]> git.decadent.org.uk Git - dak.git/blob - config/debian/dak.conf
Add (incomplete) configuration for signing code for linux
[dak.git] / config / debian / dak.conf
1 Dinstall
2 {
3    SigningKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/secring.gpg";
4    SigningPubKeyring "/srv/ftp-master.debian.org/s3kr1t/dot-gnupg/pubring.gpg";
5 //   SendmailCommand "/usr/sbin/sendmail -odq -oi -t -f envelope@ftp-master.debian.org";
6    SendmailCommand "/usr/sbin/sendmail -oi -t -f envelope@ftp-master.debian.org";
7    MyEmailAddress "Debian FTP Masters <ftpmaster@ftp-master.debian.org>";
8    MyAdminAddress "ftpmaster@ftp-master.debian.org";
9    MyHost "debian.org";  // used for generating user@my_host addresses in e.g. manual_reject()
10    MyDistribution "Debian"; // Used in emails
11    BugServer "bugs.debian.org";
12    PackagesServer "packages.debian.org";
13    TrackingServer "packages.qa.debian.org";
14    Bcc "archive@ftp-master.debian.org";
15    SkipTime 300;
16    BXANotify "true";
17    CloseBugs "true";
18    OverrideDisparityCheck "true";
19    DefaultSuite "unstable";
20    LintianTags "/srv/ftp-master.debian.org/dak/config/debian/lintian.tags";
21    ReleaseTransitions "/srv/ftp.debian.org/web/transitions.yaml";
22    AllowSourceOnlyUploads true;
23    // if you setup an own dak repository and want to upload Debian packages you most possibly want
24    // to set the following option to a real path/filename and then enter those mail addresses that
25    // you want to be able to receive mails generated by your dak installation. This avoids spamming
26    // the real maintainers of a package you upload with mail.
27    // format of entries: one entry per line. Either an email address directly, or a regular expression,
28    // prefixed by "RE:". Examples: "jane.doe@domain.com" or "RE:jane[^@]@domain.com", where the first will
29    // only allow to mail jane.doe@domain.com while the second will mail all of jane*@domain.com
30    //  MailWhiteList "/some/path/to/a/file";
31 };
32
33 Transitions
34 {
35    Notifications "debian-devel@lists.debian.org";
36 };
37
38 Generate-Index-Diffs
39 {
40    Options
41    {
42      Archive "ftp-master";
43      TempDir "/srv/ftp-master.debian.org/tiffani";
44      MaxDiffs { Default 56; };
45    };
46 };
47
48 Show-New
49 {
50   HTMLPath "/srv/ftp.debian.org/web/new/";
51   Options::Queue "new,backports-new";
52 }
53
54 Show-Deferred
55 {
56   LinkPath "/srv/ftp.debian.org/web/deferred/";
57   DeferredQueue "/srv/upload.debian.org/DEFERRED/";
58 }
59
60 Import-Users-From-Passwd
61 {
62   ValidGID "Debian";
63   // Comma separated list of users who are in Postgres but not the passwd file
64   KnownPostgres "postgres,dak,dak-unpriv,katie,release,qa,www-data,guest,repuser,debian-backup";
65 };
66
67 Clean-Queues
68 {
69   Options
70   {
71     Days 14;
72    };
73  MorgueSubDir "queues";
74 };
75
76 Control-Overrides
77 {
78   Options
79   {
80     Component "main";
81     Suite "unstable";
82     Type "deb";
83    };
84 };
85
86 Rm
87 {
88   Options
89   {
90     Suite "unstable";
91    };
92
93    LogFile "/srv/ftp.debian.org/web/removals.txt";
94    LogFile822 "/srv/ftp.debian.org/web/removals.822";
95    Bcc "removed-packages@qa.debian.org";
96 };
97
98 Import-LDAP-Fingerprints
99 {
100   LDAPDn "ou=users,dc=debian,dc=org";
101   LDAPServer "db.debian.org";
102   CACertFile "/etc/ssl/ca-debian/ca-certificates.crt";
103   ExtraKeyrings
104   {
105     "/srv/keyring.debian.org/keyrings/removed-keys.pgp";
106     "/srv/keyring.debian.org/keyrings/removed-keys.gpg";
107     "/srv/keyring.debian.org/keyrings/extra-keys.pgp";
108   };
109   KeyServer "wwwkeys.eu.pgp.net";
110 };
111
112 Clean-Suites
113 {
114   MorgueSubDir "pool";
115 };
116
117 Process-New
118 {
119   LockDir "/srv/ftp-master.debian.org/lock/new/";
120 };
121
122 SuiteMappings
123 {
124  "silent-map squeeze-security oldoldstable-security";
125  "silent-map wheezy-security oldstable-security";
126  "silent-map jessie-security stable-security";
127  "silent-map jessie-kfreebsd-security stable-kfreebsd-security";
128  "propup-version stable-security testing testing-proposed-updates unstable";
129  "propup-version testing-security unstable";
130  "map squeeze oldoldstable";
131  "map squeeze-proposed-updates oldoldstable-proposed-updates";
132  "map squeeze-updates oldoldstable-proposed-updates";
133  "map wheezy oldstable";
134  "map wheezy-proposed-updates oldstable-proposed-updates";
135  "map wheezy-updates oldstable-proposed-updates";
136  "map jessie stable";
137  "map jessie-proposed-updates proposed-updates";
138  "map jessie-updates proposed-updates";
139  "map jessie-kfreebsd stable-kfreebsd";
140  "map jessie-kfreebsd-proposed-updates stable-kfreebsd-proposed-updates";
141  "map stretch testing";
142  "map stretch-proposed-updates testing-proposed-updates";
143  "map stretch-updates testing-proposed-updates";
