config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    // was non-us.d.o path before
   7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "55BE302B";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security-master.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/srv/security-master.debian.org/lock/unchecked.lock";
  42   LockDir "/srv/security-master.debian.org/lock/new/";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     // byhand;
  57     // new;
  58     unembargoed;
  59   };
  60 };
  61
  62 Import-Keyring
  63 {
  64   /srv/keyring.debian.org/keyrings/debian-maintainers.gpg
  65     {
  66       Debian-Maintainer "true";
  67     };
  68 };
  69
  70 Import-LDAP-Fingerprints
  71 {
  72   LDAPDn "ou=users,dc=debian,dc=org";
  73   LDAPServer "db.debian.org";
  74   ExtraKeyrings
  75   {
  76     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  77     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  78     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  79   };
  80   KeyServer "wwwkeys.eu.pgp.net";
  81 };
  82
  83 Check-Overrides
  84 {
  85   OverrideSuites
  86   {
  87     Stable
  88     {
  89       Process "0";
  90     };
  91
  92     Testing
  93     {
  94       Process "0";
  95     };
  96
  97   };
  98 };
  99
 100 Clean-Queues
 101 {
 102   Options
 103   {
 104     Days 14;
 105   };
 106  MorgueSubDir "queue";
 107 };
 108
 109 Rm
 110 {
 111   Options
 112   {
 113     Suite "unstable";
 114   };
 115
 116   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 117   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 118 };
 119
 120 Init-Archive
 121 {
 122   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
 123 };
 124
 125 Clean-Suites
 126 {
 127   // How long (in seconds) dead packages are left before being killed
 128   StayOfExecution 129600; // 1.5 days
 129   QueueBuildStayOfExecution 86400; // 24 hours
 130   MorgueSubDir "pool";
 131   OverrideFilename "override.source-only";
 132 };
 133
 134 Security-Install
 135 {
 136   ComponentMappings
 137   {
 138     main "ftp-master.debian.org:/pub/UploadQueue";
 139     contrib "ftp-master.debian.org:/pub/UploadQueue";
 140     non-free "ftp-master.debian.org:/pub/UploadQueue";
 141     non-US/main "non-us.debian.org:/pub/UploadQueue";
 142     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 143     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 144   };
 145 };
 146
 147 Suite
 148 {
 149   // Priority determines which suite is used for the Maintainers file
 150   // as generated by 'dak make-maintainers' (highest wins).
 151
 152   Stable
 153   {
 154         Components
 155         {
 156           updates/main;
 157           updates/contrib;
 158           updates/non-free;
 159         };
 160         Announce "dak@security.debian.org";
 161         Version "";
 162         Origin "Debian";
 163         Label "Debian-Security";
 164         Description "Debian 5.0 Security Updates";
 165         ValidTime 864000; // 10 days
 166         CodeName "lenny";
 167         OverrideCodeName "lenny";
 168         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 169   };
 170
 171   Testing
 172   {
 173         Components
 174         {
 175           updates/main;
 176           updates/contrib;
 177           updates/non-free;
 178         };
 179         Announce "dak@security.debian.org";
 180         Version "";
 181         Origin "Debian";
 182         Label "Debian-Security";
 183         Description "Debian testing Security Updates";
 184         ValidTime 864000; // 10 days
 185         CodeName "squeeze";
 186         OverrideCodeName "squeeze";
 187         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 188   };
 189 };
 190
 191 SuiteMappings
 192 {
 193  "silent-map stable-security stable";
 194  "silent-map oldstable-security oldstable";
 195  // JT - FIXME, hackorama
 196  // "silent-map testing-security stable";
 197   "silent-map etch-secure oldstable";
 198   "silent-map lenny-secure stable";
 199   "silent-map testing-security testing";
 200 };
 201
 202 Dir
 203 {
 204   Root "/srv/security-master.debian.org/ftp/";
 205   Pool "/srv/security-master.debian.org/ftp/pool/";
 206   Dak "/srv/security-master.debian.org/dak/";
 207   Templates "/srv/security-master.debian.org/dak/templates/";
 208   PoolRoot "pool/";
