config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4       "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5       "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "2D230C5F";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    FutureTimeTravelGrace 28800; // 8 hours
  20    PastCutoffYear "1984";
  21    SkipTime 300;
  22    CloseBugs "false";
  23    OverrideDisparityCheck "false";
  24    BXANotify "false";
  25    QueueBuildSuites
  26    {
  27      oldstable;
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "Testing";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    StableDislocationSupport "false";
  37    LegacyStableHasNoSections "false";
  38 };
  39
  40 Process-Unchecked
  41 {
  42   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     byhand;
  57     new;
  58     accepted;
  59   };
  60 };
  61
  62 Clean-Queues
  63 {
  64   Options
  65   {
  66     Days 14;
  67   };
  68  MorgueSubDir "queue";
  69 };
  70
  71 Rm
  72 {
  73   Options
  74   {
  75     Suite "unstable";
  76   };
  77
  78   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  79   LogFile "/org/security.debian.org/dak-log/removals.txt";
  80 };
  81
  82 Init-Archive
  83 {
  84   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  85 };
  86
  87 Clean-Suites
  88 {
  89   // How long (in seconds) dead packages are left before being killed
  90   StayOfExecution 129600; // 1.5 days
  91   QueueBuildStayOfExecution 86400; // 24 hours
  92   MorgueSubDir "pool";
  93   OverrideFilename "override.source-only";
  94 };
  95
  96 Security-Install
  97 {
  98   ComponentMappings
  99   {
 100     main "ftp-master.debian.org:/pub/UploadQueue";
 101     contrib "ftp-master.debian.org:/pub/UploadQueue";
 102     non-free "ftp-master.debian.org:/pub/UploadQueue";
 103     non-US/main "non-us.debian.org:/pub/UploadQueue";
 104     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 105     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 106   };
 107 };
 108
 109 Suite
 110 {
 111   // Priority determines which suite is used for the Maintainers file
 112   // as generated by 'dak make-maintainers' (highest wins).
 113
 114   Oldstable
 115   {
 116         Components
 117         {
 118           updates/main;
 119           updates/contrib;
 120           updates/non-free;
 121         };
 122         Architectures
 123         {
 124           source;
 125           all;
 126           alpha;
 127           arm;
 128           hppa;
 129           i386;
 130           ia64;
 131           m68k;
 132           mips;
 133           mipsel;
 134           powerpc;
 135           s390;
 136           sparc;
 137         };
 138         Announce "dak@security.debian.org";
 139         Version "3.0";
 140         Origin "Debian";
 141         Label "Debian-Security";
 142         Description "Debian 3.0 Security Updates";
 143         CodeName "woody";
 144         OverrideCodeName "woody";
 145         CopyDotDak "/org/security.debian.org/queue/done/";
 146   };
 147
 148   Stable
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Architectures
 157         {
 158           source;
 159           all;
 160           alpha;
 161           amd64;
 162           arm;
 163           hppa;
 164           i386;
 165           ia64;
 166           m68k;
 167           mips;
 168           mipsel;
 169           powerpc;
 170           s390;
 171           sparc;
 172         };
 173         Announce "dak@security.debian.org";
 174         Version "3.1";
 175         Origin "Debian";
 176         Label "Debian-Security";
 177         Description "Debian 3.1 Security Updates";
 178         CodeName "sarge";
 179         OverrideCodeName "sarge";
 180         CopyDotDak "/org/security.debian.org/queue/done/";
 181   };
 182
 183   Testing
 184   {
 185         Components
 186         {
 187           updates/main;
 188           updates/contrib;
 189           updates/non-free;
 190         };
 191         Architectures
 192         {
 193           source;
 194           all;
 195           amd64;
 196           alpha;
 197           arm;
 198           hppa;
 199           i386;
 200           ia64;
 201           m68k;
 202           mips;
 203           mipsel;
 204           powerpc;
 205           s390;
 206           sparc;
 207         };
 208         Announce "dak@security.debian.org";
 209         Version "";
 210         Origin "Debian";
 211         Label "Debian-Security";
 212         Description "Debian testing Security Updates";
