]> git.decadent.org.uk Git - dak.git/log
dak.git
11 years agomake-changelog: fix wrong field name in the SQL query
Luca Falavigna [Fri, 26 Apr 2013 10:21:47 +0000 (10:21 +0000)]
make-changelog: fix wrong field name in the SQL query

11 years agomake-changelog. document --archive option
Luca Falavigna [Fri, 26 Apr 2013 10:18:42 +0000 (10:18 +0000)]
make-changelog. document --archive option

11 years agoImprove reporting of processed packages in NEW
Luca Falavigna [Thu, 25 Apr 2013 08:00:33 +0000 (08:00 +0000)]
Improve reporting of processed packages in NEW

11 years agoUse distinct() to avoid listing duplicated claimed overrides
Luca Falavigna [Mon, 22 Apr 2013 20:52:52 +0000 (20:52 +0000)]
Use distinct() to avoid listing duplicated claimed overrides

11 years agoMerge remote-tracking branch 'drkranz/fixes' into merge
Joerg Jaspert [Sun, 21 Apr 2013 14:57:36 +0000 (16:57 +0200)]
Merge remote-tracking branch 'drkranz/fixes' into merge

* drkranz/fixes:
  process-new: display existing overrides

11 years agoprocess-new: display existing overrides
Luca Falavigna [Sun, 21 Apr 2013 13:28:00 +0000 (13:28 +0000)]
process-new: display existing overrides

Display overrides belonging to other sources to avoid accepting
packages which "steal" binary packages (Closes: #697729).

11 years agoMerge remote-tracking branch 'drkranz/fixes' into merge
Joerg Jaspert [Sun, 21 Apr 2013 08:34:29 +0000 (10:34 +0200)]
Merge remote-tracking branch 'drkranz/fixes' into merge

* drkranz/fixes:
  Add md5sum-mismatch tag to nonfatal autoreject list (Closes: #688300)
  Finds newer or equal versions in lowersuite_name
  queue-report: sort changes correctly (Closes: #704231)
  dak: ls: Calculate optimal column sizes

11 years agoAdd md5sum-mismatch tag to nonfatal autoreject list (Closes: #688300)
Luca Falavigna [Sun, 21 Apr 2013 08:13:18 +0000 (08:13 +0000)]
Add md5sum-mismatch tag to nonfatal autoreject list (Closes: #688300)

11 years agoFinds newer or equal versions in lowersuite_name
Luca Falavigna [Sun, 21 Apr 2013 01:02:50 +0000 (01:02 +0000)]
Finds newer or equal versions in lowersuite_name

This is particularly useful when the same package has migrated
to a different suite (e.g. t-p-u -> testing), so it is displayed
in cruft-report to be manually removed.

11 years agoqueue-report: sort changes correctly (Closes: #704231)
Luca Falavigna [Sun, 21 Apr 2013 01:01:22 +0000 (01:01 +0000)]
queue-report: sort changes correctly (Closes: #704231)

11 years agodak: ls: Calculate optimal column sizes
Julian Andres Klode [Sun, 21 Apr 2013 00:59:25 +0000 (00:59 +0000)]
dak: ls: Calculate optimal column sizes

If a package name is longer than 10 characters, or a version
longer than 13 characters, columns had different widths in
different rows. By calculating the maximum column size and
using that instead of hard-coded values, we have a nice
table again (Closes: #705289).

11 years agoAdd world.site_summary view.
Ansgar Burchardt [Thu, 11 Apr 2013 16:21:35 +0000 (18:21 +0200)]
Add world.site_summary view.

The view is used by the backports team to generate a listing of packages in the
backports suites.

11 years agodak.conf-backports: Actually set Dinstall::MyAdminAddress
Ansgar Burchardt [Thu, 11 Apr 2013 09:52:01 +0000 (11:52 +0200)]
dak.conf-backports: Actually set Dinstall::MyAdminAddress

b9e1322334152efd870a0ad6ddf0df819d05b4a3 had a "Dinstall::" prefix even though
the variable was set inside a "Dinstall" block.

