config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/srv/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    // was non-us.d.o path before
   8    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   9    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
  10    SigningKeyIds "55BE302B";
  11    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  12    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  13    MyAdminAddress "ftpmaster@debian.org";
  14    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  15    MyDistribution "Debian"; // Used in emails
  16    BugServer "bugs.debian.org";
  17    PackagesServer "packages.debian.org";
  18    LockFile "/org/security-master.debian.org/dak/lock";
  19    Bcc "archive@ftp-master.debian.org";
  20    // GroupOverrideFilename "override.group-maint";
  21    FutureTimeTravelGrace 28800; // 8 hours
  22    PastCutoffYear "1984";
  23    SkipTime 300;
  24    CloseBugs "false";
  25    OverrideDisparityCheck "false";
  26    BXANotify "false";
  27    QueueBuildSuites
  28    {
  29      oldstable;
  30      stable;
  31      testing;
  32    };
  33    SecurityQueueHandling "true";
  34    SecurityQueueBuild "true";
  35    DefaultSuite "stable";
  36    SuiteSuffix "updates";
  37    OverrideMaintainer "dak@security.debian.org";
  38    LegacyStableHasNoSections "false";
  39 };
  40
  41 Process-New
  42 {
  43   AcceptedLockFile "/srv/security-master.debian.org/lock/unchecked.lock";
  44 };
  45
  46 Import-Users-From-Passwd
  47 {
  48   ValidGID "800";
  49   // Comma separated list of users who are in Postgres but not the passwd file
  50   KnownPostgres "postgres,dak,www-data,udmsearch";
  51 };
  52
  53 Queue-Report
  54 {
  55   Directories
  56   {
  57     // byhand;
  58     // new;
  59     unembargoed;
  60   };
  61 };
  62
  63 Clean-Queues
  64 {
  65   Options
  66   {
  67     Days 14;
  68   };
  69  MorgueSubDir "queue";
  70 };
  71
  72 Rm
  73 {
  74   Options
  75   {
  76     Suite "unstable";
  77   };
  78
  79   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  80   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
  81 };
  82
  83 Init-Archive
  84 {
  85   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
  86 };
  87
  88 Clean-Suites
  89 {
  90   // How long (in seconds) dead packages are left before being killed
  91   StayOfExecution 129600; // 1.5 days
  92   QueueBuildStayOfExecution 86400; // 24 hours
  93   MorgueSubDir "pool";
  94   OverrideFilename "override.source-only";
  95 };
  96
  97 Security-Install
  98 {
  99   ComponentMappings
 100   {
 101     main "ftp-master.debian.org:/pub/UploadQueue";
 102     contrib "ftp-master.debian.org:/pub/UploadQueue";
 103     non-free "ftp-master.debian.org:/pub/UploadQueue";
 104     non-US/main "non-us.debian.org:/pub/UploadQueue";
 105     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 106     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 107   };
 108 };
 109
 110 Suite
 111 {
 112   // Priority determines which suite is used for the Maintainers file
 113   // as generated by 'dak make-maintainers' (highest wins).
 114
 115   OldStable
 116   {
 117         Components
 118         {
 119           updates/main;
 120           updates/contrib;
 121           updates/non-free;
 122         };
 123         Announce "dak@security.debian.org";
 124         Version "";
 125         Origin "Debian";
 126         Label "Debian-Security";
 127         Description "Debian 4.0 Security Updates";
 128         ValidTime 864000; // 10 days
 129         CodeName "etch";
 130         OverrideCodeName "etch";
 131         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 132   };
 133
 134   Stable
 135   {
 136         Components
 137         {
 138           updates/main;
 139           updates/contrib;
 140           updates/non-free;
 141         };
 142         Announce "dak@security.debian.org";
 143         Version "";
 144         Origin "Debian";
 145         Label "Debian-Security";
 146         Description "Debian 5.0 Security Updates";
 147         ValidTime 864000; // 10 days
 148         CodeName "lenny";
 149         OverrideCodeName "lenny";
 150         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 151   };
 152
 153   Testing
 154   {
 155         Components
 156         {
 157           updates/main;
 158           updates/contrib;
 159           updates/non-free;
 160         };
 161         Announce "dak@security.debian.org";
 162         Version "";
 163         Origin "Debian";
 164         Label "Debian-Security";
 165         Description "Debian testing Security Updates";
 166         ValidTime 864000; // 10 days
 167         CodeName "squeeze";
 168         OverrideCodeName "squeeze";
 169         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 170   };
 171 };
 172
 173 SuiteMappings
 174 {
