config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/org/keyring.debian.org/keyrings/debian-keyring.gpg";
   5      "/org/keyring.debian.org/keyrings/debian-keyring.pgp";
   6    };
   7    SigningKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/org/non-us.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "6070D3A1";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      oldstable;
  29      stable;
  30      testing;
  31    };
  32    SecurityQueueHandling "true";
  33    SecurityQueueBuild "true";
  34    DefaultSuite "stable";
  35    SuiteSuffix "updates";
  36    OverrideMaintainer "dak@security.debian.org";
  37    LegacyStableHasNoSections "false";
  38 };
  39
  40 Process-New
  41 {
  42   AcceptedLockFile "/org/security.debian.org/lock/unchecked.lock";
  43 };
  44
  45 Import-Users-From-Passwd
  46 {
  47   ValidGID "800";
  48   // Comma separated list of users who are in Postgres but not the passwd file
  49   KnownPostgres "postgres,dak,www-data,udmsearch";
  50 };
  51
  52 Queue-Report
  53 {
  54   Directories
  55   {
  56     // byhand;
  57     // new;
  58     unembargoed;
  59   };
  60 };
  61
  62 Clean-Queues
  63 {
  64   Options
  65   {
  66     Days 14;
  67   };
  68  MorgueSubDir "queue";
  69 };
  70
  71 Rm
  72 {
  73   Options
  74   {
  75     Suite "unstable";
  76   };
  77
  78   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
  79   LogFile "/org/security.debian.org/dak-log/removals.txt";
  80 };
  81
  82 Init-Archive
  83 {
  84   ExportDir "/org/security.debian.org/dak/import-archive-files/";
  85 };
  86
  87 Clean-Suites
  88 {
  89   // How long (in seconds) dead packages are left before being killed
  90   StayOfExecution 129600; // 1.5 days
  91   QueueBuildStayOfExecution 86400; // 24 hours
  92   MorgueSubDir "pool";
  93   OverrideFilename "override.source-only";
  94 };
  95
  96 Security-Install
  97 {
  98   ComponentMappings
  99   {
 100     main "ftp-master.debian.org:/pub/UploadQueue";
 101     contrib "ftp-master.debian.org:/pub/UploadQueue";
 102     non-free "ftp-master.debian.org:/pub/UploadQueue";
 103     non-US/main "non-us.debian.org:/pub/UploadQueue";
 104     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 105     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 106   };
 107 };
 108
 109 Suite
 110 {
 111   // Priority determines which suite is used for the Maintainers file
 112   // as generated by 'dak make-maintainers' (highest wins).
 113
 114   OldStable
 115   {
 116         Components
 117         {
 118           updates/main;
 119           updates/contrib;
 120           updates/non-free;
 121         };
 122         Announce "dak@security.debian.org";
 123         Version "";
 124         Origin "Debian";
 125         Label "Debian-Security";
 126         Description "Debian 4.0 Security Updates";
 127         ValidTime 864000; // 10 days
 128         CodeName "etch";
 129         OverrideCodeName "etch";
 130         CopyDotDak "/org/security.debian.org/queue/done/";
 131   };
 132
 133   Stable
 134   {
 135         Components
 136         {
 137           updates/main;
 138           updates/contrib;
 139           updates/non-free;
 140         };
 141         Announce "dak@security.debian.org";
 142         Version "";
 143         Origin "Debian";
 144         Label "Debian-Security";
 145         Description "Debian 5.0 Security Updates";
 146         ValidTime 864000; // 10 days
 147         CodeName "lenny";
 148         OverrideCodeName "lenny";
 149         CopyDotDak "/org/security.debian.org/queue/done/";
 150   };
 151
 152   Testing
 153   {
 154         Components
 155         {
 156           updates/main;
 157           updates/contrib;
 158           updates/non-free;
 159         };
 160         Announce "dak@security.debian.org";
 161         Version "";
 162         Origin "Debian";
 163         Label "Debian-Security";
 164         Description "Debian testing Security Updates";
 165         ValidTime 864000; // 10 days
 166         CodeName "squeeze";
 167         OverrideCodeName "squeeze";
 168         CopyDotDak "/org/security.debian.org/queue/done/";
 169   };
 170 };
 171
 172 SuiteMappings
 173 {
 174  "silent-map stable-security stable";
 175  "silent-map oldstable-security oldstable";
 176  // JT - FIXME, hackorama
 177  // "silent-map testing-security stable";
