Post install script

[hraphael]

🌟 Briefly describe the feature

Add support for a post install script

📝 Detailed description

Add support for a post install script.
I would like to define a variable in my defaults.var file that points to a script which should run after an application is completely installed.

💡 Why is this useful?

For example I am running a custom root ca in my home network. After an installation is complete, I must install the root ca certificate manually. Or install additional ssh keys to my authorized_keys file automatically

[MickLesk]

SSH keys use case already solved customize() in install.func - this already injects keys from SSH_AUTHORIZED_KEY at the end of every install.

the cleanest fit for the Feature request is a POST_INSTALL_SCRIPT variable in the %.vars. The hook point already exists — customize() is the natural place to add this, since it already runs last and already handles SSH_AUTHORIZED_KEY. It would just need:

if [[ -n "${POST_INSTALL_SCRIPT:-}" && -f "${POST_INSTALL_SCRIPT}" ]]; then
  bash "${POST_INSTALL_SCRIPT}"
fi

after SSH key injection

[hraphael]

if someone would use this for installing a ca inside the container. I have written a script, it checks if debian or alpine is being used

#!/usr/bin/env bash
set -euo pipefail

# --- CONFIG (edit me) -------------------------------------------------------
ROOT_CA="https://tinyca.internal:9000/roots.pem"
# ----------------------------------------------------------------------------

if [[ -n "${ROOT_CA}" ]]; then
  OS=$(pct exec "$CTID" -- sh -c 'if [ -f /etc/alpine-release ]; then echo alpine; elif [ -f /etc/debian_version ]; then echo debian; else echo unknown; fi')
   
  case "$OS" in
      alpine)
          pct exec "$CTID" -- sh -c \
              'curl -k "$ROOT_CA" > /etc/ssl/certs/ca-certificates.crt >/dev/null 2>&1'
          ;;
      debian)
          pct exec "$CTID" -- sh -c \
              'curl -k "$ROOT_CA" > /usr/local/share/ca-certificates/roots.crt >/dev/null 2>&1'
              pct exec "$CTID" -- sh -c 'update-ca-certificates >/dev/null 2>&1'
          ;;
      *)
          echo "Unknown OS in container $CTID"
          ;;
  esac
else 
  echo "ROOT_CA not set, skipping root CA certificate installation."
fi