11 years agoRemove dak/metadata.py and daklib/metadata.py.
Ansgar Burchardt [Wed, 10 Apr 2013 21:04:00 +0000 (23:04 +0200)]
Remove dak/metadata.py and daklib/metadata.py.

dak imports package metadata at installation time for some time already.
There is no longer need for an extra subcommand to do so.

11 years agodak.conf-backports: Change Dinstall::MyAdminAddress
Ansgar Burchardt [Tue, 9 Apr 2013 09:16:52 +0000 (11:16 +0200)]
dak.conf-backports: Change Dinstall::MyAdminAddress

The backports team address should be used as From for rejections from the
backports-new queue. As this is written into the REJECT.* file by process-new,
we can just change it here.

11 years agoRequire SHA-1 and SHA-256 checksums in "files" table
Ansgar Burchardt [Mon, 8 Apr 2013 21:49:47 +0000 (23:49 +0200)]
Require SHA-1 and SHA-256 checksums in "files" table

We are already assuming that these are never NULL in several places, for
example generate-packages-sources2.

11 years agoAdd missing sections to database init script
Matthias Klumpp [Thu, 28 Mar 2013 17:48:21 +0000 (18:48 +0100)]
Add missing sections to database init script

Update the list of sections to the latest version of the Debian policy,

11 years agoMerge remote-tracking branch 'dktrkranz/fixes'
Ansgar Burchardt [Mon, 8 Apr 2013 21:20:44 +0000 (23:20 +0200)]
Merge remote-tracking branch 'dktrkranz/fixes'

11 years agos/team@backports.d.o/backports-team@d.o/
Joerg Jaspert [Mon, 8 Apr 2013 12:15:27 +0000 (14:15 +0200)]
s/team@backports.d.o/backports-team@d.o/

11 years agoColorize Pre-Depends packages too
Luca Falavigna [Sun, 7 Apr 2013 22:05:35 +0000 (22:05 +0000)]
Colorize Pre-Depends packages too

11 years agoprocessnew.lock is no longer required
Luca Falavigna [Sun, 7 Apr 2013 20:08:06 +0000 (20:08 +0000)]
processnew.lock is no longer required

11 years agoinclude backports archive in (pool) sync
Joerg Jaspert [Sun, 7 Apr 2013 19:14:00 +0000 (21:14 +0200)]
include backports archive in (pool) sync

11 years agodak.conf-backports: change location of removal logs
Ansgar Burchardt [Tue, 2 Apr 2013 13:57:36 +0000 (15:57 +0200)]
dak.conf-backports: change location of removal logs

11 years agoMerge remote-tracking branch 'origin/master'
Ansgar Burchardt [Mon, 1 Apr 2013 12:16:06 +0000 (14:16 +0200)]
Merge remote-tracking branch 'origin/master'

11 years agoGenerate backports-new.html
Ansgar Burchardt [Mon, 1 Apr 2013 12:10:03 +0000 (14:10 +0200)]
Generate backports-new.html

11 years agoMerge branch 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak
Joerg Jaspert [Mon, 18 Mar 2013 18:36:04 +0000 (19:36 +0100)]
Merge branch 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak

* 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak:
  mkchecksums: store md5sums in correct location
  backports queued: pid and log files are in run subdirectory.
  backports queued: forward uploads to ftp-master

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agofix dm_suites var
Joerg Jaspert [Mon, 18 Mar 2013 18:35:49 +0000 (19:35 +0100)]
fix dm_suites var

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agomkchecksums: store md5sums in correct location
Ansgar Burchardt [Sun, 17 Mar 2013 16:11:30 +0000 (17:11 +0100)]
mkchecksums: store md5sums in correct location

We cannot use $indices as the location is specific to each archive.

11 years agobackports queued: pid and log files are in run subdirectory.
Ansgar Burchardt [Sun, 17 Mar 2013 08:04:36 +0000 (09:04 +0100)]
backports queued: pid and log files are in run subdirectory.

