config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    PGPKeyring "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   4    GPGKeyring "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   6    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   7    SigningKeyIds "6070D3A1";
   8    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   9    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  10    MyAdminAddress "ftpmaster@debian.org";
  11    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  12    MyDistribution "Debian"; // Used in emails
  13    BugServer "bugs.debian.org";
  14    PackagesServer "packages.debian.org";
  15    LockFile "/org/security.debian.org/dak/lock";
  16    Bcc "archive@ftp-master.debian.org";
  17    // GroupOverrideFilename "override.group-maint";
  18    FutureTimeTravelGrace 28800; // 8 hours
  19    PastCutoffYear "1984";
  20    SkipTime 300;
  21    CloseBugs "false";
  22    OverrideDisparityCheck "false";
  23    BXANotify "false";
  24    QueueBuildSuites
  25    {
  26      oldstable;
  27      stable;
  28      testing;
  29    };
  30    SecurityQueueHandling "true";
  31    SecurityQueueBuild "true";
  32    DefaultSuite "oldstable";
  33    SuiteSuffix "updates";
  34    OverrideMaintainer "dak@security.debian.org";
  35    StableDislocationSupport "false";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  42 };
  43
  44 Import-Users-From-Passwd
  45 {
  46   ValidGID "800";
  47   // Comma separated list of users who are in Postgres but not the passwd file
  48   KnownPostgres "postgres,dak,www-data,udmsearch";
  49 };
  50
  51 Queue-Report
  52 {
  53   Directories
  54   {
  55     // byhand;
  56     // new;
  57     unembargoed;
  58   };
  59 };
  60
  61 Clean-Queues
  62 {
  63   Options
  64   {
  65     Days 14;
  66   };
  67  MorgueSubDir "queue";
  68 };
  69
  70 Rm
  71 {
  72   Options
  73   {
  74     Suite "unstable";
  75   };
  76
  77   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  78   LogFile "/org/security.debian.org/dak-log/removals.txt";
  79 };
  80
  81 Init-Archive
  82 {
  83   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  84 };
  85
  86 Clean-Suites
  87 {
  88   // How long (in seconds) dead packages are left before being killed
  89   StayOfExecution 129600; // 1.5 days
  90   QueueBuildStayOfExecution 86400; // 24 hours
  91   MorgueSubDir "pool";
  92   OverrideFilename "override.source-only";
  93 };
  94
  95 Security-Install
  96 {
  97   ComponentMappings
  98   {
  99     main "ftp-master.debian.org:/pub/UploadQueue";
 100     contrib "ftp-master.debian.org:/pub/UploadQueue";
 101     non-free "ftp-master.debian.org:/pub/UploadQueue";
 102     non-US/main "non-us.debian.org:/pub/UploadQueue";
 103     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 104     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 105   };
 106 };
 107
 108 Suite
 109 {
 110   // Priority determines which suite is used for the Maintainers file
 111   // as generated by 'dak make-maintainers' (highest wins).
 112
 113   Oldstable
 114   {
 115         Components
 116         {
 117           updates/main;
 118           updates/contrib;
 119           updates/non-free;
 120         };
 121         Architectures
 122         {
 123           source;
 124           all;
 125           alpha;
 126           amd64;
 127           arm;
 128           hppa;
 129           i386;
 130           ia64;
 131           m68k;
 132           mips;
 133           mipsel;
 134           powerpc;
 135           s390;
 136           sparc;
 137         };
 138         Announce "dak@security.debian.org";
 139         Version "3.1";
 140         Origin "Debian";
 141         Label "Debian-Security";
 142         Description "Debian 3.1 Security Updates";
 143         CodeName "sarge";
 144         OverrideCodeName "sarge";
 145         CopyDotDak "/org/security.debian.org/queue/done/";
 146   };
 147
 148   Stable
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Architectures
 157         {
 158           source;
 159           all;
 160           amd64;
 161           alpha;
 162           arm;
 163           hppa;
 164           i386;
 165           ia64;
 166           mips;
 167           mipsel;
 168           powerpc;
 169           s390;
 170           sparc;
 171         };
 172         Announce "dak@security.debian.org";
 173         Version "";
 174         Origin "Debian";
 175         Label "Debian-Security";
 176         Description "Debian 4.0 Security Updates";
 177         CodeName "etch";
 178         OverrideCodeName "etch";
 179         CopyDotDak "/org/security.debian.org/queue/done/";
 180   };
 181
 182   Testing
 183   {
 184         Components
 185         {
 186           updates/main;
 187           updates/contrib;
 188           updates/non-free;
 189         };
 190         Architectures
 191         {
 192           source;
 193           all;
 194           amd64;
 195           alpha;
 196           arm;
