config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    GPGKeyring {
   4      "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
   5    };
   6    // was non-us.d.o path before
   7    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   8    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   9    SigningKeyIds "55BE302B";
  10    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
  11    MyEmailAddress "Debian Installer <installer@ftp-master.debian.org>";
  12    MyAdminAddress "ftpmaster@debian.org";
  13    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  14    MyDistribution "Debian"; // Used in emails
  15    BugServer "bugs.debian.org";
  16    PackagesServer "packages.debian.org";
  17    LockFile "/org/security-master.debian.org/dak/lock";
  18    Bcc "archive@ftp-master.debian.org";
  19    // GroupOverrideFilename "override.group-maint";
  20    FutureTimeTravelGrace 28800; // 8 hours
  21    PastCutoffYear "1984";
  22    SkipTime 300;
  23    CloseBugs "false";
  24    OverrideDisparityCheck "false";
  25    BXANotify "false";
  26    QueueBuildSuites
  27    {
  28      stable;
  29      testing;
  30    };
  31    SecurityQueueHandling "true";
  32    SecurityQueueBuild "true";
  33    DefaultSuite "stable";
  34    SuiteSuffix "updates";
  35    OverrideMaintainer "dak@security.debian.org";
  36    LegacyStableHasNoSections "false";
  37 };
  38
  39 Process-New
  40 {
  41   AcceptedLockFile "/srv/security-master.debian.org/lock/unchecked.lock";
  42 };
  43
  44 Import-Users-From-Passwd
  45 {
  46   ValidGID "800";
  47   // Comma separated list of users who are in Postgres but not the passwd file
  48   KnownPostgres "postgres,dak,www-data,udmsearch";
  49 };
  50
  51 Queue-Report
  52 {
  53   Directories
  54   {
  55     // byhand;
  56     // new;
  57     unembargoed;
  58   };
  59 };
  60
  61 Import-Keyring
  62 {
  63   /srv/keyring.debian.org/keyrings/debian-maintainers.gpg
  64     {
  65       Debian-Maintainer "true";
  66     };
  67 };
  68
  69 Import-LDAP-Fingerprints
  70 {
  71   LDAPDn "ou=users,dc=debian,dc=org";
  72   LDAPServer "db.debian.org";
  73   ExtraKeyrings
  74   {
  75     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  76     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  77     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  78   };
  79   KeyServer "wwwkeys.eu.pgp.net";
  80 };
  81
  82 Check-Overrides
  83 {
  84   OverrideSuites
  85   {
  86     Stable
  87     {
  88       Process "0";
  89     };
  90
  91     Testing
  92     {
  93       Process "0";
  94     };
  95
  96   };
  97 };
  98
  99 Clean-Queues
 100 {
 101   Options
 102   {
 103     Days 14;
 104   };
 105  MorgueSubDir "queue";
 106 };
 107
 108 Rm
 109 {
 110   Options
 111   {
 112     Suite "unstable";
 113   };
 114
 115   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 116   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 117 };
 118
 119 Init-Archive
 120 {
 121   ExportDir "/srv/security-master.debian.org/dak/import-archive-files/";
 122 };
 123
 124 Clean-Suites
 125 {
 126   // How long (in seconds) dead packages are left before being killed
 127   StayOfExecution 129600; // 1.5 days
 128   QueueBuildStayOfExecution 86400; // 24 hours
 129   MorgueSubDir "pool";
 130   OverrideFilename "override.source-only";
 131 };
 132
 133 Security-Install
 134 {
 135   ComponentMappings
 136   {
 137     main "ftp-master.debian.org:/pub/UploadQueue";
 138     contrib "ftp-master.debian.org:/pub/UploadQueue";
 139     non-free "ftp-master.debian.org:/pub/UploadQueue";
 140     non-US/main "non-us.debian.org:/pub/UploadQueue";
 141     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 142     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 143   };
 144 };
 145
 146 Suite
 147 {
 148   // Priority determines which suite is used for the Maintainers file
 149   // as generated by 'dak make-maintainers' (highest wins).
