config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    // was non-us.d.o path before
   7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "55BE302B";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security-master.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates/";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37    AllowSourceOnlyUploads "true";
  38 };
  39
  40 Process-New
  41 {
  42   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  43   LockDir "/srv/security-master.debian.org/lock/new/";
  44 };
  45
  46 Import-Users-From-Passwd
  47 {
  48   ValidGID "800";
  49   // Comma separated list of users who are in Postgres but not the passwd file
  50   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  51 };
  52
  53 Queue-Report
  54 {
  55   Directories
  56   {
  57     byhand;
  58     new;
  59     unembargoed;
  60     embargoed;
  61   };
  62 };
  63
  64 Import-Keyring
  65 {
  66   /srv/keyring.debian.org/keyrings/debian-maintainers.gpg
  67     {
  68       Debian-Maintainer "true";
  69     };
  70 };
  71
  72 Import-LDAP-Fingerprints
  73 {
  74   LDAPDn "ou=users,dc=debian,dc=org";
  75   LDAPServer "db.debian.org";
  76   ExtraKeyrings
  77   {
  78     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  79     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  80     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  81   };
  82   KeyServer "wwwkeys.eu.pgp.net";
  83 };
  84
  85 Check-Overrides
  86 {
  87   OverrideSuites
  88   {
  89     Stable
  90     {
  91       Process "0";
  92     };
  93
  94     Testing
  95     {
  96       Process "0";
  97     };
  98
  99   };
 100 };
 101
 102 Clean-Queues
 103 {
 104   Options
 105   {
 106     Days 14;
 107   };
 108  MorgueSubDir "queue";
 109 };
 110
 111 Rm
 112 {
 113   Options
 114   {
 115     Suite "unstable";
 116   };
 117
 118   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 119   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 120 };
 121
 122 Init-Archive
 123 {
 124   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
 125 };
 126
 127 Clean-Suites
 128 {
 129   // How long (in seconds) dead packages are left before being killed
 130   StayOfExecution 129600; // 1.5 days
 131   QueueBuildStayOfExecution 86400; // 24 hours
 132   MorgueSubDir "pool";
 133   OverrideFilename "override.source-only";
 134 };
 135
 136 Security-Install
 137 {
 138   ComponentMappings
 139   {
 140     main "ftp-master.debian.org:/pub/UploadQueue";
 141     contrib "ftp-master.debian.org:/pub/UploadQueue";
 142     non-free "ftp-master.debian.org:/pub/UploadQueue";
 143     non-US/main "non-us.debian.org:/pub/UploadQueue";
 144     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 145     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 146   };
 147 };
 148
 149 Suite
 150 {
 151   // Priority determines which suite is used for the Maintainers file
 152   // as generated by 'dak make-maintainers' (highest wins).
 153
 154   OldStable
 155   {
 156         Components
 157         {
 158           updates/main;
 159           updates/contrib;
 160           updates/non-free;
 161         };
 162         Announce "dak@security.debian.org";
 163         Version "";
 164         Origin "Debian";
 165         Label "Debian-Security";
 166         Description "Debian 5.0 Security Updates";
 167         ValidTime 864000; // 10 days
 168         CodeName "lenny";
 169         OverrideCodeName "lenny";
 170         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 171   };
 172
 173   Stable
 174   {
 175         Components
 176         {
 177           updates/main;
 178           updates/contrib;
 179           updates/non-free;
 180         };
 181         Announce "dak@security.debian.org";
 182         Version "";
 183         Origin "Debian";
 184         Label "Debian-Security";
 185         Description "Debian 6.0 Security Updates";
 186         ValidTime 864000; // 10 days
 187         CodeName "squeeze";
 188         OverrideCodeName "squeeze";
 189         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 190   };
 191
 192   Testing
 193   {
 194         Components
 195         {
 196           updates/main;
 197           updates/contrib;
 198           updates/non-free;
 199         };
 200         Announce "dak@security.debian.org";
 201         Version "";
 202         Origin "Debian";
 203         Label "Debian-Security";
 204         Description "Debian testing Security Updates";
 205         ValidTime 864000; // 10 days
 206         CodeName "wheezy";
 207         OverrideCodeName "wheezy";
 208         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 209   };
 210 };
 211
 212 SuiteMappings
 213 {
 214  "silent-map stable-security stable";
 215  "silent-map oldstable-security oldstable";
 216  // JT - FIXME, hackorama
