This script is intended to be used when rsyncing uploads to another
host, for example from security-master.d.o to ssh.upload.d.o.

As the synced uploads include both binary-only and source uploads, we
have to make sure the source uploads are available before the
binary-only uploads are processed.  So we sync to a staging area and
and only move all files to the target directory afterwards.

There is still a small race condition as the source .changes might be
moved after the binary .changes, but dak should only reject uploads
after a short time (`Dinstall::SkipTime`).

The rsync run happens during unchecked to make sure queue/accepted
only contains complete uploads.

The latter stopped working with GnuPG2.

In GnuPG2 the '--secret-keyring' option is deprecated and we need to
specify the homedir instead.  A new option to specify a passphrase
file (for keys on smartcards) is also included.

Also stops using `os.system` in favor of `subprocess.check_call`.

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Note that this changes behavior slightly in case of failure as all
trace files are only written at the end.

Priority "extra" is deprecated, packages using that priority should
be given priority "optional" instead. Given most packages are not
catching up with recent policy update, enforce that while adding
overrides upon NEW processing.
Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Debian Policy 4.0.1 allows packages to depend on other packages with
lower priority, hence making this check useless.
Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Signed-off-by: NLuca Falavigna <dktrkranz@fasolo.debian.org>

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Signed-off-by: NLuca Falavigna <dktrkranz@fasolo.debian.org>

The queued instance processing security uploads should not make them
world-readable on the upload host.

This avoid repreating the same settings everywhere.

This makes the setup run through quite a bit faster.  This is
interesting for the integration tests.