config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    // was non-us.d.o path before
   4    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   5    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   6    SigningKeyIds "55BE302B";
   7    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   8    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
   9    MyAdminAddress "ftpmaster@debian.org";
  10    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  11    MyDistribution "Debian"; // Used in emails
  12    BugServer "bugs.debian.org";
  13    PackagesServer "packages.debian.org";
  14    LockFile "/org/security-master.debian.org/dak/lock";
  15    Bcc "archive@ftp-master.debian.org";
  16    // GroupOverrideFilename "override.group-maint";
  17    FutureTimeTravelGrace 28800; // 8 hours
  18    PastCutoffYear "1984";
  19    SkipTime 300;
  20    CloseBugs "false";
  21    OverrideDisparityCheck "false";
  22    BXANotify "false";
  23    QueueBuildSuites
  24    {
  25      stable;
  26      testing;
  27    };
  28    SecurityQueueHandling "true";
  29    SecurityQueueBuild "true";
  30    DefaultSuite "stable";
  31    SuiteSuffix "updates/";
  32    OverrideMaintainer "dak@security.debian.org";
  33    LegacyStableHasNoSections "false";
  34    AllowSourceOnlyUploads "true";
  35 };
  36
  37 Process-New
  38 {
  39   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  40   LockDir "/srv/security-master.debian.org/lock/new/";
  41 };
  42
  43 Import-Users-From-Passwd
  44 {
  45   ValidGID "800";
  46   // Comma separated list of users who are in Postgres but not the passwd file
  47   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  48 };
  49
  50 Queue-Report
  51 {
  52   Directories
  53   {
  54     byhand;
  55     new;
  56     unembargoed;
  57     embargoed;
  58   };
  59 };
  60
  61 Import-LDAP-Fingerprints
  62 {
  63   LDAPDn "ou=users,dc=debian,dc=org";
  64   LDAPServer "db.debian.org";
  65   ExtraKeyrings
  66   {
  67     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  68     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  69     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  70   };
  71   KeyServer "wwwkeys.eu.pgp.net";
  72 };
  73
  74 Check-Overrides
  75 {
  76   OverrideSuites
  77   {
  78     Stable
  79     {
  80       Process "0";
  81     };
  82
  83     Testing
  84     {
  85       Process "0";
  86     };
  87
  88   };
  89 };
  90
  91 Clean-Queues
  92 {
  93   Options
  94   {
  95     Days 14;
  96   };
  97  MorgueSubDir "queue";
  98 };
  99
 100 Rm
 101 {
 102   Options
 103   {
 104     Suite "unstable";
 105   };
 106
 107   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 108   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 109 };
 110
 111 Clean-Suites
 112 {
 113   // How long (in seconds) dead packages are left before being killed
 114   StayOfExecution 129600; // 1.5 days
 115   QueueBuildStayOfExecution 86400; // 24 hours
 116   MorgueSubDir "pool";
 117   OverrideFilename "override.source-only";
 118 };
 119
 120 Security-Install
 121 {
 122   ComponentMappings
 123   {
 124     main "ftp-master.debian.org:/pub/UploadQueue";
 125     contrib "ftp-master.debian.org:/pub/UploadQueue";
 126     non-free "ftp-master.debian.org:/pub/UploadQueue";
 127     non-US/main "non-us.debian.org:/pub/UploadQueue";
 128     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 129     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 130   };
 131 };
 132
 133 Suite
 134 {
 135   // Priority determines which suite is used for the Maintainers file
 136   // as generated by 'dak make-maintainers' (highest wins).
 137
 138   OldStable
 139   {
 140         Components
 141         {
 142           updates/main;
 143           updates/contrib;
 144           updates/non-free;
 145         };
 146         Announce "dak@security.debian.org";
 147         Version "";
 148         Origin "Debian";
 149         Label "Debian-Security";
 150         Description "Debian 5.0 Security Updates";
 151         ValidTime 864000; // 10 days
 152         CodeName "lenny";
 153         OverrideCodeName "lenny";
 154         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 155   };
 156
 157   Stable
 158   {
 159         Components
 160         {
 161           updates/main;
 162           updates/contrib;
 163           updates/non-free;
 164         };
 165         Announce "dak@security.debian.org";
 166         Version "";
 167         Origin "Debian";
 168         Label "Debian-Security";
 169         Description "Debian 6.0 Security Updates";
 170         ValidTime 864000; // 10 days
 171         CodeName "squeeze";
 172         OverrideCodeName "squeeze";
 173         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 174   };
 175
 176   Testing
 177   {
 178         Components
 179         {
 180           updates/main;
 181           updates/contrib;
 182           updates/non-free;
 183         };
 184         Announce "dak@security.debian.org";
 185         Version "";
 186         Origin "Debian";
 187         Label "Debian-Security";
 188         Description "Debian testing Security Updates";
 189         ValidTime 864000; // 10 days
