add postinst script
authorFabian Grünbichler <f.gruenbichler@proxmox.com>
Wed, 13 Mar 2019 14:01:31 +0000 (15:01 +0100)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Thu, 14 Mar 2019 10:18:43 +0000 (11:18 +0100)
to reset auth key age until the first rotation has happened, otherwise
all currently existing tickets get invalidated immediately once the
rotation code gets enabled.

disabled until first PVE 6.0 package release

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
debian/postinst [new file with mode: 0755]

diff --git a/debian/postinst b/debian/postinst
new file mode 100755 (executable)
index 0000000..3dfc19c
--- /dev/null
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
+
+case "$1" in
+  configure)
+        # TODO: enable for PVE 6.0
+#    if test -n "$2"; then
+#
+#        # TODO: remove once PVE 7.0 is released
+#        if dpkg --compare-versions "$2" 'lt' '6.0-1'; then
+#            if test ! -e /etc/pve/authkey.pub.old; then
+#                # reset key age to prevent immediate invalidation of all current tickets
+#                touch -d "-2h" /etc/pve/authkey.pub  2>/dev/null || true
+#            fi
+#       fi
+#
+#    fi
+    ;;
+
+esac
+
+exit 0