config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    // was non-us.d.o path before
   7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "55BE302B";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security-master.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates/";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37    AllowSourceOnlyUploads "true";
  38 };
  39
  40 Process-New
  41 {
  42   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  43   LockDir "/srv/security-master.debian.org/lock/new/";
  44 };
  45
  46 Import-Users-From-Passwd
  47 {
  48   ValidGID "800";
  49   // Comma separated list of users who are in Postgres but not the passwd file
  50   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  51 };
  52
  53 Queue-Report
  54 {
  55   Directories
  56   {
  57     byhand;
  58     new;
  59     unembargoed;
  60     embargoed;
  61   };
  62 };
  63
  64 Import-LDAP-Fingerprints
  65 {
  66   LDAPDn "ou=users,dc=debian,dc=org";
  67   LDAPServer "db.debian.org";
  68   ExtraKeyrings
  69   {
  70     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  71     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  72     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  73   };
  74   KeyServer "wwwkeys.eu.pgp.net";
  75 };
  76
  77 Check-Overrides
  78 {
  79   OverrideSuites
  80   {
  81     Stable
  82     {
  83       Process "0";
  84     };
  85
  86     Testing
  87     {
  88       Process "0";
  89     };
  90
  91   };
  92 };
  93
  94 Clean-Queues
  95 {
  96   Options
  97   {
  98     Days 14;
  99   };
 100  MorgueSubDir "queue";
 101 };
 102
 103 Rm
 104 {
 105   Options
 106   {
 107     Suite "unstable";
 108   };
 109
 110   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 111   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 112 };
 113
 114 Init-Archive
 115 {
 116   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
 117 };
 118
 119 Clean-Suites
 120 {
 121   // How long (in seconds) dead packages are left before being killed
 122   StayOfExecution 129600; // 1.5 days
 123   QueueBuildStayOfExecution 86400; // 24 hours
 124   MorgueSubDir "pool";
 125   OverrideFilename "override.source-only";
 126 };
 127
 128 Security-Install
 129 {
 130   ComponentMappings
 131   {
 132     main "ftp-master.debian.org:/pub/UploadQueue";
 133     contrib "ftp-master.debian.org:/pub/UploadQueue";
 134     non-free "ftp-master.debian.org:/pub/UploadQueue";
 135     non-US/main "non-us.debian.org:/pub/UploadQueue";
 136     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 137     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 138   };
 139 };
 140
 141 Suite
 142 {
 143   // Priority determines which suite is used for the Maintainers file
 144   // as generated by 'dak make-maintainers' (highest wins).
 145
 146   OldStable
 147   {
 148         Components
 149         {
 150           updates/main;
 151           updates/contrib;
 152           updates/non-free;
 153         };
 154         Announce "dak@security.debian.org";
 155         Version "";
 156         Origin "Debian";
 157         Label "Debian-Security";
 158         Description "Debian 5.0 Security Updates";
 159         ValidTime 864000; // 10 days
 160         CodeName "lenny";
 161         OverrideCodeName "lenny";
 162         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 163   };
 164
 165   Stable
 166   {
 167         Components
 168         {
 169           updates/main;
 170           updates/contrib;
 171           updates/non-free;
 172         };
 173         Announce "dak@security.debian.org";
 174         Version "";
 175         Origin "Debian";
 176         Label "Debian-Security";
 177         Description "Debian 6.0 Security Updates";
 178         ValidTime 864000; // 10 days
 179         CodeName "squeeze";
 180         OverrideCodeName "squeeze";
 181         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 182   };
 183
 184   Testing
 185   {
 186         Components
 187         {
 188           updates/main;
 189           updates/contrib;
 190           updates/non-free;
 191         };
 192         Announce "dak@security.debian.org";
 193         Version "";
 194         Origin "Debian";
 195         Label "Debian-Security";
 196         Description "Debian testing Security Updates";
 197         ValidTime 864000; // 10 days
 198         CodeName "wheezy";
 199         OverrideCodeName "wheezy";
 200         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 201   };
 202 };
 203
 204 SuiteMappings
 205 {
 206  "silent-map stable-security stable";
 207  "silent-map oldstable-security oldstable";
 208  // JT - FIXME, hackorama
 209  // "silent-map testing-security stable";
 210   "silent-map etch-secure oldstable";
