# Add the onak user
adduser --system --home /var/lib/onak --no-create-home --disabled-login onak
- #
- # If there's no onak database, create it by adding my key.
#
- if [ ! -e /var/lib/onak/num_keydb ]; then
+ # If we're using a default config and there's no onak database, create it
+ # by adding my key.
+ #
+ if grep -q "^db_dir /var/lib/onak" /etc/onak.conf &&
+ grep -q "^db_backend db4" /etc/onak.conf &&
+ [ ! -e /var/lib/onak/num_keydb -a \
+ -e /usr/share/doc/onak/noodles.key.gz ]; then
zcat /usr/share/doc/onak/noodles.key | onak -b add
fi
fi
#DEBHELPER#
+
+#
+# With the move to systemd this will force systemd to start keyd even if it's
+# disabled in the onak config file; the systemd service file can't check the
+# way the init script does. Work around this by doing the check here and
+# only calling invoke-rc.d if it's actually enabled.
+#
+if grep -q -E '^use_keyd *(true|yes|1)$' /etc/onak.conf; then
+ invoke-rc.d onak start || exit $?
+fi