 209   Override "/srv/security-master.debian.org/override/";
 210   Lock "/srv/security-master.debian.org/lock/";
 211   Cache "/srv/security-master.debian.org/database/";
 212   Lists "/srv/security-master.debian.org/dak-database/dists/";
 213   Log "/srv/security-master.debian.org/dak-log/";
 214   Morgue "/srv/security-master.debian.org/morgue/";
 215   MorgueReject "reject";
 216   Override "/srv/security-master.debian.org/scripts/override/";
 217   QueueBuild "/srv/security-master.debian.org/buildd/";
 218   Upload "/srv/queued/ftpmaster/";
 219   Queue
 220   {
 221     Byhand "/srv/security-master.debian.org/queue/byhand/";
 222     Done "/srv/security-master.debian.org/queue/done/";
 223     Holding "/srv/security-master.debian.org/queue/holding/";
 224     New "/srv/security-master.debian.org/queue/new/";
 225     Reject "/srv/security-master.debian.org/queue/reject/";
 226     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 227     Newstage "/srv/security-master.debian.org/queue/newstage/";
 228
 229     ProposedUpdates "/does/not/exist/"; // XXX fixme
 230     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 231
 232     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 233     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 234     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 235   };
 236 };
 237
 238 DB
 239 {
 240   Name "obscurity";
 241   Host "";
 242   Port -1;
 243
 244 };
 245
 246 Architectures
 247 {
 248
 249   source "Source";
 250   all "Architecture Independent";
 251   alpha "DEC Alpha";
 252   hppa "HP PA RISC";
 253   arm "ARM";
 254   armel "ARM EABI";
 255   i386 "Intel ia32";
 256   ia64 "Intel ia64";
 257   mips "MIPS (Big Endian)";
 258   mipsel "MIPS (Little Endian)";
 259   powerpc "PowerPC";
 260   s390 "IBM S/390";
 261   sparc "Sun SPARC/UltraSPARC";
 262   amd64 "AMD x86_64 (AMD64)";
 263   kfreebsd-i386 "GNU/kFreeBSD i386";
 264   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 265
 266 };
 267
 268 Archive
 269 {
 270
 271   security
 272   {
 273     OriginServer "security.debian.org";
 274     PrimaryMirror "security.debian.org";
 275     Description "Security Updates for the Debian project";
 276   };
 277
 278 };
 279
 280 Component
 281 {
 282
 283   updates/main
 284   {
 285         Description "Main (updates)";
 286         MeetsDFSG "true";
 287   };
 288
 289   updates/contrib
 290   {
 291         Description "Contrib (updates)";
 292         MeetsDFSG "true";
 293   };
 294
 295   updates/non-free
 296   {
 297         Description "Software that fails to meet the DFSG";
 298         MeetsDFSG "false";
 299   };
 300
 301 };
 302
 303 ComponentMappings
 304 {
 305  "main updates/main";
 306  "contrib updates/contrib";
 307  "non-free updates/non-free";
 308  "non-US/main updates/main";
 309  "non-US/contrib updates/contrib";
 310  "non-US/non-free updates/non-free";
 311 };
 312
 313 Section
 314 {
 315   admin;
 316   cli-mono;
 317   comm;
 318   database;
 319   debian-installer;
 320   debug;
 321   devel;
 322   doc;
 323   editors;
 324   embedded;
 325   electronics;
 326   fonts;
 327   games;
 328   gnome;
 329   graphics;
 330   gnu-r;
 331   gnustep;
 332   hamradio;
 333   haskell;
 334   httpd;
 335   interpreters;
 336   java;
 337   kde;
 338   kernel;
 339   libdevel;
 340   libs;
 341   lisp;
 342   localization;
 343   mail;
 344   math;
 345   misc;
 346   net;
 347   news;
 348   ocaml;
 349   oldlibs;
 350   otherosfs;
 351   perl;
 352   php;
 353   python;
 354   ruby;
 355   science;
 356   shells;
 357   sound;
 358   tex;
 359   text;
 360   utils;
 361   web;
 362   vcs;
 363   video;
 364   x11;
 365   xfce;
 366   zope;
 367 };
 368
 369 Priority
 370 {
 371   required 1;
 372   important 2;
 373   standard 3;
 374   optional 4;
 375   extra 5;
 376   source 0; // i.e. unused
 377 };
 378
 379 OverrideType
 380 {
 381   deb;
 382   udeb;
 383   dsc;
 384 };
 385
 386 Location
 387 {
 388   /srv/security-master.debian.org/ftp/pool/
 389     {
 390       Archive "security";
 391       Suites
 392         {
 393           OldStable;
 394           Stable;
 395           Testing;
 396         };
 397       Type "pool";
 398     };
 399 };
 400
 401 Urgency
 402 {
 403   Default "low";
 404   Valid
 405   {
 406     low;
 407     medium;
 408     high;
 409     emergency;
 410     critical;
 411   };
 412 };