223   };
 224 };
 225
 226 DB
 227 {
 228   Name "obscurity";
 229   Host "";
 230   Port -1;
 231
 232 };
 233
 234 Architectures
 235 {
 236
 237   source "Source";
 238   all "Architecture Independent";
 239   alpha "DEC Alpha";
 240   hppa "HP PA RISC";
 241   arm "ARM";
 242   armel "ARM EABI";
 243   i386 "Intel ia32";
 244   ia64 "Intel ia64";
 245   m68k "Motorola Mc680x0";
 246   mips "MIPS (Big Endian)";
 247   mipsel "MIPS (Little Endian)";
 248   powerpc "PowerPC";
 249   s390 "IBM S/390";
 250   sparc "Sun SPARC/UltraSPARC";
 251   amd64 "AMD x86_64 (AMD64)";
 252
 253 };
 254
 255 Archive
 256 {
 257
 258   security
 259   {
 260     OriginServer "security.debian.org";
 261     PrimaryMirror "security.debian.org";
 262     Description "Security Updates for the Debian project";
 263   };
 264
 265 };
 266
 267 Component
 268 {
 269
 270   updates/main
 271   {
 272         Description "Main (updates)";
 273         MeetsDFSG "true";
 274   };
 275
 276   updates/contrib
 277   {
 278         Description "Contrib (updates)";
 279         MeetsDFSG "true";
 280   };
 281
 282   updates/non-free
 283   {
 284         Description "Software that fails to meet the DFSG";
 285         MeetsDFSG "false";
 286   };
 287
 288 };
 289
 290 ComponentMappings
 291 {
 292  "main updates/main";
 293  "contrib updates/contrib";
 294  "non-free updates/non-free";
 295  "non-US/main updates/main";
 296  "non-US/contrib updates/contrib";
 297  "non-US/non-free updates/non-free";
 298 };
 299
 300 Section
 301 {
 302   admin;
 303   base;
 304   comm;
 305   debian-installer;
 306   devel;
 307   doc;
 308   editors;
 309   electronics;
 310   embedded;
 311   games;
 312   gnome;
 313   graphics;
 314   hamradio;
 315   interpreters;
 316   kde;
 317   libdevel;
 318   libs;
 319   mail;
 320   math;
 321   misc;
 322   net;
 323   news;
 324   oldlibs;
 325   otherosfs;
 326   perl;
 327   python;
 328   science;
 329   shells;
 330   sound;
 331   tex;
 332   text;
 333   utils;
 334   web;
 335   x11;
 336   non-US;
 337 };
 338
 339 Priority
 340 {
 341   required 1;
 342   important 2;
 343   standard 3;
 344   optional 4;
 345   extra 5;
 346   source 0; // i.e. unused
 347 };
 348
 349 OverrideType
 350 {
 351   deb;
 352   udeb;
 353   dsc;
 354 };
 355
 356 Location
 357 {
 358   /org/security.debian.org/ftp/dists/
 359     {
 360       Archive "security";
 361       Type "legacy";
 362     };
 363
 364   /org/security.debian.org/ftp/pool/
 365     {
 366       Archive "security";
 367       Suites
 368         {
 369           Stable;
 370           Testing;
 371         };
 372       Type "pool";
 373     };
 374 };
 375
 376 Urgency
 377 {
 378   Default "low";
 379   Valid
 380   {
 381     low;
 382     medium;
 383     high;
 384     emergency;
 385     critical;
 386   };
 387 };