 175  "silent-map stable-security stable";
 176  "silent-map oldstable-security oldstable";
 177  // JT - FIXME, hackorama
 178  // "silent-map testing-security stable";
 179   "silent-map etch-secure oldstable";
 180   "silent-map lenny-secure stable";
 181   "silent-map testing-security testing";
 182 };
 183
 184 Dir
 185 {
 186   Root "/srv/security-master.debian.org/ftp/";
 187   Pool "/srv/security-master.debian.org/ftp/pool/";
 188   Dak "/srv/security-master.debian.org/dak/";
 189   Templates "/srv/security-master.debian.org/dak/templates/";
 190   PoolRoot "pool/";
 191   Override "/srv/security-master.debian.org/override/";
 192   Lock "/srv/security-master.debian.org/lock/";
 193   Lists "/srv/security-master.debian.org/dak-database/dists/";
 194   Log "/srv/security-master.debian.org/dak-log/";
 195   Morgue "/srv/security-master.debian.org/morgue/";
 196   MorgueReject "reject";
 197   Override "/srv/security-master.debian.org/scripts/override/";
 198   QueueBuild "/srv/security-master.debian.org/buildd/";
 199   Upload "/srv/queued/ftpmaster/";
 200   Queue
 201   {
 202     Byhand "/srv/security-master.debian.org/queue/byhand/";
 203     Done "/srv/security-master.debian.org/queue/done/";
 204     Holding "/srv/security-master.debian.org/queue/holding/";
 205     New "/srv/security-master.debian.org/queue/new/";
 206     Reject "/srv/security-master.debian.org/queue/reject/";
 207     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 208     Newstage "/srv/security-master.debian.org/queue/newstage/";
 209
 210     ProposedUpdates "/does/not/exist/"; // XXX fixme
 211     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 212
 213     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 214     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 215     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 216   };
 217 };
 218
 219 DB
 220 {
 221   Name "obscurity";
 222   Host "";
 223   Port -1;
 224
 225 };
 226
 227 Architectures
 228 {
 229
 230   source "Source";
 231   all "Architecture Independent";
 232   alpha "DEC Alpha";
 233   hppa "HP PA RISC";
 234   arm "ARM";
 235   armel "ARM EABI";
 236   i386 "Intel ia32";
 237   ia64 "Intel ia64";
 238   mips "MIPS (Big Endian)";
 239   mipsel "MIPS (Little Endian)";
 240   powerpc "PowerPC";
 241   s390 "IBM S/390";
 242   sparc "Sun SPARC/UltraSPARC";
 243   amd64 "AMD x86_64 (AMD64)";
 244   kfreebsd-i386 "GNU/kFreeBSD i386";
 245   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 246
 247 };
 248
 249 Archive
 250 {
 251
 252   security
 253   {
 254     OriginServer "security.debian.org";
 255     PrimaryMirror "security.debian.org";
 256     Description "Security Updates for the Debian project";
 257   };
 258
 259 };
 260
 261 Component
 262 {
 263
 264   updates/main
 265   {
 266         Description "Main (updates)";
 267         MeetsDFSG "true";
 268   };
 269
 270   updates/contrib
 271   {
 272         Description "Contrib (updates)";
 273         MeetsDFSG "true";
 274   };
 275
 276   updates/non-free
 277   {
 278         Description "Software that fails to meet the DFSG";
 279         MeetsDFSG "false";
 280   };
 281
 282 };
 283
 284 ComponentMappings
 285 {
 286  "main updates/main";
 287  "contrib updates/contrib";
 288  "non-free updates/non-free";
 289  "non-US/main updates/main";
 290  "non-US/contrib updates/contrib";
 291  "non-US/non-free updates/non-free";
 292 };
 293
 294 Section
 295 {
 296   admin;
 297   cli-mono;
 298   comm;
 299   database;
 300   debian-installer;
 301   debug;
 302   devel;
 303   doc;
 304   editors;
 305   embedded;
 306   electronics;
 307   fonts;
 308   games;
 309   gnome;
 310   graphics;
 311   gnu-r;
 312   gnustep;
 313   hamradio;
 314   haskell;
 315   httpd;
 316   interpreters;
 317   java;
 318   kde;
 319   kernel;
 320   libdevel;
 321   libs;
 322   lisp;
 323   localization;
 324   mail;
 325   math;
 326   misc;
 327   net;
 328   news;
 329   ocaml;
 330   oldlibs;
 331   otherosfs;
 332   perl;
 333   php;
 334   python;
 335   ruby;
 336   science;
 337   shells;
 338   sound;
 339   tex;
 340   text;
 341   utils;
 342   web;
 343   vcs;
 344   video;
 345   x11;
 346   xfce;
 347   zope;
 348 };
 349
 350 Priority
 351 {
 352   required 1;
 353   important 2;
 354   standard 3;
 355   optional 4;
 356   extra 5;
 357   source 0; // i.e. unused
 358 };
 359
 360 OverrideType
 361 {
 362   deb;
 363   udeb;
 364   dsc;
 365 };
 366
 367 Location
 368 {
 369   /srv/security-master.debian.org/ftp/pool/
 370     {
 371       Archive "security";
 372       Suites
 373         {
 374           OldStable;
 375           Stable;
 376           Testing;
 377         };
 378       Type "pool";
 379     };
 380 };
 381
 382 Urgency
 383 {
 384   Default "low";
 385   Valid
 386   {
 387     low;
 388     medium;
 389     high;
 390     emergency;
 391     critical;
 392   };
 393 };