hobo piwik : add and use hobo-piwik user(#10226)

debian/agent/settings.py

@@ -26,6 +26,7 @@ WELCO_MANAGE_COMMAND = 'sudo -u welco /usr/bin/welco-manage'
 MANDAYEJS_MANAGE_COMMAND = 'sudo -u mandayejs /usr/bin/mandayejs-manage'
 CHRONO_MANAGE_COMMAND = 'sudo -u chrono /usr/bin/chrono-manage'
 CORBO_MANAGE_COMMAND = 'sudo -u corbo /usr/bin/corbo-manage'
+PIWIK_MANAGE_COMMAND = 'sudo -u hobo-piwik /usr/bin/piwik-manage.py'
 
 CELERY_SETTINGS = {
     'CELERY_SEND_TASK_ERROR_EMAILS': True,

debian/agent/sudo-hobo-agent

@@ -6,8 +6,8 @@ hobo-agent ALL=(fargo)NOPASSWD:/usr/bin/fargo-manage hobo_deploy * -
 hobo-agent ALL=(welco)NOPASSWD:/usr/bin/welco-manage hobo_deploy * -
 hobo-agent ALL=(mandayejs)NOPASSWD:/usr/bin/mandayejs-manage hobo_deploy * -
 hobo-agent ALL=(chrono)NOPASSWD:/usr/bin/chrono-manage hobo_deploy * -
-hobo-agent ALL=(piwik)NOPASSWD:/usr/bin/piwik-manage hobo_deploy * -
 hobo-agent ALL=(corbo)NOPASSWD:/usr/bin/corbo-manage hobo_deploy * -
+hobo-agent ALL=(hobo-piwik)NOPASSWD:/usr/bin/piwik-manage hobo_deploy * -
 
 hobo-agent ALL=(wcs-au-quotidien)NOPASSWD:/usr/sbin/wcsctl -f /etc/wcs/wcs-au-quotidien.cfg hobo_notify -
 hobo-agent ALL=(authentic-multitenant)NOPASSWD:/usr/bin/authentic2-multitenant-manage hobo_notify -
@@ -18,3 +18,4 @@ hobo-agent ALL=(welco)NOPASSWD:/usr/bin/welco-manage hobo_notify -
 hobo-agent ALL=(mandayejs)NOPASSWD:/usr/bin/mandayejs-manage hobo_notify -
 hobo-agent ALL=(chrono)NOPASSWD:/usr/bin/chrono-manage hobo_notify -
 hobo-agent ALL=(corbo)NOPASSWD:/usr/bin/corbo-manage hobo_notify -
+hobo-agent ALL=(hobo-piwik)NOPASSWD:/usr/bin/piwik-manage hobo_notify -

debian/hobo-piwik.dirs

@@ -0,0 +1 @@
+/var/log/hobo-piwik

debian/hobo-piwik.install

@@ -1 +1 @@
-debian/piwik/piwik-manage.py        /usr/bin/
+debian/piwik/piwik-manage        /usr/bin/

debian/hobo-piwik.postinst

@@ -0,0 +1,34 @@
+#! /bin/sh
+
+set -e
+
+NAME="hobo-piwik"
+USER=$NAME
+GROUP=$NAME
+
+case "$1" in
+  configure)
+
+    # make sure the administrative user exists
+    if ! getent passwd $USER >/dev/null; then
+      adduser --disabled-password  --quiet --system \
+        --no-create-home --home /nonexistent \
+        --gecos "$NAME software user" --group $GROUP
+    fi
+    # ensure dirs ownership
+    chown $USER:$GROUP /var/log/$NAME
+  ;;
+
+  abort-upgrade|abort-remove|abort-deconfigure)
+  ;;
+
+  *)
+    echo "postinst called with unknown argument \`$1'" >&2
+    exit 1
+  ;;
+esac
+
+#DEBHELPER#
+
+exit 0
+