 190         CodeName "wheezy";
 191         OverrideCodeName "wheezy";
 192         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 193   };
 194 };
 195
 196 SuiteMappings
 197 {
 198  "silent-map stable-security stable";
 199  "silent-map oldstable-security oldstable";
 200  // JT - FIXME, hackorama
 201  // "silent-map testing-security stable";
 202   "silent-map etch-secure oldstable";
 203   "silent-map lenny-secure stable";
 204   "silent-map testing-security testing";
 205   "silent-map lenny-security oldstable";
 206   "silent-map squeeze-security stable";
 207   "silent-map wheezy-security testing";
 208 };
 209
 210 Dir
 211 {
 212   Root "/srv/security-master.debian.org/ftp/";
 213   Pool "/srv/security-master.debian.org/ftp/pool/";
 214   Export "/srv/security-master.debian.org/export/";
 215   Dak "/srv/security-master.debian.org/dak/";
 216   Templates "/srv/security-master.debian.org/dak/templates/";
 217   PoolRoot "pool/";
 218   Override "/srv/security-master.debian.org/override/";
 219   Lock "/srv/security-master.debian.org/lock/";
 220   Cache "/srv/security-master.debian.org/database/";
 221   Lists "/srv/security-master.debian.org/dak-database/dists/";
 222   Log "/srv/security-master.debian.org/dak-log/";
 223   Morgue "/srv/security-master.debian.org/morgue/";
 224   Override "/srv/security-master.debian.org/scripts/override/";
 225   QueueBuild "/srv/security-master.debian.org/buildd/";
 226   Upload "/srv/queued/ftpmaster/";
 227   TempPath "/srv/security-master.debian.org/tmp";
 228   Queue
 229   {
 230     Byhand "/srv/security-master.debian.org/queue/byhand/";
 231     Done "/srv/security-master.debian.org/queue/done/";
 232     Holding "/srv/security-master.debian.org/queue/holding/";
 233     New "/srv/security-master.debian.org/queue/new/";
 234     Reject "/srv/security-master.debian.org/queue/reject/";
 235     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 236     Newstage "/srv/security-master.debian.org/queue/newstage/";
 237
 238     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 239     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 240
 241     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 242     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 243     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 244   };
 245 };
 246
 247 DB
 248 {
 249   Service "obscurity";
 250   // PoolSize should be at least ThreadCount + 1
 251   PoolSize 5;
 252   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 253   MaxOverflow 13;
 254   // should be false for encoding == SQL_ASCII
 255   Unicode "false"
 256 };
 257
 258 Architectures
 259 {
 260
 261   source "Source";
 262   all "Architecture Independent";
 263   alpha "DEC Alpha";
 264   hppa "HP PA RISC";
 265   arm "ARM";
 266   armel "ARM EABI";
 267   i386 "Intel ia32";
 268   ia64 "Intel ia64";
 269   mips "MIPS (Big Endian)";
 270   mipsel "MIPS (Little Endian)";
 271   powerpc "PowerPC";
 272   s390 "IBM S/390";
 273   sparc "Sun SPARC/UltraSPARC";
 274   amd64 "AMD x86_64 (AMD64)";
 275   kfreebsd-i386 "GNU/kFreeBSD i386";
 276   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 277
 278 };
 279
 280 Archive
 281 {
 282
 283   security
 284   {
 285     OriginServer "security.debian.org";
 286     PrimaryMirror "security.debian.org";
 287     Description "Security Updates for the Debian project";
 288   };
 289
 290 };
 291
 292 ComponentMappings
 293 {
 294  "main updates/main";
 295  "contrib updates/contrib";
 296  "non-free updates/non-free";
 297  "non-US/main updates/main";
 298  "non-US/contrib updates/contrib";
 299  "non-US/non-free updates/non-free";
 300 };
 301
 302 Section
 303 {
 304   admin;
 305   cli-mono;
 306   comm;
 307   database;
 308   debian-installer;
 309   debug;
 310   devel;
 311   doc;
 312   editors;
 313   embedded;
 314   electronics;
 315   fonts;
 316   games;
 317   gnome;
 318   graphics;
 319   gnu-r;
 320   gnustep;
 321   hamradio;
 322   haskell;
 323   httpd;
 324   interpreters;
 325   java;
 326   kde;
 327   kernel;
 328   libdevel;
 329   libs;
 330   lisp;
 331   localization;
 332   mail;
 333   math;
 334   misc;
 335   net;
 336   news;
 337   ocaml;
 338   oldlibs;
 339   otherosfs;
 340   perl;
 341   php;
 342   python;
 343   ruby;
 344   science;
 345   shells;
 346   sound;
 347   tex;
 348   text;
 349   utils;
 350   web;
 351   vcs;
 352   video;
 353   x11;
 354   xfce;
 355   zope;
 356 };
 357
 358 Priority
 359 {
 360   required 1;
 361   important 2;
 362   standard 3;
 363   optional 4;
 364   extra 5;
 365   source 0; // i.e. unused
 366 };
 367
 368 Urgency
 369 {
 370   Default "low";
 371   Valid
 372   {
 373     low;
 374     medium;
 375     high;
 376     emergency;
 377     critical;
 378   };
 379 };
 380
 381 Changelogs
 382 {
 383   Export "/srv/security-master.debian.org/export/changelogs";
 384 }
 385
 386 Generate-Releases
 387 {
 388   MD5Sum
 389   {
 390     oldstable;
 391     stable;
 392     testing;
 393   };
 394   SHA1
 395   {
 396     oldstable;
 397     stable;
 398     testing;
 399   };
 400   SHA256
 401   {
 402     oldstable;
 403     stable;
 404     testing;
 405   };
 406 }