config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/srv/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    // was non-us.d.o path before
   8    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   9    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
  10    SigningKeyIds "55BE302B";
  11    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  12    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  13    MyAdminAddress "ftpmaster@debian.org";
  14    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  15    MyDistribution "Debian"; // Used in emails
  16    BugServer "bugs.debian.org";
  17    PackagesServer "packages.debian.org";
  18    LockFile "/org/security-master.debian.org/dak/lock";
  19    Bcc "archive@ftp-master.debian.org";
  20    // GroupOverrideFilename "override.group-maint";
  21    FutureTimeTravelGrace 28800; // 8 hours
  22    PastCutoffYear "1984";
  23    SkipTime 300;
  24    CloseBugs "false";
  25    OverrideDisparityCheck "false";
  26    BXANotify "false";
  27    QueueBuildSuites
  28    {
  29      stable;
  30      testing;
  31    };
  32    SecurityQueueHandling "true";
  33    SecurityQueueBuild "true";
  34    DefaultSuite "stable";
  35    SuiteSuffix "updates";
  36    OverrideMaintainer "dak@security.debian.org";
  37    LegacyStableHasNoSections "false";
  38 };
  39
  40 Process-New
  41 {
  42   AcceptedLockFile "/srv/security-master.debian.org/lock/unchecked.lock";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     // byhand;
  57     // new;
  58     unembargoed;
  59   };
  60 };
  61
  62 Clean-Queues
  63 {
  64   Options
  65   {
  66     Days 14;
  67   };
  68  MorgueSubDir "queue";
  69 };
  70
  71 Rm
  72 {
  73   Options
  74   {
  75     Suite "unstable";
  76   };
  77
  78   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  79   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
  80 };
  81
  82 Init-Archive
  83 {
  84   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
  85 };
  86
  87 Clean-Suites
  88 {
  89   // How long (in seconds) dead packages are left before being killed
  90   StayOfExecution 129600; // 1.5 days
  91   QueueBuildStayOfExecution 86400; // 24 hours
  92   MorgueSubDir "pool";
  93   OverrideFilename "override.source-only";
  94 };
  95
  96 Security-Install
  97 {
  98   ComponentMappings
  99   {
 100     main "ftp-master.debian.org:/pub/UploadQueue";
 101     contrib "ftp-master.debian.org:/pub/UploadQueue";
 102     non-free "ftp-master.debian.org:/pub/UploadQueue";
 103     non-US/main "non-us.debian.org:/pub/UploadQueue";
 104     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 105     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 106   };
 107 };
 108
 109 Suite
 110 {
 111   // Priority determines which suite is used for the Maintainers file
 112   // as generated by 'dak make-maintainers' (highest wins).
 113
 114   Stable
 115   {
 116         Components
 117         {
 118           updates/main;
 119           updates/contrib;
 120           updates/non-free;
 121         };
 122         Announce "dak@security.debian.org";
 123         Version "";
 124         Origin "Debian";
 125         Label "Debian-Security";
 126         Description "Debian 5.0 Security Updates";
 127         ValidTime 864000; // 10 days
 128         CodeName "lenny";
 129         OverrideCodeName "lenny";
 130         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 131   };
 132
 133   Testing
 134   {
 135         Components
 136         {
 137           updates/main;
 138           updates/contrib;
 139           updates/non-free;
 140         };
 141         Announce "dak@security.debian.org";
 142         Version "";
 143         Origin "Debian";
 144         Label "Debian-Security";
 145         Description "Debian testing Security Updates";
 146         ValidTime 864000; // 10 days
 147         CodeName "squeeze";
 148         OverrideCodeName "squeeze";
 149         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 150   };
 151 };
 152
 153 SuiteMappings
 154 {
 155  "silent-map stable-security stable";
 156  "silent-map oldstable-security oldstable";
 157  // JT - FIXME, hackorama
 158  // "silent-map testing-security stable";
 159   "silent-map etch-secure oldstable";
 160   "silent-map lenny-secure stable";
 161   "silent-map testing-security testing";
 162 };
 163
 164 Dir
 165 {
 166   Root "/srv/security-master.debian.org/ftp/";
 167   Pool "/srv/security-master.debian.org/ftp/pool/";
