4089aed6d0
- Remove unused hooks directory - Introduced a directory for custom post-run hooks executed as root, see README.SUSE for details. (not to be confused with the native hooks run as dehyrated user) - Clarify necessity of enabling dehydrated.timer in README.SUSE - Submit to SLE15 as per fate#323377 - Add optional post run hook directory, executed by cron/systemd after dehydrated --cron has run - Remove hook directory intended for packaging other native hooks. Will be approach differently OBS-URL: https://build.opensuse.org/request/show/531761 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=13
15 lines
441 B
SYSTEMD
15 lines
441 B
SYSTEMD
[Unit]
|
|
Description=Certificate Update Runner for Dehydrated
|
|
ConditionPathExists=/etc/dehydrated/config
|
|
After=network-online.target
|
|
Wants=acmeresponder.socket
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStartPre-=/usr/bin/sh -c 'for i in $(find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f); do $i; done;'
|
|
ExecStart=/usr/bin/dehydrated --cron
|
|
|
|
# dehydrated --cron will drop permissions and run critical code as dehydrated user.
|
|
User=root
|
|
Group=root
|