rpm/dehydrated
SHA256
1
0
Fork 0
forked from pool/dehydrated
Code Pull Requests Activity
dd7fda6243
dehydrated/dehydrated.service.in

16 lines
527 B
SYSTEMD
Raw Normal View History

Accepting request 527349 from home:dmolkentin:branches:security:dehydrated - Swap statements in post: installing services requires tmp.d - (Weak) dependency on dehydrated-acmeresponder. - systemd update service: ConditionPathExists goes into [Unit] section - Use timer instead of cron for systemd-enabled distros OBS-URL: https://build.opensuse.org/request/show/527349 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=10
2017-09-19 17:42:45 +02:00
[Unit]
Description=Certificate Update Runner for Dehydrated
ConditionPathExists=/etc/dehydrated/config
After=network-online.target
Wants=acmeresponder.socket
[Service]
Type=oneshot
Accepting request 534491 from home:dmolkentin:branches:security:dehydrated - Commands in service files need some escaping after all. Fix ExecStartPost. OBS-URL: https://build.opensuse.org/request/show/534491 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=16
2017-10-17 16:48:54 +02:00
ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} \;
- actually try to find the real path to bash and don't hardcode /usr/bin/bash OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=18
2017-10-20 12:57:53 +02:00
EnvironmentFile=/etc/dehydrated/config
ExecStart=/usr/bin/su -s /bin/bash -c "/usr/bin/dehydrated --cron" -g $DEHYDRATED_GROUP $DEHYDRATED_USER
Accepting request 527349 from home:dmolkentin:branches:security:dehydrated - Swap statements in post: installing services requires tmp.d - (Weak) dependency on dehydrated-acmeresponder. - systemd update service: ConditionPathExists goes into [Unit] section - Use timer instead of cron for systemd-enabled distros OBS-URL: https://build.opensuse.org/request/show/527349 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=10
2017-09-19 17:42:45 +02:00
Accepting request 531761 from home:dmolkentin:branches:security:dehydrated - Remove unused hooks directory - Introduced a directory for custom post-run hooks executed as root, see README.SUSE for details. (not to be confused with the native hooks run as dehyrated user) - Clarify necessity of enabling dehydrated.timer in README.SUSE - Submit to SLE15 as per fate#323377 - Add optional post run hook directory, executed by cron/systemd after dehydrated --cron has run - Remove hook directory intended for packaging other native hooks. Will be approach differently OBS-URL: https://build.opensuse.org/request/show/531761 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=13
2017-10-06 12:52:01 +02:00
# dehydrated --cron will drop permissions and run critical code as dehydrated user.
User=root
Group=root
Copy Permalink