config/debian-security/dak.conf

   1 Dinstall
   2 {
   3    // was non-us.d.o path before
   4    SigningKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
   5    SigningPubKeyring "/srv/security-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
   6    SigningKeyIds "55BE302B";
   7    SendmailCommand "/usr/sbin/sendmail -odq -oi -t";
   8    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
   9    MyAdminAddress "ftpmaster@debian.org";
  10    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
  11    MyDistribution "Debian"; // Used in emails
  12    BugServer "bugs.debian.org";
  13    PackagesServer "packages.debian.org";
  14    LockFile "/org/security-master.debian.org/dak/lock";
  15    Bcc "archive@ftp-master.debian.org";
  16    // GroupOverrideFilename "override.group-maint";
  17    FutureTimeTravelGrace 28800; // 8 hours
  18    PastCutoffYear "1984";
  19    SkipTime 300;
  20    CloseBugs "false";
  21    OverrideDisparityCheck "false";
  22    BXANotify "false";
  23    DefaultSuite "stable";
  24    SuiteSuffix "updates/";
  25    OverrideMaintainer "dak@security.debian.org";
  26    LegacyStableHasNoSections "false";
  27    AllowSourceOnlyUploads "true";
  28 };
  29
  30 Process-New
  31 {
  32   DinstallLockFile "/srv/security-master.debian.org/lock/processnew.lock";
  33   LockDir "/srv/security-master.debian.org/lock/new/";
  34 };
  35
  36 Import-Users-From-Passwd
  37 {
  38   ValidGID "800";
  39   // Comma separated list of users who are in Postgres but not the passwd file
  40   KnownPostgres "postgres,dak,www-data,udmsearch,repuser";
  41 };
  42
  43 Queue-Report
  44 {
  45   Directories
  46   {
  47     byhand;
  48     new;
  49     unembargoed;
  50     embargoed;
  51   };
  52 };
  53
  54 Import-LDAP-Fingerprints
  55 {
  56   LDAPDn "ou=users,dc=debian,dc=org";
  57   LDAPServer "db.debian.org";
  58   ExtraKeyrings
  59   {
  60     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
  61     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
  62     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
  63   };
  64   KeyServer "wwwkeys.eu.pgp.net";
  65 };
  66
  67 Check-Overrides
  68 {
  69   OverrideSuites
  70   {
  71     Stable
  72     {
  73       Process "0";
  74     };
  75
  76     Testing
  77     {
  78       Process "0";
  79     };
  80
  81   };
  82 };
  83
  84 Clean-Queues
  85 {
  86   Options
  87   {
  88     Days 14;
  89   };
  90  MorgueSubDir "queue";
  91 };
  92
  93 Rm
  94 {
  95   Options
  96   {
  97     Suite "unstable";
  98   };
  99
 100   MyEmailAddress "Debian Archive Maintenance <ftpmaster@ftp-master.debian.org>";
 101   LogFile "/srv/security-master.debian.org/dak-log/removals.txt";
 102 };
 103
 104 Clean-Suites
 105 {
 106   // How long (in seconds) dead packages are left before being killed
 107   StayOfExecution 129600; // 1.5 days
 108   MorgueSubDir "pool";
 109   OverrideFilename "override.source-only";
 110 };
 111
 112 Security-Install
 113 {
 114   ComponentMappings
 115   {
 116     main "ftp-master.debian.org:/pub/UploadQueue";
 117     contrib "ftp-master.debian.org:/pub/UploadQueue";
 118     non-free "ftp-master.debian.org:/pub/UploadQueue";
 119     non-US/main "non-us.debian.org:/pub/UploadQueue";
 120     non-US/contrib "non-us.debian.org:/pub/UploadQueue";
 121     non-US/non-free "non-us.debian.org:/pub/UploadQueue";
 122   };
 123 };
 124
 125 Suite
 126 {
 127   // Priority determines which suite is used for the Maintainers file
 128   // as generated by 'dak make-maintainers' (highest wins).
 129
 130   OldStable
 131   {
 132         Components
 133         {
 134           updates/main;
 135           updates/contrib;
 136           updates/non-free;
 137         };
 138         Announce "dak@security.debian.org";
 139         Version "";
 140         Origin "Debian";
 141         Label "Debian-Security";
 142         Description "Debian 5.0 Security Updates";
 143         ValidTime 864000; // 10 days
 144         CodeName "lenny";
 145         OverrideCodeName "lenny";
 146         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 147   };
 148
 149   Stable
 150   {
 151         Components
 152         {
 153           updates/main;
 154           updates/contrib;
 155           updates/non-free;
 156         };
 157         Announce "dak@security.debian.org";
 158         Version "";
 159         Origin "Debian";
 160         Label "Debian-Security";
 161         Description "Debian 6.0 Security Updates";
 162         ValidTime 864000; // 10 days
 163         CodeName "squeeze";
 164         OverrideCodeName "squeeze";
 165         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 166   };
 167
 168   Testing
 169   {
 170         Components
 171         {
 172           updates/main;
 173           updates/contrib;
 174           updates/non-free;
 175         };
 176         Announce "dak@security.debian.org";
 177         Version "";
 178         Origin "Debian";
 179         Label "Debian-Security";
 180         Description "Debian testing Security Updates";
 181         ValidTime 864000; // 10 days
 182         CodeName "wheezy";
