Hello List!

On a file server I installed several debian (-based) distributions into
an exported directory using debootstrap. These are used as root
filesystems for diskless clients. To install new packages/updates I
chroot into the directories of the corresponding distributions and run
aptitude. The problem is, that every time I install the update of a
service (e.g. cups), the service is (started in the chrooted
environment, but I don't want to run any service in there.

Is there a way to prevent dpkg from (re-)starting these services?
Deleting them from the /etc/rc* directories is not an option, as they
are needed by the clients.

Thanks in advance!

Olaf Leidinger

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIIuhX4Yz1Ukx83/kRAv2YAJ9UG9e59iDqY6PkvYt3+FlgbsE29ACgrbvt
KuOiVGNwQxi5ZLsNqwfNGxs=
=bTcC
-----END PGP SIGNATURE-----

Michael Biebl wrote:

> Read the man page of invoke-rc.d : "INIT SCRIPT POLICY"

And /usr/share/doc/sysv-rc/README.policy-rc.d.gz


--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFII6J0h7PER70FhVQRAsplAJ9DB0MxzByhasPwoUvXVs 0vTThEWgCgoEun
LQO/DSI0atmgwV1WtlTRUkA=
=od4D
-----END PGP SIGNATURE-----

Olaf Leidinger wrote:
> Hello List!
>
> On a file server I installed several debian (-based) distributions into
> an exported directory using debootstrap. These are used as root
> filesystems for diskless clients. To install new packages/updates I
> chroot into the directories of the corresponding distributions and run
> aptitude. The problem is, that every time I install the update of a
> service (e.g. cups), the service is (started in the chrooted
> environment, but I don't want to run any service in there.
>
> Is there a way to prevent dpkg from (re-)starting these services?
> Deleting them from the /etc/rc* directories is not an option, as they
> are needed by the clients.
>
> Thanks in advance!
>

policy-rc.d to your rescue.

Read the man page of invoke-rc.d : "INIT SCRIPT POLICY"

A simple /usr/sbin/policy-rc.d could look like this:

# cat /usr/sbin/policy-rc.d
#!/bin/sh
echo "************************************" >&2
echo "All rc.d operations denied by policy" >&2
echo "************************************" >&2
exit 101

--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFII6HKh7PER70FhVQRAvDxAJ4iFM72XBcicURl1ZqO4g Z7iNwisgCfYe+f
gJA29oYsJH9+4B/Off+VQ6g=
=HeVe
-----END PGP SIGNATURE-----

Hi!

Thanks a lot!
Seems to work fine!

Ciao,
Olaf

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFIJCK94Yz1Ukx83/kRApDzAJsEcnGxf+4ngxk3FaouWmE77AcykACfbyjF
MNgB22PW9P/a2Jon3mG6sQI=
=DpPH
-----END PGP SIGNATURE-----