<?xml version="1.0"?>
<!--
CDDL HEADER START
The contents of this file are subject to the terms of the
Common Development and Distribution License (the "License").
You may not use this file except in compliance with the License.
You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
or http://www.opensolaris.org/os/licensing.
See the License for the specific language governing permissions
and limitations under the License.
When distributing Covered Code, include this CDDL HEADER in each
file and include the License file at usr/src/OPENSOLARIS.LICENSE.
If applicable, add the following below this CDDL HEADER, with the
fields enclosed by brackets "[]" replaced with your own identifying
information: Portions Copyright [yyyy] [name of copyright owner]
CDDL HEADER END
Copyright (c) 2013, 2016, Oracle and/or its affiliates. All rights reserved.
NOTE: This service manifest is not editable; its contents will
be overwritten by package or patch operations, including
operating system upgrade. Make customizations in a different
file.
-->
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<service_bundle type='manifest' name='pkg:depot'>
<service
name='application/pkg/depot'
type='service'
version='1.0'>
<instance name='default' enabled='false'>
<!--
Wait for network interfaces to be initialized.
-->
<dependency name='network'
grouping='require_all'
restart_on='error'
type='service'>
<service_fmri value='svc:/milestone/network:default'/>
</dependency>
<!--
Wait for all local filesystems to be mounted.
-->
<dependency name='filesystem-local'
grouping='require_all'
restart_on='none'
type='service'>
<service_fmri
value='svc:/system/filesystem/local:default'/>
</dependency>
<!--
We must wait for pkg/server instances to come online,
since any readonly, non-standalone instances
contribute to the configuration of pkg/depot.
-->
<dependency name='pkg-server'
grouping='require_all'
restart_on='none'
type='service'>
<service_fmri
value='svc:/application/pkg/server'/>
</dependency>
<!--
Wait for automounting to be available, as we may be
serving data from home directories or other remote
filesystems.
-->
<dependency name='autofs'
grouping='optional_all'
restart_on='error'
type='service'>
<service_fmri
value='svc:/system/filesystem/autofs:default'/>
</dependency>
<!--
Restrict privileges to basic,net_privaddr and the paths
that are allowed to operate on.
-->
<exec_method
type='method'
name='start'
exec='/lib/svc/method/svc-pkg-depot start'
timeout_seconds='60'>
<method_context>
<method_credential user='pkg5srv'
group='pkg5srv'
privileges='basic,net_privaddr,{zone}:/system/volatile/pkg*' />
</method_context>
</exec_method>
<!-- basic,net_privaddr are suffient for 'stop' -->
<exec_method
type='method'
name='stop'
exec='/lib/svc/method/svc-pkg-depot stop'
timeout_seconds='60'>
<method_context>
<method_credential user='pkg5srv'
group='pkg5srv'
privileges='basic,net_privaddr' />
</method_context>
</exec_method>
<exec_method
type='method'
name='refresh'
exec='/lib/svc/method/svc-pkg-depot refresh'
timeout_seconds='60'>
<method_context>
<method_credential user='pkg5srv'
group='pkg5srv'
privileges='{zone}:/system/volatile/pkg*' />
</method_context>
</exec_method>
<property_group name='config' type='application'>
<stability value='Evolving' />
<!-- The port we listen on -->
<propval name='port' type='count' value='80' />
<!-- The value used by Apache ServerName -->
<propval name='host' type='astring' value='0.0.0.0' />
<!-- Where we store apache logs -->
<propval name='log_dir' type='astring'
value='/var/log/pkg/depot' />
<!-- Where we store runtime versions of our
configuration -->
<propval name='runtime_dir' type='astring'
value='/system/volatile/pkg/depot' />
<!-- Where we store our Mako templates for generating
runtime configuration -->
<propval name='template_dir' type='astring'
value='/etc/pkg/depot' />
<!-- Where we store our cache -->
<propval name='cache_dir' type='astring'
value='/var/cache/pkg/depot' />
<!-- Our maximum cache size, expressed in MB -->
<propval name='cache_max' type='count' value='0' />
<!-- Whether we allow index rebuilds via admin/0
Note that only "pkgrepo refresh" operations are
supported, "pkgrepo rebuild" operations are not. -->
<propval name='allow_refresh' type='boolean' value='false' />
<propval name='value_authorization' type='astring'
value='solaris.smf.value.pkg-depot-config' />
<propval name='https' type='boolean'
value='false' />
<propval name='ssl_cert_file' type='astring'
value='' />
<propval name='ssl_key_file' type='astring'
value='' />
<propval name='ssl_ca_cert_file' type='astring'
value='' />
<propval name='ssl_ca_key_file' type='astring'
value='' />
<propval name='ssl_cert_key_dir' type='astring'
value='/var/cache/pkg/depot/cert_key_dir' />
<propval name='ssl_cert_chain_file' type='astring'
value='' />
</property_group>
<property_group name='general' type='framework'>
<propval name='action_authorization'
type='astring'
value='solaris.smf.manage.pkg-depot' />
<propval name='value_authorization'
type='astring'
value='solaris.smf.value.pkg-depot' />
</property_group>
<template>
<common_name>
<loctext xml:lang='C'>
IPS Depot
</loctext>
</common_name>
<documentation>
<manpage title='pkg.depot-config' section='8' />
</documentation>
</template>
</instance>
<stability value='Evolving' />
</service>
</service_bundle>