 183         OverrideCodeName "wheezy";
 184         CopyDotDak "/srv/security-master.debian.org/queue/done/";
 185   };
 186 };
 187
 188 SuiteMappings
 189 {
 190  "silent-map stable-security stable";
 191  "silent-map oldstable-security oldstable";
 192  // JT - FIXME, hackorama
 193  // "silent-map testing-security stable";
 194   "silent-map etch-secure oldstable";
 195   "silent-map lenny-secure stable";
 196   "silent-map testing-security testing";
 197   "silent-map lenny-security oldstable";
 198   "silent-map squeeze-security stable";
 199   "silent-map wheezy-security testing";
 200 };
 201
 202 Dir
 203 {
 204   Root "/srv/security-master.debian.org/ftp/";
 205   Pool "/srv/security-master.debian.org/ftp/pool/";
 206   Export "/srv/security-master.debian.org/export/";
 207   Dak "/srv/security-master.debian.org/dak/";
 208   Templates "/srv/security-master.debian.org/dak/templates/";
 209   Override "/srv/security-master.debian.org/override/";
 210   Lock "/srv/security-master.debian.org/lock/";
 211   Cache "/srv/security-master.debian.org/database/";
 212   Lists "/srv/security-master.debian.org/dak-database/dists/";
 213   Log "/srv/security-master.debian.org/dak-log/";
 214   Morgue "/srv/security-master.debian.org/morgue/";
 215   Override "/srv/security-master.debian.org/scripts/override/";
 216   Upload "/srv/queued/ftpmaster/";
 217   TempPath "/srv/security-master.debian.org/tmp";
 218   Holding "/srv/security-master.debian.org/queue/holding/";
 219   Done "/srv/security-master.debian.org/queue/done/";
 220
 221   Queue
 222   {
 223     Byhand "/srv/security-master.debian.org/queue/byhand/";
 224     New "/srv/security-master.debian.org/queue/new/";
 225     Reject "/srv/security-master.debian.org/queue/reject/";
 226     Unchecked "/srv/security-master.debian.org/queue/unchecked/";
 227     Newstage "/srv/security-master.debian.org/queue/newstage/";
 228
 229     ProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 230     OldProposedUpdates "/srv/security-master.debian.org/does/not/exist/"; // XXX fixme
 231
 232     Embargoed "/srv/security-master.debian.org/queue/embargoed/";
 233     Unembargoed "/srv/security-master.debian.org/queue/unembargoed/";
 234     Disembargo "/srv/security-master.debian.org/queue/unchecked-disembargo/";
 235   };
 236 };
 237
 238 DB
 239 {
 240   Service "obscurity";
 241   // PoolSize should be at least ThreadCount + 1
 242   PoolSize 5;
 243   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
 244   MaxOverflow 13;
 245   // should be false for encoding == SQL_ASCII
 246   Unicode "false"
 247 };
 248
 249 Architectures
 250 {
 251
 252   source "Source";
 253   all "Architecture Independent";
 254   alpha "DEC Alpha";
 255   hppa "HP PA RISC";
 256   arm "ARM";
 257   armel "ARM EABI";
 258   i386 "Intel ia32";
 259   ia64 "Intel ia64";
 260   mips "MIPS (Big Endian)";
 261   mipsel "MIPS (Little Endian)";
 262   powerpc "PowerPC";
 263   s390 "IBM S/390";
 264   sparc "Sun SPARC/UltraSPARC";
 265   amd64 "AMD x86_64 (AMD64)";
 266   kfreebsd-i386 "GNU/kFreeBSD i386";
 267   kfreebsd-amd64 "GNU/kFreeBSD amd64";
 268
 269 };
 270
 271 Archive
 272 {
 273
 274   security
 275   {
 276     OriginServer "security.debian.org";
 277     PrimaryMirror "security.debian.org";
 278     Description "Security Updates for the Debian project";
 279   };
 280
 281 };
 282
 283 ComponentMappings
 284 {
 285  "main updates/main";
 286  "contrib updates/contrib";
 287  "non-free updates/non-free";
 288  "non-US/main updates/main";
 289  "non-US/contrib updates/contrib";
 290  "non-US/non-free updates/non-free";
 291 };
 292
 293 Section
 294 {
 295   admin;
 296   cli-mono;
 297   comm;
 298   database;
 299   debian-installer;
 300   debug;
 301   devel;
 302   doc;
 303   editors;
 304   embedded;
 305   electronics;
 306   fonts;
 307   games;
 308   gnome;
 309   graphics;
 310   gnu-r;
 311   gnustep;
 312   hamradio;
 313   haskell;
 314   httpd;
 315   interpreters;
 316   java;
 317   kde;
 318   kernel;
 319   libdevel;
 320   libs;
 321   lisp;
 322   localization;
 323   mail;
 324   math;
 325   misc;
 326   net;
 327   news;
 328   ocaml;
 329   oldlibs;
 330   otherosfs;
 331   perl;
 332   php;
 333   python;
 334   ruby;
 335   science;
 336   shells;
 337   sound;
 338   tex;
 339   text;
 340   utils;
 341   web;
 342   vcs;
 343   video;
 344   x11;
 345   xfce;
 346   zope;
 347 };
 348
 349 Priority
 350 {
 351   required 1;
 352   important 2;
 353   standard 3;
 354   optional 4;
 355   extra 5;
 356   source 0; // i.e. unused
 357 };
 358
 359 Urgency
 360 {
 361   Default "low";
 362   Valid
 363   {
 364     low;
 365     medium;
 366     high;
 367     emergency;
 368     critical;
 369   };
 370 };
 371
 372 Changelogs
 373 {
 374   Export "/srv/security-master.debian.org/export/changelogs";
 375 }
 376
 377 Generate-Releases
 378 {
 379   MD5Sum
 380   {
 381     oldstable;
 382     stable;
 383     testing;
 384   };
 385   SHA1
 386   {
 387     oldstable;
 388     stable;
 389     testing;
 390   };
 391   SHA256
 392   {
 393     oldstable;
 394     stable;
 395     testing;
 396   };
 397 }