 168   Dak "/srv/security-master.debian.org/dak/";
 169   Templates "/srv/security-master.debian.org/dak/templates/";
 170   PoolRoot "pool/";
 171   Override "/srv/security-master.debian.org/override/";
 172   Lock "/srv/security-master.debian.org/lock/";
 173   Lists "/srv/security-master.debian.org/dak-database/dists/";
 174   Log "/srv/security-master.debian.org/dak-log/";
 175   Morgue "/srv/security-master.debian.org/morgue/";
 176   MorgueReject "reject";
 177   Override "/srv/security-master.debian.org/scripts/override/";
 178   QueueBuild "/srv/security-master.debian.org/buildd/";
 179   Upload "/srv/queued/ftpmaster/";
 180   Queue
 181   {
 182     Byhand "/srv/security-master.debian.org/queue/byhand/";
 183     Done "/srv/security-master.debian.org/queue/done/";
 184     Holding "/srv/security-master.debian.org/queue/holding/";
 185     New "/srv/security-master.debian.org/queue/new/";
 186     Reject "/srv/security-master.debian.org/queue/reject/";
 187     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 188     Newstage "/srv/security-master.debian.org/queue/newstage/";
 189
 190     ProposedUpdates "/does/not/exist/"; // XXX fixme
 191     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 192
 193     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 194     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 195     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 196   };
 197 };
 198
 199 DB
 200 {
 201   Name "obscurity";
 202   Host "";
 203   Port -1;
 204
 205 };
 206
 207 Architectures
 208 {
 209
 210   source "Source";
 211   all "Architecture Independent";
 212   alpha "DEC Alpha";
 213   hppa "HP PA RISC";
 214   arm "ARM";
 215   armel "ARM EABI";
 216   i386 "Intel ia32";
 217   ia64 "Intel ia64";
 218   mips "MIPS (Big Endian)";
 219   mipsel "MIPS (Little Endian)";
 220   powerpc "PowerPC";
 221   s390 "IBM S/390";
 222   sparc "Sun SPARC/UltraSPARC";
 223   amd64 "AMD x86_64 (AMD64)";
 224   kfreebsd-i386 "GNU/kFreeBSD i386";
 225   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 226
 227 };
 228
 229 Archive
 230 {
 231
 232   security
 233   {
 234     OriginServer "security.debian.org";
 235     PrimaryMirror "security.debian.org";
 236     Description "Security Updates for the Debian project";
 237   };
 238
 239 };
 240
 241 Component
 242 {
 243
 244   updates/main
 245   {
 246         Description "Main (updates)";
 247         MeetsDFSG "true";
 248   };
 249
 250   updates/contrib
 251   {
 252         Description "Contrib (updates)";
 253         MeetsDFSG "true";
 254   };
 255
 256   updates/non-free
 257   {
 258         Description "Software that fails to meet the DFSG";
 259         MeetsDFSG "false";
 260   };
 261
 262 };
 263
 264 ComponentMappings
 265 {
 266  "main updates/main";
 267  "contrib updates/contrib";
 268  "non-free updates/non-free";
 269  "non-US/main updates/main";
 270  "non-US/contrib updates/contrib";
 271  "non-US/non-free updates/non-free";
 272 };
 273
 274 Section
 275 {
 276   admin;
 277   cli-mono;
 278   comm;
 279   database;
 280   debian-installer;
 281   debug;
 282   devel;
 283   doc;
 284   editors;
 285   embedded;
 286   electronics;
 287   fonts;
 288   games;
 289   gnome;
 290   graphics;
 291   gnu-r;
 292   gnustep;
 293   hamradio;
 294   haskell;
 295   httpd;
 296   interpreters;
 297   java;
 298   kde;
 299   kernel;
 300   libdevel;
 301   libs;
 302   lisp;
 303   localization;
 304   mail;
 305   math;
 306   misc;
 307   net;
 308   news;
 309   ocaml;
 310   oldlibs;
 311   otherosfs;
 312   perl;
 313   php;
 314   python;
 315   ruby;
 316   science;
 317   shells;
 318   sound;
 319   tex;
 320   text;
 321   utils;
 322   web;
 323   vcs;
 324   video;
 325   x11;
 326   xfce;
 327   zope;
 328 };
 329
 330 Priority
 331 {
 332   required 1;
 333   important 2;
 334   standard 3;
 335   optional 4;
 336   extra 5;
 337   source 0; // i.e. unused
 338 };
 339
 340 OverrideType
 341 {
 342   deb;
 343   udeb;
 344   dsc;
 345 };
 346
 347 Location
 348 {
 349   /srv/security-master.debian.org/ftp/pool/
 350     {
 351       Archive "security";
 352       Suites
 353         {
 354           OldStable;
 355           Stable;
 356           Testing;
 357         };
 358       Type "pool";
 359     };
 360 };
 361
 362 Urgency
 363 {
 364   Default "low";
 365   Valid
 366   {
 367     low;
 368     medium;
 369     high;
 370     emergency;
 371     critical;
 372   };
 373 };