config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    // was non-us.d.o path before
   4    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   5    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   6    SigningKeyIds "55BE302B";
   7    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   8    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
   9    MyAdminAddress "ftpmaster@debian.org";
  10    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  11    MyDistribution "Debian"; // Used in emails
  12    BugServer "bugs.debian.org";
  13    PackagesServer "packages.debian.org";
  14    Bcc "archive@ftp-master.debian.org";
  15    // GroupOverrideFilename "override.group-maint";
  16    FutureTimeTravelGrace 28800; // 8 hours
  17    PastCutoffYear "1984";
  18    SkipTime 300;
  19    CloseBugs "false";
  20    OverrideDisparityCheck "false";
  21    BXANotify "false";
  22    DefaultSuite "stable";
  23    SuiteSuffix "updates/";
  24    OverrideMaintainer "dak@security.debian.org";
  25    LegacyStableHasNoSections "false";
  26    AllowSourceOnlyUploads "true";
  27 };
  28
  29 Process-New
  30 {
  31   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  32   LockDir "/srv/security-master.debian.org/lock/new/";
  33 };
  34
  35 Import-Users-From-Passwd
  36 {
  37   ValidGID "800";
  38   // Comma separated list of users who are in Postgres but not the passwd file
  39   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  40 };
  41
  42 Queue-Report
  43 {
  44   Directories
  45   {
  46     byhand;
  47     new;
  48     unembargoed;
  49     embargoed;
  50   };
  51 };
  52
  53 Import-LDAP-Fingerprints
  54 {
  55   LDAPDn "ou=users,dc=debian,dc=org";
  56   LDAPServer "db.debian.org";
  57   ExtraKeyrings
  58   {
  59     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  60     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  61     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  62   };
  63   KeyServer "wwwkeys.eu.pgp.net";
  64 };
  65
  66 Check-Overrides
  67 {
  68   OverrideSuites
  69   {
  70     Stable
  71     {
  72       Process "0";
  73     };
  74
  75     Testing
  76     {
  77       Process "0";
  78     };
  79
  80   };
  81 };
  82
  83 Clean-Queues
  84 {
  85   Options
  86   {
  87     Days 14;
  88   };
  89  MorgueSubDir "queue";
  90 };
  91
  92 Rm
  93 {
  94   Options
  95   {
  96     Suite "unstable";
  97   };
  98
  99   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 100   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 101 };
 102
 103 Clean-Suites
 104 {
 105   // How long (in seconds) dead packages are left before being killed
 106   StayOfExecution 129600; // 1.5 days
 107   MorgueSubDir "pool";
 108   OverrideFilename "override.source-only";
 109 };
 110
 111 Security-Install
 112 {
 113   ComponentMappings
 114   {
 115     main "ftp-master.debian.org:/pub/UploadQueue";
 116     contrib "ftp-master.debian.org:/pub/UploadQueue";
 117     non-free "ftp-master.debian.org:/pub/UploadQueue";
 118     non-US/main "non-us.debian.org:/pub/UploadQueue";
 119     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 120     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 121   };
 122 };
 123
 124 Suite
 125 {
 126   // Priority determines which suite is used for the Maintainers file
 127   // as generated by 'dak make-maintainers' (highest wins).
 128
 129   Stable
 130   {
 131         Components
 132         {
 133           updates/main;
 134           updates/contrib;
 135           updates/non-free;
 136         };
 137         Announce "dak@security.debian.org";
 138         Version "";
 139         Origin "Debian";
 140         Label "Debian-Security";
 141         Description "Debian 6.0 Security Updates";
 142         ValidTime 864000; // 10 days
 143         CodeName "squeeze";
 144         OverrideCodeName "squeeze";
 145         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 146   };
 147
 148   Testing
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Announce "dak@security.debian.org";
 157         Version "";
 158         Origin "Debian";
 159         Label "Debian-Security";
 160         Description "Debian testing Security Updates";
 161         ValidTime 864000; // 10 days
 162         CodeName "wheezy";
 163         OverrideCodeName "wheezy";
 164         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 165   };
 166 };
 167
 168 SuiteMappings
 169 {
 170  "silent-map stable-security stable";
 171  "silent-map oldstable-security oldstable";
 172   "silent-map etch-secure oldstable";