 150
 151   Stable
 152   {
 153         Components
 154         {
 155           updates/main;
 156           updates/contrib;
 157           updates/non-free;
 158         };
 159         Announce "dak@security.debian.org";
 160         Version "";
 161         Origin "Debian";
 162         Label "Debian-Security";
 163         Description "Debian 5.0 Security Updates";
 164         ValidTime 864000; // 10 days
 165         CodeName "lenny";
 166         OverrideCodeName "lenny";
 167         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 168   };
 169
 170   Testing
 171   {
 172         Components
 173         {
 174           updates/main;
 175           updates/contrib;
 176           updates/non-free;
 177         };
 178         Announce "dak@security.debian.org";
 179         Version "";
 180         Origin "Debian";
 181         Label "Debian-Security";
 182         Description "Debian testing Security Updates";
 183         ValidTime 864000; // 10 days
 184         CodeName "squeeze";
 185         OverrideCodeName "squeeze";
 186         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 187   };
 188 };
 189
 190 SuiteMappings
 191 {
 192  "silent-map stable-security stable";
 193  "silent-map oldstable-security oldstable";
 194  // JT - FIXME, hackorama
 195  // "silent-map testing-security stable";
 196   "silent-map etch-secure oldstable";
 197   "silent-map lenny-secure stable";
 198   "silent-map testing-security testing";
 199 };
 200
 201 Dir
 202 {
 203   Root "/srv/security-master.debian.org/ftp/";
 204   Pool "/srv/security-master.debian.org/ftp/pool/";
 205   Dak "/srv/security-master.debian.org/dak/";
 206   Templates "/srv/security-master.debian.org/dak/templates/";
 207   PoolRoot "pool/";
 208   Override "/srv/security-master.debian.org/override/";
 209   Lock "/srv/security-master.debian.org/lock/";
 210   Cache "/srv/security-master.debian.org/database/";
 211   Lists "/srv/security-master.debian.org/dak-database/dists/";
 212   Log "/srv/security-master.debian.org/dak-log/";
 213   Morgue "/srv/security-master.debian.org/morgue/";
 214   MorgueReject "reject";
 215   Override "/srv/security-master.debian.org/scripts/override/";
 216   QueueBuild "/srv/security-master.debian.org/buildd/";
 217   Upload "/srv/queued/ftpmaster/";
 218   Queue
 219   {
 220     Byhand "/srv/security-master.debian.org/queue/byhand/";
 221     Done "/srv/security-master.debian.org/queue/done/";
 222     Holding "/srv/security-master.debian.org/queue/holding/";
 223     New "/srv/security-master.debian.org/queue/new/";
 224     Reject "/srv/security-master.debian.org/queue/reject/";
 225     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 226     Newstage "/srv/security-master.debian.org/queue/newstage/";
 227
 228     ProposedUpdates "/does/not/exist/"; // XXX fixme
 229     OldProposedUpdates "/does/not/exist/"; // XXX fixme
 230
 231     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 232     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 233     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 234   };
 235 };
 236
 237 DB
 238 {
 239   Name "obscurity";
 240   Host "";
 241   Port -1;
 242
 243 };
 244
 245 Architectures
 246 {
 247
 248   source "Source";
 249   all "Architecture Independent";
 250   alpha "DEC Alpha";
 251   hppa "HP PA RISC";
 252   arm "ARM";
 253   armel "ARM EABI";
 254   i386 "Intel ia32";
 255   ia64 "Intel ia64";
 256   mips "MIPS (Big Endian)";
 257   mipsel "MIPS (Little Endian)";
 258   powerpc "PowerPC";
 259   s390 "IBM S/390";
 260   sparc "Sun SPARC/UltraSPARC";
 261   amd64 "AMD x86_64 (AMD64)";
 262   kfreebsd-i386 "GNU/kFreeBSD i386";
 263   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 264
 265 };
 266
 267 Archive
 268 {
 269
 270   security
 271   {
 272     OriginServer "security.debian.org";
 273     PrimaryMirror "security.debian.org";
 274     Description "Security Updates for the Debian project";
 275   };
 276
 277 };
 278
 279 Component
 280 {
 281
 282   updates/main
 283   {
 284         Description "Main (updates)";
 285         MeetsDFSG "true";
 286   };
 287
 288   updates/contrib
 289   {
 290         Description "Contrib (updates)";
 291         MeetsDFSG "true";
 292   };
 293
 294   updates/non-free
 295   {
 296         Description "Software that fails to meet the DFSG";
 297         MeetsDFSG "false";
 298   };
 299
 300 };
 301
 302 ComponentMappings
 303 {
 304  "main updates/main";
 305  "contrib updates/contrib";
 306  "non-free updates/non-free";
 307  "non-US/main updates/main";
 308  "non-US/contrib updates/contrib";
 309  "non-US/non-free updates/non-free";
 310 };
 311
 312 Section
 313 {
 314   admin;
 315   cli-mono;
 316   comm;
 317   database;
 318   debian-installer;
 319   debug;
 320   devel;
 321   doc;
 322   editors;
 323   embedded;
 324   electronics;
 325   fonts;
 326   games;
 327   gnome;
 328   graphics;
 329   gnu-r;
 330   gnustep;
 331   hamradio;
 332   haskell;
 333   httpd;
 334   interpreters;
 335   java;
 336   kde;
 337   kernel;
 338   libdevel;
 339   libs;
 340   lisp;
 341   localization;
 342   mail;
 343   math;
 344   misc;
 345   net;
 346   news;
 347   ocaml;
 348   oldlibs;
 349   otherosfs;
 350   perl;
 351   php;
 352   python;
 353   ruby;
 354   science;
 355   shells;
 356   sound;
 357   tex;
 358   text;
 359   utils;
 360   web;
 361   vcs;
 362   video;
 363   x11;
 364   xfce;
 365   zope;
 366 };
 367
 368 Priority
 369 {
 370   required 1;
 371   important 2;
 372   standard 3;
 373   optional 4;
 374   extra 5;
 375   source 0; // i.e. unused
 376 };
 377
 378 OverrideType
 379 {
 380   deb;
 381   udeb;
 382   dsc;
 383 };
 384
 385 Location
 386 {
 387   /srv/security-master.debian.org/ftp/pool/
 388     {
 389       Archive "security";
 390       Suites
 391         {
 392           OldStable;
 393           Stable;
 394           Testing;
 395         };
 396       Type "pool";
 397     };
 398 };
 399
 400 Urgency
 401 {
 402   Default "low";
 403   Valid
 404   {
 405     low;
 406     medium;
 407     high;
 408     emergency;
 409     critical;
 410   };
 411 };