11 years agobackports queued: forward uploads to ftp-master
Ansgar Burchardt [Sun, 17 Mar 2013 07:57:26 +0000 (08:57 +0100)]
backports queued: forward uploads to ftp-master

11 years agomisleading log msg
Joerg Jaspert [Sat, 16 Mar 2013 22:37:25 +0000 (23:37 +0100)]
misleading log msg

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoMerge branch 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak
Joerg Jaspert [Sat, 16 Mar 2013 21:12:20 +0000 (22:12 +0100)]
Merge branch 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak

* 'master' of ssh://franck.debian.org/srv/ftp.debian.org/git/dak:
  config/debian/apache.conf-incoming: add buildd-squeeze-backports alias
  config/debian/dak.conf: no longer reject uploads to squeeze-backports

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoalso push the backports archive
Joerg Jaspert [Sat, 16 Mar 2013 21:12:13 +0000 (22:12 +0100)]
also push the backports archive

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoconfig/debian/apache.conf-incoming: add buildd-squeeze-backports alias
Ansgar Burchardt [Sat, 16 Mar 2013 19:46:34 +0000 (20:46 +0100)]
config/debian/apache.conf-incoming: add buildd-squeeze-backports alias

11 years agoconfig/debian/dak.conf: no longer reject uploads to squeeze-backports
Ansgar Burchardt [Sat, 16 Mar 2013 19:32:55 +0000 (20:32 +0100)]
config/debian/dak.conf: no longer reject uploads to squeeze-backports

11 years agoadjust for backports merge
Joerg Jaspert [Sat, 16 Mar 2013 19:02:12 +0000 (20:02 +0100)]
adjust for backports merge

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agodak/import.py: commit after each imported package
Ansgar Burchardt [Sat, 16 Mar 2013 17:01:23 +0000 (18:01 +0100)]
dak/import.py: commit after each imported package

11 years agoconfig/debian/common: make sure old-style buildd directory exists
Ansgar Burchardt [Tue, 12 Mar 2013 20:34:55 +0000 (21:34 +0100)]
config/debian/common: make sure old-style buildd directory exists

An empty build queue would result in $incoming/dists/$suite/buildd no
longer existing. This later triggers an error.

11 years agoconfig/debian/*: generate old-style buildd archive for squeeze-backports
Ansgar Burchardt [Fri, 8 Mar 2013 10:47:50 +0000 (11:47 +0100)]
config/debian/*: generate old-style buildd archive for squeeze-backports

The suite will be needed until the squeeze-backports buildds switch to the new
location.

11 years agoparse_file_list: really handle files without an entry in the Files field
Ansgar Burchardt [Thu, 7 Mar 2013 06:42:44 +0000 (07:42 +0100)]
parse_file_list: really handle files without an entry in the Files field

We have to raise an exception right away after all if "entry" is None as we
later assign to "entry['sha*sum']".

11 years agoparse_file_list: handle files without an entry in the Files field
Ansgar Burchardt [Thu, 7 Mar 2013 06:17:27 +0000 (07:17 +0100)]
parse_file_list: handle files without an entry in the Files field

If a file is only listed in the Checksums-* fields, "entry" will be None and we
cannot call the get method to compare the size in the different fields.

This change just skips the comparison when "entry" is None. We can do this as
we later check that each entry has all required checksums (i.e. is listed in
Files and the Checksums-* fields).

11 years agoStop processing uploads to forbidden suites earlier.
Ansgar Burchardt [Wed, 27 Feb 2013 12:25:52 +0000 (13:25 +0100)]
Stop processing uploads to forbidden suites earlier.

11 years agoconfig/debian/dinstall.functions: create ${archiveroot}/indices
Ansgar Burchardt [Sun, 24 Feb 2013 20:04:39 +0000 (21:04 +0100)]
config/debian/dinstall.functions: create ${archiveroot}/indices

11 years agoUse /bin/bash as interpreter.
Ansgar Burchardt [Sun, 24 Feb 2013 15:24:32 +0000 (16:24 +0100)]
Use /bin/bash as interpreter.

Since 5390eff0ba7a732269f040b0a4c4a3b9a0db2733 we use a few bash
features like arrays in config/debian/vars.

