# Specify secret key file.  If the keyfile does not already exist

# it will be created on first startup using pseudorandom data via

# dd if=/dev/urandom bs=1 count=1024 >/etc/munge/munge.key

KEYFILE="/etc/munge/munge.key"

# Specify whether to check "/etc/group" mtime

GROUP_CHECK_MTIME=1

# Specify seconds between group info updates

GROUP_UPDATE_TIME=3600

# Specify number of threads to spawn

NUM_THREADS=2

#!/sbin/openrc-run

# Copyright 1999-2018 Gentoo Authors

# Distributed under the terms of the GNU General Public License v2

depend() {

	after localmount

}

check_key() {

	[ -s "${KEYFILE}" ] && return 0

	local old_umask=$(umask)

	local ret

	umask 037

	dd if=/dev/urandom bs=1024 count=1 of="${KEYFILE}" 2>/dev/null; ret=$?

	umask $old_umask

	return $ret

}

start() {

	ebegin "Starting munged"

	if ! check_key; then

		eerror "Failed to create munge key"

		eend 1 && exit 1

	fi

	checkpath -d -m 755 -o munge:munge /var/run/munge

	checkpath -d -m 711 -o munge:munge /var/lib/munge

	checkpath -d -m 700 -o munge:munge /var/log/munge

	checkpath -f -m 600 -o munge:munge "${KEYFILE}"

	start-stop-daemon -S /usr/sbin/munged \

		--user munge \

		--group munge \

		--pidfile /var/run/munge/munged.pid \

		-- \

		--key-file="${KEYFILE}" \

		--group-check-mtime="${GROUP_CHECK_MTIME}" \

		--group-update-time="${GROUP_UPDATE_TIME}" \

		--num-threads="${NUM_THREADS}"

	eend ${?}

}

stop() {

	ebegin "Stopping munged"

	start-stop-daemon -K /usr/sbin/munged \

		--pidfile /var/run/munge/munged.pid

	eend ${?}

}