summaryrefslogtreecommitdiff
path: root/microservices/03-resource-server/linux/deb/package/DEBIAN/postinst
diff options
context:
space:
mode:
authorKamal Wickramanayake <kamal@inbox.lk>2026-07-03 21:10:32 +0530
committerKamal Wickramanayake <kamal@inbox.lk>2026-07-03 21:10:32 +0530
commita0f3f5a069153c46ac3a85fa75c3ec50fea6ea99 (patch)
tree6e97c9b87c314a8a64a25d3ffe10e710db1740fc /microservices/03-resource-server/linux/deb/package/DEBIAN/postinst
parentaa122113ade36f02dc8fdbebdf1232b5c4b8742c (diff)
Added Linux deb file creation scripts and build-all.sh
Diffstat (limited to 'microservices/03-resource-server/linux/deb/package/DEBIAN/postinst')
-rwxr-xr-xmicroservices/03-resource-server/linux/deb/package/DEBIAN/postinst59
1 files changed, 59 insertions, 0 deletions
diff --git a/microservices/03-resource-server/linux/deb/package/DEBIAN/postinst b/microservices/03-resource-server/linux/deb/package/DEBIAN/postinst
new file mode 100755
index 0000000..247d430
--- /dev/null
+++ b/microservices/03-resource-server/linux/deb/package/DEBIAN/postinst
@@ -0,0 +1,59 @@
+#!/bin/bash
+
+# Stop on error
+set -e
+
+if [ "$1" == "configure" ] && [ -z "$2" ]; then
+ # Code here executes only during package install (but not during upgrade)
+
+ # Create a system user
+ # -r: System user
+ # -s /sbin/nologin: Prevent the user from logging into the system interactively
+ # -d /var/lib/ceit-fs-resource-server: Set home directory of user
+ # ceit-fs-resource-server: Username
+ useradd -r -s /sbin/nologin -d /var/lib/ceit-fs-resource-server ceit-fs-resource-server || true
+
+fi
+
+# Set directory ownership and permissions - Application jar file not to be read by other system users
+chown -R root:ceit-fs-resource-server /opt/ceit/ceit-fs-resource-server
+chmod 755 /opt/ceit
+chmod 750 /opt/ceit/ceit-fs-resource-server
+chmod 750 /opt/ceit/ceit-fs-resource-server/app
+chmod 640 /opt/ceit/ceit-fs-resource-server/app/ceit-fs-resource-server.jar
+
+# Set directory ownership and permissions - Config files not to be read by other system users
+chown -R root:ceit-fs-resource-server /etc/ceit-fs-resource-server
+chmod 750 /etc/ceit-fs-resource-server
+chmod 640 /etc/ceit-fs-resource-server/application.yaml
+chmod 640 /etc/ceit-fs-resource-server/environment.env
+
+if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
+ if [ -d /run/systemd/system ]; then
+ # Reload systemd service configurations
+ systemctl daemon-reload > /dev/null || true
+
+ if [ -n "$2" ]; then
+ # Upgrade
+ # Restart service
+ if systemctl is-enabled ceit-fs-resource-server > /dev/null; then
+ systemctl start ceit-fs-resource-server
+ fi
+ else
+ # First install (not upgrade)
+ # Enable service to start at boot time
+ systemctl enable ceit-fs-resource-server
+ # Start service
+ systemctl start ceit-fs-resource-server
+ fi
+ fi
+fi
+
+if [ "$1" == "configure" ] && [ -z "$2" ]; then
+ # Code here executes only during package install (but not during upgrade)
+ echo "[INFO] ceit-fs-resource-server service installed."
+ echo "[INFO] Update /etc/ceit-fs-resource-server/application.yaml to update the configuration."
+ echo "[INFO] By default, TCP port 8085 is used by the installed server."
+ echo "[INFO] To allow access from remote systems, you may have to enable firewall for example by running:"
+ echo "[INFO] ufw allow 8085/tcp"
+fi