summaryrefslogtreecommitdiffstats
path: root/debian/buildd.postinst
blob: ad5d7364356c1d20f791032423d2eabc82933b30 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
#! /bin/sh
# postinst script for buildd
#
# see: dh_installdeb(1)

set -e

# summary of how this script can be called:
#        * <postinst> `configure' <most-recently-configured-version>
#        * <old-postinst> `abort-upgrade' <new version>
#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
#          <new-version>
#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
#          <failed-install-package> <version> `removing'
#          <conflicting-package> <version>
# for details, see /usr/share/doc/packaging-manual/
#
# quoting from the policy:
#     Any necessary prompting should almost always be confined to the
#     post-installation script, and should be protected with a conditional
#     so that unnecessary prompting doesn't happen if a package's
#     installation fails and the `postinst' is called with `abort-upgrade',
#     `abort-remove' or `abort-deconfigure'.

case "$1" in
    configure)

        if ! getent passwd buildd > /dev/null; then
            adduser --system --quiet --home /var/lib/buildd --no-create-home \
		--shell /bin/bash --group --gecos "Debian build daemon" buildd
        fi
	# Unlock account in case it was locked from previous purge.
	usermod -U -e '' buildd || true

        # check validity of buildd user and group
	if [ "$(id -u buildd)" -eq 0 ]; then
            echo "The buildd system user must not have uid 0 (root).
Please fix this and reinstall this package." >&2
            exit 1
	fi
	if [ "$(id -g buildd)" -eq 0 ]; then
            echo "The buildd system user must not have root as primary group.
Please fix this and reinstall this package." >&2
            exit 1
	fi

	# Home directory ownership
        chown buildd:buildd /var/lib/buildd
	chown buildd:buildd /var/lib/buildd/.forward
	chown buildd:buildd /var/lib/buildd/.ssh
	chown buildd:buildd /var/lib/buildd/build
	chown buildd:buildd /var/lib/buildd/logs
	chown buildd:buildd /var/lib/buildd/mqueue
	chown buildd:buildd /var/lib/buildd/old-logs
	chown buildd:buildd /var/lib/buildd/stats
	chown buildd:buildd /var/lib/buildd/stats/graphs
	chown buildd:buildd /var/lib/buildd/upload
	chown buildd:buildd /var/lib/buildd/upload-security

	# Home directory permissions
        chmod 2770 /var/lib/buildd
	chmod 2640 /var/lib/buildd/.forward
	chmod 2700 /var/lib/buildd/.ssh
	chmod 2770 /var/lib/buildd/build
	chmod 2770 /var/lib/buildd/logs
	chmod 2770 /var/lib/buildd/mqueue
	chmod 2770 /var/lib/buildd/old-logs
	chmod 2770 /var/lib/buildd/stats
	chmod 2770 /var/lib/buildd/stats/graphs
	chmod 2770 /var/lib/buildd/upload
	chmod 2770 /var/lib/buildd/upload-security

        # Drop the irrelevant options run-setup-scripts / run-exec-scripts, see #579926
	# Use buildd/config in place of old script-defaults.buildd
        find /etc/schroot/chroot.d/ -name 'buildd-*' -print0 | xargs -0 -r sed -e 's/^run-setup-scripts=/#&/' -e 's/^run-exec-scripts=/#&/' -e 's;^script-config=script-defaults\.buildd;script-config=buildd/config;' -i
        # for wheezy-upgrades, replace script-config by profile
        find /etc/schroot/chroot.d/ -name 'buildd-*' -print0 | xargs -0 -r sed -e 's;^script-config=buildd/config;profile=buildd;' -i

        ;;

    abort-upgrade|abort-remove|abort-deconfigure)

        ;;

    *)

        echo "postinst called with unknown argument \`$1'" >&2
        exit 0

	;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0