config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "6070D3A1";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      oldstable;
  29      stable;
  30      testing;
  31    };
  32    SecurityQueueHandling "true";
  33    SecurityQueueBuild "true";
  34    DefaultSuite "stable";
  35    SuiteSuffix "updates";
  36    OverrideMaintainer "dak@security.debian.org";
  37    LegacyStableHasNoSections "false";
  38 };
  39
  40 Process-New
  41 {
  42   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     // byhand;
  57     // new;
  58     unembargoed;
  59   };
  60 };
  61
  62 Clean-Queues
  63 {
  64   Options
  65   {
  66     Days 14;
  67   };
  68  MorgueSubDir "queue";
  69 };
  70
  71 Rm
  72 {
  73   Options
  74   {
  75     Suite "unstable";
  76   };
  77
  78   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  79   LogFile "/org/security.debian.org/dak-log/removals.txt";
  80 };
  81
  82 Init-Archive
  83 {
  84   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  85 };
  86
  87 Clean-Suites
  88 {
  89   // How long (in seconds) dead packages are left before being killed
  90   StayOfExecution 129600; // 1.5 days
  91   QueueBuildStayOfExecution 86400; // 24 hours
  92   MorgueSubDir "pool";
  93   OverrideFilename "override.source-only";
  94 };
  95
  96 Security-Install
  97 {
  98   ComponentMappings
  99   {
 100     main "ftp-master.debian.org:/pub/UploadQueue";
 101     contrib "ftp-master.debian.org:/pub/UploadQueue";
 102     non-free "ftp-master.debian.org:/pub/UploadQueue";
 103     non-US/main "non-us.debian.org:/pub/UploadQueue";
 104     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 105     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 106   };
 107 };
 108
 109 Suite
 110 {
 111   // Priority determines which suite is used for the Maintainers file
 112   // as generated by 'dak make-maintainers' (highest wins).
 113
 114   OldStable
 115   {
 116         Components
 117         {
 118           updates/main;
 119           updates/contrib;
 120           updates/non-free;
 121         };
 122         Architectures
 123         {
 124           source;
 125           all;
 126           amd64;
 127           alpha;
 128           arm;
 129           hppa;
 130           i386;
 131           ia64;
 132           mips;
 133           mipsel;
 134           powerpc;
 135           s390;
 136           sparc;
 137         };
 138         Announce "dak@security.debian.org";
 139         Version "";
 140         Origin "Debian";
 141         Label "Debian-Security";
 142         Description "Debian 4.0 Security Updates";
 143         ValidTime 864000; // 10 days
 144         CodeName "etch";
 145         OverrideCodeName "etch";
 146         CopyDotDak "/org/security.debian.org/queue/done/";
 147   };
 148
 149   Stable
 150   {
 151         Components
 152         {
 153           updates/main;
 154           updates/contrib;
 155           updates/non-free;
 156         };
 157         Architectures
 158         {
 159           source;
 160           all;
 161           amd64;
 162           alpha;
 163           arm;
 164           armel;
 165           hppa;
 166           i386;
 167           ia64;
 168           mips;
 169           mipsel;
 170           powerpc;
 171           s390;
 172           sparc;
 173         };
 174         Announce "dak@security.debian.org";
 175         Version "";
 176         Origin "Debian";
 177         Label "Debian-Security";
 178         Description "Debian 5.0 Security Updates";
 179         ValidTime 864000; // 10 days
 180         CodeName "lenny";
 181         OverrideCodeName "lenny";
 182         CopyDotDak "/org/security.debian.org/queue/done/";
 183   };
 184
 185   Testing
 186   {
 187         Components
 188         {
 189           updates/main;
 190           updates/contrib;
 191           updates/non-free;
 192         };
 193         Architectures
 194         {
 195           source;
 196           all;
 197           amd64;
 198           alpha;
 199           armel;
 200           hppa;
 201           i386;
 202           ia64;
 203           mips;
 204           mipsel;
 205           powerpc;
 206           s390;
 207           sparc;
 208         };
 209         Announce "dak@security.debian.org";
 210         Version "";
 211         Origin "Debian";
 212         Label "Debian-Security";
 213         Description "Debian testing Security Updates";
 214         ValidTime 864000; // 10 days
 215         CodeName "squeeze";
 216         OverrideCodeName "squeeze";
 217         CopyDotDak "/org/security.debian.org/queue/done/";
