kvmd-gencert

PKGBUILD

@@ -59,6 +59,7 @@ package_kvmd() {
 
 	cd "$srcdir/$pkgname-build"
 	python setup.py install --root="$pkgdir"
+	install -Dm755 scripts/* "$pkgdir/usr/bin"
 
 	mkdir -p "$pkgdir/usr/lib/systemd/system"
 	cp configs/os/systemd/*.service "$pkgdir/usr/lib/systemd/system"

kvmd.install

@@ -5,12 +5,7 @@ post_install() {
 		/usr/share/kvmd/configs.default/kvmd/htpasswd \
 		/etc/kvmd/htpasswd
 
-	cd /etc/kvmd/nginx/ssl
+	kvmd-gencert
-	openssl req -new -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 3650 \
-		-subj "/C=RU/ST=Moscow/L=Moscow/O=Pi-KVM/OU=Pi-KVM/CN=localhost"
-	chown -R root:http /etc/kvmd/nginx/ssl
-	chmod 400 server.key
-	chmod 444 server.crt
 }
 
 post_remove() {

scripts/kvmd-gencert

@@ -0,0 +1,19 @@
+#!/bin/bash
+set -x
+set -e
+
+if [ `whoami` != root ]; then
+	echo "Only root can do that"
+	exit 1
+fi
+
+mkdir -p /etc/kvmd/nginx/ssl
+cd /etc/kvmd/nginx/ssl
+
+openssl req -new -x509 -nodes -newkey rsa:4096 -keyout server.key -out server.crt -days 3650 \
+	subj "/C=RU/ST=Moscow/L=Moscow/O=Pi-KVM/OU=Pi-KVM/CN=localhost"
+chown -R root:http /etc/kvmd/nginx/ssl
+
+chmod 400 server.key
+chmod 444 server.crt
+chmod 750 /etc/kvmd/nginx/ssl