build options

[Bill Schoolfield]

Thanks Matthew for the quick response... Good info. It's DEB but we may 
still end up supporting RH.

Bill


On 10/8/2023 3:59 PM, Matthew Newton via Freeradius-Users wrote:
>
>
> On 08/10/2023 21:37, Bill Schoolfield wrote:
>> We package freeradius with our application and the combined package 
>> is ultimately put under source control on the installed host.
>>
>> When building everything on the build host, the default build creates 
>> the certificate files. Basically:
>>
>> freeradius/etc/raddb/certs/*
>>
>> So upgrades of our package include new cert files every time which 
>> ends up as a revision on the install host.
>>
>> Is there a way to configure the make to skip the generation of certs? 
>> Basically defer this step to a post upgrade process (one outside the 
>> source control).
>
> You don't say DEB or RPM, but if DEB you can edit debian/rules to 
> delete the certs before packaging, and if RPM then do the same with 
> redhat/freeradius.spec.
>
> An alternative option that I tend to do is to install the packages 
> as-is but put your own config in e.g. /srv/raddb, then edit 
> /etc/default/freeradius (or equivalent) to use the config from there 
> rather than the default location (e.g. add "-d /srv/raddb" to the args).
>
> That way you can easily manage the config separately, and know the 
> package will never ask any questions on upgrade about do you want to 
> replace each config file that you've changed.
>