 218   };
 219 };
 220
 221 SuiteMappings
 222 {
 223  "silent-map stable-security stable";
 224  "silent-map oldstable-security oldstable";
 225  // JT - FIXME, hackorama
 226  // "silent-map testing-security stable";
 227   "silent-map etch-secure oldstable";
 228   "silent-map lenny-secure stable";
 229   "silent-map testing-security testing";
 230 };
 231
 232 Dir
 233 {
 234   Root "/org/security.debian.org/ftp/";
 235   Pool "/org/security.debian.org/ftp/pool/";
 236   Dak "/org/security.debian.org/dak/";
 237   Templates "/org/security.debian.org/dak/templates/";
 238   PoolRoot "pool/";
 239   Override "/org/security.debian.org/override/";
 240   Lock "/org/security.debian.org/lock/";
 241   Lists "/org/security.debian.org/dak-database/dists/";
 242   Log "/org/security.debian.org/dak-log/";
 243   Morgue "/org/security.debian.org/morgue/";
 244   MorgueReject "reject";
 245   Override "/org/security.debian.org/scripts/override/";
 246   QueueBuild "/org/security.debian.org/buildd/";
 247   Upload "/srv/queued/UploadQueue/";
 248   Queue
 249   {
 250     Accepted "/org/security.debian.org/queue/accepted/";
 251     Byhand "/org/security.debian.org/queue/byhand/";
 252     Done "/org/security.debian.org/queue/done/";
 253     Holding "/org/security.debian.org/queue/holding/";
 254     New "/org/security.debian.org/queue/new/";
 255     Reject "/org/security.debian.org/queue/reject/";
 256     Unchecked "/org/security.debian.org/queue/unchecked/";
 257     ProposedUpdates "/does/not/exist/"; // XXX fixme
 258     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 259
 260     Embargoed "/org/security.debian.org/queue/embargoed/";
 261     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 262     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 263   };
 264 };
 265
 266 DB
 267 {
 268   Name "obscurity";
 269   Host "";
 270   Port -1;
 271
 272 };
 273
 274 Architectures
 275 {
 276
 277   source "Source";
 278   all "Architecture Independent";
 279   alpha "DEC Alpha";
 280   hppa "HP PA RISC";
 281   arm "ARM";
 282   armel "ARM EABI";
 283   i386 "Intel ia32";
 284   ia64 "Intel ia64";
 285   mips "MIPS (Big Endian)";
 286   mipsel "MIPS (Little Endian)";
 287   powerpc "PowerPC";
 288   s390 "IBM S/390";
 289   sparc "Sun SPARC/UltraSPARC";
 290   amd64 "AMD x86_64 (AMD64)";
 291
 292 };
 293
 294 Archive
 295 {
 296
 297   security
 298   {
 299     OriginServer "security.debian.org";
 300     PrimaryMirror "security.debian.org";
 301     Description "Security Updates for the Debian project";
 302   };
 303
 304 };
 305
 306 Component
 307 {
 308
 309   updates/main
 310   {
 311         Description "Main (updates)";
 312         MeetsDFSG "true";
 313   };
 314
 315   updates/contrib
 316   {
 317         Description "Contrib (updates)";
 318         MeetsDFSG "true";
 319   };
 320
 321   updates/non-free
 322   {
 323         Description "Software that fails to meet the DFSG";
 324         MeetsDFSG "false";
 325   };
 326
 327 };
 328
 329 ComponentMappings
 330 {
 331  "main updates/main";
 332  "contrib updates/contrib";
 333  "non-free updates/non-free";
 334  "non-US/main updates/main";
 335  "non-US/contrib updates/contrib";
 336  "non-US/non-free updates/non-free";
 337 };
 338
 339 Section
 340 {
 341   admin;
 342   base;
 343   comm;
 344   debian-installer;
 345   devel;
 346   doc;
 347   editors;
 348   electronics;
 349   embedded;
 350   games;
 351   gnome;
 352   graphics;
 353   hamradio;
 354   interpreters;
 355   kde;
 356   libdevel;
 357   libs;
 358   mail;
 359   math;
 360   misc;
 361   net;
 362   news;
 363   oldlibs;
 364   otherosfs;
 365   perl;
 366   python;
 367   science;
 368   shells;
 369   sound;
 370   tex;
 371   text;
 372   utils;
 373   web;
 374   x11;
 375   non-US;
 376 };
 377
 378 Priority
 379 {
 380   required 1;
 381   important 2;
 382   standard 3;
 383   optional 4;
 384   extra 5;
 385   source 0; // i.e. unused
 386 };
 387
 388 OverrideType
 389 {
 390   deb;
 391   udeb;
 392   dsc;
 393 };
 394
 395 Location
 396 {
 397   /org/security.debian.org/ftp/dists/
 398     {
 399       Archive "security";
 400       Type "legacy";
 401     };
 402
 403   /org/security.debian.org/ftp/pool/
 404     {
 405       Archive "security";
 406       Suites
 407         {
 408           OldStable;
 409           Stable;
 410           Testing;
 411         };
 412       Type "pool";
 413     };
 414 };
 415
 416 Urgency
 417 {
 418   Default "low";
 419   Valid
 420   {
 421     low;
 422     medium;
 423     high;
 424     emergency;
 425     critical;
 426   };
 427 };