The ubuntu bug report this issue pertains to is:
https://bugs.launchpad.net/ubuntu/+source/postgresql-common/+bug/1690432
The branch with the fix we're deploying for Ubuntu is:
https://code.launchpad.net/~bryce/ubuntu/+source/postgresql-common/+git/postgresql-common/+ref/fix-lp1690432-hirsute
A debdiff with these ubuntu changes is attached, for ease of
consideration.
Thank you,
Bryce
diff --git a/debian/changelog b/debian/changelog
index bce80a8..069345a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+postgresql-common (225ubuntu1) hirsute; urgency=medium
+
+ * d/postinst: Only add postgres to group ssl-cert if it isn't
+ already a member of that group.
+ (LP: #1690432)
+
+ -- Bryce Harrington <br...@canonical.com> Thu, 25 Feb 2021 16:21:44 -0800
+
postgresql-common (225) unstable; urgency=medium
* pg_lsclusters, cluster_info: Show cluster managed by pacemaker or patroni.
diff --git a/debian/control b/debian/control
index 9c4e88a..c70ce42 100644
--- a/debian/control
+++ b/debian/control
@@ -1,7 +1,8 @@
Source: postgresql-common
Section: database
Priority: optional
-Maintainer: Debian PostgreSQL Maintainers <team+postgre...@tracker.debian.org>
+Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com>
+XSBC-Original-Maintainer: Debian PostgreSQL Maintainers
<team+postgre...@tracker.debian.org>
Uploaders:
Martin Pitt <mp...@debian.org>,
Christoph Berg <m...@debian.org>,
diff --git a/debian/postgresql-common.postinst
b/debian/postgresql-common.postinst
index a435b72..fc897ac 100644
--- a/debian/postgresql-common.postinst
+++ b/debian/postgresql-common.postinst
@@ -90,9 +90,12 @@ EOF
fi
# Add postgres user to the ssl-cert group on fresh installs
+ # if not already in the group
if [ -z "$2" ]; then
if getent group ssl-cert >/dev/null; then
- adduser $quiet postgres ssl-cert
+ if ! id -Gn postgres 2> /dev/null | grep -qw ssl-cert; then
+ adduser $quiet postgres ssl-cert
+ fi
fi
fi