config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    // was non-us.d.o path before
   4    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   5    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   6    SigningKeyIds "55BE302B";
   7    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   8    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
   9    MyAdminAddress "ftpmaster@debian.org";
  10    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  11    MyDistribution "Debian"; // Used in emails
  12    BugServer "bugs.debian.org";
  13    PackagesServer "packages.debian.org";
  14    Bcc "archive@ftp-master.debian.org";
  15    // GroupOverrideFilename "override.group-maint";
  16    FutureTimeTravelGrace 28800; // 8 hours
  17    PastCutoffYear "1984";
  18    SkipTime 300;
  19    CloseBugs "false";
  20    OverrideDisparityCheck "false";
  21    BXANotify "false";
  22    DefaultSuite "stable";
  23    SuiteSuffix "updates/";
  24    OverrideMaintainer "dak@security.debian.org";
  25    LegacyStableHasNoSections "false";
  26    AllowSourceOnlyUploads "true";
  27 };
  28
  29 Process-New
  30 {
  31   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  32   LockDir "/srv/security-master.debian.org/lock/new/";
  33 };
  34
  35 Import-Users-From-Passwd
  36 {
  37   ValidGID "800";
  38   // Comma separated list of users who are in Postgres but not the passwd file
  39   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  40 };
  41
  42 Queue-Report
  43 {
  44   Directories
  45   {
  46     byhand;
  47     new;
  48     unembargoed;
  49     embargoed;
  50   };
  51 };
  52
  53 Import-LDAP-Fingerprints
  54 {
  55   LDAPDn "ou=users,dc=debian,dc=org";
  56   LDAPServer "db.debian.org";
  57   ExtraKeyrings
  58   {
  59     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  60     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  61     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  62   };
  63   KeyServer "wwwkeys.eu.pgp.net";
  64 };
  65
  66 Check-Overrides
  67 {
  68   OverrideSuites
  69   {
  70     Stable
  71     {
  72       Process "0";
  73     };
  74
  75     Testing
  76     {
  77       Process "0";
  78     };
  79
  80   };
  81 };
  82
  83 Clean-Queues
  84 {
  85   Options
  86   {
  87     Days 14;
  88   };
  89  MorgueSubDir "queue";
  90 };
  91
  92 Rm
  93 {
  94   Options
  95   {
  96     Suite "unstable";
  97   };
  98
  99   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 100   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 101 };
 102
 103 Clean-Suites
 104 {
 105   // How long (in seconds) dead packages are left before being killed
 106   StayOfExecution 129600; // 1.5 days
 107   MorgueSubDir "pool";
 108   OverrideFilename "override.source-only";
 109 };
 110
 111 Security-Install
 112 {
 113   ComponentMappings
 114   {
 115     main "ftp-master.debian.org:/pub/UploadQueue";
 116     contrib "ftp-master.debian.org:/pub/UploadQueue";
 117     non-free "ftp-master.debian.org:/pub/UploadQueue";
 118     non-US/main "non-us.debian.org:/pub/UploadQueue";
 119     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 120     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 121   };
 122 };
 123
 124 Suite
 125 {
 126   // Priority determines which suite is used for the Maintainers file
 127   // as generated by 'dak make-maintainers' (highest wins).
 128
 129   OldStable
 130   {
 131         Components
 132         {
 133           updates/main;
 134           updates/contrib;
 135           updates/non-free;
 136         };
 137         Announce "dak@security.debian.org";
 138         Version "";
 139         Origin "Debian";
 140         Label "Debian-Security";
 141         Description "Debian 5.0 Security Updates";
 142         ValidTime 864000; // 10 days
 143         CodeName "lenny";
 144         OverrideCodeName "lenny";
 145         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 146   };
 147
 148   Stable
 149   {
 150         Components
 151         {
 152           updates/main;
 153           updates/contrib;
 154           updates/non-free;
 155         };
 156         Announce "dak@security.debian.org";
 157         Version "";
 158         Origin "Debian";
 159         Label "Debian-Security";
 160         Description "Debian 6.0 Security Updates";
 161         ValidTime 864000; // 10 days
 162         CodeName "squeeze";
 163         OverrideCodeName "squeeze";
 164         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 165   };
 166
 167   Testing
 168   {
 169         Components
 170         {
 171           updates/main;
 172           updates/contrib;
 173           updates/non-free;
 174         };
 175         Announce "dak@security.debian.org";
 176         Version "";
 177         Origin "Debian";
 178         Label "Debian-Security";
 179         Description "Debian testing Security Updates";
 180         ValidTime 864000; // 10 days
 181         CodeName "wheezy";
 182         OverrideCodeName "wheezy";
