summaryrefslogtreecommitdiffstats
path: root/dehydrated/share/hooks/exit_hook.zz-chrony
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@open-infrastructure.net>2022-07-07 10:20:07 +0000
committerDaniel Baumann <daniel.baumann@open-infrastructure.net>2022-07-07 14:14:23 +0000
commit5fe792ad41fb7f4c30cc03aebcff301f69885700 (patch)
tree145424d9b653853eecd96f0044e805214c4a4d6e /dehydrated/share/hooks/exit_hook.zz-chrony
parentMerging the different extra certificate files into one dehydrated hook handli... (diff)
downloadservice-tools-5fe792ad41fb7f4c30cc03aebcff301f69885700.tar.xz
service-tools-5fe792ad41fb7f4c30cc03aebcff301f69885700.zip
Reworking chrony workaround (#1013882) now that we know it's going to be permanent.
Signed-off-by: Daniel Baumann <daniel.baumann@open-infrastructure.net>
Diffstat (limited to 'dehydrated/share/hooks/exit_hook.zz-chrony')
-rwxr-xr-xdehydrated/share/hooks/exit_hook.zz-chrony42
1 files changed, 0 insertions, 42 deletions
diff --git a/dehydrated/share/hooks/exit_hook.zz-chrony b/dehydrated/share/hooks/exit_hook.zz-chrony
deleted file mode 100755
index 13a7e9a..0000000
--- a/dehydrated/share/hooks/exit_hook.zz-chrony
+++ /dev/null
@@ -1,42 +0,0 @@
-#!/bin/sh
-
-# Open Infrastructure: service-tools
-
-# Copyright (C) 2014-2022 Daniel Baumann <daniel.baumann@open-infrastructure.net>
-#
-# SPDX-License-Identifier: GPL-3.0+
-#
-# This program is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program. If not, see <https://www.gnu.org/licenses/>.
-
-set -e
-
-if grep -r -qs -E '^ntsserver(cert|key)' /etc/chrony
-then
- echo -n " + chrony (workaround):"
-
- # https://bugs.debian.org/1013882
- HOST="$(cat /etc/hostname)"
-
- cp -L "/var/lib/dehydrated/certs/${HOST}/fullchain.pem" /etc/chrony/cert.pem
- cp -L "/var/lib/dehydrated/certs/${HOST}/privkey.pem" /etc/chrony/key.pem
-
- chown _chrony:_chrony /etc/chrony/cert.pem /etc/chrony/key.pem
-
- if service chrony status > /dev/null 2>&1
- then
- service chrony restart
- fi
-
- echo " done."
-fi