 197           hppa;
 198           i386;
 199           ia64;
 200           mips;
 201           mipsel;
 202           powerpc;
 203           s390;
 204           sparc;
 205         };
 206         Announce "dak@security.debian.org";
 207         Version "";
 208         Origin "Debian";
 209         Label "Debian-Security";
 210         Description "Debian testing Security Updates";
 211         CodeName "lenny";
 212         OverrideCodeName "lenny";
 213         CopyDotDak "/org/security.debian.org/queue/done/";
 214   };
 215 };
 216
 217 SuiteMappings
 218 {
 219   "silent-map oldstable-security oldstable";
 220  "silent-map stable-security stable";
 221  // JT - FIXME, hackorama
 222  // "silent-map testing-security stable";
 223   "silent-map etch-secure stable";
 224   "silent-map testing-security testing";
 225 };
 226
 227 Dir
 228 {
 229   Root "/org/security.debian.org/ftp/";
 230   Pool "/org/security.debian.org/ftp/pool/";
 231   Dak "/org/security.debian.org/dak/";
 232   Templates "/org/security.debian.org/dak/templates/";
 233   PoolRoot "pool/";
 234   Override "/org/security.debian.org/override/";
 235   Lock "/org/security.debian.org/lock/";
 236   Lists "/org/security.debian.org/dak-database/dists/";
 237   Log "/org/security.debian.org/dak-log/";
 238   Morgue "/org/security.debian.org/morgue/";
 239   MorgueReject "reject";
 240   Override "/org/security.debian.org/scripts/override/";
 241   QueueBuild "/org/security.debian.org/buildd/";
 242   Queue
 243   {
 244     Accepted "/org/security.debian.org/queue/accepted/";
 245     Byhand "/org/security.debian.org/queue/byhand/";
 246     Done "/org/security.debian.org/queue/done/";
 247     Holding "/org/security.debian.org/queue/holding/";
 248     New "/org/security.debian.org/queue/new/";
 249     Reject "/org/security.debian.org/queue/reject/";
 250     Unchecked "/org/security.debian.org/queue/unchecked/";
 251     ProposedUpdates "/does/not/exist/"; // XXX fixme
 252
 253     Embargoed "/org/security.debian.org/queue/embargoed/";
 254     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 255     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 256   };
 257 };
 258
 259 DB
 260 {
 261   Name "obscurity";
 262   Host "";
 263   Port -1;
 264
 265 };
 266
 267 Architectures
 268 {
 269
 270   source "Source";
 271   all "Architecture Independent";
 272   alpha "DEC Alpha";
 273   hppa "HP PA RISC";
 274   arm "ARM";
 275   i386 "Intel ia32";
 276   ia64 "Intel ia64";
 277   m68k "Motorola Mc680x0";
 278   mips "MIPS (Big Endian)";
 279   mipsel "MIPS (Little Endian)";
 280   powerpc "PowerPC";
 281   s390 "IBM S/390";
 282   sparc "Sun SPARC/UltraSPARC";
 283   amd64 "AMD x86_64 (AMD64)";
 284
 285 };
 286
 287 Archive
 288 {
 289
 290   security
 291   {
 292     OriginServer "security.debian.org";
 293     PrimaryMirror "security.debian.org";
 294     Description "Security Updates for the Debian project";
 295   };
 296
 297 };
 298
 299 Component
 300 {
 301
 302   updates/main
 303   {
 304         Description "Main (updates)";
 305         MeetsDFSG "true";
 306   };
 307
 308   updates/contrib
 309   {
 310         Description "Contrib (updates)";
 311         MeetsDFSG "true";
 312   };
 313
 314   updates/non-free
 315   {
 316         Description "Software that fails to meet the DFSG";
 317         MeetsDFSG "false";
 318   };
 319
 320 };
 321
 322 ComponentMappings
 323 {
 324  "main updates/main";
 325  "contrib updates/contrib";
 326  "non-free updates/non-free";
 327  "non-US/main updates/main";
 328  "non-US/contrib updates/contrib";
 329  "non-US/non-free updates/non-free";
 330 };
 331
 332 Section
 333 {
 334   admin;
 335   base;
 336   comm;
 337   debian-installer;
 338   devel;
 339   doc;
 340   editors;
 341   electronics;
 342   embedded;
 343   games;
 344   gnome;
 345   graphics;
 346   hamradio;
 347   interpreters;
 348   kde;
 349   libdevel;
 350   libs;
 351   mail;
 352   math;
 353   misc;
 354   net;
 355   news;
 356   oldlibs;
 357   otherosfs;
 358   perl;
 359   python;
 360   science;
 361   shells;
 362   sound;
 363   tex;
 364   text;
 365   utils;
 366   web;
 367   x11;
 368   non-US;
 369 };
 370
 371 Priority
 372 {
 373   required 1;
 374   important 2;
 375   standard 3;
 376   optional 4;
 377   extra 5;
 378   source 0; // i.e. unused
 379 };
 380
 381 OverrideType
 382 {
 383   deb;
 384   udeb;
 385   dsc;
 386 };
 387
 388 Location
 389 {
 390   /org/security.debian.org/ftp/dists/
 391     {
 392       Archive "security";
 393       Type "legacy";
 394     };
 395
 396   /org/security.debian.org/ftp/pool/
 397     {
 398       Archive "security";
 399       Suites
 400         {
 401           Oldstable;
 402           Stable;
 403           Testing;
 404         };
 405       Type "pool";
 406     };
 407 };
 408
 409 Urgency
 410 {
 411   Default "low";
 412   Valid
 413   {
 414     low;
 415     medium;
 416     high;
 417     emergency;
 418     critical;
 419   };
 420 };