build: package standalone DWH authentication service

2026-08-21 02:32:26 +02:00
parent 134dc1977c
commit 87606c73c1
7 changed files with 299 additions and 0 deletions
@@ -0,0 +1,7 @@
+# The registry is provisioned before dwh-auth starts.  The SGID directories
+# preserve the dwh-auth group for records written by the operator CLI.
+d /var/lib/dwh-auth         2750 root dwh-auth - -
+d /var/lib/dwh-auth/active  2750 root dwh-auth - -
+d /var/lib/dwh-auth/revoked 2750 root dwh-auth - -
+# OpenReadOnly requires a pre-existing read-only shared-lock file.
+f /var/lib/dwh-auth/.writer.lock 0640 root dwh-auth - -