solstice-ci/crates/orchestrator/packaging/debian/postinst

#!/bin/sh
set -e

# Create solstice system user/group if not present
if ! id -u solstice >/dev/null 2>&1; then
    adduser --system --group --no-create-home --home /nonexistent --shell /usr/sbin/nologin solstice || true
fi

# Ensure config directory exists
mkdir -p /etc/solstice
chown root:root /etc/solstice
chmod 755 /etc/solstice

# Create writable state/cache directories for the service user (for virsh/libvirt client caches)
mkdir -p /var/lib/solstice-ci/.cache/libvirt
chown -R solstice:solstice /var/lib/solstice-ci
chmod 755 /var/lib/solstice-ci
chmod -R 755 /var/lib/solstice-ci/.cache

# Reload systemd units and enable service
if command -v systemctl >/dev/null 2>&1; then
    systemctl daemon-reload || true
    systemctl enable solstice-orchestrator.service || true
fi

exit 0