1 [[!meta title="debian packaging postinst script clobbers gpg.conf settings in /var/lib/monkeysphere" ]]
3 Do we want to allow the system administrator to make adjustments to
4 the `gpg.conf` config files found in `/var/lib/monkeysphere`? At the
5 moment, there are two such files:
7 * `/var/lib/monkeysphere/gnupg-authentication/gpg.conf`
8 * `/var/lib/monkeysphere/gnupg-host/gpg.conf`
10 In the debian postinst scripts (`debian/monkeysphere.postinst`), the
11 contents of those files are overwritten on every upgrade/reinstall,
12 effectively clobbering any changes made by the local admin.
14 Maybe we *do* want to do this clobbering, though. Stuff in `/var` is
15 generally not expected to be modified by hand. I see two possible
18 * when we clobber those files, include a comment along the lines of:
19 # do not make changes to this file! It is overwritten on each upgrade!
21 * Avoid clobbering the files, and treat them as config files.
23 the latter approach suggests that they should be more properly stored
24 in `/etc/`, though. This would give us all the conf-file tracking
25 apparatus, which is nice. If we do want to do that, I guess we'd
26 symlink to them from the monkeysphere-specific `$GNUPGHOME`s in
27 `/var/lib/monkeysphere`, since `gpg` does not seem to allow for
28 overriding the location of the `gpg.conf` independent of `$GNUPGHOME`.
32 All the gpg.conf files now reside in /etc/monkeysphere, and are linked
33 in into the GNUPGHOMEs in /var/lib/monkeysphere.
35 [[bugs/done]] on 2008-10-11