/etc key location auto-migration

Joe Orton jorton at redhat.com
Tue Apr 26 10:07:43 UTC 2005


On Mon, Apr 25, 2005 at 10:10:54AM -0400, John Dennis wrote:
> > I don't think %post scripts should go moving random user-controlled
> > files around nor munging configurations because of this change.
> 
> Fair enough, I think that is a valid policy. It doesn't address
> Warren's concern with things mysterously breaking on upgrade, 
> that should not be taken lightly. From past experience with 
> moving directories people will be upset and some will be quite
> vocal with their displeasure. However, at the moment I don't
> think we have robust solution, only a partial solution. It
> would be wonderful if rpm could issue warning messages that
> would be displayed during an anaconda install but I don't
> think we have that feature do we?

Actually: I had presumed that /usr/share/ssl would become a symlink, but
it isn't.  

So what will break? If a %config(noreplace) config file references an
SSL certificate in /usr/share/ssl/* which is not under package
management, then that should be fine over an upgrade, since both the
cert and the config file will remain intact.  (that's the case for
mod_ssl, at least)

If you have a package-managed SSL certificate in /usr/share/ssl which is
considered as throw-away and have it %ghosted (though this seems pretty
questionable behaviour), you can make upgrades work by marking the
config file which references it as %config-not-noreplace for FC4 final.

joe




More information about the Fedora-maintainers mailing list