I'm unable to test this out (setting up dak is somewhat intimidating) but I've taken a look at the source and I think I've found a candidate solution.
Security uploads are added to the security archive with the dak/new_securiy_install.py tool. After mirroring to the world the script config/debian-security/export.sh is run to create the changelog files and push them to a 'metasdo' server who I can't find any mention of anywhere else. Presumably this is a counterpart to the metaftpdo server at metadata.ftp-master.d.o. At any rate tools like aptitude are looking for changelogs on metadata.ftp-master.d.o for all packages regardless of the suite so it seems that the world doesn't know about metasdo. The code in config/debian-security/export.sh is a copy and paste from the function changelogs() in config/debian/dinstall.functions. This function pushes the normal archive changelogs out to the metadata server and I assume that it works correctly given that changelogs are showing up just fine there. In commit 9384026b the changelog() function was changed to use the static-update-component script instead of the runmirrors (part of archvsync) script. config/debian-security/export.sh was *not* changed. I suspect that the easy fix here is a patch like this: rsync -aHW --delete --delete-after --ignore-errors ${exportdir}/changelogs/. . - sudo -H -u archvsync /home/archvsync/runmirrors metasdo > ~dak/runmirrors-metadata.log 2>&1 & + sudo -H -u staticsync /usr/local/bin/static-update-component metadata.ftp-master.debian.org > ~ } which updates config/debian-security/export.sh to use the same sync tool *and server target* as the regular changelogs. I haven't tested it and don't have the source for the command but if the static-update-component is just doing an rsync or something like that it should merge the directory trees and put the security changelogs side-by-side with the normal ones. If the ftp-masters have a test version of the archive there you can probably test this out and makes sure that it's not clobbering the contents of stuff. -- David Gilman :DG< http://gilslotd.com -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org