Create horizon user/group and use it on apache wsgi

Rewritten-From: 1088d76799644ec67892bbb4bb2c00528da617e5

diff --git a/xenial/debian/openstack-dashboard-apache.conf b/xenial/debian/openstack-dashboard-apache.conf
index a3a62942523a7df3d9dd07139d7f279f250148a1..08081ac4e23188f46cf5091e978b3226070590fb 100644 (file)
--- a/xenial/debian/openstack-dashboard-apache.conf
+++ b/xenial/debian/openstack-dashboard-apache.conf
@@ -1,6 +1,8 @@
 Listen 8080
 <VirtualHost *:8080>
     WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
+    WSGIDaemonProcess openstack-dashboard user=horizon group=horizon
+    WSGIProcessGroup openstack-dashboard
 
     <Directory />
         AllowOverride None

diff --git a/xenial/debian/openstack-dashboard.postinst b/xenial/debian/openstack-dashboard.postinst
new file mode 100644 (file)
index 0000000..189fb92
--- /dev/null
+++ b/xenial/debian/openstack-dashboard.postinst
@@ -0,0 +1,13 @@
+#!/bin/sh
+set -e
+
+if [ "$1" = "configure" ]
+then
+    adduser --system \
+       --home /var/lib/horizon \
+        --quiet \
+        --disabled-password \
+        --group horizon
+fi
+
+#DEBHELPER#
\ No newline at end of file

diff --git a/xenial/debian/openstack-dashboard.postrm b/xenial/debian/openstack-dashboard.postrm
new file mode 100644 (file)
index 0000000..7936ba5
--- /dev/null
+++ b/xenial/debian/openstack-dashboard.postrm
@@ -0,0 +1,12 @@
+#!/bin/sh
+
+set -e
+
+case $1 in
+    purge)
+        userdel horizon || true
+        groupdel horizon || true
+        ;;
+esac
+
+#DEBHELPER#
\ No newline at end of file