On Tue, 21.03.17 07:47, Ian Pilcher (arequip...@gmail.com) wrote: > I have a oneshot service (run from a timer) that updates the TLS > certificates in my mod_nss database. Because NSS doesn't support > concurrent access to the database, I need to temporarily shut down > Apache while the certificate update service is running. > > Currently, I'm using the following entries in my .service file to > accomplish this: > > [Unit] > Description=Update TLS certificates in mod_nss database > # Restart Apache, even if this service fails for some reason > OnFailure=httpd.service > > [Service] > Type=oneshot > # Shut down Apache to avoid concurrent access to the mod_nss database > ExecStartPre=/usr/bin/systemctl stop httpd.service > ExecStart=/usr/local/bin/update-nss-certs > ExecStartPost=/usr/bin/systemctl start httpd.service > > Is this the best way to do this? (I can't escape the feeling that there > ought to be a more idiomatic way of accomplishing this.)
Yes, this appears to be the best, and simplest way to do this to me. Lennart -- Lennart Poettering, Red Hat _______________________________________________ systemd-devel mailing list systemd-devel@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/systemd-devel