 217  // "silent-map testing-security stable";
 218   "silent-map etch-secure oldstable";
 219   "silent-map lenny-secure stable";
 220   "silent-map testing-security testing";
 221   "silent-map lenny-security oldstable";
 222   "silent-map squeeze-security stable";
 223   "silent-map wheezy-security testing";
 224 };
 225
 226 Dir
 227 {
 228   Root "/srv/security-master.debian.org/ftp/";
 229   Pool "/srv/security-master.debian.org/ftp/pool/";
 230   Export "/srv/security-master.debian.org/export/";
 231   Dak "/srv/security-master.debian.org/dak/";
 232   Templates "/srv/security-master.debian.org/dak/templates/";
 233   PoolRoot "pool/";
 234   Override "/srv/security-master.debian.org/override/";
 235   Lock "/srv/security-master.debian.org/lock/";
 236   Cache "/srv/security-master.debian.org/database/";
 237   Lists "/srv/security-master.debian.org/dak-database/dists/";
 238   Log "/srv/security-master.debian.org/dak-log/";
 239   Morgue "/srv/security-master.debian.org/morgue/";
 240   Override "/srv/security-master.debian.org/scripts/override/";
 241   QueueBuild "/srv/security-master.debian.org/buildd/";
 242   Upload "/srv/queued/ftpmaster/";
 243   TempPath "/srv/security-master.debian.org/tmp";
 244   Queue
 245   {
 246     Byhand "/srv/security-master.debian.org/queue/byhand/";
 247     Done "/srv/security-master.debian.org/queue/done/";
 248     Holding "/srv/security-master.debian.org/queue/holding/";
 249     New "/srv/security-master.debian.org/queue/new/";
 250     Reject "/srv/security-master.debian.org/queue/reject/";
 251     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 252     Newstage "/srv/security-master.debian.org/queue/newstage/";
 253
 254     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 255     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 256
 257     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 258     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 259     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 260   };
 261 };
 262
 263 DB
 264 {
 265   Service "obscurity";
 266   // PoolSize should be at least ThreadCount + 1
 267   PoolSize 5;
 268   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 269   MaxOverflow 13;
 270   // should be false for encoding == SQL_ASCII
 271   Unicode "false"
 272 };
 273
 274 Architectures
 275 {
 276
 277   source "Source";
 278   all "Architecture Independent";
 279   alpha "DEC Alpha";
 280   hppa "HP PA RISC";
 281   arm "ARM";
 282   armel "ARM EABI";
 283   i386 "Intel ia32";
 284   ia64 "Intel ia64";
 285   mips "MIPS (Big Endian)";
 286   mipsel "MIPS (Little Endian)";
 287   powerpc "PowerPC";
 288   s390 "IBM S/390";
 289   sparc "Sun SPARC/UltraSPARC";
 290   amd64 "AMD x86_64 (AMD64)";
 291   kfreebsd-i386 "GNU/kFreeBSD i386";
 292   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 293
 294 };
 295
 296 Archive
 297 {
 298
 299   security
 300   {
 301     OriginServer "security.debian.org";
 302     PrimaryMirror "security.debian.org";
 303     Description "Security Updates for the Debian project";
 304   };
 305
 306 };
 307
 308 ComponentMappings
 309 {
 310  "main updates/main";
 311  "contrib updates/contrib";
 312  "non-free updates/non-free";
 313  "non-US/main updates/main";
 314  "non-US/contrib updates/contrib";
 315  "non-US/non-free updates/non-free";
 316 };
 317
 318 Section
 319 {
 320   admin;
 321   cli-mono;
 322   comm;
 323   database;
 324   debian-installer;
 325   debug;
 326   devel;
 327   doc;
 328   editors;
 329   embedded;
 330   electronics;
 331   fonts;
 332   games;
 333   gnome;
 334   graphics;
 335   gnu-r;
 336   gnustep;
 337   hamradio;
 338   haskell;
 339   httpd;
 340   interpreters;
 341   java;
 342   kde;
 343   kernel;
 344   libdevel;
 345   libs;
 346   lisp;
 347   localization;
 348   mail;
 349   math;
 350   misc;
 351   net;
 352   news;
 353   ocaml;
 354   oldlibs;
 355   otherosfs;
 356   perl;
 357   php;
 358   python;
 359   ruby;
 360   science;
 361   shells;
 362   sound;
 363   tex;
 364   text;
 365   utils;
 366   web;
 367   vcs;
 368   video;
 369   x11;
 370   xfce;
 371   zope;
 372 };
 373
 374 Priority
 375 {
 376   required 1;
 377   important 2;
 378   standard 3;
 379   optional 4;
 380   extra 5;
 381   source 0; // i.e. unused
 382 };
 383
 384 Urgency
 385 {
 386   Default "low";
 387   Valid
 388   {
 389     low;
 390     medium;
 391     high;
 392     emergency;
 393     critical;
 394   };
 395 };
 396
 397 Changelogs
 398 {
 399   Export "/srv/security-master.debian.org/export/changelogs";
 400 }
 401
 402 Generate-Releases
 403 {
 404   MD5Sum
 405   {
 406     oldstable;
 407     stable;
 408     testing;
 409   };
 410   SHA1
 411   {
 412     oldstable;
 413     stable;
 414     testing;
 415   };
 416   SHA256
 417   {
 418     oldstable;
 419     stable;
 420     testing;
 421   };
 422 }