blob: 55394d3347544a548afde77c78f8c42f40cdf70b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
VAR_LIB=/var/lib/nordlayer
NORDLAYER_RESOLVCONF=/usr/bin/nordlayer-resolvconf
post_install() {
# Allow the daemon executable to bind to port 500 and administer network
setcap CAP_NET_BIND_SERVICE,CAP_NET_ADMIN,CAP_NET_RAW+eip /usr/bin/nordlayerd
setcap CAP_NET_BIND_SERVICE,CAP_NET_ADMIN,CAP_NET_RAW+eip /usr/bin/nordlayer-openvpn
groupadd -r -f nordlayer
groupadd -r -f nordlayer-resolve
if ! id "nordlayer" >/dev/null 2>&1; then
useradd -s /usr/bin/nologin -c "Used for running NordLayer" -r -M -d /run/nordlayer -g nordlayer nordlayer
fi
usermod -a -G nordlayer-resolve nordlayer
mkdir -p ${VAR_LIB}
chmod 0770 -R ${VAR_LIB}
chown nordlayer:nordlayer -R ${VAR_LIB}
chown root:nordlayer-resolve ${NORDLAYER_RESOLVCONF}
chmod 4750 ${NORDLAYER_RESOLVCONF}
# Reload config
systemctl daemon-reload
# Create tmpfiles
systemd-tmpfiles --create
# Start service on boot
systemctl enable nordlayer.socket
systemctl enable nordlayer.service
# Restart service now
systemctl start nordlayer.socket
systemctl start nordlayer.service
}
post_upgrade() {
post_install
}
pre_remove() {
rm -rf ${VAR_LIB}
systemctl disable nordlayer.service
systemctl disable nordlayer.socket
systemctl stop nordlayer.service
systemctl stop nordlayer.socket
}
|