We parse the changes file so we can generate the following types of entries in our template USN publication script (usn.py is part of usn-tool):
usn.py $DB $USN --release intrepid --package squid --source-version 2.7.STABLE3-1ubuntu2.1
usn.py $DB $USN --release intrepid --package squid --binary-version 2.7.STABLE3-1ubuntu2.1
So what we get from the changes is the release, version, arch, size, and checksum of the debs and source packages. Our script calculates the url using:
1. the architecture in the changes file (we have a mapping of which archs go to security.u.c vs ports.u.c)
2. the component we find based on Sources and Packages files that we locally mirror (icky).
Re changes and binary files>
We parse the changes file so we can generate the following types of entries in our template USN publication script (usn.py is part of usn-tool): 1ubuntu2. 1 1ubuntu2. 1
usn.py $DB $USN --release intrepid --package squid --source-version 2.7.STABLE3-
usn.py $DB $USN --release intrepid --package squid --binary-version 2.7.STABLE3-
usn.py $DB $USN --release intrepid --arch source --url http:// security. ubuntu. com/ubuntu/ pool/main/ s/squid/ squid_2. 7.STABLE3- 1ubuntu2. 1.dsc --url-size 1252 --url-md5 6953f88d6f4825d aabd9e77bd0fa1a 88 security. ubuntu. com/ubuntu/ pool/main/ s/squid/ squid_2. 7.STABLE3. orig.tar. gz --url-size 1782040 --url-md5 a4d7608696e2b61 7aa5853c7d23e25 b0 security. ubuntu. com/ubuntu/ pool/main/ s/squid/ squid_2. 7.STABLE3- 1ubuntu2. 1.diff. gz --url-size 303042 --url-md5 9132293f589a71a e3f771e1ae6de30 f1
usn.py $DB $USN --release intrepid --arch source --url http://
usn.py $DB $USN --release intrepid --arch source --url http://
usn.py $DB $USN --release intrepid --arch all --url http:// security. ubuntu. com/ubuntu/ pool/main/ s/squid/ squid-common_ 2.7.STABLE3- 1ubuntu2. 1_all.deb --url-size 495876 --url-md5 b6d1e76b140c792 297c14382a06ed3 e3 security. ubuntu. com/ubuntu/ pool/universe/ s/squid/ squid-cgi_ 2.7.STABLE3- 1ubuntu2. 1_amd64. deb --url-size 119880 --url-md5 27ff06a902debe1 43acb7b3959fb1c 52 ports.ubuntu. com/pool/ main/s/ squid/squid_ 2.7.STABLE3- 1ubuntu2. 1_powerpc. deb --url-size 777958 --url-md5 b9d530e92ad4638 fb8d169ef55eb33 f4
usn.py $DB $USN --release intrepid --arch amd64 --url http://
usn.py $DB $USN --release intrepid --arch powerpc --url http://
So what we get from the changes is the release, version, arch, size, and checksum of the debs and source packages. Our script calculates the url using:
1. the architecture in the changes file (we have a mapping of which archs go to security.u.c vs ports.u.c)
2. the component we find based on Sources and Packages files that we locally mirror (icky).
Re USN generation> Yes. We ask a LOSA to unembargo and then we start to generate our USN. You can see our full process at https:/ /wiki.ubuntu. com/SecurityUpd ateProcedures# Soyuz.