 183         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 184   };
 185 };
 186
 187 SuiteMappings
 188 {
 189  "silent-map stable-security stable";
 190  "silent-map oldstable-security oldstable";
 191  // JT - FIXME, hackorama
 192  // "silent-map testing-security stable";
 193   "silent-map etch-secure oldstable";
 194   "silent-map lenny-secure stable";
 195   "silent-map testing-security testing";
 196   "silent-map lenny-security oldstable";
 197   "silent-map squeeze-security stable";
 198   "silent-map wheezy-security testing";
 199 };
 200
 201 Dir
 202 {
 203   Root "/srv/security-master.debian.org/ftp/";
 204   Pool "/srv/security-master.debian.org/ftp/pool/";
 205   Export "/srv/security-master.debian.org/export/";
 206   Dak "/srv/security-master.debian.org/dak/";
 207   Templates "/srv/security-master.debian.org/dak/templates/";
 208   Override "/srv/security-master.debian.org/override/";
 209   Lock "/srv/security-master.debian.org/lock/";
 210   Cache "/srv/security-master.debian.org/database/";
 211   Lists "/srv/security-master.debian.org/dak-database/dists/";
 212   Log "/srv/security-master.debian.org/dak-log/";
 213   Morgue "/srv/security-master.debian.org/morgue/";
 214   Override "/srv/security-master.debian.org/scripts/override/";
 215   Upload "/srv/queued/ftpmaster/";
 216   TempPath "/srv/security-master.debian.org/tmp";
 217   Holding "/srv/security-master.debian.org/queue/holding/";
 218   Done "/srv/security-master.debian.org/queue/done/";
 219   Reject "/srv/security-master.debian.org/queue/reject/";
 220
 221   Queue
 222   {
 223     Byhand "/srv/security-master.debian.org/queue/byhand/";
 224     New "/srv/security-master.debian.org/queue/new/";
 225     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 226     Newstage "/srv/security-master.debian.org/queue/newstage/";
 227
 228     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 229     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 230
 231     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 232     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 233     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 234   };
 235 };
 236
 237 DB
 238 {
 239   Service "obscurity";
 240   // PoolSize should be at least ThreadCount + 1
 241   PoolSize 5;
 242   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 243   MaxOverflow 13;
 244   // should be false for encoding == SQL_ASCII
 245   Unicode "false"
 246 };
 247
 248 Architectures
 249 {
 250
 251   source "Source";
 252   all "Architecture Independent";
 253   alpha "DEC Alpha";
 254   hppa "HP PA RISC";
 255   arm "ARM";
 256   armel "ARM EABI";
 257   i386 "Intel ia32";
 258   ia64 "Intel ia64";
 259   mips "MIPS (Big Endian)";
 260   mipsel "MIPS (Little Endian)";
 261   powerpc "PowerPC";
 262   s390 "IBM S/390";
 263   sparc "Sun SPARC/UltraSPARC";
 264   amd64 "AMD x86_64 (AMD64)";
 265   kfreebsd-i386 "GNU/kFreeBSD i386";
 266   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 267
 268 };
 269
 270 Archive
 271 {
 272
 273   security
 274   {
 275     OriginServer "security.debian.org";
 276     PrimaryMirror "security.debian.org";
 277     Description "Security Updates for the Debian project";
 278   };
 279
 280 };
 281
 282 ComponentMappings
 283 {
 284  "main updates/main";
 285  "contrib updates/contrib";
 286  "non-free updates/non-free";
 287  "non-US/main updates/main";
 288  "non-US/contrib updates/contrib";
 289  "non-US/non-free updates/non-free";
 290 };
 291
 292 Section
 293 {
 294   admin;
 295   cli-mono;
 296   comm;
 297   database;
 298   debian-installer;
 299   debug;
 300   devel;
 301   doc;
 302   editors;
 303   embedded;
 304   electronics;
 305   fonts;
 306   games;
 307   gnome;
 308   graphics;
 309   gnu-r;
 310   gnustep;
 311   hamradio;
 312   haskell;
 313   httpd;
 314   interpreters;
 315   java;
 316   kde;
 317   kernel;
 318   libdevel;
 319   libs;
 320   lisp;
 321   localization;
 322   mail;
 323   math;
 324   misc;
 325   net;
 326   news;
 327   ocaml;
 328   oldlibs;
 329   otherosfs;
 330   perl;
 331   php;
 332   python;
 333   ruby;
 334   science;
 335   shells;
 336   sound;
 337   tex;
 338   text;
 339   utils;
 340   web;
 341   vcs;
 342   video;
 343   x11;
 344   xfce;
 345   zope;
 346 };
 347
 348 Priority
 349 {
 350   required 1;
 351   important 2;
 352   standard 3;
 353   optional 4;
 354   extra 5;
 355   source 0; // i.e. unused
 356 };
 357
 358 Urgency
 359 {
 360   Default "low";
 361   Valid
 362   {
 363     low;
 364     medium;
 365     high;
 366     emergency;
 367     critical;
 368   };
 369 };
 370
 371 Changelogs
 372 {
 373   Export "/srv/security-master.debian.org/export/changelogs";
 374 }
 375
 376 Generate-Releases
 377 {
 378   MD5Sum
 379   {
 380     oldstable;
 381     stable;
 382     testing;
 383   };
 384   SHA1
 385   {
 386     oldstable;
 387     stable;
 388     testing;
 389   };
 390   SHA256
 391   {
 392     oldstable;
 393     stable;
 394     testing;
 395   };
 396 }