From 1bf09aec527f0c817c541a73e0c3ced472a43c85 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sat, 13 Apr 2024 14:16:11 +0200
Subject: Adding debian version 2.4.1-3.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/kea-dhcp6-server.init | 64 +++++++++++++++++++++++---------------------
 1 file changed, 34 insertions(+), 30 deletions(-)

(limited to 'debian/kea-dhcp6-server.init')

diff --git a/debian/kea-dhcp6-server.init b/debian/kea-dhcp6-server.init
index 0aa0e27..7b57f01 100644
--- a/debian/kea-dhcp6-server.init
+++ b/debian/kea-dhcp6-server.init
@@ -6,9 +6,9 @@
 # Default-Start:     2 3 4 5
 # Default-Stop:      0 1 6
 # Short-Description: Kea DHCP IPv6 Server
-# Description:       <Enter a long description of the software>
-#                    <...>
-#                    <...>
+# Description:       Kea is an IPv4 and IPv6 DHCP server developed by Internet
+#                    Systems Consortium providing a very high-performance with
+#                    PostgreSQL, MySQL and memfile backends.
 ### END INIT INFO
 # Author: Adam Majer <adamm@zombino.com>
 # Do NOT "set -e"
@@ -19,11 +19,11 @@ DESC="kea-dhcp6"
 NAME=kea-dhcp6-server
 DAEMON=/usr/sbin/kea-dhcp6
 DAEMON_ARGS="-c /etc/kea/kea-dhcp6.conf"
-PIDFILE=/run/$NAME.pid
+DAEMONUSER=_kea
+PIDFILE=/run/kea/kea-dhcp6.kea-dhcp6.pid # depends on config-filename: https://kea.readthedocs.io/en/latest/arm/dhcp6-srv.html
 SCRIPTNAME=/etc/init.d/$NAME
-KEA_PIDFILE_DIR=/run/
-KEA_LOCKFILE_DIR=/run/lock/kea/
-KEA_LOGGER_DESTINATION=/var/log/kea/
+KEA_PIDFILE_DIR=/run/kea
+KEA_LOCKFILE_DIR=/run/lock/kea
 
 # Exit if the package is not installed
 [ -x "$DAEMON" ] || exit 0
@@ -43,22 +43,39 @@ create_lockfile_dir()
 {
 	if [ ! -d "$KEA_LOCKFILE_DIR" ]; then
 		mkdir -m 0750 -p "$KEA_LOCKFILE_DIR"
+		chown "$DAEMONUSER:" "$KEA_LOCKFILE_DIR"
 	fi
 }
 
+create_pidfile_dir()
+{
+	if [ ! -d "$KEA_PIDFILE_DIR" ]; then
+		mkdir -m 0750 -p "$KEA_PIDFILE_DIR"
+		chown "$DAEMONUSER:" "$KEA_PIDFILE_DIR"
+	fi
+}
+
+setcap_binary()
+{
+	setcap "cap_net_bind_service" $DAEMON
+}
+
 #
 # Function that starts the daemon/service
 #
 do_start()
 {
 	create_lockfile_dir
+	create_pidfile_dir
+	setcap_binary
+	export KEA_LOCKFILE_DIR
 	# Return
 	#   0 if daemon has been started
 	#   1 if daemon was already running
 	#   2 if daemon could not be started
 	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
 		|| return 1
-	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -b -- \
+	start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -b -c $DAEMONUSER -- \
 		$DAEMON_ARGS \
 		|| return 2
 }
@@ -73,7 +90,7 @@ do_stop()
 	#   1 if daemon was already stopped
 	#   2 if daemon could not be stopped
 	#   other if a failure occurred
-	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME
+	start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --exec $DAEMON --user $DAEMONUSER
 	RETVAL="$?"
 	[ "$RETVAL" = 2 ] && return 2
 	# Wait for children to finish too if this is a daemon that forks
@@ -82,7 +99,7 @@ do_stop()
 	# that waits for the process to drop all resources that could be
 	# needed by services started subsequently.  A last resort is to
 	# sleep for some time.
-	start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON
+	start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON --user $DAEMONUSER
 	[ "$?" = 2 ] && return 2
 	# Many daemons don't delete their pidfiles when they exit.
 	rm -f $PIDFILE
@@ -93,12 +110,7 @@ do_stop()
 # Function that sends a SIGHUP to the daemon/service
 #
 do_reload() {
-	#
-	# If the daemon can reload its configuration without
-	# restarting (for example, when it is sent a SIGHUP),
-	# then implement that here.
-	#
-	start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --name $NAME
+	start-stop-daemon --stop --signal 1 --quiet --pidfile $PIDFILE --exec $DAEMON --user $DAEMONUSER
 	return 0
 }
 
@@ -122,20 +134,12 @@ case "$1" in
   status)
 	status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $?
 	;;
-  #reload|force-reload)
-	#
-	# If do_reload() is not implemented then leave this commented out
-	# and leave 'force-reload' as an alias for 'restart'.
-	#
-	#log_daemon_msg "Reloading $DESC" "$NAME"
-	#do_reload
-	#log_end_msg $?
-	#;;
-  restart|force-reload)
-	#
-	# If the "reload" option is implemented then remove the
-	# 'force-reload' alias
-	#
+  reload|force-reload)
+	log_daemon_msg "Reloading $DESC" "$NAME"
+	do_reload
+	log_end_msg $?
+	;;
+  restart)
 	log_daemon_msg "Restarting $DESC" "$NAME"
 	do_stop
 	case "$?" in
-- 
cgit v1.2.3