11 years agoconfig/debian/dak.conf-backports: correct path to log and lock directories
Ansgar Burchardt [Sun, 24 Feb 2013 14:12:53 +0000 (15:12 +0100)]
config/debian/dak.conf-backports: correct path to log and lock directories

11 years agodak/process_new.py: document -q/--queue option
Ansgar Burchardt [Sun, 24 Feb 2013 13:23:27 +0000 (14:23 +0100)]
dak/process_new.py: document -q/--queue option

11 years agodak/admin.py: suite add has a archive=ARCHIVE option.
Ansgar Burchardt [Sun, 24 Feb 2013 13:22:13 +0000 (14:22 +0100)]
dak/admin.py: suite add has a archive=ARCHIVE option.

11 years agoconfig/debian/cron.hourly: import backports acl
Ansgar Burchardt [Sun, 24 Feb 2013 13:18:26 +0000 (14:18 +0100)]
config/debian/cron.hourly: import backports acl

11 years agoFirst set of dinstall changes for backports merge
Ansgar Burchardt [Sat, 12 Jan 2013 11:40:03 +0000 (12:40 +0100)]
First set of dinstall changes for backports merge

Still missing is everything that makes the backports archive public,
e.g. the mirror push itself.

11 years agoUse backports-new by default in process-new and queue-report.
Ansgar Burchardt [Sun, 24 Feb 2013 10:20:33 +0000 (11:20 +0100)]
Use backports-new by default in process-new and queue-report.

11 years agoRestore __WARNINGS__ in NEW mail template.
Ansgar Burchardt [Sun, 24 Feb 2013 09:54:29 +0000 (10:54 +0100)]
Restore __WARNINGS__ in NEW mail template.

11 years agoremove arm/hppa keyrings
Joerg Jaspert [Sat, 23 Feb 2013 20:30:46 +0000 (21:30 +0100)]
remove arm/hppa keyrings

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoscripts/debian/byhand-di: don't append -proposed-updates if it's already there
Ansgar Burchardt [Thu, 7 Feb 2013 09:17:08 +0000 (10:17 +0100)]
scripts/debian/byhand-di: don't append -proposed-updates if it's already there

A .changes file might upload directly to a *-proposed-updates suite. We do not
want to append another -proposed-updates in this case.

11 years agodebianqueued: set LC_ALL in the environment
Ansgar Burchardt [Sun, 3 Feb 2013 13:03:25 +0000 (14:03 +0100)]
debianqueued: set LC_ALL in the environment

Make sure all processes we start also run in the C locale.

queued currently parses the output from gpg to get the name of the
person who signed an upload. A better fix would be to pass --with-colon
to gpg, but as this information is only used for logging anyway...

11 years agodebianqueued: open ftp connection when trying to upload .dak-commands
Ansgar Burchardt [Sun, 3 Feb 2013 12:42:51 +0000 (13:42 +0100)]
debianqueued: open ftp connection when trying to upload .dak-commands

11 years agodak/acl.py: only add fingerprints from active keyrings to an ACL.
Ansgar Burchardt [Sun, 27 Jan 2013 12:50:40 +0000 (13:50 +0100)]
dak/acl.py: only add fingerprints from active keyrings to an ACL.

11 years agodak/acl.py: allow comments and empty lines
Ansgar Burchardt [Sun, 27 Jan 2013 12:48:23 +0000 (13:48 +0100)]
dak/acl.py: allow comments and empty lines

11 years agodak/acl.py: raise an exception when an unknown selector is used
Ansgar Burchardt [Sun, 27 Jan 2013 10:52:38 +0000 (11:52 +0100)]
dak/acl.py: raise an exception when an unknown selector is used

11 years agodak/acl.py: allow to filter by keyring
Ansgar Burchardt [Sun, 27 Jan 2013 10:50:38 +0000 (11:50 +0100)]
dak/acl.py: allow to filter by keyring

This is intended to be used for the backports ACL to allow all buildd
keys to upload.

