vault-acme: mlock executable

srcpkgs/vault-acme/INSTALL

@@ -0,0 +1,13 @@
+case "${ACTION}" in
+post)
+	# Set CAP_IPC_LOCK capability or exit gracefully if we cannot
+	# set the capability due to invalid permissions (fakeroot
+	# install).
+	set +e
+	setcap 'cap_ipc_lock=+ep' /usr/bin/vault-acme
+	if [ $? -ne 0 ]; then
+		echo "ERROR: failed to set cap_ipc_lock capability on vault-acme."
+		exit 0
+	fi
+	;;
+esac

srcpkgs/vault-acme/template

@@ -1,7 +1,7 @@
 # Template file for 'vault-acme'
 pkgname=vault-acme
 version=0.0.8
-revision=1
+revision=2
 build_style=go
 go_import_path=github.com/remilapeyre/vault-acme
 go_package="$go_import_path/cmd/acme $go_import_path/cmd/sidecar"