config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "6070D3A1";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  42 };
  43
  44 Import-Users-From-Passwd
  45 {
  46   ValidGID "800";
  47   // Comma separated list of users who are in Postgres but not the passwd file
  48   KnownPostgres "postgres,dak,www-data,udmsearch";
  49 };
  50
  51 Queue-Report
  52 {
  53   Directories
  54   {
  55     // byhand;
  56     // new;
  57     unembargoed;
  58   };
  59 };
  60
  61 Clean-Queues
  62 {
  63   Options
  64   {
  65     Days 14;
  66   };
  67  MorgueSubDir "queue";
  68 };
  69
  70 Rm
  71 {
  72   Options
  73   {
  74     Suite "unstable";
  75   };
  76
  77   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  78   LogFile "/org/security.debian.org/dak-log/removals.txt";
  79 };
  80
  81 Init-Archive
  82 {
  83   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  84 };
  85
  86 Clean-Suites
  87 {
  88   // How long (in seconds) dead packages are left before being killed
  89   StayOfExecution 129600; // 1.5 days
  90   QueueBuildStayOfExecution 86400; // 24 hours
  91   MorgueSubDir "pool";
  92   OverrideFilename "override.source-only";
  93 };
  94
  95 Security-Install
  96 {
  97   ComponentMappings
  98   {
  99     main "ftp-master.debian.org:/pub/UploadQueue";
 100     contrib "ftp-master.debian.org:/pub/UploadQueue";
 101     non-free "ftp-master.debian.org:/pub/UploadQueue";
 102     non-US/main "non-us.debian.org:/pub/UploadQueue";
 103     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 104     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 105   };
 106 };
 107
 108 Suite
 109 {
 110   // Priority determines which suite is used for the Maintainers file
 111   // as generated by 'dak make-maintainers' (highest wins).
 112
 113   Stable
 114   {
 115         Components
 116         {
 117           updates/main;
 118           updates/contrib;
 119           updates/non-free;
 120         };
 121         Architectures
 122         {
 123           source;
 124           all;
 125           amd64;
 126           alpha;
 127           arm;
 128           hppa;
 129           i386;
 130           ia64;
 131           mips;
 132           mipsel;
 133           powerpc;
 134           s390;
 135           sparc;
 136         };
 137         Announce "dak@security.debian.org";
 138         Version "";
 139         Origin "Debian";
 140         Label "Debian-Security";
 141         Description "Debian 4.0 Security Updates";
 142         ValidTime 864000; // 10 days
 143         CodeName "etch";
 144         OverrideCodeName "etch";
 145         CopyDotDak "/org/security.debian.org/queue/done/";
 146   };
 147
 148   Testing
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Architectures
 157         {
 158           source;
 159           all;
 160           amd64;
 161           alpha;
 162           arm;
 163           armel;
 164           hppa;
 165           i386;
 166           ia64;
 167           mips;
 168           mipsel;
 169           powerpc;
 170           s390;
 171           sparc;
 172         };
 173         Announce "dak@security.debian.org";
 174         Version "";
 175         Origin "Debian";
 176         Label "Debian-Security";
 177         Description "Debian testing Security Updates";
 178         ValidTime 864000; // 10 days
 179         CodeName "lenny";
 180         OverrideCodeName "lenny";
 181         CopyDotDak "/org/security.debian.org/queue/done/";
 182   };
 183 };
 184
 185 SuiteMappings
 186 {
 187  "silent-map stable-security stable";
 188  // JT - FIXME, hackorama
 189  // "silent-map testing-security stable";
 190   "silent-map etch-secure stable";
 191   "silent-map testing-security testing";
 192 };
 193
 194 Dir
 195 {
 196   Root "/org/security.debian.org/ftp/";
 197   Pool "/org/security.debian.org/ftp/pool/";
 198   Dak "/org/security.debian.org/dak/";
 199   Templates "/org/security.debian.org/dak/templates/";
 200   PoolRoot "pool/";
