apt: enable security update

packages/apt/build-deb.sh

@@ -7,6 +7,7 @@ USER_NAME=$(cat /tmp/build-user)
 VERSION=$(cat /tmp/build-version)
 DEPENDED_PACKAGES=$(cat /tmp/depended-packages)
 BUILD_SCRIPT=/tmp/build-deb-in-chroot.sh
+CODE_NAME=$(cat /tmp/code-name)
 
 mysql_server_package=mysql-server-5.1
 
@@ -22,6 +23,24 @@ run()
 grep '^deb ' /etc/apt/sources.list | \
     sed -e 's/^deb /deb-src /' > /etc/apt/sources.list.d/base-source.list
 
+case $code_name in
+    lenny|squeeze|wheezy)
+	cat <<EOF > /etc/apt/sources.list.d/security.list
+deb http://security.debian.org/ ${code_name}/updates main
+deb-src http://security.debian.org/ ${code_name}/updates main
+EOF
+	;;
+    unstable)
+	:
+	;;
+    *)
+	cat <<EOF > /etc/apt/sources.list.d/security.list
+deb http://security.ubuntu.com/ubuntu ${code_name}-security main restricted
+deb-src http://security.ubuntu.com/ubuntu ${code_name}-security main restricted
+EOF
+	;;
+esac
+
 groonga_apt_key=1C837F31
 if ! apt-key list | grep -q ${groonga_apt_key}; then
     apt-key adv --recv-keys --keyserver keyserver.ubuntu.com ${groonga_apt_key}

packages/apt/build-in-chroot.sh

@@ -51,7 +51,6 @@ build_chroot()
 	    run_sudo sed -i'' \
 		-e 's,http://archive,http://jp.archive,' \
 		-e 's/main$/main universe/' \
-		-e "\$adeb http://security.ubuntu.com/ubuntu ${code_name}-security main universe" \
 		$base_dir/etc/apt/sources.list
 	    ;;
     esac
@@ -104,6 +103,7 @@ build()
     run echo $PACKAGE > ${CHROOT_BASE}/$target/tmp/build-package
     run echo $VERSION > ${CHROOT_BASE}/$target/tmp/build-version
     run echo $build_user > ${CHROOT_BASE}/$target/tmp/build-user
+    run echo $code_name > ${CHROOT_BASE}/$target/tmp/code-name
     run cp ${script_base_dir}/${PACKAGE}-depended-packages \
 	${CHROOT_BASE}/$target/tmp/depended-packages
     run cp ${script_base_dir}/build-deb.sh \