From a1c6a971ab3f9138809bc5cef841778247258b81 Mon Sep 17 00:00:00 2001
From: godog <godog@autistici.org>
Date: Sun, 22 Aug 2021 20:22:02 +0200
Subject: [PATCH] Build on Bullseye and create dedicated user

---
 .gitlab-ci.yml                    | 2 +-
 debian/control                    | 2 +-
 debian/float-debug-proxy.service  | 2 +-
 debian/float-debug-proxy.sysusers | 1 +
 debian/rules                      | 4 ++++
 5 files changed, 8 insertions(+), 3 deletions(-)
 create mode 100644 debian/float-debug-proxy.sysusers

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5223255..2be34af 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1 +1 @@
-include: "https://git.autistici.org/ai3/build-deb/raw/master/ci-buster-backports.yml"
+include: "https://git.autistici.org/ai3/build-deb/raw/master/ci-nextstable.yml"
diff --git a/debian/control b/debian/control
index 2a362ec..685540d 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: float-debug-proxy
 Section: net
 Priority: optional
 Maintainer: Autistici/Inventati <debian@autistici.org>
-Build-Depends: debhelper-compat (= 12), golang-any (>= 1.11), dh-golang
+Build-Depends: debhelper-compat (= 13), golang-any (>= 1.11), dh-golang
 Standards-Version: 3.9.6
 XS-Go-Import-Path: git.autistici.org/ai3/tools/float-debug-proxy
 
diff --git a/debian/float-debug-proxy.service b/debian/float-debug-proxy.service
index 121d7d7..a55adc7 100644
--- a/debian/float-debug-proxy.service
+++ b/debian/float-debug-proxy.service
@@ -6,7 +6,7 @@ After=network.target
 Type=simple
 ExecStart=/usr/bin/float-debug-proxy
 Restart=on-failure
-User=nobody
+User=float-debug-proxy
 
 NoNewPrivileges=yes
 PrivateTmp=yes
diff --git a/debian/float-debug-proxy.sysusers b/debian/float-debug-proxy.sysusers
new file mode 100644
index 0000000..6403085
--- /dev/null
+++ b/debian/float-debug-proxy.sysusers
@@ -0,0 +1 @@
+u float-debug-proxy - -
diff --git a/debian/rules b/debian/rules
index 1656b28..505c570 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,10 @@ export DH_GOLANG_EXCLUDES = vendor
 %:
 	dh $@ --with golang --buildsystem golang
 
+override_dh_installsystemd:
+	dh_installsysusers
+	dh_installsystemd
+
 override_dh_auto_test:
 
 override_dh_auto_install:
-- 
GitLab