[Slackbuilds-users] Best place to install the EasyRSA scripts?
Sebastian Arcus
s.arcus at open-t.co.uk
Sun Nov 6 11:41:31 UTC 2016
On 04/11/16 22:23, Thomas Szteliga wrote:
> On 11/04/2016 12:02 PM, Sebastian Arcus wrote:
>> I am making the SBo scripts for EasyRSA, and I need to decide where they
>> will be installed. Before they were removed from Slackware - when they
>> were part of Openvpn, I think they used to go under
>> /usr/share/doc/openvpn. However, it seems a bit strange to install a
>> package in the directory of another package. Maybe
>> /usr/share/doc/easyrsa instead? However, they are sample scripts - not
>> really documentation. According to Linux filesystem standards, would
>> there be a better place? Maybe /usr/share directly, or /us/lib or
>> something?
>
>
> It was very handy to have them in /etc/openvpn/...
>
> EasyRSA scripts will create keys in the `keys` subdir,
> so /usr/share and /usr/doc are probably not the best location
> without patching KEY_DIR in easyrsa/*/vars to point
> to a more reasonable location
>
> export KEY_DIR="$EASY_RSA/keys"
>
> But this still should not be an absolute path,
> because when you're running multiple openvpn servers
> you would normally have something like:
>
> /etc/openvpn/server/server1/easyrsa/*/keys
> /etc/openvpn/server/server2/easyrsa/*/keys
> /etc/openvpn/server/server3/easyrsa/*/keys
>
> and a patched KEY_DIR would place all keys by default
> in one directory. That's not what you want (with multiple servers).
>
>
> So after rethinking this my suggestion is:
>
>
> /usr/share/easyrsa without patching KEY_DIR (keys placed in subdir)
Thanks everybody. /usr/share/easyrsa is actually the place I settled in
my mind after my initial post - it seems the most reasonable path. I
will include some comments in the README as to their location, and they
can be copied somewhere else when they are going to be used - if needed.
More information about the SlackBuilds-users
mailing list