The ubuntu bug report this issue pertains to is:

    https://bugs.launchpad.net/ubuntu/+source/postgresql-common/+bug/1690432

The branch with the fix we're deploying for Ubuntu is:

    
https://code.launchpad.net/~bryce/ubuntu/+source/postgresql-common/+git/postgresql-common/+ref/fix-lp1690432-hirsute

A debdiff with these ubuntu changes is attached, for ease of
consideration.

Thank you,
Bryce
diff --git a/debian/changelog b/debian/changelog
index bce80a8..069345a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+postgresql-common (225ubuntu1) hirsute; urgency=medium
+
+  * d/postinst: Only add postgres to group ssl-cert if it isn't
+    already a member of that group.
+    (LP: #1690432)
+
+ -- Bryce Harrington <br...@canonical.com>  Thu, 25 Feb 2021 16:21:44 -0800
+
 postgresql-common (225) unstable; urgency=medium
 
   * pg_lsclusters, cluster_info: Show cluster managed by pacemaker or patroni.
diff --git a/debian/control b/debian/control
index 9c4e88a..c70ce42 100644
--- a/debian/control
+++ b/debian/control
@@ -1,7 +1,8 @@
 Source: postgresql-common
 Section: database
 Priority: optional
-Maintainer: Debian PostgreSQL Maintainers <team+postgre...@tracker.debian.org>
+Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com>
+XSBC-Original-Maintainer: Debian PostgreSQL Maintainers 
<team+postgre...@tracker.debian.org>
 Uploaders:
  Martin Pitt <mp...@debian.org>,
  Christoph Berg <m...@debian.org>,
diff --git a/debian/postgresql-common.postinst 
b/debian/postgresql-common.postinst
index a435b72..fc897ac 100644
--- a/debian/postgresql-common.postinst
+++ b/debian/postgresql-common.postinst
@@ -90,9 +90,12 @@ EOF
     fi
 
     # Add postgres user to the ssl-cert group on fresh installs
+    # if not already in the group
     if [ -z "$2" ]; then
        if getent group ssl-cert >/dev/null; then
-           adduser $quiet postgres ssl-cert
+           if ! id -Gn postgres 2> /dev/null | grep -qw ssl-cert; then
+               adduser $quiet postgres ssl-cert
+           fi
        fi
     fi
 

Reply via email to