11 years agodebianqueued: add armhf and s390x keyrings for security-master.
Ansgar Burchardt [Tue, 22 Jan 2013 23:50:51 +0000 (00:50 +0100)]
debianqueued: add armhf and s390x keyrings for security-master.

11 years agodebianqueued: move log and pid files to run directory for security archive
Ansgar Burchardt [Tue, 22 Jan 2013 23:07:20 +0000 (00:07 +0100)]
debianqueued: move log and pid files to run directory for security archive

11 years agodaklib/archive.py: Use correct variable for the rejected suite.
Ansgar Burchardt [Tue, 22 Jan 2013 17:54:32 +0000 (18:54 +0100)]
daklib/archive.py: Use correct variable for the rejected suite.

11 years agoHandle *.dak-commands files owned by a different user.
Ansgar Burchardt [Sun, 20 Jan 2013 09:59:40 +0000 (10:59 +0100)]
Handle *.dak-commands files owned by a different user.

11 years agoinclude Built-Using sources in Sources indices
Ansgar Burchardt [Tue, 8 Jan 2013 14:49:21 +0000 (15:49 +0100)]
include Built-Using sources in Sources indices

Bug: http://bugs.debian.org/657212

11 years agoconfig/debian/cron.monthly: debianqueued now runs as dak-unpriv
Ansgar Burchardt [Sat, 19 Jan 2013 15:13:59 +0000 (16:13 +0100)]
config/debian/cron.monthly: debianqueued now runs as dak-unpriv

11 years agoconfig/debian/dak.conf: keep dak-unpriv user in postgres
Ansgar Burchardt [Sat, 19 Jan 2013 14:42:33 +0000 (15:42 +0100)]
config/debian/dak.conf: keep dak-unpriv user in postgres

dak show-deferred now runs as dak-unpriv and needs a (read-only) database
connection.

11 years agoRun debianqueued as dak-unpriv.
Ansgar Burchardt [Sat, 19 Jan 2013 14:20:58 +0000 (15:20 +0100)]
Run debianqueued as dak-unpriv.

We also need to run show-deferred as dak-unpriv as it changes
permissions of some files in the deferred queues.

11 years agodebianqueued: move log and pid files to run subdirectory
Ansgar Burchardt [Sat, 19 Jan 2013 14:20:02 +0000 (15:20 +0100)]
debianqueued: move log and pid files to run subdirectory

The dak-unpriv user needs to be able to write these files.

11 years agodebianqueued: remove current directory from @INC
Ansgar Burchardt [Sat, 12 Jan 2013 15:30:49 +0000 (16:30 +0100)]
debianqueued: remove current directory from @INC

11 years ago<Files> matches only the basename, so wrap it inside a <Directory> block
Ansgar Burchardt [Sat, 12 Jan 2013 13:53:24 +0000 (14:53 +0100)]
<Files> matches only the basename, so wrap it inside a <Directory> block

11 years agoconfig/debian/apache.conf-incoming: allow access to robots.txt
Ansgar Burchardt [Sat, 12 Jan 2013 13:49:00 +0000 (14:49 +0100)]
config/debian/apache.conf-incoming: allow access to robots.txt

11 years agoStop generating dm-uploaders.html.
Ansgar Burchardt [Sat, 12 Jan 2013 13:40:16 +0000 (14:40 +0100)]
Stop generating dm-uploaders.html.

dm-uploaders.html is huge (74 MB) which makes is unusable. DM upload
permissions can now be seen in dm.txt.

11 years agoAdd robots.txt for incoming.debian.org.
Ansgar Burchardt [Sat, 12 Jan 2013 13:37:30 +0000 (14:37 +0100)]
Add robots.txt for incoming.debian.org.

Files on incoming.debian.org only exist for a short while so it makes no
sense to have them indexed.

