config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    // was non-us.d.o path before
   7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "55BE302B";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security-master.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/srv/security-master.debian.org/lock/unchecked.lock";
  42 };
  43
  44 Import-Users-From-Passwd
  45 {
  46   ValidGID "800";
  47   // Comma separated list of users who are in Postgres but not the passwd file
  48   KnownPostgres "postgres,dak,www-data,udmsearch";
  49 };
  50
  51 Queue-Report
  52 {
  53   Directories
  54   {
  55     // byhand;
  56     // new;
  57     unembargoed;
  58   };
  59 };
  60
  61 Import-Keyring
  62 {
  63   /srv/keyring.debian.org/keyrings/debian-maintainers.gpg
  64     {
  65       Debian-Maintainer "true";
  66     };
  67 };
  68
  69 Import-LDAP-Fingerprints
  70 {
  71   LDAPDn "ou=users,dc=debian,dc=org";
  72   LDAPServer "db.debian.org";
  73   ExtraKeyrings
  74   {
  75     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  76     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  77     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  78   };
  79   KeyServer "wwwkeys.eu.pgp.net";
  80 };
  81
  82 Clean-Queues
  83 {
  84   Options
  85   {
  86     Days 14;
  87   };
  88  MorgueSubDir "queue";
  89 };
  90
  91 Rm
  92 {
  93   Options
  94   {
  95     Suite "unstable";
  96   };
  97
  98   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  99   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 100 };
 101
 102 Init-Archive
 103 {
 104   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
 105 };
 106
 107 Clean-Suites
 108 {
 109   // How long (in seconds) dead packages are left before being killed
 110   StayOfExecution 129600; // 1.5 days
 111   QueueBuildStayOfExecution 86400; // 24 hours
 112   MorgueSubDir "pool";
 113   OverrideFilename "override.source-only";
 114 };
 115
 116 Security-Install
 117 {
 118   ComponentMappings
 119   {
 120     main "ftp-master.debian.org:/pub/UploadQueue";
 121     contrib "ftp-master.debian.org:/pub/UploadQueue";
 122     non-free "ftp-master.debian.org:/pub/UploadQueue";
 123     non-US/main "non-us.debian.org:/pub/UploadQueue";
 124     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 125     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 126   };
 127 };
 128
 129 Suite
 130 {
 131   // Priority determines which suite is used for the Maintainers file
 132   // as generated by 'dak make-maintainers' (highest wins).
 133
 134   Stable
 135   {
 136         Components
 137         {
 138           updates/main;
 139           updates/contrib;
 140           updates/non-free;
 141         };
 142         Announce "dak@security.debian.org";
 143         Version "";
 144         Origin "Debian";
 145         Label "Debian-Security";
 146         Description "Debian 5.0 Security Updates";
 147         ValidTime 864000; // 10 days
 148         CodeName "lenny";
 149         OverrideCodeName "lenny";
 150         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 151   };
 152
 153   Testing
 154   {
 155         Components
 156         {
 157           updates/main;
 158           updates/contrib;
 159           updates/non-free;
 160         };
 161         Announce "dak@security.debian.org";
 162         Version "";
 163         Origin "Debian";
 164         Label "Debian-Security";
 165         Description "Debian testing Security Updates";
 166         ValidTime 864000; // 10 days
 167         CodeName "squeeze";
 168         OverrideCodeName "squeeze";
 169         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 170   };
 171 };
 172
 173 SuiteMappings
 174 {
 175  "silent-map stable-security stable";
 176  "silent-map oldstable-security oldstable";
 177  // JT - FIXME, hackorama
 178  // "silent-map testing-security stable";
 179   "silent-map etch-secure oldstable";
 180   "silent-map lenny-secure stable";
 181   "silent-map testing-security testing";
 182 };
 183
 184 Dir
 185 {
 186   Root "/srv/security-master.debian.org/ftp/";
 187   Pool "/srv/security-master.debian.org/ftp/pool/";
 188   Dak "/srv/security-master.debian.org/dak/";
 189   Templates "/srv/security-master.debian.org/dak/templates/";
 190   PoolRoot "pool/";
 191   Override "/srv/security-master.debian.org/override/";
