[dak/security] * config/debian/cron.dinstall: Complicate the i18n export a little by using date/hour based directories which we then link into the web view. They contain a signed timestamp file now, which means the i18n people can take a long time to generate files, yet we still know exactly on which dataset their data is based on, and can then verify it with that. Ensures we only get descriptions for packages we know off (or knew of in the past 2 days).

[Joerg Jaspert <joerg@debian.org>]

---
 ChangeLog                   |   10 ++++++++++
 config/debian/cron.dinstall |   13 +++++++++++--
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 65d35f0..af6f756 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,13 @@
+2008-08-12  Joerg Jaspert  <joerg@debian.org>
+
+	* config/debian/cron.dinstall: Complicate the i18n export a little
+	by using date/hour based directories which we then link into the
+	web view. They contain a signed timestamp file now, which means
+	the i18n people can take a long time to generate files, yet we
+	still know exactly on which dataset their data is based on, and
+	can then verify it with that. Ensures we only get descriptions for
+	packages we know off (or knew of in the past 2 days).
+
 2008-08-11  Joerg Jaspert  <joerg@debian.org>
 
 	* web/dinstall.html: Added
diff --git a/config/debian/cron.dinstall b/config/debian/cron.dinstall
index 4d38848..9ce2743 100755
--- a/config/debian/cron.dinstall
+++ b/config/debian/cron.dinstall
@@ -245,12 +245,21 @@ run-parts --report $base/scripts/distmnt
 ts
 
 echo "Exporting package data foo for i18n project"
-cd ${webdir}/i18n
+STAMP=$(date "+%Y%m%d%H%M")
+mkdir -p ${scriptdir}/i18n/${STAMP}
+cd ${scriptdir}/i18n/${STAMP}
 dak control-suite -l stable > etch
 dak control-suite -l testing > lenny
 dak control-suite -l unstable > sid
-rm md5sum
+echo "${STAMP}" > timestamp
+gpg --secret-keyring /srv/ftp.debian.org/s3kr1t/dot-gnupg/secring.gpg --keyring /srv/ftp.debian.org/s3kr1t/dot-gnupg/pubring.gpg --no-options --batch --no-tty --armour --default-key 6070D3A1 --detach-sign -o timestamp.gpg timestamp
+rm -f md5sum
 md5sum * > md5sum
+cd ${webdir}/
+ln -sfT ${scriptdir}/i18n/${STAMP} i18n
+
+cd ${scriptdir}
+find ./i18n -mtime +2 -mindepth 1 -maxdepth 1 -not -name "${STAMP}" -type d -print0 | xargs --no-run-if-empty -0 rm -rf
 
 ts
 
-- 
1.5.6.5