Different method for refreshing gpg keys
This commit is contained in:
parent
f2c0f970eb
commit
4bae0f73ea
|
@ -5324,13 +5324,21 @@ function configure_gpg {
|
|||
}
|
||||
|
||||
function refresh_gpg_keys {
|
||||
if ! grep -q "${PROJECT_NAME}-sec --refresh yes" /etc/crontab; then
|
||||
GPG_REFRESH_TIME=$(( RANDOM % 60 ))
|
||||
if [ -f /usr/local/bin/freedombone-sec ]; then
|
||||
echo "$GPG_REFRESH_TIME */$REFRESH_GPG_KEYS_HOURS * * * root /usr/local/bin/${PROJECT_NAME}-sec --refresh yes > /dev/null" >> /etc/crontab
|
||||
else
|
||||
echo "$GPG_REFRESH_TIME */$REFRESH_GPG_KEYS_HOURS * * * root /usr/bin/${PROJECT_NAME}-sec --refresh yes > /dev/null" >> /etc/crontab
|
||||
REFRESH_GPG_KEYS_SCRIPT=/usr/bin/update-gpg-keys
|
||||
echo '#!/bin/bash' > $REFRESH_GPG_KEYS_SCRIPT
|
||||
echo "if [ -f /usr/local/bin/${PROJECT_NAME}-sec ]; then" >> $REFRESH_GPG_KEYS_SCRIPT
|
||||
echo " /usr/bin/timeout 600 /usr/local/bin/${PROJECT_NAME}-sec --refresh yes" >> $REFRESH_GPG_KEYS_SCRIPT
|
||||
echo 'else' >> $REFRESH_GPG_KEYS_SCRIPT
|
||||
echo " /usr/bin/timeout 600 /usr/bin/${PROJECT_NAME}-sec --refresh yes" >> $REFRESH_GPG_KEYS_SCRIPT
|
||||
echo 'fi' >> $REFRESH_GPG_KEYS_SCRIPT
|
||||
chmod +x $REFRESH_GPG_KEYS_SCRIPT
|
||||
|
||||
if grep -q "${PROJECT_NAME}-sec" /etc/crontab; then
|
||||
sed -i "/${PROJECT_NAME}-sec /d" /etc/crontab
|
||||
fi
|
||||
if ! grep -q "$REFRESH_GPG_KEYS_SCRIPT" /etc/crontab; then
|
||||
GPG_REFRESH_TIME=$(( RANDOM % 60 ))
|
||||
echo "$GPG_REFRESH_TIME */$REFRESH_GPG_KEYS_HOURS * * * root $REFRESH_GPG_KEYS_SCRIPT" >> /etc/crontab
|
||||
systemctl restart cron
|
||||
fi
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue