Page MenuHomePhabricator

package upgrade overwrites certcentral systemd service unit file
Closed, ResolvedPublic

Description

on package upgrade, /lib/systemd/system/certcentral.service gets overwritten with the one shipped in the debian package, this effectively makes certcentral unable to reach the ACME directory servers till puppet runs again and deploys the proper service unit file.

We have two options here:

  • get rid of the service file in the debian package as is managed by puppet
  • don't overwrite it on upgrades

Event Timeline

Change 471939 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: override system-provided unit file

https://gerrit.wikimedia.org/r/471939

Change 471939 merged by Vgutierrez:
[operations/puppet@production] certcentral: override system-provided unit file

https://gerrit.wikimedia.org/r/471939

Vgutierrez claimed this task.
Vgutierrez added a subscriber: Joe.

It's has been solved as @Joe suggested in -traffic. Using an override we keep the systemd unit file provided by the debian package and we just provide the required environment variables via puppet.