975bf63eb5
There should be almost no functional change, but shellcheck complains less. User/group descriptions with escaped characters are handled properly.
80 lines
2.0 KiB
Bash
Executable File
80 lines
2.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# This script turns sysuser.d files into scriptlets mandated by Fedora
|
|
# packaging guidelines. The general idea is to define users using the
|
|
# declarative syntax but to turn this into traditional scriptlets.
|
|
|
|
user() {
|
|
user="$1"
|
|
uid="$2"
|
|
desc="$3"
|
|
group="$4"
|
|
home="$5"
|
|
shell="$6"
|
|
|
|
[ "$desc" = '-' ] && desc=
|
|
{ [ "$home" = '-' ] || [ "$home" = '' ]; } && home=/
|
|
{ [ "$shell" = '-' ] || [ "$shell" = '' ]; } && shell=/sbin/nologin
|
|
|
|
if [ "$uid" = '-' ] || [ "$uid" = '' ]; then
|
|
cat <<EOF
|
|
getent passwd '$user' >/dev/null || \\
|
|
useradd -r -g '$group' -d '$home' -s '$shell' -c '$desc' '$user'
|
|
EOF
|
|
else
|
|
cat <<EOF
|
|
if ! getent passwd '$user' >/dev/null ; then
|
|
if ! getent passwd '$uid' >/dev/null ; then
|
|
useradd -r -u '$uid' -g '$group' -d '$home' -s /sbin/nologin -c '$desc' '$user'
|
|
else
|
|
useradd -r -g '$group' -d '$home' -s /sbin/nologin -c '$desc' '$user'
|
|
fi
|
|
fi
|
|
|
|
EOF
|
|
fi
|
|
}
|
|
|
|
group() {
|
|
group="$1"
|
|
gid="$2"
|
|
if [ "$gid" = '-' ]; then
|
|
cat <<-EOF
|
|
getent group '$group' >/dev/null || groupadd -r '$group'
|
|
EOF
|
|
else
|
|
cat <<-EOF
|
|
getent group '$group' >/dev/null || groupadd -f -g '$gid' -r '$group'
|
|
EOF
|
|
fi
|
|
}
|
|
|
|
parse() {
|
|
while read -r line || [ -n "$line" ] ; do
|
|
{ [ "${line:0:1}" = '#' ] || [ "${line:0:1}" = ';' ]; } && continue
|
|
line="${line## *}"
|
|
[ -z "$line" ] && continue
|
|
eval "arr=( $line )"
|
|
case "${arr[0]}" in
|
|
('u')
|
|
group "${arr[1]}" "${arr[2]}"
|
|
user "${arr[1]}" "${arr[2]}" "${arr[3]}" "${arr[1]}" "${arr[4]}" "${arr[5]}"
|
|
# TODO: user:group support
|
|
;;
|
|
('g')
|
|
group "${arr[1]}" "${arr[2]}"
|
|
;;
|
|
('m')
|
|
group "${arr[2]}" "-"
|
|
user "${arr[1]}" "-" "" "${arr[2]}"
|
|
;;
|
|
esac
|
|
done
|
|
}
|
|
|
|
for fn in "$@"; do
|
|
[ -e "$fn" ] || continue
|
|
echo "# generated from $(basename "$fn")"
|
|
parse <"$fn"
|
|
done
|