packaging: use non-interactive mode for pam-auth-update in d/postinst

Force non-interactive mode to avoid useless debconf message
about conflict between sss and yourdev profiles.

Solves #12
This commit is contained in:
Michel Decima
2025-02-05 09:02:15 +01:00
parent f3b9b7020e
commit 4d5cfa9d91

16
debian/postinst vendored
View File

@@ -11,8 +11,8 @@ case "$1" in
fi fi
# Configure NSS for pam-pkcs11 and pam-sss # Configure NSS for pam-pkcs11 and pam-sss
mkdir -p /etc/pki/nssdb mkdir -p /etc/pki/nssdb
orange-certupdate /etc/pki/nssdb >/dev/null || true orange-certupdate /etc/pki/nssdb >/dev/null || true
orange-dongle-aladdin --force update /etc/pki/nssdb || true orange-dongle-aladdin --force update /etc/pki/nssdb || true
# Configure certificates for SSSD (OpenSSL) # Configure certificates for SSSD (OpenSSL)
@@ -33,11 +33,13 @@ case "$1" in
# a config file in dir /usr/share/pam-configs. # a config file in dir /usr/share/pam-configs.
fi fi
# Configure PAM # Configure PAM
pam-auth-update --package \ # Force non-interactive mode to avoid useless debconf message
--remove sss krb5 \ # about conflict between sss and yourdev profiles (see #12)
--enable yourdev ccreds-check ccreds-save || true DEBIAN_FRONTEND=noninteractive pam-auth-update --package \
for profile in sss krb5 yourdev ; do --remove sss krb5 \
--enable yourdev ccreds-check ccreds-save || true
for profile in sss krb5 yourdev ; do
grep -qw "$profile" /var/lib/pam/seen \ grep -qw "$profile" /var/lib/pam/seen \
|| echo "$profile" >> /var/lib/pam/seen || true || echo "$profile" >> /var/lib/pam/seen || true
done done