File: //var/lib/dpkg/info/ntpsec.postinst
#!/bin/sh
set -e
if [ "$1" = "configure" ]; then
# Mask ntpsec.timer. This unit does not exist, but masking it will
# cause systemd-cron to skip converting /etc/cron.d/ntpsec. This
# package provides equivalent systemd units directly.
ln -sf /dev/null /etc/systemd/system/ntpsec.timer
# This code is duplicated in the ntpsec-ntpviz postinst:
addgroup --system --quiet ntpsec
adduser --system --quiet --ingroup ntpsec \
--no-create-home --home /nonexistent ntpsec
install -o ntpsec -g ntpsec -d /var/lib/ntpsec
if [ -z "$2" ]; then
# This is a new install. Copy bits from ntp, if present, to
# make it easy for users to transition.
if [ -e /etc/ntp.keys ] && ! [ -e /etc/ntpsec/ntp.keys ]; then
cp -p /etc/ntp.keys /etc/ntpsec/ntp.keys
chgrp ntpsec /etc/ntpsec/ntp.keys
chmod 640 /etc/ntpsec/ntp.keys
sed -i "s|/etc/ntp\\.keys|/etc/ntpsec/ntp.keys|g" \
/etc/ntpsec/ntp.conf /etc/ntpsec/ntp.d/*.conf \
2> /dev/null || true
fi
if [ -e /run/ntp.conf.dhcp ]; then
mkdir -p /run/ntpsec
cp /run/ntp.conf.dhcp /run/ntpsec/
fi
if [ -e /var/lib/ntp/ntp.drift ]
then
cp /var/lib/ntp/ntp.drift /var/lib/ntpsec/ntp.drift
chown ntpsec:ntpsec /var/lib/ntpsec/ntp.drift
chmod 644 /var/lib/ntpsec/ntp.drift
fi
if [ -n "$(ls -A /var/log/ntpstats 2> /dev/null)" ]; then
# /var/log/ntpstats exists and is not empty.
# NOTE: /var/log/ntpsec may or may not exist.
install -o ntpsec -g ntpsec -d /var/log/ntpsec
cp -a /var/log/ntpstats/* /var/log/ntpsec
chown ntpsec:ntpsec /var/log/ntpsec/*
fi
else
if dpkg --compare-versions "$2" le-nl "1.1.0+dfsg1-2~"; then
# We are transitioning from an old version of ntpsec.
rm -f \
/etc/systemd/system/multi-user.target.wants/ntp.service \
/etc/systemd/system/ntp.service.wants/ntplogtemp.timer \
/etc/systemd/system/ntp.service.wants/ntpviz-daily.timer \
/etc/systemd/system/ntp.service.wants/ntpviz-weekly.timer \
/etc/systemd/system/timers.target.wants/ntp-rotate-stats.timer \
/etc/systemd/system/time-sync.target.wants/ntp-wait.service
rmdir /etc/systemd/system/ntp.service.wants 2>/dev/null || true
if [ -e /run/ntp.conf.dhcp ]; then
mkdir -p /run/ntpsec
mv -n /run/ntp.conf.dhcp /run/ntpsec/
rm -f /run/ntp.conf.dhcp
fi
if [ -e /var/lib/ntp/ntp.drift ]; then
mv -n /var/lib/ntp/ntp.drift /var/lib/ntpsec/ntp.drift
chown ntpsec:ntpsec /var/lib/ntpsec/ntp.drift
chmod 644 /var/lib/ntpsec/ntp.drift
rm -f /var/lib/ntp/ntp.drift
rmdir /var/lib/ntp 2> /dev/null || true
fi
if [ -e /var/log/ntpstats ]; then
# This is specifically written this way, rather than
# just a mv and chown, to be safe in various
# scenarios. These include:
# A) if ntpsec-ntpviz is configured first and thus
# created /var/log/ntpsec
# B) if this fails partway through and has to be
# restarted
install -o ntpsec -g ntpsec -d /var/log/ntpsec
mv -n /var/log/ntpstats/* /var/log/ntpsec
chown ntpsec:ntpsec /var/log/ntpsec/*
rmdir /var/log/ntpstats 2> /dev/null || true
fi
if [ -e /etc/ntp.d ]; then
mkdir -p /etc/ntpsec/ntp.d
mv -n /etc/ntp.d/*.conf /etc/ntpsec/ntp.d \
2> /dev/null || true
rmdir /etc/ntp.d 2> /dev/null || true
fi
fi
if dpkg --compare-versions "$2" le-nl "1.1.8+dfsg1-2~"; then
if [ -e /etc/ntp.keys ] && ! [ -e /etc/ntpsec/ntp.keys ]; then
mv /etc/ntp.keys /etc/ntpsec/ntp.keys
chgrp ntpsec /etc/ntpsec/ntp.keys
chmod 640 /etc/ntpsec/ntp.keys
sed -i "s|/etc/ntp\\.keys|/etc/ntpsec/ntp.keys|g" \
/etc/ntpsec/ntp.conf /etc/ntpsec/ntp.d/*.conf \
2> /dev/null || true
fi
fi
fi
fi
# These are included manually, as they need to run before the DEBHELPER
# block, as that is where the service is restarted.
dpkg-maintscript-helper mv_conffile /etc/default/ntp /etc/default/ntpsec 1.1.0\+dfsg1-2\~ ntpsec -- "$@"
dpkg-maintscript-helper mv_conffile /etc/init.d/ntp /etc/init.d/ntpsec 1.1.0\+dfsg1-2\~ ntpsec -- "$@"
dpkg-maintscript-helper mv_conffile /etc/ntp.conf /etc/ntpsec/ntp.conf 1.1.0\+dfsg1-2\~ ntpsec -- "$@"
if [ "$1" = "triggered" ]; then
# The default configuration uses a leapfile from tzdata, so
# we need to restart on changes.
invoke-rc.d ntpsec try-restart || true
fi
installinit_error() {
exit $?
