Debian: Asking password for default user on package install

debian/clickhouse-client.postinst

@@ -4,3 +4,5 @@ set -e
 CLICKHOUSE_USER=${CLICKHOUSE_USER=clickhouse}
 
 mkdir -p /etc/clickhouse-client/conf.d
+
+#DEBHELPER#

debian/clickhouse-server.config

@@ -0,0 +1,16 @@
+#!/bin/sh -e
+
+. /usr/share/debconf/confmodule
+
+db_fget clickhouse-server/default-password seen || true
+password_seen="$RET"
+
+if [ "$1" = "reconfigure" ]; then
+    password_seen=false
+fi
+
+if [ "$password_seen" != "true" ]; then
+    db_input high clickhouse-server/default-password || true
+    db_go || true
+fi
+db_go || true

debian/clickhouse-server.postinst

@@ -11,9 +11,10 @@ CLICKHOUSE_GENERIC_PROGRAM=${CLICKHOUSE_GENERIC_PROGRAM:=clickhouse}
 EXTRACT_FROM_CONFIG=${CLICKHOUSE_GENERIC_PROGRAM}-extract-from-config
 CLICKHOUSE_CONFIG=$CLICKHOUSE_CONFDIR/config.xml
 
-
 OS=${OS=`lsb_release -is 2>/dev/null || uname -s ||:`}
 
+. /usr/share/debconf/confmodule
+
 test -f /etc/default/clickhouse && . /etc/default/clickhouse
 
 if [ "$1" = configure ]; then
@@ -84,6 +85,8 @@ Please fix this and reinstall this package." >&2
     fi
 
     if [ -d ${CLICKHOUSE_CONFDIR} ]; then
+        mkdir -p ${CLICKHOUSE_CONFDIR}/users.d
+        mkdir -p ${CLICKHOUSE_CONFDIR}/config.d
         rm -fv ${CLICKHOUSE_CONFDIR}/*-preprocessed.xml ||:
     fi
 
@@ -119,4 +122,15 @@ Please fix this and reinstall this package." >&2
     if [ -d "${CLICKHOUSE_DATADIR_FROM_CONFIG}/build" ]; then
         rm -f ${CLICKHOUSE_DATADIR_FROM_CONFIG}/build/*.cpp ${CLICKHOUSE_DATADIR_FROM_CONFIG}/build/*.so ||:
     fi
+
+    db_get clickhouse-server/default-password
+    defaultpassword="$RET"
+    if [ -n "$defaultpassword" ]; then
+        echo "<yandex><users><default><password>$defaultpassword</password></default></users></yandex>" > ${CLICKHOUSE_CONFDIR}/users.d/default-password.xml
+    fi
+
+    # everything went well, so now let's reset the password
+    db_set clickhouse-server/default-password ""
+    # ... done with debconf here
+    db_stop
 fi

debian/clickhouse-server.preinst

@@ -4,3 +4,5 @@ if [ "$1" = "upgrade" ]; then
     # Return etc/cron.d/clickhouse-server to original state
     service clickhouse-server disable_cron ||:
 fi
+
+#DEBHELPER#

debian/clickhouse-server.templates

@@ -0,0 +1,3 @@
+Template: clickhouse-server/default-password
+Type: password
+Description: Password for default user.

debian/control

@@ -63,19 +63,3 @@ Priority: optional
 Architecture: all
 Depends: ${shlibs:Depends}, ${misc:Depends}, clickhouse-client, bash, expect, python, python-lxml, python-termcolor, python-requests, curl, perl, sudo, openssl, netcat-openbsd, telnet, brotli
 Description: ClickHouse tests
-
-
-
-# TODO: Remove:
-
-Package: clickhouse-server-base
-Architecture: any
-Priority: optional
-Depends: ${shlibs:Depends}, ${misc:Depends}, adduser, tzdata
-Description: DEPRECATED PACKAGE (use clickhouse-common-static): Server binary for clickhouse
-
-Package: clickhouse-server-common
-Architecture: all
-Priority: optional
-Depends: ${shlibs:Depends}, ${misc:Depends}, clickhouse-server-base (= ${binary:Version})
-Description: DEPRECATED PACKAGE (use clickhouse-server): Common configuration files for clickhouse-server-base package

debian/rules

@@ -123,9 +123,9 @@ override_dh_install:
 	touch $(DESTDIR)/etc/clickhouse-server/metrika/users.xml
 
 	# todo: remove after removing clickhouse-server-base package:
-	mkdir -p $(DESTDIR)/etc/init.d $(DESTDIR)/etc/cron.d
-	cp debian/clickhouse-server.init $(DESTDIR)/etc/init.d/clickhouse-server
-	cp debian/clickhouse-server.cron.d $(DESTDIR)/etc/cron.d/clickhouse-server
+	#mkdir -p $(DESTDIR)/etc/init.d $(DESTDIR)/etc/cron.d
+	#cp debian/clickhouse-server.init $(DESTDIR)/etc/init.d/clickhouse-server
+	#cp debian/clickhouse-server.cron.d $(DESTDIR)/etc/cron.d/clickhouse-server
 
 	dh_install --list-missing --sourcedir=$(DESTDIR)