 192   Lock "/srv/security-master.debian.org/lock/";
 193   Cache "/srv/security-master.debian.org/database/";
 194   Lists "/srv/security-master.debian.org/dak-database/dists/";
 195   Log "/srv/security-master.debian.org/dak-log/";
 196   Morgue "/srv/security-master.debian.org/morgue/";
 197   MorgueReject "reject";
 198   Override "/srv/security-master.debian.org/scripts/override/";
 199   QueueBuild "/srv/security-master.debian.org/buildd/";
 200   Upload "/srv/queued/ftpmaster/";
 201   Queue
 202   {
 203     Byhand "/srv/security-master.debian.org/queue/byhand/";
 204     Done "/srv/security-master.debian.org/queue/done/";
 205     Holding "/srv/security-master.debian.org/queue/holding/";
 206     New "/srv/security-master.debian.org/queue/new/";
 207     Reject "/srv/security-master.debian.org/queue/reject/";
 208     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 209     Newstage "/srv/security-master.debian.org/queue/newstage/";
 210
 211     ProposedUpdates "/does/not/exist/"; // XXX fixme
 212     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 213
 214     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 215     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 216     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 217   };
 218 };
 219
 220 DB
 221 {
 222   Name "obscurity";
 223   Host "";
 224   Port -1;
 225
 226 };
 227
 228 Architectures
 229 {
 230
 231   source "Source";
 232   all "Architecture Independent";
 233   alpha "DEC Alpha";
 234   hppa "HP PA RISC";
 235   arm "ARM";
 236   armel "ARM EABI";
 237   i386 "Intel ia32";
 238   ia64 "Intel ia64";
 239   mips "MIPS (Big Endian)";
 240   mipsel "MIPS (Little Endian)";
 241   powerpc "PowerPC";
 242   s390 "IBM S/390";
 243   sparc "Sun SPARC/UltraSPARC";
 244   amd64 "AMD x86_64 (AMD64)";
 245   kfreebsd-i386 "GNU/kFreeBSD i386";
 246   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 247
 248 };
 249
 250 Archive
 251 {
 252
 253   security
 254   {
 255     OriginServer "security.debian.org";
 256     PrimaryMirror "security.debian.org";
 257     Description "Security Updates for the Debian project";
 258   };
 259
 260 };
 261
 262 Component
 263 {
 264
 265   updates/main
 266   {
 267         Description "Main (updates)";
 268         MeetsDFSG "true";
 269   };
 270
 271   updates/contrib
 272   {
 273         Description "Contrib (updates)";
 274         MeetsDFSG "true";
 275   };
 276
 277   updates/non-free
 278   {
 279         Description "Software that fails to meet the DFSG";
 280         MeetsDFSG "false";
 281   };
 282
 283 };
 284
 285 ComponentMappings
 286 {
 287  "main updates/main";
 288  "contrib updates/contrib";
 289  "non-free updates/non-free";
 290  "non-US/main updates/main";
 291  "non-US/contrib updates/contrib";
 292  "non-US/non-free updates/non-free";
 293 };
 294
 295 Section
 296 {
 297   admin;
 298   cli-mono;
 299   comm;
 300   database;
 301   debian-installer;
 302   debug;
 303   devel;
 304   doc;
 305   editors;
 306   embedded;
 307   electronics;
 308   fonts;
 309   games;
 310   gnome;
 311   graphics;
 312   gnu-r;
 313   gnustep;
 314   hamradio;
 315   haskell;
 316   httpd;
 317   interpreters;
 318   java;
 319   kde;
 320   kernel;
 321   libdevel;
 322   libs;
 323   lisp;
 324   localization;
 325   mail;
 326   math;
 327   misc;
 328   net;
 329   news;
 330   ocaml;
 331   oldlibs;
 332   otherosfs;
 333   perl;
 334   php;
 335   python;
 336   ruby;
 337   science;
 338   shells;
 339   sound;
 340   tex;
 341   text;
 342   utils;
 343   web;
 344   vcs;
 345   video;
 346   x11;
 347   xfce;
 348   zope;
 349 };
 350
 351 Priority
 352 {
 353   required 1;
 354   important 2;
 355   standard 3;
 356   optional 4;
 357   extra 5;
 358   source 0; // i.e. unused
 359 };
 360
 361 OverrideType
 362 {
 363   deb;
 364   udeb;
 365   dsc;
 366 };
 367
 368 Location
 369 {
 370   /srv/security-master.debian.org/ftp/pool/
 371     {
 372       Archive "security";
 373       Suites
 374         {
 375           OldStable;
 376           Stable;
 377           Testing;
 378         };
 379       Type "pool";
 380     };
 381 };
 382
 383 Urgency
 384 {
 385   Default "low";
 386   Valid
 387   {
 388     low;
 389     medium;
 390     high;
 391     emergency;
 392     critical;
 393   };
 394 };