 173   "silent-map testing-security testing";
 174   "silent-map squeeze-security stable";
 175   "silent-map wheezy-security testing";
 176 };
 177
 178 Dir
 179 {
 180   Root "/srv/security-master.debian.org/ftp/";
 181   Pool "/srv/security-master.debian.org/ftp/pool/";
 182   Export "/srv/security-master.debian.org/export/";
 183   Dak "/srv/security-master.debian.org/dak/";
 184   Templates "/srv/security-master.debian.org/dak/templates/";
 185   Override "/srv/security-master.debian.org/override/";
 186   Lock "/srv/security-master.debian.org/lock/";
 187   Cache "/srv/security-master.debian.org/database/";
 188   Lists "/srv/security-master.debian.org/dak-database/dists/";
 189   Log "/srv/security-master.debian.org/dak-log/";
 190   Morgue "/srv/security-master.debian.org/morgue/";
 191   Override "/srv/security-master.debian.org/scripts/override/";
 192   Upload "/srv/queued/ftpmaster/";
 193   TempPath "/srv/security-master.debian.org/tmp";
 194   Holding "/srv/security-master.debian.org/queue/holding/";
 195   Done "/srv/security-master.debian.org/queue/done/";
 196   Reject "/srv/security-master.debian.org/queue/reject/";
 197
 198   Queue
 199   {
 200     Byhand "/srv/security-master.debian.org/queue/byhand/";
 201     New "/srv/security-master.debian.org/queue/new/";
 202     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 203     Newstage "/srv/security-master.debian.org/queue/newstage/";
 204
 205     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 206     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 207
 208     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 209     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 210     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 211   };
 212 };
 213
 214 DB
 215 {
 216   Service "obscurity";
 217   // PoolSize should be at least ThreadCount + 1
 218   PoolSize 5;
 219   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 220   MaxOverflow 13;
 221   // should be false for encoding == SQL_ASCII
 222   Unicode "false"
 223 };
 224
 225 Architectures
 226 {
 227
 228   source "Source";
 229   all "Architecture Independent";
 230   alpha "DEC Alpha";
 231   hppa "HP PA RISC";
 232   arm "ARM";
 233   armel "ARM EABI";
 234   i386 "Intel ia32";
 235   ia64 "Intel ia64";
 236   mips "MIPS (Big Endian)";
 237   mipsel "MIPS (Little Endian)";
 238   powerpc "PowerPC";
 239   s390 "IBM S/390";
 240   sparc "Sun SPARC/UltraSPARC";
 241   amd64 "AMD x86_64 (AMD64)";
 242   kfreebsd-i386 "GNU/kFreeBSD i386";
 243   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 244
 245 };
 246
 247 Archive
 248 {
 249
 250   security
 251   {
 252     OriginServer "security.debian.org";
 253     PrimaryMirror "security.debian.org";
 254     Description "Security Updates for the Debian project";
 255   };
 256
 257 };
 258
 259 ComponentMappings
 260 {
 261  "main updates/main";
 262  "contrib updates/contrib";
 263  "non-free updates/non-free";
 264  "non-US/main updates/main";
 265  "non-US/contrib updates/contrib";
 266  "non-US/non-free updates/non-free";
 267 };
 268
 269 Section
 270 {
 271   admin;
 272   cli-mono;
 273   comm;
 274   database;
 275   debian-installer;
 276   debug;
 277   devel;
 278   doc;
 279   editors;
 280   embedded;
 281   electronics;
 282   fonts;
 283   games;
 284   gnome;
 285   graphics;
 286   gnu-r;
 287   gnustep;
 288   hamradio;
 289   haskell;
 290   httpd;
 291   interpreters;
 292   java;
 293   kde;
 294   kernel;
 295   libdevel;
 296   libs;
 297   lisp;
 298   localization;
 299   mail;
 300   math;
 301   misc;
 302   net;
 303   news;
 304   ocaml;
 305   oldlibs;
 306   otherosfs;
 307   perl;
 308   php;
 309   python;
 310   ruby;
 311   science;
 312   shells;
 313   sound;
 314   tex;
 315   text;
 316   utils;
 317   web;
 318   vcs;
 319   video;
 320   x11;
 321   xfce;
 322   zope;
 323 };
 324
 325 Priority
 326 {
 327   required 1;
 328   important 2;
 329   standard 3;
 330   optional 4;
 331   extra 5;
 332   source 0; // i.e. unused
 333 };
 334
 335 Urgency
 336 {
 337   Default "low";
 338   Valid
 339   {
 340     low;
 341     medium;
 342     high;
 343     emergency;
 344     critical;
 345   };
 346 };
 347
 348 Changelogs
 349 {
 350   Export "/srv/security-master.debian.org/export/changelogs";
 351 }
 352
 353 Generate-Releases
 354 {
 355   MD5Sum
 356   {
 357     oldstable;
 358     stable;
 359     testing;
 360   };
 361   SHA1
 362   {
 363     oldstable;
 364     stable;
 365     testing;
 366   };
 367   SHA256
 368   {
 369     oldstable;
 370     stable;
 371     testing;
 372   };
 373 }