dm-uploaders.html is huge (74 MB) which makes is unusable. DM upload
permissions can now be seen in dm.txt.

Files on incoming.debian.org only exist for a short while so it makes no
sense to have them indexed.

The map variant established multiple database connections in each worker
exceeding the maximum number of connections configured in PostgreSQL.
apply_async doesn't have this problem with our wrapper in DakProcessPool.

However as a regression we longer have a timeout and always have to wait for
the job to finish. This could be worked around by using the timeout function
for individual results.

We want examine_package.use_html to be set everywhere. So we have to
change it before we create the worker pool.

This was broken by 24cb4fe2 where the
worker pool was setup earlier.

As dak/examine_package.py is also used by process-new we cannot run
lintian unconditionally as the unprivileged user. Therefore move the
Unpriv{User,Group} setting from the database to a (group-specific)
dak.conf.

This also creates a new ACL which is not fun to do by hand.

The dists/ directory should be updated as atomic as possible. Therefore
buildds access a copy that can be updated with two file renames.

Some files in pool locations might not be accessible to the user dak runs
lintian as. So always copy the files and set appropriate permissions.

Bug: http://bugs.debian.org/689598

When checking for reverse dependencies of sourceless arch:all packages
only those rdeps which were also arch-indep were detected.
Signed-off-by: NAdam D. Barratt <adam@adam-barratt.org.uk>
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

People allowed to use dm-{remove,migrate} are the keyring maintainers
and ftp masters for now.

The dm-remove command can be used to remove all DM ACL entries for a
given fingerprint:

  Action: dm-remove
  Fingerprint: ...

The dm-migrate command can be used to migrate all DM ACL entries from
one key to another:

  Action: dm-migrate
  From: ...
  To: ...

Reported-by: NLaszlo Kajan <lkajan@rostlab.org>

When moving the hash validation in e6b1c633
one occurrence of "what" was not changed to "filename".

This caused an error when rejecting an upload with an invalid .dsc.

We also do not want to load the .dsc before we have made sure it matches the
hash from the .changes.

We only need the .dsc here to try and grab any files not included in the
upload. If there is an error loading the .dsc, do not throw an exception here,
but do so later instead.

As we no longer look at the file in the case of a bad signature, we
cannot know the maintainer address and this cannot send a mail about
the bad signature.

Signed-off-by: NTollef Fog Heen <tfheen@varnish-software.com>
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Reported-by: NJakub Wilk <jwilk@debian.org>
Reference: https://lists.debian.org/debian-dak/2012/12/msg00016.html