blob: 4c72d14874c6ca8983f252fc87595af677f13a90 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
#!/bin/sh
# postinst script for rpki-ca
#
# see: dh_installdeb(1)
set -e
setup_directories() {
install -o rpki -g rpki -d /usr/share/rpki/bpki /usr/share/rpki/publication /usr/share/rpki/rrdp-publication
}
setup_apache() {
/usr/lib/rpki/rpkigui-apache-conf-gen --install --verbose
}
setup_config() {
rpki-confgen --read-xml /etc/rpki/rpki.rp.xml \
--set myrpki::run_rpkid=yes \
--set myrpki::run_pubd=yes \
--write-xml /etc/rpki/rpki.ca.xml \
--write-conf /etc/rpki/rpki.ca.conf.sample
if test ! -f /etc/rpki.conf || cmp -s /etc/rpki.conf /etc/rpki/rpki.rp.conf.sample
then
cp -p /etc/rpki/rpki.ca.conf.sample /etc/rpki.conf
fi
}
setup_sql() {
rpki-sql-setup --debug --verbose --postgresql-root-username postgres create
sudo -u rpki rpki-manage migrate rpkidb --settings rpki.django_settings.rpkid
sudo -u rpki rpki-manage migrate pubdb --settings rpki.django_settings.pubd
sudo -u rpki rpki-manage migrate irdb --settings rpki.django_settings.irdb
sudo -u rpki rpki-manage migrate --settings rpki.django_settings.gui
}
setup_bpki() {
rpkic initialize_server_bpki
}
setup_cron() {
t=$(( $(hexdump -n 1 -e '"%u"' /dev/urandom) % 60 )) || exit
echo "$t */2 * * * rpki /usr/lib/rpki/rpkigui-import-routes" > /etc/cron.d/rpkigui-routeviews
echo "@daily rpki /usr/lib/rpki/rpkigui-check-expired" > /etc/cron.d/rpkigui-check-expired
echo "30 3 * * * rpki /usr/sbin/rpkic update_bpki" > /etc/cron.d/rpki-update-bpki
chmod 644 /etc/cron.d/rpkigui-routeviews /etc/cron.d/rpkigui-check-expired /etc/cron.d/rpki-update-bpki
}
# summary of how this script can be called:
# * <postinst> `configure' <most-recently-configured-version>
# * <old-postinst> `abort-upgrade' <new version>
# * <conflictor's-postinst> `abort-remove' `in-favour' <package>
# <new-version>
# * <postinst> `abort-remove'
# * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
# <failed-install-package> <version> `removing'
# <conflicting-package> <version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package
case "$1" in
configure)
setup_directories
setup_apache
setup_config
setup_sql
setup_bpki
setup_cron
;;
abort-upgrade|abort-remove|abort-deconfigure)
;;
*)
echo "postinst called with unknown argument \`$1'" >&2
exit 1
;;
esac
# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.
#DEBHELPER#
exit 0
|