 178   "silent-map etch-secure oldstable";
 179   "silent-map lenny-secure stable";
 180   "silent-map testing-security testing";
 181 };
 182
 183 Dir
 184 {
 185   Root "/org/security.debian.org/ftp/";
 186   Pool "/org/security.debian.org/ftp/pool/";
 187   Dak "/org/security.debian.org/dak/";
 188   Templates "/org/security.debian.org/dak/templates/";
 189   PoolRoot "pool/";
 190   Override "/org/security.debian.org/override/";
 191   Lock "/org/security.debian.org/lock/";
 192   Lists "/org/security.debian.org/dak-database/dists/";
 193   Log "/org/security.debian.org/dak-log/";
 194   Morgue "/org/security.debian.org/morgue/";
 195   MorgueReject "reject";
 196   Override "/org/security.debian.org/scripts/override/";
 197   QueueBuild "/org/security.debian.org/buildd/";
 198   Upload "/srv/queued/UploadQueue/";
 199   Queue
 200   {
 201     Accepted "/org/security.debian.org/queue/accepted/";
 202     Byhand "/org/security.debian.org/queue/byhand/";
 203     Done "/org/security.debian.org/queue/done/";
 204     Holding "/org/security.debian.org/queue/holding/";
 205     New "/org/security.debian.org/queue/new/";
 206     Reject "/org/security.debian.org/queue/reject/";
 207     Unchecked "/org/security.debian.org/queue/unchecked/";
 208     ProposedUpdates "/does/not/exist/"; // XXX fixme
 209     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 210
 211     Embargoed "/org/security.debian.org/queue/embargoed/";
 212     Unembargoed "/org/security.debian.org/queue/unembargoed/";
 213     Disembargo "/org/security.debian.org/queue/unchecked-disembargo/";
 214   };
 215 };
 216
 217 DB
 218 {
 219   Name "obscurity";
 220   Host "";
 221   Port -1;
 222
 223 };
 224
 225 Architectures
 226 {
 227
 228   source "Source";
 229   all "Architecture Independent";
 230   alpha "DEC Alpha";
 231   hppa "HP PA RISC";
 232   arm "ARM";
 233   armel "ARM EABI";
 234   i386 "Intel ia32";
 235   ia64 "Intel ia64";
 236   mips "MIPS (Big Endian)";
 237   mipsel "MIPS (Little Endian)";
 238   powerpc "PowerPC";
 239   s390 "IBM S/390";
 240   sparc "Sun SPARC/UltraSPARC";
 241   amd64 "AMD x86_64 (AMD64)";
 242
 243 };
 244
 245 Archive
 246 {
 247
 248   security
 249   {
 250     OriginServer "security.debian.org";
 251     PrimaryMirror "security.debian.org";
 252     Description "Security Updates for the Debian project";
 253   };
 254
 255 };
 256
 257 Component
 258 {
 259
 260   updates/main
 261   {
 262         Description "Main (updates)";
 263         MeetsDFSG "true";
 264   };
 265
 266   updates/contrib
 267   {
 268         Description "Contrib (updates)";
 269         MeetsDFSG "true";
 270   };
 271
 272   updates/non-free
 273   {
 274         Description "Software that fails to meet the DFSG";
 275         MeetsDFSG "false";
 276   };
 277
 278 };
 279
 280 ComponentMappings
 281 {
 282  "main updates/main";
 283  "contrib updates/contrib";
 284  "non-free updates/non-free";
 285  "non-US/main updates/main";
 286  "non-US/contrib updates/contrib";
 287  "non-US/non-free updates/non-free";
 288 };
 289
 290 Section
 291 {
 292   admin;
 293   base;
 294   comm;
 295   debian-installer;
 296   devel;
 297   doc;
 298   editors;
 299   electronics;
 300   embedded;
 301   games;
 302   gnome;
 303   graphics;
 304   hamradio;
 305   interpreters;
 306   kde;
 307   libdevel;
 308   libs;
 309   mail;
 310   math;
 311   misc;
 312   net;
 313   news;
 314   oldlibs;
 315   otherosfs;
 316   perl;
 317   python;
 318   science;
 319   shells;
 320   sound;
 321   tex;
 322   text;
 323   utils;
 324   web;
 325   x11;
 326   non-US;
 327 };
 328
 329 Priority
 330 {
 331   required 1;
 332   important 2;
 333   standard 3;
 334   optional 4;
 335   extra 5;
 336   source 0; // i.e. unused
 337 };
 338
 339 OverrideType
 340 {
 341   deb;
 342   udeb;
 343   dsc;
 344 };
 345
 346 Location
 347 {
 348   /org/security.debian.org/ftp/dists/
 349     {
 350       Archive "security";
 351       Type "legacy";
 352     };
 353
 354   /org/security.debian.org/ftp/pool/
 355     {
 356       Archive "security";
 357       Suites
 358         {
 359           OldStable;
 360           Stable;
 361           Testing;
 362         };
 363       Type "pool";
 364     };
 365 };
 366
 367 Urgency
 368 {
 369   Default "low";
 370   Valid
 371   {
 372     low;
 373     medium;
 374     high;
 375     emergency;
 376     critical;
 377   };
 378 };