 211   "silent-map lenny-secure stable";
 212   "silent-map testing-security testing";
 213   "silent-map lenny-security oldstable";
 214   "silent-map squeeze-security stable";
 215   "silent-map wheezy-security testing";
 216 };
 217
 218 Dir
 219 {
 220   Root "/srv/security-master.debian.org/ftp/";
 221   Pool "/srv/security-master.debian.org/ftp/pool/";
 222   Export "/srv/security-master.debian.org/export/";
 223   Dak "/srv/security-master.debian.org/dak/";
 224   Templates "/srv/security-master.debian.org/dak/templates/";
 225   PoolRoot "pool/";
 226   Override "/srv/security-master.debian.org/override/";
 227   Lock "/srv/security-master.debian.org/lock/";
 228   Cache "/srv/security-master.debian.org/database/";
 229   Lists "/srv/security-master.debian.org/dak-database/dists/";
 230   Log "/srv/security-master.debian.org/dak-log/";
 231   Morgue "/srv/security-master.debian.org/morgue/";
 232   Override "/srv/security-master.debian.org/scripts/override/";
 233   QueueBuild "/srv/security-master.debian.org/buildd/";
 234   Upload "/srv/queued/ftpmaster/";
 235   TempPath "/srv/security-master.debian.org/tmp";
 236   Queue
 237   {
 238     Byhand "/srv/security-master.debian.org/queue/byhand/";
 239     Done "/srv/security-master.debian.org/queue/done/";
 240     Holding "/srv/security-master.debian.org/queue/holding/";
 241     New "/srv/security-master.debian.org/queue/new/";
 242     Reject "/srv/security-master.debian.org/queue/reject/";
 243     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 244     Newstage "/srv/security-master.debian.org/queue/newstage/";
 245
 246     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 247     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 248
 249     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 250     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 251     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 252   };
 253 };
 254
 255 DB
 256 {
 257   Service "obscurity";
 258   // PoolSize should be at least ThreadCount + 1
 259   PoolSize 5;
 260   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 261   MaxOverflow 13;
 262   // should be false for encoding == SQL_ASCII
 263   Unicode "false"
 264 };
 265
 266 Architectures
 267 {
 268
 269   source "Source";
 270   all "Architecture Independent";
 271   alpha "DEC Alpha";
 272   hppa "HP PA RISC";
 273   arm "ARM";
 274   armel "ARM EABI";
 275   i386 "Intel ia32";
 276   ia64 "Intel ia64";
 277   mips "MIPS (Big Endian)";
 278   mipsel "MIPS (Little Endian)";
 279   powerpc "PowerPC";
 280   s390 "IBM S/390";
 281   sparc "Sun SPARC/UltraSPARC";
 282   amd64 "AMD x86_64 (AMD64)";
 283   kfreebsd-i386 "GNU/kFreeBSD i386";
 284   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 285
 286 };
 287
 288 Archive
 289 {
 290
 291   security
 292   {
 293     OriginServer "security.debian.org";
 294     PrimaryMirror "security.debian.org";
 295     Description "Security Updates for the Debian project";
 296   };
 297
 298 };
 299
 300 ComponentMappings
 301 {
 302  "main updates/main";
 303  "contrib updates/contrib";
 304  "non-free updates/non-free";
 305  "non-US/main updates/main";
 306  "non-US/contrib updates/contrib";
 307  "non-US/non-free updates/non-free";
 308 };
 309
 310 Section
 311 {
 312   admin;
 313   cli-mono;
 314   comm;
 315   database;
 316   debian-installer;
 317   debug;
 318   devel;
 319   doc;
 320   editors;
 321   embedded;
 322   electronics;
 323   fonts;
 324   games;
 325   gnome;
 326   graphics;
 327   gnu-r;
 328   gnustep;
 329   hamradio;
 330   haskell;
 331   httpd;
 332   interpreters;
 333   java;
 334   kde;
 335   kernel;
 336   libdevel;
 337   libs;
 338   lisp;
 339   localization;
 340   mail;
 341   math;
 342   misc;
 343   net;
 344   news;
 345   ocaml;
 346   oldlibs;
 347   otherosfs;
 348   perl;
 349   php;
 350   python;
 351   ruby;
 352   science;
 353   shells;
 354   sound;
 355   tex;
 356   text;
 357   utils;
 358   web;
 359   vcs;
 360   video;
 361   x11;
 362   xfce;
 363   zope;
 364 };
 365
 366 Priority
 367 {
 368   required 1;
 369   important 2;
 370   standard 3;
 371   optional 4;
 372   extra 5;
 373   source 0; // i.e. unused
 374 };
 375
 376 Urgency
 377 {
 378   Default "low";
 379   Valid
 380   {
 381     low;
 382     medium;
 383     high;
 384     emergency;
 385     critical;
 386   };
 387 };
 388
 389 Changelogs
 390 {
 391   Export "/srv/security-master.debian.org/export/changelogs";
 392 }
 393
 394 Generate-Releases
 395 {
 396   MD5Sum
 397   {
 398     oldstable;
 399     stable;
 400     testing;
 401   };
 402   SHA1
 403   {
 404     oldstable;
 405     stable;
 406     testing;
 407   };
 408   SHA256
 409   {
 410     oldstable;
 411     stable;
 412     testing;
 413   };
 414 }