11 years agodak/process_new.py: show target suite and changed-by
Ansgar Burchardt [Mon, 7 Jan 2013 10:24:48 +0000 (11:24 +0100)]
dak/process_new.py: show target suite and changed-by

11 years agodak/show_new.py: use apply_async instead of map_async
Ansgar Burchardt [Mon, 7 Jan 2013 09:32:19 +0000 (10:32 +0100)]
dak/show_new.py: use apply_async instead of map_async

The map variant established multiple database connections in each worker
exceeding the maximum number of connections configured in PostgreSQL.
apply_async doesn't have this problem with our wrapper in DakProcessPool.

However as a regression we longer have a timeout and always have to wait for
the job to finish. This could be worked around by using the timeout function
for individual results.

11 years agoconfig/debian/dak.conf: There is no dak group.
Ansgar Burchardt [Sun, 6 Jan 2013 13:07:42 +0000 (14:07 +0100)]
config/debian/dak.conf: There is no dak group.

11 years agodak/show_new.py: set examine_package.use_html before creating worker pool
Ansgar Burchardt [Sun, 6 Jan 2013 12:48:07 +0000 (13:48 +0100)]
dak/show_new.py: set examine_package.use_html before creating worker pool

We want examine_package.use_html to be set everywhere. So we have to
change it before we create the worker pool.

This was broken by 24cb4fe2729e5805e8a9d81149dce947787ee20d where the
worker pool was setup earlier.

11 years agoshow-new: run lintian as unprivileged user
Ansgar Burchardt [Sun, 6 Jan 2013 12:44:51 +0000 (13:44 +0100)]
show-new: run lintian as unprivileged user

As dak/examine_package.py is also used by process-new we cannot run
lintian unconditionally as the unprivileged user. Therefore move the
Unpriv{User,Group} setting from the database to a (group-specific)
dak.conf.

11 years agodak/admin.py: add new subcommand to add buildd keyring
Ansgar Burchardt [Fri, 4 Jan 2013 19:15:29 +0000 (20:15 +0100)]
dak/admin.py: add new subcommand to add buildd keyring

This also creates a new ACL which is not fun to do by hand.

11 years agoExport buildd queues on security archive.
Ansgar Burchardt [Fri, 4 Jan 2013 15:08:16 +0000 (16:08 +0100)]
Export buildd queues on security archive.

11 years agoapache.conf-incoming: add alias for /debian-buildd.
Ansgar Burchardt [Fri, 4 Jan 2013 14:39:56 +0000 (15:39 +0100)]
apache.conf-incoming: add alias for /debian-buildd.

11 years agoscriptdir vs. scriptsdir is confusing
Ansgar Burchardt [Fri, 4 Jan 2013 12:13:58 +0000 (13:13 +0100)]
scriptdir vs. scriptsdir is confusing

11 years agoExport buildd queues to public location
Ansgar Burchardt [Fri, 4 Jan 2013 12:08:56 +0000 (13:08 +0100)]
Export buildd queues to public location

The dists/ directory should be updated as atomic as possible. Therefore
buildds access a copy that can be updated with two file renames.

11 years agodak/show_new.py: setup worker pool before connecting to database
Ansgar Burchardt [Thu, 3 Jan 2013 20:30:36 +0000 (21:30 +0100)]
dak/show_new.py: setup worker pool before connecting to database

11 years agodaklib/archive.py: always copy files instead of using symlinks
Ansgar Burchardt [Wed, 2 Jan 2013 16:01:07 +0000 (17:01 +0100)]
daklib/archive.py: always copy files instead of using symlinks

Some files in pool locations might not be accessible to the user dak runs
lintian as. So always copy the files and set appropriate permissions.

Bug: http://bugs.debian.org/689598

11 years agocruft-report: check for rdeps of arch:all packages on all architectures
Adam D. Barratt [Tue, 1 Jan 2013 16:40:02 +0000 (16:40 +0000)]
cruft-report: check for rdeps of arch:all packages on all architectures

When checking for reverse dependencies of sourceless arch:all packages
only those rdeps which were also arch-indep were detected.

Signed-off-by: Adam D. Barratt <adam@adam-barratt.org.uk>
Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoUse Squeezy key instead of the expired Lenny key.
Ansgar Burchardt [Tue, 1 Jan 2013 10:00:52 +0000 (11:00 +0100)]
Use Squeezy key instead of the expired Lenny key.

