freeipa/install/restart_scripts/renew_ra_cert_pre

#!/usr/bin/python3 -E
#
# Copyright (C) 2015  FreeIPA Contributors see COPYING for license
#

import syslog
import traceback

from ipaserver.install import certs


def main():
    certs.renewal_lock.acquire('renew_ra_cert')

try:
    main()
except Exception:
    syslog.syslog(syslog.LOG_ERR, traceback.format_exc())
Have all the scripts run in python 3 by default The Python 3 refactoring effort is finishing, it should be safe to turn all scripts to run in Python 3 by default. https://pagure.io/freeipa/issue/4985 Reviewed-By: Christian Heimes <cheimes@redhat.com> 2017-08-31 10:45:31 +02:00			`#!/usr/bin/python3 -E`
cert renewal: make renewal of ipaCert atomic This prevents errors when renewing other certificates during the renewal of ipaCert. https://fedorahosted.org/freeipa/ticket/5436 Reviewed-By: David Kupka <dkupka@redhat.com> 2015-11-09 10:53:02 +01:00			`#`
			`# Copyright (C) 2015 FreeIPA Contributors see COPYING for license`
			`#`

			`import syslog`
			`import traceback`

			`from ipaserver.install import certs`


			`def main():`
			`certs.renewal_lock.acquire('renew_ra_cert')`

			`try:`
			`main()`
			`except Exception:`
			`syslog.syslog(syslog.LOG_ERR, traceback.format_exc())`