 201   Override "/org/security.debian.org/override/";
 202   Lock "/org/security.debian.org/lock/";
 203   Lists "/org/security.debian.org/dak-database/dists/";
 204   Log "/org/security.debian.org/dak-log/";
 205   Morgue "/org/security.debian.org/morgue/";
 206   MorgueReject "reject";
 207   Override "/org/security.debian.org/scripts/override/";
 208   QueueBuild "/org/security.debian.org/buildd/";
 209   Upload "/srv/queued/UploadQueue/";
 210   Queue
 211   {
 212     Accepted "/org/security.debian.org/queue/accepted/";
 213     Byhand "/org/security.debian.org/queue/byhand/";
 214     Done "/org/security.debian.org/queue/done/";
 215     Holding "/org/security.debian.org/queue/holding/";
 216     New "/org/security.debian.org/queue/new/";
 217     Reject "/org/security.debian.org/queue/reject/";
 218     Unchecked "/org/security.debian.org/queue/unchecked/";
 219     ProposedUpdates "/does/not/exist/"; // XXX fixme
 220     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 221
 222     Embargoed "/org/security.debian.org/queue/embargoed/";
 223     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 224     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 225   };
 226 };
 227
 228 DB
 229 {
 230   Name "obscurity";
 231   Host "";
 232   Port -1;
 233
 234 };
 235
 236 Architectures
 237 {
 238
 239   source "Source";
 240   all "Architecture Independent";
 241   alpha "DEC Alpha";
 242   hppa "HP PA RISC";
 243   arm "ARM";
 244   armel "ARM EABI";
 245   i386 "Intel ia32";
 246   ia64 "Intel ia64";
 247   mips "MIPS (Big Endian)";
 248   mipsel "MIPS (Little Endian)";
 249   powerpc "PowerPC";
 250   s390 "IBM S/390";
 251   sparc "Sun SPARC/UltraSPARC";
 252   amd64 "AMD x86_64 (AMD64)";
 253
 254 };
 255
 256 Archive
 257 {
 258
 259   security
 260   {
 261     OriginServer "security.debian.org";
 262     PrimaryMirror "security.debian.org";
 263     Description "Security Updates for the Debian project";
 264   };
 265
 266 };
 267
 268 Component
 269 {
 270
 271   updates/main
 272   {
 273         Description "Main (updates)";
 274         MeetsDFSG "true";
 275   };
 276
 277   updates/contrib
 278   {
 279         Description "Contrib (updates)";
 280         MeetsDFSG "true";
 281   };
 282
 283   updates/non-free
 284   {
 285         Description "Software that fails to meet the DFSG";
 286         MeetsDFSG "false";
 287   };
 288
 289 };
 290
 291 ComponentMappings
 292 {
 293  "main updates/main";
 294  "contrib updates/contrib";
 295  "non-free updates/non-free";
 296  "non-US/main updates/main";
 297  "non-US/contrib updates/contrib";
 298  "non-US/non-free updates/non-free";
 299 };
 300
 301 Section
 302 {
 303   admin;
 304   base;
 305   comm;
 306   debian-installer;
 307   devel;
 308   doc;
 309   editors;
 310   electronics;
 311   embedded;
 312   games;
 313   gnome;
 314   graphics;
 315   hamradio;
 316   interpreters;
 317   kde;
 318   libdevel;
 319   libs;
 320   mail;
 321   math;
 322   misc;
 323   net;
 324   news;
 325   oldlibs;
 326   otherosfs;
 327   perl;
 328   python;
 329   science;
 330   shells;
 331   sound;
 332   tex;
 333   text;
 334   utils;
 335   web;
 336   x11;
 337   non-US;
 338 };
 339
 340 Priority
 341 {
 342   required 1;
 343   important 2;
 344   standard 3;
 345   optional 4;
 346   extra 5;
 347   source 0; // i.e. unused
 348 };
 349
 350 OverrideType
 351 {
 352   deb;
 353   udeb;
 354   dsc;
 355 };
 356
 357 Location
 358 {
 359   /org/security.debian.org/ftp/dists/
 360     {
 361       Archive "security";
 362       Type "legacy";
 363     };
 364
 365   /org/security.debian.org/ftp/pool/
 366     {
 367       Archive "security";
 368       Suites
 369         {
 370           Stable;
 371           Testing;
 372         };
 373       Type "pool";
 374     };
 375 };
 376
 377 Urgency
 378 {
 379   Default "low";
 380   Valid
 381   {
 382     low;
 383     medium;
 384     high;
 385     emergency;
 386     critical;
 387   };
 388 };