 213         CodeName "etch";
 214         OverrideCodeName "etch";
 215         CopyDotDak "/org/security.debian.org/queue/done/";
 216   };
 217
 218 };
 219
 220 SuiteMappings
 221 {
 222   "silent-map oldstable-security oldstable";
 223  "silent-map stable-security stable";
 224  // JT - FIXME, hackorama
 225  // "silent-map testing-security stable";
 226   "silent-map etch-secure testing";
 227   "silent-map testing-security testing";
 228 };
 229
 230 Dir
 231 {
 232   Root "/org/security.debian.org/ftp/";
 233   Pool "/org/security.debian.org/ftp/pool/";
 234   Dak "/org/security.debian.org/dak/";
 235   Templates "/org/security.debian.org/dak/templates/";
 236   PoolRoot "pool/";
 237   Override "/org/security.debian.org/override/";
 238   Lock "/org/security.debian.org/lock/";
 239   Lists "/org/security.debian.org/dak-database/dists/";
 240   Log "/org/security.debian.org/dak-log/";
 241   Morgue "/org/security.debian.org/morgue/";
 242   MorgueReject "reject";
 243   Override "/org/security.debian.org/scripts/override/";
 244   QueueBuild "/org/security.debian.org/buildd/";
 245   Queue
 246   {
 247     Accepted "/org/security.debian.org/queue/accepted/";
 248     Byhand "/org/security.debian.org/queue/byhand/";
 249     Done "/org/security.debian.org/queue/done/";
 250     Holding "/org/security.debian.org/queue/holding/";
 251     New "/org/security.debian.org/queue/new/";
 252     Reject "/org/security.debian.org/queue/reject/";
 253     Unchecked "/org/security.debian.org/queue/unchecked/";
 254
 255     Embargoed "/org/security.debian.org/queue/embargoed/";
 256     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 257     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 258   };
 259 };
 260
 261 DB
 262 {
 263   Name "obscurity";
 264   Host "";
 265   Port -1;
 266
 267 };
 268
 269 Architectures
 270 {
 271
 272   source "Source";
 273   all "Architecture Independent";
 274   alpha "DEC Alpha";
 275   hppa "HP PA RISC";
 276   arm "ARM";
 277   i386 "Intel ia32";
 278   ia64 "Intel ia64";
 279   m68k "Motorola Mc680x0";
 280   mips "MIPS (Big Endian)";
 281   mipsel "MIPS (Little Endian)";
 282   powerpc "PowerPC";
 283   s390 "IBM S/390";
 284   sparc "Sun SPARC/UltraSPARC";
 285   amd64 "AMD x86_64 (AMD64)";
 286
 287 };
 288
 289 Archive
 290 {
 291
 292   security
 293   {
 294     OriginServer "security.debian.org";
 295     PrimaryMirror "security.debian.org";
 296     Description "Security Updates for the Debian project";
 297   };
 298
 299 };
 300
 301 Component
 302 {
 303
 304   updates/main
 305   {
 306         Description "Main (updates)";
 307         MeetsDFSG "true";
 308   };
 309
 310   updates/contrib
 311   {
 312         Description "Contrib (updates)";
 313         MeetsDFSG "true";
 314   };
 315
 316   updates/non-free
 317   {
 318         Description "Software that fails to meet the DFSG";
 319         MeetsDFSG "false";
 320   };
 321
 322 };
 323
 324 ComponentMappings
 325 {
 326  "main updates/main";
 327  "contrib updates/contrib";
 328  "non-free updates/non-free";
 329  "non-US/main updates/main";
 330  "non-US/contrib updates/contrib";
 331  "non-US/non-free updates/non-free";
 332 };
 333
 334 Section
 335 {
 336   admin;
 337   base;
 338   comm;
 339   debian-installer;
 340   devel;
 341   doc;
 342   editors;
 343   electronics;
 344   embedded;
 345   games;
 346   gnome;
 347   graphics;
 348   hamradio;
 349   interpreters;
 350   kde;
 351   libdevel;
 352   libs;
 353   mail;
 354   math;
 355   misc;
 356   net;
 357   news;
 358   oldlibs;
 359   otherosfs;
 360   perl;
 361   python;
 362   science;
 363   shells;
 364   sound;
 365   tex;
 366   text;
 367   utils;
 368   web;
 369   x11;
 370   non-US;
 371 };
 372
 373 Priority
 374 {
 375   required 1;
 376   important 2;
 377   standard 3;
 378   optional 4;
 379   extra 5;
 380   source 0; // i.e. unused
 381 };
 382
 383 OverrideType
 384 {
 385   deb;
 386   udeb;
 387   dsc;
 388 };
 389
 390 Location
 391 {
 392   /org/security.debian.org/ftp/dists/
 393     {
 394       Archive "security";
 395       Type "legacy";
 396     };
 397
 398   /org/security.debian.org/ftp/pool/
 399     {
 400       Archive "security";
 401       Suites
 402         {
 403           Oldstable;
 404           Stable;
 405           Testing;
 406         };
 407       Type "pool";
 408     };
 409 };
 410
 411 Urgency
 412 {
 413   Default "low";
 414   Valid
 415   {
 416     low;
 417     medium;
 418     high;
 419     emergency;
 420     critical;
 421   };
 422 };