X-Git-Url: https://git.decadent.org.uk/gitweb/?p=dak.git;a=blobdiff_plain;f=dak%2Fnew_security_install.py;h=7d4603d5811ebcc21b3dc5b24e9f3a4cb77ba5eb;hp=353f8859dde9b5d981020cd51d911de7498e459d;hb=026bdb9580e6d18bf504d2f44d46890df5d89f1a;hpb=a63127fec222109e25b2a7e75408bbb095c6c443 diff --git a/dak/new_security_install.py b/dak/new_security_install.py index 353f8859..7d4603d5 100755 --- a/dak/new_security_install.py +++ b/dak/new_security_install.py @@ -86,35 +86,24 @@ def sudo(arg, fn, exit): def do_Approve(): sudo("A", _do_Approve, True) def _do_Approve(): - # 1. use process-policy to go through the COMMENTS dir - spawn("dak process-policy embargoed") - spawn("dak process-policy unembargoed") - newstage=get_policy_queue('newstage') - - # 2. sync the stuff to ftpmaster - print "Sync stuff for upload to ftpmaster" - spawn("rsync -a -q %s/. /srv/queued/ftpmaster/." % (newstage.path)) - print "Locking unchecked" lockfile='/srv/security-master.debian.org/lock/unchecked.lock' - spawn("lockfile -r8 {0}".format(lockfile)) + spawn("lockfile -r42 {0}".format(lockfile)) try: - # 3. Now run process-upload in the newstage dir - print "Now put it into the security archive" - spawn("dak process-upload -a -d %s" % (newstage.path)) + # 1. Install accepted packages + print "Installing accepted packages into security archive" + for queue in ("embargoed",): + spawn("dak process-policy {0}".format(queue)) - # 4. Run all the steps that are needed to publish the changed archive + # 3. Run all the steps that are needed to publish the changed archive print "Domination" spawn("dak dominate") - # print "Generating filelist for apt-ftparchive" - # spawn("dak generate-filelist") print "Updating Packages and Sources files... This may take a while, be patient" spawn("/srv/security-master.debian.org/dak/config/debian-security/map.sh") - # spawn("apt-ftparchive generate %s" % (utils.which_apt_conf_file())) - spawn("dak generate-packages-sources2") + spawn("dak generate-packages-sources2 -a security") print "Updating Release files..." - spawn("dak generate-releases") + spawn("dak generate-releases -a security") print "Triggering security mirrors... (this may take a while)" spawn("/srv/security-master.debian.org/dak/config/debian-security/make-mirror.sh") spawn("sudo -u archvsync -H /home/archvsync/signal_security")