}
# Automatically added by dh_apparmor/3.0.8-3
if [ "$1" = "configure" ]; then
APP_PROFILE="/etc/apparmor.d/usr.sbin.ntpd"
if [ -f "$APP_PROFILE" ]; then
# Add the local/ include
LOCAL_APP_PROFILE="/etc/apparmor.d/local/usr.sbin.ntpd"
test -e "$LOCAL_APP_PROFILE" || {
mkdir -p `dirname "$LOCAL_APP_PROFILE"`
install --mode 644 /dev/null "$LOCAL_APP_PROFILE"
}
# Reload the profile, including any abstraction updates
if aa-enabled --quiet 2>/dev/null; then
apparmor_parser -r -T -W "$APP_PROFILE" || true
fi
fi
fi
# End automatically added section
# Automatically added by dh_installinit/13.11.4
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
if [ -z "${DPKG_ROOT:-}" ] && [ -x "/etc/init.d/ntpsec" ]; then
update-rc.d ntpsec defaults >/dev/null
if [ -n "$2" ]; then
_dh_action=restart
else
_dh_action=start
fi
invoke-rc.d --skip-systemd-native ntpsec $_dh_action || installinit_error
fi
fi
# End automatically added section
# Automatically added by dh_installsystemd/13.11.4
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
# The following line should be removed in trixie or trixie+1
deb-systemd-helper unmask 'ntpsec-rotate-stats.timer' >/dev/null || true
# was-enabled defaults to true, so new installations run enable.
if deb-systemd-helper --quiet was-enabled 'ntpsec-rotate-stats.timer'; then
# Enables the unit on first installation, creates new
# symlinks on upgrades if the unit file has changed.
deb-systemd-helper enable 'ntpsec-rotate-stats.timer' >/dev/null || true
else
# Update the statefile to add new symlinks (if any), which need to be
# cleaned up on purge. Also remove old symlinks.
deb-systemd-helper update-state 'ntpsec-rotate-stats.timer' >/dev/null || true
fi
fi
# End automatically added section
# Automatically added by dh_installsystemd/13.11.4
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
# The following line should be removed in trixie or trixie+1
deb-systemd-helper unmask 'ntpsec-systemd-netif.path' >/dev/null || true
# was-enabled defaults to true, so new installations run enable.
if deb-systemd-helper --quiet was-enabled 'ntpsec-systemd-netif.path'; then
# Enables the unit on first installation, creates new
# symlinks on upgrades if the unit file has changed.
deb-systemd-helper enable 'ntpsec-systemd-netif.path' >/dev/null || true
else
# Update the statefile to add new symlinks (if any), which need to be
# cleaned up on purge. Also remove old symlinks.
deb-systemd-helper update-state 'ntpsec-systemd-netif.path' >/dev/null || true
fi
fi
# End automatically added section
# Automatically added by dh_installsystemd/13.11.4
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
# The following line should be removed in trixie or trixie+1
deb-systemd-helper unmask 'ntpsec.service' >/dev/null || true
# was-enabled defaults to true, so new installations run enable.
if deb-systemd-helper --quiet was-enabled 'ntpsec.service'; then
# Enables the unit on first installation, creates new
# symlinks on upgrades if the unit file has changed.
deb-systemd-helper enable 'ntpsec.service' >/dev/null || true
else
# Update the statefile to add new symlinks (if any), which need to be
# cleaned up on purge. Also remove old symlinks.
deb-systemd-helper update-state 'ntpsec.service' >/dev/null || true
fi
fi
# End automatically added section
# Automatically added by dh_installsystemd/13.11.4
if [ "$1" = "configure" ] || [ "$1" = "abort-upgrade" ] || [ "$1" = "abort-deconfigure" ] || [ "$1" = "abort-remove" ] ; then
if [ -d /run/systemd/system ]; then
systemctl --system daemon-reload >/dev/null || true
if [ -n "$2" ]; then
_dh_action=restart
else
_dh_action=start
fi
deb-systemd-invoke $_dh_action 'ntpsec-rotate-stats.timer' 'ntpsec-systemd-netif.path' 'ntpsec.service' >/dev/null || true
fi
fi
# End automatically added section
if [ "$1" = "configure" ] && [ -n "$2" ] &&
dpkg --compare-versions "$2" le-nl "1.1.0+dfsg1-2~"; then
# We have completed the transition of ntpsec to its own user.
if ! dpkg -s ntp > /dev/null 2>&1; then
deluser --system --quiet ntp || true
fi
fi