Echo
63b0bfce34
- Arch: remove system user creation, root:root ownership, fix $startdir path in PKGBUILD - RPM: uncomment BuildRequires, add runtime deps (openssl-libs, ca-certificates), remove system user, root:root ownership - Alpine: remove system user creation, root:root ownership, co-locate install script with APKBUILD - All platforms now match Debian: no system user, root:root, create dirs, copy example configs, enable service
82 lines
2.9 KiB
Bash
82 lines
2.9 KiB
Bash
#!/bin/sh
|
|
# Alpine Linux install hooks for linux-patch-api
|
|
# Matches Debian preinst/postinst behavior: no system user, root:root ownership
|
|
# Alpine APKBUILD install script format: pre-install, post-install, pre-deinstall, post-deinstall
|
|
|
|
# Pre-install: Create directories before files are laid down
|
|
pre_install() {
|
|
# Create required directories
|
|
mkdir -p /etc/linux_patch_api/certs
|
|
mkdir -p /var/lib/linux_patch_api
|
|
mkdir -p /var/log/linux_patch_api
|
|
|
|
# Set proper ownership (service runs as root)
|
|
chown -R root:root /var/lib/linux_patch_api
|
|
chown -R root:root /var/log/linux_patch_api
|
|
|
|
# Set secure permissions
|
|
chmod 750 /etc/linux_patch_api
|
|
chmod 750 /etc/linux_patch_api/certs
|
|
chmod 755 /var/lib/linux_patch_api
|
|
chmod 755 /var/log/linux_patch_api
|
|
|
|
echo "Pre-installation setup completed"
|
|
}
|
|
|
|
# Post-install: Copy example configs, enable service
|
|
post_install() {
|
|
# Copy example configs if they don't exist
|
|
if [ ! -f "/etc/linux_patch_api/config.yaml" ]; then
|
|
if [ -f "/etc/linux_patch_api/config.yaml.example" ]; then
|
|
cp /etc/linux_patch_api/config.yaml.example /etc/linux_patch_api/config.yaml
|
|
chmod 640 /etc/linux_patch_api/config.yaml
|
|
chown root:root /etc/linux_patch_api/config.yaml
|
|
fi
|
|
fi
|
|
|
|
if [ ! -f "/etc/linux_patch_api/whitelist.yaml" ]; then
|
|
if [ -f "/etc/linux_patch_api/whitelist.yaml.example" ]; then
|
|
cp /etc/linux_patch_api/whitelist.yaml.example /etc/linux_patch_api/whitelist.yaml
|
|
chmod 640 /etc/linux_patch_api/whitelist.yaml
|
|
chown root:root /etc/linux_patch_api/whitelist.yaml
|
|
fi
|
|
fi
|
|
|
|
# Enable the service (but don't start automatically - admin should configure first)
|
|
rc-update add linux-patch-api default
|
|
|
|
echo ""
|
|
echo "linux-patch-api installed successfully!"
|
|
echo ""
|
|
echo "Next steps:"
|
|
echo " 1. Configure /etc/linux_patch_api/config.yaml with your settings"
|
|
echo " 2. Place TLS certificates in /etc/linux_patch_api/certs/"
|
|
echo " 3. Configure IP whitelist in /etc/linux_patch_api/whitelist.yaml"
|
|
echo " 4. Start the service: rc-service linux-patch-api start"
|
|
echo " 5. Check status: rc-service linux-patch-api status"
|
|
echo ""
|
|
}
|
|
|
|
# Pre-deinstall: Stop and disable service before files are removed
|
|
pre_deinstall() {
|
|
# Stop the service if running
|
|
if rc-service linux-patch-api status >/dev/null 2>&1; then
|
|
rc-service linux-patch-api stop
|
|
echo "Service stopped"
|
|
else
|
|
echo "Service was not running"
|
|
fi
|
|
|
|
# Disable the service
|
|
rc-update del linux-patch-api default 2>/dev/null || true
|
|
}
|
|
|
|
# Post-deinstall: Clean up on removal
|
|
post_deinstall() {
|
|
# Remove directories only if empty (preserve user data on reinstall)
|
|
rmdir /var/lib/linux_patch_api 2>/dev/null || true
|
|
rmdir /var/log/linux_patch_api 2>/dev/null || true
|
|
|
|
echo "linux-patch-api removed"
|
|
}
|