-add CS-helpers to Debian package

This commit is contained in:
Christian Grothoff 2022-02-22 13:29:52 +01:00
parent 3cd6156513
commit 0141a82161
No known key found for this signature in database
GPG Key ID: 939E6BE1E29FC3CC
4 changed files with 24 additions and 2 deletions

View File

@ -2,6 +2,7 @@ usr/bin/taler-exchange-aggregator
usr/bin/taler-exchange-closer usr/bin/taler-exchange-closer
usr/bin/taler-exchange-dbinit usr/bin/taler-exchange-dbinit
usr/bin/taler-exchange-httpd usr/bin/taler-exchange-httpd
usr/bin/taler-exchange-secmod-cs
usr/bin/taler-exchange-secmod-eddsa usr/bin/taler-exchange-secmod-eddsa
usr/bin/taler-exchange-secmod-rsa usr/bin/taler-exchange-secmod-rsa
usr/bin/taler-exchange-transfer usr/bin/taler-exchange-transfer
@ -13,6 +14,7 @@ usr/share/man/man1/taler-exchange-dbinit*
usr/share/man/man1/taler-exchange-httpd* usr/share/man/man1/taler-exchange-httpd*
usr/share/man/man1/taler-exchange-secmod-eddsa* usr/share/man/man1/taler-exchange-secmod-eddsa*
usr/share/man/man1/taler-exchange-secmod-rsa* usr/share/man/man1/taler-exchange-secmod-rsa*
usr/share/man/man1/taler-exchange-secmod-cs*
usr/share/man/man1/taler-exchange-transfer* usr/share/man/man1/taler-exchange-transfer*
usr/share/man/man1/taler-exchange-wirewatch* usr/share/man/man1/taler-exchange-wirewatch*
usr/share/man/man1/taler-bank* usr/share/man/man1/taler-bank*

View File

@ -9,6 +9,7 @@ _GROUPNAME=taler-exchange-secmod
_DBGROUPNAME=taler-exchange-db _DBGROUPNAME=taler-exchange-db
_EUSERNAME=taler-exchange-httpd _EUSERNAME=taler-exchange-httpd
_CLOSERUSERNAME=taler-exchange-closer _CLOSERUSERNAME=taler-exchange-closer
_CSECUSERNAME=taler-exchange-secmod-cs
_RSECUSERNAME=taler-exchange-secmod-rsa _RSECUSERNAME=taler-exchange-secmod-rsa
_ESECUSERNAME=taler-exchange-secmod-eddsa _ESECUSERNAME=taler-exchange-secmod-eddsa
_AGGRUSERNAME=taler-exchange-aggregator _AGGRUSERNAME=taler-exchange-aggregator
@ -33,6 +34,9 @@ configure)
if ! getent passwd ${_RSECUSERNAME} >/dev/null; then if ! getent passwd ${_RSECUSERNAME} >/dev/null; then
adduser --quiet --system --no-create-home --ingroup ${_GROUPNAME} --home ${TALER_HOME} ${_RSECUSERNAME} adduser --quiet --system --no-create-home --ingroup ${_GROUPNAME} --home ${TALER_HOME} ${_RSECUSERNAME}
fi fi
if ! getent passwd ${_CSECUSERNAME} >/dev/null; then
adduser --quiet --system --no-create-home --ingroup ${_GROUPNAME} --home ${TALER_HOME} ${_CSECUSERNAME}
fi
if ! getent passwd ${_ESECUSERNAME} >/dev/null; then if ! getent passwd ${_ESECUSERNAME} >/dev/null; then
adduser --quiet --system --no-create-home --ingroup ${_GROUPNAME} --home ${TALER_HOME} ${_ESECUSERNAME} adduser --quiet --system --no-create-home --ingroup ${_GROUPNAME} --home ${TALER_HOME} ${_ESECUSERNAME}
fi fi

View File

@ -1,8 +1,8 @@
[Unit] [Unit]
Description=GNU Taler payment system exchange REST API Description=GNU Taler payment system exchange REST API
AssertPathExists=/run/taler/exchange-httpd AssertPathExists=/run/taler/exchange-httpd
Requires=taler-exchange-httpd.socket taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service Requires=taler-exchange-httpd.socket taler-exchange-secmod-cs.service taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service
After=postgres.service network.target taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service After=postgres.service network.target taler-exchange-secmod-cs.service taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service
PartOf=taler-exchange.target PartOf=taler-exchange.target
[Service] [Service]

View File

@ -0,0 +1,16 @@
[Unit]
Description=GNU Taler payment system exchange CS security module
AssertPathExists=/run/taler/exchange-secmod-cs
PartOf=taler-exchange.target
[Service]
User=taler-exchange-secmod-cs
Type=simple
Restart=always
RestartSec=100ms
ExecStart=/usr/bin/taler-exchange-secmod-cs -c /etc/taler/taler.conf
StandardOutput=journal
StandardError=journal
PrivateTmp=no
PrivateDevices=yes
ProtectSystem=full