144  "map sid unstable";
145  "map rc-buggy experimental";
146  "map oldoldstable oldoldstable-proposed-updates";
147  "map oldoldstable-security oldoldstable-proposed-updates";
148  "map oldoldstable-updates oldoldstable-proposed-updates";
149  "map oldstable oldstable-proposed-updates";
150  "map oldstable-security oldstable-proposed-updates";
151  "map oldstable-updates oldstable-proposed-updates";
152  "map stable proposed-updates";
153  "map stable-security proposed-updates";
154  "map stable-proposed-updates proposed-updates";
155  "map stable-updates proposed-updates";
156  "map stable-kfreebsd stable-kfreebsd-proposed-updates";
157  "map stable-kfreebsd-security stable-kfreebsd-proposed-updates";
158  "map testing-updates testing-proposed-updates";
159  "map-unreleased stable unstable";
160  "map-unreleased proposed-updates unstable";
161  "map testing testing-proposed-updates";
162  "map testing-security testing-proposed-updates";
163  "map-unreleased testing unstable";
164  "map-unreleased testing-proposed-updates unstable";
165
166  "reject oldoldstable-proposed-updates";
167  "reject stable-kfreebsd";
168  "reject wheezy-updates";
169  "reject jessie-updates";
170  "reject stretch-updates";
171 };
172
173 AutomaticByHandPackages {
174   "debian-faq" {
175     Source "debian-faq";
176     Section "byhand";
177     Extension "gz";
178     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-debian-faq";
179   };
180
181   "debian-installer-images" {
182     Source "debian-installer";
183     Section "raw-installer";
184     Extension "tar.gz";
185     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-di";
186   };
187
188   "linux-code-sign" {
189     Source "linux";
190     Section "byhand";
191     Extension "tar.xz";
192     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-code-sign";
193   };
194
195   "tag-overrides" {
196     Source "tag-overrides";
197     Section "byhand";
198     Extension "tar.gz";
199     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-tag";
200   };
201
202   "task-overrides" {
203     Source "tasksel";
204     Section "byhand";
205     Extension "tar.gz";
206     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-task";
207   };
208
209   "win32-loader" {
210     Source "win32-loader";
211     Section "byhand";
212     Script "/srv/ftp-master.debian.org/dak/scripts/debian/byhand-win32-loader";
213   };
214 };
215
216 Dir
217 {
218   Base "/srv/ftp-master.debian.org/";
219   Root "/srv/ftp-master.debian.org/ftp/";
220   Pool "/srv/ftp-master.debian.org/ftp/pool/";
221   Templates "/srv/ftp-master.debian.org/dak/templates/";
222   Lists "/srv/ftp-master.debian.org/database/dists/";
223   Cache "/srv/ftp-master.debian.org/database/";
224   Log "/srv/ftp-master.debian.org/log/";
225   Lock "/srv/ftp-master.debian.org/lock";
226   Morgue "/srv/ftp-master.debian.org/morgue/";
227   Override "/srv/ftp-master.debian.org/scripts/override/";
228   UrgencyLog "/srv/ftp.debian.org/web/britney/urgencies/";
229   TempPath "/srv/ftp-master.debian.org/tmp/";
230   BTSVersionTrack "/srv/ftp-master.debian.org/queue/bts_version_track/";
231   Done "/srv/ftp-master.debian.org/queue/done/";
232   Reject "/srv/ftp-master.debian.org/queue/reject/";
233 };
234
235 Queue-Report
236 {
237   ReportLocations
238   {
239     822Location "/srv/ftp.debian.org/web/new.822";
240   };
241 };
242
243 DB
244 {
245   Service "projectb";
246   // PoolSize should be at least ThreadCount + 1
247   PoolSize 5;
248   // MaxOverflow shouldn't exceed postgresql.conf's max_connections - PoolSize
249   MaxOverflow 13;
250   // should be false for encoding == SQL_ASCII
251   Unicode "false"
252 };
253
254 Urgency
255 {
256   Default "low";
257   Valid
258   {
259     low;
260     medium;
261     high;
262     emergency;
263     critical;
264   };
265 };
266
267 Contents
268 {
269   Header "contents";
270   Root "/srv/ftp-master.debian.org/test/";
271 }
272
273 Common
274 {
275   // The default number of threads for multithreading parts of dak:
276   ThreadCount 16;
277 }
278
279 ByGroup {
280   dak-unpriv "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-dak";
281   ftpteam "";
282   backports "/srv/ftp-master.debian.org/dak/config/debian/dak.conf-backports";
283 };
284
285 Command::DM {
286   ACL "dm";
287   AdminKeyrings {
288     "/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
289   };
290   Keyrings {
291     "/srv/keyring.debian.org/keyrings/debian-maintainers.gpg";
292   };
293 };
294
295 Command::DM-Admin {
296   AdminFingerprints {
297     "AB41C1C68AFD668CA045EBF8673A03E4C1DB921F"; // gwolf
298     "0E3A94C3E83002DAB88CCA1694FA372B2DA8B985"; // noodles
299
300     "80E976F14A508A48E9CA3FE9BC372252CA1CF964"; // ansgar
301     "FBFABDB541B5DC955BD9BA6EDB16CF5BB12525C4"; // joerg
302     "309911BEA966D0613053045711B4E5FF15B0FD82"; // mhy
303   };
304 };