11 years ago%Y works so much nicer than here
Joerg Jaspert [Tue, 1 Jan 2013 10:03:05 +0000 (11:03 +0100)]
%Y works so much nicer than  here

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agomonthly rotation of the queued log on franck
Joerg Jaspert [Tue, 1 Jan 2013 10:01:14 +0000 (11:01 +0100)]
monthly rotation of the queued log on franck

Signed-off-by: Joerg Jaspert <joerg@debian.org>
11 years agoConfigure dm-{remove,migrate}.
Ansgar Burchardt [Sat, 29 Dec 2012 11:28:25 +0000 (12:28 +0100)]
Configure dm-{remove,migrate}.

People allowed to use dm-{remove,migrate} are the keyring maintainers
and ftp masters for now.

11 years agoImplement dm-remove and dm-migrate commands.
Ansgar Burchardt [Sat, 29 Dec 2012 11:22:06 +0000 (12:22 +0100)]
Implement dm-remove and dm-migrate commands.

The dm-remove command can be used to remove all DM ACL entries for a
given fingerprint:

  Action: dm-remove
  Fingerprint: ...

The dm-migrate command can be used to migrate all DM ACL entries from
one key to another:

  Action: dm-migrate
  From: ...
  To: ...

11 years agodaklib/upload.py: more verbose message for hash mismatches
Ansgar Burchardt [Sat, 29 Dec 2012 10:11:23 +0000 (11:11 +0100)]
daklib/upload.py: more verbose message for hash mismatches

Reported-by: Laszlo Kajan <lkajan@rostlab.org>
11 years agodaklib/checks.py: name of local variable changed: what -> filename
Ansgar Burchardt [Thu, 20 Dec 2012 10:39:26 +0000 (11:39 +0100)]
daklib/checks.py: name of local variable changed: what -> filename

When moving the hash validation in e6b1c633b7127f1d2ef938b7ea2181ce9e184906
one occurrence of "what" was not changed to "filename".

11 years agoCheck hashes from .changes before loading .dsc.
Ansgar Burchardt [Tue, 18 Dec 2012 16:13:55 +0000 (17:13 +0100)]
Check hashes from .changes before loading .dsc.

11 years agoDo not load .dsc to check if an upload is sourceful.
Ansgar Burchardt [Tue, 18 Dec 2012 16:10:00 +0000 (17:10 +0100)]
Do not load .dsc to check if an upload is sourceful.

This caused an error when rejecting an upload with an invalid .dsc.

We also do not want to load the .dsc before we have made sure it matches the
hash from the .changes.

11 years agodaklib/archive.py: don't fail in prepare() if the .dsc is invalid
Ansgar Burchardt [Tue, 18 Dec 2012 15:37:36 +0000 (16:37 +0100)]
daklib/archive.py: don't fail in prepare() if the .dsc is invalid

We only need the .dsc here to try and grab any files not included in the
upload. If there is an error loading the .dsc, do not throw an exception here,
but do so later instead.

11 years agodebianqueued: check pgp signature before any further processing
Ansgar Burchardt [Sat, 15 Dec 2012 10:17:20 +0000 (11:17 +0100)]
debianqueued: check pgp signature before any further processing

As we no longer look at the file in the case of a bad signature, we
cannot know the maintainer address and this cannot send a mail about
the bad signature.

11 years agodebianqueued: make pgp_check stricter
Ansgar Burchardt [Sat, 15 Dec 2012 10:16:54 +0000 (11:16 +0100)]
debianqueued: make pgp_check stricter

11 years agoconfig/debian/cron.hourly: remove unchecked lock on failure
Ansgar Burchardt [Sat, 15 Dec 2012 08:31:00 +0000 (09:31 +0100)]
config/debian/cron.hourly: remove unchecked lock on failure

11 years agodaklib/policy.py: REJECT.* files should not be executable
Ansgar Burchardt [Sat, 15 Dec 2012 08:26:48 +0000 (09:26 +0100)]
daklib/policy.py: REJECT.* files should not be executable